last executing test programs: 8.922536581s ago: executing program 0 (id=612): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) 8.313566026s ago: executing program 3 (id=621): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) 7.810492998s ago: executing program 0 (id=624): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235222bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856a24cedd963c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75474939c664ff1849f8fbc403959f9c2de4b235261aba126be33a1762054cf2fad7dfc679c611c046f5764cfd3b84268cf21e9b8cd374866e2d55c4bfdd180a43e4fae7f5ddab3469cda8da12808566a285524ac700c24595dcd5c7784b30a4baafe80e10cecfe2393ecc927520408071c6901003dd15417429bfa90a54f501dd193865ebbb27e85c50605c45115595b04c410c2b2d6ef11e53872cba8091c88311d00c175bcf0a780265fe60228a640a746847d0138dc9f673fac8658d57ebaab4212bdcb1625a73bbda3c4a6e4282480077305b6afa3ebbcd525e588bf55760e556f1211a02cfe2e533ce915d86d62374332773744fcc8fdaf51812edd747c93b23bbe70d"], 0x1, 0x553a, &(0x7f0000006040)="$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") setns(0xc9, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r0, 0xe00000000000002, 0x1000002, 0x1000000) 7.065607776s ago: executing program 3 (id=627): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2"}, 0xe3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b2450300"]) 5.833917647s ago: executing program 0 (id=629): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x32, 0x2, 0x1, 0x2, 0x1, 0x0, "05010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"}}, 0x14a) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000380)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'hash'}}, {@seclabel}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, 'cp775'}}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c00000023ef848d"], 0x2008) 5.069493996s ago: executing program 3 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x44, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7f}, @device_a, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 4.666840146s ago: executing program 3 (id=635): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) 4.546786758s ago: executing program 4 (id=636): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) 4.536215799s ago: executing program 2 (id=637): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) 2.303120913s ago: executing program 4 (id=638): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x924) ppoll(&(0x7f0000000280)=[{r0, 0x1021}, {r0, 0x8240}], 0x2, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.974185911s ago: executing program 3 (id=639): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x100042, 0x0, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}}) 846.147939ms ago: executing program 4 (id=642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, r1, 0x601, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 783.451061ms ago: executing program 4 (id=643): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x48, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x48}}, 0x20000000) 710.513883ms ago: executing program 0 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 633.382054ms ago: executing program 1 (id=645): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221afc82231acd59745493938f1e2de8fdadd3823fedd0bf63c1801408e84ca5d1c8d1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"000040000000000000000000000000f1", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 622.435335ms ago: executing program 4 (id=646): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x20075f, 0xec3c2) r1 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 500.236298ms ago: executing program 0 (id=648): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, r0, 0x1, 0xfffffffc, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x17}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "601099e1eca0efc7c0df33bb"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) 450.899899ms ago: executing program 4 (id=649): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) 450.597089ms ago: executing program 1 (id=650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x8) 371.452281ms ago: executing program 1 (id=651): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 366.573901ms ago: executing program 0 (id=652): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 306.994813ms ago: executing program 2 (id=653): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000074e12cd1b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x3, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd4a}, 0x22) 296.354483ms ago: executing program 1 (id=654): unshare(0xa020480) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc78, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x0, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab5, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 262.490314ms ago: executing program 2 (id=655): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x1234, 0x0, @mcast1}, 0x1c) 195.198715ms ago: executing program 1 (id=656): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000680)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c0400000000000000544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 156.517296ms ago: executing program 1 (id=657): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) 126.012717ms ago: executing program 2 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='raid5', 0x5) 10.90666ms ago: executing program 3 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='si4713 0x6', 0xa) 0s ago: executing program 2 (id=660): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x1, 0x0, 0x80, 0x2ff, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 65.940647][ T4171] cgroup: Unknown subsys name 'net' [ 66.080814][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.596486][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.105712][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.179550][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.196148][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.241369][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.252109][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.305839][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.312965][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.322471][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.367480][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.374833][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.383102][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.405270][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.412404][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.420710][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.452610][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.459885][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.468242][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.508781][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.544065][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.567067][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.574874][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.582880][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.593570][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.602869][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.610042][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.618569][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.647493][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.655068][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.663252][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.671893][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.681426][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.688766][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.697096][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.707316][ T4184] team0: Port device team_slave_0 added [ 69.719874][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.727250][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.736257][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.750163][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.757626][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.766318][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.781004][ T4184] team0: Port device team_slave_1 added [ 69.810264][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.840789][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.851992][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.879216][ T4188] team0: Port device team_slave_0 added [ 69.886627][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.893612][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.920205][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.934110][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.943591][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.951121][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.977176][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.991388][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.009749][ T4188] team0: Port device team_slave_1 added [ 70.027033][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.038755][ T4186] team0: Port device team_slave_0 added [ 70.062123][ T4185] team0: Port device team_slave_0 added [ 70.083658][ T4186] team0: Port device team_slave_1 added [ 70.112209][ T4185] team0: Port device team_slave_1 added [ 70.120040][ T4187] team0: Port device team_slave_0 added [ 70.135214][ T4187] team0: Port device team_slave_1 added [ 70.141404][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.149026][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.175258][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.214799][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.221899][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.248581][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.264845][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.271707][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.285803][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.292802][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.319755][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.338709][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.347009][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.373220][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.397900][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.405120][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.431189][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.443262][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.450334][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.476433][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.515927][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.522713][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.529894][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.538092][ T4188] Cannot create hsr debugfs directory [ 70.544673][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.551652][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.578187][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.590860][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.598206][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.624365][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.723462][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.731394][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.738212][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.745885][ T4185] Cannot create hsr debugfs directory [ 70.755645][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.762556][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.769549][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.777323][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 70.777323][ T4193] Bluetooth: hci3: command 0x0409 tx timeout [ 70.789868][ T4187] Cannot create hsr debugfs directory [ 70.800191][ T4193] Bluetooth: hci2: command 0x0409 tx timeout [ 70.807032][ T4193] Bluetooth: hci4: command 0x0409 tx timeout [ 70.815442][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.822487][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.829514][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.837303][ T4186] Cannot create hsr debugfs directory [ 70.854020][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 