last executing test programs: 13.298209421s ago: executing program 0 (id=3216): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x1, {0x1, 0xff}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}, 0x1, 0x0, 0x0, 0x48020}, 0x0) 11.391187811s ago: executing program 0 (id=3222): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.009396838s ago: executing program 1 (id=3226): sched_setscheduler(0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.690407565s ago: executing program 2 (id=3230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x1, {0x1, 0xff}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}, 0x1, 0x0, 0x0, 0x48020}, 0x0) 6.597391996s ago: executing program 1 (id=3231): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 6.36579746s ago: executing program 3 (id=3232): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.980047982s ago: executing program 1 (id=3233): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 4.968528922s ago: executing program 2 (id=3234): mount$fuse(0x0, 0x0, 0x0, 0x8400, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.948900062s ago: executing program 3 (id=3235): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f81000000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) 4.689730946s ago: executing program 2 (id=3236): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_setup(0x680f, 0x0) getpid() ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a"], 0x1d) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x38) symlinkat(0x0, r4, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(r4, 0x0, 0x40000020) writev(r2, &(0x7f0000000480), 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 4.032404777s ago: executing program 0 (id=3237): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4.028551336s ago: executing program 2 (id=3238): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.81044829s ago: executing program 0 (id=3239): finit_module(0xffffffffffffffff, 0x0, 0x1) 3.709787321s ago: executing program 0 (id=3240): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) mount$afs(&(0x7f0000000300), &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.351136817s ago: executing program 1 (id=3241): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 2.138741936s ago: executing program 0 (id=3242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x1, {0x1, 0xff}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}, 0x1, 0x0, 0x0, 0x48020}, 0x0) 2.138209666s ago: executing program 1 (id=3243): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000003c0)={[{@nombcache}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f0000000a40)="$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") socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x9, 0xfffffff9, r5}, 0x10) prctl$PR_GET_ENDIAN(0x13, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 2.054768787s ago: executing program 3 (id=3244): mount$fuse(0x0, 0x0, 0x0, 0x8400, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.890248901s ago: executing program 2 (id=3245): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.611453225s ago: executing program 3 (id=3246): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_setup(0x680f, 0x0) getpid() ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a"], 0x1d) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x38) symlinkat(0x0, r4, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(r4, 0x0, 0x40000020) writev(r2, &(0x7f0000000480), 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 421.437873ms ago: executing program 1 (id=3247): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$kcm(0x11, 0xa, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x4, 0x25d}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 290.167226ms ago: executing program 3 (id=3248): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 315.16µs ago: executing program 2 (id=3249): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x10]}}, 0x0, 0x3d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 0s ago: executing program 3 (id=3250): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): 441][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.327926][T13110] bridge_slave_1: entered allmulticast mode [ 845.353753][T13110] bridge_slave_1: entered promiscuous mode [ 846.647919][T13110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.701476][ T5780] Bluetooth: hci1: command tx timeout [ 846.880243][T13164] loop3: detected capacity change from 0 to 1024 [ 846.974485][T13164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.680450][T13171] loop0: detected capacity change from 0 to 1024 [ 847.696308][T13110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.436034][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.777890][ T5780] Bluetooth: hci1: command tx timeout [ 848.795643][T13110] team0: Port device team_slave_0 added [ 848.994365][T13110] team0: Port device team_slave_1 added [ 849.233336][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.247614][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.299583][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.340398][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.369001][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.403095][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.561987][T13192] loop0: detected capacity change from 0 to 1024 [ 850.620394][T13110] hsr_slave_0: entered promiscuous mode [ 850.654549][T13110] hsr_slave_1: entered promiscuous mode [ 850.707534][T13110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.732984][T13110] Cannot create hsr debugfs directory [ 850.857342][ T5780] Bluetooth: hci1: command tx timeout [ 851.530398][T13207] loop3: detected capacity change from 0 to 512 [ 851.610605][T13207] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 851.692223][T13207] EXT4-fs (loop3): 1 truncate cleaned up [ 851.699566][T13207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.757168][T13207] syz.3.2327 (pid 13207) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 852.707892][ T3456] hsr_slave_0: left promiscuous mode [ 852.716401][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.760826][ T3456] hsr_slave_1: left promiscuous mode [ 852.801239][T13219] loop0: detected capacity change from 0 to 1024 [ 852.843313][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.868651][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.199850][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.194522][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.601754][ T3456] bridge_slave_1: left allmulticast mode [ 854.611566][ T3456] bridge_slave_1: left promiscuous mode [ 854.622384][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.693365][ T3456] bridge_slave_0: left allmulticast mode [ 854.745547][ T3456] bridge_slave_0: left promiscuous mode [ 854.783112][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.912455][ T3456] veth1_macvtap: left promiscuous mode [ 854.930019][ T3456] veth0_macvtap: left promiscuous mode [ 854.965528][ T3456] veth1_vlan: left promiscuous mode [ 854.998237][ T3456] veth0_vlan: left promiscuous mode [ 858.291103][T13272] loop0: detected capacity change from 0 to 512 [ 858.379387][T13272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 858.392197][T13272] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.481200][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 858.588643][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 858.700518][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.746305][T13272] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 858.777498][T13272] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 858.800713][T13272] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2340: Failed to acquire dquot type 0 [ 858.852676][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.256160][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 860.270032][T13292] loop0: detected capacity change from 0 to 1024 [ 860.316506][T13292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.221929][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.403193][T13307] loop0: detected capacity change from 0 to 1024 [ 862.430115][ T3456] bond0 (unregistering): Released all slaves [ 862.634975][T13325] loop1: detected capacity change from 0 to 1024 [ 862.666366][T13325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.868429][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.178571][T13347] loop1: detected capacity change from 0 to 1024 [ 865.214996][T13347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.925110][T13110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 865.961802][T13110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 866.003546][T13110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 866.025360][T13110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 866.054018][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.404846][T13368] loop1: detected capacity change from 0 to 1024 [ 866.438424][T13110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.252362][T13110] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.497181][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.504453][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.636525][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.643705][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.884059][T13110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.115282][T13394] loop3: detected capacity change from 0 to 1024 [ 868.161929][T13394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.042965][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.394969][T13110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.674482][T13110] veth0_vlan: entered promiscuous mode [ 869.720053][T13110] veth1_vlan: entered promiscuous mode [ 869.859835][T13110] veth0_macvtap: entered promiscuous mode [ 869.912177][T13110] veth1_macvtap: entered promiscuous mode [ 869.995528][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.039154][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.049122][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.059609][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.069612][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.080158][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.092187][T13110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.143330][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.157413][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.186394][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.208944][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.220303][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.231435][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.244837][T13110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.345253][T13110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.369459][T13110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.402065][T13110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.420918][T13110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.546368][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.557674][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.739767][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.758281][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.857096][T13231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.895795][T13231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.886614][T13472] loop2: detected capacity change from 0 to 1024 [ 872.972636][T13472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.983010][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.953218][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 874.964990][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 874.986035][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 874.999506][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 875.047711][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 875.055312][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.379100][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.624567][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.166894][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.350567][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.270460][ T5773] Bluetooth: hci0: command tx timeout [ 878.213223][T13541] loop0: detected capacity change from 0 to 1024 [ 878.307873][T13541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.399036][T13546] loop3: detected capacity change from 0 to 2048 [ 878.459669][T13546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 878.582792][T13547] random: crng reseeded on system resumption [ 879.348365][ T5780] Bluetooth: hci0: command tx timeout [ 879.366792][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.514216][T13501] chnl_net:caif_netlink_parms(): no params data found [ 881.826836][ T5780] Bluetooth: hci0: command tx timeout [ 882.822187][T13501] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.870173][T13501] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.893914][T13501] bridge_slave_0: entered allmulticast mode [ 882.934333][T13501] bridge_slave_0: entered promiscuous mode [ 883.036407][T13597] loop0: detected capacity change from 0 to 1024 [ 883.076393][T13501] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.110600][T13501] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.126099][T13596] loop2: detected capacity change from 0 to 2048 [ 883.154637][T13501] bridge_slave_1: entered allmulticast mode [ 883.166264][T13597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.185252][T13501] bridge_slave_1: entered promiscuous mode [ 883.245655][T13596] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.506683][T13604] random: crng reseeded on system resumption [ 883.897438][ T5780] Bluetooth: hci0: command tx timeout [ 884.003489][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.138800][T13501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.159539][T13501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.425429][T13501] team0: Port device team_slave_0 added [ 884.467011][T13501] team0: Port device team_slave_1 added [ 884.751489][T13501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.774046][T13501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.827375][T13501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.841003][T13501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.848516][T13501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.856158][T13623] loop0: detected capacity change from 0 to 1024 [ 884.894528][T13501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.951549][ T11] hsr_slave_0: left promiscuous mode [ 887.055418][ T11] hsr_slave_1: left promiscuous mode [ 887.120260][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.156968][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.207093][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.237547][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.273957][T13645] loop3: detected capacity change from 0 to 2048 [ 887.282495][ T11] bridge_slave_1: left allmulticast mode [ 887.289328][ T11] bridge_slave_1: left promiscuous mode [ 887.306285][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.323780][ T11] bridge_slave_0: left allmulticast mode [ 887.353322][T13645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.370725][ T11] bridge_slave_0: left promiscuous mode [ 887.383327][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.489510][T13650] random: crng reseeded on system resumption [ 888.150992][T13652] loop0: detected capacity change from 0 to 1024 [ 888.173688][ T11] veth1_macvtap: left promiscuous mode [ 888.183751][ T11] veth0_macvtap: left promiscuous mode [ 888.194772][T13652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.227724][ T11] veth1_vlan: left promiscuous mode [ 888.241095][ T11] veth0_vlan: left promiscuous mode [ 888.919163][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.315845][T13664] loop2: detected capacity change from 0 to 1024 [ 889.373326][T13664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.233940][T13675] input: syz1 as /devices/virtual/input/input29 [ 890.299372][T13677] loop0: detected capacity change from 0 to 1024 [ 891.233670][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.256922][T13689] loop2: detected capacity change from 0 to 1024 [ 892.318320][T13689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.054215][T13695] loop3: detected capacity change from 0 to 2048 [ 893.111755][T13695] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 893.196448][T13697] random: crng reseeded on system resumption [ 894.221502][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.586808][T13705] loop0: detected capacity change from 0 to 1024 [ 894.752524][T13708] loop3: detected capacity change from 0 to 1024 [ 894.920183][T13708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.014673][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.088547][ T11] team0 (unregistering): Port device team_slave_1 removed [ 896.237931][T13721] input: syz1 as /devices/virtual/input/input30 [ 896.752671][ T11] team0 (unregistering): Port device team_slave_0 removed [ 897.241035][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.470354][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.607002][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 897.893949][T13743] loop3: detected capacity change from 0 to 1024 [ 898.156093][T13746] loop0: detected capacity change from 0 to 1024 [ 898.242180][T13746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.268945][T13749] loop2: detected capacity change from 0 to 1024 [ 898.551648][T13749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.970977][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.084445][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.537183][T13768] input: syz1 as /devices/virtual/input/input31 [ 900.767658][ T8297] udevd[8297]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 902.586928][ T11] bond0 (unregistering): Released all slaves [ 902.671790][T13779] loop0: detected capacity change from 0 to 1024 [ 902.789335][T13779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.631367][T13501] hsr_slave_0: entered promiscuous mode [ 903.646964][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.665341][T13788] loop3: detected capacity change from 0 to 1024 [ 903.677176][T13501] hsr_slave_1: entered promiscuous mode [ 903.727392][T13788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.659491][T13797] loop0: detected capacity change from 0 to 1024 [ 904.811193][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.225190][T13501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 907.401314][T13501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 907.806968][T13501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 907.853123][T13836] loop3: detected capacity change from 0 to 512 [ 907.910637][T13501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 907.938051][T13836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 908.061976][T13836] EXT4-fs (loop3): 1 truncate cleaned up [ 908.073761][T13836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.141039][T13840] loop0: detected capacity change from 0 to 2048 [ 908.160944][T13840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 908.273269][T13842] random: crng reseeded on system resumption [ 909.162082][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.295681][T13501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.365612][T13501] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.399206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.406430][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.451876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.459337][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.484699][T13850] loop0: detected capacity change from 0 to 512 [ 909.575677][T13501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 909.605453][T13501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.630988][T13850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 909.684232][T13850] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.713108][T13854] loop3: detected capacity change from 0 to 1024 [ 909.766905][T13854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.373179][T13850] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 910.411873][T13850] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 910.450941][T13850] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2486: Failed to acquire dquot type 0 [ 910.621175][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.643986][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 912.023146][T13877] loop3: detected capacity change from 0 to 1024 [ 912.056554][T13881] loop2: detected capacity change from 0 to 1024 [ 912.149043][T13881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.872670][T13501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.640591][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.757030][T13501] veth0_vlan: entered promiscuous mode [ 913.896226][T13501] veth1_vlan: entered promiscuous mode [ 914.100179][T13501] veth0_macvtap: entered promiscuous mode [ 914.182424][T13501] veth1_macvtap: entered promiscuous mode [ 914.196980][T13895] loop2: detected capacity change from 0 to 2048 [ 914.245667][T13501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.266539][T13501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.276740][T13501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.295711][T13895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.307605][T13501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.337878][T13501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.380323][T13501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.468424][T13900] random: crng reseeded on system resumption [ 914.790723][T13501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.018083][T13501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.146937][T13501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.241309][T13501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.338502][T13501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.440380][T13501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.532781][T13501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.631342][T13501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.694975][T13501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.757322][T13501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.766166][T13501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.814552][T13501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.899717][T13905] loop2: detected capacity change from 0 to 1024 [ 915.939593][T13905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.833657][T13715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.877745][T13715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.984911][T13715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.995450][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.007706][T13715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.831417][T13946] loop1: detected capacity change from 0 to 2048 [ 919.907872][T13946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 920.060577][T13952] random: crng reseeded on system resumption [ 920.908757][T13960] loop1: detected capacity change from 0 to 512 [ 920.997136][T13960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 921.031210][T13960] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.144781][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 921.156323][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 921.165774][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 921.175639][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 921.200808][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 921.210125][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 921.229279][T13971] CIFS mount error: No usable UNC path provided in device string! [ 921.229279][T13971] [ 921.240137][T13971] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 921.396935][T13973] loop2: detected capacity change from 0 to 1024 [ 921.417165][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.449177][T13973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.686145][T13960] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 921.735250][T13960] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 921.759524][T13960] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2505: Failed to acquire dquot type 0 [ 922.224845][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.282262][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.303870][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 922.494836][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.981736][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.725538][ T5780] Bluetooth: hci3: command tx timeout [ 924.205941][T13998] loop3: detected capacity change from 0 to 1024 [ 924.222474][T14001] loop1: detected capacity change from 0 to 1024 [ 924.247009][T14001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.349862][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.749344][ T5780] Bluetooth: hci3: command tx timeout [ 926.884716][T13968] chnl_net:caif_netlink_parms(): no params data found [ 926.965904][T14024] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 926.973149][T14024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 927.010011][T14031] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 927.016651][T14031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 927.104424][T14024] vhci_hcd vhci_hcd.0: Device attached [ 927.126880][T14031] vhci_hcd vhci_hcd.0: Device attached [ 927.155575][T14035] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 927.162266][T14035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 927.278853][T14041] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 927.304297][T14035] vhci_hcd vhci_hcd.0: Device attached [ 927.354506][T14024] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 927.361366][T14024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 927.395994][ T23] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 927.452333][T14024] vhci_hcd vhci_hcd.0: Device attached [ 927.501786][T14031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 927.508465][T14031] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 927.563134][T14031] vhci_hcd vhci_hcd.0: Device attached [ 927.583570][T14024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 927.638296][T14031] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 927.678192][T14024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 927.787268][T14024] vhci_hcd vhci_hcd.0: port 0 already used [ 927.817460][ T5780] Bluetooth: hci3: command tx timeout [ 927.866039][T14045] vhci_hcd: connection closed [ 927.874495][T14034] vhci_hcd: connection closed [ 927.876056][T14037] vhci_hcd: connection closed [ 927.879629][T14048] vhci_hcd: connection closed [ 927.884107][T14030] vhci_hcd: connection reset by peer [ 927.901414][ T59] vhci_hcd: stop threads [ 927.934572][ T59] vhci_hcd: release socket [ 927.971945][ T59] vhci_hcd: disconnect device [ 927.982285][ T59] vhci_hcd: stop threads [ 927.989289][ T59] vhci_hcd: release socket [ 928.010655][ T59] vhci_hcd: disconnect device [ 928.016233][ T59] vhci_hcd: stop threads [ 928.031939][ T59] vhci_hcd: release socket [ 928.043074][ T59] vhci_hcd: disconnect device [ 928.201626][ T59] vhci_hcd: stop threads [ 928.208449][ T59] vhci_hcd: release socket [ 928.218564][ T59] vhci_hcd: disconnect device [ 928.230186][ T59] vhci_hcd: stop threads [ 928.246975][ T59] vhci_hcd: release socket [ 928.253192][ T59] vhci_hcd: disconnect device [ 928.365134][T13968] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.381353][T13968] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.389058][T13968] bridge_slave_0: entered allmulticast mode [ 928.396592][T13968] bridge_slave_0: entered promiscuous mode [ 928.438439][T13968] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.448037][T13968] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.459893][T13968] bridge_slave_1: entered allmulticast mode [ 928.467513][T13968] bridge_slave_1: entered promiscuous mode [ 928.664086][T13968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.702790][T14071] loop2: detected capacity change from 0 to 512 [ 928.712573][T13968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.762108][T14071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 928.913617][T14071] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.897328][ T5780] Bluetooth: hci3: command tx timeout [ 929.977981][T13968] team0: Port device team_slave_0 added [ 930.011395][T13968] team0: Port device team_slave_1 added [ 930.198719][T13968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.210134][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 930.224681][T13968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.297479][T13968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.361111][ T11] bond0: (slave wlan1): Releasing backup interface [ 930.490251][T13968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.512970][T13968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.607791][T13968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.621153][T14108] loop2: detected capacity change from 0 to 1024 [ 931.255276][ T11] hsr_slave_0: left promiscuous mode [ 931.366662][ T11] hsr_slave_1: left promiscuous mode [ 931.373178][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.381212][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.390176][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.397952][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.406624][ T11] bridge_slave_1: left allmulticast mode [ 931.414427][ T11] bridge_slave_1: left promiscuous mode [ 931.675808][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.809031][ T11] bridge_slave_0: left allmulticast mode [ 931.828893][ T11] bridge_slave_0: left promiscuous mode [ 931.834721][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.001146][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.008937][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.160319][ T11] veth1_macvtap: left promiscuous mode [ 932.166621][ T11] veth0_macvtap: left promiscuous mode [ 932.216651][ T11] veth1_vlan: left promiscuous mode [ 932.235103][ T11] veth0_vlan: left promiscuous mode [ 932.538468][ T23] vhci_hcd: vhci_device speed not set [ 934.841210][T13249] usb usb38-port1: attempt power cycle [ 934.931720][T14139] loop3: detected capacity change from 0 to 512 [ 935.446932][T14139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 935.503195][T14139] ext4 filesystem being mounted at /650/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.926664][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 935.935687][T14149] loop1: detected capacity change from 0 to 1024 [ 936.047404][T13249] usb usb38-port1: unable to enumerate USB device [ 938.407494][ T5820] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 938.627703][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 938.647783][ T5820] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 938.705504][ T5820] usb 4-1: config 0 has no interface number 0 [ 938.727990][ T5820] usb 4-1: config 0 interface 184 has no altsetting 0 [ 938.765696][ T5820] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 938.785834][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.818541][ T5820] usb 4-1: Product: syz [ 938.824770][ T5820] usb 4-1: Manufacturer: syz [ 938.831492][ T11] team0 (unregistering): Port device team_slave_1 