last executing test programs: 24.269023303s ago: executing program 3 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x100}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x17, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 24.168398535s ago: executing program 3 (id=348): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x1ff, 0x5, 0x7}, 0x3f, [0x9, 0x2, 0x18, 0x6, 0x2, 0x400, 0xc0000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x9, 0xfffffffb, 0x39, 0x747d5e13, 0x803, 0xfffffb9a, 0xfffffffe, 0x5, 0xfffffbfb, 0x12004, 0x3, 0x2, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0x1a, 0x8da8, 0x2, 0x200, 0x6, 0x5, 0x8, 0x4, 0x2, 0xffff, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x1ff, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x41, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x2, 0x8000, 0xfffffffd, 0x3, 0x1, 0x24, 0x5, 0xfffffffb, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffa, 0x3, 0x3, 0x297, 0x8, 0x0, 0x200000a, 0x4, 0x0, 0x3ff, 0x3, 0xff, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x2000001, 0xffffffff, 0x6, 0x2000008, 0x800, 0x4fdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x1, 0x7, 0x6, 0x2, 0x800001, 0x1, 0x8, 0x4, 0x1f6, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x0, 0x0, 0x1e86, 0x5, 0x3d, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x400004, 0x5, 0x200003, 0x100, 0x5, 0x4, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x9, 0xb, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x8, 0xffff, 0x3, 0x0, 0x1000088, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0xfff, 0x1000, 0x8, 0x5, 0x3fa6, 0x4, 0x5, 0x5, 0x8000, 0x4, 0xe48, 0x4, 0x3, 0x4, 0x0, 0x7, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0xc09, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xfdff8a33, 0xfffffff8, 0x1, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0x3, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 24.071409608s ago: executing program 3 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='3', 0x1) 22.235091553s ago: executing program 3 (id=372): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d01, &(0x7f0000000040)) 21.341984985s ago: executing program 3 (id=374): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd04, &(0x7f0000000000)="0400000000000000000000003801") 20.160717734s ago: executing program 3 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 19.872228181s ago: executing program 32 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 4.720446724s ago: executing program 2 (id=491): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="ecb7518dfc94a13e20fb0046b44553b6851933ffcd3bdb1cd9e1339edcc6574d701c59877cf582e29b8aeb7f72998453c4f9afe32942c833fadaa3728e1ac92d5ebd574f2a0c51c32d72edb5eb4faebc7b9990163449c230c3219e67d83433ed731550dddcab19d198adb785a60fb050095e20e6aea328048fad04f3673232d76401a530", 0x84}], 0x1}, 0x4c880) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5385, &(0x7f0000000100)=0x3) 4.579007848s ago: executing program 2 (id=494): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.074029909s ago: executing program 2 (id=502): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x1, 0xfffffffb, 0x181}) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/98, 0x62}], 0x1) close_range(r1, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.993115132s ago: executing program 1 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 3.918236794s ago: executing program 1 (id=505): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x3, 0x2, 0x7}) 3.629166971s ago: executing program 0 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000128290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.444742985s ago: executing program 0 (id=510): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="a85faa91a18f2d49f8a2107aa73b944ac5e10000004b06f99a778c21ce28f8230d96fd2370b45008428d43e8c2c1e6710fec8635c330917cc3d711263c78dfcc5e892696337e7e11337926bee130f41486670af4077af969740f8872670222b1bef7ed7f773806ff1b4dee2f861afc80c38cd3c1a29ed0d2c870966988936620669d46cdee359b97cfa9cff24b1ac097dc2495e63da8cb6985368b7d", 0x9c}], 0x1, 0x0, 0x0, 0x4004044}, 0x40041) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) 3.202216981s ago: executing program 0 (id=512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.760543782s ago: executing program 0 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904000002ff00000007050102"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) close(r0) 2.649124595s ago: executing program 2 (id=515): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2.098511969s ago: executing program 4 (id=520): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.993012691s ago: executing program 2 (id=522): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) close(r0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.793730286s ago: executing program 2 (id=523): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 1.738490597s ago: executing program 1 (id=524): r0 = socket$inet6(0xa, 0x80802, 0x0) fcntl$setstatus(r0, 0x4, 0x43400) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) shutdown(r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) 1.62140218s ago: executing program 1 (id=525): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x40, 0x0) 1.527354643s ago: executing program 1 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x2}) 1.341177247s ago: executing program 1 (id=528): r0 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000080)={0x0, 0xb, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "22905ed31a4c498fa523cc26171e2b83d969a535bd840a827b34ef549bc565d221938dd81c1f011acf079ccdccbe51241d52b8cfae87d32b74c3d2f6ad42ac6f62e188135170a2a01662d1b5fba8d5fa51cd4294369139f9d38e17c8518a022865e765a7123ad1e766cafae6c08f270965718f2f4455beca"}}, 0x0, 0x0, 0x0}, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x50, "6fbe5ac8238163525d5f394009bff708d381c58b44af4a5146527a40d8c611dbe6bd1e1692dbf56f878120925e8761c27377bdcb13acf65b5b3989a17fbdbff31e88d9236450dab780f9f5b030288103"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7c}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x200, 0x8, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x96}, &(0x7f0000000640)={0x40, 0xb, 0x2, "6fdb"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0xa}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "d20f"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x5}}) 1.182146691s ago: executing program 4 (id=530): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xc, 0x24, 0x2, 0x0, 0xd, 0x2, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0x4}, &(0x7f0000000300)=0x8) 1.132077522s ago: executing program 5 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='\x00\x00', 0x2) 1.030908655s ago: executing program 4 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000200)='4', 0x4b) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0) 991.908656ms ago: executing program 5 (id=533): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7e) 833.87476ms ago: executing program 5 (id=534): mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 459.865239ms ago: executing program 0 (id=535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000019}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 459.081079ms ago: executing program 5 (id=536): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x1e9248b1) writev(r0, &(0x7f0000000280)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f", 0x81}, {&(0x7f0000000180)="d85317ed7502112ea8298e390f38f94cd965bb3b6b8fc0b31e6e4c9ac178cd7a4a728878210833f90663106b8898463ff51dc94f5a3ecf3b053263d0b81ad3", 0x3f}], 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x108) 392.90641ms ago: executing program 4 (id=537): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000440)=0xd7, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) 293.086453ms ago: executing program 5 (id=538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020202000b0049"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) 128.630127ms ago: executing program 4 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) 65.008229ms ago: executing program 5 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) 64.395348ms ago: executing program 0 (id=541): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00fb1d0aaef4b769fc3fb5aa3decb84c4cd8249e036321a59d9937a73dda6d93546aefa51e4a8115f9e83b20b0ccd486a700e2fbd9ab1af29aa30f2907"], 0x1, 0x5d3, &(0x7f00000006c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x24) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/211, 0xd3) 0s ago: executing program 4 (id=542): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2000c12, &(0x7f0000000e00)={[{@check_relaxed}, {@dmode}, {@session={'session', 0x3d, 0xd}}, {@cruft}, {@map_acorn}, {@unhide}, {@overriderock}, {@showassoc}, {@map_normal}, {@nocompress}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x81, 0xa5d, &(0x7f0000000280)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = open(&(0x7f0000000300)='.\x00', 0x8c00, 0x5) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) kernel console output (not intermixed with test programs): ecomes ready [ 68.896154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.916412][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.935269][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.953936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.963439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.983164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.991670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.002875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.014432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.032484][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.039745][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.062883][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.097372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.105334][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 69.112611][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 69.121033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.129622][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 69.136331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.145054][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 69.151437][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 69.158394][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.165489][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.176074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.185360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.194597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.204368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.213884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.223281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.234773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.254757][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.269398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.285862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.295871][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.303010][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.312557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.323943][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.333403][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.345308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.354543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.366302][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.373429][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.397482][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.406342][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.416265][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.429716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.451404][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.462674][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.479876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.495322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.505080][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.512221][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.527009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.536794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.551374][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.558513][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.569364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.581008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.589965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.628997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.646033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.656233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.670270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.680748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.693652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.704806