71.170166][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.182205][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.201097][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.211437][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.251579][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.267392][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.284329][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.305215][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.339623][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346304][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.391475][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.406415][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.419915][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.432349][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.491736][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.520071][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.533600][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.546587][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.578621][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.588957][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.599943][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.623941][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.636076][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.655867][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.666184][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.688371][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.698227][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.726811][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.737962][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.747844][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.755224][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.765061][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.776029][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.785228][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.792304][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.809442][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.834483][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.844839][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.852750][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.862198][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.872096][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.889145][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.898970][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.919331][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.933904][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.941852][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.952736][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.963195][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.970374][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.979449][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.989285][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.998009][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.005133][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.013757][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.023245][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.032280][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.041259][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.050801][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.066623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.083495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.092231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.103432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.112209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.137251][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.147329][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.165432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.175494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.185622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.195580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.240465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.250417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.260577][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.267730][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.281557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.291313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.319547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.328906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.337860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.346622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.368801][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.388191][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.397558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.406670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.416969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.426173][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.433273][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.442459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.451728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.469614][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.505620][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.519308][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.536286][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.553191][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.562698][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.572197][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.580796][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.590216][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.599516][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.634643][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.652808][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.667891][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.676022][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.684778][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.693464][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.702468][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.710621][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.720612][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.730006][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.737424][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.747124][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.756412][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.765318][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.772380][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.780884][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.790907][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.802328][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.825172][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.833175][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.857205][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.864820][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 72.872674][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 72.882172][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.894418][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 72.908974][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 72.921902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.947094][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 72.952250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.969997][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.977193][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.986825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.995984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.005269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.014864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.023470][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.030631][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.062251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.071171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.081113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.091582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.101160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.110159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.130335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.139158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.151504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.162783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.203339][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.220677][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.239008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.251849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.260326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.270357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.280894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.290049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.300814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.310040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.319012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.341259][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.359420][ T4184] device veth0_vlan entered promiscuous mode [ 73.374864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.383460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.393652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.406901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.428142][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.440339][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.470109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.483296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.493530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.503514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.514426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.521942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.538930][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.551970][ T4184] device veth1_vlan entered promiscuous mode [ 73.588855][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.616660][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.641037][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.668411][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.759625][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.771105][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.788082][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.801112][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.811814][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.825643][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.840251][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.856729][ T4184] device veth0_macvtap entered promiscuous mode [ 73.892561][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.901222][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.909616][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.920176][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.929417][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.937119][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.947842][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.958035][ T4188] device veth0_vlan entered promiscuous mode [ 73.972567][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.986211][ T4184] device veth1_macvtap entered promiscuous mode [ 74.011727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.020708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.035827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.049991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.059538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.090452][ T4188] device veth1_vlan entered promiscuous mode [ 74.106698][ T4185] device veth0_vlan entered promiscuous mode [ 74.113420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.122750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.132724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.181160][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.189981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.199695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.211409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.221354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.230849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.242973][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.252088][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.280935][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.292521][ T4185] device veth1_vlan entered promiscuous mode [ 74.302985][ T4186] device veth0_vlan entered promiscuous mode [ 74.314081][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.322059][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.331475][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.340717][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.350103][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.359078][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.368483][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.381488][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.402702][ T4188] device veth0_macvtap entered promiscuous mode [ 74.412585][ T4187] device veth0_vlan entered promiscuous mode [ 74.438957][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.448391][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.461154][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.470259][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.479784][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.488622][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.517172][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.529873][ T4188] device veth1_macvtap entered promiscuous mode [ 74.543210][ T4186] device veth1_vlan entered promiscuous mode [ 74.557764][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.567938][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.576914][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.586522][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.631173][ T4187] device veth1_vlan entered promiscuous mode [ 74.641983][ T4185] device veth0_macvtap entered promiscuous mode [ 74.657034][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.688283][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.701079][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.733629][ T4185] device veth1_macvtap entered promiscuous mode [ 74.748034][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.756733][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.772506][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.781458][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.790184][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.798982][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.808309][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.819293][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.831127][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.842562][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.876172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.887915][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.897606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.906717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.920168][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.929561][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.939301][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945366][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 74.948446][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.964089][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 74.974675][ T4186] device veth0_macvtap entered promiscuous mode [ 74.987337][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 75.017330][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.027755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.037302][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 