last executing test programs: 13.120771067s ago: executing program 1 (id=3599): socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 12.206936762s ago: executing program 4 (id=3601): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.191109323s ago: executing program 0 (id=3602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000000300)={r4, &(0x7f00000000c0)='NOTRACK\x00', 0x6a2080, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x8001]}, {0x5, 0x80, 0x1, 0xffffffff}}, 0xcac, 0x0, &(0x7f00000002c0)=0x10}) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) msgsnd(r3, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51"}, 0x1d, 0x800) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.161879144s ago: executing program 1 (id=3603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x2, 0x0) syz_io_uring_setup(0x68d, &(0x7f0000000180)={0x0, 0x564e, 0x200, 0x2, 0x2c8}, &(0x7f0000000040), &(0x7f0000000200)) 10.923282477s ago: executing program 4 (id=3606): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) fadvise64(r1, 0x85f5, 0x4000000005, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 10.915833446s ago: executing program 0 (id=3616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000000300)={r4, &(0x7f00000000c0)='NOTRACK\x00', 0x6a2080, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x8001]}, {0x5, 0x80, 0x1, 0xffffffff}}, 0xcac, 0x0, &(0x7f00000002c0)=0x10}) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) msgsnd(r3, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af7700885083239"}, 0x28, 0x800) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.952972334s ago: executing program 0 (id=3608): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000ac0)='environ\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a500000000000010902"], 0x0) pread64(r1, 0x0, 0x0, 0x40000000007) 8.63034274s ago: executing program 2 (id=3614): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) 8.504404587s ago: executing program 1 (id=3617): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000d40)={{0x2, 0x1, 0x5d56, 0xbf, 0x9, 0x8}, 0x2d2, [0x8, 0x5, 0x325, 0x0, 0xe, 0x1, 0x9, 0x7, 0xffffffff, 0x3, 0xb, 0xbd1f, 0x7, 0xfffffff8, 0xfffffff8, 0x1d8, 0x1, 0x1, 0x8, 0x8, 0xc1, 0x80200, 0x7, 0x267, 0x7, 0x2, 0x7fffffff, 0xe, 0xe3, 0x9, 0x4, 0x8b0, 0x7, 0x20000000, 0xffffffff, 0x6, 0x0, 0x81, 0x8, 0x10, 0x3, 0x80000001, 0xffffff68, 0x1, 0xfff, 0x400, 0x0, 0x5, 0x0, 0x58, 0xfff, 0x3, 0x7, 0x40, 0x0, 0xe0d0, 0x8, 0x4, 0x0, 0x3, 0x5f0, 0x5, 0x1, 0x8, 0xf, 0x6, 0xa8, 0x9, 0x4ca, 0x0, 0x0, 0x1, 0x101, 0xfffffffa, 0x3, 0x5, 0x5, 0x4, 0x8, 0x6c, 0x1, 0x3a4, 0x8a, 0x1, 0x6, 0x2, 0x9, 0x4, 0x9, 0x3, 0x0, 0x2, 0x80000001, 0x10000, 0x4, 0x8000, 0x5, 0xa, 0x0, 0xe, 0x200, 0x6, 0xcf22, 0x6, 0xcb2a, 0x5, 0x8001, 0x2, 0x800, 0x600, 0x8, 0x8, 0x8, 0x0, 0x1, 0x4, 0x3, 0xe9, 0x9, 0x4, 0x3baa6071, 0x91b, 0x8001, 0x0, 0x8001, 0x3d7, 0x80000000, 0xf75, 0x2, 0x6, 0x1, 0x1, 0x2, 0xb, 0x588, 0x2, 0x74d, 0x28a3, 0x2, 0xcd77, 0x100, 0x5, 0xa974, 0x3ff, 0x6d9a, 0xfd8, 0x4, 0x2, 0xfff, 0xcf6, 0x100, 0x0, 0x40, 0x4, 0x5, 0x9, 0x7, 0x3ff, 0x9, 0x4, 0x0, 0x8363, 0x0, 0xf, 0x8, 0x8, 0x1c8, 0x2dc4, 0x7, 0x10001, 0x1, 0x4, 0x0, 0x7, 0x8, 0xfffffff8, 0xfffffffe, 0x1, 0x4347, 0xff, 0x2, 0x7, 0x3, 0xe9, 0x3, 0x7, 0x1, 0x4, 0x9ee6, 0x8001, 0x5, 0x4, 0x5, 0x400, 0x2, 0x48c, 0x8, 0x7, 0x3, 0x9, 0x9, 0x40, 0x9, 0x987e, 0x4, 0x3, 0x28000000, 0xa2da, 0xfff, 0x4, 0x80000000, 0x8, 0xffff8000, 0x1000, 0x8, 0xd2, 0x4, 0x7bf, 0x6, 0x80, 0xffff, 0x3, 0x8, 0xe, 0x7, 0x1, 0xfffffffe, 0x8, 0x100, 0x6, 0x4, 0x7, 0x6, 0x9, 0x9, 0xb, 0x7fffffff, 0x6, 0x7f, 0x6, 0x4, 0x1, 0x9, 0x4fa5, 0x8, 0xa232, 0x5, 0x9, 0xffffffff, 0x9, 0x8, 0x6, 0x5, 0x8, 0x5, 0x91, 0x9f55, 0x1, 0x6, 0x2, 0x3, 0x8, 0x200, 0x1, 0x8, 0x5b5c6ad2, 0xfffffffe, 0x4, 0x101, 0x6, 0xff, 0xfffffaad, 0x0, 0xce, 0x6, 0x2, 0x9, 0x4, 0x7, 0x7, 0x0, 0x0, 0x2, 0x3ff, 0x8, 0x6, 0x2, 0x3, 0x6, 0x3, 0x2, 0x7, 0x9, 0x7, 0x40, 0x9, 0x9, 0x8, 0xea9, 0x7, 0x5, 0x4f, 0x9, 0xf, 0x2, 0x7fffffff, 0x5, 0x8bb, 0xe072917, 0xd95, 0x0, 0x9, 0x3ff, 0x8001, 0x9, 0x7fff, 0x1, 0x62, 0x3, 0x8, 0xa8, 0x3a9, 0x5b66, 0x40, 0x2, 0x1, 0x0, 0x1ff, 0x3, 0x8, 0x1, 0x400, 0x0, 0x0, 0x2, 0x9, 0xe, 0x4, 0x4, 0x746, 0x4, 0x7, 0x81, 0x81, 0x2, 0x6, 0x6, 0xd14d0f0e, 0x6, 0x8, 0xa, 0x1, 0x2, 0x2, 0x5, 0xc7, 0x6, 0x1, 0x5, 0x2, 0xfffffffc, 0x7, 0x8000, 0xf24, 0x0, 0xfffff000, 0x5, 0xe6, 0x2, 0x4, 0x2, 0x38, 0x7ff, 0xab6, 0x3, 0x6, 0x9, 0x9, 0xeaf, 0x1, 0x4, 0x5, 0x4, 0x8, 0x5, 0x7, 0x4, 0xfab7, 0x4, 0x2, 0x8, 0x0, 0x9, 0x40, 0x10001, 0xf, 0x5, 0x95, 0xd5, 0x5, 0x3, 0x2, 0x20bc4d60, 0x8000, 0x1, 0x7, 0x5, 0xff, 0x997, 0x6, 0x947, 0x4, 0x10000, 0xb, 0x7, 0x3, 0x81, 0x3, 0x2d, 0x8, 0x81, 0x3, 0x9, 0x0, 0x9, 0x7, 0x6, 0x5, 0xf83, 0x9, 0x0, 0x65, 0x0, 0x3, 0x6, 0x6, 0x7ff, 0xb, 0x7, 0x7fff, 0x1, 0x1, 0xfffffffb, 0x10000, 0xf, 0xd, 0x9, 0x9, 0x9, 0xa5f0, 0x8, 0x6, 0x2, 0x2, 0x8, 0x8, 0x200, 0x800, 0x5, 0x3, 0x7, 0x83, 0x6, 0x6, 0x41d, 0x1, 0x215e, 0x5b7e, 0x8, 0x9, 0xf18, 0x2, 0x0, 0x3, 0xc675, 0x3, 0x2, 0x5, 0x7, 0x0, 0x4, 0x81, 0x1, 0x9, 0xfffffff9, 0x1, 0x5, 0x9, 0xc21, 0x7, 0xfff, 0x5f, 0x8000, 0x3, 0x2, 0x7, 0xf3, 0x8, 0xd, 0x2, 0x7, 0x5, 0x7fffffff, 0x5, 0x14, 0xa376, 0x254a, 0x2, 0x9, 0x4ac3, 0xf, 0x8, 0x0, 0x800, 0x4, 0x1, 0x3da1, 0x8, 0x66, 0x4, 0x4, 0x1, 0x5, 0x1, 0x81, 0x8, 0x1ff, 0x2, 0x4, 0x8, 0x9, 0x8, 0x2, 0x6, 0xff, 0x2, 0x3, 0x8, 0xfffffffe, 0xf, 0x80, 0x5, 0x0, 0x7, 0x4, 0x6, 0x6, 0x2, 0x231aa2ae, 0x1, 0x3b1, 0x3, 0x0, 0x6, 0xfffffff8, 0x1, 0xd, 0x2, 0x2, 0x5, 0x9657, 0xef, 0x5, 0x7fa8, 0x9, 0x1ff, 0x5, 0x1ff, 0x8, 0x3, 0x8, 0x200, 0x91, 0x4, 0x2, 0x10, 0x7fff, 0x7, 0x7, 0xa996, 0x2, 0x1, 0xa195, 0x5, 0x8, 0x6, 0x1c, 0xffffffff, 0x0, 0x6, 0x3, 0x0, 0x3ad3, 0x75ea2097, 0x3, 0x7ff, 0x4, 0x9, 0x9, 0x8000000, 0x800, 0x6, 0x0, 0x1ff, 0xc363, 0x6, 0xb, 0x2, 0x5, 0xffffa3c6, 0x7, 0xe8e, 0xe8f1, 0x6, 0x1, 0x40, 0xf662, 0x4, 0x9, 0x0, 0x8000, 0x1ff, 0x3a2, 0x4, 0x2, 0x1a, 0x6, 0x4, 0x1, 0x0, 0x401, 0x8001, 0xfff, 0x1, 0x3, 0x8, 0xde78, 0x5, 0x2, 0x1, 0x29, 0x5, 0x5, 0x6, 0x5, 0xffffffff, 0xb, 0x7fffffff, 0x3, 0x7, 0x3, 0x8, 0xa, 0x10, 0x401, 0xf8000000, 0x789f, 0x7, 0x3, 0x8b7f, 0x0, 0xfffffffd, 0x7, 0x6, 0x9, 0x0, 0x6a63, 0x4, 0x3, 0xfffffffc, 0x3, 0x4, 0x5, 0xf, 0xffffffff, 0x5, 0x3, 0x800, 0xd, 0x6, 0x1, 0x7, 0x5f76, 0x1, 0xff, 0x10000004, 0x2, 0x6, 0xffff, 0x8, 0x100, 0x5, 0x5ea, 0x401, 0x0, 0x8000, 0xda2, 0x0, 0x5, 0x9, 0x0, 0x1, 0x4, 0x5, 0x5, 0xfff, 0x3, 0xc, 0x6, 0xfffffffa, 0x913a, 0x9, 0x9, 0x1, 0x5, 0x1, 0x7, 0x33, 0x4, 0x7, 0x2, 0x80000000, 0xa0c6, 0x4a, 0x7fff, 0xffffffff, 0xfffffffe, 0x1, 0x8, 0x1, 0x7b5, 0x9, 0x48a5, 0x400, 0x80, 0x5, 0xe, 0x7, 0x3, 0x5, 0x1, 0x9, 0x8, 0xb725, 0x1, 0x8, 0x10, 0x4, 0x7ff, 0x1, 0x1000, 0x80, 0x2, 0x8, 0x0, 0xfffffff9, 0x8, 0x80, 0x16, 0x9, 0x5, 0xc, 0x6, 0xee, 0x6, 0xc11, 0x8, 0x1, 0x6, 0x100, 0x5, 0x8, 0x6, 0x3ff, 0x1ff, 0x80, 0x71b5, 0x401, 0xe06, 0xf, 0xfff, 0x4, 0x81, 0xffffffff, 0x50, 0x2, 0x9, 0x10000, 0x4b, 0x0, 0xbf, 0x40, 0x3, 0x0, 0xff, 0x9, 0x401, 0x8, 0x400, 0xfff, 0x5, 0x3, 0xffff42fc, 0x7, 0x2, 0x80000000, 0x2, 0xfffffffd, 0x4, 0x6b9, 0x5, 0xfa3b, 0xff, 0x3, 0x0, 0x2, 0x0, 0xfffffff7, 0x8, 0x80, 0x1, 0x3, 0x7, 0x5a, 0x8, 0x3, 0x6, 0x6535, 0x1, 0x3, 0x5, 0x3ff, 0xe77, 0x3, 0x7, 0x0, 0x5, 0x60, 0x0, 0x7, 0x4, 0x0, 0x3, 0x6, 0xffffc63f, 0x64, 0xfdf1, 0x8, 0xb, 0x6, 0x1, 0x8, 0x2, 0x10000, 0x3, 0x0, 0x4, 0x6, 0x81, 0x3, 0x7ff, 0x5, 0xfffffffa, 0x6, 0x7f, 0x6, 0x5, 0xfffffff9, 0x2, 0x100, 0x1800000, 0x4c, 0xf, 0x568, 0x0, 0x2, 0xfffffffc, 0x8, 0xc, 0x0, 0xf, 0x9, 0x9, 0x3, 0xc74, 0x40, 0x6, 0x21f, 0x90bd, 0x3, 0x80000001, 0x8, 0xf0dc, 0x4, 0x5, 0x7, 0x8eed, 0x4, 0xccd, 0x4b3e, 0x2, 0xf17, 0x1, 0x2, 0xffffffa8, 0x5, 0x6c3, 0x3, 0xfffffff8, 0x2, 0x4, 0x200, 0x7b, 0x81, 0x4, 0x4, 0x2, 0x9, 0xe, 0x7fffffff, 0x4, 0xcd9, 0x7, 0xffffb14c, 0xffffffff, 0x6, 0x4, 0x800, 0x738a, 0x1, 0x81, 0x8, 0x4, 0xc, 0xff, 0x40000, 0x1, 0xf, 0x3, 0x693f7fde, 0x9, 0x4, 0xffff67d2, 0xa149, 0x9, 0x9, 0x0, 0x1, 0x0, 0x80000000, 0x2, 0x1a5, 0xa8bb, 0x8, 0x4, 0x1, 0xab7, 0x3, 0x9, 0x1, 0x8000, 0x8, 0x2, 0x10001, 0x8001, 0x5, 0x2fa, 0x71c1ac2, 0x3, 0x80000001, 0x0, 0x0, 0x4, 0x7fff, 0x2, 0x1, 0xfff, 0x4, 0x80, 0x0, 0x5, 0x9, 0xd, 0x8001, 0x5, 0xb, 0x90d, 0x10000, 0x16, 0x200, 0x1a, 0x5, 0x8000, 0x8, 0x2, 0x4, 0x1, 0x5, 0x0, 0xf8e5, 0x5, 0x7fff, 0x2, 0x17, 0x3, 0x6, 0x8001, 0x4, 0x8, 0x5, 0x8000, 0x8, 0x2, 0x6, 0x5, 0xe, 0x7, 0x0, 0x3000, 0x5, 0x1, 0x8, 0x9, 0x9]}) 8.324729496s ago: executing program 4 (id=3618): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x1fffffffff, 0xb, 0x80006, 0x4000000000000e51, 0x7, 0x547a, 0x103d, 0x200000000006, 0x0, 0x5861, 0x5, 0x1, 0x0, 0x40000000009, 0x40000000080a8d, 0x800000068], 0x30000, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.655860999s ago: executing program 1 (id=3620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000000300)={r4, &(0x7f00000000c0)='NOTRACK\x00', 0x6a2080, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x8001]}, {0x5, 0x80, 0x1, 0xffffffff}}, 0xcac, 0x0, &(0x7f00000002c0)=0x10}) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) msgsnd(r3, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af7700885083239"}, 0x28, 0x800) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.609064251s ago: executing program 2 (id=3621): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x804000000000000) 6.755024024s ago: executing program 4 (id=3622): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, &(0x7f0000000000)) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) sched_getaffinity(r0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r5, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) syz_usb_connect(0x5, 0x34, 0x0, 0x0) 6.712968036s ago: executing program 3 (id=3623): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000440)="26660f28e30f01cfc4c1672a6f003e0f1d01cbcb800000c00f3235002000000f3048b800980000000000000f23c00f2107f8f8020001000f23f8b985050000b8caed0000ba000000000f30260fa8b8010000000f01c1b8010000000f01d9", 0x5e}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 6.658329279s ago: executing program 1 (id=3624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clock_gettime(0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) 6.446971699s ago: executing program 0 (id=3625): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x2, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffb, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.446450189s ago: executing program 3 (id=3626): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000001c0)=0x579) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x440, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@local, 0x4e1e, 0x3, 0x4e21, 0x0, 0x565e196a2b5cf539, 0x20, 0x20, 0x33}, {0x6, 0x1, 0x400006, 0xe0e, 0xffff, 0x8, 0xfffffffd, 0x7}, {0x7ffffffe, 0x8000000000000001, 0x1ff, 0x9}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d2, 0xff}, 0xa, @in6=@private0, 0x3502, 0x1, 0x1, 0x8, 0x9d, 0x9, 0xc1}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640200000000800134000", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.981910862s ago: executing program 0 (id=3627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x2, 0x0) syz_io_uring_setup(0x68d, &(0x7f0000000180)={0x0, 0x564e, 0x200, 0x2, 0x2c8}, &(0x7f0000000040), &(0x7f0000000200)) 4.972910533s ago: executing program 1 (id=3628): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_disconnect(r1) 3.950455244s ago: executing program 3 (id=3629): socket(0x200000000000011, 0x4000000000080002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e11, &(0x7f000000bc40)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffd4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) r9 = creat(0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x6000) io_setup(0x202, 0x0) 2.270913067s ago: executing program 2 (id=3630): socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 2.043591369s ago: executing program 2 (id=3631): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) 2.03090857s ago: executing program 3 (id=3632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x2, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffb, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.753068024s ago: executing program 4 (id=3633): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x1fffffffff, 0xb, 0x80006, 0x4000000000000e51, 0x7, 0x547a, 0x103d, 0x200000000006, 0x0, 0x5861, 0x5, 0x1, 0x0, 0x40000000009, 0x40000000080a8d, 0x800000068], 0x30000, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.346244584s ago: executing program 3 (id=3634): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 1.052893168s ago: executing program 2 (id=3635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000000300)={r4, &(0x7f00000000c0)='NOTRACK\x00', 0x6a2080, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x8001]}, {0x5, 0x80, 0x1, 0xffffffff}}, 0xcac, 0x0, &(0x7f00000002c0)=0x10}) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) msgsnd(r3, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af7700885083239"}, 0x28, 0x800) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$PROG_LOAD(0x5, 0x0, 0x0) 782.910811ms ago: executing program 4 (id=3636): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000ac0)='environ\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a500000000000010902"], 0x0) pread64(r1, 0x0, 0x0, 0x40000000007) 283.673286ms ago: executing program 0 (id=3637): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x2, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffb, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 441.57µs ago: executing program 2 (id=3638): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 3 (id=3639): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d571"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de1357713389"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): - 0 [ 1056.731734][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2893'. [ 1056.758576][T14985] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1056.882067][T14990] trusted_key: encrypted_key: insufficient parameters specified [ 1057.052883][T14564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.104433][T14564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.167049][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1057.471325][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.520327][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.579058][ T26] audit: type=1326 audit(2000000899.809:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14997 comm="syz.1.2897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f2179c799 code=0x0 [ 1057.722928][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1058.859526][T15011] loop1: detected capacity change from 0 to 2048 [ 1059.133602][T15011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1059.158205][T15011] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.539186][T15026] vivid-003: ================= START STATUS ================= [ 1059.547391][T15026] vivid-003: Radio HW Seek Mode: Bounded [ 1059.553056][T15026] vivid-003: Radio Programmable HW Seek: false [ 1059.559496][T15026] vivid-003: RDS Rx I/O Mode: Block I/O [ 1059.565180][T15026] vivid-003: Generate RBDS Instead of RDS: false [ 1059.571619][T15026] vivid-003: RDS Reception: true [ 1059.576640][T15026] vivid-003: RDS Program Type: 0 inactive [ 1059.582928][T15026] vivid-003: RDS PS Name: inactive [ 1059.588275][T15026] vivid-003: RDS Radio Text: inactive [ 1059.593871][T15026] vivid-003: RDS Traffic Announcement: false inactive [ 1059.600956][T15026] vivid-003: RDS Traffic Program: false inactive [ 1059.607368][T15026] vivid-003: RDS Music: false inactive [ 1059.612853][T15026] vivid-003: ================== END STATUS ================== [ 1059.674872][T14145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1059.687223][T14145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1059.697690][T14145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1059.707858][T14145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1059.717360][T14145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1059.826228][T14145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1059.851620][ T4594] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.889889][T14144] EXT4-fs (loop1): unmounting filesystem. [ 1061.713839][ T4594] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.827777][T15046] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2905'. [ 1061.915949][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 1062.587480][ T4594] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.757458][ T4594] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.214125][ T4617] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1063.286271][T15028] chnl_net:caif_netlink_parms(): no params data found [ 1063.415823][ T4617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.435241][ T4617] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1063.472774][ T4617] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1063.509083][ T4617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.529246][ T4617] usb 2-1: Product: syz [ 1063.533450][ T4617] usb 2-1: Manufacturer: syz [ 1063.541929][ T4617] usb 2-1: SerialNumber: syz [ 1063.564230][ T4617] usb 2-1: config 0 descriptor?? [ 1063.610968][ T4617] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1063.652647][T15069] trusted_key: encrypted_key: insufficient parameters specified [ 1063.708943][ T4617] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1063.723719][ T4617] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1063.733766][ T4617] usb 2-1: media controller created [ 1063.843717][ T4617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1064.004036][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 1064.460668][ T4617] DVB: Unable to find symbol tda10046_attach() [ 1064.467127][ T4617] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1064.484708][ T4617] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1064.563513][T15028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.609674][T15028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.654506][T15028] device bridge_slave_0 entered promiscuous mode [ 1064.714123][T15073] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1064.727875][ T4617] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 1064.753343][ T4617] usb 2-1: USB disconnect, device number 4 [ 1064.766810][T15028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.784042][T15028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.802310][T15028] device bridge_slave_1 entered promiscuous mode [ 1064.883582][T15028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.906093][T15028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.924090][T15073] usb 3-1: Using ep0 maxpacket: 32 [ 1064.937951][T15073] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1064.945698][T15028] team0: Port device team_slave_0 added [ 1064.971403][T15073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.988217][T15073] usb 3-1: config 0 descriptor?? [ 1065.109169][T15028] team0: Port device team_slave_1 added [ 1065.161019][T15028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.181128][T15028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.215291][T15028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.235647][T15073] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1065.248828][T15073] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1065.263080][T15073] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1065.270658][T15073] usb 3-1: media controller created [ 1065.417296][T15028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.446369][T15028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.555858][T15028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.607399][T15073] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.654422][T15073] az6027: usb out operation failed. (-71) [ 1065.665534][T15073] az6027: usb out operation failed. (-71) [ 1065.671357][T15073] stb0899_attach: Driver disabled by Kconfig [ 1065.677466][T15073] az6027: no front-end attached [ 1065.677466][T15073] [ 1065.918138][T15098] loop1: detected capacity change from 0 to 8192 [ 1066.012937][T15073] az6027: usb out operation failed. (-71) [ 1066.083965][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 1066.090985][T15073] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1066.126617][T15098] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1066.140318][T15098] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1066.149973][T15098] REISERFS (device loop1): using ordered data mode [ 1066.156574][T15098] reiserfs: using flush barriers [ 1066.172698][T15098] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1066.191459][T15098] REISERFS (device loop1): checking transaction log (loop1) [ 1066.206966][T15098] REISERFS (device loop1): Using r5 hash to sort names [ 1066.215361][T15098] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1066.562025][T15073] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 1066.635959][T15073] dvb-usb: schedule remote query interval to 400 msecs. [ 1066.876233][T15073] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1067.250507][T15073] usb 3-1: USB disconnect, device number 6 [ 1068.163798][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 1068.179901][T15073] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1068.804097][T15128] loop1: detected capacity change from 0 to 8192 [ 1068.937244][T15119] vivid-001: ================= START STATUS ================= [ 1069.235344][T15119] vivid-001: Radio HW Seek Mode: Bounded [ 1069.324615][T15128] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1069.338095][T15128] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1069.347758][T15128] REISERFS (device loop1): using ordered data mode [ 1069.354353][T15128] reiserfs: using flush barriers [ 1069.368538][T15128] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1069.386506][T15128] REISERFS (device loop1): checking transaction log (loop1) [ 1069.406240][T15128] REISERFS (device loop1): Using r5 hash to sort names [ 1069.414975][T15128] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1069.611878][T15119] vivid-001: Radio Programmable HW Seek: false [ 1069.619000][T15119] vivid-001: RDS Rx I/O Mode: Block I/O [ 1069.625987][T15119] vivid-001: Generate RBDS Instead of RDS: false [ 1069.632375][T15119] vivid-001: RDS Reception: true [ 1069.777118][T15119] vivid-001: RDS Program Type: 0 inactive [ 1069.795088][T15119] vivid-001: RDS PS Name: inactive [ 1069.830297][T15119] vivid-001: RDS Radio Text: inactive [ 1069.864102][T15119] vivid-001: RDS Traffic Announcement: false inactive [ 1069.934325][T15119] vivid-001: RDS Traffic Program: false inactive [ 1069.983130][T15119] vivid-001: RDS Music: false inactive [ 1070.027477][T15119] vivid-001: ================== END STATUS ================== [ 1070.592037][T15028] device hsr_slave_0 entered promiscuous mode [ 1070.604825][T15028] device hsr_slave_1 entered promiscuous mode [ 1070.633732][T15028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1070.641687][T15028] Cannot create hsr debugfs directory [ 1070.666899][T15140] loop2: detected capacity change from 0 to 1024 [ 1070.704627][T15140] EXT4-fs: quotafile must be on filesystem root [ 1070.776866][T15074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1070.900179][T15140] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2922'. [ 1072.346913][T15158] loop1: detected capacity change from 0 to 2048 [ 1072.443028][T15161] trusted_key: encrypted_key: insufficient parameters specified [ 1072.859629][T15158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1072.873816][T15158] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.630838][T15171] vivid-003: ================= START STATUS ================= [ 1073.638574][T15171] vivid-003: Radio HW Seek Mode: Bounded [ 1073.644343][T15171] vivid-003: Radio Programmable HW Seek: false [ 1073.650525][T15171] vivid-003: RDS Rx I/O Mode: Block I/O [ 1073.656213][T15171] vivid-003: Generate RBDS Instead of RDS: false [ 1073.662578][T15171] vivid-003: RDS Reception: true [ 1073.667600][T15171] vivid-003: RDS Program Type: 0 inactive [ 1073.673394][T15171] vivid-003: RDS PS Name: inactive [ 1073.678625][T15171] vivid-003: RDS Radio Text: inactive [ 1073.684236][T15171] vivid-003: RDS Traffic Announcement: false inactive [ 1073.691039][T15171] vivid-003: RDS Traffic Program: false inactive [ 1073.697517][T15171] vivid-003: RDS Music: false inactive [ 1073.703015][T15171] vivid-003: ================== END STATUS ================== [ 1075.075085][T14144] EXT4-fs (loop1): unmounting filesystem. [ 1076.633438][ T4594] device hsr_slave_0 left promiscuous mode [ 1076.783555][ T4594] device hsr_slave_1 left promiscuous mode [ 1076.850305][ T4594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.860571][ T4594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.876057][ T4594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.921999][ T4594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.983960][ T4594] bridge0: port 3(batadv0) entered disabled state [ 1077.342689][ T4594] device bridge_slave_1 left promiscuous mode [ 1077.358352][ T4594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.370389][ T4594] device bridge_slave_0 left promiscuous mode [ 1077.391410][ T4594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.460180][ T4594] device veth1_macvtap left promiscuous mode [ 1077.474714][ T4594] device veth0_macvtap left promiscuous mode [ 1077.482609][ T4594] device veth1_vlan left promiscuous mode [ 1077.496752][ T4594] device veth0_vlan left promiscuous mode [ 1078.323457][T15195] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1078.900703][T15221] loop2: detected capacity change from 0 to 512 [ 1079.857920][T15221] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2938: inode has both inline data and extents flags [ 1079.883327][T15221] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2938: couldn't read orphan inode 15 (err -117) [ 1079.934751][T15221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1080.280737][T15237] vivid-001: ================= START STATUS ================= [ 1080.288823][T15237] vivid-001: Radio HW Seek Mode: Bounded [ 1080.294604][T15237] vivid-001: Radio Programmable HW Seek: false [ 1080.300783][T15237] vivid-001: RDS Rx I/O Mode: Block I/O [ 1080.306402][T15237] vivid-001: Generate RBDS Instead of RDS: false [ 1080.312747][T15237] vivid-001: RDS Reception: true [ 1080.317742][T15237] vivid-001: RDS Program Type: 0 inactive [ 1080.323644][T15237] vivid-001: RDS PS Name: inactive [ 1080.328869][T15237] vivid-001: RDS Radio Text: inactive [ 1080.334410][T15237] vivid-001: RDS Traffic Announcement: false inactive [ 1080.341196][T15237] vivid-001: RDS Traffic Program: false inactive [ 1080.347666][T15237] vivid-001: RDS Music: false inactive [ 1080.353189][T15237] vivid-001: ================== END STATUS ================== [ 1080.633216][T14669] EXT4-fs (loop2): unmounting filesystem. [ 1082.406398][T15252] loop1: detected capacity change from 0 to 8192 [ 1082.904458][T15252] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1082.917635][T15252] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1082.927261][T15252] REISERFS (device loop1): using ordered data mode [ 1082.933876][T15252] reiserfs: using flush barriers [ 1083.004157][T15252] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1083.024449][T15252] REISERFS (device loop1): checking transaction log (loop1) [ 1083.038785][T15252] REISERFS (device loop1): Using r5 hash to sort names [ 1083.046418][T15252] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1083.810860][T15259] trusted_key: encrypted_key: insufficient parameters specified [ 1085.378887][T15266] loop1: detected capacity change from 0 to 8192 [ 1085.427400][T15266] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1085.440475][T15266] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1085.450146][T15266] REISERFS (device loop1): using ordered data mode [ 1085.456825][T15266] reiserfs: using flush barriers [ 1085.467381][T15266] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1085.485582][T15266] REISERFS (device loop1): checking transaction log (loop1) [ 1085.516998][T15266] REISERFS (device loop1): Using r5 hash to sort names [ 1085.525664][T15266] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1089.290448][ T4594] team0 (unregistering): Port device team_slave_1 removed [ 1089.993690][ T4594] team0 (unregistering): Port device team_slave_0 removed [ 1090.058474][ T4594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.120216][ T4594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.958655][T15286] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1091.323709][ T4594] bond0 (unregistering): Released all slaves [ 1092.584937][T15308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1092.646191][T15312] device bond_slave_0 entered promiscuous mode [ 1092.652998][T15312] device bond_slave_1 entered promiscuous mode [ 1092.667339][T15316] vivid-001: ================= START STATUS ================= [ 1092.733318][T15312] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1092.747492][T15312] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1092.822028][T15316] vivid-001: Radio HW Seek Mode: Bounded [ 1092.844956][T14564] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1092.861147][T15316] vivid-001: Radio Programmable HW Seek: false [ 1092.903955][T15316] vivid-001: RDS Rx I/O Mode: Block I/O [ 1092.944838][T15316] vivid-001: Generate RBDS Instead of RDS: false [ 1092.951239][T15316] vivid-001: RDS Reception: true [ 1093.002248][T15316] vivid-001: RDS Program Type: 0 inactive [ 1093.022553][T15316] vivid-001: RDS PS Name: inactive [ 1093.027830][T15316] vivid-001: RDS Radio Text: inactive [ 1093.034209][T15316] vivid-001: RDS Traffic Announcement: false inactive [ 1093.041033][T15316] vivid-001: RDS Traffic Program: false inactive [ 1093.048428][T15316] vivid-001: RDS Music: false inactive [ 1093.054219][T15316] vivid-001: ================== END STATUS ================== [ 1093.256897][T15327] loop1: detected capacity change from 0 to 8192 [ 1093.971733][T15327] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1093.985157][T15327] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1093.994582][T15327] REISERFS (device loop1): using ordered data mode [ 1094.001150][T15327] reiserfs: using flush barriers [ 1094.014983][T15327] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1094.032719][T15327] REISERFS (device loop1): checking transaction log (loop1) [ 1094.316486][T15327] REISERFS (device loop1): Using r5 hash to sort names [ 1094.323665][T15327] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1094.360842][T15028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1094.384680][T15028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1094.466390][T15028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1094.736702][T15028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1094.851986][T15340] trusted_key: encrypted_key: insufficient parameters specified [ 1095.878028][T15028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.966970][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1096.023082][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1096.100431][T15028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.180701][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1096.215488][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1096.282756][ T4765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.289891][ T4765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.388809][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1096.451435][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1096.466642][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1096.481267][ T4765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.488473][ T4765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.519479][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1096.546890][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1096.571862][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1096.608309][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1096.639445][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1096.656911][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1096.669827][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1096.697103][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1096.708432][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1096.721975][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1096.745977][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1096.962166][T15342] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1097.372629][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 1098.249086][T15379] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2971'. [ 1098.996499][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'. [ 1099.637125][T15390] loop1: detected capacity change from 0 to 8192 [ 1100.722932][T15390] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1100.737668][T15390] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1100.747267][T15390] REISERFS (device loop1): using ordered data mode [ 1100.753948][T15390] reiserfs: using flush barriers [ 1100.762720][T15390] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1100.779574][T15390] REISERFS (device loop1): checking transaction log (loop1) [ 1100.793139][T15390] REISERFS (device loop1): Using r5 hash to sort names [ 1100.800339][T15390] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1102.955985][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1102.975899][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1103.000870][T15028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.383574][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1105.399731][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1105.448224][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1105.476487][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1105.512549][T15028] device veth0_vlan entered promiscuous mode [ 1105.524686][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1105.537891][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1105.709480][T15028] device veth1_vlan entered promiscuous mode [ 1106.401729][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1106.514837][T15028] device veth0_macvtap entered promiscuous mode [ 1106.528150][T15028] device veth1_macvtap entered promiscuous mode [ 1106.537660][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1106.553890][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1106.633806][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1106.656370][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.813073][T15475] trusted_key: encrypted_key: insufficient parameters specified [ 1107.569366][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.579700][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.590315][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.601254][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.736638][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.822704][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.360527][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.850445][T15028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.859328][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.902177][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.930573][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1109.067410][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.119139][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.191480][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.243284][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.273959][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.301544][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.330146][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.347058][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.372863][T15028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.446145][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1109.463250][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.498899][T15028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.677300][T15028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.692771][T15028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.705918][T15028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.053381][ T4772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.184363][ T4772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.206894][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1111.601368][ T4734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.609242][ T4734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.672635][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1112.618856][T15537] trusted_key: encrypted_key: insufficient parameters specified [ 1113.080208][T15532] loop4: detected capacity change from 0 to 40427 [ 1113.092717][T15532] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 1113.101706][T15532] F2FS-fs (loop4): invalid crc value [ 1113.117715][T15532] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1113.142554][T15532] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1114.265601][T15028] syz-executor: attempt to access beyond end of device [ 1114.265601][T15028] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1115.855457][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.866291][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.101043][T15604] trusted_key: encrypted_key: insufficient parameters specified [ 1120.622228][T15608] loop2: detected capacity change from 0 to 32768 [ 1120.734904][T15608] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3021 (15608) [ 1120.780856][T15608] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1120.809264][T15608] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1120.952649][T15608] BTRFS info (device loop2): setting nodatasum [ 1121.015622][T15608] BTRFS info (device loop2): force zlib compression, level 3 [ 1121.100951][T15608] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1121.177385][T15608] BTRFS info (device loop2): use lzo compression, level 0 [ 1121.234158][T15608] BTRFS info (device loop2): turning on flush-on-commit [ 1121.287060][T15608] BTRFS info (device loop2): enabling auto defrag [ 1121.348346][T15608] BTRFS info (device loop2): max_inline at 4096 [ 1121.418888][T15608] BTRFS info (device loop2): using free space tree [ 1121.788043][T15608] BTRFS info (device loop2): enabling ssd optimizations [ 1123.442180][T14669] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1125.201030][T15673] loop2: detected capacity change from 0 to 2048 [ 1126.254463][T15673] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.438505][T15708] trusted_key: encrypted_key: insufficient parameters specified [ 1129.176613][T15722] loop4: detected capacity change from 0 to 64 [ 1129.937538][ T26] audit: type=1800 audit(2000000971.973:88): pid=15733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3048" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 1130.711597][T15749] loop4: detected capacity change from 0 to 8 [ 1130.718389][T15749] cramfs: Unknown parameter '»¼_å{wÔû"²™™*’M›¥Ž¶šl€@[M•ã§{ÁL¼wÖ±6§·¯‚ƒ6¸Œªá¢¯Æ;ºÖ1i¼|ñJ]Ëûl†ÿÁ>æcêPÊ G©ìè^\–>•‚€mh;ö²ûFm^!ç‘ÄdsYz>µcÁB³-#÷‘±¯‰ò§¿»O3tšXÉ1³#”‰g?Ü[›ÈŠÊæEeH5 ' [ 1130.809261][T15748] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1131.489218][T15074] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1131.848421][T15758] trusted_key: encrypted_key: insufficient parameters specified [ 1132.998955][T15774] loop4: detected capacity change from 0 to 2048 [ 1133.669433][T15774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1133.705703][T15774] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.788861][T15774] vivid-004: ================= START STATUS ================= [ 1133.796874][T15774] vivid-004: Radio HW Seek Mode: Bounded [ 1133.802777][T15774] vivid-004: Radio Programmable HW Seek: false [ 1133.808969][T15774] vivid-004: RDS Rx I/O Mode: Block I/O [ 1133.814888][T15774] vivid-004: Generate RBDS Instead of RDS: false [ 1133.821326][T15774] vivid-004: RDS Reception: true [ 1133.826289][T15774] vivid-004: RDS Program Type: 0 inactive [ 1133.832119][T15774] vivid-004: RDS PS Name: inactive [ 1133.837907][T15774] vivid-004: RDS Radio Text: inactive [ 1133.843467][T15774] vivid-004: RDS Traffic Announcement: false inactive [ 1133.850294][T15774] vivid-004: RDS Traffic Program: false inactive [ 1133.856641][T15774] vivid-004: RDS Music: false inactive [ 1133.862234][T15774] vivid-004: ================== END STATUS ================== [ 1133.897821][T15028] EXT4-fs (loop4): unmounting filesystem. [ 1135.094682][T15798] loop2: detected capacity change from 0 to 8 [ 1135.101672][T15798] cramfs: Unknown parameter '»¼_å{wÔû"²™™*’M›¥Ž¶šl€@[M•ã§{ÁL¼wÖ±6§·¯‚ƒ6¸Œªá¢¯Æ;ºÖ1i¼|ñJ]Ëûl†ÿÁ>æcêPÊ G©ìè^\–>•‚€mh;ö²ûFm^!ç‘ÄdsYz>µcÁB³-#÷‘±¯‰ò§¿»O3tšXÉ1³#”‰g?Ü[›ÈŠÊæEeH5 ' [ 1136.303362][T15074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1136.657420][T15809] loop2: detected capacity change from 0 to 16 [ 1136.685424][T15809] erofs: (device loop2): mounted with root inode @ nid 36. [ 1138.185021][T15834] loop1: detected capacity change from 0 to 512 [ 1138.200181][T15834] EXT4-fs: Mount option(s) incompatible with ext3 [ 1138.243683][T15074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1140.625256][T15845] loop2: detected capacity change from 0 to 8192 [ 1140.648820][T15842] loop4: detected capacity change from 0 to 8 [ 1140.656150][T15842] cramfs: Unknown parameter '»¼_å{wÔû"²™™*’M›¥Ž¶šl€@[M•ã§{ÁL¼wÖ±6§·¯‚ƒ6¸Œªá¢¯Æ;ºÖ1i¼|ñJ]Ëûl†ÿÁ>æcêPÊ G©ìè^\–>•‚€mh;ö²ûFm^!ç‘ÄdsYz>µcÁB³-#÷‘±¯‰ò§¿»O3tšXÉ1³#”‰g?Ü[›ÈŠÊæEeH5 ' [ 1141.280087][T15845] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1141.295642][T15845] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1141.304977][T15845] REISERFS (device loop2): using ordered data mode [ 1141.308522][T14926] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1141.311949][T15845] reiserfs: using flush barriers [ 1141.327737][T15845] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1141.344308][T15845] REISERFS (device loop2): checking transaction log (loop2) [ 1141.355946][T15845] REISERFS (device loop2): Using r5 hash to sort names [ 1141.366295][T15845] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1142.203690][T15855] loop4: detected capacity change from 0 to 16 [ 1142.237675][T14926] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1142.294577][T15855] erofs: (device loop4): mounted with root inode @ nid 36. [ 1142.888253][T15871] o2cb: This node has not been configured. [ 1142.894235][T15871] o2cb: Cluster check failed. Fix errors before retrying. [ 1142.901547][T15871] (syz.4.3089,15871,1):user_dlm_register:674 ERROR: status = -22 [ 1142.909424][T15871] (syz.4.3089,15871,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1144.235336][T15676] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1147.872438][T15676] usb 5-1: Using ep0 maxpacket: 16 [ 1147.907142][T15676] usb 5-1: device descriptor read/all, error -71 [ 1148.784389][T15902] ubi: mtd0 is already attached to ubi31 [ 1149.376890][T15912] loop2: detected capacity change from 0 to 1024 [ 1149.394232][T15911] loop4: detected capacity change from 0 to 2048 [ 1149.406436][T15912] EXT4-fs: Ignoring removed bh option [ 1149.549667][T15912] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1149.841053][T14145] Bluetooth: hci1: command 0x0406 tx timeout [ 1150.250339][T15911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1150.260706][T15911] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1150.361196][T15929] ext4: Bad value for 'max_batch_time' [ 1150.625544][T14669] EXT4-fs (loop2): unmounting filesystem. [ 1153.765789][T15028] EXT4-fs (loop4): unmounting filesystem. [ 1154.039661][T15968] ubi: mtd0 is already attached to ubi31 [ 1154.696119][T15975] loop1: detected capacity change from 0 to 64 [ 1155.270636][ T26] audit: type=1800 audit(2000000997.334:89): pid=15986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3116" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 1156.251020][T15995] loop2: detected capacity change from 0 to 8192 [ 1156.328343][T15995] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1156.341855][T15995] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1156.351524][T15995] REISERFS (device loop2): using ordered data mode [ 1156.358151][T15995] reiserfs: using flush barriers [ 1156.376487][T15995] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1156.394026][T15995] REISERFS (device loop2): checking transaction log (loop2) [ 1156.407273][T15995] REISERFS (device loop2): Using r5 hash to sort names [ 1156.414609][T15995] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1156.479106][T15997] tipc: Enabling of bearer rejected, failed to enable media [ 1158.019878][T16017] ubi: mtd0 is already attached to ubi31 [ 1160.168838][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1160.351692][T16039] loop1: detected capacity change from 0 to 512 [ 1160.397453][T16039] EXT4-fs: Mount option(s) incompatible with ext3 [ 1161.510425][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.830440][T16045] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1162.447401][T16041] loop4: detected capacity change from 0 to 40427 [ 1162.463937][T16041] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 1162.476594][T16041] F2FS-fs (loop4): invalid crc value [ 1162.544454][T16041] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1162.653527][T16041] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1163.048697][ T8666] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1163.275754][ T8666] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1163.308040][ T8666] usb 5-1: not running at top speed; connect to a high speed hub [ 1163.316379][ T14] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1163.326519][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.336333][ T14] usb 3-1: config 0 descriptor?? [ 1163.345465][ T14] usb 3-1: can't set config #0, error -71 [ 1163.352376][ T14] usb 3-1: USB disconnect, device number 7 [ 1164.046023][T16061] ubi: mtd0 is already attached to ubi31 [ 1165.834676][ T8666] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1165.843303][ T8666] usb 5-1: can't read configurations, error -71 [ 1165.855868][T15028] syz-executor: attempt to access beyond end of device [ 1165.855868][T15028] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1166.541136][T16081] loop4: detected capacity change from 0 to 8192 [ 1167.315599][T16081] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1167.329858][T16081] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1167.339770][T16081] REISERFS (device loop4): using ordered data mode [ 1167.346294][T16081] reiserfs: using flush barriers [ 1167.353254][T16081] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1167.369927][T16081] REISERFS (device loop4): checking transaction log (loop4) [ 1167.378309][T16081] REISERFS (device loop4): Using r5 hash to sort names [ 1167.385498][T16081] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1167.430237][T16086] tipc: Failed to remove unknown binding: 66,1,1/0:2091501344/2091501346 [ 1167.452163][T16086] tipc: Failed to remove unknown binding: 66,1,1/0:2091501344/2091501346 [ 1167.466272][T16086] tipc: Failed to remove unknown binding: 66,1,1/0:2091501344/2091501346 [ 1167.640825][T16084] loop2: detected capacity change from 0 to 512 [ 1167.681390][T16084] EXT4-fs: Mount option(s) incompatible with ext3 [ 1167.744049][T16093] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3153'. [ 1168.255470][T16101] loop1: detected capacity change from 0 to 8192 [ 1168.861078][T16101] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1168.897724][T16101] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1168.907067][T16101] REISERFS (device loop1): using ordered data mode [ 1168.913968][T16101] reiserfs: using flush barriers [ 