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.717345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.732370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.741905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.750833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.760017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.769218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.778369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.786757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.795702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.804421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.812836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.822347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.830891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.839124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.857624][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.882229][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.890207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.909082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.917399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.925730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.935377][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.953293][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.974849][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.004410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.018493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.086153][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.111478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.122153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.132800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.148756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.159474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.167978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.185596][ T4191] device veth0_vlan entered promiscuous mode [ 70.197703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.206090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.217217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.227268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.236354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.245506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.255624][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.262750][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.271548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.281292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.290315][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.297399][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.306162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.314266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.325409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.334792][ T4201] device veth0_vlan entered promiscuous mode [ 70.367239][ T4201] device veth1_vlan entered promiscuous mode [ 70.384272][ T4191] device veth1_vlan entered promiscuous mode [ 70.393693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.403882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.415052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.422914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.432919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.442139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.451745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.461647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.470503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.482243][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.507368][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.520727][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.546561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.556405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.565516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.575858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.584793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.593412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.602635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.611149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.620484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.629545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.643399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.655094][ T4201] device veth0_macvtap entered promiscuous mode [ 70.679561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.688162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.695642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.707013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.721067][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.741004][ T4191] device veth0_macvtap entered promiscuous mode [ 70.752966][ T4201] device veth1_macvtap entered promiscuous mode [ 70.789525][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.798614][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.829949][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.850242][ T4191] device veth1_macvtap entered promiscuous mode [ 70.870450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.889781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.902307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.912725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.921809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.932760][ T4192] device veth0_vlan entered promiscuous mode [ 70.967771][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.979421][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.998124][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.020355][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.032708][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.042325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.056675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.066045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.080608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.089772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.102071][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.108009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.109218][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.127259][ T4192] device veth1_vlan entered promiscuous mode [ 71.148958][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.160140][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.172014][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.179716][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 71.186441][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 71.193171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.201908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.209658][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 71.216341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.223765][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 71.230150][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 71.236443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.245037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.253807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.276537][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.294662][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.304073][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.313282][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.324246][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.350511][ T4201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.363939][ T4201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.374620][ T4201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.383872][ T4201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.427742][ T4192] device veth0_macvtap entered promiscuous mode [ 71.435736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.448835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.457459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.488523][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.497216][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.507758][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.516528][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.548091][ T4192] device veth1_macvtap entered promiscuous mode [ 71.614373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.628691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.637128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.661512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.671529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.682340][ T4187] device veth0_vlan entered promiscuous mode [ 71.698220][ T4186] device veth0_vlan entered promiscuous mode [ 71.705799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.714542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.723383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.731379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.752937][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.764536][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.775307][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.786011][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.797523][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.835987][ T4187] device veth1_vlan entered promiscuous mode [ 71.846896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.856354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.867480][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.878346][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.888689][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.902920][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.917050][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.926141][ T4186] device veth1_vlan entered promiscuous mode [ 71.946327][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.954696][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.964185][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.982404][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.997479][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.008531][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.018537][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.027262][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.036399][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.109562][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.117524][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.134801][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.140451][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.153041][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.162511][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.170399][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.174901][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.188036][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.196660][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.230713][ T4186] device veth0_macvtap entered promiscuous mode [ 72.241921][ T4187] device veth0_macvtap entered promiscuous mode [ 72.252845][ T4187] device veth1_macvtap entered promiscuous mode [ 72.266529][ T4186] device veth1_macvtap entered promiscuous mode [ 72.282972][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.315043][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.336743][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.351488][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.362371][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.372894][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.384036][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.394625][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.406341][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.417030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.433592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.443624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.452196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.462708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.471665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.483145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.514645][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.519975][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.539276][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.549469][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.560455][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.570602][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.575292][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.582329][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.599037][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.609814][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.624231][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.634595][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.652466][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.664166][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.680273][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.696137][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.714440][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.730614][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.759003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.766972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.788862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.804625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.813775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.828041][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.854231][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.893455][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.904017][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.919724][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.938983][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.954725][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.965625][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.982980][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.994939][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.005199][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.014189][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.024109][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.056450][ T4324] bond0: option arp_interval: invalid value () [ 73.070249][ T4324] bond0: option arp_interval: allowed values 0 - 2147483647 [ 73.079184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.088228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.110937][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.120597][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.135667][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.161346][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.254166][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.262349][ T4313] Bluetooth: hci0: command 0x0419 tx timeout [ 73.262435][ T4313] Bluetooth: hci3: command 0x0419 tx timeout [ 73.262822][ T4313] Bluetooth: hci4: command 0x0419 tx timeout [ 73.318496][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.321208][ T4313] Bluetooth: hci2: command 0x0419 tx timeout [ 73.339857][ T4313] Bluetooth: hci1: command 0x0419 tx timeout [ 73.368220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.454678][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.466174][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.504357][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.532918][ T4332] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.544827][ T4333] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 73.557916][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.565761][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.603123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.605820][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.622438][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.653301][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.659690][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.672516][ T4336] loop0: detected capacity change from 0 to 128 [ 73.688001][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.704286][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.747660][ T4336] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 73.810465][ T4336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.836477][ T4338] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 73.978994][ T4345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.291080][ T4357] FAULT_INJECTION: forcing a failure. [ 74.291080][ T4357] name failslab, interval 1, probability 0, space 0, times 1 [ 74.355335][ T4357] CPU: 1 PID: 4357 Comm: syz.0.15 Not tainted syzkaller #0 [ 74.362597][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 74.372692][ T4357] Call Trace: [ 74.375996][ T4357] [ 74.378954][ T4357] dump_stack_lvl+0x188/0x250 [ 74.383678][ T4357] ? show_regs_print_info+0x20/0x20 [ 74.388910][ T4357] ? load_image+0x410/0x410 [ 74.393446][ T4357] ? __might_sleep+0xf0/0xf0 [ 74.398070][ T4357] ? __lock_acquire+0x7d40/0x7d40 [ 74.403143][ T4357] should_fail+0x383/0x4b0 [ 74.407599][ T4357] should_failslab+0x5/0x20 [ 74.412137][ T4357] slab_pre_alloc_hook+0x51/0xc0 [ 74.417119][ T4357] ? security_inode_alloc+0x30/0x110 [ 74.422436][ T4357] kmem_cache_alloc+0x3d/0x280 [ 74.427231][ T4357] security_inode_alloc+0x30/0x110 [ 74.432376][ T4357] inode_init_always+0x8e5/0xc90 [ 74.437365][ T4357] new_inode_pseudo+0x8e/0x210 [ 74.442182][ T4357] new_inode+0x25/0x1d0 [ 74.446372][ T4357] shmem_get_inode+0x304/0xa40 [ 74.451183][ T4357] shmem_mknod+0x55/0x1b0 [ 74.455535][ T4357] ? shmem_mkdir+0x11/0x60 [ 74.459989][ T4357] shmem_mkdir+0x27/0x60 [ 74.464268][ T4357] vfs_mkdir+0x386/0x570 [ 74.468553][ T4357] do_mkdirat+0x1dd/0x5c0 [ 74.472918][ T4357] ? vfs_mkdir+0x570/0x570 [ 74.477387][ T4357] __x64_sys_mkdirat+0x85/0x90 [ 74.482186][ T4357] do_syscall_64+0x4c/0xa0 [ 74.486633][ T4357] ? clear_bhb_loop+0x30/0x80 [ 74.491344][ T4357] ? clear_bhb_loop+0x30/0x80 [ 74.496063][ T4357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.502004][ T4357] RIP: 0033:0x7fe8abca6559 [ 74.506444][ T4357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.526064][ T4357] RSP: 002b:00007fe8a9efe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 74.534515][ T4357] RAX: ffffffffffffffda RBX: 00007fe8abf2dfa0 RCX: 00007fe8abca6559 [ 74.542510][ T4357] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 74.548635][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.550504][ T4357] RBP: 00007fe8abd3d8b0 R08: 0000000000000000 R09: 0000000000000000 [ 74.550542][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.550556][ T4357] R13: 00007fe8abf2e038 R14: 00007fe8abf2dfa0 R15: 00007ffc7dd167a8 [ 74.550590][ T4357] [ 74.644300][ T4341] loop1: detected capacity change from 0 to 32768 [ 74.693515][ T4341] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4341) [ 74.744264][ T4341] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 74.763536][ T4341] BTRFS info (device loop1): setting nodatacow, compression disabled [ 74.802546][ T4341] BTRFS info (device loop1): setting datasum, datacow enabled [ 74.830640][ T4341] BTRFS info (device loop1): force clearing of disk cache [ 74.838173][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 74.851445][ T4341] BTRFS info (device loop1): turning on sync discard [ 74.864006][ T4341] BTRFS info (device loop1): enabling ssd optimizations [ 74.877665][ T4341] BTRFS info (device loop1): using spread ssd allocation scheme [ 74.906979][ T4341] BTRFS info (device loop1): not using ssd optimizations [ 74.924620][ T4341] BTRFS info (device loop1): not using spread ssd allocation scheme [ 74.943611][ T4341] BTRFS info (device loop1): using free space tree [ 74.968002][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.985464][ T7] usb 3-1: config 0 has no interface number 0 [ 74.997602][ T4341] BTRFS info (device loop1): has skinny extents [ 75.007876][ T7] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.034059][ T7] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.054335][ T7] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.073518][ T4376] loop3: detected capacity change from 0 to 64 [ 75.096306][ T7] usb 3-1: config 0 interface 1 has no altsetting 0 [ 75.116025][ T7] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 75.133489][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.170601][ T7] usb 3-1: config 0 descriptor?? [ 75.222863][ T7] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 75.296059][ T4341] BTRFS info (device loop1): clearing free space tree [ 75.303504][ T4341] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.325062][ T4341] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.459091][ T4341] BTRFS info (device loop1): creating free space tree [ 75.487248][ T4341] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.523207][ T4341] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.670334][ T7] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 75.697315][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 75.707318][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 75.714821][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.724937][ T146] Workqueue: hci3 hci_rx_work [ 75.729651][ T146] Call Trace: [ 75.732954][ T146] [ 75.735927][ T146] dump_stack_lvl+0x188/0x250 [ 75.740639][ T146] ? show_regs_print_info+0x20/0x20 [ 75.745900][ T146] ? load_image+0x410/0x410 [ 75.750455][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 75.755599][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 75.760305][ T146] ? kthread+0x42e/0x520 [ 75.764577][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 75.769833][ T146] kobject_add_internal+0x5ba/0xcd0 [ 75.775085][ T146] kobject_add+0x160/0x230 [ 75.779530][ T146] ? kobject_init+0x1c0/0x1c0 [ 75.784257][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 75.789593][ T146] ? klist_children_get+0x50/0x50 [ 75.794666][ T146] ? get_device_parent+0x121/0x3e0 [ 75.799814][ T146] device_add+0x470/0x1050 [ 75.804257][ T146] ? device_initialize+0x2a5/0x4d0 [ 75.809406][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 75.814380][ T146] le_conn_complete_evt+0xc55/0x14d0 [ 75.819710][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 75.824868][ T146] ? __mutex_trylock_common+0x15c/0x260 [ 75.830449][ T146] hci_le_meta_evt+0x285/0x3ca0 [ 75.835330][ T146] ? hci_event_packet+0x363/0x1310 [ 75.840473][ T146] ? __lock_acquire+0x7d40/0x7d40 [ 75.845562][ T146] ? hci_remote_host_features_evt+0x240/0x240 [ 75.851678][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 75.857341][ T146] ? mark_lock+0x94/0x320 [ 75.861701][ T146] ? mutex_unlock+0x10/0x10 [ 75.866236][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.872260][ T146] ? lock_chain_count+0x20/0x20 [ 75.877153][ T146] ? __rwlock_init+0x140/0x140 [ 75.881952][ T146] hci_event_packet+0xe0b/0x1310 [ 75.886931][ T146] ? _raw_spin_unlock+0x40/0x40 [ 75.891823][ T146] ? rcu_lock_release+0x20/0x20 [ 75.896714][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 75.901954][ T146] hci_rx_work+0x255/0xa10 [ 75.906420][ T146] process_one_work+0x867/0xff0 [ 75.911321][ T146] ? worker_detach_from_pool+0x240/0x240 [ 75.916985][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 75.922312][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.927368][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 75.932953][ T146] ? wq_worker_running+0x97/0x170 [ 75.938008][ T146] worker_thread+0xad7/0x12a0 [ 75.942780][ T146] kthread+0x42e/0x520 [ 75.946882][ T146] ? rcu_lock_release+0x20/0x20 [ 75.951789][ T146] ? kthread_blkcg+0xd0/0xd0 [ 75.956430][ T146] ret_from_fork+0x1f/0x30 [ 75.960895][ T146] [ 75.968749][ T146] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 75.983618][ T146] Bluetooth: hci3: failed to register connection device [ 76.073342][ T4408] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.250173][ T4416] loop4: detected capacity change from 0 to 256 [ 76.288903][ T4416] ======================================================= [ 76.288903][ T4416] WARNING: The mand mount option has been deprecated and [ 76.288903][ T4416] and is ignored by this kernel. Remove the mand [ 76.288903][ T4416] option from the mount to silence this warning. [ 76.288903][ T4416] ======================================================= [ 76.417910][ T7] elan 0003:04F3:074D.0001: Set report error for parm 7: -71 [ 76.443572][ T7] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 76.465185][ T7] elan 0003:04F3:074D.0001: Input device is not registered [ 76.467350][ T4416] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.490163][ T4416] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 76.491764][ T7] elan: probe of 0003:04F3:074D.0001 failed with error -119 [ 76.521742][ T4416] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc67dbcad, utbl_chksum : 0xe619d30d) [ 76.552958][ T7] usb 3-1: USB disconnect, device number 2 [ 76.614144][ T4426] jffs2: notice: (4426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.819962][ T4430] fido_id[4430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 76.903947][ T4434] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.007981][ T4439] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 77.016667][ T26] audit: type=1326 audit(1792077832.475:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.048342][ T4439] Invalid argument reading file caps for ./file0 [ 77.068474][ T4440] FAULT_INJECTION: forcing a failure. [ 77.068474][ T4440] name failslab, interval 1, probability 0, space 0, times 0 [ 77.086501][ T26] audit: type=1326 audit(1792077832.475:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.147947][ T4440] CPU: 1 PID: 4440 Comm: syz.4.35 Not tainted syzkaller #0 [ 