75.038870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.052468][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.054022][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 75.071083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.085576][ T4186] device veth1_macvtap entered promiscuous mode [ 75.110661][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.121413][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.131771][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.143325][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.155953][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.179655][ T4187] device veth0_macvtap entered promiscuous mode [ 75.190099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.203674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.212748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.221210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.230051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.271548][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.284111][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.296228][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.307388][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.319844][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.330700][ T4187] device veth1_macvtap entered promiscuous mode [ 75.356610][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.364688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.373450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.386516][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.399794][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.412257][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.423048][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.432275][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.447992][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.458716][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.468642][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.479377][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.491052][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.503661][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.520481][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.542917][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.551094][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.560854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.570237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.580501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.590056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.651125][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.675746][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.695293][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.706815][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.717838][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.729007][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.741977][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.767693][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.778639][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.789241][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.800538][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.811124][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.822926][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.834240][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.844871][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.858253][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.869030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.889591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.901443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.916657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.933677][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.949678][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.959045][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.969915][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.995649][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.008018][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.018869][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.032725][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.043365][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.054751][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.069993][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.082048][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.101054][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.129417][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.139011][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.154990][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.161820][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.173000][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.185374][ T4272] loop3: detected capacity change from 0 to 16 [ 76.200896][ T4272] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 76.234305][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.242289][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.252565][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.279434][ T4265] udevd[4265]: incorrect cramfs checksum on /dev/loop3 [ 76.286850][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.303375][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.315700][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.337337][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.459173][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.519437][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.543149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.612071][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.648377][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.699769][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.731337][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.758301][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.802571][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.824870][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.825532][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.832729][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.877289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.896866][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.937034][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.985817][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.025310][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 77.043532][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 77.063308][ T4285] loop1: detected capacity change from 0 to 1024 [ 77.105326][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 77.115433][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 77.130266][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 77.147880][ T4285] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 77.195150][ T4285] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.252002][ T4288] loop4: detected capacity change from 0 to 256 [ 77.268955][ T4285] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 77.287383][ T4285] System zones: 0-1, 3-36 [ 77.308319][ T4291] loop0: detected capacity change from 0 to 128 [ 77.324086][ T4285] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 77.394523][ T4291] ======================================================= [ 77.394523][ T4291] WARNING: The mand mount option has been deprecated and [ 77.394523][ T4291] and is ignored by this kernel. Remove the mand [ 77.394523][ T4291] option from the mount to silence this warning. [ 77.394523][ T4291] ======================================================= [ 77.451668][ T4275] loop2: detected capacity change from 0 to 40427 [ 77.470298][ T4291] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 77.490035][ T4288] FAT-fs (loop4): Directory bread(block 64) failed [ 77.502074][ T4291] hpfs: filesystem error: improperly stopped [ 77.508522][ T4288] FAT-fs (loop4): Directory bread(block 65) failed [ 77.522256][ T4288] FAT-fs (loop4): Directory bread(block 66) failed [ 77.537789][ T4291] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 77.549595][ T4275] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 77.573969][ T4291] hpfs: You really don't want any checks? You are crazy... [ 77.581508][ T4288] FAT-fs (loop4): Directory bread(block 67) failed [ 77.593713][ T4275] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 77.605375][ T4291] hpfs: Code page index out of array [ 77.608120][ T4278] loop3: detected capacity change from 0 to 32768 [ 77.610719][ T4291] hpfs: code page support is disabled [ 77.631182][ T4275] F2FS-fs (loop2): invalid crc value [ 77.645589][ T4288] FAT-fs (loop4): Directory bread(block 68) failed [ 77.652345][ T4288] FAT-fs (loop4): Directory bread(block 69) failed [ 77.691590][ T4288] FAT-fs (loop4): Directory bread(block 70) failed [ 77.712136][ T4275] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 77.727136][ T4291] hpfs: hpfs_map_4sectors(): unaligned read [ 77.729658][ T4288] FAT-fs (loop4): Directory bread(block 71) failed [ 77.757130][ T4288] FAT-fs (loop4): Directory bread(block 72) failed [ 77.763746][ T4288] FAT-fs (loop4): Directory bread(block 73) failed [ 77.764552][ T4291] hpfs: hpfs_map_4sectors(): unaligned read [ 77.794125][ T4278] XFS (loop3): Mounting V5 Filesystem [ 77.810778][ T4291] hpfs: filesystem error: unable to find root dir [ 77.961382][ T4307] loop1: detected capacity change from 0 to 256 [ 78.002000][ T4278] XFS (loop3): Ending clean mount [ 78.031749][ T4275] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 78.050726][ T4275] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.232664][ T4310] loop0: detected capacity change from 0 to 2048 [ 78.240502][ T4184] XFS (loop3): Unmounting Filesystem [ 78.395718][ T4316] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.447036][ T4188] attempt to access beyond end of device [ 78.447036][ T4188] loop2: rw=2049, want=45104, limit=40427 [ 78.625873][ T4319] loop1: detected capacity change from 0 to 1024 [ 78.689921][ T4319] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 78.940656][ T4321] loop0: detected capacity change from 0 to 1024 [ 79.141401][ T4325] exfat: Deprecated parameter 'namecase' [ 79.184440][ T4325] exfat: Deprecated parameter 'namecase' [ 79.320535][ T4325] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 79.388608][ T4331] EXT4-fs (loop2): inline encryption not supported [ 79.420504][ T4331] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 79.441434][ T4331] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.469536][ T4331] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 79.490516][ T4331] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.547237][ T4331] EXT4-fs error (device loop2): ext4_get_first_dir_block:3621: inode #12: comm syz.2.16: directory missing '..' [ 79.571237][ T4331] EXT4-fs (loop2): Remounting filesystem read-only [ 79.579499][ T4317] XFS (loop4): Mounting V5 Filesystem [ 79.614479][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.744498][ T4342] syz.3.23 (4342) used greatest stack depth: 19440 bytes left [ 79.779467][ T4317] XFS (loop4): Ending clean mount [ 79.874600][ T4317] XFS (loop4): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 79.937281][ T4351] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.954805][ T4351] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.986081][ T4187] XFS (loop4): Unmounting Filesystem [ 80.014338][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.032168][ T21] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 80.049557][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.071490][ T21] usb 2-1: config 0 descriptor?? [ 80.109344][ T4360] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.441369][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.507552][ T4367] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback. [ 80.538007][ T4369] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.630556][ T4367] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.662461][ T21] wacom 0003:056A:0318.0001: unbalanced delimiter at end of report description [ 80.672133][ T4369] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.29: inode has both inline data and extents flags [ 80.706239][ T21] wacom 0003:056A:0318.0001: parse failed [ 80.719210][ T4369] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.29: couldn't read orphan inode 15 (err -117) [ 80.732779][ T21] wacom: probe of 0003:056A:0318.0001 failed with error -22 [ 80.740688][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 80.752329][ T4369] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,debug_want_extra_isize=0x0000000000000004,,errors=continue. Quota mode: none. [ 80.845361][ T21] usb 2-1: USB disconnect, device number 2 [ 80.899882][ T1108] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 80.909060][ T1108] usb 1-1: config 0 has no interface number 0 [ 80.927497][ T1108] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.945843][ T1108] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 81.054764][ T4374] cgroup: fork rejected by pids controller in /syz4 [ 81.124307][ T1108] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 81.143978][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 81.152133][ T1108] usb 1-1: Product: syz [ 81.164086][ T1108] usb 1-1: SerialNumber: syz [ 81.177374][ T1108] usb 1-1: config 0 descriptor?? [ 81.227052][ T1108] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 81.258202][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 81.473628][ T21] usb 1-1: USB disconnect, device number 2 [ 81.479834][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.480104][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 81.534604][ T21] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 81.666028][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.792758][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.890202][ T4392] set_capacity_and_notify: 7 callbacks suppressed [ 81.890219][ T4392] loop3: detected capacity change from 0 to 1024 [ 81.919224][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.032599][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.087568][ T4392] hfsplus: walked past end of dir [ 82.366867][ T4397] netlink: 280 bytes leftover after parsing attributes in process `syz.0.46'. [ 82.641891][ T4408] loop0: detected capacity change from 0 to 8 [ 82.763022][ T4410] loop3: detected capacity change from 0 to 1024 [ 82.925038][ T4415] loop0: detected capacity change from 0 to 16 [ 82.943420][ T4410] hfsplus: bad catalog entry type [ 83.019108][ T4422] loop1: detected capacity change from 0 to 8 [ 83.062541][ T4415] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.127850][ T4396] chnl_net:caif_netlink_parms(): no params data found [ 83.137685][ T4212] hfsplus: b-tree write err: -5, ino 25 [ 83.184578][ T4212] hfsplus: b-tree write err: -5, ino 4 [ 83.211819][ T4212] hfsplus: b-tree write err: -5, ino 2 [ 83.684518][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.691906][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.717636][ T4444] loop3: detected capacity change from 0 to 512 [ 83.735253][ T4396] device bridge_slave_0 entered promiscuous mode [ 83.744964][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.790495][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.820557][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.833551][ T4396] device bridge_slave_1 entered promiscuous mode [ 83.882499][ T4445] loop0: detected capacity change from 0 to 4096 [ 83.902332][ T4444] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.58: iget: bad i_size value: 38620345925642 [ 83.972099][ T4444] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.58: couldn't read orphan inode 15 (err -117) [ 83.984345][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 84.027316][ T4444] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.071785][ T4396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.114074][ T4234] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.154485][ T4234] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.204019][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.224755][ T4234] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 84.248562][ T4445] ntfs3: loop0: ino=0, "file1" fallocate(0x20) is not supported [ 84.257438][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.291909][ T4234] usb 2-1: config 0 descriptor?? [ 84.301442][ T4396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.413724][ T4396] team0: Port device team_slave_0 added [ 84.453995][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 84.468649][ T4457] device batadv0 entered promiscuous mode [ 84.500595][ T4457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.519937][ T4457] device batadv0 left promiscuous mode [ 84.615075][ T4396] team0: Port device team_slave_1 added [ 84.773004][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.800266][ T4234] input: HID 2006:0118 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:2006:0118.0002/input/input6 [ 84.825835][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.915484][ T4396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.021031][ T4234] hkems 0003:2006:0118.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 85.061804][ T4234] hkems 0003:2006:0118.0002: no output reports found [ 85.089889][ T4234] hkems 0003:2006:0118.0002: force feedback init failed [ 85.143726][ T4365] Set syz0 is full, maxelem 65536 reached [ 85.162197][ T4475] loop3: detected capacity change from 0 to 1024 [ 85.190990][ T144] device hsr_slave_0 left promiscuous mode [ 85.225193][ T4234] usb 2-1: USB disconnect, device number 3 [ 85.234271][ T4475] EXT4-fs (loop3): Ignoring removed bh option [ 85.276528][ T144] device hsr_slave_1 left promiscuous mode [ 85.321294][ T4475] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 85.349711][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.413914][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.503711][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.522328][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.534558][ T4184] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 85.535518][ T4472] loop0: detected capacity change from 0 to 32768 [ 85.559142][ T4480] fido_id[4480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 85.574681][ T144] device bridge_slave_1 left promiscuous mode [ 85.620945][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.702588][ T144] device bridge_slave_0 left promiscuous mode [ 85.717058][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.816235][ T144] device veth1_macvtap left promiscuous mode [ 85.836115][ T4486] loop1: detected capacity change from 0 to 1024 [ 85.850621][ T144] device veth0_macvtap left promiscuous mode [ 85.867238][ T144] device veth1_vlan left promiscuous mode [ 85.883031][ T144] device veth0_vlan left promiscuous mode [ 86.544055][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 86.569314][ T4506] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.594110][ T4506] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.640641][ T4506] fscrypt (loop1, inode 12): Unsupported encryption flags (0x13) [ 86.703663][ T7] cfg80211: failed to load regulatory.db [ 86.723280][ T144] team0 (unregistering): Port device team_slave_1 removed [ 86.789401][ T144] team0 (unregistering): Port device team_slave_0 removed [ 86.846742][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.955143][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.045917][ T4513] set_capacity_and_notify: 3 callbacks suppressed [ 87.045933][ T4513] loop3: detected capacity change from 0 to 136 [ 87.148387][ T4513] Attempt to read inode for relocated directory [ 87.191504][ T144] bond0 (unregistering): Released all slaves [ 87.314110][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.331803][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.371389][ T4396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.438419][ T4502] device gretap0 entered promiscuous mode [ 87.587493][ T4396] device hsr_slave_0 entered promiscuous mode [ 87.624152][ T4396] device hsr_slave_1 entered promiscuous mode [ 87.662022][ T4396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.669891][ T4396] Cannot create hsr debugfs directory [ 87.677095][ T4525] loop0: detected capacity change from 0 to 256 [ 87.795193][ T4519] loop2: detected capacity change from 0 to 4096 [ 87.863941][ T4519] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 87.886384][ T4528] loop3: detected capacity change from 0 to 4096 [ 87.977131][ T4531] loop0: detected capacity change from 0 to 16 [ 87.989013][ T4533] loop1: detected capacity change from 0 to 64 [ 88.004481][ T4528] EXT4-fs (loop3): inline encryption not supported [ 88.058699][ T4531] erofs: (device loop0): mounted with root inode @ nid 36. [ 88.060407][ T4519] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 88.088079][ T4528] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 88.109628][ T4531] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 88.190769][ T4533] hfs: uid requires an argument [ 88.224202][ T4531] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -37 in[64, 4032] out[1851] [ 88.236781][ T4533] hfs: unable to parse mount options [ 88.314220][ T4531] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 88.488535][ T4542] loop3: detected capacity change from 0 to 512 [ 88.524282][ T4188] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 88.542307][ T4188] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 88.591867][ T4542] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 88.591867][ T4542] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 88.591867][ T4542] [ 88.626336][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 88.664920][ T4542] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.729963][ T4542] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.926758][ T4542] EXT4-fs (loop3): 1 truncate cleaned up [ 88.932497][ T4542] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,,errors=continue. Quota mode: none. [ 88.960420][ T4555] loop2: detected capacity change from 0 to 2048 [ 88.983406][ T4557] loop0: detected capacity change from 0 to 256 [ 89.002143][ T4557] exfat: Deprecated parameter 'utf8' [ 89.078243][ T4557] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 89.142314][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 89.155373][ T4542] EXT4-fs warning (device loop3): ext4_empty_dir:3149: inode #2: comm syz.3.88: directory missing '.' [ 89.240730][ T4561] loop1: detected capacity change from 0 to 8192 [ 89.371663][ T4561] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 89.412967][ T4561] REISERFS (device loop1): using ordered data mode [ 89.421136][ T4561] reiserfs: using flush barriers [ 89.482206][ T4561] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.564570][ T4561] REISERFS (device loop1): checking transaction log (loop1) [ 89.912842][ T4576] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 89.928031][ T4561] REISERFS (device loop1): Using tea hash to sort names [ 89.963948][ T4576] hpfs: filesystem error: improperly stopped [ 89.970016][ T4576] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 89.999125][ T4561] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 90.006000][ T4576] hpfs: You really don't want any checks? You are crazy... [ 90.051887][ T4576] hpfs: hpfs_map_sector(): read error [ 90.074303][ T4561] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 90.087655][ T4576] hpfs: code page support is disabled [ 90.093186][ T4576] hpfs: hpfs_map_4sectors(): unaligned read [ 90.123987][ T4576] hpfs: hpfs_map_4sectors(): unaligned read [ 90.144231][ T4576] hpfs: filesystem error: unable to find root dir [ 90.255422][ T4396] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.299031][ T4583] FAT-fs (loop2): Directory bread(block 64) failed [ 90.316512][ T4396] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.328092][ T4583] FAT-fs (loop2): Directory bread(block 65) failed [ 90.340822][ T4396] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.383710][ T4583] FAT-fs (loop2): Directory bread(block 66) failed [ 90.393234][ T4396] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.404060][ T4583] FAT-fs (loop2): Directory bread(block 67) failed [ 90.422125][ T4583] FAT-fs (loop2): Directory bread(block 68) failed [ 90.481490][ T4583] FAT-fs (loop2): Directory bread(block 69) failed [ 90.504054][ T4583] FAT-fs (loop2): Directory bread(block 70) failed [ 90.531078][ T4583] FAT-fs (loop2): Directory bread(block 71) failed [ 90.556182][ T4583] FAT-fs (loop2): Directory bread(block 72) failed [ 90.562800][ T4583] FAT-fs (loop2): Directory bread(block 73) failed [ 90.704030][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 90.791573][ T4396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.906569][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.944863][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.977436][ T4396] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.034019][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.052016][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.086239][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.086330][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.100789][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.101562][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.102824][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.113100][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.113148][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.115438][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.121592][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.127153][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.129552][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.130634][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.154296][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.324434][ T4568] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 91.329645][ T4568] F2FS-fs (loop0): invalid crc value [ 91.353313][ T4568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.547594][ T4568] F2FS-fs (loop0): recover fsync data on readonly fs [ 91.555466][ T4613] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.611614][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.646539][ T4568] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 91.649144][ T4608] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 4093 already freed [ 91.674370][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.707677][ T4608] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 91.724167][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.742590][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.752664][ T4568] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 91.784626][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.793166][ T4568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.834443][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.855846][ T4616] exfat: Deprecated parameter 'utf8' [ 91.976796][ T4616] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 92.046679][ T4619] hfsplus: invalid length 1280 has been corrected to 255 [ 92.062465][ T4623] set_capacity_and_notify: 7 callbacks suppressed [ 92.062481][ T4623] loop3: detected capacity change from 0 to 512 [ 92.552515][ T4623] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.763882][ T4623] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.999202][ T4396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.062193][ T4623] EXT4-fs error (device loop3): ext4_get_first_dir_block:3599: inode #12: comm syz.3.114: Directory block failed checksum [ 93.204666][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.212282][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.331029][ T4640] loop2: detected capacity change from 0 to 16 [ 93.445140][ T4643] loop3: detected capacity change from 0 to 1024 [ 93.465223][ T4640] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 93.475464][ T4646] loop1: detected capacity change from 0 to 256 [ 93.569361][ T4651] loop0: detected capacity change from 0 to 256 [ 93.586906][ T4643] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 93.620155][ T4643] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.686389][ T4643] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.118: Freeing blocks not in datazone - block = 0, count = 16 [ 93.731323][ T4643] EXT4-fs (loop3): Remounting filesystem read-only [ 94.598205][ T4670] loop2: detected capacity change from 0 to 256 [ 94.751456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.828188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.926492][ T4676] loop3: detected capacity change from 0 to 1024 [ 95.016280][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.124597][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.236197][ T4396] device veth0_vlan