last executing test programs: 55.153640634s ago: executing program 1 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635f, 0x5, 0xffffffff, 0x2006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 54.857016443s ago: executing program 3 (id=4): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dmm32at\x00', [0x4f2b, 0x9, 0x2, 0x80003, 0x5, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0x8bb7, 0x1, 0x7fffffff, 0x0, 0x7, 0x1a44c, 0x3ff, 0x40000003, 0x99, 0xcaaa, 0x0, 0x20001e57, 0x7, 0xe67, 0x4002, 0xd0, 0x2, 0x1, 0xfcc]}) 54.718543467s ago: executing program 3 (id=7): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file2\x00', 0x0) 54.162091542s ago: executing program 3 (id=8): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000180)={[{@mb_optimize_scan}, {@init_itable}, {@dax_inode}, {@grpquota}, {@init_itable}]}, 0x26, 0x74b, &(0x7f00000002c0)="$eJzs3M1rHGUYAPBnptmmH9GNIPhxElpooXSSNJf21PTirVAoeK0hmYSQSTZkN7UbC7aeBW0uCoKoZ/8FodQ/wGtBwbsgWuNBvKzM5qM0ZrfbJulK+vvBZJ73nY/nfbLDmx3ITAAvrXfKH0nEUERci4jqZn8aEUfb0bGIOxv7rT+6PVUuSbRa139PysNivVXdPleyuT4Z7UPizYh4UIk49/F/89abq/OTRZEvb7ZHGgtLI/Xm6vm5hcnZfDZfHBu/NHpxfPzi6PhTa3ijx1pPv3fp+L0f311bq2z1TLTrjs3aejzNM9n4nVRiYkf/4kEk66Ok3wMAAKAn5ff8IxEx0P6WWo0j7QgAAAA4TFqDLQAAAODQS6LfIwAAAAAO1tb/AWw923tQz8F28tuViBjeLf9A+xniiGNRiYgT68kTTyYkG4fBnty5GxH3J3Zef9+WV9idPZ57dEf7yWekj+7x7OyH+1farwHYZf5Jt+ef2GX+Gdh6d8IedZ7/Huc/0mH+u9Zjju+/eqvSMf/diLcHdsufbOdPOuR/v8f8n659cq/TttY3EWd2/fuTPJGry/shJmbmiq6vH3jwz9mH3eo/0Sl/0r3+pR7r/3D9z/lOc0mZ/+yp7p//bvnLa+KzzXGkEXFvc12213bkOLXw0w/d6p+OaD3P5/91j/X/8t3grR53BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLY0IoYiSbPtOE2zLOJkRLweJ9KiVm+cm6mtLE6X2yKGo5LOzBX5aERUN9pJ2R5rx4/bF3a0xyPitZ+PbySdK/JsqlZM97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtp2MiKFI0iwi0oj4q5qmWRYx0MOxgy9gfAAAAMA+Ge73AAAAAIAD5/4fAAAADr/nvf9P9nkcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKF27erVcmmtP7o9VbanbzZX5ms3z0/n9flsYWUqm6otL2WztdpskWdTtYWnna+o1ZbGLsXKrZFGXm+M1JurNxZqK4uNG3MLk7P5jbzyQqoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWQ21lyTNIiJtx2maZRGvRMRwVJKZuSIfjYhXI+JhtTJYtsf6PWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2Xb25Oj9ZFPmyQCB4YcFHEfE/GEaXoN8zEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/VBvrs5PFkW+XO/3SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiv9NckIsrlTPX00M6tR5O/q+11RHzw5fXPb002GstjZf8f2/2NLzb7L/Rj/AAAAPBSuPwsO2/dp2/dxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSq3lydnyyKfHlvweVorraSDvv0u0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5/BsAAP//fgnEYA==") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x107041, 0x118) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.118574687s ago: executing program 1 (id=9): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 53.797757699s ago: executing program 1 (id=10): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 53.456875053s ago: executing program 1 (id=11): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 52.2819086s ago: executing program 1 (id=18): mount$cgroup(0x0, 0x0, 0x0, 0x812, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xa100}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) 51.309956667s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 50.764043502s ago: executing program 32 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 50.727222616s ago: executing program 3 (id=26): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC], 0x0) 50.270562951s ago: executing program 33 (id=26): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC], 0x0) 7.097388071s ago: executing program 2 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2ac}}, 0x0) 6.831009798s ago: executing program 2 (id=217): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 5.09899935s ago: executing program 2 (id=224): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) 4.833518897s ago: executing program 2 (id=227): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.565083274s ago: executing program 0 (id=229): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4.059673624s ago: executing program 4 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x140, 0xf0, 0x1, @discrete={0x7fff, 0xfff}}) 3.829171187s ago: executing program 0 (id=234): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) io_setup(0x7f, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.776826892s ago: executing program 4 (id=235): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 3.333274397s ago: executing program 0 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) write$binfmt_script(r0, &(0x7f0000001980)={'#! ', './file0'}, 0xb) 2.809849839s ago: executing program 0 (id=238): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd61", 0x51, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000150288000600cd"], 0x44}}, 0x0) 2.439983236s ago: executing program 0 (id=239): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000300)="$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") ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) 2.286781862s ago: executing program 2 (id=240): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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") r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.894881391s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2ac}}, 0x0) 1.80446559s ago: executing program 2 (id=242): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.675570392s ago: executing program 5 (id=243): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.631071606s ago: executing program 6 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.529588257s ago: executing program 4 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000003c0)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 1.420433288s ago: executing program 5 (id=246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYBLOB="380200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000020000000000000000010084010500ac1414aa000000000000000000000000000000003300000000000000640101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000020003c00000002000000fe800000000000000000000002f408c8216606f0e8b7"], 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.29959192s ago: executing program 5 (id=247): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x5, 0x365, &(0x7f0000000980)="$eJzs3U9r1EwcB/DvJPv3aemTp+1DxZtVwVPZ1oMigiK9+QY8SLF2t1AaK7QVVBRXD55EvAmCR2+eRd+CXsQ3oKceiie9lCKNzC+TTXY7ye72T9rS7we63SYzyW9mMpOZ6jYgomPr2vT3d+fX9JcqAnABXAIcABWgAOB/jFXuLa0urPqNetaBXMmhvxTCnGpbmrmlhi2rzic5DE//VMBgchvtjyAIgh9dU/3KJRY6OCrs+9s4QNn0TtlfyT2yHWn2kKCcTyiHSKKF1QY27C1ORETHibn/O+YuMWjm744DnDXz8KN0/48kVxBtd7sN4NG/+cdzaMj9/z6GpMX1OkDp+pEaUfF6T5Zwug6daJVoO5b1mgji6i4hvLLaGkBZVpVtMzKJxanOL/iNiaYc4BmuGIlko/JaR1QQkRZtKfw2blmbZsgqe7YBKUNRl6GYEv9I32f8tI7X9tPNfCl1j0l9Vl/VjPLwBnUMmY2FQOnKkeweUDWbozpd8Bu19CNKKT0pZa2tlHHv+09OcjJqgY/v41JW0+q1AlfHYqOPojrn7yYC4FVKLcjm4fZBwbTOZHrpJNeINddU6+dNa67RzlzV+aLfmJi762f+KmXPWOf36qW6ocbxEx8w3Wp/3dSuHupTemZnL1eSMqyFWmZ5CpIypR3byMV2p6+eSdj8E4T6yuXhBW7jIoZWHjxcnPX9xnJub/RoYd0VdZUcwnB7SBNeiOZy1Fv090QaVPSbIoA9C2wrCALrroK9xvp7U4pCTYu5KEW98LZVZBlmza9Sdnd2NMM6TOy6mp44Hjal7EafJ5XsT1q59N2in+y/w7PrdremUXGEy6X97TLRqWZ9/0Sr4VyUe+op1R2c9PrjxVl/R6MRHTErz0+ZMQdjN9cvH3Q4lD8971Lh+i+xXqnJqKNfvIzVSNdZR+KIkykroGF5/SdebSigiXrmRHAgfQU3EL3xG1NZa67T54AziY26hA6iUj7tPKxn4sRh/FfJsi2salYONY1vuJWY/xMRERERERERERERERERERERERER0ZEQ/6d/b5cfJ9gyn0OyfxIjtnYM//AGEREREREREREREREREREREREREREREdHuJJ7/C7jyxJjSnj//N/rD3r0+/9ft4fm/qusjPomoi78BAAD//4wjXtY=") setxattr$trusted_overlay_nlink(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x3) 1.224964108s ago: executing program 4 (id=248): setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05002a20"], 0x8) 1.141248726s ago: executing program 6 (id=249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000f342e4dc6500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdir(0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000500)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0x0, @vifc_lcl_addr=@loopback, @local}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 992.557641ms ago: executing program 5 (id=250): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)="3dc777", 0x3}, {0x0}, {0x0}], 0x3}}], 0x1, 0x10014) 936.728886ms ago: executing program 4 (id=251): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d0009"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 755.262364ms ago: executing program 6 (id=252): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 580.690312ms ago: executing program 5 (id=253): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xbfffffffffffffff, @usage=0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x1d, 0xce82}, 0x4000, 0x5, [0x0, 0x8, 0x20000000009c]}, {0xfffffffffffffffe, @usage=0x9, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x8, 0x58a, @struct={0x2, 0xf136}, 0x3, 0xe, [0x4, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x40]}, {0x6, @usage=0x6, 0x0, 0x7, 0x6b, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x42, @usage=0xd02, 0xffffffff, 0x4, [0x80000000, 0x800004, 0x0, 0x3ff, 0x80]}, {0x0, 0x0, 0xfffffffffffffffd}}) 493.90524ms ago: executing program 6 (id=254): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x2}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) 397.29182ms ago: executing program 5 (id=255): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x6, "cfff0a75b227"}, 0x0, 0x0, &(0x7f0000000440), 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x18, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 335.033347ms ago: executing program 6 (id=256): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 73.260962ms ago: executing program 6 (id=257): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000002c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x3ff, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 0s ago: executing program 0 (id=258): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x40401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0xffff, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2de, 0xaaa1, 0xffffffff, 0x4, 0x40000, 0x1, 0xf58, 0x6]}) kernel console output (not intermixed with test programs): 1q: adding VLAN 0 to HW filter on device team0 [ 75.118622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.128522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.137710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.146789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.156155][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.163777][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.172933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.186054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.195520][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.202631][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.211208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.220183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.232469][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.257570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.266889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.279113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.288010][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.295337][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.303872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.312247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.326392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.338479][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.350407][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.363005][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.373897][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.383251][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.392385][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.401691][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.408843][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.417329][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.426482][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.435490][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.442593][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.469968][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.483797][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.492426][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.501438][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.515649][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.524364][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.533658][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.542523][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.551571][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.560530][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.572902][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.590627][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.601170][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.624709][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.633621][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.643401][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.650610][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.660608][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.716589][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.728149][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.738328][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.748066][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.755275][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.772115][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.782197][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.797195][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.804364][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.816490][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.827009][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.837146][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.846262][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.855131][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.863603][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.872503][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.881397][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.890889][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.900183][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.914744][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 