1168.920582][T16101] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1168.937450][T16101] REISERFS (device loop1): checking transaction log (loop1) [ 1168.946249][T16101] REISERFS (device loop1): Using r5 hash to sort names [ 1168.953676][T16101] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1171.261830][T16109] ubi: mtd0 is already attached to ubi31 [ 1173.822748][T16136] loop4: detected capacity change from 0 to 8192 [ 1174.488336][T16136] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1174.501437][T16136] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1174.510809][T16136] REISERFS (device loop4): using ordered data mode [ 1174.517367][T16136] reiserfs: using flush barriers [ 1174.527031][T16136] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1174.543660][T16136] REISERFS (device loop4): checking transaction log (loop4) [ 1174.551411][T16142] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3167'. [ 1174.552597][T16136] REISERFS (device loop4): Using r5 hash to sort names [ 1174.568182][T16136] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1174.824962][T16133] loop2: detected capacity change from 0 to 32768 [ 1174.885376][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1174.888632][T16133] XFS: attr2 mount option is deprecated. [ 1174.906645][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1174.918157][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1174.931187][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1174.940086][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1174.949822][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1175.044470][T16151] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3169'. [ 1175.095045][T16133] XFS (loop2): Mounting V5 Filesystem [ 1175.380611][T16133] XFS (loop2): Ending clean mount [ 1175.404620][T16133] XFS (loop2): Quotacheck needed: Please wait. [ 1175.679752][T16133] XFS (loop2): Quotacheck: Done. [ 1176.001077][T14669] XFS (loop2): Unmounting Filesystem [ 1176.290144][T16144] chnl_net:caif_netlink_parms(): no params data found [ 1176.365614][T16172] ubi: mtd0 is already attached to ubi31 [ 1177.051008][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 1177.202420][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.208794][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.220038][T16144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.285192][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.315036][T16144] device bridge_slave_0 entered promiscuous mode [ 1177.325633][T16144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.371762][T16144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.396620][T16144] device bridge_slave_1 entered promiscuous mode [ 1177.486963][T16144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.539851][T16144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.571047][T16144] team0: Port device team_slave_0 added [ 1177.579253][T16144] team0: Port device team_slave_1 added [ 1177.601284][T16144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.609707][T16144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.641276][T16144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.723260][T16190] loop1: detected capacity change from 0 to 8192 [ 1177.774267][T16190] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1177.787592][T16190] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1177.796927][T16190] REISERFS (device loop1): using ordered data mode [ 1177.803616][T16190] reiserfs: using flush barriers [ 1177.810550][T16190] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1177.827248][T16190] REISERFS (device loop1): checking transaction log (loop1) [ 1177.836287][T16190] REISERFS (device loop1): Using r5 hash to sort names [ 1177.843682][T16190] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1177.881459][T16144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.897241][T16144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.266508][T16194] trusted_key: encrypted_key: insufficient parameters specified [ 1179.143715][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 1179.157940][T16144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.560407][T16144] device hsr_slave_0 entered promiscuous mode [ 1179.682978][T16144] device hsr_slave_1 entered promiscuous mode [ 1181.197786][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1181.508565][T16206] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3182'. [ 1182.955253][T16144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.031326][T16208] device vlan0 entered promiscuous mode [ 1183.277658][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1183.352260][T16214] ubi: mtd0 is already attached to ubi31 [ 1184.101982][T16144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.397248][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 1184.573419][T16144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.934927][T16229] ntfs3: loop2: try to read out of volume at offset 0x0 [ 1185.496004][T16144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.866375][T16237] trusted_key: encrypted_key: insufficient parameters specified [ 1186.161914][T16144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1186.382133][T16144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1186.446594][T16144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1186.544701][T16144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1186.765377][T16246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1186.974862][T16144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.015647][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1187.024529][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1187.043980][T16144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.064711][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1187.086368][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1188.553275][T16251] ubi: mtd0 is already attached to ubi31 [ 1188.571998][ T4767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.579286][ T4767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.595909][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1188.610975][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1188.967730][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1189.002148][ T4767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.009334][ T4767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.109009][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1189.178180][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1189.214498][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1189.268697][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1189.305156][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1189.317516][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1189.342893][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1190.061874][T16144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1190.135387][T16144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.285543][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1190.300109][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1190.372360][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1190.408863][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1191.436775][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1192.079389][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1192.090586][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1192.119352][T16144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.227168][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1192.273835][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1192.297550][T16300] trusted_key: encrypted_key: insufficient parameters specified [ 1192.382679][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1192.415947][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1192.468138][T16144] device veth0_vlan entered promiscuous mode [ 1192.494384][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1192.508112][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1192.530046][T16144] device veth1_vlan entered promiscuous mode [ 1192.611926][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1192.629679][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1192.665168][T16144] device veth0_macvtap entered promiscuous mode [ 1192.690357][T16144] device veth1_macvtap entered promiscuous mode [ 1192.734243][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.761911][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.792632][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.817557][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.843847][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.875097][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.899404][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.926994][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.937002][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.956791][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.978736][T16144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.018849][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1193.034254][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1193.052954][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1193.241730][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1193.271576][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.298792][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.332099][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.501305][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.648424][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.938097][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.988196][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.018664][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.028888][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.045453][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.062565][T16144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.077140][T16306] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3208'. [ 1194.111234][T16144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.140003][T16144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.158100][T16144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.323497][T16144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.335176][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1194.344264][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1195.322398][T16318] loop2: detected capacity change from 0 to 8192 [ 1196.009362][T16318] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1196.022511][T16318] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1196.033675][T16318] REISERFS (device loop2): using ordered data mode [ 1196.040257][T16318] reiserfs: using flush barriers [ 1196.055722][T16318] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1196.072260][T16318] REISERFS (device loop2): checking transaction log (loop2) [ 1196.111826][T16318] REISERFS (device loop2): Using r5 hash to sort names [ 1196.122340][T16318] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1196.257156][T16326] loop1: detected capacity change from 0 to 8192 [ 1196.592703][T16326] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1196.606735][T16326] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1196.616813][T16326] REISERFS (device loop1): using ordered data mode [ 1196.623380][T16326] reiserfs: using flush barriers [ 1196.637769][T16326] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1196.656161][T16326] REISERFS (device loop1): checking transaction log (loop1) [ 1196.679631][T16326] REISERFS (device loop1): Using r5 hash to sort names [ 1196.688196][T16326] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1197.537996][T14136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.554804][ T4765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.675246][ T4765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.689060][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1197.690416][T14136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.915919][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1201.632869][T16372] loop2: detected capacity change from 0 to 8192 [ 1202.107909][T16372] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1202.121191][T16372] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1202.131165][T16372] REISERFS (device loop2): using ordered data mode [ 1202.137767][T16372] reiserfs: using flush barriers [ 1202.148305][T16372] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1202.166383][T16372] REISERFS (device loop2): checking transaction log (loop2) [ 1202.193221][T16372] REISERFS (device loop2): Using r5 hash to sort names [ 1202.201841][T16372] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1204.526946][T16389] loop4: detected capacity change from 0 to 8192 [ 1205.092155][T16389] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1205.105761][T16389] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1205.115352][T16389] REISERFS (device loop4): using ordered data mode [ 1205.121944][T16389] reiserfs: using flush barriers [ 1205.137230][T16389] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1205.155311][T16389] REISERFS (device loop4): checking transaction log (loop4) [ 1205.176994][T16389] REISERFS (device loop4): Using r5 hash to sort names [ 1205.184247][T16389] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1207.287212][T16405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1207.724546][T16406] device bond_slave_0 entered promiscuous mode [ 1207.730875][T16406] device bond_slave_1 entered promiscuous mode [ 1207.984036][T16406] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1208.028895][T16406] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1208.067816][T14145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1208.086749][T14145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1208.095682][T14145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1208.106116][T14145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1208.115071][T14145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1208.126395][T14145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1208.155334][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1208.468560][T16420] loop4: detected capacity change from 0 to 8192 [ 1209.548065][T16420] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1209.561231][T16420] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1209.570900][T16420] REISERFS (device loop4): using ordered data mode [ 1209.577510][T16420] reiserfs: using flush barriers [ 1209.591178][T16420] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1209.609664][T16420] REISERFS (device loop4): checking transaction log (loop4) [ 1209.635832][T16420] REISERFS (device loop4): Using r5 hash to sort names [ 1209.646088][T16420] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1210.165796][T14145] Bluetooth: hci2: command 0x0409 tx timeout [ 1211.011086][T16434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1211.202338][T16432] loop1: detected capacity change from 0 to 40427 [ 1211.444433][T16432] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 1211.457253][T16432] F2FS-fs (loop1): invalid crc value [ 1211.474009][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.481318][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.515976][T16432] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1211.540682][T16432] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1211.578063][T16412] chnl_net:caif_netlink_parms(): no params data found [ 1211.845706][ T33] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1212.245681][T14145] Bluetooth: hci2: command 0x041b tx timeout [ 1212.601890][T16412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.040732][ T33] usb 2-1: device descriptor read/all, error -71 [ 1213.171431][T14144] syz-executor: attempt to access beyond end of device [ 