entered promiscuous mode [ 95.263439][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.317569][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.379350][ T4396] device veth1_vlan entered promiscuous mode [ 95.556459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.657739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.722232][ T4690] loop2: detected capacity change from 0 to 16 [ 95.740406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.781471][ T4692] loop3: detected capacity change from 0 to 256 [ 95.805576][ T4690] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.837897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.863924][ T4233] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 95.906138][ T4396] device veth0_macvtap entered promiscuous mode [ 95.929610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.945752][ T4692] exfat: Deprecated parameter 'utf8' [ 95.951582][ T4690] overlayfs: failed to get metacopy (-117) [ 96.001457][ T4396] device veth1_macvtap entered promiscuous mode [ 96.088276][ T4692] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 96.153976][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.317156][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.372508][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.390698][ T4701] loop2: detected capacity change from 0 to 8192 [ 96.477328][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.542588][ T4701] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 96.572369][ T4701] REISERFS (device loop2): using ordered data mode [ 96.584432][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.686556][ T4233] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.698082][ T4233] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.709799][ T4701] reiserfs: using flush barriers [ 96.729584][ T4233] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 96.800297][ T4701] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.957459][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.287068][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.324800][ T4701] REISERFS (device loop2): checking transaction log (loop2) [ 97.365845][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.384178][ T4233] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.399466][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.432077][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.504871][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.512945][ T4233] usb 1-1: SerialNumber: syz [ 97.526299][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.566667][ T4233] hub 1-1:1.0: bad descriptor, ignoring hub [ 97.569081][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.572647][ T4233] hub: probe of 1-1:1.0 failed with error -5 [ 97.608273][ T4233] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 97.623885][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.634892][ T4233] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 97.650365][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.670386][ T4701] REISERFS (device loop2): Using tea hash to sort names [ 97.695012][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.705765][ T4701] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 97.722590][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.743612][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.783336][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.857749][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.875823][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.918676][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.950425][ T4233] usb 1-1: USB disconnect, device number 3 [ 97.981676][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.002993][ T4396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.046335][ T4396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.072400][ T4396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.096145][ T4396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.324696][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.350761][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.435590][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.455031][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.496944][ T4747] loop0: detected capacity change from 0 to 256 [ 98.504992][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.531693][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.623839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #288!!! [ 98.633837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #388!!! [ 98.643809][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #388!!! [ 98.653812][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #388!!! [ 98.663815][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #388!!! [ 98.683803][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.693807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.703806][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.713808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.723807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 99.002779][ T4747] exfat: Deprecated parameter 'namecase' [ 99.053989][ T4747] exfat: Deprecated parameter 'utf8' [ 99.067937][ T4756] syz.4.41[4756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.068103][ T4756] syz.4.41[4756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.090135][ T4747] exfat: Deprecated parameter 'namecase' [ 99.123727][ T4753] loop3: detected capacity change from 0 to 1764 [ 99.148350][ T4747] exfat: Deprecated parameter 'namecase' [ 99.193067][ T4747] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d) [ 99.266025][ T4753] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 100.067799][ T4733] loop1: detected capacity change from 0 to 32768 [ 100.267483][ T4733] XFS (loop1): Mounting V5 Filesystem [ 100.458656][ T4733] XFS (loop1): Starting recovery (logdev: internal) [ 100.493728][ T4784] loop4: detected capacity change from 0 to 256 [ 100.526386][ T4785] loop0: detected capacity change from 0 to 512 [ 100.681890][ T4733] XFS (loop1): Ending recovery (logdev: internal) [ 101.093926][ T4761] loop2: detected capacity change from 0 to 32768 [ 101.115781][ T4785] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.133565][ T4785] EXT4-fs warning (device loop0): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 101.238706][ T4186] XFS (loop1): Unmounting Filesystem [ 102.143517][ T4808] loop3: detected capacity change from 0 to 512 [ 102.186438][ T4804] loop0: detected capacity change from 0 to 1024 [ 102.315459][ T4804] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 102.349591][ T4812] Zero length message leads to an empty skb [ 102.499935][ T4804] EXT4-fs (loop0): group descriptors corrupted! [ 103.162196][ T4808] EXT4-fs (loop3): 1 orphan inode deleted [ 103.176459][ T4817] loop4: detected capacity change from 0 to 512 [ 103.234862][ T4808] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 103.314672][ T4808] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.707005][ T4808] EXT4-fs (loop3): shut down requested (1) [ 103.985445][ T4817] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.050839][ T4817] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.296988][ T4833] loop0: detected capacity change from 0 to 512 [ 105.032831][ T4845] loop3: detected capacity change from 0 to 256 [ 105.090935][ T4846] loop1: detected capacity change from 0 to 1764 [ 105.096518][ T4833] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback. [ 105.114029][ T4833] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.155020][ T4845] exfat: Deprecated parameter 'utf8' [ 105.188353][ T4846] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 105.660244][ T4845] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 107.325491][ T4887] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 108.043279][ T4895] loop2: detected capacity change from 0 to 256 [ 108.109094][ T4895] exfat: Deprecated parameter 'utf8' [ 108.178130][ T4895] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 108.608499][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.069502][ T4913] loop2: detected capacity change from 0 to 128 [ 109.103975][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 109.164452][ T4913] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.227174][ T4232] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 109.249294][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.296684][ T4232] usb 4-1: config 0 has no interface number 0 [ 109.316598][ T4232] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.519703][ T4943] loop2: detected capacity change from 0 to 256 [ 111.540737][ T4232] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 111.561325][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.579509][ T4944] loop0: detected capacity change from 0 to 1024 [ 111.587768][ T4943] exfat: Deprecated parameter 'utf8' [ 111.611628][ T4232] usb 4-1: config 0 descriptor?? [ 111.643950][ T4232] usb 4-1: can't set config #0, error -71 [ 111.665144][ T4943] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 111.684220][ T4232] usb 4-1: USB disconnect, device number 2 [ 112.170226][ T4944] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 112.495054][ T4944] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 112.504648][ T4944] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.180: Failed to acquire dquot type 0 [ 112.521043][ T4944] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 112.580820][ T4944] EXT4-fs (loop0): 1 truncate cleaned up [ 112.590491][ T4944] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.385762][ T4956] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 118.833666][ T4975] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 120.355232][ T4989] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 123.282852][ T5006] loop1: detected capacity change from 0 to 256 [ 123.334970][ T5006] exfat: Deprecated parameter 'utf8' [ 123.393421][ T5006] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 123.850769][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 124.522459][ T5023] loop3: detected capacity change from 0 to 256 [ 125.072941][ T5023] exfat: Deprecated parameter 'utf8' [ 125.086049][ T5025] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 125.285703][ T5001] loop2: detected capacity change from 0 to 40427 [ 125.442471][ T5023] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 125.803222][ T5001] F2FS-fs (loop2): invalid crc value [ 126.041927][ T5001] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.363728][ T5001] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 128.108812][ T5044] loop3: detected capacity change from 0 to 128 [ 128.177373][ T5049] capability: warning: `syz.0.206' uses deprecated v2 capabilities in a way that may be insecure [ 129.138140][ T5061] loop2: detected capacity change from 0 to 128 [ 129.311793][ T5061] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.328986][ T5061] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.113774][ C0] sched: RT throttling activated [ 132.063990][ T5107] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 132.778717][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.785240][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.106896][ T5126] capability: warning: `syz.0.238' uses 32-bit capabilities (legacy support in use) [ 135.125038][ T5126] program syz.0.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.964066][ T5150] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 146.176206][ T5202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 146.478590][ T5207] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 147.129478][ T5215] program syz.0.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.505213][ T5220] program syz.0.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.628305][ T5236] loop3: detected capacity change from 0 to 512 [ 149.032788][ T5236] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.270650][ T5236] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.889688][ T4173] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 150.263914][ T4173] usb 3-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 150.274983][ T4173] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 150.286634][ T4173] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 150.297122][ T4173] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.243944][ T4173] usb 3-1: string descriptor 0 read error: -71 [ 152.250346][ T4173] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 154.483092][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.524214][ T4173] usb 3-1: can't set config #1, error -71 [ 154.531307][ T4173] usb 3-1: USB disconnect, device number 2 [ 154.669844][ T5263] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 157.844060][ T5300] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 162.748356][ T5315] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 164.615413][ T5335] loop0: detected capacity change from 0 to 1024 [ 165.523102][ T5335] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x000000000000007f,noquota,delalloc,dioread_lock,nodioread_nolock,init_itable=0x0000000000000008,,errors=continue. Quota mode: none. [ 165.596930][ T5335] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.675133][ T5335] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.297: lblock 3 mapped to illegal pblock 3 (length 2) [ 165.707920][ T5335] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.297: lblock 0 mapped to illegal pblock 0 (length 3) [ 165.729862][ T5335] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 165.743067][ T5335] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.743067][ T5335] [ 165.775695][ T5351] loop4: detected capacity change from 0 to 256 [ 165.813102][ T5354] loop1: detected capacity change from 0 to 256 [ 165.842152][ T5351] exfat: Deprecated parameter 'utf8' [ 165.908910][ T144] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 4: comm kworker/u4:1: lblock 4 mapped to illegal pblock 4 (length 1) [ 165.965843][ T5358] block nbd0: server does not support multiple connections per device. [ 166.046073][ T5358] block nbd0: shutting down sockets [ 166.065397][ T5351] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 166.095762][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 166.156355][ T5354] FAT-fs (loop1): Directory bread(block 64) failed [ 166.163645][ T5354] FAT-fs (loop1): Directory bread(block 65) failed [ 166.178794][ T5354] FAT-fs (loop1): Directory bread(block 