75.920810][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 75.932346][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.942368][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.952806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.969499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.983077][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.994917][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 76.001013][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 76.001517][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.022390][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.032333][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.049660][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.065038][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 76.114008][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.122009][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.143331][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.156161][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.166148][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.174970][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.183571][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.192909][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.202078][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.240275][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.253877][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.270335][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.280370][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.289386][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.298704][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.308823][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.318090][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.329950][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.338966][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.346952][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.362640][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.378091][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.438334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.455951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.475015][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.482176][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.490725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.500010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.525313][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.532471][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.552572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.606959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.627964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.646220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.667449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.697406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.714179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.771733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.780960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.797020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.826256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.845332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.860822][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.881610][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.927841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.946027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.975369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.995657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.008382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.023244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.043242][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.052202][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.060983][ T4265] device veth0_vlan entered promiscuous mode [ 77.081645][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.102579][ T4265] device veth1_vlan entered promiscuous mode [ 77.122061][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.167984][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.181657][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.193215][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.201584][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.209307][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.217785][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.225860][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.234676][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.247344][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.287384][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.304237][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.313810][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.328736][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.363197][ T4268] device veth0_vlan entered promiscuous mode [ 77.373239][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.383333][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.413358][ T4265] device veth0_macvtap entered promiscuous mode [ 77.447232][ T4268] device veth1_vlan entered promiscuous mode [ 77.457686][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.468357][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.479263][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.488452][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.497641][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.521555][ T4265] device veth1_macvtap entered promiscuous mode [ 77.544492][ T4276] device veth0_vlan entered promiscuous mode [ 77.551727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.562093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.571463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.580820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.607850][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.622453][ T4276] device veth1_vlan entered promiscuous mode [ 77.630079][ T4273] device veth0_vlan entered promiscuous mode [ 77.642864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.651474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.660574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.670236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.678674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.686835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.695933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.713606][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.721232][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.730276][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.741052][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.771133][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.782058][ T4268] device veth0_macvtap entered promiscuous mode [ 77.793609][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.803163][ T4273] device veth1_vlan entered promiscuous mode [ 77.818567][ T4276] device veth0_macvtap entered promiscuous mode [ 77.829562][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.839995][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.848908][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.858869][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.868644][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.878405][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.888470][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.919225][ T4268] device veth1_macvtap entered promiscuous mode [ 77.930413][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.940892][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.950455][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.959476][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.991456][ T4276] device veth1_macvtap entered promiscuous mode [ 77.998165][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 78.004248][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 78.017671][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.027626][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.036452][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.044788][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.063082][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.075248][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 78.075310][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 78.087506][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.090350][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.124102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.134076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.146224][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 78.151314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.165101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.184273][ T4273] device veth0_macvtap entered promiscuous mode [ 78.198018][ T4273] device veth1_macvtap entered promiscuous mode [ 78.208148][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.222997][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.243515][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.285016][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.302720][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.313609][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.325963][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.338497][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.347054][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.355909][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.363922][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.374238][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.383126][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.393346][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.413366][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.425441][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.436263][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.447182][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.457363][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.468678][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.480360][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.501516][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.519633][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.530328][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.546989][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.563055][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.573984][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.587449][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.598234][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.607405][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.626144][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.638714][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.650406][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.661129][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.671500][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.682563][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.695637][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.703983][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.713175][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.722594][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.731585][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.749577][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.759296][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.768507][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.777587][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.790635][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.800014][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.820065][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.829330][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.838478][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.847514][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.958277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.968991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.038643][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.051944][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.067299][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.069107][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.106766][ T4270] device veth0_vlan entered promiscuous mode [ 79.115633][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.130830][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.139248][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.171970][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.172637][ T4270] device veth1_vlan entered promiscuous mode [ 79.185870][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.207089][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.207720][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.217646][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.238988][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.253538][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.262994][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.272160][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.280493][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.290918][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.372465][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.381526][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.405076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.415547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.418055][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.426607][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.442469][ T4270] device veth0_macvtap entered promiscuous mode [ 79.462046][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.483705][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.484368][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.509143][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.525928][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.555174][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.569931][ T4270] device veth1_macvtap entered promiscuous mode [ 79.607673][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.629816][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.653495][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.663707][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.680810][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.690809][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.701680][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.712645][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.723186][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.739832][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.777181][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.788254][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.836963][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.849253][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.866890][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.880347][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.890401][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.901126][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.914172][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.925046][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.937665][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.954680][ T4383] tipc: Started in network mode [ 79.960007][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.968753][ T4383] tipc: Node identity fe52b3df4abe, cluster identity 4711 [ 79.976886][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.986446][ T4383] tipc: Enabled bearer , priority 0 [ 79.993207][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.004368][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.013929][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.038569][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.052066][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.065535][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 80.072747][ T4386] comedi comedi3: board detection failed [ 80.080740][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 80.091414][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.101602][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.133813][ T4380] device syzkaller0 entered promiscuous mode [ 80.144946][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 80.145370][ T4308] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 80.151085][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 80.211068][ T4390] loop3: detected capacity change from 0 to 1024 [ 80.225744][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 80.264926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.273410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.279348][ T4380] tipc: Resetting bearer [ 80.305316][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.313752][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.329900][ T4390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.370142][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.394997][ T4379] tipc: Resetting bearer [ 80.412863][ T4308] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 80.440215][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.496797][ T4308] usb 3-1: config 0 descriptor?? [ 80.502447][ T4379] tipc: Disabling bearer [ 80.583710][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.616435][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.685307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.698110][ T4396] loop0: detected capacity change from 0 to 4096 [ 80.713874][ T4268] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.764656][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.792093][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.823880][ T4268] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.855924][ T4396] NILFS (loop0): invalid segment: Checksum error in segment payload [ 80.870706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.888603][ T4268] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 80.899732][ T4396] NILFS (loop0): trying rollback from an earlier position [ 80.917691][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.937625][ T4268] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.953037][ T4308] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 80.973860][ T4268] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 81.007434][ T4308] lenovo 0003:17EF:6067.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.2-1/input0 [ 81.019677][ T4268] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 81.082582][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.098472][ T4396] NILFS (loop0): recovery complete [ 81.139027][ T4268] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 81.139807][ T4405] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.241808][ T4321] usb 3-1: USB disconnect, device number 2 [ 81.317735][ T4268] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 81.435121][ T4268] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 81.501286][ T4413] loop1: detected capacity change from 0 to 512 [ 81.509591][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.534744][ T4406] fido_id[4406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 81.552837][ T4268] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 81.578883][ T4413] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.624170][ T4413] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.661964][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.741427][ T4413] EXT4-fs (loop1): 1 truncate cleaned up [ 81.750993][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.795763][ T4413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.814532][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.849474][ T4420] loop0: detected capacity change from 0 to 512 [ 81.874561][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.902609][ T4420] ======================================================= [ 81.902609][ T4420] WARNING: The mand mount option has been deprecated and [ 81.902609][ T4420] and is ignored by this kernel. Remove the mand [ 81.902609][ T4420] option from the mount to silence this warning. [ 81.902609][ T4420] ======================================================= [ 81.974000][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 82.076311][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 82.155014][ T4420] EXT4-fs: Ignoring removed oldalloc option [ 82.192402][ T4268] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 82.227406][ T4420] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.270272][ T4423] loop2: detected capacity change from 0 to 32768 [ 82.289650][ T4423] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.15 (4423) [ 82.335575][ T4420] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.13: Parent and EA inode have the same ino 15 [ 82.361899][ T4423] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.372612][ T4423] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.373588][ T4420] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.381503][ T4423] BTRFS info (device loop2): turning on flush-on-commit [ 82.401582][ T4423] BTRFS info (device loop2): max_inline at 0 [ 82.408853][ T4423] BTRFS info (device loop2): enabling disk space caching [ 82.417178][ T4423] BTRFS info (device loop2): setting nodatasum [ 82.423478][ T4423] BTRFS info (device loop2): turning off barriers [ 82.430000][ T4423] BTRFS info (device loop2): disabling tree log [ 82.436377][ T4423] BTRFS info (device loop2): enabling ssd optimizations [ 82.443359][ T4423] BTRFS info (device loop2): force clearing of disk cache [ 82.450788][ T4423] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.460474][ T4423] BTRFS info (device loop2): use zstd compression, level 3 [ 82.468908][ T4423] BTRFS info (device loop2): max_inline at 0 [ 82.475010][ T4423] BTRFS info (device loop2): disk space caching is enabled [ 82.486143][ T4420] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.13: Parent and EA inode have the same ino 15 [ 82.501983][ T4420] EXT4-fs (loop0): 1 orphan inode deleted [ 82.508233][ T4420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.559756][ T4265] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 82.769794][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 82.896539][ T4423] BTRFS info (device loop2): rebuilding free space tree [ 82.930168][ T4423] BTRFS info (device loop2): disabling free space tree [ 82.937490][ T4423] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.947431][ T4423] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.968096][ T4423] BTRFS info (device loop2): checking UUID tree [ 83.070954][ T26] audit: type=1800 audit(1761607192.797:2): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 83.408434][ T4273] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.452131][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 83.464552][ T4321] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.680826][ T4321] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.699744][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.719447][ T4321] usb 5-1: Product: syz [ 83.741385][ T4321] usb 5-1: Manufacturer: syz [ 83.762648][ T4321] usb 5-1: SerialNumber: syz [ 83.795455][ T4321] usb 5-1: config 0 descriptor?? [ 83.860931][ T4377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop2 scanned by udevd (4377) [ 83.935452][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 84.002603][ T4466] random: crng reseeded on system resumption [ 84.035149][ T4321] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.051557][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.201302][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.367754][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.517830][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.916228][ T11] tipc: Left network mode [ 85.367485][ T4476] loop0: detected capacity change from 0 to 32768 [ 85.380100][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.407763][ T4476] (syz.0.29,4476,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 85.411830][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.436796][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.440706][ T4476] (syz.0.29,4476,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 85.465708][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.473495][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.481410][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.508830][ T4476] JBD2: Ignoring recovery information on journal [ 85.561212][ T4476] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 85.584020][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.593710][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.601851][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.617534][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.625450][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.632849][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.687175][ T4321] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 85.771945][ T4321] usb 5-1: USB disconnect, device number 2 [ 85.849433][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 86.374901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.383232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.452141][ T4502] futex_wake_op: syz.2.34 tries to shift op by -1; fix this program [ 86.610108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.733537][ T34] cfg80211: failed to load regulatory.db [ 86.785347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.793837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.917299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.019826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.305031][ T4516] process 'syz.0.37' launched '/dev/fd/9' with NULL argv: empty string added [ 87.371655][ T4521] loop4: detected capacity change from 0 to 1024 [ 87.504710][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 87.594490][ T4461] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.664685][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 87.794489][ T4461] usb 3-1: Using ep0 maxpacket: 8 [ 87.801540][ T4461] usb 3-1: config 0 has no interfaces? [ 87.853259][ T4461] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 87.868389][ T4461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.882198][ T4461] usb 3-1: Product: syz [ 87.887050][ T4461] usb 3-1: Manufacturer: syz [ 87.891715][ T4461] usb 3-1: SerialNumber: syz [ 87.925204][ T4461] usb 3-1: config 0 descriptor?? [ 87.944504][ T4475] chnl_net:caif_netlink_parms(): no params data found [ 88.051224][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.062963][ T4485] chnl_net:caif_netlink_parms(): no params data found [ 88.209060][ T11] device hsr_slave_0 left promiscuous mode [ 88.217635][ T11] device hsr_slave_1 left promiscuous mode [ 88.233073][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.256104][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 88.257121][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.266440][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 