1213.171431][T14144] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1213.285998][T16412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.352699][T16412] device bridge_slave_0 entered promiscuous mode [ 1213.378230][T16412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.385915][T16412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.394161][T16412] device bridge_slave_1 entered promiscuous mode [ 1213.426395][T16460] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1213.516432][T16412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.553503][T16412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.876608][T16464] loop2: detected capacity change from 0 to 8192 [ 1214.021287][T16464] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1214.034500][T16464] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1214.044188][T16464] REISERFS (device loop2): using ordered data mode [ 1214.050795][T16464] reiserfs: using flush barriers [ 1214.069612][T16464] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1214.087490][T16464] REISERFS (device loop2): checking transaction log (loop2) [ 1214.103068][T16464] REISERFS (device loop2): Using r5 hash to sort names [ 1214.112222][T16464] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1214.326398][T14145] Bluetooth: hci2: command 0x040f tx timeout [ 1214.388907][T16412] team0: Port device team_slave_0 added [ 1214.397896][T16412] team0: Port device team_slave_1 added [ 1214.494121][T16412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.548680][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.574761][ C0] vkms_vblank_simulate: vblank timer overrun [ 1214.664021][T16412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.717110][T16412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.724130][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.767278][T16473] trusted_key: encrypted_key: insufficient parameters specified [ 1214.904255][T16412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.052277][T16412] device hsr_slave_0 entered promiscuous mode [ 1215.077693][T16412] device hsr_slave_1 entered promiscuous mode [ 1215.094965][T16412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1215.812310][T16412] Cannot create hsr debugfs directory [ 1216.395502][T14145] Bluetooth: hci2: command 0x0419 tx timeout [ 1218.910559][T16491] loop2: detected capacity change from 0 to 40427 [ 1218.924913][T16491] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 1218.939737][T16491] F2FS-fs (loop2): invalid crc value [ 1219.025760][T16491] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1219.143001][T16491] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1219.545386][T15684] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1219.678690][T16501] bond1: option mode: unable to set because the bond device has slaves [ 1219.777219][T15684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1219.841042][T16505] loop4: detected capacity change from 0 to 8192 [ 1219.851811][T15684] usb 3-1: not running at top speed; connect to a high speed hub [ 1219.882899][T15684] usb 3-1: config 5 has an invalid interface number: 42 but max is 0 [ 1219.926733][T15684] usb 3-1: config 5 has an invalid descriptor of length 22, skipping remainder of the config [ 1219.949310][T16505] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1219.962539][T16505] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1219.971826][T16505] REISERFS (device loop4): using ordered data mode [ 1219.978414][T16505] reiserfs: using flush barriers [ 1219.985711][T16505] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1220.002491][T16505] REISERFS (device loop4): checking transaction log (loop4) [ 1220.004961][T15684] usb 3-1: config 5 has no interface number 0 [ 1220.035322][T16505] REISERFS (device loop4): Using r5 hash to sort names [ 1220.042590][T16505] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1220.081892][T15684] usb 3-1: config 5 interface 42 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1220.236083][T16510] loop1: detected capacity change from 0 to 8192 [ 1220.272164][T16510] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1220.285465][T16510] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1220.294873][T16510] REISERFS (device loop1): using ordered data mode [ 1220.301508][T16510] reiserfs: using flush barriers [ 1220.308546][T16510] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1220.325853][T16510] REISERFS (device loop1): checking transaction log (loop1) [ 1220.334744][T16510] REISERFS (device loop1): Using r5 hash to sort names [ 1220.342317][T16510] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1220.623438][T15684] usb 3-1: config 5 interface 42 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1220.637983][T15684] usb 3-1: config 5 interface 42 has no altsetting 0 [ 1220.763747][T15684] usb 3-1: string descriptor 0 read error: -71 [ 1220.785434][T15684] usb 3-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=55.8c [ 1220.794616][T15684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.803689][T14669] syz-executor: attempt to access beyond end of device [ 1220.803689][T14669] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1220.856331][T15684] usb 3-1: can't set config #5, error -71 [ 1220.891918][T15684] usb 3-1: USB disconnect, device number 8 [ 1220.909155][T16412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.925651][T16515] mmap: syz.4.3262 (16515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1221.177818][T16412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.762620][T16412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.068919][T16532] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3268'. [ 1223.469870][T16542] loop2: detected capacity change from 0 to 8192 [ 1223.490487][T16542] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1223.503662][T16542] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1223.513576][T16542] REISERFS (device loop2): using ordered data mode [ 1223.520656][T16542] reiserfs: using flush barriers [ 1223.535819][T16542] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1223.554319][T16542] REISERFS (device loop2): checking transaction log (loop2) [ 1223.648709][T16547] loop4: detected capacity change from 0 to 2048 [ 1223.697236][T16542] REISERFS (device loop2): Using r5 hash to sort names [ 1223.706631][T16542] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1223.784204][T16547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1224.124422][T16412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.265533][T16547] loop4: detected capacity change from 0 to 32768 [ 1224.278539][T16548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1224.357865][T16548] bridge0: port 3(batadv0) entered disabled state [ 1224.366593][T16548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.373890][T16548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.523129][T16561] trusted_key: encrypted_key: insufficient parameters specified [ 1225.691932][T16412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1225.703969][T16412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1226.037088][T16412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1226.264686][T16412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1226.460869][T16412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.514465][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1226.532217][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1226.549610][T16412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.573141][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1226.586264][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1226.605226][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.612349][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.682208][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1226.695645][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1226.707523][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1226.721888][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.729047][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.071232][T16577] ubi: mtd0 is already attached to ubi31 [ 1229.153027][T16412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1229.221561][T16412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1229.387348][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1229.458349][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1229.494062][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1229.531606][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1229.561367][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1229.580800][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1229.599387][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1229.611015][T16590] loop4: detected capacity change from 0 to 8192 [ 1229.651851][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1229.667683][T16590] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1229.681529][T16590] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1229.690835][T16590] REISERFS (device loop4): using ordered data mode [ 1229.693637][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1229.697431][T16590] reiserfs: using flush barriers [ 1229.701508][T16590] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1229.707269][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1229.711125][T16590] REISERFS (device loop4): checking transaction log (loop4) [ 1229.728454][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1229.755861][T16590] REISERFS (device loop4): Using r5 hash to sort names [ 1229.762254][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1229.763311][T16590] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1230.100087][T16578] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1230.229611][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1230.246727][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1230.276742][T16412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.500434][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1230.518750][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1230.657123][T16601] loop2: detected capacity change from 0 to 2048 [ 1230.702652][T16601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1231.366566][T16412] device veth0_vlan entered promiscuous mode [ 1231.413005][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1231.428600][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1231.481083][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1231.535457][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1231.626694][T16412] device veth1_vlan entered promiscuous mode [ 1231.687762][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1231.704134][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1231.751539][T16609] loop3: detected capacity change from 0 to 8192 [ 1231.762642][T16412] device veth0_macvtap entered promiscuous mode [ 1231.771333][T16609] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1231.784369][T16609] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1231.793712][T16609] REISERFS (device loop3): using ordered data mode [ 1231.800325][T16609] reiserfs: using flush barriers [ 1231.806608][T16609] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1231.823255][T16609] REISERFS (device loop3): checking transaction log (loop3) [ 1231.832490][T16609] REISERFS (device loop3): Using r5 hash to sort names [ 1231.839789][T16609] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1231.841410][T16412] device veth1_macvtap entered promiscuous mode [ 1231.935151][ T125] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1231.989374][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.013790][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.044326][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.064312][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.074826][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.085694][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.095987][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.106487][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.116488][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.124535][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 1232.134555][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.150296][ T125] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1232.215454][ T125] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1232.363632][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.374333][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.635383][T16412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.745731][ T125] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1232.756433][ T125] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1232.766437][ T125] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1232.779499][ T125] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1232.799394][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.817339][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.890306][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.900531][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.915572][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.929363][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.940963][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.953635][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.965139][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.975245][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.986043][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.996154][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.007909][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.143352][T16412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.236068][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1233.288295][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1233.386216][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1233.493565][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1233.672035][ T125] usb 5-1: usb_control_msg returned -32 [ 1233.674291][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1233.677854][ T125] usbtmc 5-1:16.0: can't read capabilities [ 1233.744905][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1233.816965][T16412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.887093][T16412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.904385][T16412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.923440][T16412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.054815][T16622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.066701][T16622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.126849][T16627] ubi: mtd0 is already attached to ubi31 [ 1234.285157][ T8666] usb 5-1: USB disconnect, device number 8 [ 1234.343334][T16622] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 1235.411824][T16633] loop2: detected capacity change from 0 to 8192 [ 1235.619014][T16633] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1235.632431][T16633] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1235.642622][T16633] REISERFS (device loop2): using ordered data mode [ 1235.649508][T16633] reiserfs: using flush barriers [ 1235.673522][T16633] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1235.694498][T16633] REISERFS (device loop2): checking transaction log (loop2) [ 1235.727762][T16633] REISERFS (device loop2): Using r5 hash to sort names [ 1235.735207][T16633] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1235.829199][ T4772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.855405][ T4772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.875418][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1235.931127][ T4444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.947767][ T4444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.994836][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1236.561734][T16654] trusted_key: encrypted_key: insufficient parameters specified [ 1237.048139][T16656] loop4: detected capacity change from 0 to 2048 [ 1237.072201][T16634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1237.157836][T16656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1237.538475][T16656] loop4: detected capacity change from 0 to 32768 [ 1239.424430][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.432528][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.583752][T16681] loop4: detected capacity change from 0 to 8192 [ 1239.620422][T16681] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1239.633571][T16681] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1239.642896][T16681] REISERFS (device loop4): using ordered data mode [ 1239.649461][T16681] reiserfs: using flush barriers [ 1239.664830][T16681] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1239.681824][T16681] REISERFS (device loop4): checking transaction log (loop4) [ 1239.693715][T16681] REISERFS (device loop4): Using r5 hash to sort names [ 1239.701042][T16681] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1239.944231][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1240.134186][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 1240.141382][ T14] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1240.155941][T16692] binder: BINDER_SET_CONTEXT_MGR already set [ 1240.165949][T16692] binder: 16691:16692 ioctl 4018620d 200000004a80 returned -16 [ 1240.169012][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1240.191784][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1240.202583][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1240.220212][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1240.340486][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1240.351911][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.089317][ T14] usb 3-1: usb_control_msg returned -32 [ 1241.095013][ T14] usbtmc 3-1:16.0: can't read capabilities [ 1241.355172][T16698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.363779][T16698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.772642][ T14] usb 3-1: USB disconnect, device number 9 [ 1242.855080][T16698] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -71 [ 1243.513882][T16705] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1243.818186][T16721] vivid-001: ================= START STATUS ================= [ 1243.863843][T16721] vivid-001: Radio HW Seek Mode: Bounded [ 1243.882235][T16721] vivid-001: Radio Programmable HW Seek: false [ 1243.927070][T16728] loop1: detected capacity change from 0 to 8192 [ 1244.076037][T16728] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1244.089408][T16728] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1244.099464][T16728] REISERFS (device loop1): using ordered data mode [ 1244.106117][T16728] reiserfs: using flush barriers [ 1244.115432][T16728] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1244.133361][T16728] REISERFS (device loop1): checking transaction log (loop1) [ 1244.157370][T16728] REISERFS (device loop1): Using r5 hash to sort names [ 1244.165521][T16728] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1244.289157][T16721] vivid-001: RDS Rx I/O Mode: Block I/O [ 1244.878606][T16721] vivid-001: Generate RBDS Instead of RDS: false [ 1244.924631][T16721] vivid-001: RDS Reception: true [ 1245.065444][T16740] loop2: detected capacity change from 0 to 8192 [ 1245.266587][T16740] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1245.270514][T16721] vivid-001: RDS Program Type: [ 1245.279676][T16740] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1245.293984][T16740] REISERFS (device loop2): using ordered data mode [ 1245.300501][T16740] reiserfs: using flush barriers [ 1245.306954][T16740] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1245.323819][T16740] REISERFS (device loop2): checking transaction log (loop2) [ 1245.332903][T16740] REISERFS (device loop2): Using r5 hash to sort names [ 1245.340158][T16740] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1245.392875][T16721] 0 inactive [ 1245.429215][T16721] vivid-001: RDS PS Name: inactive [ 1245.459102][T16721] vivid-001: RDS Radio Text: inactive [ 1245.551266][T16746] trusted_key: encrypted_key: insufficient parameters specified [ 1245.742814][T16721] vivid-001: RDS Traffic Announcement: false inactive [ 1245.750035][T16721] vivid-001: RDS Traffic Program: false inactive [ 1245.757518][T16721] vivid-001: RDS Music: false inactive [ 1245.763048][T16721] vivid-001: ================== END STATUS ================== [ 1248.423203][T16777] loop3: detected capacity change from 0 to 8192 [ 1248.473912][T16777] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1248.487277][T16777] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1248.496667][T16777] REISERFS (device loop3): using ordered data mode [ 1248.503209][T16777] reiserfs: using flush barriers [ 1248.513975][T16777] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1248.530682][T16777] REISERFS (device loop3): checking transaction log (loop3) [ 1248.821204][T16777] REISERFS (device loop3): Using r5 hash to sort names [ 1248.830533][T16777] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1249.687382][T16789] loop2: detected capacity change from 0 to 8192 [ 1249.852157][T16789] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1249.865267][T16789] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1249.874458][T16789] REISERFS (device loop2): using ordered data mode [ 1249.880969][T16789] reiserfs: using flush barriers [ 1249.887039][T16789] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1249.903535][T16789] REISERFS (device loop2): checking transaction log (loop2) [ 1249.912226][T16789] REISERFS (device loop2): Using r5 hash to sort names [ 1249.919559][T16789] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1250.346244][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3338'. [ 1250.888862][T16806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1251.986380][T16822] loop4: detected capacity change from 0 to 2048 [ 1254.002510][T16822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1254.035214][T16822] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.241404][T16837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.387599][ T5180] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1254.472695][T16837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.623395][ T5180] usb 4-1: Using ep0 maxpacket: 16 [ 1254.662667][ T5180] usb 4-1: config 0 has no interfaces? [ 1254.683274][ T5180] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1254.741798][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.798516][ T5180] usb 4-1: config 0 descriptor?? [ 1254.835890][T16837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.040132][T16856] loop2: detected capacity change from 0 to 40427 [ 1255.059020][T16856] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 1255.068014][T16856] F2FS-fs (loop2): invalid crc value [ 1255.077027][ T14] usb 4-1: USB disconnect, device number 18 [ 1255.118994][T16856] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1255.148476][T16856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1255.202933][T16858] vivid-004: ================= START STATUS ================= [ 1255.211618][T16837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.245760][T16858] vivid-004: Radio HW Seek Mode: Bounded [ 1255.263680][T16858] vivid-004: Radio Programmable HW Seek: false [ 1255.383413][T16858] vivid-004: RDS Rx I/O Mode: Block I/O [ 1255.389767][T16858] vivid-004: Generate RBDS Instead of RDS: false [ 1255.396723][T16858] vivid-004: RDS Reception: true [ 1255.402603][T16858] vivid-004: RDS Program Type: 0 inactive [ 1255.409513][T16858] vivid-004: RDS PS Name: inactive [ 1255.415085][T16858] vivid-004: RDS Radio Text: inactive [ 1255.420708][T16858] vivid-004: RDS Traffic Announcement: false inactive [ 1255.428029][T16858] vivid-004: RDS Traffic Program: false inactive [ 1255.453270][T15664] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1255.453340][T16858] vivid-004: RDS Music: false inactive [ 1255.487758][T16858] vivid-004: ================== END STATUS ================== [ 1255.491828][T16837] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.543311][T16837] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.570662][T16837] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.618109][T16837] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.670924][T15664] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1255.699767][T15664] usb 3-1: not running at top speed; connect to a high speed hub [ 1255.730691][T15664] usb 3-1: config 5 has an invalid interface number: 42 but max is 0 [ 1255.759770][T15664] usb 3-1: config 5 has an invalid descriptor of length 22, skipping remainder of the config [ 1255.774239][T15664] usb 3-1: config 5 has no interface number 0 [ 1255.781181][T15664] usb 3-1: config 5 interface 42 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1255.797729][T15664] usb 3-1: config 5 interface 42 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1255.812759][T15664] usb 3-1: config 5 interface 42 has no altsetting 0 [ 1255.832156][T15664] usb 3-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=55.8c [ 1255.851567][T15664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.859838][T15664] usb 3-1: Product: syz [ 1255.873311][T15664] usb 3-1: Manufacturer: syz [ 1255.878040][T15664] usb 3-1: SerialNumber: syz [ 1256.145134][T15664] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 1256.164930][T15664] usb 3-1: USB disconnect, device number 10 [ 1257.732849][T14669] syz-executor: attempt to access beyond end of device [ 1257.732849][T14669] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1258.005572][T15028] EXT4-fs (loop4): unmounting filesystem. [ 1259.508979][T16891] loop3: detected capacity change from 0 to 8192 [ 1259.516726][T16869] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1259.660871][T16891] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1259.674212][T16891] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1259.684197][T16891] REISERFS (device loop3): using ordered data mode [ 1259.690737][T16891] reiserfs: using flush barriers [ 1259.698205][T16891] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1259.715553][T16891] REISERFS (device loop3): checking transaction log (loop3) [ 1259.724338][T16891] REISERFS (device loop3): Using r5 hash to sort names [ 1259.731702][T16891] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1260.980591][T16906] loop1: detected capacity change from 0 to 8192 [ 1261.072079][T16906] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1261.085339][T16906] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1261.094729][T16906] REISERFS (device loop1): using ordered data mode [ 1261.101216][T16906] reiserfs: using flush barriers [ 1261.117125][T16906] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1261.133703][T16906] REISERFS (device loop1): checking transaction log (loop1) [ 1261.143699][T16906] REISERFS (device loop1): Using r5 hash to sort names [ 1261.150739][T16906] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1261.830706][T16904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1263.948762][T16934] vivid-002: ================= START STATUS ================= [ 1263.956524][T16934] vivid-002: Radio HW Seek Mode: Bounded [ 1263.962318][T16934] vivid-002: Radio Programmable HW Seek: false [ 1263.968654][T16934] vivid-002: RDS Rx I/O Mode: Block I/O [ 1263.974339][T16934] vivid-002: Generate RBDS Instead of RDS: false [ 1263.980848][T16934] vivid-002: RDS Reception: true [ 1263.985889][T16934] vivid-002: RDS Program Type: 0 inactive [ 1263.991714][T16934] vivid-002: RDS PS Name: inactive [ 1263.997066][T16934] vivid-002: RDS Radio Text: inactive [ 1264.002663][T16934] vivid-002: RDS Traffic Announcement: false inactive [ 1264.009561][T16934] vivid-002: RDS Traffic Program: false inactive [ 1264.016041][T16934] vivid-002: RDS Music: false inactive [ 1264.021719][T16934] vivid-002: ================== END STATUS ================== [ 1266.058864][T16956] loop2: detected capacity change from 0 to 8192 [ 1266.117191][T16956] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1266.130983][T16956] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1266.140345][T16956] REISERFS (device loop2): using ordered data mode [ 1266.146947][T16956] reiserfs: using flush barriers [ 1266.162141][T16956] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1266.178888][T16956] REISERFS (device loop2): checking transaction log (loop2) [ 1266.194405][T16956] REISERFS (device loop2): Using r5 hash to sort names [ 1266.201581][T16956] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1267.566049][T16971] loop4: detected capacity change from 0 to 8192 [ 1267.628404][T16971] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1267.642596][T16971] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1267.651842][T16971] REISERFS (device loop4): using ordered data mode [ 1267.658422][T16971] reiserfs: using flush barriers [ 1267.668473][T16971] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1267.685166][T16971] REISERFS (device loop4): checking transaction log (loop4) [ 1267.694708][T16971] REISERFS (device loop4): Using r5 hash to sort names [ 1267.701927][T16971] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1268.205348][T16984] vivid-000: ================= START STATUS ================= [ 1268.213288][T16984] vivid-000: Radio HW Seek Mode: Bounded [ 1268.219365][T16984] vivid-000: Radio Programmable HW Seek: false [ 1268.225990][T16984] vivid-000: RDS Rx I/O Mode: Block I/O [ 1268.231934][T16984] vivid-000: Generate RBDS Instead of RDS: false [ 1268.238682][T16984] vivid-000: RDS Reception: true [ 1268.244008][T16984] vivid-000: RDS Program Type: 0 inactive [ 1268.250179][T16984] vivid-000: RDS PS Name: inactive [ 1268.255981][T16984] vivid-000: RDS Radio Text: inactive [ 1268.261936][T16984] vivid-000: RDS Traffic Announcement: false inactive [ 1268.269241][T16984] vivid-000: RDS Traffic Program: false inactive [ 1268.276084][T16984] vivid-000: RDS Music: false inactive [ 1268.282068][T16984] vivid-000: ================== END STATUS ================== [ 1268.551831][ T125] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1269.718369][T16997] loop3: detected capacity change from 0 to 8192 [ 1269.839318][T16997] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1269.852490][T16997] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1269.861707][T16997] REISERFS (device loop3): using ordered data mode [ 1269.868272][T16997] reiserfs: using flush barriers [ 1269.880119][T16997] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1269.897008][T16997] REISERFS (device loop3): checking transaction log (loop3) [ 1269.909688][T16997] REISERFS (device loop3): Using r5 hash to sort names [ 1269.917419][T16997] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1270.042354][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 1270.049989][ T125] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1270.066826][ T125] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1270.184822][ T125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1270.194060][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1270.204152][ T125] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1270.214115][ T125] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102 [ 1270.224842][ T125] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1270.245976][ T125] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1270.276469][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.131589][ T125] usb 2-1: config 0 descriptor?? [ 1271.204862][ T125] usb 2-1: can't set config #0, error -71 [ 1271.221255][ T125] usb 2-1: USB disconnect, device number 7 [ 1271.281393][T17015] device syzkaller1 entered promiscuous mode [ 1273.641493][T17032] vivid-003: ================= START STATUS ================= [ 1273.649263][T17032] vivid-003: Radio HW Seek Mode: Bounded [ 1273.655058][T17032] vivid-003: Radio Programmable HW Seek: false [ 