removed [ 938.834847][ T5820] usb 4-1: SerialNumber: syz [ 938.875281][ T5820] usb 4-1: config 0 descriptor?? [ 938.880696][T14171] loop1: detected capacity change from 0 to 1024 [ 938.920167][ T5820] smsc75xx v1.0.0 [ 938.942149][T14171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.570837][ T11] team0 (unregistering): Port device team_slave_0 removed [ 939.579319][ T5820] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 939.618696][ T5820] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 939.639745][ T5820] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 939.670501][ T5820] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 939.682419][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.706004][ T5820] usb 4-1: USB disconnect, device number 10 [ 939.734600][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.835760][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.614464][ T11] bond0 (unregistering): Released all slaves [ 940.735168][T13968] hsr_slave_0: entered promiscuous mode [ 940.743775][T13968] hsr_slave_1: entered promiscuous mode [ 940.755868][T13968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.764883][T13968] Cannot create hsr debugfs directory [ 941.226256][T14191] loop3: detected capacity change from 0 to 1024 [ 942.846578][ T11] IPVS: stop unused estimator thread 0... [ 943.072035][T14210] loop1: detected capacity change from 0 to 1024 [ 943.149465][T14210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.192591][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.265703][T14223] loop2: detected capacity change from 0 to 1024 [ 944.320132][T14223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.985373][T14228] loop1: detected capacity change from 0 to 512 [ 945.081485][T14228] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 945.117111][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.177633][T14228] EXT4-fs (loop1): 1 truncate cleaned up [ 945.184830][T14228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.461694][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.582953][T13968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 945.619601][T13968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 945.678739][T13968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 945.868582][T13968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 946.574305][T13968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.716348][T13968] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.746612][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.753909][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.878511][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.885717][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.420610][T14255] loop1: detected capacity change from 0 to 262144 [ 949.489156][T14255] F2FS-fs (loop1): invalid crc value [ 949.518953][T14255] F2FS-fs (loop1): Found nat_bits in checkpoint [ 949.625592][T14255] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 949.693475][T13968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.716693][T14265] loop2: detected capacity change from 0 to 1024 [ 949.751978][T14255] F2FS-fs (loop1): Can't enable fs-verity on inode 7: the verity feature is not enabled on this filesystem [ 949.806434][T14265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.613834][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.413011][T13968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.622688][T13968] veth0_vlan: entered promiscuous mode [ 951.686230][T13968] veth1_vlan: entered promiscuous mode [ 951.801394][T13968] veth0_macvtap: entered promiscuous mode [ 951.833016][T13968] veth1_macvtap: entered promiscuous mode [ 951.946853][T13968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.997248][T13968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.068187][T13968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.097768][T13968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.145575][T13968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.179816][T13968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.220472][T13968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.270239][T13968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.308674][T13968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.337854][T13968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.362674][T13968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.398181][T13968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.432244][T13968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.466490][T13968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.500884][T13968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.547523][T13968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.556488][T13968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.588153][T13968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.073158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.124693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.169443][T13231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.211352][T13231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.133003][T14317] loop0: detected capacity change from 0 to 1024 [ 956.267475][T13717] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 956.438786][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 956.454797][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 956.467344][T13717] usb 1-1: Using ep0 maxpacket: 32 [ 956.473237][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 956.496169][T13717] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 956.504788][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 956.514102][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 956.521587][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.549235][T13717] usb 1-1: config 0 has no interface number 0 [ 956.557382][T13717] usb 1-1: config 0 interface 184 has no altsetting 0 [ 956.571979][ T6009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.594478][T13717] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 956.607316][T13717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.615406][T13717] usb 1-1: Product: syz [ 956.619874][T13717] usb 1-1: Manufacturer: syz [ 956.624532][T13717] usb 1-1: SerialNumber: syz [ 956.634971][T13717] usb 1-1: config 0 descriptor?? [ 956.650218][T13717] smsc75xx v1.0.0 [ 957.134973][ T6009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.358576][T13717] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 957.842740][T13717] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 957.929881][T13717] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 957.944539][T13717] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 957.955401][T13717] usb 1-1: USB disconnect, device number 10 [ 957.990815][ T6009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.024685][T14358] loop2: detected capacity change from 0 to 2048 [ 958.064797][T14361] loop1: detected capacity change from 0 to 512 [ 958.112747][T14361] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 958.124116][T14358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 958.183508][ T6009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.198590][T14361] EXT4-fs (loop1): 1 truncate cleaned up [ 958.229042][T14361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.246785][T14367] loop0: detected capacity change from 0 to 1024 [ 958.312449][T14368] random: crng reseeded on system resumption [ 958.548940][ T5773] Bluetooth: hci2: command tx timeout [ 959.479061][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.941901][T14342] chnl_net:caif_netlink_parms(): no params data found [ 959.971350][T14383] Failed to get privilege flags for destination (handle=0x2:0x7) [ 960.620080][ T5773] Bluetooth: hci2: command tx timeout [ 961.026667][T14400] loop1: detected capacity change from 0 to 1024 [ 961.247923][T14400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.675254][T14342] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.686706][T14342] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.931647][T14342] bridge_slave_0: entered allmulticast mode [ 961.943524][T14342] bridge_slave_0: entered promiscuous mode [ 962.063415][T14342] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.085607][T14342] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.294439][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.329469][T14342] bridge_slave_1: entered allmulticast mode [ 962.731018][ T5773] Bluetooth: hci2: command tx timeout [ 962.931331][T14342] bridge_slave_1: entered promiscuous mode [ 963.293794][T14422] netlink: 'syz.1.2594': attribute type 29 has an invalid length. [ 963.359942][T14342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.433728][T14422] netlink: 'syz.1.2594': attribute type 29 has an invalid length. [ 963.508429][T14342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.536065][T14424] netlink: 'syz.1.2594': attribute type 29 has an invalid length. [ 963.592805][T14426] loop0: detected capacity change from 0 to 2048 [ 963.646438][T14426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 963.787995][T14428] random: crng reseeded on system resumption [ 964.461065][T14342] team0: Port device team_slave_0 added [ 964.666882][T14342] team0: Port device team_slave_1 added [ 964.732318][T14436] loop1: detected capacity change from 0 to 1024 [ 964.857322][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 964.863919][T13113] Bluetooth: hci2: command tx timeout [ 965.128784][T14342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.197409][T14342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.227253][T14342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.335233][T14342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.358422][T14444] loop0: detected capacity change from 0 to 1024 [ 965.387771][T14342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.415256][T14342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.479607][T14444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.239961][T14342] hsr_slave_0: entered promiscuous mode [ 967.246979][T14342] hsr_slave_1: entered promiscuous mode [ 967.265148][T14342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.275089][T14342] Cannot create hsr debugfs directory [ 967.369179][T14460] loop2: detected capacity change from 0 to 1024 [ 967.444827][T14460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.826166][T13968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.106609][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.169396][ T6009] hsr_slave_0: left promiscuous mode [ 968.237596][ T6009] hsr_slave_1: left promiscuous mode [ 968.300469][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.320083][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.384399][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.421040][T14471] loop2: detected capacity change from 0 to 512 [ 968.427349][ T55] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 968.431281][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.496727][ T6009] bridge_slave_1: left allmulticast mode [ 968.523251][ T6009] bridge_slave_1: left promiscuous mode [ 968.543725][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.551702][T14471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 968.603907][T14471] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.628029][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 968.666329][ T6009] bridge_slave_0: left allmulticast mode [ 968.689760][ T55] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 968.727088][ T6009] bridge_slave_0: left promiscuous mode [ 968.737808][ T55] usb 1-1: config 0 has no interface number 0 [ 968.744090][ T55] usb 1-1: config 0 interface 184 has no altsetting 0 [ 968.759303][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.806858][ T55] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 968.832284][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.873425][ T55] usb 1-1: Product: syz [ 968.887333][ T55] usb 1-1: Manufacturer: syz [ 968.904637][ T55] usb 1-1: SerialNumber: syz [ 968.948778][ T55] usb 1-1: config 0 descriptor?? [ 968.965774][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 968.971318][ T55] smsc75xx v1.0.0 [ 969.039388][ T6009] veth1_macvtap: left promiscuous mode [ 969.045112][ T6009] veth0_macvtap: left promiscuous mode [ 969.068540][ T6009] veth1_vlan: left promiscuous mode [ 969.080879][ T6009] veth0_vlan: left promiscuous mode [ 969.365719][ T55] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 969.411949][ T55] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 969.440754][ T55] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 969.470163][ T55] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 969.701678][T13717] usb 1-1: USB disconnect, device number 11 [ 971.482218][T14500] loop0: detected capacity change from 0 to 1024 [ 971.555016][T14500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.677697][T13717] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 971.887434][T13717] usb 3-1: Using ep0 maxpacket: 8 [ 972.041296][T13717] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 972.049584][T13717] usb 3-1: config 0 has no interface number 0 [ 972.055753][T13717] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.067674][T13717] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 972.078098][T13717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.176802][T13717] usb 3-1: config 0 descriptor?? [ 972.253744][T13717] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 972.367106][T13968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.519367][ T6009] team0 (unregistering): Port device team_slave_1 removed [ 972.534463][T14506] loop0: detected capacity change from 0 to 1024 [ 972.791865][ T6009] team0 (unregistering): Port device team_slave_0 removed [ 973.014567][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.215516][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.612670][T13849] usb 3-1: USB disconnect, device number 8 [ 974.420496][ T6009] bond0 (unregistering): Released all slaves [ 975.484758][T14526] loop0: detected capacity change from 0 to 1024 [ 975.518958][T14526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.652643][T14538] input: syz1 as /devices/virtual/input/input32 [ 975.806024][T13968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.873252][T14553] loop0: detected capacity change from 0 to 1024 [ 976.903146][T14553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.903701][T13968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.909186][T14342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 979.010121][T14342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 979.030570][T14342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 979.042231][T14342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 979.431119][T14580] loop0: detected capacity change from 0 to 1024 [ 979.494340][T14580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.612053][T14342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.652816][T13968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.693845][T14342] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.760743][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.768041][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.841767][ T2182] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.849024][ T2182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.017348][ T5820] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 980.247397][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 980.279654][ T5820] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 980.297222][ T5820] usb 3-1: config 0 has no interface number 0 [ 980.316190][T14597] netlink: 'syz.0.2634': attribute type 29 has an invalid length. [ 980.324410][ T5820] usb 