last executing test programs: 14.059028678s ago: executing program 2 (id=345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0x87}, {0x9, "4b46d1703fccb9d2"}}}}, 0xf) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r2, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c000580080022"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884) 13.637963012s ago: executing program 2 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 13.521508016s ago: executing program 2 (id=349): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0703c5"]}]}) 13.284434453s ago: executing program 0 (id=353): syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d0001000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550a, 0x0) 12.45211109s ago: executing program 1 (id=358): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x5c3a, &(0x7f0000000080)={0x0, 0xde28, 0x11000, 0x1, 0x0, 0x0, r0}, 0x0, &(0x7f0000000200), &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0xa910, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x9, 0x1, 0x3, 0x6, 0x7, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x101) 11.257968358s ago: executing program 4 (id=360): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) r1 = semget(0x2, 0x3, 0x39c) semop(r1, &(0x7f0000000000)=[{0x2, 0xbbdd}, {0x0, 0x4, 0x1000}], 0x2) read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020) 10.983473507s ago: executing program 1 (id=361): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 10.26228388s ago: executing program 0 (id=362): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xff80, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 10.154418114s ago: executing program 3 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="08000800060006"], 0xfce) 10.105865715s ago: executing program 4 (id=373): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x43, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0xffffffff00004000) 10.081842796s ago: executing program 2 (id=364): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x800002, 0x200, 0x8, 0x2, 0x9, 0x7}) 10.030722018s ago: executing program 1 (id=365): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 9.833606934s ago: executing program 3 (id=366): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0xfffffffffffffe35, &(0x7f0000000480)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x3, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3f0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x0, 0x0, "7fe51bdfc05533e97485b1bb875235b5294be18535fbecefc508e6332dcf4334a915da190318280e2814761b923c9f3909e8fcd18da8bafb28e86c3958e7e3ae4c621bdb23d8a89c8e132d02469bccc4b564cb0db5c9061297107e611d12e34a80bd95097ffb1208526c0117381ae317ecb84c79a4ea85faf43839c44695c624557c1ade8744be9c280c4cbc370ce4341d5c4833821f68a6a78169da28"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) 9.675212549s ago: executing program 1 (id=367): r0 = socket$netlink(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) close_range(r0, 0xffffffffffffffff, 0x0) 9.615969631s ago: executing program 0 (id=368): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, &(0x7f0000000400)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/mcfilter6\x00') mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) keyctl$describe(0x6, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fchown(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x51, 0x1, 0x2, "08000000ff0b57e386b7080000000d0000004d00", 0x31364d4e}) lseek(r4, 0x80000000008, 0x1) 9.537136634s ago: executing program 3 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x4, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 8.427541539s ago: executing program 0 (id=370): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYBLOB, @ANYBLOB="0000000000000000b705000008b7cd0fc6000000a500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0xf, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x4c) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) r6 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) 8.424613549s ago: executing program 1 (id=371): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)={0x40, 0xd, 0x44, "811c1644f135713c682d51e3aed026e29591e2f5fa9198dc4f083738317019a20cf62d6e6c5707d07f4a2d753bcef3e70dcfee16a30741c7cd0b9f537d9b1743399f0d0a"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, '+U'}, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000440)={0x20, 0xf, 0xe, "8988e287d06b7a9fc3a9c00d32b2"}, 0x0, 0x0, 0x0, 0x0}) 8.424318699s ago: executing program 3 (id=372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYBLOB, @ANYBLOB="0000000000000000b705000008b7cd0fc6000000a500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0xf, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x4c) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) r6 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) 8.369875631s ago: executing program 4 (id=374): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x5c3a, &(0x7f0000000080)={0x0, 0xde28, 0x11000, 0x1, 0x0, 0x0, r0}, 0x0, &(0x7f0000000200), &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) r7 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0xa910, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x9, 0x1, 0x3, 0x6, 0x7, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x101) read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3.584833315s ago: executing program 2 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") 3.584190595s ago: executing program 1 (id=376): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.104560062s ago: executing program 3 (id=377): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.039464604s ago: executing program 2 (id=378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x0, 0xfffff802, 0x3ff}) 877.870232ms ago: executing program 0 (id=379): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f00000002c0)=ANY=[@ANYBLOB="7569643d69676e6f72652c6e6f6164696e6963622c6164696e6963622c6769643d666f726765742c7569643d666f726765742c757466382c756e64656c6574652c73686f727461642c6e6f7374726963742c00776bd1c0aa74ffd05440c8dd8ee0deeb6f2efeeaccddb2268e1baa3e376b87294b7424cabca72085c0773c73d8127c37cafd2312c5acf35cd9930e732eb7ee66c092e700b349e4c88856be66c5fd2ba2bc8ead74fdada35a6ca5e2a76466dcf2191cbb69fedf22848dfcd457fbf1a2e0c2cfdef45967990f27"], 0xfe, 0xc22, &(0x7f0000001040)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu43bTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22YXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKsmhTpCj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/fOnMc+lhtwIAOEhXxr985qznPwB8rFz1//8AAAAAAAAAAAAAAHDYpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78F54fvtDN96//oD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbd2vYe91t9uqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c++l3uNcLjaBRxOlI8890fp2ZEFLH3c3Gf785+O1Z1YqjqxMTIaNWRmXZzdqncONY9EUVEvadSo3uODuBa7EkjYrlsftngobJ74/PNhea1mVZ9rLmw1F5qz82OpU5ry/7Uo4gLKWIlItb6795dXxRRixTfPrGerkXEke55+Hw1MPje7Sj2sY+7ULaz3hexUjwC1+wQ648iXokUP3m7iKnynOWf+FzEK2V+P+LNMl+MSOUX43zEuzt8j3g01aKIvyiv/8X1NB0RGyc660frl79S/9Ls9bmest37yiP/fDhIh/zeNBBFNKs7/nr68L/ZAQAAAAAAAAAAAAAAAOBBOxZFPBkpXv6PP67GFUc1Lv3ExeE/GPzF3jHjT9xnP2XZZyNiudjdmNyjeQjxWBpL6SGPJf44G4gi/iSP//vmw24MAAAAAAAAAAAAAAAAAADAx1oRP4oUL7xzKq1E75zi7dkb9avNazOdWWG7c/9250zf2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lRRTxs0jxra+tp0gR0YiYjE6u9nfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU38q4nuRov6HjTvrahGRqn87TpW/nI/G0TI/GY3hMl+MxqWczSprjW/e92hpX/rAh9eXivhhpOgfeOvO1cnXv6/zafOavfn1zU+/Uuvkke7Gwff6Hzt54uLw6K89ca/lHa/+0OX27K3b9YmR0dHxntW1fPRP9qwbzMctHkzXiYjF1994rTkz01qw8PFYqHUWanFI2nNQC/l+FYelPdsXGoejGZsLD/nGxIEon//vRorfeec/uw/87vP/Fzqf7jzh46d/uvn8f2H7jvbp+f94z7oX8u9G+moRA0s35/tORgwsvv7G6fbN5o3Wjdbs+TNnvjg8/MVzZ/qORgxcb8+0epb2fKoAAAAAAAAAAAAAAAAADlYq4vciRfOH66keEber8VqDF4efPv3UkThSjbfaMm7r1fGrl+ovzd2cX2gtLram6xOz7am56dZuDzdQDfeaGBndl87c17F9bv+xgZfm5l9faN/4o6Udtx8fuHRtcWmhObXz5jgWRUSjd81Q1eCJkdGq0TPt5mxVdewBvUqhLxXxX5Fi6nw9fTavy+P/to/w3zL+f3n7jvZp/N8netaVx0ypiJ9Git/+yyfis1U7j8dd5yyX+9tIMXThM7lcHC3LddvQea9AZ2RgWfb/IsU//mxr2e54yMc3yz636xP7iCiv/4lI8b0//078Rl639f0PO1//49t3tE/X/1M9645veV/BnrtOvv6nI8WLj78Vv5nXvd/7P4rY2Nj4RsSpXPjO+zn26fp/umfdYHSO+1sPrvsAAAAAAAAAAACPrL5UxN9FiqdGa+n5vG43f/9vevuO9unvf/1yz7rpA5qvaM8nFQAAAAAOib5UxI8ixY2lt+6Mod46/rtn/Ofvbs69PpK2ba3+nO+XqvcGPMg//+s1mI87ufduAwAAAAAAAAAAAAAAAAAAwKGSUhHP5/nUJ+8zn/pqpHj5f57J5dLJslx3HvjB6teBK3Ozpy/NzMxNNZea12Za9fH55lSrrPupSLH+N5/JdYtqfvXufPOdOd4HNrpzsS9EitG/75btzMXenZu8Mx94Zy72suwnIsV//8PWst15rD+9WfZsWfavI8VX/3nnsic3y54ry34nUvzgq/Vu2eNl2e77UTvvJB2oxUzr2am5mbtehQoAAAAAAAAAAAAAAAAAAAAfVF8q4s8ixf/eXInlPOw/z//fnYG/1i375td75vvf5nY1z/9gNf//vZY/zPz/gw+spwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OhIUcQbkWL+ynpa7S8/dwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lzw/fKGb71//QXsyXh2/eqn+0tzN+YXW4mJruj4x256am27teg97rb956jqGqhNQv/narenr1xfrZ589t2Xz7cH3+h87OXhx+OnTT3XLToyMjo73lKn1fYCjf6DGbToaRfxVpHjmuz9O/9IfUcTez8V9vjv77VjViaGqExMjo1VHZtrN2aVy41j3RBQR9Z5Kje45OoBrsSeNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv3t3fVHEa5Hi2yfW07/2RxzpnofPXxn/8pmz925HsY993IWynfW+iJXiEbhmh1h/FPFPkeInb5+Kf+uPqEXnJz4X8UqZ3494s8wXI1KK2PhGxLs7fI94NNWiiP8vr//F9fR2f3k/6N5XLn+l/qXZ63M9Zbv3lV09H3793sd86M+Hg3TI700DUcQPqjv+evp3/10DAAAAAAAAAAAAAAAAHCJF/GqkeOGdU6kaH3xnTHF79kb9avPaTGdYX3fsX3fM9MbGxkY9dbKRczLncs6VnKs513JGkevnbOSczLmccyXnas61nHEk18/ZyDmZcznnSs7VnGs5o5br52zknMy5nHMl52rOtZxxSMbuAQAAAAAAAAAAAAAAAAAAHy1F9U+Kb31tPW30d+aXnoxOrpoP9CPv5wEAAP//N4D+uw==") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffff9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147441, 0x98) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 802.887254ms ago: executing program 4 (id=380): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xff80, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 457.112275ms ago: executing program 3 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0x0, 0xf000, 0xfd, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, {0xeeee8000, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x2, 0x10, 0x2, 0x6}, {0x60000, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x7, 0x0, 0x90, 0x0, 0x4, 0x4}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x3, 0x78, 0x70, 0x80, 0x0, 0x0, 0x3, 0x1c, 0x7, 0xa8}, {0x100026fff, 0x3000, 0x0, 0x14, 0x2, 0x8f, 0x0, 0x0, 0x6, 0x35, 0x86, 0xfe}, {0x8080000, 0xe000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x80, 0x3, 0x4}, {0x5000, 0x0, 0x4, 0x82, 0x0, 0x10, 0x9, 0xe, 0x1}, {0x8080000, 0x4}, {0x1, 0xfffe}, 0x80040034, 0x0, 0xffff1000, 0x10, 0x4, 0x800, 0x10000, [0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffd, 0x5]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 244.065221ms ago: executing program 4 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="64007a800c000300b5dac55bc36d454a24"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 137.713475ms ago: executing program 0 (id=383): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, &(0x7f0000000400)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/mcfilter6\x00') mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fchown(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x51, 0x1, 0x2, "08000000ff0b57e386b7080000000d0000004d00", 0x31364d4e}) lseek(r4, 0x80000000008, 0x1) 0s ago: executing program 4 (id=384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 75.383134][ T4258] cgroup: Unknown subsys name 'net' [ 75.490117][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.006734][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.468651][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.476932][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.489043][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.496941][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.505075][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.513188][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.522108][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.529825][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.537848][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.545818][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.554780][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.561974][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.569650][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.578889][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.586550][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.594836][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.602170][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.603597][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.610503][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.624295][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.626874][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.631966][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.639602][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.652950][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.661089][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.669102][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.670983][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.684294][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.732712][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.740677][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.245558][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 79.268794][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 79.291195][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 79.331844][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 79.352042][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 79.506599][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.514775][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.523419][ T4283] device bridge_slave_0 entered promiscuous mode [ 79.545688][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.553823][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.562139][ T4283] device bridge_slave_1 entered promiscuous mode [ 79.591512][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.602064][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.610219][ T4271] device bridge_slave_0 entered promiscuous mode [ 79.617908][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.628579][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.636667][ T4279] device bridge_slave_0 entered promiscuous mode [ 79.656380][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.663763][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.672074][ T4278] device bridge_slave_0 entered promiscuous mode [ 79.680006][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.690129][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.698820][ T4271] device bridge_slave_1 entered promiscuous mode [ 79.706467][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.713896][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.721881][ T4279] device