1273.661349][T17032] vivid-003: RDS Rx I/O Mode: Block I/O [ 1273.667043][T17032] vivid-003: Generate RBDS Instead of RDS: false [ 1273.673523][T17032] vivid-003: RDS Reception: true [ 1273.678577][T17032] vivid-003: RDS Program Type: 0 inactive [ 1273.684478][T17032] vivid-003: RDS PS Name: inactive [ 1273.690079][T17032] vivid-003: RDS Radio Text: inactive [ 1273.695727][T17032] vivid-003: RDS Traffic Announcement: false inactive [ 1273.702679][T17032] vivid-003: RDS Traffic Program: false inactive [ 1273.709222][T17032] vivid-003: RDS Music: false inactive [ 1273.744600][T17032] vivid-003: ================== END STATUS ================== [ 1276.152351][T17035] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1277.029339][T17050] loop1: detected capacity change from 0 to 8192 [ 1277.120105][T17050] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1277.212356][T17050] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1277.254824][T17050] REISERFS (device loop1): using ordered data mode [ 1277.331426][T17050] reiserfs: using flush barriers [ 1277.336801][ T4462] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1277.484795][T17050] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1277.532334][ T4462] usb 3-1: Using ep0 maxpacket: 32 [ 1277.555326][ T4462] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1277.649883][ T4462] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1277.761227][ T4462] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1277.896900][ T4462] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1278.019013][T17050] REISERFS (device loop1): checking transaction log (loop1) [ 1278.051276][ T4462] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1278.221164][ T4462] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102 [ 1278.349007][T17050] REISERFS (device loop1): Using r5 hash to sort names [ 1278.391749][ T4462] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1278.630021][ T4462] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1278.788800][T17050] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1278.815588][ T4462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.110280][ T4462] usb 3-1: config 0 descriptor?? [ 1279.233245][T17065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1279.265984][T17075] loop4: detected capacity change from 0 to 2048 [ 1279.331251][T17075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1279.342000][T17075] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.461011][ T4462] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1279.687201][ C1] usblp0: nonzero read bulk status received: -71 [ 1279.719817][ T4462] usb 3-1: USB disconnect, device number 11 [ 1279.740696][ T4462] usblp0: removed [ 1280.815211][T17088] vivid-004: ================= START STATUS ================= [ 1280.966452][T17088] vivid-004: Radio HW Seek Mode: Bounded [ 1281.050330][T17101] loop1: detected capacity change from 0 to 8192 [ 1281.058574][T17088] vivid-004: Radio Programmable HW Seek: false [ 1281.760717][T17101] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1281.774054][T17101] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1281.783350][T17101] REISERFS (device loop1): using ordered data mode [ 1281.789880][T17101] reiserfs: using flush barriers [ 1281.824157][T17101] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1281.840990][T17101] REISERFS (device loop1): checking transaction log (loop1) [ 1281.859773][T17101] REISERFS (device loop1): Using r5 hash to sort names [ 1281.867572][T17101] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1281.999679][T17088] vivid-004: RDS Rx I/O Mode: Block I/O [ 1282.052085][T17088] vivid-004: Generate RBDS Instead of RDS: false [ 1282.082532][T17088] vivid-004: RDS Reception: true [ 1282.087625][T17088] vivid-004: RDS Program Type: 0 inactive [ 1282.116396][T17088] vivid-004: RDS PS Name: inactive [ 1282.122126][T17088] vivid-004: RDS Radio Text: inactive [ 1282.127644][T17088] vivid-004: RDS Traffic Announcement: false inactive [ 1282.134553][T17088] vivid-004: RDS Traffic Program: false inactive [ 1282.148821][T17088] vivid-004: RDS Music: false inactive [ 1282.157411][T17088] vivid-004: ================== END STATUS ================== [ 1283.734897][T17127] device syzkaller0 entered promiscuous mode [ 1284.311569][T17108] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1284.836313][T17134] loop1: detected capacity change from 0 to 8192 [ 1285.079623][T17134] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1285.179441][T17134] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1285.189401][T17134] REISERFS (device loop1): using ordered data mode [ 1285.196709][T17134] reiserfs: using flush barriers [ 1285.204257][T17134] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1285.222823][T17134] REISERFS (device loop1): checking transaction log (loop1) [ 1285.224505][T17148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3430'. [ 1285.232460][T15028] EXT4-fs (loop4): unmounting filesystem. [ 1285.246544][T17134] REISERFS (device loop1): Using r5 hash to sort names [ 1285.254028][T17134] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1285.643154][T17156] Bluetooth: MGMT ver 1.22 [ 1285.647659][T17156] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 1287.747833][T17175] loop3: detected capacity change from 0 to 40427 [ 1287.847274][T17175] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 1287.858209][T17175] F2FS-fs (loop3): invalid crc value [ 1287.952951][T17175] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1288.079088][T17175] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1288.236842][T17181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1288.421731][T16144] syz-executor: attempt to access beyond end of device [ 1288.421731][T16144] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1288.659390][T17184] loop4: detected capacity change from 0 to 8192 [ 1288.842376][T17184] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1289.022150][T17184] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1289.211878][T17184] REISERFS (device loop4): using ordered data mode [ 1289.613265][T17184] reiserfs: using flush barriers [ 1289.945116][T17184] REISERFS warning (device loop4): journal-1256 journal_init: unable to get memory for journal structure [ 1290.961590][T17201] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1291.295838][T17233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1291.371934][T17231] loop3: detected capacity change from 0 to 8192 [ 1291.399443][T17231] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1291.420835][T17231] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1291.430719][T17231] REISERFS (device loop3): using ordered data mode [ 1291.455473][T17235] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1291.459076][T17231] reiserfs: using flush barriers [ 1291.493870][T17231] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1291.591957][T17231] REISERFS (device loop3): checking transaction log (loop3) [ 1291.706015][T17231] REISERFS (device loop3): Using r5 hash to sort names [ 1291.783106][T17231] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1293.522592][T17279] loop2: detected capacity change from 0 to 8192 [ 1293.705434][T17279] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1293.840019][T17279] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1294.272255][T17279] REISERFS (device loop2): using ordered data mode [ 1294.478666][T17279] reiserfs: using flush barriers [ 1294.691020][T17279] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1294.749630][T17279] REISERFS (device loop2): checking transaction log (loop2) [ 1294.800428][T17279] REISERFS (device loop2): Using r5 hash to sort names [ 1294.812971][T17279] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1295.921483][T17292] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1297.413017][T17331] trusted_key: encrypted_key: insufficient parameters specified [ 1299.595117][T17335] loop1: detected capacity change from 0 to 40427 [ 1299.607948][T17335] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 1299.626475][T17335] F2FS-fs (loop1): invalid crc value [ 1299.682258][T17335] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1299.788132][T17335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1300.072258][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.078652][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.087296][T14144] syz-executor: attempt to access beyond end of device [ 1300.087296][T14144] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1300.338434][T17355] loop2: detected capacity change from 0 to 8192 [ 1300.451583][T17355] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1300.530031][T17355] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1300.618312][T17355] REISERFS (device loop2): using ordered data mode [ 1300.664660][T17355] reiserfs: using flush barriers [ 1300.720378][T17355] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1300.798357][T17355] REISERFS (device loop2): checking transaction log (loop2) [ 1300.843546][T17355] REISERFS (device loop2): Using r5 hash to sort names [ 1300.872113][T17355] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1301.171235][T17369] loop4: detected capacity change from 0 to 8192 [ 1301.512276][T17369] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1301.958391][T17369] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1302.023317][T17369] REISERFS (device loop4): using ordered data mode [ 1302.113521][T17369] reiserfs: using flush barriers [ 1302.198392][T17369] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1302.377163][T17369] REISERFS (device loop4): checking transaction log (loop4) [ 1302.385776][T17369] REISERFS (device loop4): Using r5 hash to sort names [ 1302.393168][T17369] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1303.980041][T17376] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1308.338550][T17446] loop3: detected capacity change from 0 to 8192 [ 1310.870118][T17464] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1312.335707][T15074] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1315.902886][T17539] loop1: detected capacity change from 0 to 8188 [ 1315.966120][T17539] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1316.008023][T17539] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1316.013677][T17536] loop2: detected capacity change from 0 to 8192 [ 1316.084785][T17536] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1316.280923][T17536] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1316.389749][T17536] REISERFS (device loop2): using ordered data mode [ 1316.396853][T17536] reiserfs: using flush barriers [ 1316.406801][T17536] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1316.637130][T17536] REISERFS (device loop2): checking transaction log (loop2) [ 1316.950640][T17531] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1317.138023][T17536] REISERFS (device loop2): Using r5 hash to sort names [ 1317.258412][T17536] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1317.504822][T17565] device syzkaller0 entered promiscuous mode [ 1320.889953][T17598] loop1: detected capacity change from 0 to 8192 [ 1321.484606][T17598] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1321.497908][T17598] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1321.507429][T17598] REISERFS (device loop1): using ordered data mode [ 1321.514206][T17598] reiserfs: using flush barriers [ 1321.520489][T17598] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1321.537898][T17598] REISERFS (device loop1): checking transaction log (loop1) [ 1321.546662][T17598] REISERFS (device loop1): Using r5 hash to sort names [ 1321.553910][T17598] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1321.585183][T17594] block device autoloading is deprecated and will be removed. [ 1323.849809][ T4462] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1324.059517][ T4462] usb 5-1: Using ep0 maxpacket: 8 [ 1324.073550][ T4462] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1324.083183][ T4462] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1324.092036][ T4462] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1324.229405][T17620] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1324.364005][ T4462] usb 5-1: config 250 has no interface number 0 [ 1324.405254][ T4462] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1324.476689][ T4462] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1324.504987][ T4462] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1324.533926][ T4462] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1324.544991][ T4462] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1324.614686][ T4462] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1324.638379][ T4462] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1324.651725][ T4462] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1324.660627][ T4462] usb 5-1: Product: syz [ 1324.665910][ T4462] usb 5-1: SerialNumber: syz [ 1324.680418][ T4462] hub 5-1:250.228: bad descriptor, ignoring hub [ 1324.686782][ T4462] hub: probe of 5-1:250.228 failed with error -5 [ 1324.905456][ T4462] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1327.063019][T17665] loop3: detected capacity change from 0 to 8192 [ 1327.143106][T17667] loop2: detected capacity change from 0 to 8192 [ 1327.266834][T17667] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1327.280364][T17667] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1327.290057][T17667] REISERFS (device loop2): using ordered data mode [ 1327.296616][T17667] reiserfs: using flush barriers [ 1327.312627][T17667] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1327.334275][T17667] REISERFS (device loop2): checking transaction log (loop2) [ 1327.349760][T17667] REISERFS (device loop2): Using r5 hash to sort names [ 1327.358218][T17667] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1327.411182][T17665] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1327.424715][T17665] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1327.434426][T17665] REISERFS (device loop3): using ordered data mode [ 1327.441105][T17665] reiserfs: using flush barriers [ 1327.457574][T17665] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1327.476609][T17665] REISERFS (device loop3): checking transaction log (loop3) [ 1327.494084][T17665] REISERFS (device loop3): Using r5 hash to sort names [ 1327.503122][T17665] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1328.470251][T17684] o2cb: This node has not been configured. [ 1328.476231][T17684] o2cb: Cluster check failed. Fix errors before retrying. [ 1328.483845][T17684] (syz.0.3575,17684,0):user_dlm_register:674 ERROR: status = -22 [ 1328.492320][T17684] (syz.0.3575,17684,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1329.299642][T17692] md: could not open device unknown-block(0,0). [ 1329.308178][T17692] md: md_import_device returned -6 [ 1329.339019][ T33] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1329.616454][T17698] loop2: detected capacity change from 0 to 40427 [ 1329.630921][T17698] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 1329.640149][T17698] F2FS-fs (loop2): invalid crc value [ 1329.659078][ T33] usb 4-1: Using ep0 maxpacket: 8 [ 1329.666032][T17698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1329.690925][ T33] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1329.702477][T17698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1329.729476][ T33] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1329.748225][ T33] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1329.759134][ T33] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1329.791946][ T33] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1329.808090][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.938810][T17705] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3586'. [ 1330.060166][ T33] usb 4-1: GET_CAPABILITIES returned 0 [ 1330.065707][ T33] usbtmc 4-1:16.0: can't read capabilities [ 