66) failed [ 166.250832][ T5354] FAT-fs (loop1): Directory bread(block 67) failed [ 166.283860][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 166.283860][ T144] [ 166.297071][ T5354] FAT-fs (loop1): Directory bread(block 68) failed [ 166.304175][ T5354] FAT-fs (loop1): Directory bread(block 69) failed [ 166.312428][ T5349] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 166.324194][ T5354] FAT-fs (loop1): Directory bread(block 70) failed [ 166.330930][ T5354] FAT-fs (loop1): Directory bread(block 71) failed [ 166.342045][ T5354] FAT-fs (loop1): Directory bread(block 72) failed [ 166.444835][ T5354] FAT-fs (loop1): Directory bread(block 73) failed [ 167.446086][ T5375] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 171.173251][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.462438][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.493025][ T5397] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 171.821856][ T5414] loop0: detected capacity change from 0 to 64 [ 171.881593][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 171.910184][ T5392] loop1: detected capacity change from 0 to 40427 [ 171.966867][ T5392] F2FS-fs (loop1): invalid crc value [ 172.013439][ T5392] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.024485][ T5424] netlink: 'syz.4.328': attribute type 10 has an invalid length. [ 172.081475][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.207652][ T5392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.221554][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.228751][ T5424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.270798][ T5430] loop0: detected capacity change from 0 to 1024 [ 172.330965][ T5430] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.363269][ T5424] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.406431][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 172.435445][ T5426] device bridge_slave_1 left promiscuous mode [ 172.457161][ T5430] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 172.508385][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.519136][ T4186] attempt to access beyond end of device [ 172.519136][ T4186] loop1: rw=2049, want=45104, limit=40427 [ 172.523467][ T5426] device bridge_slave_0 left promiscuous mode [ 172.537623][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.598837][ T5426] bond0: (slave bridge0): Releasing backup interface [ 173.004700][ T5442] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 174.285935][ T5419] loop3: detected capacity change from 0 to 40427 [ 174.498860][ T5419] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 174.634276][ T5419] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.846975][ T5419] F2FS-fs (loop3): invalid crc value [ 174.939953][ T5419] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 175.936486][ T5453] loop4: detected capacity change from 0 to 128 [ 176.844295][ T5453] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.895518][ T5457] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 176.907763][ T5453] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.072939][ T5473] loop3: detected capacity change from 0 to 256 [ 177.132638][ T5475] loop1: detected capacity change from 0 to 64 [ 177.165563][ T5475] hfs: unable to locate alternate MDB [ 177.180452][ T5473] exfat: Deprecated parameter 'utf8' [ 177.234883][ T5475] hfs: continuing without an alternate MDB [ 177.272922][ T5473] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 177.295841][ T5479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.345'. [ 178.377727][ T5489] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 178.497669][ T5497] loop1: detected capacity change from 0 to 128 [ 178.733367][ T5497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.931201][ T5497] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.585305][ T5508] device team_slave_0 entered promiscuous mode [ 179.591996][ T5508] device team_slave_1 entered promiscuous mode [ 179.654158][ T5508] device macvlan2 entered promiscuous mode [ 179.719464][ T5508] device team0 entered promiscuous mode [ 179.741627][ T26] audit: type=1400 audit(1791218882.254:2): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=5511 comm="syz.0.356" name="p" offset=59 [ 179.758220][ T5508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.783007][ T5487] loop2: detected capacity change from 0 to 40427 [ 179.839168][ T5487] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 179.856870][ T5487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 179.890844][ T5487] F2FS-fs (loop2): invalid crc value [ 179.964405][ T5487] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 180.560609][ T5532] loop1: detected capacity change from 0 to 8 [ 183.215874][ T5548] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 185.824507][ T5556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 185.832080][ T5556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.054453][ T4193] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.161035][ T5556] vhci_hcd vhci_hcd.0: Device attached [ 186.354099][ T4193] usb 2-1: Using ep0 maxpacket: 16 [ 186.394013][ T4276] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 186.827583][ T5558] vhci_hcd: connection closed [ 186.833192][ T4716] vhci_hcd: stop threads [ 186.863578][ T4716] vhci_hcd: release socket [ 186.873881][ T4193] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.881653][ T4193] usb 2-1: no configurations [ 186.888712][ T4716] vhci_hcd: disconnect device [ 186.903847][ T4276] vhci_hcd: vhci_device speed not set [ 186.923917][ T4193] usb 2-1: can't read configurations, error -22 [ 187.169063][ T5563] loop2: detected capacity change from 0 to 256 [ 187.224735][ T5563] exfat: Deprecated parameter 'utf8' [ 187.257577][ T5563] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 187.523989][ T4263] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 187.955800][ T4263] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 188.045828][ T4263] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.089723][ T4263] usb 4-1: config 0 interface 0 has no altsetting 0 [ 188.112579][ T4263] usb 4-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 188.165029][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.216718][ T4263] usb 4-1: config 0 descriptor?? [ 188.871723][ T4263] asus 0003:0B05:183D.0003: ignoring exceeding usage max [ 188.889091][ T4263] asus 0003:0B05:183D.0003: No inputs registered, leaving [ 188.898682][ T4263] asus 0003:0B05:183D.0003: hidraw0: USB HID v0.10 Joystick [HID 0b05:183d] on usb-dummy_hcd.3-1/input0 [ 189.106636][ T4263] usb 4-1: USB disconnect, device number 3 [ 189.907607][ T26] audit: type=1400 audit(1791218892.424:3): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=5601 comm="syz.3.384" name="p" offset=92 [ 191.185851][ T4235] Bluetooth: hci4: command 0x0406 tx timeout [ 191.273443][ T4235] Bluetooth: hci1: command 0x0406 tx timeout [ 191.321079][ T4235] Bluetooth: hci0: command 0x0406 tx timeout [ 191.766799][ T1111] Bluetooth: hci3: command 0x0406 tx timeout [ 191.852405][ T5638] tipc: Started in network mode [ 191.877138][ T5638] tipc: Node identity ac14142f, cluster identity 4711 [ 191.911767][ T5638] tipc: New replicast peer: 127.0.0.1 [ 191.950834][ T5638] tipc: Enabled bearer , priority 10 [ 191.995483][ T5641] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0001 [ 192.298179][ T5654] loop4: detected capacity change from 0 to 256 [ 192.333004][ T5654] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 192.379054][ T5654] exFAT-fs (loop4): invalid boot region [ 192.388758][ T5654] exFAT-fs (loop4): failed to recognize exfat type [ 192.486758][ T5660] bonding: no command found in bonding_masters - use +ifname or -ifname [ 193.352423][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 194.608468][ T5683] loop9: detected capacity change from 0 to 7 [ 194.641711][ T5683] Dev loop9: unable to read RDB block 7 [ 194.670940][ T5683] loop9: unable to read partition table [ 194.703092][ T5683] loop9: partition table beyond EOD, truncated [ 194.733593][ T5683] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 194.792959][ T3556] Dev loop9: unable to read RDB block 7 [ 194.805290][ T3556] loop9: unable to read partition table [ 194.826665][ T3556] loop9: partition table beyond EOD, truncated [ 194.937211][ T5690] loop3: detected capacity change from 0 to 256 [ 195.023860][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.030227][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.039060][ T1111] tipc: Node number set to 2886997039 [ 195.195322][ T5690] exfat: Deprecated parameter 'utf8' [ 195.352859][ T5690] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 195.441671][ T5691] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.526733][ T5693] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 195.699078][ T5702] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 197.817352][ T5720] netlink: 52 bytes leftover after parsing attributes in process `syz.2.432'. [ 197.871076][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.878448][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.089183][ T5724] loop1: detected capacity change from 0 to 4096 [ 198.147630][ T5726] block2mtd: too many arguments [ 198.179389][ T5727] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.246700][ T26] audit: type=1800 audit(1791218900.764:4): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.434" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 200.943978][ T5753] loop0: detected capacity change from 0 to 1024 [ 201.009474][ T4235] hid-generic 0005:07C0:0003.0004: item fetching failed at offset 0/1 [ 201.043074][ T4235] hid-generic: probe of 0005:07C0:0003.0004 failed with error -22 [ 201.056514][ T5753] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,journal_dev=0x0000000000000008,init_itable,. Quota mode: none. [ 201.128261][ T5751] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 201.682846][ T5774] loop0: detected capacity change from 0 to 1024 [ 201.824475][ T5774] netlink: 1 bytes leftover after parsing attributes in process `syz.0.450'. [ 202.004530][ T5777] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 203.212272][ T5784] netlink: 232 bytes leftover after parsing attributes in process `syz.2.445'. [ 204.112804][ T5789] loop1: detected capacity change from 0 to 256 [ 204.262731][ T5789] exfat: Deprecated parameter 'utf8' [ 204.671418][ T5789] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 204.778859][ T5794] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff812efd22 (__mcheck_cpu_init_clear_banks+0x112/0x1f0) [ 204.794813][ T5794] Call Trace: [ 204.798139][ T5794] [ 204.801118][ T5794] mce_cpu_restart+0xc7/0x1a0 [ 204.805991][ T5794] smp_call_function_many_cond+0x8f0/0xd80 [ 204.811867][ T5794] ? mce_restart+0x1c0/0x1c0 [ 204.816520][ T5794] ? smp_call_function_many+0x30/0x30 [ 204.821966][ T5794] ? timer_delete_sync+0x20/0x20 [ 204.826964][ T5794] ? mce_restart+0x1c0/0x1c0 [ 204.831627][ T5794] on_each_cpu_cond_mask+0x3b/0x80 [ 204.836794][ T5794] mce_restart+0x134/0x1c0 [ 204.841269][ T5794] set_bank+0x23f/0x3a0 [ 204.845478][ T5794] ? show_bank+0x2a0/0x2a0 [ 204.849944][ T5794] ? sysfs_kf_write+0x183/0x2a0 [ 204.854837][ T5794] ? sysfs_kf_read+0x350/0x350 [ 204.859668][ T5794] kernfs_fop_write_iter+0x3a8/0x500 [ 204.865002][ T5794] vfs_write+0x748/0xd70 [ 204.869298][ T5794] ? file_end_write+0x250/0x250 [ 204.874218][ T5794] ? mutex_lock_nested+0x17/0x20 [ 204.879195][ T5794] ? __fdget_pos+0x2bf/0x370 [ 204.883821][ T5794] ? ksys_write+0x70/0x260 [ 204.888285][ T5794] ksys_write+0x153/0x260 [ 204.892662][ T5794] ? __ia32_sys_read+0x80/0x80 [ 204.897472][ T5794] ? lockdep_hardirqs_on+0x94/0x140 [ 204.902809][ T5794] do_syscall_64+0x4c/0xa0 [ 204.907353][ T5794] ? clear_bhb_loop+0x30/0x80 [ 204.912073][ T5794] ? clear_bhb_loop+0x30/0x80 [ 204.916806][ T5794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.922776][ T5794] RIP: 0033:0x7f60f8f48199 [ 204.927257][ T5794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.946929][ T5794] RSP: 002b:00007f60f71a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.955407][ T5794] RAX: ffffffffffffffda RBX: 00007f60f91cffa0 RCX: 00007f60f8f48199 [ 204.963433][ T5794] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 204.971463][ T5794] RBP: 00007f60f8fdf0b8 R08: 0000000000000000 R09: 0000000000000000 [ 204.979563][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.987657][ T5794] R13: 00007f60f91d0038 R14: 00007f60f91cffa0 R15: 00007fffdc4f22f8 [ 204.995905][ T5794] [ 205.301723][ T5799] loop3: detected capacity change from 0 to 2048 [ 205.360648][ T5799] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 205.407881][ T5799] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 205.452490][ T5799] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 205.890881][ T5799] EXT4-fs (loop3): This should not happen!! Data will be lost [ 205.890881][ T5799] [ 206.020049][ T5799] EXT4-fs (loop3): Total free blocks count 0 [ 206.069247][ T5799] EXT4-fs (loop3): Free/Dirty block details [ 206.169994][ T5799] EXT4-fs (loop3): free_blocks=4096 [ 206.246729][ T5799] EXT4-fs (loop3): dirty_blocks=32 [ 206.299404][ T5799] EXT4-fs (loop3): Block reservation details [ 206.372461][ T5799] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 206.413848][ T5795] loop4: detected capacity change from 0 to 40427 [ 206.884411][ T5795] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 206.890845][ T5795] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 206.923070][ T5795] F2FS-fs (loop4): invalid crc value [ 207.212091][ T5795] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 207.246433][ T5818] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 209.245583][ T5831] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 210.938393][ T5849] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 211.621998][ T5853] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 213.659543][ T5860] Line length is too long: Should be less than 4094 [ 217.337862][ T5876] loop2: detected capacity change from 0 to 2048 [ 217.369752][ T5873] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 217.501349][ T5876] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 217.540165][ T5876] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 217.572983][ T5876] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 217.594200][ T5876] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 217.601910][ T5876] UDF-fs: Scanning with blocksize 512 failed [ 217.644925][ T5876] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 