88.280767][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.292271][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.303321][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 88.313634][ T11] device bridge_slave_1 left promiscuous mode [ 88.319886][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.328946][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.338876][ T7] usb 5-1: Product: syz [ 88.343168][ T7] usb 5-1: Manufacturer: syz [ 88.349404][ T7] usb 5-1: SerialNumber: syz [ 88.358735][ T11] device bridge_slave_0 left promiscuous mode [ 88.375362][ T7] usb 5-1: config 0 descriptor?? [ 88.380868][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.397474][ T7] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 88.407995][ T7] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 88.448587][ T11] device veth1_macvtap left promiscuous mode [ 88.455635][ T11] device veth0_macvtap left promiscuous mode [ 88.461976][ T11] device veth1_vlan left promiscuous mode [ 88.469745][ T11] device veth0_vlan left promiscuous mode [ 88.514804][ T4461] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.708249][ T4461] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 88.733903][ T4461] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.769822][ T4461] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.783827][ T4461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.817693][ T4461] usb 1-1: config 0 descriptor?? [ 88.841216][ T4461] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 89.008595][ T7] em28xx 5-1:0.0: chip ID is em2874 [ 89.258681][ T11] team0 (unregistering): Port device team_slave_1 removed [ 89.308568][ T11] team0 (unregistering): Port device team_slave_0 removed [ 89.359994][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.406380][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.584662][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 89.744767][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 89.863193][ T11] bond0 (unregistering): Released all slaves [ 89.961754][ T4461] usb 3-1: USB disconnect, device number 3 [ 90.038225][ T7] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 90.047757][ T7] em28xx 5-1:0.0: board has no eeprom [ 90.097748][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.107688][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.119933][ T4475] device bridge_slave_0 entered promiscuous mode [ 90.126847][ T7] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 90.136068][ T7] em28xx 5-1:0.0: dvb set to bulk mode. [ 90.143838][ T4308] em28xx 5-1:0.0: Binding DVB extension [ 90.162679][ T7] usb 5-1: USB disconnect, device number 3 [ 90.172842][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.181349][ T7] em28xx 5-1:0.0: Disconnecting em28xx [ 90.197613][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.210686][ T4475] device bridge_slave_1 entered promiscuous mode [ 90.219103][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.231799][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.271400][ T4485] device bridge_slave_0 entered promiscuous mode [ 90.280611][ T4308] em28xx 5-1:0.0: Registering input extension [ 90.314954][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.322402][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.342646][ T4485] device bridge_slave_1 entered promiscuous mode [ 90.450452][ T4475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.493108][ T4485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.505870][ T4308] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 90.512449][ T4308] Registered IR keymap rc-empty [ 90.528113][ T4475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.559694][ T4308] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 90.580190][ T4308] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 90.636538][ T4485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.655456][ T4308] em28xx 5-1:0.0: Input extension successfully initialized [ 90.680501][ T7] em28xx 5-1:0.0: Closing input extension [ 90.830394][ T4475] team0: Port device team_slave_0 added [ 90.835744][ T7] em28xx 5-1:0.0: Freeing device [ 90.878778][ T4485] team0: Port device team_slave_0 added [ 90.898898][ T4485] team0: Port device team_slave_1 added [ 90.916149][ T4568] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 90.928467][ T4475] team0: Port device team_slave_1 added [ 91.046588][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.053715][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.135265][ T4485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.223674][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.243416][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.359813][ T3654] usb 1-1: USB disconnect, device number 2 [ 91.370687][ T4485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.415961][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.423767][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.506161][ T4475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.542309][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.561949][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.603781][ T4475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.664627][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 91.772114][ T4584] loop2: detected capacity change from 0 to 32768 [ 91.789918][ T4584] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.48 (4584) [ 91.807980][ T4584] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.818299][ T4584] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 91.825933][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 91.829261][ T4584] BTRFS info (device loop2): using free space tree [ 92.099014][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.150579][ T4584] BTRFS info (device loop2): enabling ssd optimizations [ 92.249855][ T4485] device hsr_slave_0 entered promiscuous mode [ 92.266113][ T4485] device hsr_slave_1 entered promiscuous mode [ 92.273035][ T4485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.280723][ T4485] Cannot create hsr debugfs directory [ 92.292619][ T4610] netlink: 'syz.0.50': attribute type 4 has an invalid length. [ 92.404274][ T4273] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.449099][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.465797][ T3654] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.654977][ T3654] usb 5-1: Using ep0 maxpacket: 8 [ 92.662685][ T3654] usb 5-1: config 0 has no interfaces? [ 92.688833][ T3654] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 92.702441][ T4475] device hsr_slave_0 entered promiscuous mode [ 92.704533][ T3654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.724122][ T3654] usb 5-1: Product: syz [ 92.729002][ T3654] usb 5-1: Manufacturer: syz [ 92.733657][ T3654] usb 5-1: SerialNumber: syz [ 92.746706][ T3654] usb 5-1: config 0 descriptor?? [ 92.752829][ T4475] device hsr_slave_1 entered promiscuous mode [ 92.781412][ T4475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.786910][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.804685][ T4475] Cannot create hsr debugfs directory [ 92.860378][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.001690][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 93.010804][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.015251][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.036851][ T4628] loop2: detected capacity change from 0 to 512 [ 93.069163][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.072431][ T4628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.094898][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.114886][ T4628] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.154758][ T7] usb 1-1: Product: syz [ 93.163216][ T7] usb 1-1: Manufacturer: syz [ 93.223431][ T3654] usb 5-1: USB disconnect, device number 4 [ 93.240984][ T7] usb 1-1: SerialNumber: syz [ 93.251136][ T7] usb 1-1: config 0 descriptor?? [ 93.292296][ T7] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 93.312171][ T7] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 93.359603][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 93.613024][ T4485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.724763][ T4485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.746796][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 93.801991][ T4639] loop2: detected capacity change from 0 to 16 [ 93.826474][ T4485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 93.878011][ T4639] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 93.880452][ T7] em28xx 1-1:0.0: chip ID is em2874 [ 93.904799][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 93.994960][ T4639] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 94.008152][ T4485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.029586][ T4639] erofs: (device loop2): mounted with root inode @ nid 36. [ 94.037948][ T4475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.210291][ T4475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.229865][ T4475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.251913][ T4654] loop2: detected capacity change from 0 to 1024 [ 94.266891][ T4475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.625653][ T4667] netlink: 'syz.2.60': attribute type 6 has an invalid length. [ 94.692123][ T7] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 94.710162][ T7] em28xx 1-1:0.0: board has no eeprom [ 94.784839][ T7] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 94.795282][ T7] em28xx 1-1:0.0: dvb set to bulk mode. [ 94.801440][ T4308] em28xx 1-1:0.0: Binding DVB extension [ 94.814925][ T7] usb 1-1: USB disconnect, device number 3 [ 94.821632][ T7] em28xx 1-1:0.0: Disconnecting em28xx [ 94.936138][ T4485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.986772][ T4308] em28xx 1-1:0.0: Registering input extension [ 95.006949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.016544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.024900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.080619][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.100113][ T4675] futex_wake_op: syz.4.63 tries to shift op by -1; fix this program [ 95.154840][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.896106][ T4485] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.983261][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.008351][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.024477][ T4308] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 96.033676][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.038358][ T4308] Registered IR keymap rc-empty [ 96.040841][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.077761][ T4308] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 96.078107][ T4475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.127606][ T4308] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 96.147421][ T4683] loop0: detected capacity change from 0 to 2048 [ 96.182518][ T4308] em28xx 1-1:0.0: Input extension successfully initialized [ 96.201856][ T7] em28xx 1-1:0.0: Closing input extension [ 96.228198][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.240040][ T7] em28xx 1-1:0.0: Freeing device [ 96.244759][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.253918][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.263088][ T4683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.272431][ T4683] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.285645][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.292806][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.367969][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.539880][ T4696] loop4: detected capacity change from 0 to 256 [ 96.559760][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 96.576019][ T4692] loop2: detected capacity change from 0 to 2048 [ 96.658038][ T4475] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.680801][ T4692] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 96.715902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.737797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.748474][ T4692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.776855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.807290][ T26] audit: type=1326 audit(1761607206.557:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 96.858236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.885159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.912851][ T26] audit: type=1326 audit(1761607206.617:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.004672][ T26] audit: type=1326 audit(1761607206.617:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.052247][ T11] device hsr_slave_0 left promiscuous mode [ 97.112485][ T11] device hsr_slave_1 left promiscuous mode [ 97.131782][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.154658][ T26] audit: type=1326 audit(1761607206.617:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.192658][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.216489][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.224139][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.245587][ T26] audit: type=1326 audit(1761607206.617:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.268826][ T11] device bridge_slave_1 left promiscuous mode [ 97.282896][ T26] audit: type=1326 audit(1761607206.617:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.284666][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.327882][ T11] device bridge_slave_0 left promiscuous mode [ 97.334264][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.341624][ T26] audit: type=1326 audit(1761607206.617:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.374643][ T3654] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 97.404606][ T26] audit: type=1326 audit(1761607206.617:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.449286][ T26] audit: type=1326 audit(1761607206.627:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.473928][ T11] device veth1_macvtap left promiscuous mode [ 97.476251][ T26] audit: type=1326 audit(1761607206.627:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 