bridge_slave_1 entered promiscuous mode [ 79.738571][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.746032][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.754984][ T4274] device bridge_slave_0 entered promiscuous mode [ 79.763195][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.770598][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.781674][ T4278] device bridge_slave_1 entered promiscuous mode [ 79.821909][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.831909][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.839224][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.848382][ T4274] device bridge_slave_1 entered promiscuous mode [ 79.863227][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.881880][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.899148][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.929574][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.940689][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.953515][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.973426][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.992896][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.003779][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.039316][ T4278] team0: Port device team_slave_0 added [ 80.068968][ T4283] team0: Port device team_slave_0 added [ 80.083613][ T4278] team0: Port device team_slave_1 added [ 80.095188][ T4271] team0: Port device team_slave_0 added [ 80.104086][ T4279] team0: Port device team_slave_0 added [ 80.112121][ T4271] team0: Port device team_slave_1 added [ 80.121108][ T4274] team0: Port device team_slave_0 added [ 80.129379][ T4283] team0: Port device team_slave_1 added [ 80.146351][ T4279] team0: Port device team_slave_1 added [ 80.180717][ T4274] team0: Port device team_slave_1 added [ 80.229618][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.240893][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.267407][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.280293][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.288846][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.318416][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.330195][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.338213][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.364947][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.384260][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.391271][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.417820][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.429642][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.439670][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.466108][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.478014][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.485398][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.511792][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.530052][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.537388][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.563665][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.575523][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.582839][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.609254][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.621291][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.628735][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.655962][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.692594][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.699608][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.725823][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.763217][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 80.763233][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 80.763636][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 80.769759][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 80.788315][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 80.802136][ T4278] device hsr_slave_0 entered promiscuous mode [ 80.809322][ T4278] device hsr_slave_1 entered promiscuous mode [ 80.840866][ T4283] device hsr_slave_0 entered promiscuous mode [ 80.847969][ T4283] device hsr_slave_1 entered promiscuous mode [ 80.854973][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.862957][ T4283] Cannot create hsr debugfs directory [ 80.890079][ T4271] device hsr_slave_0 entered promiscuous mode [ 80.897107][ T4271] device hsr_slave_1 entered promiscuous mode [ 80.904595][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.912595][ T4271] Cannot create hsr debugfs directory [ 80.921896][ T4279] device hsr_slave_0 entered promiscuous mode [ 80.929323][ T4279] device hsr_slave_1 entered promiscuous mode [ 80.936464][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.944143][ T4279] Cannot create hsr debugfs directory [ 80.980174][ T4274] device hsr_slave_0 entered promiscuous mode [ 80.988595][ T4274] device hsr_slave_1 entered promiscuous mode [ 80.995423][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.003481][ T4274] Cannot create hsr debugfs directory [ 81.404379][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.417683][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.427381][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.438005][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.495636][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.506478][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.516807][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.527171][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.628899][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.657810][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.688974][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.709618][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.727619][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.774754][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.789946][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.799215][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.809697][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.823160][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.847521][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.857260][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.904555][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.915842][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.935292][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.948872][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.959410][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.971571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.981529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.992072][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.999764][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.014595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.053903][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.061897][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.071024][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.083905][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.093738][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.100983][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.126488][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.147191][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.157074][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.204353][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.215354][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.225485][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.234944][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.243936][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.251070][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.259319][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.268477][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.277164][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.284357][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.292700][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.301740][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.310748][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.319747][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.328896][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.337987][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.350578][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.382894][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.391032][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.399948][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.408758][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.417848][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.427859][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.436920][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.446193][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.455849][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.474238][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.484432][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.495308][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.503588][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.512536][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.525679][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.573247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.581838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.590742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.600210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.610641][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.617863][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.636371][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.668520][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.678141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.687866][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.697663][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.704962][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.714993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.734344][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.758991][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.796975][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.807931][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.817903][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.827041][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.835680][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.843321][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 82.845527][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 82.849951][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 82.857662][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 82.864281][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 82.887608][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.915449][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.942682][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.954422][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.974284][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.000946][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.021623][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.033702][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.055780][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.074761][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.084942][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.094848][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.105746][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.113264][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.121534][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.137192][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.147752][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.155159][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.171442][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.180846][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.207124][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.248632][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.266765][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.293583][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.313063][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.334272][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.370849][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.394352][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.419058][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.440509][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.451516][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.478357][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.503517][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.523043][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.543587][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.579120][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.586346][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.611569][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.626601][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.635666][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.645775][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.654603][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.661778][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.670199][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.680705][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.689260][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.705585][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.730510][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.773478][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.781095][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.797898][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.811472][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.824682][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.839974][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.850265][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.865398][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.878472][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.917637][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.935765][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.956625][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.969674][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.990298][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.008413][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.022701][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.049692][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.073223][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.160051][ T4271] device veth0_vlan entered promiscuous mode [ 84.191694][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.212037][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.222049][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.243457][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.251088][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.261916][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.286877][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.331356][ T4271] device veth1_vlan entered promiscuous mode [ 84.427075][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.453423][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.508806][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.531256][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.546123][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.570957][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.593051][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.601154][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.626035][ T4278] device veth0_vlan entered promiscuous mode [ 84.661927][ T4271] device veth0_macvtap entered promiscuous mode [ 84.700164][ T4271] device veth1_macvtap entered promiscuous mode [ 84.719705][ T4278] device veth1_vlan entered promiscuous mode [ 84.768780][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.777270][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.787553][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.797077][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.808481][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.817519][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.826644][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.838240][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.848862][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.868216][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.885743][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.905194][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.922754][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 84.933142][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 84.939233][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 84.942452][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 84.947046][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 84.976420][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.006039][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.022512][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.035703][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.046225][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.056331][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.065574][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.105626][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.137842][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.164503][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.177924][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.187405][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.201212][ T4278] device veth0_macvtap entered promiscuous mode [ 85.231976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.249334][ T4278] device veth1_macvtap entered promiscuous mode [ 85.288614][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.299572][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.308931][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.319049][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.329743][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.345747][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.382672][ T4279] device veth0_vlan entered promiscuous mode [ 85.392395][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.410962][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.427925][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.435648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.444654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.454129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.463427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.488231][ T4283] device veth0_vlan entered promiscuous mode [ 85.500555][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.516334][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.528712][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.539190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.547637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.555988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.567415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.576731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.585867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.601157][ T4279] device veth1_vlan entered promiscuous mode [ 85.630064][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.640000][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.651124][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.660481][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.685089][ T4283] device veth1_vlan entered promiscuous mode [ 85.704064][ T4274] device veth0_vlan entered promiscuous mode [ 85.733594][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.742998][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.758271][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.775798][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.794785][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.808084][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.817526][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.826847][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.843051][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.851956][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.860482][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.905405][ T4274] device veth1_vlan entered promiscuous mode [ 85.921916][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.935499][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.954426][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.980466][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.990235][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.001400][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.034269][ T4279] device veth0_macvtap entered promiscuous mode [ 86.060889][ T4283] device veth0_macvtap entered promiscuous mode [ 86.090577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.106621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.116506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.126858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.142079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.160861][ T4279] device veth1_macvtap entered promiscuous mode [ 86.179485][ T4283] device veth1_macvtap entered promiscuous mode [ 86.210283][ T4274] device veth0_macvtap entered promiscuous mode [ 86.251068][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.270176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.279643][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.285198][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.313149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.329664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.339415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.370067][ T4274] device veth1_macvtap entered promiscuous mode [ 86.383375][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.393214][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.407056][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.418284][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.430434][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.444089][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.469809][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.483628][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.496862][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.509938][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.521570][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.533129][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.546131][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.554757][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.565158][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.575096][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.584408][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.596327][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.607837][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.617891][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.628679][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.640185][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.653894][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.672362][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.681315][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.696232][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.714977][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.747149][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.767668][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.780541][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.790839][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.801588][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.811725][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.824926][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.836100][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.855499][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.871452][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.891086][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.906239][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.921079][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.953411][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.972733][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.985402][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.002514][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 87.007083][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 87.008749][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 87.015441][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 87.022150][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 87.042495][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.078816][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.113440][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.123747][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.134580][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.146437][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.160875][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.180795][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.214282][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.232773][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.243105][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.256942][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.267599][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.279426][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.294300][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.314023][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.336628][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.358591][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.368253][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.383226][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.397486][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.411481][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.423531][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.439283][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.449680][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.458989][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.468591][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.498334][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.692758][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.728145][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.756485][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.756825][ T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.786630][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.819306][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.827582][ T7] usb 2-1: SerialNumber: syz [ 87.890834][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.917811][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.949788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.982094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.081493][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.096306][ T7] usb 2-1: 0:2 : does not exist [ 88.101538][ T7] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 88.112580][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.121695][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.168102][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.178826][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.203261][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.211606][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.253458][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.261106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.268952][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.285873][ T7] usb 2-1: USB disconnect, device number 2 [ 88.290745][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.310060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.327665][ T4348] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.378334][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.523008][ T4348] usb 4-1: Using ep0 maxpacket: 32 [ 88.543665][ T4348] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.593376][ T4348] usb 4-1: config 0 has no interface number 0 [ 88.614581][ T4348] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.642615][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.661066][ T4348] usb 4-1: Product: syz [ 88.681891][ T4348] usb 4-1: Manufacturer: syz [ 88.702315][ T4348] usb 4-1: SerialNumber: syz [ 88.720445][ T4384] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 88.735895][ T4348] usb 4-1: config 0 descriptor?? [ 88.775312][ T4348] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 88.973861][ T4348] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 89.041678][ T4348] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 89.372331][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.420748][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 89.436318][ T4260] usb 4-1: USB disconnect, device number 2 [ 89.463756][ T4260] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 89.530137][ T4260] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.566607][ T4260] quatech2 4-1:0.51: device disconnected [ 89.580984][ T4320] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 89.621902][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.664442][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.698218][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 89.751929][ T4320] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 89.777524][ T4320] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 89.802008][ T4320] usb 3-1: Manufacturer: syz [ 89.844011][ T4320] usb 3-1: config 0 descriptor?? [ 90.282203][ C0] sched: RT throttling activated [ 90.290790][ T4320] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 90.312892][ T4398] loop0: detected capacity change from 0 to 2048 [ 90.349108][ T4320] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 90.362017][ T4400] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.410496][ T4395] loop1: detected capacity change from 0 to 131072 [ 90.426206][ T4395] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 90.434679][ T4395] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.457511][ T4395] F2FS-fs (loop1): invalid crc value [ 90.468771][ T4320] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 90.485648][ T4401] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.512492][ T4369] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.526215][ T4395] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.580223][ T4406] loop3: detected capacity change from 0 to 2048 [ 90.595024][ T4395] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.603089][ T4395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 90.643636][ T4406] ======================================================= [ 90.643636][ T4406] WARNING: The mand mount option has been deprecated and [ 90.643636][ T4406] and is ignored by this kernel. Remove the mand [ 90.643636][ T4406] option from the mount to silence this warning. [ 90.643636][ T4406] ======================================================= [ 90.712331][ T4369] usb 5-1: Using ep0 maxpacket: 32 [ 90.734852][ T4369] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 90.783164][ T4319] usb 3-1: USB disconnect, device number 2 [ 90.791232][ T4369] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 90.864957][ T4369] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 90.897538][ T4401] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 90.919564][ T4369] usb 5-1: Product: syz [ 90.939805][ T4369] usb 5-1: Manufacturer: syz [ 90.939880][ T4401] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 90.971555][ T4369] usb 5-1: SerialNumber: syz [ 91.000609][ T4401] Remounting filesystem read-only [ 91.066373][ T4408] fido_id[4408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 91.076835][ T4369] usb 5-1: config 0 descriptor?? [ 91.120624][ T4393] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 91.140447][ T4369] hub 5-1:0.0: bad descriptor, ignoring hub [ 91.150647][ T4369] hub: probe of 5-1:0.0 failed with error -5 [ 91.235391][ T4279] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 91.627948][ T4419] loop0: detected capacity change from 0 to 2048 [ 91.657966][ T4412] loop1: detected capacity change from 0 to 8192 [ 91.668475][ T4419] EXT4-fs: Ignoring removed nobh option [ 91.717239][ T4412] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.764234][ T4412] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 91.774472][ T4412] REISERFS (device loop1): using ordered data mode [ 91.781031][ T4412] reiserfs: using flush barriers [ 91.793210][ T4412] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.833312][ T4419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.841936][ T4419] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.849611][ T4412] REISERFS (device loop1): checking transaction log (loop1) [ 91.853327][ T4393] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 91.887357][ T125] cfg80211: failed to load regulatory.db [ 91.928399][ T26] audit: type=1800 audit(1779426167.045:2): pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 91.970900][ T4412] REISERFS (device loop1): Using r5 hash to sort names [ 91.994199][ T4412] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 92.055060][ T4393] usb 5-1: device firmware changed [ 92.065579][ T4348] usb 5-1: USB disconnect, device number 2 [ 92.162778][ T4430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22'. [ 92.190497][ T4412] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 92.213389][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 92.260070][ T4412] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 92.278061][ T4348] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.300520][ T4433] loop2: detected capacity change from 0 to 128 [ 92.332373][ T4412] REISERFS (device loop1): Remounting filesystem read-only [ 92.371259][ T4433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.383291][ T4412] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 92.401962][ T4433] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.504960][ T4433] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 18: comm syz.2.24: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 92.532619][ T4348] usb 5-1: Using ep0 maxpacket: 32 [ 92.541138][ T4348] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 92.562465][ T4433] EXT4-fs (loop2): Remounting filesystem read-only [ 92.591939][ T4433] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 92.634407][ T4433] EXT4-fs (loop2): Remounting filesystem read-only [ 92.643722][ T4348] usb 5-1: string descriptor 0 read error: -22 [ 92.650048][ T4348] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.715711][ T4348] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.761033][ T4348] usb 5-1: config 0 descriptor?? [ 92.805062][ T4348] usb 5-1: can't set config #0, error -71 [ 92.822972][ T4348] usb 5-1: USB disconnect, device number 3 [ 93.008270][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 93.254318][ T4451] input: syz1 as /devices/virtual/input/input5 [ 93.701508][ T4469] loop2: detected capacity change from 0 to 1024 [ 94.631503][ T4484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 94.842597][ T4319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.052356][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 95.059862][ T4319] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.102720][ T4319] usb 3-1: config 0 has no interface number 0 [ 95.135645][ T4319] usb 3-1: config 0 interface 184 has no altsetting 0 [ 95.186870][ T4319] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.223812][ T4495] loop1: detected capacity change from 0 to 1024 [ 95.230480][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.268001][ T4495] EXT4-fs: Ignoring removed orlov option [ 95.284769][ T4319] usb 3-1: Product: syz [ 95.319507][ T4319] usb 3-1: Manufacturer: syz [ 95.360139][ T4319] usb 3-1: SerialNumber: syz [ 95.398511][ T4319] usb 3-1: config 0 descriptor?? [ 95.438183][ T4319] smsc75xx v1.0.0 [ 95.465734][ T4495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.689857][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 95.802616][ T3598] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 96.010085][ T4473] loop0: detected capacity change from 0 to 262144 [ 96.025409][ T4473] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.40 (4473) [ 96.050614][ T4473] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 96.054684][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 96.061471][ T4473] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.072140][ T3598] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.072197][ T3598] usb 4-1: config 0 has no interface number 0 [ 96.072244][ T3598] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 96.072274][ T3598] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 96.072314][ T3598] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.072339][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.085056][ T3598] usb 4-1: config 0 descriptor?? [ 96.091033][ T4473] BTRFS info (device loop0): using free space tree [ 96.171411][ T4500] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 96.188423][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.212305][ T3598] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 96.222636][ T4348] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.269548][ T4473] BTRFS info (device loop0): enabling ssd optimizations [ 96.412281][ T4348] usb 5-1: Using ep0 maxpacket: 32 [ 96.419608][ T4348] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 96.443811][ T4348] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 96.456652][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 96.481905][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 96.498138][ T4348] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 96.501689][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 96.539453][ T4348] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.552400][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 96.583289][ T4319] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 96.599793][ T4348] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.616480][ T4319] usb 3-1: USB disconnect, device number 3 [ 96.618133][ T4320] usb 4-1: USB disconnect, device number 3 [ 96.631768][ T4279] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 96.644533][ T4348] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.667481][ T4348] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.696666][ T4348] usb 5-1: Product: syz [ 96.700923][ T4348] usb 5-1: Manufacturer: syz [ 96.738271][ T4348] usb 5-1: SerialNumber: syz [ 96.769231][ T4348] usb 5-1: config 0 descriptor?? [ 96.790596][ T4348] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.819837][ T4348] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 97.040398][ T4320] usb 5-1: USB disconnect, device number 4 [ 97.046533][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 97.114235][ T4320] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 97.167651][ T4540] mmap: syz.1.56 (4540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.716347][ T4550] loop1: detected capacity change from 0 to 32768 [ 97.792650][ T4550] JBD2: Ignoring recovery information on journal [ 97.863947][ T4550] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 98.081901][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 98.103163][ T4317] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.312762][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.340439][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.370494][ T4317] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 98.391990][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.431008][ T4317] usb 4-1: config 0 descriptor?? [ 98.442377][ T4348] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.619964][ T4566] loop0: detected capacity change from 0 to 4096 [ 98.639301][ T4348] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 98.665064][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.685645][ T4557] overlayfs: statfs failed on './file0' [ 98.692612][ T4348] usb 2-1: Product: syz [ 98.702815][ T4348] usb 2-1: Manufacturer: syz [ 98.717899][ T4348] usb 2-1: SerialNumber: syz [ 98.741069][ T4567] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.752896][ T4348] usb 2-1: config 0 descriptor?? [ 98.831150][ T4566] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 98.875960][ T4317] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.902437][ T4317] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.915253][ T4317] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.928339][ T4566] Remounting filesystem read-only [ 98.955946][ T4317] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.982370][ T4317] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 99.008049][ T4317] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 99.214176][ T4348] usb 2-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 99.310321][ T4571] loop2: detected capacity change from 0 to 32768 [ 99.322666][ T4571] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.67 (4571) [ 99.338444][ T4571] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.349193][ T4571] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 99.357991][ T4571] BTRFS info (device loop2): setting nodatacow, compression disabled [ 99.366483][ T4571] BTRFS info (device loop2): force clearing of disk cache [ 99.373806][ T4571] BTRFS info (device loop2): enabling ssd optimizations [ 99.380801][ T4571] BTRFS info (device loop2): using spread ssd allocation scheme [ 99.388546][ T4571] BTRFS info (device loop2): turning off barriers [ 99.395138][ T4571] BTRFS info (device loop2): disabling free space tree [ 99.402056][ T4571] BTRFS info (device loop2): not using ssd optimizations [ 99.409324][ T4571] BTRFS info (device loop2): not using spread ssd allocation scheme [ 99.418227][ T4348] usb 2-1: failed to fetch extended address, random address set [ 99.568009][ T4348] usb 2-1: USB disconnect, device number 3 [ 99.710695][ T4317] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 99.735258][ T4571] BTRFS info (device loop2): rebuilding free space tree [ 99.778224][ T4571] BTRFS info (device loop2): disabling free space tree [ 99.785570][ T4571] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.795777][ T4571] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.811259][ T4317] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 99.827293][ T4317] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 99.840416][ T4317] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 99.853256][ T4317] playstation: probe of 0003:054C:0DF2.0002 failed with error -71 [ 99.912413][ T4317] usb 4-1: USB disconnect, device number 4 [ 100.209266][ T4274] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.295035][ T4601] fido_id[4601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 100.695223][ T26] audit: type=1326 audit(1779426175.815:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4610 comm="syz.0.75" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd9159ce59 code=0x0 [ 100.919415][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.125601][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.142138][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 101.192080][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 101.212142][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.226665][ T7] usb 4-1: Product: syz [ 101.231006][ T7] usb 4-1: Manufacturer: syz [ 101.238768][ T7] usb 4-1: SerialNumber: syz [ 101.243213][ T4277] Bluetooth: hci4: command 0x0411 tx timeout [ 101.478810][ T7] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.741370][ T4634] loop4: detected capacity change from 0 to 512 [ 101.978141][ T4634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.990905][ T4634] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.214178][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 102.302481][ T4348] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.318226][ T7] usb 4-1: failed to enable PITCH for EP 0x82 [ 102.335083][ T7] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 102.352307][ T7] usb 4-1: clock source 0 is not valid, cannot use [ 102.369701][ T7] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 102.381743][ T7] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 102.452876][ T7] usb 4-1: USB disconnect, device number 5 [ 102.512430][ T4348] usb 1-1: Using ep0 maxpacket: 16 [ 102.520236][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.559624][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.622371][ T4348] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.662260][ T4348] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.671394][ T4348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.708530][ T4348] usb 1-1: config 0 descriptor?? [ 102.714515][ T4638] loop2: detected capacity change from 0 to 32768 [ 102.772589][ T4629] loop1: detected capacity change from 0 to 40427 [ 102.791804][ T4629] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 102.801020][ T4629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.814750][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.843016][ T4629] F2FS-fs (loop1): invalid crc value [ 102.862877][ T4638] XFS (loop2): Mounting V5 Filesystem [ 102.948349][ T4629] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.991390][ T4629] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 103.028392][ T4638] XFS (loop2): Ending clean mount [ 103.095021][ T4629] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.142355][ T4629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.181393][ T4348] microsoft 0003:045E:07DA.0003: unknown main item tag 0xe [ 103.212354][ T4348] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 103.219710][ T4348] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 103.278334][ T4348] microsoft 0003:045E:07DA.0003: report is too long [ 103.301743][ T4666] capability: warning: `syz.3.91' uses deprecated v2 capabilities in a way that may be insecure [ 103.308562][ T4348] microsoft 0003:045E:07DA.0003: item 0 4 0 11 parsing failed [ 103.372895][ T4348] microsoft 0003:045E:07DA.0003: parse failed [ 103.379127][ T4348] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 103.408260][ T4666] loop3: detected capacity change from 0 to 256 [ 103.430014][ T4348] usb 1-1: USB disconnect, device number 2 [ 103.480172][ T4666] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 103.613911][ T26] audit: type=1800 audit(1779426178.735:4): pid=4629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.83" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 103.920456][ T4274] XFS (loop2): Unmounting Filesystem [ 104.186612][ T4674] loop9: detected capacity change from 0 to 7 [ 104.273365][ T4676] process 'syz.3.96' launched './file0' with NULL argv: empty string added [ 104.306613][ T4674] Dev loop9: unable to read RDB block 7 [ 104.320168][ T4674] loop9: AHDI p1 p2 p3 [ 104.330686][ T4676] Invalid argument reading file caps for ./file0 [ 104.348879][ T4674] loop9: partition table partially beyond EOD, truncated [ 104.401542][ T4674] loop9: p1 start 1601398130 is beyond EOD, truncated [ 104.440251][ T4674] loop9: p2 start 1702059890 is beyond EOD, truncated [ 105.507165][ T4685] loop0: detected capacity change from 0 to 32768 [ 106.037854][ T4693] loop4: detected capacity change from 0 to 131072 [ 106.045386][ T4693] XFS: ikeep mount option is deprecated. [ 106.122838][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.180360][ T4693] XFS (loop4): Mounting V5 Filesystem [ 106.257654][ T4706] loop0: detected capacity change from 0 to 512 [ 106.290635][ T4706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 106.332489][ T4706] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.353027][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 106.365083][ T7] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.388590][ T4693] XFS (loop4): Starting recovery (logdev: internal) [ 106.419110][ T7] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.431421][ T4710] loop1: detected capacity change from 0 to 1024 [ 106.439781][ T7] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 106.467189][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.478183][ T4712] loop2: detected capacity change from 0 to 8 [ 106.510691][ T4706] EXT4-fs error (device loop0): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.0.104: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 106.559079][ T4693] XFS (loop4): Ending recovery (logdev: internal) [ 106.590053][ T4710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.601841][ T4712] squashfs image failed sanity check [ 106.622375][ T4710] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.680637][ T4706] EXT4-fs (loop0): Remounting filesystem read-only [ 106.688945][ T4712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 106.735577][ T4706] EXT4-fs error (device loop0): ext4_get_first_dir_block:3594: inode #12: comm syz.0.104: directory missing '.' [ 106.790626][ T4706] EXT4-fs (loop0): Remounting filesystem read-only [ 106.859914][ T4283] XFS (loop4): Unmounting Filesystem [ 106.881500][ T4715] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.105: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.944025][ T7] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 107.001494][ T4715] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 107.026839][ T4715] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.026839][ T4715] [ 107.158240][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 107.184303][ T4692] i2c i2c-1: unsupported multi-msg i2c transaction [ 107.222346][ T4531] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 107.238030][ T7] usb 4-1: USB disconnect, device number 6 [ 107.435573][ T4531] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.435609][ T4531] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.435649][ T4531] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.435675][ T4531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.446660][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 107.637470][ T4726] loop0: detected capacity change from 0 to 1024 [ 107.638583][ T4726] EXT4-fs: Ignoring removed bh option [ 107.658733][ T4531] usb 3-1: usb_control_msg returned -32 [ 107.658774][ T4531] usbtmc 3-1:16.0: can't read capabilities [ 107.703248][ T4726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 108.062471][ T4734] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 108.073225][ T4351] usb 3-1: USB disconnect, device number 4 [ 108.105343][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 108.732502][ T125] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.931232][ T125] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.973840][ T125] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 109.000027][ T125] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 109.059522][ T125] usb 2-1: string descriptor 0 read error: -22 [ 109.081465][ T125] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 109.101731][ T4758] loop2: detected capacity change from 0 to 512 [ 109.109055][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.422507][ T4348] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.475274][ T4751] loop4: detected capacity change from 0 to 32768 [ 109.543983][ T4758] EXT4-fs (loop2): Test dummy encryption mode enabled [ 109.556992][ T4758] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.577005][ T4758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.593600][ T4751] XFS (loop4): Mounting V5 Filesystem [ 109.604757][ T4758] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.123: bad orphan inode 131083 [ 109.617054][ T4348] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.625376][ T4758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.640210][ T4348] usb 1-1: string descriptor 0 read error: -22 [ 109.665934][ T4348] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 109.749180][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.805333][ T125] usb 2-1: USB disconnect, device number 4 [ 109.811560][ T4751] XFS (loop4): Ending clean mount [ 109.948020][ T4758] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 109.984516][ T4283] XFS (loop4): Unmounting Filesystem [ 110.095894][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 110.476298][ T4348] usb 1-1: 1:1: cannot get freq at ep 0x1 [ 110.555956][ T4348] usb 1-1: USB disconnect, device number 3 [ 110.896514][ T4789] loop4: detected capacity change from 0 to 2048 [ 110.910916][ T4260] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 110.951524][ T4793] loop3: detected capacity change from 0 to 16 [ 110.960269][ T4260] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.024180][ T4793] erofs: (device loop3): mounted with root inode @ nid 36. [ 111.056421][ T4789] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.197313][ T26] audit: type=1800 audit(1779426186.315:5): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.131" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 111.220404][ T4793] syz.3.131: attempt to access beyond end of device [ 111.220404][ T4793] loop3: rw=0, sector=34359738360, nr_sectors = 7 limit=16 [ 111.380395][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 111.552078][ T4805] loop1: detected capacity change from 0 to 1024 [ 111.618025][ T4805] EXT4-fs: Ignoring removed bh option [ 111.739434][ T4805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.959449][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 112.118015][ T4272] block nbd0: Receive control failed (result -107) [ 112.148605][ T4827] loop1: detected capacity change from 0 to 512 [ 112.156901][ T4827] EXT4-fs: Ignoring removed oldalloc option [ 112.167480][ T4827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.168466][ T4820] block nbd0: shutting down sockets [ 112.207495][ T4826] kernel read not supported for file /eth0 (pid: 4826 comm: syz.3.143) [ 112.267629][ T26] audit: type=1800 audit(1779426187.385:6): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.143" name="eth0" dev="mqueue" ino=35150 res=0 errno=0 [ 112.269295][ T4829] 9pnet_fd: Insufficient options for proto=fd [ 112.364302][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 113.137725][ T4861] loop3: detected capacity change from 0 to 1024 [ 113.153333][ T4861] EXT4-fs: Ignoring removed oldalloc option [ 113.169671][ T4861] EXT4-fs: Ignoring removed oldalloc option [ 113.202906][ T4861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.277754][ T4861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.335028][ T4868] loop0: detected capacity change from 0 to 128 [ 113.403966][ T4868] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 113.452817][ T4868] hpfs: filesystem error: improperly stopped [ 113.458908][ T4868] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 113.469246][ T4868] hpfs: You really don't want any checks? You are crazy... [ 113.485112][ T4868] hpfs: hpfs_map_sector(): read error [ 113.495187][ T4868] hpfs: code page support is disabled [ 113.509655][ T4868] hpfs: hpfs_map_4sectors(): unaligned read [ 113.519278][ T4868] hpfs: hpfs_map_4sectors(): unaligned read [ 113.525651][ T4868] hpfs: filesystem error: unable to find root dir [ 113.733030][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 113.896716][ T4874] loop2: detected capacity change from 0 to 4096 [ 114.405846][ T4896] tun0: tun_chr_ioctl cmd 1074025675 [ 114.416932][ T4896] tun0: persist enabled [ 114.431054][ T4896] tun0: tun_chr_ioctl cmd 1074025675 [ 114.449100][ T4896] tun0: persist enabled [ 114.595618][ T4898] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 114.595618][ T4898] [ 114.755617][ T4904] loop3: detected capacity change from 0 to 2048 [ 114.839067][ T4904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.851604][ T4904] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.894321][ T4911] loop1: detected capacity change from 0 to 512 [ 114.936611][ T4317] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.955470][ T4904] fs-verity: sha512 using implementation "sha512-avx2" [ 115.127635][ T4904] syz.3.176 (4904) used greatest stack depth: 20592 bytes left [ 115.148423][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 115.156882][ T4317] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.179586][ T4317] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.219238][ T4317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.241359][ T4317] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 115.260121][ T4317] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 115.311603][ T4917] loop3: detected capacity change from 0 to 64 [ 115.323878][ T4317] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.363188][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.371319][ T4317] usb 3-1: Product: syz [ 115.407248][ T4919] loop4: detected capacity change from 0 to 512 [ 115.424913][ T4317] usb 3-1: Manufacturer: syz [ 115.450035][ T4317] cdc_wdm 3-1:1.0: skipping garbage [ 115.477503][ T4317] cdc_wdm 3-1:1.0: skipping garbage [ 115.490967][ T4919] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.509037][ T4317] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 115.537836][ T4919] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 115.561670][ T4917] hfs: request for non-existent node 32512 in B*Tree [ 115.578965][ T4317] cdc_wdm 3-1:1.0: Unknown control protocol [ 115.595640][ T4919] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.183: Corrupt directory, running e2fsck is recommended [ 115.695035][ T4917] hfs: request for non-existent node 32512 in B*Tree [ 115.760944][ T4919] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 115.792426][ T4919] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.183: corrupted in-inode xattr [ 115.800404][ T4917] hfs: request for non-existent node 32512 in B*Tree [ 115.936881][ T4917] hfs: request for non-existent node 32512 in B*Tree [ 116.312859][ T4919] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.183: couldn't read orphan inode 15 (err -117) [ 116.525889][ T4919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.637375][ T4919] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.665227][ T63] hfs: request for non-existent node 32512 in B*Tree [ 116.681122][ T4919] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 116.691902][ T63] hfs: request for non-existent node 32512 in B*Tree [ 116.772343][ T4919] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.183: Corrupt directory, running e2fsck is recommended [ 116.806930][ T4935] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.868646][ T4935] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 116.899841][ T4935] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.183: Corrupt directory, running e2fsck is recommended [ 116.925307][ T4319] usb 3-1: USB disconnect, device number 5 [ 116.969445][ T4919] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.991044][ T4919] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 117.002154][ T4919] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.183: Corrupt directory, running e2fsck is recommended [ 117.039384][ T4941] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.056526][ T4939] loop0: detected capacity change from 0 to 4096 [ 117.151133][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 117.530123][ T4954] Bluetooth: MGMT ver 1.22 [ 118.642213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 118.759097][ T4959] loop0: detected capacity change from 0 to 2048 [ 118.902229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 118.938681][ T4956] loop4: detected capacity change from 0 to 8192 [ 118.949321][ T4956] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.962590][ T4956] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 118.972480][ T4956] REISERFS (device loop4): using ordered data mode [ 118.979060][ T4956] reiserfs: using flush barriers [ 118.989650][ T4959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.016807][ T4956] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.052707][ T4956] REISERFS (device loop4): checking transaction log (loop4) [ 119.234719][ T4977] loop2: detected capacity change from 0 to 8 [ 119.268432][ T4956] REISERFS (device loop4): Using tea hash to sort names [ 119.290707][ T4977] SQUASHFS error: zlib decompression failed, data probably corrupt [ 119.322702][ T4956] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 119.342340][ T4977] SQUASHFS error: Failed to read block 0x9b: -5 [ 119.382913][ T4977] SQUASHFS error: Unable to read metadata cache entry [99] [ 119.390223][ T4977] SQUASHFS error: Unable to read inode 0x127 [ 119.440827][ T26] audit: type=1800 audit(1779426194.555:7): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.194" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 119.654313][ T4981] loop3: detected capacity change from 0 to 4096 [ 119.754280][ T4981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 119.984318][ T4992] overlayfs: conflicting lowerdir path [ 120.012497][ T4348] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.140538][ T4995] netlink: 'syz.4.205': attribute type 12 has an invalid length. [ 120.188489][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 120.204808][ T4348] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.232254][ T4348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.282568][ T4348] usb 1-1: config 0 descriptor?? [ 120.302732][ T4348] cp210x 1-1:0.0: cp210x converter detected [ 120.573692][ T4976] loop1: detected capacity change from 0 to 32768 [ 120.777479][ T4348] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 120.799066][ T4348] usb 1-1: cp210x converter now attached to ttyUSB0 [ 120.815968][ T4976] XFS (loop1): Mounting V5 Filesystem [ 120.862210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.872241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 120.882213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 121.522237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 121.532222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 121.542220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 121.552218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 121.562219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 121.663669][ T125] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.831951][ T4260] usb 1-1: USB disconnect, device number 4 [ 121.922573][ T125] usb 5-1: Using ep0 maxpacket: 16 [ 121.931036][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.038823][ T4260] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 122.225611][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.412772][ T4260] cp210x 1-1:0.0: device disconnected [ 122.530173][ T125] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 122.798877][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.819408][ T125] usb 5-1: config 0 descriptor?? [ 122.925395][ T4976] XFS (loop1): Ending clean mount [ 123.078039][ T4976] XFS (loop1): Quotacheck needed: Please wait. [ 123.219217][ T4976] XFS (loop1): Quotacheck: Done. [ 123.256873][ T5026] loop3: detected capacity change from 0 to 2048 [ 123.288358][ T5026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.330740][ T4271] XFS (loop1): Unmounting Filesystem [ 123.422323][ T4320] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.436882][ T125] usb 5-1: language id specifier not provided by device, defaulting to English [ 123.684660][ T125] letsketch 0003:6161:4D15.0006: Device info:  [ 123.793978][ T4320] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.847414][ T4320] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 124.152270][ T125] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 124.294625][ T125] letsketch: probe of 0003:6161:4D15.0006 failed with error -71 [ 124.441074][ T4320] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.478600][ T125] usb 5-1: USB disconnect, device number 5 [ 124.489524][ T4320] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 124.572524][ T4320] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 124.608645][ T4320] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.620213][ T5038] loop3: detected capacity change from 0 to 256 [ 124.632601][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.640684][ T4320] usb 1-1: Product: syz [ 124.672599][ T4320] usb 1-1: Manufacturer: syz [ 124.703510][ T4320] cdc_wdm 1-1:1.0: skipping garbage [ 124.708808][ T4320] cdc_wdm 1-1:1.0: skipping garbage [ 124.737612][ T5038] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 124.757673][ T4320] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 124.794046][ T4320] cdc_wdm 1-1:1.0: Unknown control protocol [ 124.842704][ T5040] loop2: detected capacity change from 0 to 1024 [ 124.850038][ T5040] EXT4-fs: Ignoring removed oldalloc option [ 124.897406][ T5040] EXT4-fs: Ignoring removed oldalloc option [ 124.912909][ T5040] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.928188][ T5042] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 124.995955][ C1] cdc_wdm 1-1:1.0: unknown notification 12 received: index 3468 len 39329 [ 125.032537][ T5040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.070400][ T5050] loop3: detected capacity change from 0 to 16 [ 125.110447][ T5050] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.152044][ T5050] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 125.199296][ T4320] usb 1-1: USB disconnect, device number 5 [ 125.262645][ T5050] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 125.457477][ T5055] loop4: detected capacity change from 0 to 4096 [ 125.469764][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 125.491696][ T5055] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 125.607191][ T26] audit: type=1800 audit(1779426200.725:8): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.222" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 125.669863][ T26] audit: type=1800 audit(1779426200.725:9): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.222" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 125.748674][ T26] audit: type=1800 audit(1779426200.775:10): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.222" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 125.825098][ T30] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 125.847013][ T30] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 126.046424][ T4283] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 127.970070][ T5086] device syzkaller1 entered promiscuous mode [ 128.192253][ T4531] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.211143][ T4320] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.422482][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 128.490605][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.655891][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.969373][ T4320] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 129.009632][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.100776][ T4320] usb 4-1: config 0 descriptor?? [ 129.192244][ T4531] usb 5-1: Using ep0 maxpacket: 32 [ 129.213705][ T4531] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=89.53 [ 129.242283][ T4531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.250370][ T4531] usb 5-1: Product: syz [ 129.289653][ T4531] usb 5-1: Manufacturer: syz [ 129.299740][ T4531] usb 5-1: SerialNumber: syz [ 129.334386][ T5107] loop2: detected capacity change from 0 to 1024 [ 129.423876][ T5107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 129.471944][ T5107] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 129.496685][ T5107] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 129.563471][ T4531] speedtch 5-1:5.0: speedtch_bind: wrong device class 71 [ 129.570622][ T4531] speedtch 5-1:5.0: usbatm_usb_probe: bind failed: -19! [ 129.730360][ T4320] usb 4-1: language id specifier not provided by device, defaulting to English [ 129.913768][ T5107] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.913768][ T5107] [ 129.952808][ T4320] letsketch 0003:6161:4D15.0007: Device info:  [ 130.221292][ T4320] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 130.253967][ T5107] EXT4-fs (loop2): Total free blocks count 0 [ 130.339875][ T4320] letsketch: probe of 0003:6161:4D15.0007 failed with error -71 [ 130.510527][ T5107] EXT4-fs (loop2): Free/Dirty block details [ 130.573466][ T4531] usb 5-1: USB disconnect, device number 6 [ 130.614752][ T5107] EXT4-fs (loop2): free_blocks=68451041280 [ 130.623174][ T4320] usb 4-1: USB disconnect, device number 7 [ 130.639105][ T5107] EXT4-fs (loop2): dirty_blocks=80 [ 130.645224][ T5107] EXT4-fs (loop2): Block reservation details [ 130.652015][ T5107] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 130.704918][ T4298] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 130.860066][ T5126] trusted_key: encrypted_key: insufficient parameters specified [ 133.365767][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.395303][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.012395][ T4531] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.055863][ T5149] device pim6reg1 entered promiscuous mode [ 134.202712][ T4531] usb 4-1: Using ep0 maxpacket: 32 [ 134.214856][ T5151] loop4: detected capacity change from 0 to 4096 [ 134.224143][ T4531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.251681][ T5151] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 134.255672][ T4531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.311948][ T4531] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 134.343262][ T4531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.363805][ T4531] usb 4-1: config 0 descriptor?? [ 134.825411][ T4531] usb 4-1: can't set config #0, error -71 [ 135.225737][ T4531] usb 4-1: USB disconnect, device number 8 [ 135.372692][ T5156] loop3: detected capacity change from 0 to 2048 [ 135.467724][ T5157] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.555508][ T5156] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '..' [ 135.590614][ T5159] loop4: detected capacity change from 0 to 256 [ 135.611149][ T5156] Remounting filesystem read-only [ 135.766259][ T5159] FAT-fs (loop4): Directory bread(block 64) failed [ 135.777478][ T5159] FAT-fs (loop4): Directory bread(block 65) failed [ 135.813832][ T5159] FAT-fs (loop4): Directory bread(block 66) failed [ 135.820498][ T5159] FAT-fs (loop4): Directory bread(block 67) failed [ 135.896909][ T5159] FAT-fs (loop4): Directory bread(block 68) failed [ 135.912510][ T5159] FAT-fs (loop4): Directory bread(block 69) failed [ 135.919209][ T5159] FAT-fs (loop4): Directory bread(block 70) failed [ 135.980177][ T5159] FAT-fs (loop4): Directory bread(block 71) failed [ 136.007591][ T5159] FAT-fs (loop4): Directory bread(block 72) failed [ 136.017106][ T5165] loop0: detected capacity change from 0 to 1024 [ 136.041762][ T5159] FAT-fs (loop4): Directory bread(block 73) failed [ 136.262443][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 136.354626][ T5167] device bond_slave_0 entered promiscuous mode [ 136.361298][ T5167] device bond_slave_1 entered promiscuous mode [ 136.443157][ T5167] device macvlan2 entered promiscuous mode [ 136.462363][ T5167] device bond0 entered promiscuous mode [ 136.490035][ T5167] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.517036][ T4272] block nbd2: Receive control failed (result -32) [ 137.517673][ T5183] block nbd2: shutting down sockets [ 137.684222][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 139.467779][ T5196] loop0: detected capacity change from 0 to 2048 [ 139.631751][ T5203] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.721760][ T5201] loop4: detected capacity change from 0 to 32768 [ 139.738610][ T5201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.273 (5201) [ 139.754938][ T5201] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.765266][ T5201] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 139.774092][ T5201] BTRFS info (device loop4): setting nodatasum [ 139.780343][ T5201] BTRFS info (device loop4): force zlib compression, level 3 [ 139.788299][ T5201] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 139.798124][ T5201] BTRFS info (device loop4): use lzo compression, level 0 [ 139.805386][ T5201] BTRFS info (device loop4): turning on flush-on-commit [ 139.812427][ T5201] BTRFS info (device loop4): enabling auto defrag [ 139.818900][ T5201] BTRFS info (device loop4): max_inline at 4096 [ 139.825287][ T5201] BTRFS info (device loop4): using free space tree [ 140.311891][ T5201] BTRFS info (device loop4): enabling ssd optimizations [ 140.991080][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.447949][ T5239] loop2: detected capacity change from 0 to 32768 [ 141.466175][ T5239] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 141.474936][ T5239] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 141.511847][ T5239] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 141.552931][ T125] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 141.560138][ T125] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 141.774239][ T5245] loop3: detected capacity change from 0 to 2048 [ 141.861265][ T5245] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.896628][ T125] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 336ms [ 141.993296][ T125] gfs2: fsid=syz:syz.0: jid=0: Done [ 142.040409][ T5239] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 142.228156][ T5239] gfs2: fsid=syz:syz.0: found 1 quota changes [ 142.334157][ T5247] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 142.334157][ T5247] inode = 11 2339 [ 142.334157][ T5247] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 142.502988][ T5247] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 142.583400][ T5247] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5247 [gfs2_quotad] gfs2_quota_sync+0x32c/0x700 [ 142.648829][ T5247] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 142.689485][ T5247] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 142.773521][ T5247] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 142.809293][ T5247] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 142.851032][ T5247] gfs2: fsid=syz:syz.0: File system withdrawn [ 142.883152][ T5247] CPU: 1 PID: 5247 Comm: gfs2_quotad Not tainted syzkaller #0 [ 142.890706][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.900827][ T5247] Call Trace: [ 142.904152][ T5247] [ 142.907126][ T5247] dump_stack_lvl+0x188/0x24e [ 142.911869][ T5247] ? kobject_uevent_env+0x35f/0x8a0 [ 142.917125][ T5247] ? show_regs_print_info+0x12/0x12 [ 142.922405][ T5247] ? load_image+0x400/0x400 [ 142.926972][ T5247] ? kobject_uevent_env+0x35f/0x8a0 [ 142.932241][ T5247] gfs2_withdraw+0xde6/0x15d0 [ 142.937004][ T5247] ? gfs2_lm+0x240/0x240 [ 142.941312][ T5247] ? gfs2_consist_inode_i+0xf1/0x110 [ 142.946657][ T5247] gfs2_inode_refresh+0xb64/0xfd0 [ 142.951749][ T5247] ? gfs2_inode_metasync+0xf0/0xf0 [ 142.956938][ T5247] ? gfs2_glock_nq+0xcf0/0x14e0 [ 142.961842][ T5247] gfs2_instantiate+0x15e/0x210 [ 142.966748][ T5247] gfs2_glock_wait+0x1d0/0x2a0 [ 142.971562][ T5247] do_sync+0x4bf/0xc40 [ 142.975686][ T5247] ? gfs2_quota_sync+0x32c/0x700 [ 142.980683][ T5247] ? slot_put+0x1e0/0x1e0 [ 142.985069][ T5247] ? __lock_acquire+0x7d10/0x7d10 [ 142.990155][ T5247] ? do_raw_spin_lock+0x128/0x2f0 [ 142.995228][ T5247] ? gfs2_quota_sync+0x32c/0x700 [ 143.000220][ T5247] ? do_raw_spin_unlock+0x11d/0x230 [ 143.005469][ T5247] gfs2_quota_sync+0x32c/0x700 [ 143.010309][ T5247] gfs2_quotad+0x420/0x680 [ 143.014797][ T5247] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 143.019967][ T5247] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 143.025938][ T5247] ? wake_bit_function+0x200/0x200 [ 143.031113][ T5247] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 143.037071][ T5247] ? __kthread_parkme+0x162/0x1c0 [ 143.042171][ T5247] kthread+0x29d/0x330 [ 143.046290][ T5247] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 143.051459][ T5247] ? kthread_blkcg+0xd0/0xd0 [ 143.056102][ T5247] ret_from_fork+0x1f/0x30 [ 143.060603][ T5247] [ 144.274415][ T4274] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 144.363509][ T4274] CPU: 1 PID: 4274 Comm: syz-executor Not tainted syzkaller #0 [ 144.371120][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.381211][ T4274] Call Trace: [ 144.384509][ T4274] [ 144.387450][ T4274] dump_stack_lvl+0x188/0x24e [ 144.392175][ T4274] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 144.397337][ T4274] ? show_regs_print_info+0x12/0x12 [ 144.402571][ T4274] ? load_image+0x400/0x400 [ 144.407102][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 144.412320][ T4274] gfs2_assert_warn_i+0x18f/0x2c0 [ 144.417371][ T4274] gfs2_quota_cleanup+0x4b4/0x6a0 [ 144.422439][ T4274] gfs2_put_super+0x22f/0x8c0 [ 144.427186][ T4274] ? gfs2_evict_inode+0x11d0/0x11d0 [ 144.432440][ T4274] generic_shutdown_super+0x130/0x340 [ 144.437851][ T4274] kill_block_super+0x7c/0xe0 [ 144.442555][ T4274] deactivate_locked_super+0x93/0xf0 [ 144.447871][ T4274] cleanup_mnt+0x42c/0x4b0 [ 144.452334][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 144.457594][ T4274] task_work_run+0x1d0/0x260 [ 144.462247][ T4274] ? task_work_cancel+0x220/0x220 [ 144.467338][ T4274] ? exit_to_user_mode_loop+0x3b/0x110 [ 144.472836][ T4274] exit_to_user_mode_loop+0xe6/0x110 [ 144.478168][ T4274] exit_to_user_mode_prepare+0xee/0x180 [ 144.483777][ T4274] syscall_exit_to_user_mode+0x16/0x40 [ 144.489275][ T4274] do_syscall_64+0x58/0xa0 [ 144.493735][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 144.498440][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 144.503139][ T4274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.509050][ T4274] RIP: 0033:0x7f5fc599e097 [ 144.513487][ T4274] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 144.533112][ T4274] RSP: 002b:00007ffe5da60ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 144.541535][ T4274] RAX: 0000000000000000 RBX: 00007f5fc5a321ca RCX: 00007f5fc599e097 [ 144.549525][ T4274] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5da60fb0 [ 144.557517][ T4274] RBP: 00007ffe5da60fb0 R08: 00007ffe5da61fb0 R09: 00000000ffffffff [ 144.565505][ T4274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5da62040 [ 144.573592][ T4274] R13: 00007f5fc5a321ca R14: 0000000000022c55 R15: 00007ffe5da62080 [ 144.581634][ T4274] [ 145.523480][ T5263] loop1: detected capacity change from 0 to 131072 [ 145.592019][ T5263] F2FS-fs (loop1): invalid crc value [ 145.868655][ T5263] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.908852][ T5263] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 145.955160][ T5263] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 146.695995][ T128] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.771206][ T5285] loop3: detected capacity change from 0 to 1024 [ 146.892306][ T128] usb 5-1: Using ep0 maxpacket: 32 [ 146.899791][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.997929][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.062300][ T128] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 147.864641][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.875202][ T128] usb 5-1: config 0 descriptor?? [ 148.930089][ T128] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 148.951206][ T128] usb 5-1: USB disconnect, device number 7 [ 151.557056][ T5316] loop4: detected capacity change from 0 to 256 [ 151.579192][ T5306] fido_id[5306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 151.743170][ T4351] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.987495][ T4351] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 152.109495][ T4351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.399876][ T4351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.584471][ T5316] FAT-fs (loop4): Directory bread(block 64) failed [ 152.633494][ T4351] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.746717][ T5316] FAT-fs (loop4): Directory bread(block 65) failed [ 152.871915][ T5316] FAT-fs (loop4): Directory bread(block 66) failed [ 152.922484][ T4351] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.050127][ T5316] FAT-fs (loop4): Directory bread(block 67) failed [ 153.107722][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.181996][ T5316] FAT-fs (loop4): Directory bread(block 68) failed [ 153.330891][ T5316] FAT-fs (loop4): Directory bread(block 69) failed [ 153.416144][ T5322] loop2: detected capacity change from 0 to 256 [ 153.431147][ T4351] usb 4-1: config 0 descriptor?? [ 153.476232][ T5316] FAT-fs (loop4): Directory bread(block 70) failed [ 153.632425][ T5316] FAT-fs (loop4): Directory bread(block 71) failed [ 153.649519][ T5316] FAT-fs (loop4): Directory bread(block 72) failed [ 153.669801][ T5316] FAT-fs (loop4): Directory bread(block 73) failed [ 153.785255][ T5324] loop1: detected capacity change from 0 to 128 [ 153.806110][ T5322] FAT-fs (loop2): Directory bread(block 64) failed [ 153.833219][ T5322] FAT-fs (loop2): Directory bread(block 65) failed [ 153.840019][ T5322] FAT-fs (loop2): Directory bread(block 66) failed [ 153.912303][ T5322] FAT-fs (loop2): Directory bread(block 67) failed [ 153.934249][ T5326] loop0: detected capacity change from 0 to 2048 [ 153.942096][ T4351] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 153.952392][ T5322] FAT-fs (loop2): Directory bread(block 68) failed [ 153.959008][ T5322] FAT-fs (loop2): Directory bread(block 69) failed [ 153.976111][ T4351] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 153.991767][ T5322] FAT-fs (loop2): Directory bread(block 70) failed [ 154.026891][ T5322] FAT-fs (loop2): Directory bread(block 71) failed [ 154.036980][ T5326] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 154.058273][ T5322] FAT-fs (loop2): Directory bread(block 72) failed [ 154.079874][ T4351] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 154.086087][ T5322] FAT-fs (loop2): Directory bread(block 73) failed [ 154.124604][ T5326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.321178][ T4351] usb 4-1: USB disconnect, device number 9 [ 154.349154][ T5322] FAT-fs (loop2): Filesystem has been set read-only [ 155.368625][ T5327] fido_id[5327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 155.470467][ T5333] loop1: detected capacity change from 0 to 1024 [ 155.737779][ T5333] hfsplus: xattr searching failed [ 155.776067][ T5333] hfsplus: xattr searching failed [ 155.798874][ T5333] hfsplus: xattr searching failed [ 155.819262][ T5337] loop2: detected capacity change from 0 to 4096 [ 155.892001][ T5337] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 155.922291][ T5337] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 155.974522][ T5337] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 156.025774][ T5337] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 156.098582][ T5337] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 156.175826][ T5337] ntfs: volume version 3.1. [ 156.206716][ T5337] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 156.276377][ T5337] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 156.382918][ T5337] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 156.465577][ T5337] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 156.504687][ T5337] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 157.057667][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.217009][ T5380] loop1: detected capacity change from 0 to 2048 [ 157.252328][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 157.260862][ T27] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 157.293190][ T27] usb 5-1: config 0 has no interface number 0 [ 157.314047][ T27] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 157.342295][ T5381] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.367161][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.423050][ T27] usb 5-1: Product: syz [ 157.427310][ T27] usb 5-1: Manufacturer: syz [ 157.431945][ T27] usb 5-1: SerialNumber: syz [ 157.437939][ T5381] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 157.451842][ T5383] overlayfs: conflicting lowerdir path [ 157.461032][ T5383] overlayfs: conflicting lowerdir path [ 157.550062][ T5381] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 157.573728][ T27] usb 5-1: config 0 descriptor?? [ 157.603285][ T27] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 157.614322][ T5381] Remounting filesystem read-only [ 157.680697][ T5386] loop2: detected capacity change from 0 to 2048 [ 157.708281][ T4271] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 157.807745][ T27] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 157.879730][ T27] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 158.028178][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 41 [ 158.199346][ T5376] loop0: detected capacity change from 0 to 32768 [ 158.235022][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 158.264927][ T4541] usb 5-1: USB disconnect, device number 8 [ 158.274356][ T5396] loop3: detected capacity change from 0 to 4096 [ 158.306225][ T4541] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 158.311716][ T5396] ntfs: volume version 3.1. [ 158.322943][ T4351] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.379032][ T4541] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 158.424850][ T4541] quatech2 5-1:0.51: device disconnected [ 158.542352][ T4351] usb 2-1: Using ep0 maxpacket: 32 [ 158.549688][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.589091][ T5398] loop2: detected capacity change from 0 to 512 [ 158.599259][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.652870][ T5398] EXT4-fs (loop2): 1 truncate cleaned up [ 158.657185][ T4351] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 158.668297][ T5398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 158.773499][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.886346][ T4351] usb 2-1: config 0 descriptor?? [ 159.665655][ T4351] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 159.821318][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 159.903227][ T5411] device syzkaller1 entered promiscuous mode [ 159.998910][ T4532] usb 2-1: USB disconnect, device number 5 [ 160.092387][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'. [ 160.118471][ T5412] fido_id[5412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 160.297703][ T4351] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 160.531701][ T4351] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 160.571374][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 160.600598][ T4351] usb 4-1: Product: syz [ 160.607264][ T4351] usb 4-1: config 0 descriptor?? [ 160.642630][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.653666][ T4351] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 160.665579][ T4351] usb 4-1: Detected FT232H [ 160.711963][ T5431] loop4: detected capacity change from 0 to 512 [ 160.732992][ T5431] EXT4-fs: Ignoring removed i_version option [ 160.757654][ T5431] EXT4-fs: Ignoring removed oldalloc option [ 160.791388][ T5431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 160.847612][ T4351] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 160.854784][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 160.863067][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 160.876713][ T27] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 160.887660][ T27] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 160.896386][ T27] usb 3-1: Product: syz [ 160.900875][ T27] usb 3-1: Manufacturer: syz [ 160.906776][ T27] usb 3-1: SerialNumber: syz [ 160.911264][ T4532] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.920071][ T27] usb 3-1: config 0 descriptor?? [ 160.927311][ T5424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 160.936956][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 160.943102][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 161.044973][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 161.134411][ T4532] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.177493][ T4532] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.201208][ T4532] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 161.210853][ T4532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.227903][ T4532] usb 1-1: config 0 descriptor?? [ 161.290454][ T4351] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 161.633210][ T5424] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 161.886977][ T27] usb 4-1: USB disconnect, device number 10 [ 161.919470][ T5424] usb 3-1: device firmware changed [ 161.947818][ T4365] usb 3-1: USB disconnect, device number 6 [ 162.090901][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.107168][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.225297][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.291312][ T27] ftdi_sio 