77.155209][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.165293][ T4440] Call Trace: [ 77.168597][ T4440] [ 77.169412][ T26] audit: type=1326 audit(1792077832.475:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.171552][ T4440] dump_stack_lvl+0x188/0x250 [ 77.198598][ T26] audit: type=1326 audit(1792077832.475:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.199943][ T4440] ? show_regs_print_info+0x20/0x20 [ 77.228881][ T4440] ? load_image+0x410/0x410 [ 77.233419][ T4440] ? __might_sleep+0xf0/0xf0 [ 77.238038][ T4440] ? __lock_acquire+0x7d40/0x7d40 [ 77.243097][ T4440] should_fail+0x383/0x4b0 [ 77.247558][ T4440] should_failslab+0x5/0x20 [ 77.252099][ T4440] slab_pre_alloc_hook+0x51/0xc0 [ 77.257194][ T4440] ? prepare_creds+0x3c/0x610 [ 77.261911][ T4440] kmem_cache_alloc+0x3d/0x280 [ 77.266717][ T4440] prepare_creds+0x3c/0x610 [ 77.271264][ T4440] lookup_user_key+0x333/0x1160 [ 77.276257][ T4440] ? lookup_user_key_possessed+0x40/0x40 [ 77.281929][ T4440] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 77.287971][ T4440] __se_sys_request_key+0x224/0x350 [ 77.293208][ T4440] ? __x64_sys_request_key+0xa0/0xa0 [ 77.298536][ T4440] ? lockdep_hardirqs_on+0x94/0x140 [ 77.303779][ T4440] do_syscall_64+0x4c/0xa0 [ 77.308231][ T4440] ? clear_bhb_loop+0x30/0x80 [ 77.311993][ T26] audit: type=1326 audit(1792077832.485:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.312943][ T4440] ? clear_bhb_loop+0x30/0x80 [ 77.341372][ T4440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.347307][ T4440] RIP: 0033:0x7f6480e42559 [ 77.351755][ T4440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.371418][ T4440] RSP: 002b:00007f647f09a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 77.379871][ T4440] RAX: ffffffffffffffda RBX: 00007f64810c9fa0 RCX: 00007f6480e42559 [ 77.387871][ T4440] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000180 [ 77.395970][ T4440] RBP: 00007f6480ed98b0 R08: 0000000000000000 R09: 0000000000000000 [ 77.404087][ T4440] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 77.404092][ T26] audit: type=1326 audit(1792077832.485:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.404167][ T26] audit: type=1326 audit(1792077832.485:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.412092][ T4440] R13: 00007f64810ca038 R14: 00007f64810c9fa0 R15: 00007ffd53a9c118 [ 77.412124][ T4440] [ 77.506571][ T4446] loop2: detected capacity change from 0 to 1024 [ 77.534963][ T26] audit: type=1326 audit(1792077832.485:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.567853][ T26] audit: type=1326 audit(1792077832.485:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.603464][ T4446] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.653637][ T26] audit: type=1326 audit(1792077832.485:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.31" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7650b26559 code=0x7fc00000 [ 77.686291][ T4450] binder: 4449:4450 ioctl c0205867 0 returned -22 [ 77.738682][ T4446] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 77.811774][ T4457] loop3: detected capacity change from 0 to 512 [ 77.957864][ T4457] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.028207][ T4457] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.069417][ T4474] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 78.098505][ T4474] overlayfs: overlapping lowerdir path [ 78.186731][ T4470] loop1: detected capacity change from 0 to 4096 [ 78.213406][ T4457] EXT4-fs error (device loop3): ext4_get_first_dir_block:3621: inode #12: comm syz.3.41: directory missing '..' [ 78.241363][ T4470] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 78.363249][ T4470] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 78.593993][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 78.602988][ T4468] loop4: detected capacity change from 0 to 32768 [ 78.610788][ T4186] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 78.617307][ T4186] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 78.640309][ T4186] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 78.695384][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 78.731095][ T4186] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 78.798472][ T4495] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.898772][ T4468] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 78.898772][ T4468] [ 78.935749][ T4499] loop0: detected capacity change from 0 to 128 [ 78.967345][ T4468] ERROR: (device loop4): remounting filesystem as read-only [ 79.026318][ T4499] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.049622][ T4504] loop1: detected capacity change from 0 to 4096 [ 79.144882][ T4499] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.165574][ T4504] ntfs: volume version 3.1. [ 79.328320][ T4499] FAT-fs (loop0): error, parent dir link count too low (2) [ 79.347772][ T4499] FAT-fs (loop0): Filesystem has been set read-only [ 79.451807][ T4191] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.624233][ T4313] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.926438][ T4531] loop0: detected capacity change from 0 to 4096 [ 80.007871][ T4531] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 80.111733][ T4531] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 80.168333][ T4531] ntfs3: loop0: Inode r=b is not in use! [ 80.174164][ T4531] ntfs3: loop0: Failed to load $Extend. [ 80.657049][ T4529] loop3: detected capacity change from 0 to 32768 [ 80.789472][ T4538] capability: warning: `syz.2.68' uses 32-bit capabilities (legacy support in use) [ 80.818580][ T4529] XFS (loop3): Mounting V5 Filesystem [ 80.950222][ T4529] XFS (loop3): Ending clean mount [ 81.045652][ T4527] loop1: detected capacity change from 0 to 40427 [ 81.121382][ T4527] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.191328][ T4527] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.313121][ T4527] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.408692][ T4529] syz.3.65 (4529) used greatest stack depth: 20464 bytes left [ 81.487163][ T4590] loop4: detected capacity change from 0 to 512 [ 81.509760][ T4201] XFS (loop3): Unmounting Filesystem [ 81.550493][ T4527] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.561023][ T4527] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.138064][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 82.793586][ T4610] loop0: detected capacity change from 0 to 8192 [ 82.835762][ T4610] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.848193][ T4610] REISERFS (device loop0): using ordered data mode [ 82.854775][ T4610] reiserfs: using flush barriers [ 82.961055][ T4610] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.978182][ T1324] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 83.075388][ T4610] REISERFS (device loop0): checking transaction log (loop0) [ 83.228577][ T4429] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.299790][ T4610] REISERFS (device loop0): Using tea hash to sort names [ 83.308405][ T1324] usb 4-1: not running at top speed; connect to a high speed hub [ 83.334418][ T4610] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 83.413552][ T1324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 83.425649][ T1324] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 83.440854][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.508445][ T4429] usb 5-1: Using ep0 maxpacket: 8 [ 83.529884][ T1324] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 83.558283][ T1324] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 83.657869][ T4429] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 83.677606][ T4429] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 83.697801][ T4429] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 83.706978][ T4429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.801808][ T4429] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 83.825516][ T4429] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB1 [ 83.856811][ T1324] usb 4-1: USB disconnect, device number 2 [ 83.939169][ T1324] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 83.983721][ T1324] cyberjack 4-1:1.0: device disconnected [ 84.104522][ T4629] vxcan1: tx address claim with different name [ 84.210092][ T4632] loop0: detected capacity change from 0 to 256 [ 84.234209][ T4633] loop2: detected capacity change from 0 to 2048 [ 84.281546][ T4190] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 84.304888][ T4633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.668024][ T4190] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 84.690071][ T4190] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 84.713316][ T4190] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 84.740584][ T4190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.836159][ T4652] loop0: detected capacity change from 0 to 256 [ 84.857651][ T4648] loop3: detected capacity change from 0 to 2048 [ 84.985143][ T4648] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.996248][ T4648] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.058877][ T4648] fs-verity: sha512 using implementation "sha512-avx2" [ 85.353785][ T4669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 85.363010][ T4669] netlink: 'syz.3.109': attribute type 26 has an invalid length. [ 85.580500][ T4674] loop3: detected capacity change from 0 to 32768 [ 85.637044][ T4674] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.112 (4674) [ 85.660656][ T4674] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 85.668006][ T1324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.670638][ T4674] BTRFS info (device loop3): setting nodatacow, compression disabled [ 85.685204][ T4674] BTRFS info (device loop3): setting datasum, datacow enabled [ 85.694021][ T4674] BTRFS info (device loop3): force clearing of disk cache [ 85.701545][ T4674] BTRFS info (device loop3): turning on sync discard [ 85.709309][ T4674] BTRFS warning (device loop3): excessive commit interval 43283 [ 85.720977][ T4674] BTRFS info (device loop3): enabling ssd optimizations [ 85.728341][ T4674] BTRFS info (device loop3): using spread ssd allocation scheme [ 85.736818][ T4674] BTRFS info (device loop3): not using ssd optimizations [ 85.744751][ T4674] BTRFS info (device loop3): not using spread ssd allocation scheme [ 85.753482][ T4674] BTRFS info (device loop3): using free space tree [ 85.761440][ T4674] BTRFS info (device loop3): has skinny extents [ 85.821809][ T4429] usb 5-1: USB disconnect, device number 2 [ 85.851393][ T4429] kobil ttyUSB1: KOBIL USB smart card terminal converter now disconnected from ttyUSB1 [ 85.871544][ T4429] kobil_sct 5-1:1.0: device disconnected [ 85.931085][ T4190] pegasus: probe of 2-1:1.0 failed with error -71 [ 85.947912][ T1324] usb 1-1: Using ep0 maxpacket: 8 [ 85.968749][ T4674] BTRFS info (device loop3): clearing free space tree [ 85.989822][ T4674] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.004150][ T4674] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.015916][ T4190] usb 2-1: USB disconnect, device number 2 [ 86.052884][ T4674] BTRFS info (device loop3): creating free space tree [ 86.082113][ T4674] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.088833][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.093649][ T4674] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.128362][ T1324] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.160708][ T4699] capability: warning: `syz.4.115' uses deprecated v2 capabilities in a way that may be insecure [ 86.160970][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.213712][ T1324] usb 1-1: config 0 descriptor?? [ 86.294880][ T4674] BTRFS info (device loop3): disk added /dev/nullb0 [ 86.475123][ T1107] cfg80211: failed to load regulatory.db [ 86.573556][ T1324] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 86.684536][ T4724] loop1: detected capacity change from 0 to 512 [ 86.707323][ T4724] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.740176][ T4724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.759505][ T4724] EXT4-fs (loop1): 1 truncate cleaned up [ 86.765201][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 86.883127][ T13] usb 1-1: USB disconnect, device number 2 [ 86.951635][ T4731] netlink: 64 bytes leftover after parsing attributes in process `syz.4.126'. [ 86.972677][ T4731] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.089687][ T4734] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.418542][ T4717] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.475396][ T4746] ip_tables: iptables: counters copy to user failed while replacing table [ 87.510272][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 87.543372][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 87.557684][ T4749] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 87.777870][ T4717] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.809570][ T4760] loop3: detected capacity change from 0 to 512 [ 87.817750][ T4717] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.851108][ T4717] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.868424][ T4717] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 87.887648][ T4717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.924716][ T4717] usb 3-1: config 0 descriptor?? [ 87.965804][ T4760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.006960][ T4743] loop4: detected capacity change from 0 to 40427 [ 88.019333][ T4760] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.047653][ T4743] F2FS-fs (loop4): invalid crc value [ 88.047874][ T4190] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.083297][ T4760] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.138: corrupted xattr block 33 [ 88.089297][ T4766] input: syz0 as /devices/virtual/input/input6 [ 88.138690][ T4743] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.293980][ T4743] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 88.320362][ T4743] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 88.333380][ T4775] device syzkaller1 entered promiscuous mode [ 88.387133][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 88.387147][ T26] audit: type=1800 audit(1792077843.845:28): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.130" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 88.413770][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.428283][ T4717] hid (null): report_id 34376 is invalid [ 88.435643][ T4190] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.459515][ T4717] itetech 0003:048D:8595.0002: report_id 34376 is invalid [ 88.466766][ T4717] itetech 0003:048D:8595.0002: item 0 2 1 8 parsing failed [ 88.476125][ T4187] attempt to access beyond end of device [ 88.476125][ T4187] loop4: rw=2049, want=45104, limit=40427 [ 88.478240][ T4190] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 88.501151][ T4717] itetech: probe of 0003:048D:8595.0002 failed with error -22 [ 88.627884][ T4190] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 88.637019][ T4190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 88.660334][ T4190] usb 1-1: Product: syz [ 88.664642][ T4190] usb 1-1: Manufacturer: syz [ 88.677870][ T4718] usb 3-1: USB disconnect, device number 3 [ 88.739090][ T4190] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 88.766523][ T4190] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 88.922667][ T4795] netlink: 'syz.3.153': attribute type 8 has an invalid length. [ 88.977951][ T4718] usb 1-1: USB disconnect, device number 3 [ 88.995146][ T4718] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 89.016330][ T4718] iuu_phoenix 1-1:1.0: device disconnected [ 89.068421][ T4801] syz.1.156 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.297205][ T4819] loop1: detected capacity change from 0 to 64 [ 89.364326][ T4819] Trying to free block not in datazone [ 89.382834][ T4819] attempt to access beyond end of device [ 89.382834][ T4819] loop1: rw=0, want=1026, limit=64 [ 89.414972][ T4819] Buffer I/O error on dev loop1, logical block 512, async page read [ 89.431331][ T4819] attempt to access beyond end of device [ 89.431331][ T4819] loop1: rw=0, want=113154, limit=64 [ 89.453118][ T4819] Buffer I/O error on dev loop1, logical block 56576, async page read [ 89.468776][ T4826] attempt to access beyond end of device [ 89.468776][ T4826] loop1: rw=0, want=1026, limit=64 [ 89.482181][ T4826] Buffer I/O error on dev loop1, logical block 512, async page read [ 89.491655][ T4826] attempt to access beyond end of device [ 89.491655][ T4826] loop1: rw=0, want=113154, limit=64 [ 89.518387][ T4826] Buffer I/O error on dev loop1, logical block 56576, async page read [ 89.537823][ T4422] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.550719][ T4829] attempt to access beyond end of device [ 89.550719][ T4829] loop1: rw=0, want=1026, limit=64 [ 89.583301][ T4829] Buffer I/O error on dev loop1, logical block 512, async page read [ 89.613023][ T4829] attempt to access beyond end of device [ 89.613023][ T4829] loop1: rw=0, want=113154, limit=64 [ 89.625568][ T4829] Buffer I/O error on dev loop1, logical block 56576, async page read [ 89.801619][ T4836] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 89.947808][ T4422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.979317][ T4422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.107935][ T4422] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 90.123848][ T4422] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 90.134309][ T4422] usb 3-1: Manufacturer: syz [ 90.149685][ T4422] usb 3-1: config 0 descriptor?? [ 90.162554][ T4314] kernel read not supported for file /kmsg (pid: 4314 comm: kworker/0:7) [ 90.443263][ T4881] loop4: detected capacity change from 0 to 128 [ 90.560859][ T4885] FAULT_INJECTION: forcing a failure. [ 90.560859][ T4885] name failslab, interval 1, probability 0, space 0, times 0 [ 90.575696][ T4885] CPU: 0 PID: 4885 Comm: syz.3.193 Not tainted syzkaller #0 [ 90.583026][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.593110][ T4885] Call Trace: [ 90.596424][ T4885] [ 90.599397][ T4885] dump_stack_lvl+0x188/0x250 [ 90.604127][ T4885] ? show_regs_print_info+0x20/0x20 [ 90.609360][ T4885] ? load_image+0x410/0x410 [ 90.613893][ T4885] ? __kasan_kmalloc+0xc6/0xe0 [ 90.617178][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.618686][ T4885] ? sg_add_sfp+0x53/0x890 [ 90.629102][ T4885] ? sg_open+0x4e8/0x9a0 [ 90.633379][ T4885] ? chrdev_open+0x585/0x5f0 [ 90.638013][ T4885] should_fail+0x383/0x4b0 [ 90.642469][ T4885] should_failslab+0x5/0x20 [ 90.647005][ T4885] slab_pre_alloc_hook+0x51/0xc0 [ 90.651981][ T4885] __kmalloc+0x6b/0x340 [ 90.656171][ T4885] ? sg_build_indirect+0xfe/0x870 [ 90.661238][ T4885] sg_build_indirect+0xfe/0x870 [ 90.666126][ T4885] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 90.672149][ T4885] sg_add_sfp+0x49f/0x890 [ 90.676519][ T4885] sg_open+0x4e8/0x9a0 [ 90.680639][ T4885] chrdev_open+0x585/0x5f0 [ 90.685104][ T4885] ? cd_forget+0x160/0x160 [ 90.689557][ T4885] ? fsnotify_perm+0x3a7/0x560 [ 90.694351][ T4885] ? cd_forget+0x160/0x160 [ 90.698798][ T4885] do_dentry_open+0x7f7/0xf90 [ 90.703503][ T4885] ? vfs_open+0x2b/0x80 [ 90.707701][ T4885] path_openat+0x2718/0x2fb0 [ 90.712356][ T4885] ? __kasan_slab_alloc+0xa9/0xc0 [ 90.717424][ T4885] ? do_filp_open+0x400/0x400 [ 90.722154][ T4885] do_filp_open+0x1df/0x400 [ 90.726703][ T4885] ? vfs_tmpfile+0x300/0x300 [ 90.731358][ T4885] ? _raw_spin_unlock+0x24/0x40 [ 90.736242][ T4885] ? alloc_fd+0x59e/0x650 [ 90.740610][ T4885] do_sys_openat2+0x14b/0x500 [ 90.745326][ T4885] ? __lock_acquire+0x7d40/0x7d40 [ 90.750385][ T4885] ? do_sys_open+0xe0/0xe0 [ 90.754828][ T4885] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.760847][ T4885] ? lock_chain_count+0x20/0x20 [ 90.765737][ T4885] __x64_sys_openat+0x135/0x160 [ 90.770632][ T4885] do_syscall_64+0x4c/0xa0 [ 90.775091][ T4885] ? clear_bhb_loop+0x30/0x80 [ 90.779801][ T4885] ? clear_bhb_loop+0x30/0x80 [ 90.784519][ T4885] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.790463][ T4885] RIP: 0033:0x7f7650ae6d8e [ 90.794905][ T4885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 90.814537][ T4885] RSP: 002b:00007f764ed7db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.822973][ T4885] RAX: ffffffffffffffda RBX: 00007f764ed7e6c0 RCX: 00007f7650ae6d8e [ 90.830962][ T4885] RDX: 0000000000000005 RSI: 00007f764ed7dc00 RDI: ffffffffffffff9c [ 90.838945][ T4885] RBP: 00007f764ed7dc00 R08: 0000000000000000 R09: 0000000000000000 [ 90.846926][ T4885] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 90.854910][ T4885] R13: 00007f7650dae038 R14: 00007f7650dadfa0 R15: 00007fff24425238 [ 90.862916][ T4885] [ 90.882704][ T4314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.975774][ T4895] loop4: detected capacity change from 0 to 512 [ 91.021604][ T4900] loop3: detected capacity change from 0 to 1024 [ 91.054340][ T4895] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.150980][ T4895] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 91.179826][ T4895] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.231647][ T4422] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input7 [ 91.318144][ T4314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.338157][ T4422] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input8 [ 91.349251][ T4314] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.367284][ T4422] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 91.518287][ T23] usb 3-1: USB disconnect, device number 4 [ 91.548166][ T4314] usb 2-1: New USB device found, idVendor=4c51, idProduct=94dc, bcdDevice=bb.f6 [ 91.557277][ T4314] usb 2-1: New USB device strings: Mfr=254, Product=68, SerialNumber=194 [ 91.579978][ T4910] netlink: 'syz.3.201': attribute type 11 has an invalid length. [ 91.601474][ T4314] usb 2-1: Product: syz [ 91.604863][ T4905] fido_id[4905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 91.636608][ T4314] usb 2-1: Manufacturer: syz [ 91.642391][ T4314] usb 2-1: SerialNumber: syz [ 91.723203][ T4314] usb-storage 2-1:1.0: USB Mass Storage device detected [ 91.741678][ T4314] scsi host1: usb-storage 2-1:1.0 [ 91.962716][ T4314] usb 2-1: USB disconnect, device number 3 [ 91.987818][ T4422] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 92.080104][ T4934] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 92.361572][ T4948] loop2: detected capacity change from 0 to 512 [ 92.389174][ T4422] usb 4-1: config 0 interface 0 altsetting 132 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 92.400690][ T4422] usb 4-1: config 0 interface 0 altsetting 132 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 92.422411][ T4948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.443118][ T4422] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.452172][ T4422] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 92.491249][ T4422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.528319][ T4948] EXT4-fs (loop2): 1 truncate cleaned up [ 92.534148][ T4948] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 92.586994][ T4422] usb 4-1: config 0 descriptor?? [ 92.649999][ T4916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.660587][ T4958] WARNING! power/level is deprecated; use power/control instead [ 92.822992][ T4973] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040x0000000000000003.c,i [ 92.825375][ T4971] loop2: detected capacity change from 0 to 1024 [ 92.917895][ T4971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.057709][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.080481][ T26] audit: type=1800 audit(1792077848.545:29): pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.227" name="proc" dev="loop2" ino=801 res=0 errno=0 [ 93.156595][ T4422] sony 0003:054C:024B.0004: hiddev0,hidraw0: USB HID v10.01 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 93.168707][ T4422] sony 0003:054C:024B.0004: failed to claim input [ 93.307099][ T4991] smc: net device vlan1 applied user defined pnetid SYZ2 [ 93.356819][ T4314] usb 4-1: USB disconnect, device number 3 [ 93.422397][ T4997] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 93.428523][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.597738][ T4422] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 93.600498][ T23] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 93.616049][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.625511][ T23] usb 5-1: Product: syz [ 93.630230][ T23] usb 5-1: Manufacturer: syz [ 93.634855][ T23] usb 5-1: SerialNumber: syz [ 93.680721][ T23] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 93.727338][ T5009] loop2: detected capacity change from 0 to 1024 [ 93.785404][ T5009] hfsplus: invalid length 32517 has been corrected to 255 [ 93.805865][ T26] audit: type=1800 audit(1792077849.265:30): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.245" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 93.918068][ T5009] hfsplus: b-tree write err: -5, ino 20 [ 94.033177][ T5017] loop3: detected capacity change from 0 to 512 [ 94.050623][ T4422] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.097970][ T4422] usb 1-1: not running at top speed; connect to a high speed hub [ 94.148660][ T5017] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.170006][ T5017] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.185721][ T4422] usb 1-1: config 5 has an invalid interface number: 29 but max is 0 [ 94.198181][ T5025] Invalid argument reading file caps for ./file0 [ 94.204567][ T4422] usb 1-1: config 5 has no interface number 0 [ 94.223420][ T4422] usb 1-1: config 5 interface 29 has no altsetting 0 [ 94.357683][ T4718] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.422792][ T4422] usb 1-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=78.22 [ 94.437188][ T4422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.445753][ T4422] usb 1-1: Product: syz [ 94.453535][ T4422] usb 1-1: Manufacturer: syz [ 94.458098][ T23] gspca_mr97310a: reg write [21] error -71 [ 94.458243][ T23] mr97310a: probe of 5-1:1.0 failed with error -71 [ 94.465035][ T23] usb 5-1: USB disconnect, device number 3 [ 94.499424][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 94.510625][ T4422] usb 1-1: SerialNumber: syz [ 94.533083][ T5032] loop2: detected capacity change from 0 to 512 [ 94.605394][ T26] audit: type=1800 audit(1792077850.065:31): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="c_ssize" dev="configfs" ino=35587 res=0 errno=0 [ 94.657915][ T5032] attempt to access beyond end of device [ 94.657915][ T5032] loop2: rw=0, want=17179852722, limit=512 [ 94.671246][ T5032] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 94.679287][ T5032] FAT-fs (loop2): Filesystem has been set read-only [ 94.686010][ T5032] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 94.727854][ T4718] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 94.743978][ T4718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.754412][ T4718] usb 2-1: config 0 descriptor?? [ 94.804676][ T4718] cp210x 2-1:0.0: cp210x converter detected [ 94.855116][ T4422] usb 1-1: USB disconnect, device number 4 [ 94.968281][ T5045] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 95.084224][ T5051] loop4: detected capacity change from 0 to 512 [ 95.144280][ T5051] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 95.161187][ T5051] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.217724][ T4718] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 95.271791][ T4718] usb 2-1: cp210x converter now attached to ttyUSB0 [ 95.501068][ T23] usb 2-1: USB disconnect, device number 4 [ 95.529907][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 95.583029][ T23] cp210x 2-1:0.0: device disconnected [ 96.224693][ T5096] loop1: detected capacity change from 0 to 512 [ 96.274913][ T5096] EXT4-fs (loop1): Ignoring removed oldalloc option [ 96.312514][ T5096] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 96.522961][ T5110] loop4: detected capacity change from 0 to 2048 [ 96.608735][ T5110] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.672578][ T4312] udevd[4312]: incorrect nilfs2 checksum on /dev/loop4 [ 96.677049][ T5117] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.770207][ T5119] loop1: detected capacity change from 0 to 4096 [ 96.789785][ T5119] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 97.389938][ T4422] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.583813][ T5160] loop2: detected capacity change from 0 to 8 [ 97.652385][ T5150] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 97.652990][ T5160] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.692446][ T5150] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 97.693416][ T5160] SQUASHFS error: Failed to read block 0x9b: -5 [ 97.733472][ T5130] loop3: detected capacity change from 0 to 32768 [ 97.740294][ T5160] SQUASHFS error: Unable to read metadata cache entry [99] [ 97.764768][ T5130] xfs: Unknown parameter 'smackfstransmute' [ 97.771453][ T5160] SQUASHFS error: Unable to read inode 0x127 [ 97.827987][ T4422] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.842374][ T4422] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.864134][ T4422] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.930944][ T4422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.998213][ T5134] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.254351][ T5152] loop1: detected capacity change from 0 to 32768 [ 98.285638][ T5152] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.301 (5152) [ 98.330281][ T4422] usb 5-1: USB disconnect, device number 4 [ 98.370021][ T5152] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 98.390659][ T5173] input: syz1 as /devices/virtual/input/input9 [ 98.406690][ T5152] BTRFS info (device loop1): setting nodatasum [ 98.431868][ T5152] BTRFS info (device loop1): using free space tree [ 98.458600][ T5152] BTRFS info (device loop1): has skinny extents [ 98.630452][ T5152] BTRFS info (device loop1): enabling ssd optimizations [ 99.157058][ T5213] ima: policy update failed [ 99.173757][ T26] audit: type=1802 audit(1792077854.635:32): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.320" res=0 errno=0 [ 99.258425][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.267942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.338227][ T5227] loop1: detected capacity change from 0 to 128 [ 99.446704][ T5227] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 99.470605][ T4422] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.498110][ T4718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.506550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.536877][ T5238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.326'. [ 99.548069][ T5227] hpfs: filesystem error: improperly stopped [ 99.554213][ T5227] hpfs: You really don't want any checks? You are crazy... [ 99.588973][ T5227] hpfs: hpfs_map_sector(): read error [ 99.594526][ T5227] hpfs: code page support is disabled [ 99.601623][ T5227] hpfs: hpfs_map_4sectors(): unaligned read [ 99.608745][ T5227] hpfs: hpfs_map_4sectors(): unaligned read [ 99.614768][ T5227] hpfs: filesystem error: unable to find root dir [ 99.747949][ T4422] usb 1-1: Using ep0 maxpacket: 16 [ 99.760684][ T4313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.903730][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.912659][ T4422] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 99.922110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.931023][ T4422] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.945955][ T4422] usb 1-1: config 0 has no interface number 0 [ 99.953486][ T4422] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 99.975679][ T4422] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 99.998689][ T4422] usb 1-1: config 0 interface 98 has no altsetting 0 [ 100.137801][ T4313] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.159331][ T4313] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.198407][ T4313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.207609][ T4422] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 100.216986][ T4422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.224626][ T4313] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 100.247849][ T4422] usb 1-1: Product: syz [ 100.252065][ T4422] usb 1-1: Manufacturer: syz [ 100.256700][ T4422] usb 1-1: SerialNumber: syz [ 100.263479][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.292754][ T4422] usb 1-1: config 0 descriptor?? [ 100.304992][ T5252] loop3: detected capacity change from 0 to 32768 [ 100.317949][ T5218] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.325909][ T4313] usb 5-1: config 0 descriptor?? [ 100.333268][ T5218] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.539962][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.549036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.567003][ T5218] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.597042][ T5218] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.916025][ T5303] input: syz1 as /devices/virtual/input/input11 [ 101.003868][ T5307] loop2: detected capacity change from 0 to 2048 [ 101.042251][ T5307] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.060364][ T5310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.071328][ T4281] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.088238][ T4422] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 101.099895][ T4422] asix: probe of 1-1:0.98 failed with error -71 [ 101.113548][ T4422] usb 1-1: USB disconnect, device number 5 [ 101.127949][ T4312] udevd[4312]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 101.188774][ T4718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.197588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.233299][ T5312] loop6: detected capacity change from 0 to 7 [ 101.244513][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.249482][ T4313] sony 0003:054C:09CC.0005: Retrying DualShock 4 get calibration report (0x02) request [ 101.255747][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.275315][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.286295][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.294880][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.305846][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.315384][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.326285][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.328038][ T4281] usb 2-1: Using ep0 maxpacket: 8 [ 101.338151][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.350426][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.358827][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.369831][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.378111][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.388090][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.389159][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.404562][ T5312] ldm_validate_partition_table(): Disk read failed. [ 101.411874][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.422913][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.431753][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.442701][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.451466][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.455909][ T4313] sony 0003:054C:09CC.0005: Failed to get calibration data from Dualshock 4 [ 101.462485][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.475432][ T4313] sony 0003:054C:09CC.0005: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 101.490730][ T5312] Dev loop6: unable to read RDB block 0 [ 101.503350][ T4313] sony 0003:054C:09CC.0005: failed to claim input [ 101.510344][ T4281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.521675][ T5312] loop6: unable to read partition table [ 101.527501][ T5312] loop6: partition table beyond EOD, truncated [ 101.527666][ T4281] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.536288][ T5312] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 101.569570][ T4313] usb 5-1: USB disconnect, device number 5 [ 101.578062][ T4281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.598304][ T4281] usb 2-1: config 0 descriptor?? [ 101.673106][ T5315] loop2: detected capacity change from 0 to 256 [ 101.781723][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.783801][ T5317] fido_id[5317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 101.806042][ T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.871342][ T4281] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 101.957748][ T13] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 101.966998][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 101.975530][ T13] usb 4-1: Product: syz [ 101.979851][ T13] usb 4-1: Manufacturer: syz [ 102.029554][ T13] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected [ 102.040373][ T13] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 102.124562][ T13] usb 2-1: USB disconnect, device number 5 [ 102.249500][ T1324] usb 4-1: USB disconnect, device number 4 [ 102.283584][ T1324] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 102.301643][ T1324] iuu_phoenix 4-1:1.0: device disconnected [ 102.449831][ T5340] loop2: detected capacity change from 0 to 512 [ 102.477359][ T5340] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.501972][ T5340] EXT4-fs (loop2): 1 truncate cleaned up [ 102.514099][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 102.866127][ T5362] loop3: detected capacity change from 0 to 128 [ 102.904274][ T5362] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 102.933394][ T5362] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.981460][ T5362] ext2 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.016895][ T5362] size and base must be multiples of 4 kiB [ 103.022986][ T5362] CPU: 1 PID: 5362 Comm: syz.3.372 Not tainted syzkaller #0 [ 103.030308][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.040084][ T5360] loop2: detected capacity change from 0 to 4096 [ 103.040382][ T5362] Call Trace: [ 103.040392][ T5362] [ 103.052952][ T5362] dump_stack_lvl+0x188/0x250 [ 103.057667][ T5362] ? show_regs_print_info+0x20/0x20 [ 103.062903][ T5362] ? load_image+0x410/0x410 [ 103.067441][ T5362] ? __lock_acquire+0x7d40/0x7d40 [ 103.072509][ T5362] mtrr_add+0x8e/0xc0 [ 103.076530][ T5362] mtrr_ioctl+0x9bf/0x1140 [ 103.080989][ T5362] ? mtrr_close+0x1f0/0x1f0 [ 103.085548][ T5362] ? mtrr_close+0x1f0/0x1f0 [ 103.090090][ T5362] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 103.095593][ T5362] ? proc_reg_poll+0x280/0x280 [ 103.100390][ T5362] __se_sys_ioctl+0xfa/0x170 [ 103.105029][ T5362] do_syscall_64+0x4c/0xa0 [ 103.109482][ T5362] ? clear_bhb_loop+0x30/0x80 [ 103.114196][ T5362] ? clear_bhb_loop+0x30/0x80 [ 103.118914][ T5362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.124842][ T5362] RIP: 0033:0x7f7650b26559 [ 103.129292][ T5362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.136635][ T5360] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 103.149014][ T5362] RSP: 002b:00007f764ed7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.149041][ T5362] RAX: ffffffffffffffda RBX: 00007f7650dadfa0 RCX: 00007f7650b26559 [ 103.149057][ T5362] RDX: 0000200000000040 RSI: 00000000400c4d01 RDI: 0000000000000004 [ 