97.486179][ T11] device veth0_macvtap left promiscuous mode [ 97.521221][ T11] device veth1_vlan left promiscuous mode [ 97.549490][ T11] device veth0_vlan left promiscuous mode [ 97.567274][ T3654] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 97.594628][ T3654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.609939][ T4714] block nbd2: not configured, cannot reconfigure [ 97.628140][ T3654] usb 5-1: config 0 descriptor?? [ 98.302731][ T4725] Bluetooth: MGMT ver 1.22 [ 98.429725][ T4727] loop2: detected capacity change from 0 to 2048 [ 98.544524][ T4727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.553531][ T4727] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.624171][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 98.718251][ T11] team0 (unregistering): Port device team_slave_1 removed [ 98.781990][ T11] team0 (unregistering): Port device team_slave_0 removed [ 98.861565][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.923847][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.257785][ T3654] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 99.273315][ T3654] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 99.289487][ T3654] asix: probe of 5-1:0.0 failed with error -71 [ 99.339299][ T3654] usb 5-1: USB disconnect, device number 5 [ 99.429512][ T11] bond0 (unregistering): Released all slaves [ 99.538011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.547256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.557665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.566952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.576450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.586093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.595171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.603765][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.610908][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.620118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.629738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.639187][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.646337][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.654099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.711730][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.748355][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.815915][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.837351][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.858329][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.905595][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.914167][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.947690][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.986441][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.003703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.059746][ T4475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.077646][ T4475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.210110][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.369986][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.428678][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.446890][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.459730][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.714695][ T4619] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.857670][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.885018][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.908795][ T4461] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.917117][ T4475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.932659][ T4619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.971415][ T4619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.996667][ T4619] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 101.030821][ T4619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.057248][ T4619] usb 5-1: config 0 descriptor?? [ 101.094698][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.105626][ T4461] usb 3-1: Using ep0 maxpacket: 16 [ 101.115249][ T4461] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 101.153167][ T4461] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 101.178664][ T4461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.192044][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.214141][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.227783][ T4461] usb 3-1: Product: syz [ 101.242227][ T4461] usb 3-1: Manufacturer: syz [ 101.249750][ T4485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.250718][ T4461] usb 3-1: SerialNumber: syz [ 101.287312][ T4461] usb 3-1: config 0 descriptor?? [ 101.324480][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 101.331530][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.373373][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.410909][ T7] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 101.432851][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.470492][ T7] usb 1-1: config 0 descriptor?? [ 101.484215][ T4619] hid-generic 0003:18D1:9400.0002: item fetching failed at offset 4/5 [ 101.513194][ T4619] hid-generic: probe of 0003:18D1:9400.0002 failed with error -22 [ 101.707043][ T4343] usb 5-1: USB disconnect, device number 6 [ 101.935213][ T7] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 102.060693][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.071800][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.117633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.137078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.158356][ T4475] device veth0_vlan entered promiscuous mode [ 102.166838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.186948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.210814][ T4475] device veth1_vlan entered promiscuous mode [ 102.212071][ T4760] loop0: detected capacity change from 0 to 1024 [ 102.239283][ T4760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.354172][ T4760] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.358289][ T4475] device veth0_macvtap entered promiscuous mode [ 102.369977][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.433712][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.447065][ T4343] usb 1-1: USB disconnect, device number 4 [ 102.516100][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.550677][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.585863][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.612044][ T4475] device veth1_macvtap entered promiscuous mode [ 102.660389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.669552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.675631][ T4798] loop4: detected capacity change from 0 to 1024 [ 102.683663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.702937][ T4798] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.727961][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.739417][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.751018][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.762199][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.772343][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.783690][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.795432][ T4798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.805926][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.813447][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.823088][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.832217][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.842024][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.856656][ T4485] device veth0_vlan entered promiscuous mode [ 102.885728][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.897691][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.908074][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.918632][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.928855][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.939431][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.951612][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.955822][ T75] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 102.963371][ T4475] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.983350][ T75] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 102.998154][ T75] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.998154][ T75] [ 103.008455][ T75] EXT4-fs (loop4): Total free blocks count 0 [ 103.014702][ T4475] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.023440][ T4475] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.032487][ T75] EXT4-fs (loop4): Free/Dirty block details [ 103.036509][ T4475] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.043899][ T75] EXT4-fs (loop4): free_blocks=20480 [ 103.053855][ T75] EXT4-fs (loop4): dirty_blocks=64 [ 103.058562][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 103.066741][ T75] EXT4-fs (loop4): Block reservation details [ 103.070531][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.083976][ T75] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 103.095765][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.126365][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 103.126726][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.148279][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.175164][ T4485] device veth1_vlan entered promiscuous mode [ 103.315213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.340613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.366673][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 103.387650][ T4485] device veth0_macvtap entered promiscuous mode [ 103.431552][ T4485] device veth1_macvtap entered promiscuous mode [ 103.478745][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.513634][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.514802][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.546971][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.560215][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.572836][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.593994][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.634565][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.654516][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.684495][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.691861][ T7] usb 3-1: USB disconnect, device number 4 [ 103.717146][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.802567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.821224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.890886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.917780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.945942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.968895][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.999787][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.012912][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.033841][ T4817] loop2: detected capacity change from 0 to 2048 [ 104.040339][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.040356][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.040373][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.040398][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.090163][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.104355][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.130047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.135795][ T4821] loop4: detected capacity change from 0 to 1024 [ 104.149621][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.166478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.175952][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.196544][ T4485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.236958][ T4817] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 104.242821][ T4485] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.281885][ T4485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.307410][ T4821] EXT4-fs (loop4): filesystem is read-only [ 104.307435][ T4485] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.323884][ T4817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.363957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.760319][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.873684][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.891712][ T4833] loop2: detected capacity change from 0 to 128 [ 104.951002][ T4831] loop0: detected capacity change from 0 to 32768 [ 105.260845][ T4835] loop5: detected capacity change from 0 to 40427 [ 105.295072][ T4835] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 105.295672][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.303468][ T4835] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 105.367326][ T4831] XFS (loop0): Mounting V5 Filesystem [ 105.408606][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.434569][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.445925][ T4835] F2FS-fs (loop5): Found nat_bits in checkpoint [ 105.501557][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.505483][ T4831] XFS (loop0): Ending clean mount [ 105.553656][ T4835] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 105.561790][ T4835] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 105.652408][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 105.652424][ T26] audit: type=1800 audit(1761607215.397:29): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.25" name="file0" dev="loop5" ino=10 res=0 errno=0 [ 105.786351][ T4276] XFS (loop0): Unmounting Filesystem [ 105.833176][ T4833] syz.2.102: attempt to access beyond end of device [ 105.833176][ T4833] loop2: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 106.290526][ T9] kworker/u4:0: attempt to access beyond end of device [ 106.290526][ T9] loop2: rw=1, sector=145, nr_sectors = 88 limit=128 [ 106.360232][ T9] kworker/u4:0: attempt to access beyond end of device [ 106.360232][ T9] loop2: rw=1, sector=233, nr_sectors = 1 limit=128 [ 106.410671][ T9] Buffer I/O error on dev loop2, logical block 233, lost async page write [ 