3-1: config 0 interface 184 has no altsetting 0 [ 980.355174][T14597] netlink: 'syz.0.2634': attribute type 29 has an invalid length. [ 980.377522][ T5820] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 980.386654][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.435781][ T5820] usb 3-1: Product: syz [ 980.447242][ T5820] usb 3-1: Manufacturer: syz [ 980.467265][ T5820] usb 3-1: SerialNumber: syz [ 980.479247][ T5820] usb 3-1: config 0 descriptor?? [ 980.516317][ T5820] smsc75xx v1.0.0 [ 980.745883][T14342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.795472][T14605] loop0: detected capacity change from 0 to 1024 [ 980.836277][T14605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.408527][ T5820] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 981.447253][ T5820] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 981.512630][ T5820] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 981.529874][T14342] veth0_vlan: entered promiscuous mode [ 981.543995][ T5820] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 981.636948][T14342] veth1_vlan: entered promiscuous mode [ 981.677209][ T5820] usb 3-1: USB disconnect, device number 9 [ 981.751183][T13968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.776738][T14342] veth0_macvtap: entered promiscuous mode [ 981.860372][T14342] veth1_macvtap: entered promiscuous mode [ 981.966606][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.983740][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.022878][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.058223][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.310974][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.327814][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.349287][T14342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.107436][T14622] loop2: detected capacity change from 0 to 1024 [ 983.126177][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.160364][T14622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.209940][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.256269][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.280579][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.305156][T14628] loop1: detected capacity change from 0 to 1024 [ 983.338634][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.350826][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.365123][T14342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.379774][T14628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.395648][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.425557][T14342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.472476][T14342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.500943][T14342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.511832][T14342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.572109][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.876369][T14641] netlink: 'syz.1.2642': attribute type 29 has an invalid length. [ 983.927554][ T6009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.935445][ T6009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.008586][T14641] netlink: 'syz.1.2642': attribute type 29 has an invalid length. [ 984.152063][T13715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.218182][T13715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.099948][T13849] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 985.377394][T13849] usb 4-1: Using ep0 maxpacket: 8 [ 985.394052][T13849] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 985.436352][T14669] loop2: detected capacity change from 0 to 1024 [ 985.447826][T13849] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 985.459897][T13849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 985.469906][T13849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 985.481263][T13849] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.497470][T13849] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 985.519846][T14669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.586518][T13849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.694084][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.921306][T13849] usb 4-1: GET_CAPABILITIES returned 0 [ 985.926883][T13849] usbtmc 4-1:16.0: can't read capabilities [ 986.230550][ T5820] usb 4-1: USB disconnect, device number 11 [ 986.734303][T14695] loop1: detected capacity change from 0 to 1024 [ 986.752416][T14695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.813915][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.257706][T14704] loop3: detected capacity change from 0 to 512 [ 987.305185][T14704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 987.387033][T14704] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.465114][T14704] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 987.528689][T14704] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 987.579148][T14704] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2662: Failed to acquire dquot type 0 [ 987.709670][T14720] input: syz1 as /devices/virtual/input/input33 [ 987.848589][T14342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 988.417993][T14733] loop2: detected capacity change from 0 to 256 [ 988.444426][T14733] FAT-fs (loop2): Directory bread(block 1285) failed [ 988.517553][T14733] FAT-fs (loop2): Directory bread(block 1285) failed [ 988.581038][T14733] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 989.571764][T14747] loop0: detected capacity change from 0 to 512 [ 989.648026][T14747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 989.671697][T14747] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.709572][T14747] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 989.760174][T14747] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 989.801086][T14747] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2677: Failed to acquire dquot type 0 [ 990.030602][T13968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 990.345304][T14763] input: syz1 as /devices/virtual/input/input34 [ 992.535680][T14793] loop3: detected capacity change from 0 to 1024 [ 992.624797][T14793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.942103][T14342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.698115][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.704617][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.337553][T14810] Failed to get privilege flags for destination (handle=0x2:0x7) [ 995.494074][T14816] syz.0.2698: attempt to access beyond end of device [ 995.494074][T14816] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 995.507796][T14816] efs: cannot read volume header [ 996.496623][T14821] loop0: detected capacity change from 0 to 1024 [ 998.767371][T14824] input: syz1 as /devices/virtual/input/input35 [ 999.283902][T14831] loop2: detected capacity change from 0 to 2048 [ 999.323337][T14831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 999.427321][T14835] random: crng reseeded on system resumption [ 1007.014635][T14862] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1008.041231][T14879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1008.049382][T14879] IPv6: NLM_F_CREATE should be set when creating new route [ 1008.755526][T14888] input: syz1 as /devices/virtual/input/input36 [ 1011.493540][T14909] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1015.404497][T14953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1015.412120][T14953] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.525083][T14955] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1018.611535][T14982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1018.618959][T14982] IPv6: NLM_F_CREATE should be set when creating new route [ 1018.725272][T14984] loop1: detected capacity change from 0 to 2048 [ 1018.763376][T14984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1019.079646][T14993] random: crng reseeded on system resumption [ 1019.646362][T14992] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1020.185848][T15001] syz.3.2761: attempt to access beyond end of device [ 1020.185848][T15001] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1020.245853][T15001] efs: cannot read volume header [ 1021.445783][T15011] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 1021.452484][T15011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1021.497951][T15011] vhci_hcd vhci_hcd.0: Device attached [ 1021.529676][T15014] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 1021.536376][T15014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1021.591970][T15014] vhci_hcd vhci_hcd.0: Device attached [ 1021.617278][T15011] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 1021.623952][T15011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1021.677751][T15011] vhci_hcd vhci_hcd.0: Device attached [ 1021.724943][T15014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1021.765016][T15011] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 1021.771877][T15011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1021.806698][ T23] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1021.850739][T15011] vhci_hcd vhci_hcd.0: Device attached [ 1021.880297][T15014] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 1021.886996][T15014] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1021.926017][T15014] vhci_hcd vhci_hcd.0: Device attached [ 1021.946593][T15011] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1022.005213][T15011] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1022.034566][T15011] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1022.211819][T15011] vhci_hcd vhci_hcd.0: port 0 already used [ 1023.050941][T15031] vhci_hcd: connection closed [ 1023.137319][T15021] vhci_hcd: connection closed [ 1023.142257][T13716] vhci_hcd: stop threads [ 1023.142433][T15015] vhci_hcd: connection closed [ 1023.146962][T13716] vhci_hcd: release socket [ 1023.159877][T13716] vhci_hcd: disconnect device [ 1023.160945][T15027] vhci_hcd: connection closed [ 1023.165863][T15012] vhci_hcd: connection reset by peer [ 1023.190360][ T2182] vhci_hcd: stop threads [ 1023.194681][ T2182] vhci_hcd: release socket [ 1023.229379][ T2182] vhci_hcd: disconnect device [ 1023.235633][ T2182] vhci_hcd: stop threads [ 1023.241595][ T2182] vhci_hcd: release socket [ 1023.246645][ T2182] vhci_hcd: disconnect device [ 1023.253491][ T2182] vhci_hcd: stop threads [ 1023.272081][ T2182] vhci_hcd: release socket [ 1023.276944][ T2182] vhci_hcd: disconnect device [ 1023.282226][ T2182] vhci_hcd: stop threads [ 1023.286508][ T2182] vhci_hcd: release socket [ 1023.292286][ T2182] vhci_hcd: disconnect device [ 1023.306223][T15046] loop0: detected capacity change from 0 to 2048 [ 1023.332448][T15044] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1023.415598][T15046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1023.568563][T15053] random: crng reseeded on system resumption [ 1024.096418][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'. [ 1025.705893][T15077] input: syz1 as /devices/virtual/input/input37 [ 1025.904202][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2779'. [ 1027.278547][ T23] vhci_hcd: vhci_device speed not set [ 1027.378071][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 1027.872916][T15100] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1030.014064][ T5851] usb usb40-port1: attempt power cycle [ 1031.728274][ T5851] usb usb40-port1: unable to enumerate USB device [ 1031.941560][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2799'. [ 1033.851025][T15119] loop3: detected capacity change from 0 to 262144 [ 1033.916824][T15137] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1034.136080][T15119] F2FS-fs (loop3): invalid crc value [ 1034.402505][T15119] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 1036.791272][T15163] syz.3.2809: attempt to access beyond end of device [ 1036.791272][T15163] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1036.804250][T15163] efs: cannot read volume header [ 1037.220446][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'. [ 1038.536634][T15177] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1040.380349][T15191] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1042.731196][T15207] tipc: Started in network mode [ 1042.736159][T15207] tipc: Node identity 7f000001, cluster identity 4711 [ 1042.759552][T15207] tipc: Enabled bearer , priority 10 [ 1043.007557][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'. [ 1043.071871][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'. [ 1043.883837][ T5820] tipc: Node number set to 2130706433 [ 1043.892758][T15217] input: syz1 as /devices/virtual/input/input38 [ 1046.050202][T15232] loop0: detected capacity change from 0 to 8192 [ 1046.179936][T15232] loop0: p1 p2[DM] p4 [ 1046.195048][T15223] loop2: detected capacity change from 0 to 32768 [ 1046.214744][T15232] loop0: p1 size 196608 extends beyond EOD, truncated [ 1046.236815][T15223] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2825 (15223) [ 1046.293302][T15232] loop0: p2 start 4292936063 is beyond EOD, truncated [ 1046.300538][T15232] loop0: p4 size 50331648 extends beyond EOD, truncated [ 1046.340565][T15223] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1046.498384][T15238] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1046.604175][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 1046.714876][T15223] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1046.944666][T15223] BTRFS info (device loop2): turning on sync discard [ 1047.108415][T15223] BTRFS info (device loop2): doing ref verification [ 1047.115366][T15223] BTRFS info (device loop2): use zlib compression, level 3 [ 1047.193584][T15223] BTRFS info (device loop2): force clearing of disk cache [ 1047.261971][T15223] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1047.316574][T15223] BTRFS info (device loop2): doing ref verification [ 1047.345855][T15223] BTRFS info (device loop2): doing ref verification [ 1047.356151][T15223] BTRFS info (device loop2): using free space tree [ 1047.373627][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1047.402799][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1047.436766][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1047.464068][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1047.532217][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1047.593517][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1047.627517][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1047.647869][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2833'. [ 1047.650106][ T9007] udevd[9007]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1047.684484][ T8297] udevd[8297]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1047.688165][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1047.694970][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1047.733007][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1047.809056][T15263] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1047.829052][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1047.829702][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1047.862139][T15223] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1047.940207][T15223] BTRFS error (device loop2): open_ctree failed: -12 [ 1047.967542][ T8297] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (8297) [ 1048.370971][T15276] input: syz1 as /devices/virtual/input/input39 [ 1049.459845][T15270] loop3: detected capacity change from 0 to 40427 [ 1049.478259][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'. [ 1049.503590][T15270] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 1049.770668][T15270] F2FS-fs (loop3): invalid crc value [ 1049.842230][T15270] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1050.622807][T15270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1050.997332][T15298] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1052.419294][T14342] syz-executor: attempt to access beyond end of device [ 1052.419294][T14342] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1052.668717][T14342] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1054.862158][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.868731][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.099279][T15307] loop1: detected capacity change from 0 to 2048 [ 1055.123916][T15307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1055.236526][T15308] random: crng reseeded on system resumption [ 1056.594673][T15310] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 1056.601362][T15310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1056.627698][T15314] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 1056.634382][T15314] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1056.676572][T15312] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 1056.683248][T15312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1056.707802][T15314] vhci_hcd vhci_hcd.0: Device attached [ 1056.719757][T15310] vhci_hcd vhci_hcd.0: Device attached [ 1056.726687][T15312] vhci_hcd vhci_hcd.0: Device attached [ 1056.737001][T15321] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1056.907388][ T5836] vhci_hcd: vhci_device speed not set [ 1056.977944][T15310] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 1056.984620][T15310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1057.003284][T15328] input: syz1 as /devices/virtual/input/input40 [ 1057.062673][ T5836] usb 33-3: new full-speed USB device number 2 using vhci_hcd [ 1057.170975][T15310] vhci_hcd vhci_hcd.0: Device attached [ 1057.778954][T15314] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1057.789235][T15312] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 1057.789284][T15310] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1057.795908][T15312] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1057.817712][T15312] vhci_hcd vhci_hcd.0: Device attached [ 1057.930520][T15310] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1057.995350][T15310] vhci_hcd vhci_hcd.0: port 0 already used [ 1058.048784][T15331] vhci_hcd: connection closed [ 1058.050226][T15324] vhci_hcd: connection closed [ 1058.050405][ T2985] vhci_hcd: stop threads [ 1058.114379][T15348] syz.3.2854: attempt to access beyond end of device [ 1058.114379][T15348] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1058.127468][T15348] efs: cannot read volume header [ 1058.906274][ T2985] vhci_hcd: release socket [ 1058.913014][T15315] vhci_hcd: connection reset by peer [ 1058.914432][T15311] vhci_hcd: connection closed [ 1058.918576][T15313] vhci_hcd: connection closed [ 1058.950287][ T2985] vhci_hcd: disconnect device [ 1059.020311][ T2985] vhci_hcd: stop threads [ 1059.024656][ T2985] vhci_hcd: release socket [ 1059.029414][ T2985] vhci_hcd: disconnect device [ 1059.034497][ T2985] vhci_hcd: stop threads [ 1059.043253][ T2985] vhci_hcd: release socket [ 1059.047863][ T2985] vhci_hcd: disconnect device [ 1059.052922][ T2985] vhci_hcd: stop threads [ 1059.057772][ T2985] vhci_hcd: release socket [ 1059.062448][ T2985] vhci_hcd: disconnect device [ 1059.069967][ T2985] vhci_hcd: stop threads [ 1059.074262][ T2985] vhci_hcd: release socket [ 1059.085866][ T2985] vhci_hcd: disconnect device [ 1059.389399][T15357] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1062.142336][T15377] loop2: detected capacity change from 0 to 2048 [ 1062.166760][T15375] loop3: detected capacity change from 0 to 1764 [ 1062.205675][T15377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1062.237369][ T5836] vhci_hcd: vhci_device speed not set [ 1062.262754][T15375] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1063.383904][T15384] random: crng reseeded on system resumption [ 1063.948199][T14115] usb usb34-port1: attempt power cycle [ 1064.823717][T14115] usb usb34-port1: unable to enumerate USB device [ 1065.408906][T15404] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1065.415599][T15404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1065.450140][T15404] vhci_hcd vhci_hcd.0: Device attached [ 1065.471049][T15408] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 1065.477684][T15408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1065.498696][T15408] vhci_hcd vhci_hcd.0: Device attached [ 1065.618014][T15404] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 1065.624693][T15404] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1065.668041][T15408] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1065.691661][T15404] vhci_hcd vhci_hcd.0: Device attached [ 1065.717942][T14115] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1065.724284][T15404] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 1065.731978][T15404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1065.783773][T15404] vhci_hcd vhci_hcd.0: Device attached [ 1065.807801][T15408] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24) [ 1065.814565][T15408] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1065.853642][T15408] vhci_hcd vhci_hcd.0: Device attached [ 1065.854369][T15404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1065.901444][T15421] loop1: detected capacity change from 0 to 8192 [ 1065.909029][T15404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1066.000533][T15408] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(31) [ 1066.007223][T15408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1066.062703][T15408] vhci_hcd vhci_hcd.0: Device attached [ 1066.086805][T15421] loop1: p1 p2[DM] p4 [ 1066.114506][T15404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1066.166357][T15421] loop1: p1 size 196608 extends beyond EOD, truncated [ 1066.188389][T15423] vhci_hcd: connection closed [ 1066.188966][T15420] vhci_hcd: connection closed [ 1066.194483][T15413] vhci_hcd: connection closed [ 1066.194804][T15405] vhci_hcd: connection reset by peer [ 1066.200686][T15409] vhci_hcd: connection closed [ 1066.227446][T13716] vhci_hcd: stop threads [ 1066.235475][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 1066.296414][T15436] kAFS: Can only specify source 'none' with -o dyn [ 1066.507507][T15421] loop1: p2 start 4292936063 is beyond EOD, truncated [ 1066.689566][T15421] loop1: p4 size 50331648 extends beyond EOD, truncated [ 1066.857283][T13716] vhci_hcd: release socket [ 1066.917278][T13716] vhci_hcd: disconnect device [ 1067.077559][T13716] vhci_hcd: stop threads [ 1067.082297][T15429] vhci_hcd: connection closed [ 1067.122601][T13716] vhci_hcd: release socket [ 1067.164090][T13716] vhci_hcd: disconnect device [ 1067.228916][T13716] vhci_hcd: stop threads [ 1067.233257][T13716] vhci_hcd: release socket [ 1067.305821][T13716] vhci_hcd: disconnect device [ 1067.332272][T13716] vhci_hcd: stop threads [ 1067.336612][T13716] vhci_hcd: release socket [ 1067.355314][T13716] vhci_hcd: disconnect device [ 1067.367413][T13716] vhci_hcd: stop threads [ 1067.374223][T13716] vhci_hcd: release socket [ 1067.384443][T13716] vhci_hcd: disconnect device [ 1067.398192][T13716] vhci_hcd: stop threads [ 1067.402521][T13716] vhci_hcd: release socket [ 1067.418045][T13716] vhci_hcd: disconnect device [ 1067.514721][T15446] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1067.706565][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2877'. [ 1069.780915][T15450] random: crng reseeded on system resumption [ 1071.567296][T14115] vhci_hcd: vhci_device speed not set [ 1071.759654][T15454] input: syz1 as /devices/virtual/input/input41 [ 1071.835416][ T8297] udevd[8297]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1071.853430][ T9002] udevd[9002]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1071.901122][T15459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2884'. [ 1072.963886][T15469] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1072.970591][T15469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1072.979914][T15469] vhci_hcd vhci_hcd.0: Device attached [ 1072.995129][T15474] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 1073.001818][T15474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1073.017734][T15474] vhci_hcd vhci_hcd.0: Device attached [ 1073.044089][T15469] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 1073.050783][T15469] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1073.156080][T15474] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1073.227822][T15469] vhci_hcd vhci_hcd.0: Device attached [ 1073.258376][ T27] usb usb38-port1: attempt power cycle [ 1073.280830][T15469] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 1073.287490][T15469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1073.296334][T15469] vhci_hcd vhci_hcd.0: Device attached [ 1073.344306][T15474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24) [ 1073.350963][T15474] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1073.442527][T15474] vhci_hcd vhci_hcd.0: Device attached [ 1073.461726][T15469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1073.517671][ T27] usb 38-1: SetAddress Request (8) to port 0 [ 1073.525546][T15469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1073.537503][ T27] usb 38-1: new SuperSpeed USB device number 8 using vhci_hcd [ 1073.555653][T15469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1073.568369][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1073.618913][T15469] vhci_hcd vhci_hcd.0: port 0 already used [ 1073.676004][T15479] vhci_hcd: connection closed [ 1073.677489][T15481] vhci_hcd: connection reset by peer [ 1073.697956][T15475] vhci_hcd: connection closed [ 1073.698196][T15477] vhci_hcd: connection closed [ 1073.700341][T15471] vhci_hcd: connection closed [ 1073.702938][ T9991] vhci_hcd: stop threads [ 1073.740885][ T9991] vhci_hcd: release socket [ 1073.748438][ T9991] vhci_hcd: disconnect device [ 1073.762020][ T9991] vhci_hcd: stop threads [ 1073.776694][ T9991] vhci_hcd: release socket [ 1073.785764][ T9991] vhci_hcd: disconnect device [ 1073.797716][ T9991] vhci_hcd: stop threads [ 1073.806558][ T9991] vhci_hcd: release socket [ 1073.828488][ T9991] vhci_hcd: disconnect device [ 1073.852493][ T9991] vhci_hcd: stop threads [ 1073.856832][ T9991] vhci_hcd: release socket [ 1073.878551][ T9991] vhci_hcd: disconnect device [ 1073.904164][ T9991] vhci_hcd: stop threads [ 1073.917701][ T9991] vhci_hcd: release socket [ 1073.944386][ T9991] vhci_hcd: disconnect device [ 1074.051781][T15497] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1075.208187][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2896'. [ 1075.393143][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 1075.505484][T15516] input: syz1 as /devices/virtual/input/input42 [ 1076.013837][T15526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1076.020522][T15526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1076.069387][T15526] vhci_hcd vhci_hcd.0: Device attached [ 1076.131503][T15529] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 1076.138179][T15529] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1076.147559][T15529] vhci_hcd vhci_hcd.0: Device attached [ 1076.187114][T15526] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 1076.193769][T15526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1076.237634][T15526] vhci_hcd vhci_hcd.0: Device attached [ 1076.245235][T15526] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1076.256496][T15526] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 1076.263230][T15526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1076.271160][T15526] vhci_hcd vhci_hcd.0: Device attached [ 1076.289361][T15526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 1076.295998][T15526] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1076.304306][T15526] vhci_hcd vhci_hcd.0: Device attached [ 1076.311589][T15526] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1076.321628][T15526] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1076.335077][T15526] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1076.346733][T15526] vhci_hcd vhci_hcd.0: port 0 already used [ 1076.365065][T15532] vhci_hcd: connection closed [ 1076.365451][T15537] vhci_hcd: connection closed [ 1076.373610][T15534] vhci_hcd: connection closed [ 1076.379330][T15530] vhci_hcd: connection closed [ 1076.381710][ T3456] vhci_hcd: stop threads [ 1076.385519][T15527] vhci_hcd: connection closed [ 1076.400200][ T3456] vhci_hcd: release socket [ 1076.411694][ T3456] vhci_hcd: disconnect device [ 1076.428636][ T3456] vhci_hcd: stop threads [ 1076.433240][ T3456] vhci_hcd: release socket [ 1076.440304][ T3456] vhci_hcd: disconnect device [ 1076.445889][ T3456] vhci_hcd: stop threads [ 1076.451632][ T3456] vhci_hcd: release socket [ 1076.456631][ T3456] vhci_hcd: disconnect device [ 1076.465987][ T3456] vhci_hcd: stop threads [ 1076.473401][ T3456] vhci_hcd: release socket [ 1076.480611][ T3456] vhci_hcd: disconnect device [ 1076.491175][ T3456] vhci_hcd: stop threads [ 1076.495891][ T3456] vhci_hcd: release socket [ 1076.503305][ T3456] vhci_hcd: disconnect device [ 1076.854418][T15546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2907'. [ 1076.938332][T15548] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1078.618709][ T27] usb 38-1: device descriptor read/8, error -110 [ 1078.821382][T15560] loop3: detected capacity change from 0 to 1024 [ 1079.069752][T15561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1079.373953][ T27] usb usb38-port1: unable to enumerate USB device [ 1079.437351][T14115] vhci_hcd: vhci_device speed not set [ 1081.322735][T15578] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 1081.329383][T15578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1081.404472][T15578] vhci_hcd vhci_hcd.0: Device attached [ 1081.450171][T15585] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 1081.456826][T15585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1081.504768][T15585] vhci_hcd vhci_hcd.0: Device attached [ 1081.516915][T15578] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 1081.523579][T15578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1081.555389][T15585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1081.585388][T15578] vhci_hcd vhci_hcd.0: Device attached [ 1081.606831][T15585] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 1081.613516][T15585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1081.639128][T15585] vhci_hcd vhci_hcd.0: Device attached [ 1081.653241][T15578] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 1081.659903][T15578] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1081.680009][T15578] vhci_hcd vhci_hcd.0: Device attached [ 1081.689247][T15578] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1081.707853][T13849] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1081.724096][T15578] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1081.781892][T15585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1081.807889][T15600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2921'. [ 1081.819787][T15578] vhci_hcd vhci_hcd.0: port 0 already used [ 1081.853985][T15596] vhci_hcd: connection closed [ 1081.857795][T15589] vhci_hcd: connection closed [ 1081.858175][T15587] vhci_hcd: connection closed [ 1081.867840][T13231] vhci_hcd: stop threads [ 1081.869579][T15592] vhci_hcd: connection closed [ 1081.877223][T15580] vhci_hcd: connection reset by peer [ 1081.887206][T13231] vhci_hcd: release socket [ 1081.898780][T13231] vhci_hcd: disconnect device [ 1081.924332][T13231] vhci_hcd: stop threads [ 1081.931143][T13231] vhci_hcd: release socket [ 1081.960300][T13231] vhci_hcd: disconnect device [ 1081.973180][T13231] vhci_hcd: stop threads [ 1081.995033][T13231] vhci_hcd: release socket [ 1081.999963][T13231] vhci_hcd: disconnect device [ 1082.016302][T13231] vhci_hcd: stop threads [ 