4-1:0.0: device disconnected [ 162.490966][ T4320] usb 1-1: USB disconnect, device number 6 [ 162.612389][ T4365] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.872327][ T4365] usb 3-1: Using ep0 maxpacket: 32 [ 162.892357][ T4365] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.927269][ T4365] usb 3-1: string descriptor 0 read error: -22 [ 163.037335][ T4365] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.213948][ T4365] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.431399][ T4365] usb 3-1: config 0 descriptor?? [ 163.714778][ T4365] usb 3-1: can't set config #0, error -71 [ 163.724816][ T4365] usb 3-1: USB disconnect, device number 7 [ 163.877885][ T5466] loop4: detected capacity change from 0 to 512 [ 163.935746][ T5466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.945092][ T5466] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.995113][ T5467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.362'. [ 164.182409][ T4365] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.382249][ T4365] usb 3-1: Using ep0 maxpacket: 32 [ 164.399495][ T4365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.399534][ T4365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.399575][ T4365] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 164.399600][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.424882][ T4365] usb 3-1: config 0 descriptor?? [ 164.524866][ T5481] device syzkaller1 entered promiscuous mode [ 165.504851][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 165.527779][ T4365] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 165.762357][ T4351] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.812515][ T4351] usb 2-1: device descriptor read/all, error -71 [ 169.875413][ T5498] usb 3-1: USB disconnect, device number 8 [ 171.213411][ T5503] loop2: detected capacity change from 0 to 32768 [ 171.269777][ T5503] JBD2: Ignoring recovery information on journal [ 171.372435][ T4351] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.386816][ T5503] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 171.483806][ T5499] fido_id[5499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 171.622377][ T4351] usb 2-1: Using ep0 maxpacket: 32 [ 171.637704][ T4351] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 171.746575][ T4351] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 171.823040][ T4351] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 171.825717][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 171.877323][ T4351] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 171.977328][ T4351] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.013981][ T4351] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 172.068565][ T4351] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 172.101633][ T4351] usb 2-1: Product: syz [ 172.168877][ T4351] usb 2-1: Manufacturer: syz [ 172.238977][ T4351] usb 2-1: SerialNumber: syz [ 172.652462][ T128] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.890939][ T4351] usb 2-1: config 0 descriptor?? [ 172.899090][ T4351] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 173.004047][ T128] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 173.022001][ T4351] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 173.042414][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.088340][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.155154][ T128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.168583][ T128] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.178631][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.205491][ T128] usb 3-1: config 0 descriptor?? [ 173.221340][ T4365] usb 2-1: USB disconnect, device number 8 [ 173.221588][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 173.239551][ T4365] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 173.302892][ T5519] loop0: detected capacity change from 0 to 2048 [ 173.343400][ T5519] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 173.378080][ T5519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.400214][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 173.637930][ T128] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 173.664511][ T128] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 173.691689][ T128] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 173.712497][ T5525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.382'. [ 173.862210][ T5247] ================================================================== [ 173.870357][ T5247] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 173.877702][ T5247] Read of size 8 at addr ffff888023e44bb0 by task gfs2_quotad/5247 [ 173.885625][ T5247] [ 173.887984][ T5247] CPU: 0 PID: 5247 Comm: gfs2_quotad Not tainted syzkaller #0 [ 173.895479][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.905577][ T5247] Call Trace: [ 173.908899][ T5247] [ 173.911862][ T5247] dump_stack_lvl+0x188/0x24e [ 173.916588][ T5247] ? __lock_acquire+0x7d10/0x7d10 [ 173.921659][ T5247] ? show_regs_print_info+0x12/0x12 [ 173.926904][ T5247] ? load_image+0x400/0x400 [ 173.931456][ T5247] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 173.936953][ T5247] ? __virt_addr_valid+0x188/0x540 [ 173.942119][ T5247] ? __virt_addr_valid+0x465/0x540 [ 173.947275][ T5247] ? __lock_acquire+0x106/0x7d10 [ 173.952256][ T5247] print_report+0xa8/0x210 [ 173.956724][ T5247] kasan_report+0x10b/0x140 [ 173.961275][ T5247] ? __lock_acquire+0x106/0x7d10 [ 173.966263][ T5247] __lock_acquire+0x106/0x7d10 [ 173.971080][ T5247] ? verify_lock_unused+0x140/0x140 [ 173.976333][ T5247] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 173.982367][ T5247] ? lock_chain_count+0x20/0x20 [ 173.987268][ T5247] ? __free_object+0x218/0xa70 [ 173.992081][ T5247] ? lockdep_hardirqs_on+0x94/0x140 [ 173.997335][ T5247] ? verify_lock_unused+0x140/0x140 [ 174.002591][ T5247] ? alloc_object+0x640/0x640 [ 174.007317][ T5247] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 174.013357][ T5247] ? lock_chain_count+0x20/0x20 [ 174.018259][ T5247] lock_acquire+0x1bb/0x4a0 [ 174.022818][ T5247] ? finish_wait+0xb8/0x1d0 [ 174.027382][ T5247] ? timer_delete_sync+0x20/0x20 [ 174.032366][ T5247] ? __mod_timer+0x91e/0xd00 [ 174.036990][ T5247] ? read_lock_is_recursive+0x10/0x10 [ 174.042413][ T5247] _raw_spin_lock_irqsave+0xb0/0x100 [ 174.047742][ T5247] ? finish_wait+0xb8/0x1d0 [ 174.052287][ T5247] ? _raw_spin_lock+0x40/0x40 [ 174.057008][ T5247] ? update_process_times+0x1b0/0x1b0 [ 174.062418][ T5247] finish_wait+0xb8/0x1d0 [ 174.066791][ T5247] gfs2_quotad+0x4f3/0x680 [ 174.071282][ T5247] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 174.076449][ T5247] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 174.082387][ T5247] ? wake_bit_function+0x200/0x200 [ 174.087557][ T5247] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.093489][ T5247] ? __kthread_parkme+0x162/0x1c0 [ 174.098555][ T5247] kthread+0x29d/0x330 [ 174.102654][ T5247] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 174.108078][ T5247] ? kthread_blkcg+0xd0/0xd0 [ 174.112699][ T5247] ret_from_fork+0x1f/0x30 [ 174.117174][ T5247] [ 174.120221][ T5247] [ 174.122570][ T5247] Allocated by task 5447: [ 174.126917][ T5247] kasan_set_track+0x4b/0x70 [ 174.131541][ T5247] __kasan_kmalloc+0x8e/0xa0 [ 174.136165][ T5247] __kmalloc_node_track_caller+0xae/0x230 [ 174.141916][ T5247] __alloc_skb+0x22a/0x7e0 [ 174.146378][ T5247] nf_tables_set_notify+0xdc/0x330 [ 174.151516][ T5247] nf_tables_commit+0x3766/0x75b0 [ 174.156564][ T5247] nfnetlink_rcv+0x1abe/0x2480 [ 174.161359][ T5247] netlink_unicast+0x74d/0x8d0 [ 174.166152][ T5247] netlink_sendmsg+0x8ad/0xbd0 [ 174.170947][ T5247] ____sys_sendmsg+0x5be/0x970 [ 174.175743][ T5247] ___sys_sendmsg+0x2a2/0x360 [ 174.180450][ T5247] __se_sys_sendmsg+0x1bb/0x2a0 [ 174.185338][ T5247] do_syscall_64+0x4c/0xa0 [ 174.189785][ T5247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.195714][ T5247] [ 174.198064][ T5247] Freed by task 5447: [ 174.202056][ T5247] kasan_set_track+0x4b/0x70 [ 174.206675][ T5247] kasan_save_free_info+0x2d/0x50 [ 174.211729][ T5247] ____kasan_slab_free+0x126/0x1e0 [ 174.216871][ T5247] slab_free_freelist_hook+0x131/0x1a0 [ 174.222355][ T5247] __kmem_cache_free+0xb6/0x1f0 [ 174.227244][ T5247] pskb_expand_head+0x3c4/0x12a0 [ 174.232212][ T5247] netlink_trim+0x180/0x220 [ 174.236742][ T5247] netlink_broadcast+0x75/0x10d0 [ 174.241708][ T5247] nlmsg_notify+0xe7/0x1a0 [ 174.246173][ T5247] nf_tables_commit+0x5eb4/0x75b0 [ 174.251407][ T5247] nfnetlink_rcv+0x1abe/0x2480 [ 174.256197][ T5247] netlink_unicast+0x74d/0x8d0 [ 174.260988][ T5247] netlink_sendmsg+0x8ad/0xbd0 [ 174.265962][ T5247] ____sys_sendmsg+0x5be/0x970 [ 174.270843][ T5247] ___sys_sendmsg+0x2a2/0x360 [ 174.275549][ T5247] __se_sys_sendmsg+0x1bb/0x2a0 [ 174.280439][ T5247] do_syscall_64+0x4c/0xa0 [ 174.284884][ T5247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.290829][ T5247] [ 174.293177][ T5247] The buggy address belongs to the object at ffff888023e44000 [ 174.293177][ T5247] which belongs to the cache kmalloc-8k of size 8192 [ 174.307370][ T5247] The buggy address is located 2992 bytes inside of [ 174.307370][ T5247] 8192-byte region [ffff888023e44000, ffff888023e46000) [ 174.320843][ T5247] [ 174.323185][ T5247] The buggy address belongs to the physical page: [ 174.329623][ T5247] page:ffffea00008f9000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23e40 [ 174.339799][ T5247] head:ffffea00008f9000 order:3 compound_mapcount:0 compound_pincount:0 [ 174.348152][ T5247] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 174.356174][ T5247] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442280 [ 174.365644][ T5247] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 174.374245][ T5247] page dumped because: kasan: bad access detected [ 174.380695][ T5247] page_owner tracks the page as allocated [ 174.386426][ T5247] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5061, tgid 5059 (syz.2.225), ts 125656892148, free_ts 125634414548 [ 174.410243][ T5247] post_alloc_hook+0x173/0x1a0 [ 174.415059][ T5247] get_page_from_freelist+0x1a1e/0x1ab0 [ 174.420636][ T5247] __alloc_pages+0x1ec/0x4f0 [ 174.425260][ T5247] alloc_slab_page+0x5d/0x160 [ 174.429965][ T5247] new_slab+0x87/0x2c0 [ 174.434058][ T5247] ___slab_alloc+0xbc6/0x1240 [ 174.438753][ T5247] __kmem_cache_alloc_node+0x1a0/0x260 [ 174.444231][ T5247] __kmalloc_node_track_caller+0x9e/0x230 [ 174.449988][ T5247] __alloc_skb+0x22a/0x7e0 [ 174.454430][ T5247] netlink_dump+0x1a5/0xd00 [ 174.458961][ T5247] netlink_recvmsg+0x68f/0xe00 [ 174.463761][ T5247] ____sys_recvmsg+0x2cb/0x5e0 [ 174.468554][ T5247] ___sys_recvmsg+0x212/0x590 [ 174.473260][ T5247] do_recvmmsg+0x393/0x870 [ 174.477699][ T5247] __x64_sys_recvmmsg+0x1b4/0x250 [ 174.482742][ T5247] do_syscall_64+0x4c/0xa0 [ 174.487191][ T5247] page last free stack trace: [ 174.491876][ T5247] free_unref_page_prepare+0x8b4/0x9a0 [ 174.497371][ T5247] free_unref_page+0x2e/0x3f0 [ 174.502074][ T5247] __unfreeze_partials+0x1a5/0x200 [ 174.507208][ T5247] put_cpu_partial+0x17c/0x250 [ 174.511994][ T5247] qlist_free_all+0x76/0xe0 [ 174.516516][ T5247] kasan_quarantine_reduce+0x144/0x160 [ 174.521994][ T5247] __kasan_slab_alloc+0x1e/0x80 [ 174.526880][ T5247] slab_post_alloc_hook+0x4b/0x480 [ 174.532012][ T5247] kmem_cache_alloc_lru+0x11a/0x2e0 [ 174.537232][ T5247] __d_alloc+0x31/0x700 [ 174.541410][ T5247] d_alloc+0x4a/0x250 [ 174.545411][ T5247] lookup_one_qstr_excl+0xc6/0x240 [ 174.550541][ T5247] filename_create+0x23a/0x470 [ 174.555325][ T5247] do_symlinkat+0xc1/0x400 [ 174.559767][ T5247] __x64_sys_symlinkat+0x95/0xa0 [ 174.564725][ T5247] do_syscall_64+0x4c/0xa0 [ 174.569170][ T5247] [ 174.571505][ T5247] Memory state around the buggy address: [ 174.577153][ T5247] ffff888023e44a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.585241][ T5247] ffff888023e44b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.593330][ T5247] >ffff888023e44b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.601408][ T5247] ^ [ 174.607052][ T5247] ffff888023e44c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.615133][ T5247] ffff888023e44c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.623209][ T5247] ================================================================== [ 174.631300][ T5247] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 174.638509][ T5247] CPU: 0 PID: 5247 Comm: gfs2_quotad Not tainted syzkaller #0 [ 174.646089][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.656173][ T5247] Call Trace: [ 174.659480][ T5247] [ 174.662430][ T5247] dump_stack_lvl+0x188/0x24e [ 174.667139][ T5247] ? memcpy+0x3c/0x60 [ 174.671143][ T5247] ? show_regs_print_info+0x12/0x12 [ 174.676387][ T5247] ? load_image+0x400/0x400 [ 174.680921][ T5247] panic+0x2e5/0x730 [ 174.684866][ T5247] ? __lock_acquire+0x7d10/0x7d10 [ 174.689920][ T5247] ? bpf_jit_dump+0xd0/0xd0 [ 174.694445][ T5247] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.700359][ T5247] ? _raw_spin_unlock+0x40/0x40 [ 174.705234][ T5247] check_panic_on_warn+0x80/0xa0 [ 174.710202][ T5247] ? __lock_acquire+0x106/0x7d10 [ 174.715167][ T5247] end_report+0x66/0x110 [ 174.719435][ T5247] kasan_report+0x118/0x140 [ 174.723967][ T5247] ? __lock_acquire+0x106/0x7d10 [ 174.728937][ T5247] __lock_acquire+0x106/0x7d10 [ 174.733733][ T5247] ? verify_lock_unused+0x140/0x140 [ 174.738969][ T5247] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 174.744978][ T5247] ? lock_chain_count+0x20/0x20 [ 174.749860][ T5247] ? __free_object+0x218/0xa70 [ 174.754648][ T5247] ? lockdep_hardirqs_on+0x94/0x140 [ 174.759866][ T5247] ? verify_lock_unused+0x140/0x140 [ 174.765096][ T5247] ? alloc_object+0x640/0x640 [ 174.769797][ T5247] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 174.775803][ T5247] ? lock_chain_count+0x20/0x20 [ 174.780680][ T5247] lock_acquire+0x1bb/0x4a0 [ 174.785219][ T5247] ? finish_wait+0xb8/0x1d0 [ 174.789753][ T5247] ? timer_delete_sync+0x20/0x20 [ 174.794705][ T5247] ? __mod_timer+0x91e/0xd00 [ 174.799314][ T5247] ? read_lock_is_recursive+0x10/0x10 [ 174.804720][ T5247] _raw_spin_lock_irqsave+0xb0/0x100 [ 174.810028][ T5247] ? finish_wait+0xb8/0x1d0 [ 174.814560][ T5247] ? _raw_spin_lock+0x40/0x40 [ 174.819251][ T5247] ? update_process_times+0x1b0/0x1b0 [ 174.824654][ T5247] finish_wait+0xb8/0x1d0 [ 174.829010][ T5247] gfs2_quotad+0x4f3/0x680 [ 174.833457][ T5247] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 174.838586][ T5247] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 174.844498][ T5247] ? wake_bit_function+0x200/0x200 [ 174.849635][ T5247] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.855553][ T5247] ? __kthread_parkme+0x162/0x1c0 [ 174.860607][ T5247] kthread+0x29d/0x330 [ 174.864692][ T5247] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 174.869828][ T5247] ? kthread_blkcg+0xd0/0xd0 [ 174.874437][ T5247] ret_from_fork+0x1f/0x30 [ 174.878887][ T5247] [ 174.882527][ T5247] Kernel Offset: disabled [ 174.886858][ T5247] Rebooting in 86400 seconds..