1331.009133][ T128] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1331.234481][ T128] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1331.261524][ T128] usb 3-1: not running at top speed; connect to a high speed hub [ 1331.351278][ T128] usb 3-1: config 5 has an invalid interface number: 42 but max is 0 [ 1331.402366][ T128] usb 3-1: config 5 has an invalid descriptor of length 22, skipping remainder of the config [ 1331.467400][ T128] usb 3-1: config 5 has no interface number 0 [ 1331.503965][ T128] usb 3-1: config 5 interface 42 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1331.571853][ T128] usb 3-1: config 5 interface 42 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1331.664926][ T128] usb 3-1: config 5 interface 42 has no altsetting 0 [ 1331.690755][ T128] usb 3-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=55.8c [ 1331.700090][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.708133][ T128] usb 3-1: Product: syz [ 1331.712819][ T128] usb 3-1: Manufacturer: syz [ 1331.717484][ T128] usb 3-1: SerialNumber: syz [ 1331.876040][ T4462] usb 5-1: USB disconnect, device number 9 [ 1331.893105][ T33] usb 4-1: USB disconnect, device number 19 [ 1331.934938][ T128] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 1331.971499][ T4462] usblp0: removed [ 1332.008412][ T128] usb 3-1: USB disconnect, device number 12 [ 1332.972527][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 1333.721526][T17732] overlayfs: failed to resolve './file0': -2 [ 1333.799547][T14669] syz-executor: attempt to access beyond end of device [ 1333.799547][T14669] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1334.404643][T17750] bond1: option mode: unable to set because the bond device has slaves [ 1334.874261][T17750] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1336.657240][T17788] o2cb: This node has not been configured. [ 1336.663345][T17788] o2cb: Cluster check failed. Fix errors before retrying. [ 1336.890492][T17789] trusted_key: encrypted_key: insufficient parameters specified [ 1336.938592][T17788] (syz.2.3596,17788,0):user_dlm_register:674 ERROR: status = -22 [ 1336.947798][T17788] (syz.2.3596,17788,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1338.714651][T17809] bond1: option mode: unable to set because the bond device has slaves [ 1338.797362][T17809] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1338.861734][T17812] fuse: Bad value for 'fd' [ 1341.295248][T17844] o2cb: This node has not been configured. [ 1341.301246][T17844] o2cb: Cluster check failed. Fix errors before retrying. [ 1341.308476][T17844] (syz.2.3621,17844,0):user_dlm_register:674 ERROR: status = -22 [ 1341.316307][T17844] (syz.2.3621,17844,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1342.548302][ T33] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1342.738393][ T33] usb 2-1: Using ep0 maxpacket: 8 [ 1342.746636][ T33] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1342.764544][ T33] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1342.782610][ T33] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1342.792229][ T33] usb 2-1: config 250 has no interface number 0 [ 1342.798906][ T33] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1342.811273][ T33] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1342.822670][ T33] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1342.833512][ T33] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1342.844364][ T33] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1342.858578][ T33] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1342.868220][T17837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1342.879087][ T33] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1342.888425][ T33] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1342.896785][ T33] usb 2-1: Product: syz [ 1342.901496][ T33] usb 2-1: SerialNumber: syz [ 1342.915716][ T33] hub 2-1:250.228: bad descriptor, ignoring hub [ 1342.922424][ T33] hub: probe of 2-1:250.228 failed with error -5 [ 1343.124244][ T33] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1344.890796][T17863] loop3: detected capacity change from 0 to 32768 [ 1344.957969][T17865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1344.977391][T17865] device bond_slave_0 entered promiscuous mode [ 1344.983696][T17865] device bond_slave_1 entered promiscuous mode [ 1344.990507][T17865] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1344.999367][T17865] bond3: (slave macvlan3): Enslaving as a backup interface with an up link [ 1345.157065][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1345.234010][T17856] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 1346.708346][T15676] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1346.938287][T15676] usb 5-1: Using ep0 maxpacket: 16 [ 1346.950303][T15676] usb 5-1: config 0 has no interfaces? [ 1347.000688][T15676] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1347.065989][T15676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.094921][T15676] usb 5-1: config 0 descriptor?? [ 1347.224298][T17887] netlink: 'syz.2.3638': attribute type 3 has an invalid length. [ 1347.232200][T17887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3638'. [ 1347.241585][T17887] ------------[ cut here ]------------ [ 1347.247124][T17887] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:854 (size 16) [ 1347.262542][T17887] WARNING: CPU: 1 PID: 17887 at net/sched/cls_u32.c:854 u32_change+0x1dfc/0x27e0 [ 1347.271801][T17887] Modules linked in: [ 1347.275842][T17887] CPU: 1 PID: 17887 Comm: syz.2.3638 Not tainted syzkaller #0 [ 1347.283526][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1347.293780][T17887] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 1347.299160][T17887] Code: f9 eb 59 e8 76 fc 1e f9 c6 05 5b fb a7 05 01 b9 10 00 00 00 48 c7 c7 a0 90 8e 8b 4c 89 fe 48 c7 c2 20 91 8e 8b e8 64 6d ea f8 <0f> 0b e9 ff ee ff ff e8 48 fc 1e f9 eb 24 e8 41 fc 1e f9 c6 05 d6 [ 1347.318864][T17887] RSP: 0018:ffffc90003126e40 EFLAGS: 00010246 [ 1347.324961][T17887] RAX: 4e36fefaa0acfd00 RBX: ffff888031c2d2e0 RCX: 0000000000080000 [ 1347.333015][T17887] RDX: ffffc9001cc00000 RSI: 000000000000b69b RDI: 000000000000b69c [ 1347.341068][T17887] RBP: ffffc90003126ff8 R08: ffffc90003126ac7 R09: 1ffff92000624d58 [ 1347.349116][T17887] R10: dffffc0000000000 R11: fffff52000624d59 R12: 0000000000000000 [ 1347.357110][T17887] R13: dffffc0000000000 R14: ffff888031c2d600 R15: 0000000000000020 [ 1347.365178][T17887] FS: 00007f4304c0d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1347.374194][T17887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1347.380880][T17887] CR2: 00007f005bf90ff8 CR3: 000000007b581000 CR4: 00000000003506e0 [ 1347.389097][T17887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1347.397186][T17887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1347.405517][T17887] Call Trace: [ 1347.408868][T17887] [ 1347.411833][T17887] ? u32_get+0x370/0x370 [ 1347.416118][T17887] tc_new_tfilter+0xf29/0x1770 [ 1347.420963][T17887] ? kmem_cache_free+0xf7/0x290 [ 1347.425935][T17887] ? nlmon_xmit+0xac/0xf0 [ 1347.430338][T17887] ? dev_hard_start_xmit+0x262/0x870 [ 1347.435667][T17887] ? tcf_proto_signal_destroying+0x240/0x240 [ 1347.441720][T17887] ? rcu_read_unlock+0x8c/0xa0 [ 1347.446520][T17887] ? tcf_proto_signal_destroying+0x240/0x240 [ 1347.452574][T17887] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1347.457708][T17887] ? tcf_proto_signal_destroying+0x240/0x240 [ 1347.463752][T17887] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 1347.468756][T17887] ? rtnetlink_bind+0x80/0x80 [ 1347.473457][T17887] ? __local_bh_enable_ip+0x136/0x1c0 [ 1347.478885][T17887] ? lockdep_hardirqs_on+0x94/0x140 [ 1347.484099][T17887] ? __local_bh_enable_ip+0x136/0x1c0 [ 1347.489533][T17887] ? _local_bh_enable+0xa0/0xa0 [ 1347.494404][T17887] ? __dev_queue_xmit+0x26b/0x37c0 [ 1347.499664][T17887] ? __dev_queue_xmit+0x26b/0x37c0 [ 1347.504791][T17887] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1347.510091][T17887] ? __dev_queue_xmit+0x26b/0x37c0 [ 1347.515242][T17887] ? ref_tracker_free+0x68c/0x840 [ 1347.520352][T17887] ? __copy_skb_header+0x3ba/0x4f0 [ 1347.525513][T17887] ? refcount_inc+0x70/0x70 [ 1347.530110][T17887] ? memcpy+0x3c/0x60 [ 1347.534135][T17887] ? __copy_skb_header+0x3ba/0x4f0 [ 1347.539327][T17887] ? __skb_clone+0x480/0x790 [ 1347.543950][T17887] netlink_rcv_skb+0x1fb/0x450 [ 1347.548780][T17887] ? rtnetlink_bind+0x80/0x80 [ 1347.553485][T17887] ? netlink_ack+0x1170/0x1170 [ 1347.558415][T17887] ? netlink_deliver_tap+0x2e/0x1b0 [ 1347.563645][T17887] netlink_unicast+0x74d/0x8d0 [ 1347.568500][T17887] netlink_sendmsg+0x8ad/0xbd0 [ 1347.573304][T17887] ? netlink_getsockopt+0x550/0x550 [ 1347.578575][T17887] ? aa_sock_msg_perm+0x94/0x150 [ 1347.583536][T17887] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1347.588892][T17887] ? security_socket_sendmsg+0x7c/0xa0 [ 1347.594378][T17887] ? netlink_getsockopt+0x550/0x550 [ 1347.599640][T17887] ____sys_sendmsg+0x5be/0x970 [ 1347.604442][T17887] ? __sys_sendmsg_sock+0x30/0x30 [ 1347.609616][T17887] ? __import_iovec+0x315/0x500 [ 1347.614498][T17887] ? import_iovec+0x6f/0xa0 [ 1347.619071][T17887] ___sys_sendmsg+0x2a2/0x360 [ 1347.623786][T17887] ? preempt_schedule+0xbc/0xd0 [ 1347.628804][T17887] ? __sys_sendmsg+0x290/0x290 [ 1347.633685][T17887] __sys_sendmmsg+0x2c3/0x510 [ 1347.638428][T17887] ? __ia32_sys_sendmsg+0x80/0x80 [ 1347.642259][ T14] usb 5-1: USB disconnect, device number 10 [ 1347.643466][T17887] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1347.655543][T17887] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1347.661706][T17887] ? lock_chain_count+0x20/0x20 [ 1347.666602][T17887] __x64_sys_sendmmsg+0x9c/0xb0 [ 1347.671558][T17887] do_syscall_64+0x4c/0xa0 [ 1347.676034][T17887] ? clear_bhb_loop+0x60/0xb0 [ 1347.680780][T17887] ? clear_bhb_loop+0x60/0xb0 [ 1347.685493][T17887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.691455][T17887] RIP: 0033:0x7f4303d9c799 [ 1347.695901][T17887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.715749][T17887] RSP: 002b:00007f4304c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1347.724263][T17887] RAX: ffffffffffffffda RBX: 00007f4304015fa0 RCX: 00007f4303d9c799 [ 1347.732327][T17887] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1347.740409][T17887] RBP: 00007f4303e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1347.748483][T17887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.756481][T17887] R13: 00007f4304016038 R14: 00007f4304015fa0 R15: 00007fff5baa3838 [ 1347.764578][T17887] [ 1347.767621][T17887] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1347.774906][T17887] CPU: 1 PID: 17887 Comm: syz.2.3638 Not tainted syzkaller #0 [ 1347.782369][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1347.792445][T17887] Call Trace: [ 1347.795726][T17887] [ 1347.798652][T17887] dump_stack_lvl+0x188/0x24e [ 1347.803416][T17887] ? memcpy+0x3c/0x60 [ 1347.807409][T17887] ? show_regs_print_info+0x12/0x12 [ 1347.812608][T17887] ? load_image+0x400/0x400 [ 1347.817117][T17887] panic+0x2e5/0x730 [ 1347.821017][T17887] ? bpf_jit_dump+0xd0/0xd0 [ 1347.825527][T17887] __warn+0x2f8/0x4f0 [ 1347.829560][T17887] ? u32_change+0x1dfc/0x27e0 [ 1347.834405][T17887] ? u32_change+0x1dfc/0x27e0 [ 1347.839168][T17887] report_bug+0x2ba/0x4f0 [ 1347.843497][T17887] ? u32_change+0x1dfc/0x27e0 [ 1347.848181][T17887] handle_bug+0x3a/0x70 [ 1347.852334][T17887] exc_invalid_op+0x16/0x40 [ 1347.856919][T17887] asm_exc_invalid_op+0x16/0x20 [ 1347.861762][T17887] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 1347.867040][T17887] Code: f9 eb 59 e8 76 fc 1e f9 c6 05 5b fb a7 05 01 b9 10 00 00 00 48 c7 c7 a0 90 8e 8b 4c 89 fe 48 c7 c2 20 91 8e 8b e8 64 6d ea f8 <0f> 0b e9 ff ee ff ff e8 48 fc 1e f9 eb 24 e8 41 fc 1e f9 c6 05 d6 [ 1347.886808][T17887] RSP: 0018:ffffc90003126e40 EFLAGS: 00010246 [ 1347.892867][T17887] RAX: 4e36fefaa0acfd00 RBX: ffff888031c2d2e0 RCX: 0000000000080000 [ 1347.900828][T17887] RDX: ffffc9001cc00000 RSI: 000000000000b69b RDI: 000000000000b69c [ 1347.908964][T17887] RBP: ffffc90003126ff8 R08: ffffc90003126ac7 R09: 1ffff92000624d58 [ 1347.916924][T17887] R10: dffffc0000000000 R11: fffff52000624d59 R12: 0000000000000000 [ 1347.924884][T17887] R13: dffffc0000000000 R14: ffff888031c2d600 R15: 0000000000000020 [ 1347.932866][T17887] ? u32_get+0x370/0x370 [ 1347.937119][T17887] tc_new_tfilter+0xf29/0x1770 [ 1347.941873][T17887] ? kmem_cache_free+0xf7/0x290 [ 1347.946801][T17887] ? nlmon_xmit+0xac/0xf0 [ 1347.951128][T17887] ? dev_hard_start_xmit+0x262/0x870 [ 1347.956686][T17887] ? tcf_proto_signal_destroying+0x240/0x240 [ 1347.962750][T17887] ? rcu_read_unlock+0x8c/0xa0 [ 1347.967515][T17887] ? tcf_proto_signal_destroying+0x240/0x240 [ 1347.973574][T17887] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1347.978683][T17887] ? tcf_proto_signal_destroying+0x240/0x240 [ 1347.984741][T17887] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 1347.989682][T17887] ? rtnetlink_bind+0x80/0x80 [ 1347.994349][T17887] ? __local_bh_enable_ip+0x136/0x1c0 [ 1347.999713][T17887] ? lockdep_hardirqs_on+0x94/0x140 [ 1348.004989][T17887] ? __local_bh_enable_ip+0x136/0x1c0 [ 1348.010349][T17887] ? _local_bh_enable+0xa0/0xa0 [ 1348.015288][T17887] ? __dev_queue_xmit+0x26b/0x37c0 [ 1348.020388][T17887] ? __dev_queue_xmit+0x26b/0x37c0 [ 1348.025496][T17887] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1348.030695][T17887] ? __dev_queue_xmit+0x26b/0x37c0 [ 1348.035801][T17887] ? ref_tracker_free+0x68c/0x840 [ 1348.040820][T17887] ? __copy_skb_header+0x3ba/0x4f0 [ 1348.045927][T17887] ? refcount_inc+0x70/0x70 [ 1348.050425][T17887] ? memcpy+0x3c/0x60 [ 1348.054404][T17887] ? __copy_skb_header+0x3ba/0x4f0 [ 1348.059513][T17887] ? __skb_clone+0x480/0x790 [ 1348.064107][T17887] netlink_rcv_skb+0x1fb/0x450 [ 1348.068872][T17887] ? rtnetlink_bind+0x80/0x80 [ 1348.073631][T17887] ? netlink_ack+0x1170/0x1170 [ 1348.078394][T17887] ? netlink_deliver_tap+0x2e/0x1b0 [ 1348.083587][T17887] netlink_unicast+0x74d/0x8d0 [ 1348.088357][T17887] netlink_sendmsg+0x8ad/0xbd0 [ 1348.093143][T17887] ? netlink_getsockopt+0x550/0x550 [ 1348.098333][T17887] ? aa_sock_msg_perm+0x94/0x150 [ 1348.103270][T17887] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1348.108545][T17887] ? security_socket_sendmsg+0x7c/0xa0 [ 1348.113999][T17887] ? netlink_getsockopt+0x550/0x550 [ 1348.119189][T17887] ____sys_sendmsg+0x5be/0x970 [ 1348.123959][T17887] ? __sys_sendmsg_sock+0x30/0x30 [ 1348.128983][T17887] ? __import_iovec+0x315/0x500 [ 1348.133854][T17887] ? import_iovec+0x6f/0xa0 [ 1348.138350][T17887] ___sys_sendmsg+0x2a2/0x360 [ 1348.143040][T17887] ? preempt_schedule+0xbc/0xd0 [ 1348.147913][T17887] ? __sys_sendmsg+0x290/0x290 [ 1348.152713][T17887] __sys_sendmmsg+0x2c3/0x510 [ 1348.157410][T17887] ? __ia32_sys_sendmsg+0x80/0x80 [ 1348.162532][T17887] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1348.168517][T17887] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1348.174600][T17887] ? lock_chain_count+0x20/0x20 [ 1348.179449][T17887] __x64_sys_sendmmsg+0x9c/0xb0 [ 1348.184299][T17887] do_syscall_64+0x4c/0xa0 [ 1348.188708][T17887] ? clear_bhb_loop+0x60/0xb0 [ 1348.193373][T17887] ? clear_bhb_loop+0x60/0xb0 [ 1348.198126][T17887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.204029][T17887] RIP: 0033:0x7f4303d9c799 [ 1348.208433][T17887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.228307][T17887] RSP: 002b:00007f4304c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1348.236718][T17887] RAX: ffffffffffffffda RBX: 00007f4304015fa0 RCX: 00007f4303d9c799 [ 1348.244680][T17887] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1348.252654][T17887] RBP: 00007f4303e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1348.260961][T17887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.268920][T17887] R13: 00007f4304016038 R14: 00007f4304015fa0 R15: 00007fff5baa3838 [ 1348.276901][T17887] [ 1348.280246][T17887] Kernel Offset: disabled [ 1348.284677][T17887] Rebooting in 86400 seconds..