106.435551][ T9] kworker/u4:0: attempt to access beyond end of device [ 106.435551][ T9] loop2: rw=1, sector=234, nr_sectors = 1 limit=128 [ 106.500366][ T9] Buffer I/O error on dev loop2, logical block 234, lost async page write [ 106.554562][ T9] kworker/u4:0: attempt to access beyond end of device [ 106.554562][ T9] loop2: rw=1, sector=235, nr_sectors = 1 limit=128 [ 106.605076][ T4321] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 106.663570][ T9] Buffer I/O error on dev loop2, logical block 235, lost async page write [ 106.714356][ T9] kworker/u4:0: attempt to access beyond end of device [ 106.714356][ T9] loop2: rw=1, sector=236, nr_sectors = 1 limit=128 [ 106.767759][ T4870] loop0: detected capacity change from 0 to 40427 [ 106.781221][ T4870] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 106.804449][ T9] Buffer I/O error on dev loop2, logical block 236, lost async page write [ 106.824626][ T4321] usb 7-1: Using ep0 maxpacket: 16 [ 106.831723][ T4321] usb 7-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 106.859747][ T9] kworker/u4:0: attempt to access beyond end of device [ 106.859747][ T9] loop2: rw=1, sector=237, nr_sectors = 1 limit=128 [ 106.873607][ T4321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.885748][ T4321] usb 7-1: config 0 descriptor?? [ 107.025318][ T9] Buffer I/O error on dev loop2, logical block 237, lost async page write [ 107.033943][ T9] kworker/u4:0: attempt to access beyond end of device [ 107.033943][ T9] loop2: rw=1, sector=238, nr_sectors = 1 limit=128 [ 107.054593][ T9] Buffer I/O error on dev loop2, logical block 238, lost async page write [ 107.054801][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.074631][ T9] kworker/u4:0: attempt to access beyond end of device [ 107.074631][ T9] loop2: rw=1, sector=239, nr_sectors = 1 limit=128 [ 107.134705][ T4870] block device autoloading is deprecated and will be removed. [ 107.154498][ T9] Buffer I/O error on dev loop2, logical block 239, lost async page write [ 107.324637][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 107.332825][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.360529][ T34] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.368707][ T4876] loop2: detected capacity change from 0 to 2048 [ 107.380175][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.404568][ T34] usb 5-1: Product: syz [ 107.418706][ T4876] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 107.428577][ T34] usb 5-1: Manufacturer: syz [ 107.444616][ T34] usb 5-1: SerialNumber: syz [ 107.480656][ T34] usb 5-1: config 0 descriptor?? [ 107.509183][ T4876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.584030][ T34] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.626781][ T4881] futex_wake_op: syz.5.107 tries to shift op by -1; fix this program [ 107.803747][ T34] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 107.938348][ T4321] pegasus: probe of 7-1:0.0 failed with error -71 [ 108.211107][ T4321] usb 7-1: USB disconnect, device number 2 [ 108.398327][ T26] audit: type=1326 audit(1761607218.147:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 108.462718][ T26] audit: type=1326 audit(1761607218.187:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 108.466708][ T34] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 108.641639][ T26] audit: type=1326 audit(1761607218.187:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5978efc9 code=0x7ffc0000 [ 108.946339][ T4906] loop0: detected capacity change from 0 to 512 [ 108.955484][ T4308] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.000524][ T4906] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.098293][ T4906] EXT4-fs (loop0): 1 truncate cleaned up [ 109.104211][ T4906] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.158549][ T4308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 109.181905][ T4308] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 109.219753][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.276685][ T4308] usb 3-1: config 0 descriptor?? [ 109.418869][ T34] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 109.442234][ T34] em28xx 5-1:0.0: board has no eeprom [ 109.515546][ T4906] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.121: corrupted in-inode xattr [ 109.531706][ T4906] EXT4-fs (loop0): Remounting filesystem read-only [ 109.539934][ T4906] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1733: inode #15: comm syz.0.121: unable to update i_inline_off [ 109.560452][ T34] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 109.568600][ T34] em28xx 5-1:0.0: dvb set to bulk mode. [ 109.611031][ T34] usb 5-1: USB disconnect, device number 7 [ 109.637061][ T4906] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #15: comm syz.0.121: corrupted in-inode xattr [ 109.646945][ T4925] loop6: detected capacity change from 0 to 2048 [ 109.670511][ T34] em28xx 5-1:0.0: Disconnecting em28xx [ 109.689019][ T4343] em28xx 5-1:0.0: Binding DVB extension [ 109.715300][ T4906] EXT4-fs (loop0): Remounting filesystem read-only [ 109.767287][ T4925] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 109.804879][ T4925] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.825638][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 109.845331][ T4343] em28xx 5-1:0.0: Registering input extension [ 109.893743][ T34] em28xx 5-1:0.0: Closing input extension [ 109.944832][ T34] em28xx 5-1:0.0: Freeing device [ 110.015043][ T4485] EXT4-fs (loop6): unmounting filesystem. [ 110.095432][ T4308] letsketch 0003:6161:4D15.0004: Device info: 劸 [ 110.308321][ T4308] letsketch 0003:6161:4D15.0004: Device info: 귡ɪ做㲄股儀廹 [ 110.495138][ T126] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.555081][ T4308] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 110.653460][ T4308] letsketch: probe of 0003:6161:4D15.0004 failed with error -71 [ 110.721588][ T126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.785916][ T126] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 110.885537][ T4308] usb 3-1: USB disconnect, device number 5 [ 110.965325][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.170724][ T126] usb 6-1: config 0 descriptor?? [ 111.238187][ T126] pwc: Askey VC010 type 2 USB webcam detected. [ 111.633292][ T126] pwc: recv_control_msg error -32 req 02 val 2b00 [ 111.654640][ T126] pwc: recv_control_msg error -32 req 02 val 2700 [ 111.674585][ T4343] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.685759][ T126] pwc: recv_control_msg error -32 req 02 val 2c00 [ 111.709679][ T126] pwc: recv_control_msg error -32 req 04 val 1000 [ 111.737621][ T126] pwc: recv_control_msg error -32 req 04 val 1300 [ 111.777259][ T126] pwc: recv_control_msg error -32 req 04 val 1400 [ 111.799822][ T126] pwc: recv_control_msg error -32 req 02 val 2000 [ 111.841755][ T126] pwc: recv_control_msg error -32 req 02 val 2100 [ 111.852610][ T126] pwc: recv_control_msg error -32 req 04 val 1500 [ 111.870838][ T126] pwc: recv_control_msg error -32 req 02 val 2500 [ 111.881002][ T126] pwc: recv_control_msg error -32 req 02 val 2400 [ 111.886805][ T4343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.899200][ T126] pwc: recv_control_msg error -32 req 02 val 2600 [ 111.921496][ T4343] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.941111][ T126] pwc: recv_control_msg error -32 req 02 val 2900 [ 111.969755][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.008328][ T4343] usb 5-1: Product: syz [ 112.030156][ T4343] usb 5-1: Manufacturer: syz [ 112.046402][ T4343] usb 5-1: SerialNumber: syz [ 112.067962][ T4343] usb 5-1: config 0 descriptor?? [ 112.169649][ T126] pwc: recv_control_msg error -71 req 04 val 1100 [ 112.184928][ T126] pwc: recv_control_msg error -71 req 04 val 1200 [ 112.200304][ T126] pwc: Registered as video103. [ 112.229324][ T126] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 112.257117][ T4343] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 112.317587][ T126] usb 6-1: USB disconnect, device number 2 [ 112.338408][ T4343] usb 5-1: USB disconnect, device number 8 [ 112.386786][ T4970] loop6: detected capacity change from 0 to 64 [ 112.502230][ T4970] capability: warning: `syz.6.138' uses deprecated v2 capabilities in a way that may be insecure [ 112.578255][ T4693] udevd[4693]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.039732][ T4975] loop2: detected capacity change from 0 to 65536 [ 113.149561][ T4975] XFS (loop2): Mounting V5 Filesystem [ 113.224062][ T4975] XFS (loop2): Ending clean mount [ 113.323513][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 113.724705][ T4273] XFS (loop2): Unmounting Filesystem [ 114.645723][ T5013] syz.4.151 uses obsolete (PF_INET,SOCK_PACKET) [ 115.124479][ T4321] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 115.237136][ T5032] loop6: detected capacity change from 0 to 2048 [ 115.309284][ T5032] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 115.332792][ T4321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.383890][ T4321] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.401574][ T5032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.415999][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.424242][ T4321] usb 6-1: Product: syz [ 115.459599][ T4321] usb 6-1: Manufacturer: syz [ 115.464366][ T4321] usb 6-1: SerialNumber: syz [ 115.504245][ T5038] loop0: detected capacity change from 0 to 4096 [ 115.526732][ T4321] usb 6-1: config 0 descriptor?? [ 115.606648][ T5038] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 115.617268][ T4321] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 115.735742][ T4694] udevd[4694]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.762947][ T7] usb 6-1: USB disconnect, device number 3 [ 115.867540][ T5038] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 116.009072][ T26] audit: type=1800 audit(1761607225.757:33): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.157" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 116.246565][ T5055] loop2: detected capacity change from 0 to 64 [ 116.311872][ T5053] loop4: detected capacity change from 0 to 4096 [ 116.357640][ T5053] EXT4-fs: Ignoring removed bh option [ 116.629834][ T5062] loop5: detected capacity change from 0 to 16 [ 116.689421][ T5062] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 116.734092][ T5062] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 116.754659][ T4619] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 116.810722][ T5062] erofs: (device loop5): mounted with root inode @ nid 36. [ 116.958203][ T4619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.995164][ T4619] usb 7-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 117.021324][ T4619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.044722][ T4308] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 117.063840][ T5053] EXT4-fs (loop4): Test dummy encryption mode enabled [ 117.089611][ T4619] usb 7-1: config 0 descriptor?? [ 117.106831][ T5053] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 117.120768][ T5053] System zones: 0-5 [ 117.152763][ T5053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.236471][ T4308] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 117.301304][ T4308] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 117.360531][ T5078] loop5: detected capacity change from 0 to 2048 [ 117.368480][ T4308] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.442193][ T4308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.493350][ T5066] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.523622][ T4619] usbhid 7-1:0.0: can't add hid device: -71 [ 117.533152][ T4619] usbhid: probe of 7-1:0.0 failed with error -71 [ 117.542233][ T5066] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.556290][ T5078] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 117.585168][ T5078] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.625170][ T4619] usb 7-1: USB disconnect, device number 3 [ 117.748635][ T5053] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 117.843222][ T34] usb 1-1: USB disconnect, device number 5 [ 117.858765][ T4475] EXT4-fs (loop5): unmounting filesystem. [ 118.011394][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 118.135646][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.344809][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 118.352074][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.372574][ T5107] netlink: 56 bytes leftover after parsing attributes in process `syz.5.174'. [ 118.385562][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.412384][ T7] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 118.434513][ T4343] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 118.438968][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.471787][ T7] usb 3-1: config 0 descriptor?? [ 118.601133][ T5114] loop5: detected capacity change from 0 to 2048 [ 118.617992][ T4343] usb 5-1: device descriptor read/64, error -71 [ 118.739593][ T5119] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.884496][ T4343] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 118.909763][ T7] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 119.044476][ T4343] usb 5-1: device descriptor read/64, error -71 [ 119.090284][ T5128] loop0: detected capacity change from 0 to 2048 [ 119.177413][ T4343] usb usb5-port1: attempt power cycle [ 119.189619][ T5128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.190683][ T4308] usb 3-1: USB disconnect, device number 6 [ 119.204982][ T5128] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.295784][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 119.301617][ T5126] fido_id[5126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 119.324593][ T4619] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 119.538193][ T4619] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.548727][ T4619] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 119.558047][ T4619] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 119.567451][ T4619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.588183][ T4619] usb 7-1: config 0 descriptor?? [ 119.605566][ T4343] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 119.634530][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.650664][ T4343] usb 5-1: device descriptor read/8, error -71 [ 119.764525][ T126] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.799444][ T4619] Bluetooth: Can't get state to change to load ram patch err [ 119.813071][ T4619] Bluetooth: Loading patch file failed [ 119.814896][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 119.826718][ T4619] ath3k: probe of 7-1:0.0 failed with error -121 [ 119.846649][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 119.869282][ T7] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.889150][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.919124][ T7] usb 6-1: Product: syz [ 119.923440][ T7] usb 6-1: Manufacturer: syz [ 119.933572][ T7] usb 6-1: SerialNumber: syz [ 119.944605][ T4343] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 119.959764][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.981290][ T4343] usb 5-1: device descriptor read/8, error -71 [ 119.985647][ T7] usb 6-1: config 0 descriptor?? [ 119.994138][ T126] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.008065][ T26] audit: type=1326 audit(1761607229.757:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.009118][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.044076][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 120.050920][ T26] audit: type=1326 audit(1761607229.757:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.095979][ T7] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 120.104894][ T4343] usb usb5-port1: unable to enumerate USB device [ 120.112953][ T126] usb 1-1: config 0 descriptor?? [ 120.122450][ T26] audit: type=1326 audit(1761607229.757:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.132985][ T126] pwc: Askey VC010 type 2 USB webcam detected. [ 120.171135][ T26] audit: type=1326 audit(1761607229.757:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.186780][ T4308] usb 7-1: USB disconnect, device number 4 [ 120.216319][ T26] audit: type=1326 audit(1761607229.757:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.240309][ T26] audit: type=1326 audit(1761607229.757:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.270160][ T26] audit: type=1326 audit(1761607229.787:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.301061][ T4322] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 120.311569][ T26] audit: type=1326 audit(1761607229.787:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.341805][ T26] audit: type=1326 audit(1761607229.787:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.6.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 120.546581][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.565119][ T126] pwc: recv_control_msg error -32 req 02 val 2b00 [ 120.572016][ T4322] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 120.585071][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.594012][ T126] pwc: recv_control_msg error -32 req 02 val 2700 [ 120.603085][ T126] pwc: recv_control_msg error -32 req 02 val 2c00 [ 120.612640][ T4322] usb 3-1: config 0 descriptor?? [ 120.621576][ T126] pwc: recv_control_msg error -32 req 04 val 1000 [ 120.743190][ T7] em28xx 6-1:0.0: chip ID is em2874 [ 120.834097][ T126] pwc: recv_control_msg error -32 req 04 val 1400 [ 120.853809][ T126] pwc: recv_control_msg error -32 req 02 val 2000 [ 120.877087][ T126] pwc: recv_control_msg error -32 req 02 val 2100 [ 120.899131][ T126] pwc: recv_control_msg error -32 req 04 val 1500 [ 120.926393][ T126] pwc: recv_control_msg error -32 req 02 val 2500 [ 120.934689][ T5167] block nbd6: not configured, cannot reconfigure [ 120.944634][ T126] pwc: recv_control_msg error -32 req 02 val 2400 [ 120.987398][ T126] pwc: recv_control_msg error -32 req 02 val 2600 [ 121.000843][ T126] pwc: recv_control_msg error -32 req 02 val 2900 [ 121.024195][ T4322] usbhid 3-1:0.0: can't add hid device: -71 [ 121.034982][ T4322] usbhid: probe of 3-1:0.0 failed with error -71 [ 121.064969][ T4322] usb 3-1: USB disconnect, device number 7 [ 121.242721][ T126] pwc: recv_control_msg error -71 req 04 val 1100 [ 121.258729][ T126] pwc: recv_control_msg error -71 req 04 val 1200 [ 121.293661][ T126] pwc: Registered as video103. [ 121.300969][ T126] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 121.328630][ T126] usb 1-1: USB disconnect, device number 6 [ 121.368427][ T7] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 121.380991][ T7] em28xx 6-1:0.0: board has no eeprom [ 121.474730][ T7] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 121.494680][ T7] em28xx 6-1:0.0: dvb set to bulk mode. [ 121.500833][ T4322] em28xx 6-1:0.0: Binding DVB extension [ 121.529948][ T7] usb 6-1: USB disconnect, device number 4 [ 121.555107][ T7] em28xx 6-1:0.0: Disconnecting em28xx [ 121.972433][ T5185] loop4: detected capacity change from 0 to 32768 [ 121.980393][ T5185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.189 (5185) [ 121.996742][ T4322] em28xx 6-1:0.0: Registering input extension [ 122.015311][ T5185] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.025566][ T5185] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 122.034498][ T5185] BTRFS info (device loop4): turning off barriers [ 122.041661][ T5185] BTRFS info (device loop4): turning on flush-on-commit [ 122.049386][ T5185] BTRFS error (device loop4): unrecognized commit_interval value 0x0000000080000000 [ 122.062720][ T5185] BTRFS error (device loop4): open_ctree failed: -22 [ 122.228570][ T5186] loop6: detected capacity change from 0 to 4096 [ 122.328218][ T5185] syz.4.189 (5185): drop_caches: 2 [ 122.506344][ T5198] futex_wake_op: syz.0.192 tries to shift op by -1; fix this program [ 123.244613][ T4322] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 123.251188][ T4322] Registered IR keymap rc-empty [ 123.264944][ T4322] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 123.315097][ T4322] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 123.340985][ T4322] em28xx 6-1:0.0: Input extension successfully initialized [ 123.348363][ T7] em28xx 6-1:0.0: Closing input extension [ 123.435530][ T7] em28xx 6-1:0.0: Freeing device [ 123.503096][ T5186] ntfs3: loop6: failed to convert "0000" to iso8859-6 [ 123.538561][ T4694] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4694) [ 123.605337][ T5186] ntfs3: loop6: failed to convert "0030" to iso8859-6 [ 123.650964][ T5186] ntfs3: loop6: failed to convert name for inode 1e. [ 123.674737][ T5186] ntfs3: loop6: failed to convert "0032" to iso8859-6 [ 123.738061][ T5210] syz.0.197[5210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.738167][ T5210] syz.0.197[5210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.794956][ T5211] futex_wake_op: syz.0.197 tries to shift op by -1; fix this program [ 123.845930][ T5210] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 123.874681][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 124.031582][ T5210] device hsr_slave_0 left promiscuous mode [ 124.077484][ T5210] device hsr_slave_1 left promiscuous mode [ 124.194490][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 124.215555][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.227711][ T5222] loop6: detected capacity change from 0 to 256 [ 124.237562][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.252389][ T5222] exfat: Deprecated parameter 'namecase' [ 124.276017][ T7] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 124.299015][ T5222] exfat: Deprecated parameter 'utf8' [ 124.315717][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.344264][ T7] usb 6-1: config 0 descriptor?? [ 124.380717][ T5222] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 124.542731][ T5222] exFAT-fs (loop6): error, found bogus dentry(16) beyond unused empty group(15) (start_clu : 5, cur_clu : 5) [ 124.588925][ T5222] exFAT-fs (loop6): Filesystem has been set read-only [ 124.782113][ T7] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 124.898601][ T34] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.053755][ T4619] usb 6-1: USB disconnect, device number 5 [ 125.117840][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.150884][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.168968][ T5237] fido_id[5237]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 125.188374][ T34] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.221543][ T34] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.237983][ T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.261603][ T34] usb 1-1: config 0 descriptor?? [ 125.411536][ T5242] loop2: detected capacity change from 0 to 1024 [ 125.445983][ T5242] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.456099][ T5242] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.463448][ T5242] __quota_error: 23 callbacks suppressed [ 125.463466][ T5242] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 125.480496][ T5242] EXT4-fs warning (device loop2): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 125.500551][ T5242] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 125.523819][ T5242] EXT4-fs (loop2): 1 truncate cleaned up [ 125.529840][ T5242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.547215][ T5242] EXT4-fs (loop2): shut down requested (1) [ 125.685361][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 125.710735][ T34] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 125.767291][ T34] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 125.907002][ T5247] futex_wake_op: syz.5.206 tries to shift op by -1; fix this program [ 126.986388][ T5256] loop6: detected capacity change from 0 to 32768 [ 127.064044][ T5256] XFS (loop6): Mounting V5 Filesystem [ 127.142698][ T5256] XFS (loop6): Ending clean mount [ 127.255625][ T5272] loop5: detected capacity change from 0 to 2048 [ 127.258974][ T5271] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 127.273217][ T5272] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 127.295546][ T4485] XFS (loop6): Unmounting Filesystem [ 127.376587][ T5275] block nbd4: not configured, cannot reconfigure [ 127.419409][ T5272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.658777][ T5281] loop4: detected capacity change from 0 to 164 [ 127.794125][ T4377] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.244583][ T4343] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 128.264156][ T4343] usb 1-1: device reset changed ep0 maxpacket size! [ 128.293102][ T126] usb 1-1: USB disconnect, device number 7 [ 128.342503][ T5299] loop6: detected capacity change from 0 to 16 [ 128.371892][ T5299] erofs: (device loop6): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 128.395207][ T5299] erofs: (device loop6): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 128.434817][ T5299] erofs: (device loop6): mounted with root inode @ nid 36. [ 128.436726][ T4322] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.454690][ T4343] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.474602][ T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.646284][ T4343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.669873][ T5285] loop5: detected capacity change from 0 to 32768 [ 128.672681][ T4343] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.684627][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 128.695084][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 128.703404][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.721711][ T4343] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.729684][ T4322] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 128.739052][ T5285] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.214 (5285) [ 128.755024][ T4343] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.766562][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.777947][ T4322] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 128.801515][ T126] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 128.811518][ T4343] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.824486][ T4322] usb 5-1: config 179 has no interface number 0 [ 128.830809][ T4322] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 128.838772][ T4343] usb 3-1: Product: syz [ 128.849127][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.852031][ T4343] usb 3-1: Manufacturer: syz [ 128.862816][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.221'. [ 128.875664][ T4343] usb 3-1: SerialNumber: syz [ 128.887918][ T4322] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 128.906772][ T4343] usb 3-1: config 0 descriptor?? [ 128.912894][ T126] usb 1-1: config 0 descriptor?? [ 128.936562][ T4322] usb 5-1: config 179 interface 65 has no altsetting 0 [ 128.948735][ T4322] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 128.963485][ T4343] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 128.974519][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.011869][ T4694] udevd[4694]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.108707][ T5285] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.135618][ T4343] usb 3-1: USB disconnect, device number 8 [ 129.164332][ T5285] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.176689][ T5285] BTRFS info (device loop5): using free space tree [ 129.210387][ T34] usb 5-1: USB disconnect, device number 13 [ 129.361446][ T126] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 129.388337][ T5285] BTRFS info (device loop5): enabling ssd optimizations [ 129.492150][ T5285] BTRFS info (device loop5): balance: start -susage=6,limit=3330..0 [ 129.510613][ T5285] BTRFS info (device loop5): balance: ended with status: 0 [ 129.630807][ T126] usb 1-1: USB disconnect, device number 8 [ 129.730536][ T4475] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.989751][ T5339] loop6: detected capacity change from 0 to 2048 [ 130.102628][ T5339] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 130.173243][ T5339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.354628][ T34] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.397991][ T5353] loop0: detected capacity change from 0 to 256 [ 130.522772][ T5353] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 130.544545][ T34] usb 3-1: Using ep0 maxpacket: 16 [ 130.551711][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 130.584985][ T34] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.621426][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.639979][ T34] usb 3-1: Product: syz [ 130.647929][ T34] usb 3-1: Manufacturer: syz [ 130.668089][ T34] usb 3-1: SerialNumber: syz [ 130.703211][ T34] usb 3-1: config 0 descriptor?? [ 130.727285][ T34] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.747823][ T26] audit: type=1326 audit(1761607240.497:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 130.787282][ T34] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 130.833309][ T26] audit: type=1326 audit(1761607240.497:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 130.916912][ T26] audit: type=1326 audit(1761607240.497:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 131.105318][ T26] audit: type=1326 audit(1761607240.497:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 131.245395][ T26] audit: type=1326 audit(1761607240.497:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 131.306108][ T26] audit: type=1326 audit(1761607240.497:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 131.332084][ T34] em28xx 3-1:0.0: chip ID is em2874 [ 131.377431][ T26] audit: type=1326 audit(1761607240.497:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 131.453678][ T26] audit: type=1326 audit(1761607240.497:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 131.506731][ T4343] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.562346][ T26] audit: type=1326 audit(1761607240.497:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 131.644964][ T26] audit: type=1326 audit(1761607240.497:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.6.