1082.037742][T13231] vhci_hcd: release socket [ 1082.048736][T13231] vhci_hcd: disconnect device [ 1082.054790][T13231] vhci_hcd: stop threads [ 1082.067322][T13231] vhci_hcd: release socket [ 1082.071941][T13231] vhci_hcd: disconnect device [ 1082.741368][T15624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1082.916015][T15631] loop0: detected capacity change from 0 to 1024 [ 1083.877656][T15639] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 1083.884364][T15639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1083.885562][T15634] loop3: detected capacity change from 0 to 2048 [ 1083.940283][T15639] vhci_hcd vhci_hcd.0: Device attached [ 1083.962350][T15645] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 1083.969062][T15645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1083.998933][T15634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1084.009462][T15645] vhci_hcd vhci_hcd.0: Device attached [ 1084.043007][T15639] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 1084.049711][T15639] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1084.126811][T15650] random: crng reseeded on system resumption [ 1084.220441][T15639] vhci_hcd vhci_hcd.0: Device attached [ 1084.297674][ T5776] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1084.352827][T15645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1084.759564][T15645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1084.787341][T15639] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(24) [ 1084.794035][T15639] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1084.829395][T15651] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 1084.836086][T15651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1084.875931][T15654] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1084.896581][T15645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1084.915901][T15651] vhci_hcd vhci_hcd.0: Device attached [ 1084.926055][T15639] vhci_hcd vhci_hcd.0: Device attached [ 1084.987784][T15639] vhci_hcd vhci_hcd.0: port 0 already used [ 1085.024952][T15652] vhci_hcd: connection closed [ 1085.025223][T15382] vhci_hcd: stop threads [ 1085.028352][T15648] vhci_hcd: connection closed [ 1085.030340][T15653] vhci_hcd: connection closed [ 1085.035158][T15640] vhci_hcd: connection reset by peer [ 1085.038924][T15646] vhci_hcd: connection closed [ 1085.039594][T15382] vhci_hcd: release socket [ 1085.083143][T15382] vhci_hcd: disconnect device [ 1085.097792][T15382] vhci_hcd: stop threads [ 1085.107453][T15382] vhci_hcd: release socket [ 1085.117054][T15382] vhci_hcd: disconnect device [ 1085.142396][T15382] vhci_hcd: stop threads [ 1085.146738][T15382] vhci_hcd: release socket [ 1085.167312][T15382] vhci_hcd: disconnect device [ 1085.177817][T15382] vhci_hcd: stop threads [ 1085.182838][T15382] vhci_hcd: release socket [ 1085.199993][T15382] vhci_hcd: disconnect device [ 1085.215908][T15382] vhci_hcd: stop threads [ 1085.224941][T15382] vhci_hcd: release socket [ 1085.242435][T15382] vhci_hcd: disconnect device [ 1085.425762][T15671] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2942'. [ 1085.528003][T15674] Illegal XDP return value 4291012552 on prog (id 265) dev N/A, expect packet loss! [ 1085.547642][T14115] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1085.757498][T14115] usb 3-1: Using ep0 maxpacket: 8 [ 1085.772668][T14115] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1085.792966][T15677] loop3: detected capacity change from 0 to 1024 [ 1085.799588][T14115] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.822879][T14115] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1085.838680][T14115] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1085.855223][T14115] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.897603][T14115] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1085.919080][T14115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.168117][T14115] usb 3-1: GET_CAPABILITIES returned 0 [ 1086.173709][T14115] usbtmc 3-1:16.0: can't read capabilities [ 1086.199751][T15687] loop0: detected capacity change from 0 to 2048 [ 1086.271380][T15687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.376012][T14115] usb 3-1: USB disconnect, device number 10 [ 1086.400332][T15688] random: crng reseeded on system resumption [ 1087.147269][T13849] vhci_hcd: vhci_device speed not set [ 1087.782780][T15698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.803642][T15698] batadv_slave_0: entered promiscuous mode [ 1088.432553][T15697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2952'. [ 1088.559744][T15700] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 1088.566455][T15700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1088.618235][T15704] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 1088.624939][T15704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1088.652802][T15704] vhci_hcd vhci_hcd.0: Device attached [ 1088.667656][T15700] vhci_hcd vhci_hcd.0: Device attached [ 1088.689744][T15700] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 1088.696419][T15700] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1088.711407][ T5851] usb usb36-port1: attempt power cycle [ 1088.729766][T15700] vhci_hcd vhci_hcd.0: Device attached [ 1088.744192][T15704] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1088.774138][T15700] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 1088.780848][T15700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1088.792968][T15700] vhci_hcd vhci_hcd.0: Device attached [ 1088.854078][T15719] syz.1.2956: attempt to access beyond end of device [ 1088.854078][T15719] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1088.867225][T15719] efs: cannot read volume header [ 1088.882619][T15700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1088.937277][ T27] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1089.497388][ T5776] vhci_hcd: vhci_device speed not set [ 1089.681602][T15700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1089.711037][T15715] loop0: detected capacity change from 0 to 1024 [ 1089.732095][T15704] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(24) [ 1089.738786][T15704] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1089.751949][T15700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1089.777597][T15704] vhci_hcd vhci_hcd.0: Device attached [ 1089.819980][T15715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.845273][T15725] loop1: detected capacity change from 0 to 2048 [ 1089.853646][T15700] vhci_hcd vhci_hcd.0: port 0 already used [ 1089.876661][T15720] vhci_hcd: connection closed [ 1089.877707][T15716] vhci_hcd: connection closed [ 1089.878038][T15709] vhci_hcd: connection closed [ 1089.887931][T15705] vhci_hcd: connection closed [ 1089.892729][T15701] vhci_hcd: connection reset by peer [ 1089.908373][ T2985] vhci_hcd: stop threads [ 1089.915540][ T2985] vhci_hcd: release socket [ 1089.928541][ T5851] usb usb36-port1: unable to enumerate USB device [ 1089.965733][T15725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.983875][ T2985] vhci_hcd: disconnect device [ 1090.030692][ T2985] vhci_hcd: stop threads [ 1090.049645][ T2985] vhci_hcd: release socket [ 1090.067457][ T55] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1090.084671][ T2985] vhci_hcd: disconnect device [ 1090.107395][T15733] random: crng reseeded on system resumption [ 1090.115482][ T2985] vhci_hcd: stop threads [ 1090.135144][ T2985] vhci_hcd: release socket [ 1090.170797][ T2985] vhci_hcd: disconnect device [ 1090.349556][ T2985] vhci_hcd: stop threads [ 1090.405812][ T2985] vhci_hcd: release socket [ 1090.598016][ T2985] vhci_hcd: disconnect device [ 1090.624760][ T2985] vhci_hcd: stop threads [ 1090.629214][ T2985] vhci_hcd: release socket [ 1090.640270][ T2985] vhci_hcd: disconnect device [ 1090.777400][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 1090.813810][ T55] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1090.843197][ T55] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1090.883117][ T55] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1090.903817][ T55] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1090.907909][T15736] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2960'. [ 1090.921052][ T55] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.944318][ T55] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1090.954530][ T5820] usb usb34-port1: attempt power cycle [ 1090.983458][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.215508][ T55] usb 3-1: GET_CAPABILITIES returned 0 [ 1091.225766][ T55] usbtmc 3-1:16.0: can't read capabilities [ 1091.258733][T13968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.424374][ T55] usb 3-1: USB disconnect, device number 11 [ 1091.608508][ T5820] usb usb34-port1: unable to enumerate USB device [ 1092.353127][T15756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 1092.359827][T15756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1092.449222][T15756] vhci_hcd vhci_hcd.0: Device attached [ 1092.487620][T15759] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 1092.494328][T15759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1092.587837][T15759] vhci_hcd vhci_hcd.0: Device attached [ 1092.636079][T15767] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2970'. [ 1092.646483][T15756] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 1092.653164][T15756] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1092.727482][ T5820] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1092.750417][T15756] vhci_hcd vhci_hcd.0: Device attached [ 1092.786545][T15756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1092.795761][T15768] loop2: detected capacity change from 0 to 2048 [ 1092.817239][T15759] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 1092.823917][T15759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1092.873381][T15768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1092.901118][T15759] vhci_hcd vhci_hcd.0: Device attached [ 1092.919370][T15756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 1092.926074][T15756] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1092.935605][T15756] vhci_hcd vhci_hcd.0: Device attached [ 1092.977583][T15756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1093.010056][T15780] random: crng reseeded on system resumption [ 1093.156556][T15759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1093.517288][T15756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1093.551086][T15759] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(33) [ 1093.557828][T15759] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1093.602232][T15778] loop3: detected capacity change from 0 to 1024 [ 1093.606533][T15759] vhci_hcd vhci_hcd.0: Device attached [ 1093.675093][T15776] vhci_hcd: connection closed [ 1093.678933][ T3456] vhci_hcd: stop threads [ 1093.693948][T15773] vhci_hcd: connection closed [ 1093.694085][T15764] vhci_hcd: connection closed [ 1093.694216][T15760] vhci_hcd: connection closed [ 1093.707364][T15757] vhci_hcd: connection reset by peer [ 1093.708607][ T3456] vhci_hcd: release socket [ 1093.737571][T15778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.764565][ T3456] vhci_hcd: disconnect device [ 1093.785092][ T3456] vhci_hcd: stop threads [ 1093.825335][ T3456] vhci_hcd: release socket [ 1093.870802][ T3456] vhci_hcd: disconnect device [ 1093.893787][ T3456] vhci_hcd: stop threads [ 1093.914452][ T3456] vhci_hcd: release socket [ 1093.937668][ T3456] vhci_hcd: disconnect device [ 1093.975762][ T3456] vhci_hcd: stop threads [ 1093.992969][ T3456] vhci_hcd: release socket [ 1094.004112][ T3456] vhci_hcd: disconnect device [ 1094.011257][ T3456] vhci_hcd: stop threads [ 1094.015721][ T3456] vhci_hcd: release socket [ 1094.021896][ T3456] vhci_hcd: disconnect device [ 1094.344736][T15781] vhci_hcd: connection closed [ 1094.410980][T13716] vhci_hcd: stop threads [ 1094.445725][T13716] vhci_hcd: release socket [ 1094.467582][T13716] vhci_hcd: disconnect device [ 1094.510199][T15791] kAFS: Can only specify source 'none' with -o dyn [ 1095.591969][ T27] vhci_hcd: vhci_device speed not set [ 1095.997267][T15805] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2979'. [ 1096.827237][ T5836] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1096.969289][T15813] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 1096.975970][T15813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1097.001718][T15813] vhci_hcd vhci_hcd.0: Device attached [ 1097.017501][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 1097.026990][T15816] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 1097.033647][T15816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1097.055292][ T5836] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1097.077664][ T5836] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1097.106683][T15813] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 1097.113353][T15813] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1097.121992][T13917] usb usb40-port1: attempt power cycle [ 1097.133355][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1097.152630][T15813] vhci_hcd vhci_hcd.0: Device attached [ 1097.153358][T15816] vhci_hcd vhci_hcd.0: Device attached [ 1097.161158][T15821] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1097.173567][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1097.224880][ T5836] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1097.238312][ T5836] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1097.245866][T15813] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 1097.247682][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.254170][T15813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1097.273021][T15813] vhci_hcd vhci_hcd.0: Device attached [ 1097.284315][T14115] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 1097.317253][T15813] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 1097.323927][T15813] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1097.336758][T15813] vhci_hcd vhci_hcd.0: Device attached [ 1097.344748][T15813] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1097.355289][T15813] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1097.369630][T15813] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1097.405664][T15813] vhci_hcd vhci_hcd.0: port 0 already used [ 1097.487775][ T5836] usb 3-1: GET_CAPABILITIES returned 0 [ 1097.506182][ T5836] usbtmc 3-1:16.0: can't read capabilities [ 1097.521720][T15822] vhci_hcd: connection closed [ 1097.523385][T15817] vhci_hcd: connection closed [ 1097.529958][T15824] vhci_hcd: connection closed [ 1097.534758][T15819] vhci_hcd: connection closed [ 1097.535244][T15814] vhci_hcd: connection reset by peer [ 1097.539699][ T2985] vhci_hcd: stop threads [ 1097.564086][ T2985] vhci_hcd: release socket [ 1097.570804][ T2985] vhci_hcd: disconnect device [ 1097.575794][ T2985] vhci_hcd: stop threads [ 1097.586716][ T2985] vhci_hcd: release socket [ 1097.593413][ T2985] vhci_hcd: disconnect device [ 1097.604872][T14342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.629738][ T2985] vhci_hcd: stop threads [ 1097.634095][ T2985] vhci_hcd: release socket [ 1097.667415][ T2985] vhci_hcd: disconnect device [ 1097.673162][ T2985] vhci_hcd: stop threads [ 1097.701753][ T2985] vhci_hcd: release socket [ 1097.716646][ T5851] usb 3-1: USB disconnect, device number 12 [ 1097.737037][ T2985] vhci_hcd: disconnect device [ 1097.767692][ T2985] vhci_hcd: stop threads [ 1097.777931][ T2985] vhci_hcd: release socket [ 1097.801966][ T2985] vhci_hcd: disconnect device [ 1097.818517][T13917] usb usb40-port1: unable to enumerate USB device [ 1097.898694][ T5820] vhci_hcd: vhci_device speed not set [ 1097.908362][T15811] loop1: detected capacity change from 0 to 32768 [ 1097.964100][T15811] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1097.981031][T15811] dlm: no local IP address has been set [ 1098.002747][T15811] dlm: cannot start dlm midcomms -107 [ 1098.012948][T15811] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1098.560756][T15841] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1098.820371][T15844] kAFS: Can only specify source 'none' with -o dyn [ 1099.378482][ T5776] usb usb36-port1: attempt power cycle [ 1100.156732][ T5776] usb usb36-port1: unable to enumerate USB device [ 1100.275799][T15853] loop2: detected capacity change from 0 to 1024 [ 1100.362605][T15853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.746152][T15863] kAFS: Can only specify source 'none' with -o dyn [ 1101.602795][T15866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2994'. [ 1102.154106][T15878] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1102.237561][T13917] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1102.438135][T13917] usb 2-1: Using ep0 maxpacket: 8 [ 1102.477435][T14115] vhci_hcd: vhci_device speed not set [ 1102.482420][T13917] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1102.507264][T13917] usb 2-1: config 0 has no interface number 0 [ 1102.514952][T13917] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1102.545979][T13917] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1102.564738][T13917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.598539][T13917] usb 2-1: config 0 descriptor?? [ 1102.617711][T13917] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1102.823727][T13917] usb 2-1: USB disconnect, device number 10 [ 1103.081418][T15893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3005'. [ 1103.269092][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.461568][T15899] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3008'. [ 1103.789826][T15907] loop2: detected capacity change from 0 to 1024 [ 1103.831241][ T55] usb usb34-port1: attempt power cycle [ 1103.870155][T15916] syz.1.3013: attempt to access beyond end of device [ 1103.870155][T15916] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1103.883251][T15916] efs: cannot read volume header [ 1104.611778][ T55] usb usb34-port1: unable to enumerate USB device [ 1105.940973][T15930] input: syz1 as /devices/virtual/input/input43 [ 1106.240858][T15936] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3019'. [ 1106.877242][T14115] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1107.067450][T14115] usb 2-1: Using ep0 maxpacket: 8 [ 1107.177315][T14115] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1107.187274][T14115] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1107.197598][T14115] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1107.208978][T14115] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1107.225296][T14115] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.243439][T14115] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1107.928829][T14115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.156213][T14115] usb 2-1: GET_CAPABILITIES returned 0 [ 1108.167775][T14115] usbtmc 2-1:16.0: can't read capabilities [ 1108.379505][T14115] usb 2-1: USB disconnect, device number 11 [ 1108.693535][T15967] loop0: detected capacity change from 0 to 4096 [ 1108.837178][T15972] input: syz1 as /devices/virtual/input/input44 [ 1108.957632][T15967] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1109.225426][T13968] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 1109.276363][T15979] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3036'. [ 1111.927408][T16002] vivid-004: kernel_thread() failed [ 1112.039919][ T5851] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1112.258547][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 1112.278998][ T5851] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1112.319721][ T5851] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1112.364382][ T5851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1112.391421][ T5851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1112.441472][ T5851] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.490790][ T5851] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1112.631583][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.436176][ T5851] usb 2-1: GET_CAPABILITIES returned 0 [ 1113.505955][ T5851] usbtmc 2-1:16.0: can't read capabilities [ 1113.925938][ T5851] usb 2-1: USB disconnect, device number 12 [ 1114.877973][T16020] input: syz1 as /devices/virtual/input/input45 [ 1115.190562][T16031] loop0: detected capacity change from 0 to 1764 [ 1115.229967][T16031] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1116.021502][T16041] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1116.304946][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.311472][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.750092][T16062] loop2: detected capacity change from 0 to 1764 [ 1119.827512][T16062] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1120.357703][T16074] macvlan2: entered promiscuous mode [ 1120.367426][T16074] macvlan2: entered allmulticast mode [ 1120.374242][T16072] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3066'. [ 1120.392247][T16070] input: syz1 as /devices/virtual/input/input46 [ 1120.443713][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 1123.665593][T16088] loop2: detected capacity change from 0 to 512 [ 1123.792601][T16088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.835202][T16088] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.271875][T16099] syz.0.3073: attempt to access beyond end of device [ 1124.271875][T16099] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1124.284811][T16099] efs: cannot read volume header [ 1125.369618][T16101] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.3071: corrupted inode contents [ 1125.385531][T16101] EXT4-fs error (device loop2): ext4_dirty_inode:6100: inode #2: comm syz.2.3071: mark_inode_dirty error [ 1125.397667][T16101] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.3071: corrupted inode contents [ 1125.417606][T16101] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3071: mark_inode_dirty error [ 1125.718751][T13110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.805791][T16106] loop1: detected capacity change from 0 to 2048 [ 1125.881565][T16106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1126.039757][T16110] random: crng reseeded on system resumption [ 1126.102204][T16108] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3077'. [ 1127.207302][T16117] input: syz1 as /devices/virtual/input/input47 [ 1127.721487][T16131] syz.3.3082: attempt to access beyond end of device [ 1127.721487][T16131] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1127.734473][T16131] efs: cannot read volume header [ 1129.912655][T16144] loop1: detected capacity change from 0 to 1024 [ 1130.594291][T16152] loop0: detected capacity change from 0 to 2048 [ 1130.632513][T16152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1130.784395][T16159] random: crng reseeded on system resumption [ 1131.746770][T16172] input: syz1 as /devices/virtual/input/input48 [ 1132.408227][T16177] loop2: detected capacity change from 0 to 1764 [ 1132.425495][T16178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3095'. [ 1132.947428][T13717] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1133.704527][T16189] loop0: detected capacity change from 0 to 2048 [ 1134.072193][T16189] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1134.184016][T16197] random: crng reseeded on system resumption [ 1134.468440][T13717] usb 3-1: Using ep0 maxpacket: 8 [ 1134.479490][T13717] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1134.504010][T13717] usb 3-1: config 0 has no interface number 0 [ 1134.516795][T13717] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1134.528045][T13717] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1134.539600][T13717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.553790][T13717] usb 3-1: config 0 descriptor?? [ 1134.576986][T13717] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1134.784732][T13717] usb 3-1: USB disconnect, device number 13 [ 1135.003791][T16210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3106'. [ 1135.494466][T16217] loop2: detected capacity change from 0 to 1764 [ 1135.674520][T16219] input: syz1 as /devices/virtual/input/input49 [ 1136.551410][T16236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3115'. [ 1137.027217][T13917] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1137.227692][T13917] usb 1-1: Using ep0 maxpacket: 8 [ 1137.235437][T13917] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1137.249770][T13917] usb 1-1: config 0 has no interface number 0 [ 1137.256153][T13917] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1137.269231][T13917] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1137.283266][T13917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.302336][T13917] usb 1-1: config 0 descriptor?? [ 1137.322486][T13917] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1137.521703][T13917] usb 1-1: USB disconnect, device number 12 [ 1137.703021][T16259] input: syz1 as /devices/virtual/input/input50 [ 1140.357248][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1140.647238][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 1140.655402][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1140.677393][ T27] usb 4-1: config 0 has no interface number 0 [ 1140.684183][ T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1140.696475][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1140.715998][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.750543][ T27] usb 4-1: config 0 descriptor?? [ 1140.788549][ T27] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1141.014065][ T27] usb 4-1: USB disconnect, device number 12 [ 1141.799409][T16308] syz.1.3137: attempt to access beyond end of device [ 1141.799409][T16308] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1141.812350][T16308] efs: cannot read volume header [ 1144.622055][T16341] loop0: detected capacity change from 0 to 4096 [ 1144.883113][T16345] syz.1.3150: attempt to access beyond end of device [ 1144.883113][T16345] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1144.897169][T16345] efs: cannot read volume header [ 1145.335767][T16341] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1145.874669][T13968] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 1146.906328][T16374] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1149.889422][T16415] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1151.314569][T16442] loop1: detected capacity change from 0 to 4096 [ 1151.415624][T16449] syz.3.3187: attempt to access beyond end of device [ 1151.415624][T16449] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1151.428599][T16449] efs: cannot read volume header [ 1152.366480][T16442] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1152.802033][T13501] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22. [ 1153.299934][T16466] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1155.599796][T16493] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1159.606532][T16530] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1160.116477][T16538] kAFS: Can only specify source 'none' with -o dyn [ 1161.003472][T16544] loop3: detected capacity change from 0 to 512 [ 1161.666578][T16544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.822325][T16544] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.049092][T16554] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.3220: corrupted inode contents [ 1163.072658][T16554] EXT4-fs error (device loop3): ext4_dirty_inode:6100: inode #2: comm syz.3.3220: mark_inode_dirty error [ 1163.090655][T16554] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.3220: corrupted inode contents [ 1163.103773][T16554] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.3220: mark_inode_dirty error [ 1163.550595][T14342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.784035][T16584] kAFS: Can only specify source 'none' with -o dyn [ 1166.319985][T16591] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1168.027258][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1168.247401][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 1168.298680][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.329394][ T27] usb 4-1: config 0 has no interface number 0 [ 1168.350293][ T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1168.406898][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1168.445004][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.476894][ T27] usb 4-1: config 0 descriptor?? [ 1168.496264][ T27] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1168.684856][T16612] loop2: detected capacity change from 0 to 512 [ 1168.701830][T16612] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1168.711325][T13717] usb 4-1: USB disconnect, device number 13 [ 1168.717604][T16612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1168.749433][T16612] EXT4-fs (loop2): 1 truncate cleaned up [ 1168.757050][T16612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.129059][T16623] tipc: Started in network mode [ 1169.147518][T16623] tipc: Node identity ac14140f, cluster identity 4711 [ 1169.165222][T16623] tipc: New replicast peer: 255.255.255.255 [ 1169.174814][T16612] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1169.206416][T16623] tipc: Enabled bearer , priority 10 [ 1169.227507][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3233'. [ 1169.239638][T16627] tipc: Disabling bearer [ 1169.315694][ T28] audit: type=1804 audit(1750114940.966:8): pid=16612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3238" name="/newroot/237/file0/file1" dev="fuse" ino=1 res=1 errno=0 [ 1169.358711][T16630] kAFS: Can only specify source 'none' with -o dyn [ 1169.818561][ T28] audit: type=1804 audit(1750114941.226:9): pid=16629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3238" name="/newroot/237/file0/file1" dev="fuse" ino=1 res=1 errno=0 [ 1170.547249][ T28] audit: type=1800 audit(1750114941.236:10): pid=16629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3238" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1170.696164][T13110] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1170.811354][T16640] loop1: detected capacity change from 0 to 512 [ 1170.880272][T16642] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1170.956455][T16640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.081606][T15949] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.108317][T16640] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.615932][T16646] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.3243: corrupted inode contents [ 1171.651591][T16646] EXT4-fs error (device loop1): ext4_dirty_inode:6100: inode #2: comm syz.1.3243: mark_inode_dirty error [ 1171.670174][T16646] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.3243: corrupted inode contents [ 1171.683793][T16646] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3243: mark_inode_dirty error [ 1172.266445][T13501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.561936][T16655] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 1172.568633][T16655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1172.582614][T16658] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 1172.589315][T16658] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1172.621327][T16655] vhci_hcd vhci_hcd.0: Device attached [ 1172.662403][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.666594][T16658] vhci_hcd vhci_hcd.0: Device attached [ 1172.744552][T16661] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 1172.751229][T16661] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1172.787262][ C0] ------------[ cut here ]------------ [ 1172.793747][ C0] refcount_t: addition on 0; use-after-free. [ 1172.800366][ C0] WARNING: CPU: 0 PID: 16666 at