103.149071][ T5362] RBP: 00007f7650bbd8b0 R08: 0000000000000000 R09: 0000000000000000 [ 103.149084][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.149097][ T5362] R13: 00007f7650dae038 R14: 00007f7650dadfa0 R15: 00007fff24425238 [ 103.149129][ T5362] [ 103.221438][ T13] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 103.263438][ T5360] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 103.299755][ T5360] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.323974][ T4201] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /78/file1/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 103.368662][ T4201] EXT4-fs error (device loop3): ext4_empty_dir:3179: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 103.405795][ T4201] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /78/file1/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 103.417708][ T5360] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 103.449544][ T4201] EXT4-fs error (device loop3): ext4_empty_dir:3179: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 103.476044][ T4201] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /78/file1/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 103.487705][ T5360] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.508635][ T4201] EXT4-fs error (device loop3): ext4_empty_dir:3179: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 103.517739][ T5360] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 103.547435][ T4201] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /78/file1/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 103.583986][ T4201] EXT4-fs error (device loop3): ext4_empty_dir:3179: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 103.622434][ T4201] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /78/file1/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 103.627917][ T5360] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.653391][ T4201] EXT4-fs error (device loop3): ext4_empty_dir:3179: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 103.673349][ T5360] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 103.673423][ T5360] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.708100][ T5360] ntfs: volume version 3.1. [ 103.857898][ T13] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 103.867161][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.904935][ T13] usb 5-1: Product: syz [ 103.913173][ T13] usb 5-1: Manufacturer: syz [ 103.934870][ T13] usb 5-1: SerialNumber: syz [ 103.979875][ T13] usb 5-1: config 0 descriptor?? [ 104.113234][ T5376] loop2: detected capacity change from 0 to 8 [ 104.264458][ T13] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 006 [ 104.329298][ T5376] SQUASHFS error: zlib decompression failed, data probably corrupt [ 104.375227][ T5376] SQUASHFS error: Failed to read block 0x9b: -5 [ 104.382697][ C0] net_ratelimit: 15 callbacks suppressed [ 104.382715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.437204][ T5376] SQUASHFS error: Unable to read metadata cache entry [99] [ 104.448105][ T5376] SQUASHFS error: Unable to read inode 0x127 [ 104.481997][ T5357] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read) [ 104.503900][ T4422] usb 5-1: USB disconnect, device number 6 [ 104.747260][ T5381] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.796696][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.805676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.827221][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.843450][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.851831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.998807][ T5389] loop2: detected capacity change from 0 to 512 [ 105.005179][ T5390] loop1: detected capacity change from 0 to 256 [ 105.019768][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.028797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.043073][ T4653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.051528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.074579][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.175206][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.212990][ T5389] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 105.248729][ T5389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.332817][ T5389] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.382: bad orphan inode 131083 [ 105.361558][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.406363][ T5389] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 105.761758][ T5389] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.382: Logical block already allocated [ 105.836774][ T5389] CacheFiles: mkdir cache failed with error -117 [ 105.884096][ T5389] CacheFiles: Failed to register: -117 [ 105.897853][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.107371][ T5409] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.827805][ T5409] chnl_net:caif_netlink_parms(): no params data found [ 107.075995][ T5437] loop2: detected capacity change from 0 to 1024 [ 107.233603][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.241528][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.250048][ T5409] device bridge_slave_0 entered promiscuous mode [ 107.260504][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.267819][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.276299][ T5409] device bridge_slave_1 entered promiscuous mode [ 107.303933][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.315971][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.491381][ T5409] team0: Port device team_slave_0 added [ 107.519955][ T5409] team0: Port device team_slave_1 added [ 107.631315][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.717951][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.757330][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.806522][ T5452] loop1: detected capacity change from 0 to 1024 [ 107.843017][ T9] device hsr_slave_0 left promiscuous mode [ 107.862116][ T9] device hsr_slave_1 left promiscuous mode [ 107.884670][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.902710][ T4313] Bluetooth: hci4: command 0x0409 tx timeout [ 107.906238][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.940074][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.967447][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.985752][ T9] device bridge_slave_1 left promiscuous mode [ 107.994431][ T5452] hfsplus: invalid length 32517 has been corrected to 255 [ 107.996373][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.083922][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 108.083937][ T26] audit: type=1800 audit(1792077863.545:33): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.395" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 108.123003][ T9] device bridge_slave_0 left promiscuous mode [ 108.135255][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.205348][ T9] device veth1_macvtap left promiscuous mode [ 108.220330][ T9] device veth0_macvtap left promiscuous mode [ 108.235265][ T9] device veth1_vlan left promiscuous mode [ 108.245970][ T9] device veth0_vlan left promiscuous mode [ 108.335596][ T5468] hfsplus: b-tree write err: -5, ino 20 [ 108.887755][ T4313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.903719][ T9] team0 (unregistering): Port device team_slave_1 removed [ 108.930345][ T9] team0 (unregistering): Port device team_slave_0 removed [ 108.955458][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.991355][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.147962][ T9] bond0 (unregistering): Released all slaves [ 109.205281][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.222528][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.248313][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.263134][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.267730][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.307619][ T4313] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 109.316832][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.358453][ T4313] usb 2-1: config 0 descriptor?? [ 109.499118][ T4295] net_ratelimit: 13 callbacks suppressed [ 109.499135][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.505770][ T5409] device hsr_slave_0 entered promiscuous mode [ 109.514039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.539592][ T5409] device hsr_slave_1 entered promiscuous mode [ 109.766166][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.797904][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.811855][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.826251][ T5490] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 109.977773][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 110.049339][ T5409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.065773][ T4718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.074134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.080925][ T5409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.090681][ T4313] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 110.103294][ T4313] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 110.117160][ T4313] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 110.127952][ T4313] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 110.142551][ T5409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.143291][ T4313] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 110.166514][ T4313] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 110.181608][ T4313] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 110.203420][ T4313] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 110.204052][ T5409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.301619][ T4313] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 110.330759][ T4313] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 110.365704][ T4313] arvo: probe of 0003:1E7D:30D4.0006 failed with error -71 [ 110.411467][ T4313] usb 2-1: USB disconnect, device number 6 [ 110.524603][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.584485][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.604221][ T5516] loop2: detected capacity change from 0 to 512 [ 110.617036][ T5513] fido_id[5513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 110.632551][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.667486][ T5409] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.697967][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.706827][ T5516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.735998][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.763779][ T5516] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.778177][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.788000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.821054][ T4653] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.828252][ T4653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.901246][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.944956][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.961559][ T5524] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.004719][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.066692][ T4653] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.073931][ T4653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.134659][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.143071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.244065][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.273099][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.315341][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.369007][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.403373][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.458488][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.493981][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.533725][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.592001][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.616643][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.676751][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.710048][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.869551][ T5566] loop4: detected capacity change from 0 to 2048 [ 111.957651][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.007242][ T5566] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.058412][ T4313] Bluetooth: hci4: command 0x040f tx timeout [ 112.155775][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.198386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.216376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.337835][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.487844][ T23] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 112.496975][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 112.547615][ T23] usb 2-1: Product: syz [ 112.551832][ T23] usb 2-1: Manufacturer: syz [ 112.642511][ T23] usb 2-1: selecting invalid altsetting 1 [ 112.678741][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 112.685344][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 