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f8efc9 code=0x7ffc0000 [ 131.716024][ T4343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.742695][ T4343] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.789907][ T4343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.812173][ T4343] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.841934][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.892429][ T4343] usb 5-1: Product: syz [ 131.901878][ T4343] usb 5-1: Manufacturer: syz [ 131.924566][ T4343] usb 5-1: SerialNumber: syz [ 131.941073][ T34] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 131.956389][ T34] em28xx 3-1:0.0: board has no eeprom [ 131.968320][ T4343] usb 5-1: config 0 descriptor?? [ 132.073569][ T4343] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 132.094595][ T34] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 132.102936][ T34] em28xx 3-1:0.0: dvb set to bulk mode. [ 132.130540][ T4694] udevd[4694]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.179023][ T34] usb 3-1: USB disconnect, device number 9 [ 132.207842][ T34] em28xx 3-1:0.0: Disconnecting em28xx [ 132.213570][ T4343] em28xx 3-1:0.0: Binding DVB extension [ 132.236214][ T4619] usb 5-1: USB disconnect, device number 14 [ 132.476283][ T4343] em28xx 3-1:0.0: Registering input extension [ 132.702467][ T5398] loop2: detected capacity change from 0 to 2048 [ 132.764855][ T5398] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 132.788953][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.796960][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807021][ T4343] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 132.829851][ T5398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.834518][ T5347] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.839947][ T4343] Registered IR keymap rc-empty [ 132.900353][ T4343] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 132.953617][ T4343] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 133.015056][ T4343] em28xx 3-1:0.0: Input extension successfully initialized [ 133.032705][ T34] em28xx 3-1:0.0: Closing input extension [ 133.034628][ T5347] usb 1-1: Using ep0 maxpacket: 32 [ 133.077002][ T34] em28xx 3-1:0.0: Freeing device [ 133.082589][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.144475][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.206759][ T5347] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 133.234516][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.263815][ T5347] usb 1-1: config 0 descriptor?? [ 133.377567][ T5412] device macvtap0 entered promiscuous mode [ 133.403695][ T5412] device macvtap0 left promiscuous mode [ 133.461992][ T5417] netlink: 384 bytes leftover after parsing attributes in process `syz.5.246'. [ 133.585131][ T34] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 133.681861][ T5421] loop5: detected capacity change from 0 to 64 [ 133.722803][ T5347] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 133.784763][ T34] usb 3-1: Using ep0 maxpacket: 16 [ 133.797190][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.842196][ T34] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.894521][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.922932][ T34] usb 3-1: Product: syz [ 133.933049][ T34] usb 3-1: Manufacturer: syz [ 133.951547][ T5396] loop0: detected capacity change from 0 to 1024 [ 133.954579][ T34] usb 3-1: SerialNumber: syz [ 133.999873][ T5396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.001856][ T34] usb 3-1: config 0 descriptor?? [ 134.052537][ T34] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 134.080913][ T34] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 134.116522][ T5396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.150261][ T14] usb 1-1: USB disconnect, device number 9 [ 134.404506][ T5347] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 134.561903][ T5450] loop6: detected capacity change from 0 to 512 [ 134.596609][ T5347] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.599486][ T5450] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.627075][ T5347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.643739][ T5450] EXT4-fs (loop6): 1 truncate cleaned up [ 134.647631][ T34] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 134.658166][ T5450] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 134.671285][ T5347] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.700829][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.714703][ T5346] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 134.754897][ T4485] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 134.793634][ T5347] usb 5-1: Product: syz [ 134.802375][ T5347] usb 5-1: Manufacturer: syz [ 134.822039][ T5347] usb 5-1: SerialNumber: syz [ 134.823305][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 134.858494][ T5347] usb 5-1: config 0 descriptor?? [ 134.929612][ T5346] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.962066][ T5346] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 134.974601][ T5347] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 134.983101][ T5346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.002205][ T5454] comedi comedi3: c6xdigio: I/O port conflict (0x40401,3) [ 135.011178][ T5346] usb 6-1: config 0 descriptor?? [ 135.016615][ T5454] ------------[ cut here ]------------ [ 135.022688][ T5454] Unexpected driver unregister! [ 135.032153][ T5346] pwc: Askey VC010 type 2 USB webcam detected. [ 135.041437][ T5454] WARNING: CPU: 0 PID: 5454 at drivers/base/driver.c:270 driver_unregister+0x8e/0xa0 [ 135.051980][ T5454] Modules linked in: [ 135.056336][ T5454] CPU: 0 PID: 5454 Comm: syz.0.258 Not tainted syzkaller #0 [ 135.063688][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.070864][ T4694] udevd[4694]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.073854][ T5454] RIP: 0010:driver_unregister+0x8e/0xa0 [ 135.095361][ T5454] Code: e8 47 b1 00 fd 48 89 df 5b 41 5e 41 5f e9 fa 5c ff ff e8 95 77 7c fc eb 05 e8 8e 77 7c fc 48 c7 c7 a0 c5 02 8b e8 b2 9f 48 fc <0f> 0b 5b 41 5e 41 5f c3 00 00 cc cc 00 00 cc cc 00 00 41 57 41 56 [ 135.112805][ T34] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 135.115031][ T5454] RSP: 0018:ffffc9000ce07a60 EFLAGS: 00010246 [ 135.115060][ T5454] RAX: d57214ba77780f00 RBX: ffffffff8dc2b720 RCX: 0000000000080000 [ 135.115078][ T5454] RDX: ffffc90005439000 RSI: 0000000000006e69 RDI: 0000000000006e6a [ 135.115094][ T5454] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff520019c0edd [ 135.115111][ T5454] R10: fffff520019c0edd R11: 1ffff920019c0edc R12: ffff88814ccf2038 [ 135.115129][ T5454] R13: ffffffff8dc2b670 R14: 0000000000000000 R15: dffffc0000000000 [ 135.115146][ T5454] FS: 00007f9d5a5916c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 135.115167][ T5454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.115184][ T5454] CR2: 0000001b2f423ffc CR3: 0000000057814000 CR4: 00000000003506f0 [ 135.115204][ T5454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.115219][ T5454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.115234][ T5454] Call Trace: [ 135.115242][ T5454] [ 135.142303][ T34] em28xx 3-1:0.0: board has no eeprom [ 135.145526][ T5454] comedi_device_detach_locked+0x16e/0x710 [ 135.145604][ T5454] comedi_device_attach+0x5c9/0x700 [ 135.145659][ T5454] comedi_unlocked_ioctl+0x5a6/0x1050 [ 135.145690][ T5454] ? __lock_acquire+0x7c50/0x7c50 [ 135.187443][ T3654] usb 5-1: USB disconnect, device number 15 [ 135.193675][ T5454] ? tomoyo_path_number_perm+0x4ae/0x600 [ 135.193717][ T5454] ? comedi_poll+0x8b0/0x8b0 [ 135.193896][ T5454] ? __fget_files+0x28/0x4d0 [ 135.264025][ T5454] ? bpf_lsm_file_ioctl+0x5/0x10 [ 135.264555][ T34] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 135.269041][ T5454] ? security_file_ioctl+0x7c/0xa0 [ 135.282013][ T5454] ? comedi_poll+0x8b0/0x8b0 [ 135.285925][ T34] em28xx 3-1:0.0: dvb set to bulk mode. [ 135.286679][ T5454] __se_sys_ioctl+0xfa/0x170 [ 135.296900][ T5454] do_syscall_64+0x4c/0xa0 [ 135.301360][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 135.306133][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 135.310877][ T5454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.313077][ T34] usb 3-1: USB disconnect, device number 10 [ 135.316858][ T5454] RIP: 0033:0x7f9d5978efc9 [ 135.316902][ T5454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.316921][ T5454] RSP: 002b:00007f9d5a591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.316947][ T5454] RAX: ffffffffffffffda RBX: 00007f9d599e5fa0 RCX: 00007f9d5978efc9 [ 135.344139][ T34] em28xx 3-1:0.0: Disconnecting em28xx [ 135.346976][ T5454] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 135.346996][ T5454] RBP: 00007f9d59811f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.347012][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.347025][ T5454] R13: 00007f9d599e6038 R14: 00007f9d599e5fa0 R15: 00007ffdda969d38 [ 135.347085][ T5454] [ 135.347109][ T5454] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.347120][ T5454] CPU: 0 PID: 5454 Comm: syz.0.258 Not tainted syzkaller #0 [ 135.347139][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.347150][ T5454] Call Trace: [ 135.347157][ T5454] [ 135.347168][ T5454] dump_stack_lvl+0x168/0x22e [ 135.347197][ T5454] ? memcpy+0x3c/0x60 [ 135.347230][ T5454] ? show_regs_print_info+0x12/0x12 [ 135.347255][ T5454] ? load_image+0x3b0/0x3b0 [ 135.347300][ T5454] panic+0x2c9/0x710 [ 135.347334][ T5454] ? bpf_jit_dump+0xd0/0xd0 [ 135.347403][ T5454] __warn+0x2f8/0x4f0 [ 135.347429][ T5454] ? driver_unregister+0x8e/0xa0 [ 135.347470][ T5454] ? driver_unregister+0x8e/0xa0 [ 135.347500][ T5454] report_bug+0x2ba/0x4f0 [ 135.347523][ T5454] ? driver_unregister+0x8e/0xa0 [ 135.347565][ T5454] handle_bug+0x3a/0x70 [ 135.347588][ T5454] exc_invalid_op+0x16/0x40 [ 135.347612][ T5454] asm_exc_invalid_op+0x16/0x20 [ 135.347633][ T5454] RIP: 0010:driver_unregister+0x8e/0xa0 [ 135.347666][ T5454] Code: e8 47 b1 00 fd 48 89 df 5b 41 5e 41 5f e9 fa 5c ff ff e8 95 77 7c fc eb 05 e8 8e 77 7c fc 48 c7 c7 a0 c5 02 8b e8 b2 9f 48 fc <0f> 0b 5b 41 5e 41 5f c3 00 00 cc cc 00 00 cc cc 00 00 41 57 41 56 [ 135.347683][ T5454] RSP: 0018:ffffc9000ce07a60 EFLAGS: 00010246 [ 135.347702][ T5454] RAX: d57214ba77780f00 RBX: ffffffff8dc2b720 RCX: 0000000000080000 [ 135.347718][ T5454] RDX: ffffc90005439000 RSI: 0000000000006e69 RDI: 0000000000006e6a [ 135.347732][ T5454] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff520019c0edd [ 135.347747][ T5454] R10: fffff520019c0edd R11: 1ffff920019c0edc R12: ffff88814ccf2038 [ 135.347763][ T5454] R13: ffffffff8dc2b670 R14: 0000000000000000 R15: dffffc0000000000 [ 135.347798][ T5454] comedi_device_detach_locked+0x16e/0x710 [ 135.347850][ T5454] comedi_device_attach+0x5c9/0x700 [ 135.347889][ T5454] comedi_unlocked_ioctl+0x5a6/0x1050 [ 135.347916][ T5454] ? __lock_acquire+0x7c50/0x7c50 [ 135.347949][ T5454] ? tomoyo_path_number_perm+0x4ae/0x600 [ 135.347976][ T5454] ? comedi_poll+0x8b0/0x8b0 [ 135.348060][ T5454] ? __fget_files+0x28/0x4d0 [ 135.348103][ T5454] ? bpf_lsm_file_ioctl+0x5/0x10 [ 135.348131][ T5454] ? security_file_ioctl+0x7c/0xa0 [ 135.348156][ T5454] ? comedi_poll+0x8b0/0x8b0 [ 135.348181][ T5454] __se_sys_ioctl+0xfa/0x170 [ 135.348212][ T5454] do_syscall_64+0x4c/0xa0 [ 135.348234][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 135.348255][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 135.348279][ T5454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.348299][ T5454] RIP: 0033:0x7f9d5978efc9 [ 135.348316][ T5454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.348333][ T5454] RSP: 002b:00007f9d5a591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.348355][ T5454] RAX: ffffffffffffffda RBX: 00007f9d599e5fa0 RCX: 00007f9d5978efc9 [ 135.348369][ T5454] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 135.348384][ T5454] RBP: 00007f9d59811f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.348400][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.348413][ T5454] R13: 00007f9d599e6038 R14: 00007f9d599e5fa0 R15: 00007ffdda969d38 [ 135.348453][ T5454] [ 135.357062][ T5454] Kernel Offset: disabled [ 135.725606][ T5454] Rebooting in 86400 seconds..