lib/refcount.c:25 refcount_warn_saturate+0xf3/0x1b0 [ 1172.809866][ C0] Modules linked in: [ 1172.813822][ C0] CPU: 0 PID: 16666 Comm: syz.3.3250 Not tainted 6.6.93-syzkaller #0 [ 1172.821988][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1172.832136][ C0] RIP: 0010:refcount_warn_saturate+0xf3/0x1b0 [ 1172.838334][ C0] Code: 15 0a 01 0f 85 98 00 00 00 e8 39 41 66 fd 5b 41 5e c3 e8 30 41 66 fd c6 05 e1 00 15 0a 01 48 c7 c7 40 0f fc 8a e8 0d a5 30 fd <0f> 0b eb e0 e8 14 41 66 fd c6 05 c6 00 15 0a 01 48 c7 c7 a0 0f fc [ 1172.858037][ C0] RSP: 0000:ffffc90000007848 EFLAGS: 00010246 [ 1172.864162][ C0] RAX: f14404d6bbe7e700 RBX: 0000000000000002 RCX: ffff888031d91e00 [ 1172.872215][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1172.880259][ C0] RBP: ffffc900000079d0 R08: ffffc90000007447 R09: 1ffff92000000e88 [ 1172.887655][T13717] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 1172.888286][ C0] R10: dffffc0000000000 R11: fffff52000000e89 R12: ffff888060853a80 [ 1172.903819][ C0] R13: dffffc0000000000 R14: ffff888060853bd4 R15: ffff88801c38f800 [ 1172.911861][ C0] FS: 00007f8d1bb8b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1172.920867][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1172.927539][ C0] CR2: 000000110c2c8913 CR3: 000000006a1fb000 CR4: 00000000003506f0 [ 1172.935561][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1172.943612][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1172.951694][ C0] Call Trace: [ 1172.955015][ C0] [ 1172.958035][ C0] tipc_crypto_xmit+0x17cf/0x2250 [ 1172.963236][ C0] ? tipc_crypto_do_cmd+0xd40/0xd40 [ 1172.968545][ C0] tipc_bearer_xmit_skb+0x246/0x3f0 [ 1172.973814][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 1172.979206][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 1172.984564][ C0] tipc_disc_timeout+0x581/0x6d0 [ 1172.989646][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 1172.994947][ C0] call_timer_fn+0x16e/0x530 [ 1172.999657][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 1173.004916][ C0] ? call_timer_fn+0xbf/0x530 [ 1173.009696][ C0] ? __run_timers+0x7d0/0x7d0 [ 1173.014434][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1173.019726][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1173.025006][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 1173.030311][ C0] __run_timers+0x52d/0x7d0 [ 1173.034875][ C0] ? detach_timer+0x2b0/0x2b0 [ 1173.039633][ C0] ? lock_chain_count+0x20/0x20 [ 1173.044538][ C0] run_timer_softirq+0x67/0xf0 [ 1173.049388][ C0] handle_softirqs+0x280/0x820 [ 1173.054199][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1173.059053][ C0] ? do_softirq+0x180/0x180 [ 1173.063701][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1173.068978][ C0] __irq_exit_rcu+0xc7/0x190 [ 1173.073608][ C0] ? irq_exit_rcu+0x20/0x20 [ 1173.078208][ C0] irq_exit_rcu+0x9/0x20 [ 1173.082489][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1173.088209][ C0] [ 1173.091186][ C0] [ 1173.094147][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1173.100338][ C0] RIP: 0010:finish_task_switch+0x26a/0x920 [ 1173.106189][ C0] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 90 6d 13 09 e8 0b b5 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1173.125975][ C0] RSP: 0000:ffffc9000f2eee98 EFLAGS: 00000282 [ 1173.132126][ C0] RAX: f14404d6bbe7e700 RBX: 0000000000000000 RCX: f14404d6bbe7e700 [ 1173.140168][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6780 [ 1173.148222][ C0] RBP: ffffc9000f2eeef0 R08: ffffffff90d84557 R09: 1ffffffff21b08aa [ 1173.156244][ C0] R10: dffffc0000000000 R11: fffffbfff21b08ab R12: ffff888031d91e00 [ 1173.164293][ C0] R13: dffffc0000000000 R14: ffff88802b35da00 R15: ffff8880b8e3cf08 [ 1173.172359][ C0] ? finish_task_switch+0x265/0x920 [ 1173.177644][ C0] __schedule+0x14ea/0x4580 [ 1173.182309][ C0] ? __lock_acquire+0x1334/0x7c80 [ 1173.187430][ C0] ? asan.module_dtor+0x20/0x20 [ 1173.192324][ C0] ? mark_lock+0x94/0x320 [ 1173.196699][ C0] ? mark_lock+0x94/0x320 [ 1173.201118][ C0] ? lock_chain_count+0x20/0x20 [ 1173.206024][ C0] ? preempt_schedule+0xab/0xc0 [ 1173.210966][ C0] preempt_schedule_common+0x82/0xc0 [ 1173.216299][ C0] preempt_schedule+0xab/0xc0 [ 1173.221074][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1173.226925][ C0] ? post_alloc_hook+0x1cc/0x210 [ 1173.231932][ C0] ? 0xffffffff81000000 [ 1173.236141][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1173.241437][ C0] ? unwind_next_frame+0x200a/0x2970 [ 1173.246898][ C0] unwind_next_frame+0x200f/0x2970 [ 1173.252140][ C0] ? post_alloc_hook+0x1cd/0x210 [ 1173.257251][ C0] ? post_alloc_hook+0x1cd/0x210 [ 1173.262236][ C0] ? stack_trace_save+0xe0/0xe0 [ 1173.267175][ C0] arch_stack_walk+0x144/0x190 [ 1173.271994][ C0] ? get_page_from_freelist+0x195c/0x19f0 [ 1173.277796][ C0] stack_trace_save+0x9c/0xe0 [ 1173.282530][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1173.287725][ C0] ? mark_lock+0x94/0x320 [ 1173.292203][ C0] save_stack+0xf7/0x1f0 [ 1173.296495][ C0] ? __reset_page_owner+0x190/0x190 [ 1173.301825][ C0] ? seqcount_lockdep_reader_access+0x103/0x180 [ 1173.308175][ C0] ? post_alloc_hook+0x1cd/0x210 [ 1173.313183][ C0] ? get_page_from_freelist+0x6a8/0x19f0 [ 1173.319093][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1173.324194][ C0] __set_page_owner+0x1d/0x60 [ 1173.328968][ C0] post_alloc_hook+0x1cd/0x210 [ 1173.333802][ C0] get_page_from_freelist+0x195c/0x19f0 [ 1173.339463][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 1173.344894][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 1173.350272][ C0] __alloc_pages+0x1e3/0x460 [ 1173.354940][ C0] ? zone_statistics+0x170/0x170 [ 1173.359995][ C0] ? handle_mm_fault+0xd1/0x4920 [ 1173.364995][ C0] __folio_alloc+0x10/0x20 [ 1173.369485][ C0] vma_alloc_folio+0x47a/0x8f0 [ 1173.374302][ C0] handle_mm_fault+0x1a38/0x4920 [ 1173.379316][ C0] ? handle_mm_fault+0xd1/0x4920 [ 1173.384331][ C0] ? numa_migrate_prep+0x350/0x350 [ 1173.389523][ C0] ? follow_page_pte+0x6fb/0x1a70 [ 1173.394618][ C0] ? pmd_lock+0x60/0x60 [ 1173.398872][ C0] __get_user_pages+0x5ea/0x1470 [ 1173.403885][ C0] ? mtree_destroy+0x30/0x30 [ 1173.408553][ C0] ? populate_vma_page_range+0x370/0x370 [ 1173.414261][ C0] populate_vma_page_range+0x2b6/0x370 [ 1173.419820][ C0] ? fixup_user_fault+0x710/0x710 [ 1173.424902][ C0] ? down_read+0x1ac/0x2e0 [ 1173.429401][ C0] __mm_populate+0x24c/0x380 [ 1173.434050][ C0] ? faultin_page_range+0x8f0/0x8f0 [ 1173.439336][ C0] ? up_write+0x1c3/0x410 [ 1173.443728][ C0] do_mlock+0x58d/0x6f0 [ 1173.448019][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1173.452955][ C0] ? lru_gen_add_folio+0xda0/0xda0 [ 1173.458171][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1173.464212][ C0] ? lock_chain_count+0x20/0x20 [ 1173.469146][ C0] ? lock_chain_count+0x20/0x20 [ 1173.474067][ C0] ? syscall_enter_from_user_mode+0x25/0x80 [ 1173.480045][ C0] __x64_sys_mlock+0x60/0x70 [ 1173.484700][ C0] do_syscall_64+0x55/0xb0 [ 1173.489289][ C0] ? clear_bhb_loop+0x40/0x90 [ 1173.494007][ C0] ? clear_bhb_loop+0x40/0x90 [ 1173.498773][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.504725][ C0] RIP: 0033:0x7f8d1ad8e929 [ 1173.509226][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.528910][ C0] RSP: 002b:00007f8d1bb8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1173.537411][ C0] RAX: ffffffffffffffda RBX: 00007f8d1afb6080 RCX: 00007f8d1ad8e929 [ 1173.545421][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000 [ 1173.553467][ C0] RBP: 00007f8d1ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1173.561662][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.569775][ C0] R13: 0000000000000001 R14: 00007f8d1afb6080 R15: 00007fff1b4abb68 [ 1173.577879][ C0] [ 1173.580949][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1173.588261][ C0] CPU: 0 PID: 16666 Comm: syz.3.3250 Not tainted 6.6.93-syzkaller #0 [ 1173.596360][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1173.606446][ C0] Call Trace: [ 1173.609763][ C0] [ 1173.612632][ C0] dump_stack_lvl+0x16c/0x230 [ 1173.617370][ C0] ? show_regs_print_info+0x20/0x20 [ 1173.622621][ C0] ? load_image+0x3b0/0x3b0 [ 1173.627184][ C0] panic+0x2c0/0x710 [ 1173.631129][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1173.635691][ C0] __warn+0x2e0/0x470 [ 1173.639711][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 1173.645226][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 1173.650728][ C0] report_bug+0x2be/0x4f0 [ 1173.655112][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 1173.660613][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 1173.666123][ C0] ? refcount_warn_saturate+0xf5/0x1b0 [ 1173.671624][ C0] handle_bug+0xcf/0x120 [ 1173.675916][ C0] exc_invalid_op+0x1a/0x50 [ 1173.680466][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1173.685366][ C0] RIP: 0010:refcount_warn_saturate+0xf3/0x1b0 [ 1173.691478][ C0] Code: 15 0a 01 0f 85 98 00 00 00 e8 39 41 66 fd 5b 41 5e c3 e8 30 41 66 fd c6 05 e1 00 15 0a 01 48 c7 c7 40 0f fc 8a e8 0d a5 30 fd <0f> 0b eb e0 e8 14 41 66 fd c6 05 c6 00 15 0a 01 48 c7 c7 a0 0f fc [ 1173.711126][ C0] RSP: 0000:ffffc90000007848 EFLAGS: 00010246 [ 1173.717240][ C0] RAX: f14404d6bbe7e700 RBX: 0000000000000002 RCX: ffff888031d91e00 [ 1173.725243][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1173.733242][ C0] RBP: ffffc900000079d0 R08: ffffc90000007447 R09: 1ffff92000000e88 [ 1173.741248][ C0] R10: dffffc0000000000 R11: fffff52000000e89 R12: ffff888060853a80 [ 1173.749253][ C0] R13: dffffc0000000000 R14: ffff888060853bd4 R15: ffff88801c38f800 [ 1173.757280][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 1173.762932][ C0] tipc_crypto_xmit+0x17cf/0x2250 [ 1173.768048][ C0] ? tipc_crypto_do_cmd+0xd40/0xd40 [ 1173.773327][ C0] tipc_bearer_xmit_skb+0x246/0x3f0 [ 1173.778592][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 1173.784238][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 1173.789762][ C0] tipc_disc_timeout+0x581/0x6d0 [ 1173.794801][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 1173.800080][ C0] call_timer_fn+0x16e/0x530 [ 1173.804775][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 1173.810050][ C0] ? call_timer_fn+0xbf/0x530 [ 1173.814799][ C0] ? __run_timers+0x7d0/0x7d0 [ 1173.819639][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1173.824928][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1173.830191][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 1173.835450][ C0] __run_timers+0x52d/0x7d0 [ 1173.840035][ C0] ? detach_timer+0x2b0/0x2b0 [ 1173.844863][ C0] ? lock_chain_count+0x20/0x20 [ 1173.849796][ C0] run_timer_softirq+0x67/0xf0 [ 1173.854621][ C0] handle_softirqs+0x280/0x820 [ 1173.859432][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1173.864242][ C0] ? do_softirq+0x180/0x180 [ 1173.868968][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1173.874253][ C0] __irq_exit_rcu+0xc7/0x190 [ 1173.878880][ C0] ? irq_exit_rcu+0x20/0x20 [ 1173.883423][ C0] irq_exit_rcu+0x9/0x20 [ 1173.887786][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1173.893463][ C0] [ 1173.896428][ C0] [ 1173.899410][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1173.905426][ C0] RIP: 0010:finish_task_switch+0x26a/0x920 [ 1173.911271][ C0] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 90 6d 13 09 e8 0b b5 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1173.930917][ C0] RSP: 0000:ffffc9000f2eee98 EFLAGS: 00000282 [ 1173.937030][ C0] RAX: f14404d6bbe7e700 RBX: 0000000000000000 RCX: f14404d6bbe7e700 [ 1173.945049][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6780 [ 1173.953073][ C0] RBP: ffffc9000f2eeef0 R08: ffffffff90d84557 R09: 1ffffffff21b08aa [ 1173.961128][ C0] R10: dffffc0000000000 R11: fffffbfff21b08ab R12: ffff888031d91e00 [ 1173.969145][ C0] R13: dffffc0000000000 R14: ffff88802b35da00 R15: ffff8880b8e3cf08 [ 1173.977369][ C0] ? finish_task_switch+0x265/0x920 [ 1173.982637][ C0] __schedule+0x14ea/0x4580 [ 1173.987361][ C0] ? __lock_acquire+0x1334/0x7c80 [ 1173.992437][ C0] ? asan.module_dtor+0x20/0x20 [ 1173.997333][ C0] ? mark_lock+0x94/0x320 [ 1174.001717][ C0] ? mark_lock+0x94/0x320 [ 1174.006096][ C0] ? lock_chain_count+0x20/0x20 [ 1174.010982][ C0] ? preempt_schedule+0xab/0xc0 [ 1174.015877][ C0] preempt_schedule_common+0x82/0xc0 [ 1174.021299][ C0] preempt_schedule+0xab/0xc0 [ 1174.026101][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1174.031771][ C0] ? post_alloc_hook+0x1cc/0x210 [ 1174.036753][ C0] ? 0xffffffff81000000 [ 1174.040950][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1174.046202][ C0] ? unwind_next_frame+0x200a/0x2970 [ 1174.051540][ C0] unwind_next_frame+0x200f/0x2970 [ 1174.056727][ C0] ? post_alloc_hook+0x1cd/0x210 [ 1174.061711][ C0] ? post_alloc_hook+0x1cd/0x210 [ 1174.066718][ C0] ? stack_trace_save+0xe0/0xe0 [ 1174.071731][ C0] arch_stack_walk+0x144/0x190 [ 1174.076557][ C0] ? get_page_from_freelist+0x195c/0x19f0 [ 1174.082458][ C0] stack_trace_save+0x9c/0xe0 [ 1174.087199][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1174.092373][ C0] ? mark_lock+0x94/0x320 [ 1174.096785][ C0] save_stack+0xf7/0x1f0 [ 1174.101080][ C0] ? __reset_page_owner+0x190/0x190 [ 1174.106329][ C0] ? seqcount_lockdep_reader_access+0x103/0x180 [ 1174.112632][ C0] ? post_alloc_hook+0x1cd/0x210 [ 1174.117649][ C0] ? get_page_from_freelist+0x6a8/0x19f0 [ 1174.123334][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1174.128416][ C0] __set_page_owner+0x1d/0x60 [ 1174.133236][ C0] post_alloc_hook+0x1cd/0x210 [ 1174.138060][ C0] get_page_from_freelist+0x195c/0x19f0 [ 1174.143688][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 1174.149115][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 1174.154469][ C0] __alloc_pages+0x1e3/0x460 [ 1174.159127][ C0] ? zone_statistics+0x170/0x170 [ 1174.164132][ C0] ? handle_mm_fault+0xd1/0x4920 [ 1174.169216][ C0] __folio_alloc+0x10/0x20 [ 1174.173679][ C0] vma_alloc_folio+0x47a/0x8f0 [ 1174.178704][ C0] handle_mm_fault+0x1a38/0x4920 [ 1174.183919][ C0] ? handle_mm_fault+0xd1/0x4920 [ 1174.188915][ C0] ? numa_migrate_prep+0x350/0x350 [ 1174.194068][ C0] ? follow_page_pte+0x6fb/0x1a70 [ 1174.199162][ C0] ? pmd_lock+0x60/0x60 [ 1174.203461][ C0] __get_user_pages+0x5ea/0x1470 [ 1174.208467][ C0] ? mtree_destroy+0x30/0x30 [ 1174.213102][ C0] ? populate_vma_page_range+0x370/0x370 [ 1174.218789][ C0] populate_vma_page_range+0x2b6/0x370 [ 1174.224304][ C0] ? fixup_user_fault+0x710/0x710 [ 1174.229380][ C0] ? down_read+0x1ac/0x2e0 [ 1174.233841][ C0] __mm_populate+0x24c/0x380 [ 1174.238482][ C0] ? faultin_page_range+0x8f0/0x8f0 [ 1174.243759][ C0] ? up_write+0x1c3/0x410 [ 1174.248219][ C0] do_mlock+0x58d/0x6f0 [ 1174.252509][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1174.257415][ C0] ? lru_gen_add_folio+0xda0/0xda0 [ 1174.262570][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1174.268610][ C0] ? lock_chain_count+0x20/0x20 [ 1174.273510][ C0] ? lock_chain_count+0x20/0x20 [ 1174.278429][ C0] ? syscall_enter_from_user_mode+0x25/0x80 [ 1174.284372][ C0] __x64_sys_mlock+0x60/0x70 [ 1174.289006][ C0] do_syscall_64+0x55/0xb0 [ 1174.293639][ C0] ? clear_bhb_loop+0x40/0x90 [ 1174.298356][ C0] ? clear_bhb_loop+0x40/0x90 [ 1174.303070][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1174.309021][ C0] RIP: 0033:0x7f8d1ad8e929 [ 1174.313484][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.333148][ C0] RSP: 002b:00007f8d1bb8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1174.341612][ C0] RAX: ffffffffffffffda RBX: 00007f8d1afb6080 RCX: 00007f8d1ad8e929 [ 1174.349633][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000 [ 1174.357643][ C0] RBP: 00007f8d1ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1174.365661][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.373686][ C0] R13: 0000000000000001 R14: 00007f8d1afb6080 R15: 00007fff1b4abb68 [ 1174.382237][ C0] [ 1174.385686][ C0] Kernel Offset: disabled [ 1174.390175][ C0] Rebooting in 86400 seconds..