217.694349][ T5876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.760813][ T5880] loop3: detected capacity change from 0 to 4096 [ 218.781764][ T5887] loop0: detected capacity change from 0 to 256 [ 218.812497][ T5880] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 218.884528][ T5887] exfat: Deprecated parameter 'utf8' [ 218.953692][ T5890] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 219.024647][ T5887] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 219.154596][ T5895] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 223.075644][ T5923] loop0: detected capacity change from 0 to 256 [ 223.145775][ T5923] exfat: Deprecated parameter 'utf8' [ 223.994594][ T5923] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 226.762749][ T5931] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 228.620665][ T5970] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 229.612245][ T5977] loop1: detected capacity change from 0 to 256 [ 229.642687][ T5980] loop2: detected capacity change from 0 to 256 [ 229.682515][ T5980] exfat: Deprecated parameter 'utf8' [ 229.706813][ T5977] exfat: Deprecated parameter 'utf8' [ 229.738721][ T5983] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 229.795104][ T5980] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 229.817900][ T5981] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 229.850094][ T5977] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 232.231439][ T6005] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 232.389741][ T6014] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 233.680079][ T6025] loop3: detected capacity change from 0 to 256 [ 233.705112][ T6025] exfat: Deprecated parameter 'utf8' [ 233.782918][ T6025] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 234.369067][ T6032] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 234.405994][ T6030] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 234.793222][ T6042] loop4: detected capacity change from 0 to 256 [ 234.808453][ T6042] exfat: Deprecated parameter 'utf8' [ 234.868076][ T6036] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 234.897639][ T6042] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 237.758464][ T6069] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 237.960137][ T6084] loop1: detected capacity change from 0 to 256 [ 238.005261][ T6084] exfat: Deprecated parameter 'utf8' [ 238.042895][ T6086] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 238.081842][ T6084] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 238.238582][ T6063] loop3: detected capacity change from 0 to 32768 [ 239.989308][ T6100] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 240.011285][ T6109] loop2: detected capacity change from 0 to 256 [ 240.058143][ T6109] exfat: Deprecated parameter 'utf8' [ 240.094918][ T6109] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 240.107448][ T1111] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 240.367709][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 240.534091][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 240.573078][ T6112] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 240.724091][ T1111] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 240.734748][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.742962][ T1111] usb 4-1: Product: syz [ 241.721054][ T1111] usb 4-1: Manufacturer: syz [ 241.725830][ T1111] usb 4-1: SerialNumber: syz [ 241.745002][ T1111] usb 4-1: config 0 descriptor?? [ 241.783974][ T1111] usb 4-1: can't set config #0, error -71 [ 241.810333][ T1111] usb 4-1: USB disconnect, device number 4 [ 242.608719][ T6130] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 242.727893][ T6134] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 243.939113][ T6141] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 244.288214][ T6159] loop3: detected capacity change from 0 to 256 [ 244.343352][ T6159] exfat: Deprecated parameter 'utf8' [ 244.359326][ T6162] loop4: detected capacity change from 0 to 256 [ 244.525872][ T6159] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 244.564568][ T6162] exfat: Deprecated parameter 'utf8' [ 244.588751][ T6157] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 244.623914][ T6162] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 246.821211][ T6180] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 247.500550][ T6188] tipc: Can't bind to reserved service type 1 [ 248.578697][ T6191] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 249.692061][ T6204] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 249.714190][ T6206] netlink: 'syz.3.583': attribute type 27 has an invalid length. [ 249.732834][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 249.892400][ T6210] loop3: detected capacity change from 0 to 256 [ 249.974794][ T6210] exfat: Deprecated parameter 'utf8' [ 250.096367][ T6210] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 251.645890][ T6222] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 251.662381][ T6225] loop1: detected capacity change from 0 to 256 [ 251.714650][ T6225] exfat: Deprecated parameter 'utf8' [ 251.796318][ T6225] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 252.007026][ T7] wacom 0003:056A:003F.0005: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 252.153971][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 252.161669][ T4276] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 252.807734][ T6251] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 252.824679][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 252.871657][ T6253] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 252.884095][ T4263] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 252.904101][ T4276] usb 5-1: Using ep0 maxpacket: 8 [ 253.044363][ T4276] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.055542][ T4276] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 253.065035][ T4276] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.146086][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 253.155853][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.164549][ T23] usb 1-1: Product: syz [ 253.168858][ T23] usb 1-1: Manufacturer: syz [ 253.173579][ T23] usb 1-1: SerialNumber: syz [ 253.178647][ T4263] usb 3-1: Using ep0 maxpacket: 16 [ 253.188220][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 253.254128][ T4276] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 253.264151][ T4276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.272218][ T4276] usb 5-1: Product: syz [ 253.277557][ T4276] usb 5-1: Manufacturer: syz [ 253.282209][ T4276] usb 5-1: SerialNumber: syz [ 253.324018][ T4263] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 253.332117][ T4263] usb 3-1: config 0 has no interface number 0 [ 253.353954][ T4263] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.366086][ T4263] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 253.483967][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 253.503998][ T4263] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 254.326166][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 254.343857][ T4263] usb 3-1: Product: syz [ 254.348082][ T4263] usb 3-1: SerialNumber: syz [ 254.357757][ T4263] usb 3-1: config 0 descriptor?? [ 254.364147][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 254.372767][ T23] r8152-cfgselector 1-1: bad CDC descriptors [ 254.396424][ T4263] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 254.405729][ T4263] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input12 [ 254.435312][ T23] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 254.460413][ T4500] usb 1-1: config 0 descriptor?? [ 254.622389][ T23] usb 3-1: USB disconnect, device number 3 [ 254.633856][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 254.649085][ T23] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 254.700424][ T4500] usb 1-1: can't set config #0, error -71 [ 254.723290][ T4263] usb 1-1: USB disconnect, device number 4 [ 254.753943][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 254.764190][ T4276] usb 5-1: clock source 0 is not valid, cannot use [ 254.973887][ T4234] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 254.984020][ T4276] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 254.994058][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 255.004705][ T4276] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 255.051397][ T4276] usb 5-1: USB disconnect, device number 2 [ 255.113984][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.126432][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.147940][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.162009][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.190259][ T7] usb 4-1: config 0 descriptor?? [ 255.215813][ T6269] netlink: 'syz.2.606': attribute type 3 has an invalid length. [ 255.223821][ T4234] usb 2-1: Using ep0 maxpacket: 8 [ 255.235344][ T7] hub 4-1:0.0: USB hub found [ 255.300267][ T6274] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 255.313518][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.343997][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.444121][ T7] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 255.523971][ T4234] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 255.543553][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.552152][ T1111] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.559964][ T4234] usb 2-1: Product: syz [ 255.564757][ T4234] usb 2-1: Manufacturer: syz [ 255.569497][ T4234] usb 2-1: SerialNumber: syz [ 255.655618][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.662308][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.679949][ T4234] usb 2-1: config 0 descriptor?? [ 255.780851][ T4234] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 255.787471][ T4234] usb 2-1: selecting invalid altsetting 1 [ 255.803873][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 255.813366][ T6279] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 255.883518][ T7] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 255.935649][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.955453][ T1111] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.972574][ T1111] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.999884][ T1111] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 256.025333][ T1111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.032054][ T1111] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 256.043079][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.053560][ T1111] usb 3-1: config 0 descriptor?? [ 256.142062][ T6286] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 256.197191][ T4234] usb 2-1: USB disconnect, device number 6 [ 256.284119][ T4263] usb 4-1: USB disconnect, device number 5 [ 256.443978][ T6288] loop4: detected capacity change from 0 to 256 [ 256.475757][ T6288] exfat: Deprecated parameter 'utf8' [ 256.542300][ T1111] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 256.561184][ T6288] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 256.565066][ T1111] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 256.588338][ T1111] hid-thrustmaster 0003:044F:B65D.0007: item fetching failed at offset 2/5 [ 256.598226][ T1111] hid-thrustmaster 0003:044F:B65D.0007: parse failed with error -22 [ 256.611326][ T1111] hid-thrustmaster: probe of 0003:044F:B65D.0007 failed with error -22 [ 257.376646][ T4276] usb 3-1: USB disconnect, device number 4 [ 257.445908][ T6296] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 258.311007][ T6317] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 258.768048][ T6320] loop1: detected capacity change from 0 to 32768 [ 258.790192][ T6322] loop0: detected capacity change from 0 to 40427 [ 258.839317][ T6322] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 258.853663][ T6322] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 258.875034][ T6322] F2FS-fs (loop0): invalid crc value [ 258.883075][ T6320] JBD2: Ignoring recovery information on journal [ 258.907661][ T6322] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 259.005307][ T6320] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 259.086689][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 259.102754][ T6322] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 259.133099][ T6322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 259.163974][ T6332] loop2: detected capacity change from 0 to 256 [ 259.216966][ T6335] loop4: detected capacity change from 0 to 256 [ 259.230349][ T6320] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 259.250956][ T6332] exfat: Deprecated parameter 'utf8' [ 259.274924][ T6320] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 259.293645][ T6332] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 259.311575][ T6320] OCFS2: Returning error to the calling process. [ 259.338077][ T6335] exfat: Deprecated parameter 'utf8' [ 259.437737][ T6320] (syz.1.623,6320,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 259.700824][ T6320] (syz.1.623,6320,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 259.887927][ T6335] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 259.933997][ T6320] (syz.1.623,6320,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 260.091783][ T6320] (syz.1.623,6320,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 260.134067][ T6320] (syz.1.623,6320,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 260.142048][ T6320] (syz.1.623,6320,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 260.150230][ T6320] (syz.1.623,6320,1):ocfs2_mknod_locked:641 ERROR: status = -5 [ 260.157965][ T6320] (syz.1.623,6320,1):ocfs2_mknod:385 ERROR: status = -5 [ 260.166410][ T6320] (syz.1.623,6320,1):ocfs2_mknod:504 ERROR: status = -5 [ 260.175382][ T6320] (syz.1.623,6320,1):ocfs2_mkdir:661 ERROR: status = -5 [ 260.694576][ T4185] attempt to access beyond end of device [ 260.694576][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 261.412774][ T6320] (syz.1.623,6320,0):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 261.520016][ T6320] syz.1.623 (6320) used greatest stack depth: 18240 bytes left [ 261.641884][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 261.784583][ T6357] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 262.016004][ T6361] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 263.516728][ T6360] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 263.797632][ T4193] input: syz0 as /devices/virtual/misc/uhid/0002:0001:0002.0008/input/input13 [ 264.026008][ T6368] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 264.074395][ T4193] hid-generic 0002:0001:0002.0008: input,hidraw0: HID v0.01 Mouse [syz0] on syz0 [ 264.120131][ T6366] loop0: detected capacity change from 0 to 1024 [ 264.382079][ T6366] EXT4-fs (loop0): Unrecognized mount option "smackfsdef=hash" or missing value [ 265.262359][ T6374] loop3: detected capacity change from 0 to 2048 [ 265.288384][ T6370] fido_id[6370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.389565][ T6374] NILFS (loop3): invalid segment: Magic number mismatch [ 265.443917][ T6374] NILFS (loop3): trying rollback from an earlier position [ 265.471716][ T6374] NILFS (loop3): recovery complete [ 265.508221][ T6383] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.607903][ T6374] NILFS (loop3): nilfs_dat_move: invalid vblocknr = 9, [0, 0) [ 265.627899][ T6374] NILFS error (device loop3): nilfs_bmap_assign: broken bmap (inode number=3) [ 265.650662][ T6374] Remounting filesystem read-only [ 265.664090][ T6374] NILFS (loop3): error -5 cleaning segments [ 265.774583][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 265.825340][ T6397] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 266.002418][ T6407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.015545][ T6409] program syz.1.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.080610][ T6374] NILFS (loop3): error -30 cleaning segments [ 266.134021][ T6411] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 266.169334][ T4184] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 266.188592][ T4184] VFS: Busy inodes after unmount of loop3. Self-destruct in 5 seconds. Have a nice day... [ 266.348197][ T6417] si4713 0-0006: IRQ not configured. Using timeouts. [ 266.357256][ T6399] loop0: detected capacity change from 0 to 32768 [ 266.365327][ T6417] si4713 0-0006: Error while sending command 0x01 [ 266.381743][ T6417] si4713 0-0006: Failed to probe device information. [ 266.390046][ T6417] si4713: probe of 0-0006 failed with error -5 [ 266.399063][ T6417] i2c i2c-0: new_device: Instantiated device si4713 at 0x06 [ 266.455379][ T6399] XFS (loop0): Mounting V5 Filesystem [ 266.512168][ T6399] XFS (loop0): Ending clean mount [ 266.524105][ T1111] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 266.580533][ T4185] XFS (loop0): Unmounting Filesystem [ 266.783981][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 266.913953][ T1111] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 266.922023][ T1111] usb 3-1: config 0 has no interface number 0 [ 266.928808][ T1111] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.940074][ T1111] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.105497][ T1111] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 267.118821][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 267.127413][ T1111] usb 3-1: Product: syz [ 267.131623][ T1111] usb 3-1: SerialNumber: syz [ 267.141964][ T1111] usb 3-1: config 0 descriptor?? [ 267.186004][ T1111] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 267.194341][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14 [ 267.399047][ T1111] usb 3-1: USB disconnect, device number 5 [ 267.423789][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 267.431025][ T1111] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 270.614311][ T4716] ================================================================== [ 270.623092][ T4716] BUG: KASAN: use-after-free in down_read_trylock+0xaf/0x3b0 [ 270.630588][ T4716] Read of size 8 at addr ffff88807c4f00d8 by task kworker/u4:10/4716 [ 270.638693][ T4716] [ 270.641076][ T4716] CPU: 1 PID: 4716 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 270.648726][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 270.658809][ T4716] Workqueue: writeback wb_workfn (flush-7:3) [ 270.664830][ T4716] Call Trace: [ 270.668164][ T4716] [ 270.671111][ T4716] dump_stack_lvl+0x188/0x250 [ 270.675828][ T4716] ? show_regs_print_info+0x20/0x20 [ 270.681062][ T4716] ? load_image+0x410/0x410 [ 270.685598][ T4716] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 270.691077][ T4716] print_address_description+0x60/0x2d0 [ 270.696789][ T4716] ? down_read_trylock+0xaf/0x3b0 [ 270.701839][ T4716] kasan_report+0xdf/0x130 [ 270.706296][ T4716] ? down_read_trylock+0xaf/0x3b0 [ 270.711366][ T4716] down_read_trylock+0xaf/0x3b0 [ 270.716241][ T4716] ? __init_rwsem+0x160/0x160 [ 270.720954][ T4716] ? move_expired_inodes+0x722/0x770 [ 270.726279][ T4716] trylock_super+0x1c/0xf0 [ 270.730720][ T4716] __writeback_inodes_wb+0x114/0x3f0 [ 270.736039][ T4716] wb_writeback+0x45e/0xbc0 [ 270.740738][ T4716] ? rcu_lock_release+0x20/0x20 [ 270.745677][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 270.750746][ T4716] ? mark_lock+0x94/0x320 [ 270.755107][ T4716] ? cpumask_next+0xb3/0xd0 [ 270.759642][ T4716] wb_workfn+0xbd6/0xf20 [ 270.763928][ T4716] ? inode_wait_for_writeback+0x220/0x220 [ 270.769691][ T4716] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 270.775734][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 270.780816][ T4716] ? read_lock_is_recursive+0x10/0x10 [ 270.786249][ T4716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 270.792177][ T4716] ? _raw_spin_unlock+0x40/0x40 [ 270.797054][ T4716] ? _raw_spin_unlock_irq+0x1f/0x40 [ 270.802304][ T4716] process_one_work+0x867/0xff0 [ 270.807363][ T4716] ? worker_detach_from_pool+0x240/0x240 [ 270.813038][ T4716] ? lockdep_hardirqs_off+0x70/0x100 [ 270.818374][ T4716] ? _raw_spin_lock_irq+0xb7/0xf0 [ 270.823427][ T4716] ? _raw_spin_lock_irqsave+0x100/0x100 [ 270.830890][ T4716] ? wq_worker_running+0x97/0x170 [ 270.835950][ T4716] worker_thread+0xad7/0x12a0 [ 270.840666][ T4716] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 270.846694][ T4716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 270.852645][ T4716] kthread+0x42e/0x520 [ 270.856750][ T4716] ? rcu_lock_release+0x20/0x20 [ 270.861639][ T4716] ? kthread_blkcg+0xd0/0xd0 [ 270.866254][ T4716] ret_from_fork+0x1f/0x30 [ 270.870700][ T4716] [ 270.873746][ T4716] [ 270.876090][ T4716] Allocated by task 6374: [ 270.880440][ T4716] __kasan_kmalloc+0xaf/0xe0 [ 270.885054][ T4716] alloc_super+0x59/0x970 [ 270.889403][ T4716] sget+0x1ce/0x450 [ 270.893224][ T4716] nilfs_mount+0x452/0x8c0 [ 270.897652][ T4716] legacy_get_tree+0xe6/0x180 [ 270.902347][ T4716] vfs_get_tree+0x88/0x270 [ 270.906787][ T4716] do_new_mount+0x247/0xa40 [ 270.911338][ T4716] __se_sys_mount+0x2e3/0x3d0 [ 270.916030][ T4716] do_syscall_64+0x4c/0xa0 [ 270.920478][ T4716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.926394][ T4716] [ 270.928734][ T4716] Freed by task 7: [ 270.932462][ T4716] kasan_set_track+0x4b/0x70 [ 270.937071][ T4716] kasan_set_free_info+0x1f/0x40 [ 270.942115][ T4716] ____kasan_slab_free+0xd5/0x110 [ 270.947176][ T4716] slab_free_freelist_hook+0xec/0x170 [ 270.952569][ T4716] kfree+0xef/0x2a0 [ 270.956400][ T4716] process_one_work+0x867/0xff0 [ 270.961292][ T4716] worker_thread+0xad7/0x12a0 [ 270.966008][ T4716] kthread+0x42e/0x520 [ 270.970098][ T4716] ret_from_fork+0x1f/0x30 [ 270.974532][ T4716] [ 270.976864][ T4716] Last potentially related work creation: [ 270.982596][ T4716] kasan_save_stack+0x35/0x60 [ 270.987287][ T4716] kasan_record_aux_stack+0xb8/0x100 [ 270.992610][ T4716] insert_work+0x54/0x3d0 [ 270.996968][ T4716] __queue_work+0x90b/0xc80 [ 271.001483][ T4716] queue_work_on+0x124/0x1f0 [ 271.006097][ T4716] rcu_core+0x96e/0x1650 [ 271.010380][ T4716] handle_softirqs+0x336/0x830 [ 271.015167][ T4716] __irq_exit_rcu+0x13b/0x230 [ 271.019894][ T4716] irq_exit_rcu+0x5/0x20 [ 271.024157][ T4716] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 271.029833][ T4716] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 271.035864][ T4716] [ 271.038204][ T4716] Second to last potentially related work creation: [ 271.044792][ T4716] kasan_save_stack+0x35/0x60 [ 271.049491][ T4716] kasan_record_aux_stack+0xb8/0x100 [ 271.054789][ T4716] call_rcu+0x189/0x900 [ 271.058965][ T4716] deactivate_locked_super+0xc7/0xf0 [ 271.064267][ T4716] cleanup_mnt+0x426/0x4d0 [ 271.068870][ T4716] task_work_run+0x125/0x1a0 [ 271.073492][ T4716] exit_to_user_mode_loop+0x10f/0x130 [ 271.078883][ T4716] exit_to_user_mode_prepare+0xee/0x180 [ 271.084450][ T4716] syscall_exit_to_user_mode+0x16/0x40 [ 271.089928][ T4716] do_syscall_64+0x58/0xa0 [ 271.094361][ T4716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.100445][ T4716] [ 271.102783][ T4716] The buggy address belongs to the object at ffff88807c4f0000 [ 271.102783][ T4716] which belongs to the cache kmalloc-4k of size 4096 [ 271.116850][ T4716] The buggy address is located 216 bytes inside of [ 271.116850][ T4716] 4096-byte region [ffff88807c4f0000, ffff88807c4f1000) [ 271.130228][ T4716] The buggy address belongs to the page: [ 271.135882][ T4716] page:ffffea0001f13c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c4f0 [ 271.146047][ T4716] head:ffffea0001f13c00 order:3 compound_mapcount:0 compound_pincount:0 [ 271.154390][ T4716] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 271.162403][ T4716] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c42140 [ 271.171007][ T4716] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 271.179603][ T4716] page dumped because: kasan: bad access detected [ 271.186037][ T4716] page_owner tracks the page as allocated [ 271.191761][ T4716] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6374, ts 265359774457, free_ts 265270057541 [ 271.212439][ T4716] get_page_from_freelist+0x24f6/0x2670 [ 271.218011][ T4716] __alloc_pages+0x1ee/0x480 [ 271.222620][ T4716] new_slab+0xc0/0x4b0 [ 271.226705][ T4716] ___slab_alloc+0x807/0xdd0 [ 271.232594][ T4716] kmem_cache_alloc_trace+0xf9/0x290 [ 271.237915][ T4716] alloc_super+0x59/0x970 [ 271.242293][ T4716] sget+0x1ce/0x450 [ 271.246259][ T4716] nilfs_mount+0x452/0x8c0 [ 271.251022][ T4716] legacy_get_tree+0xe6/0x180 [ 271.255728][ T4716] vfs_get_tree+0x88/0x270 [ 271.260183][ T4716] do_new_mount+0x247/0xa40 [ 271.264705][ T4716] __se_sys_mount+0x2e3/0x3d0 [ 271.269400][ T4716] do_syscall_64+0x4c/0xa0 [ 271.273837][ T4716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.279749][ T4716] page last free stack trace: [ 271.284429][ T4716] free_unref_page_prepare+0x637/0x6c0 [ 271.289903][ T4716] free_unref_page+0x8f/0x2a0 [ 271.294611][ T4716] __unfreeze_partials+0x188/0x1e0 [ 271.299749][ T4716] put_cpu_partial+0x12d/0x190 [ 271.304532][ T4716] qlist_free_all+0x35/0x90 [ 271.309073][ T4716] kasan_quarantine_reduce+0x150/0x160 [ 271.314544][ T4716] __kasan_slab_alloc+0x2f/0xc0 [ 271.319409][ T4716] slab_post_alloc_hook+0x4c/0x380 [ 271.324548][ T4716] kmem_cache_alloc+0x15d/0x280 [ 271.329439][ T4716] __alloc_file+0x25/0x240 [ 271.333901][ T4716] alloc_empty_file+0x90/0x180 [ 271.338699][ T4716] path_openat+0x11c/0x2fb0 [ 271.343232][ T4716] do_filp_open+0x1df/0x400 [ 271.347769][ T4716] do_sys_openat2+0x14b/0x500 [ 271.352469][ T4716] __x64_sys_openat+0x135/0x160 [ 271.357345][ T4716] do_syscall_64+0x4c/0xa0 [ 271.361788][ T4716] [ 271.364128][ T4716] Memory state around the buggy address: [ 271.369787][ T4716] ffff88807c4eff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.377866][ T4716] ffff88807c4f0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.385947][ T4716] >ffff88807c4f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.394033][ T4716] ^ [ 271.400989][ T4716] ffff88807c4f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.409072][ T4716] ffff88807c4f0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.417156][ T4716] ================================================================== [ 271.425230][ T4716] Disabling lock debugging due to kernel taint [ 271.432337][ T4716] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.439577][ T4716] CPU: 1 PID: 4716 Comm: kworker/u4:10 Tainted: G B syzkaller #0 [ 271.448641][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 271.458738][ T4716] Workqueue: writeback wb_workfn (flush-7:3) [ 271.464798][ T4716] Call Trace: [ 271.468105][ T4716] [ 271.471069][ T4716] dump_stack_lvl+0x188/0x250 [ 271.475782][ T4716] ? show_regs_print_info+0x20/0x20 [ 271.481016][ T4716] ? load_image+0x410/0x410 [ 271.485599][ T4716] panic+0x2f8/0x850 [ 271.489541][ T4716] ? bpf_jit_dump+0xd0/0xd0 [ 271.494074][ T4716] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 271.500013][ T4716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 271.505989][ T4716] ? _raw_spin_unlock+0x40/0x40 [ 271.510898][ T4716] ? down_read_trylock+0xaf/0x3b0 [ 271.515968][ T4716] check_panic_on_warn+0x80/0xa0 [ 271.520965][ T4716] ? down_read_trylock+0xaf/0x3b0 [ 271.526041][ T4716] end_report+0x6d/0xf0 [ 271.530236][ T4716] kasan_report+0x102/0x130 [ 271.534781][ T4716] ? down_read_trylock+0xaf/0x3b0 [ 271.539851][ T4716] down_read_trylock+0xaf/0x3b0 [ 271.544755][ T4716] ? __init_rwsem+0x160/0x160 [ 271.549479][ T4716] ? move_expired_inodes+0x722/0x770 [ 271.554816][ T4716] trylock_super+0x1c/0xf0 [ 271.559286][ T4716] __writeback_inodes_wb+0x114/0x3f0 [ 271.564615][ T4716] wb_writeback+0x45e/0xbc0 [ 271.569163][ T4716] ? rcu_lock_release+0x20/0x20 [ 271.574049][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 271.579253][ T4716] ? mark_lock+0x94/0x320 [ 271.583618][ T4716] ? cpumask_next+0xb3/0xd0 [ 271.588167][ T4716] wb_workfn+0xbd6/0xf20 [ 271.592514][ T4716] ? inode_wait_for_writeback+0x220/0x220 [ 271.598285][ T4716] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 271.604308][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 271.609411][ T4716] ? read_lock_is_recursive+0x10/0x10 [ 271.614911][ T4716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 271.620851][ T4716] ? _raw_spin_unlock+0x40/0x40 [ 271.625761][ T4716] ? _raw_spin_unlock_irq+0x1f/0x40 [ 271.631005][ T4716] process_one_work+0x867/0xff0 [ 271.635923][ T4716] ? worker_detach_from_pool+0x240/0x240 [ 271.641597][ T4716] ? lockdep_hardirqs_off+0x70/0x100 [ 271.646919][ T4716] ? _raw_spin_lock_irq+0xb7/0xf0 [ 271.651982][ T4716] ? _raw_spin_lock_irqsave+0x100/0x100 [ 271.657563][ T4716] ? wq_worker_running+0x97/0x170 [ 271.662627][ T4716] worker_thread+0xad7/0x12a0 [ 271.667344][ T4716] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 271.673274][ T4716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 271.679385][ T4716] kthread+0x42e/0x520 [ 271.683487][ T4716] ? rcu_lock_release+0x20/0x20 [ 271.688376][ T4716] ? kthread_blkcg+0xd0/0xd0 [ 271.693000][ T4716] ret_from_fork+0x1f/0x30 [ 271.697460][ T4716] [ 271.700760][ T4716] Kernel Offset: disabled [ 271.705120][ T4716] Rebooting in 86400 seconds..