112.842359][ T5554] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 112.895129][ T23] DVB: Unable to find symbol cx22700_attach() [ 112.938494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.977308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.036017][ T23] DVB: Unable to find symbol tda10046_attach() [ 113.046510][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 113.065542][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.084925][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.124889][ T23] usb 2-1: USB disconnect, device number 7 [ 113.136701][ T5606] loop2: detected capacity change from 0 to 256 [ 113.142402][ T5409] device veth0_vlan entered promiscuous mode [ 113.160605][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.175824][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.234581][ T5409] device veth1_vlan entered promiscuous mode [ 113.354958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.367395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.403051][ T5611] loop4: detected capacity change from 0 to 128 [ 113.428044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.468247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.501111][ T5409] device veth0_macvtap entered promiscuous mode [ 113.552896][ T5409] device veth1_macvtap entered promiscuous mode [ 113.623262][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.634521][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.667489][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.697856][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.722571][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.756891][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.786734][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.821107][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.856640][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.917829][ T5621] loop4: detected capacity change from 0 to 16 [ 113.971446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.999342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.049309][ T5621] erofs: (device loop4): mounted with root inode @ nid 36. [ 114.062309][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.087749][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.127568][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.137818][ T4313] Bluetooth: hci4: command 0x0419 tx timeout [ 114.171988][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.207633][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.237578][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.247444][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.284158][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.308080][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.334912][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.367655][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.429759][ T5409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.467583][ T5409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.517667][ T5409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.526413][ T5409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.622534][ T144] net_ratelimit: 10 callbacks suppressed [ 114.622551][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.636653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.671660][ T1262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.680390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.740170][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 114.897120][ T5613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.925485][ T5613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.946696][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.994203][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.012780][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.052408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.269974][ T4313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.278437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.294023][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.302448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.556865][ T5669] tipc: Started in network mode [ 115.583964][ T5669] tipc: Node identity 1000001, cluster identity 4369 [ 115.617614][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.625785][ T5669] tipc: Node number set to 16777217 [ 115.652111][ T5673] tipc: New replicast peer: 127.0.0.1 [ 115.679704][ T5673] tipc: Enabled bearer , priority 10 [ 115.857715][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 115.977734][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.001272][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.117669][ T4313] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.193434][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.205957][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.233298][ T23] usb 1-1: Product: syz [ 116.243117][ T23] usb 1-1: Manufacturer: syz [ 116.251219][ T23] usb 1-1: SerialNumber: syz [ 116.298121][ T4718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.313868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.501196][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.534981][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.561833][ T5699] 9pnet: Insufficient options for proto=fd [ 116.573694][ T4313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.607801][ T23] usb 1-1: 0:2 : does not exist [ 116.636961][ T4313] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 116.667068][ T23] usb 1-1: USB disconnect, device number 6 [ 116.700589][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.713719][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.748369][ T4313] usb 5-1: config 0 descriptor?? [ 117.239764][ T4313] logitech-hidpp-device 0003:046D:C262.0007: unbalanced collection at end of report description [ 117.271951][ T4313] logitech-hidpp-device 0003:046D:C262.0007: hidpp_probe:parse failed [ 117.302916][ T4313] logitech-hidpp-device: probe of 0003:046D:C262.0007 failed with error -22 [ 117.453639][ T4281] usb 5-1: USB disconnect, device number 7 [ 118.361924][ T4314] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.817846][ T4314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.833316][ T4314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.948327][ T4314] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.957442][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.987383][ T5760] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 119.016702][ T4314] usb 1-1: SerialNumber: syz [ 119.041807][ T5760] device gretap0 entered promiscuous mode [ 119.066136][ T5757] loop2: detected capacity change from 0 to 2048 [ 119.091879][ T5762] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 119.120738][ T5762] Zero length message leads to an empty skb [ 119.181543][ T5757] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 119.254865][ T5757] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 119.375969][ T4314] usb 1-1: 0:2 : does not exist [ 119.425239][ T5757] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,usrquota,mblk_io_submit,minixdf,barrier=0x0000000000000002,nombcache,bsddf,. Quota mode: writeback. [ 119.430185][ T4314] usb 1-1: USB disconnect, device number 7 [ 119.520120][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.595937][ T5780] loop4: detected capacity change from 0 to 512 [ 119.628915][ T5782] netlink: 'syz.1.481': attribute type 4 has an invalid length. [ 119.708383][ T5780] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 119.734183][ T5780] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.379140][ T144] net_ratelimit: 14 callbacks suppressed [ 120.379154][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.393161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.403242][ T1262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.411953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.594297][ T4718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.602755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.676734][ T5827] netlink: 'syz.2.494': attribute type 4 has an invalid length. [ 121.097888][ T4314] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.378332][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 121.437673][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.527795][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.554176][ T4314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.691079][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 121.740280][ T4314] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.762790][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.781348][ T4314] usb 5-1: Product: syz [ 121.785557][ T4314] usb 5-1: Manufacturer: syz [ 121.797828][ T4314] usb 5-1: SerialNumber: syz [ 121.807755][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.830675][ T23] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.877654][ T23] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.894744][ T23] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 121.917687][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.924563][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 121.957637][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.976838][ T23] usb 2-1: config 0 descriptor?? [ 121.999043][ T5863] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.147825][ T4314] usb 5-1: 0:2 : does not exist [ 122.181554][ T4314] usb 5-1: USB disconnect, device number 8 [ 122.428396][ T5869] loop2: detected capacity change from 0 to 512 [ 122.502448][ T23] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 122.536037][ T5869] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 122.556605][ T5869] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.647678][ T1324] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.762950][ T4281] usb 2-1: USB disconnect, device number 8 [ 122.828404][ T5877] device batadv_slave_1 entered promiscuous mode [ 122.860488][ T5876] device batadv_slave_1 left promiscuous mode [ 122.873483][ T5875] fido_id[5875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 122.983878][ T5878] overlayfs: conflicting lowerdir path [ 123.059699][ T5886] loop5: detected capacity change from 0 to 1024 [ 123.072049][ T1324] usb 1-1: config index 0 descriptor too short (expected 50, got 32) [ 123.089885][ T1324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.111394][ T1324] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.126858][ T1324] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.137061][ T1324] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.348020][ T1324] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 123.365013][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.387744][ T1324] usb 1-1: Product: syz [ 123.401436][ T1324] usb 1-1: Manufacturer: syz [ 123.425378][ T1324] usb 1-1: SerialNumber: syz [ 123.503447][ T144] hfsplus: b-tree write err: -5, ino 8 [ 123.519918][ T1324] usb_debug 1-1:1.0: debug converter detected [ 123.533503][ T1324] usb 1-1: debug converter now attached to ttyUSB0 [ 123.601444][ T4422] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 123.813727][ T23] usb 1-1: USB disconnect, device number 8 [ 123.834823][ T23] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 123.864715][ T23] usb_debug 1-1:1.0: device disconnected [ 123.984461][ T5917] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 124.018100][ T4422] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.068090][ T4314] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 124.104054][ T5922] FAULT_INJECTION: forcing a failure. [ 124.104054][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 124.152033][ T5922] CPU: 1 PID: 5922 Comm: syz.4.532 Not tainted syzkaller #0 [ 124.159392][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.169570][ T5922] Call Trace: [ 124.172879][ T5922] [ 124.175838][ T5922] dump_stack_lvl+0x188/0x250 [ 124.180586][ T5922] ? show_regs_print_info+0x20/0x20 [ 124.185954][ T5922] ? load_image+0x410/0x410 [ 124.190499][ T5922] ? __might_sleep+0xf0/0xf0 [ 124.195129][ T5922] ? __lock_acquire+0x7d40/0x7d40 [ 124.200203][ T5922] should_fail+0x383/0x4b0 [ 124.204675][ T5922] should_failslab+0x5/0x20 [ 124.209223][ T5922] slab_pre_alloc_hook+0x51/0xc0 [ 124.214199][ T5922] ? shmem_match+0x160/0x160 [ 124.218843][ T5922] ? shmem_alloc_inode+0x16/0x30 [ 124.223823][ T5922] kmem_cache_alloc+0x3d/0x280 [ 124.228634][ T5922] ? shmem_match+0x160/0x160 [ 124.233277][ T5922] shmem_alloc_inode+0x16/0x30 [ 124.238086][ T5922] new_inode_pseudo+0x5f/0x210 [ 124.242945][ T5922] new_inode+0x25/0x1d0 [ 124.247161][ T5922] shmem_get_inode+0x304/0xa40 [ 124.251986][ T5922] __shmem_file_setup+0x10b/0x290 [ 124.257061][ T5922] shmem_zero_setup+0x8e/0x1c0 [ 124.261874][ T5922] mmap_region+0x135d/0x1730 [ 124.266591][ T5922] do_mmap+0x801/0xe30 [ 124.270722][ T5922] ? vm_mmap_pgoff+0x16c/0x2d0 [ 124.275537][ T5922] vm_mmap_pgoff+0x1c1/0x2d0 [ 124.280265][ T5922] ? account_locked_vm+0xe0/0xe0 [ 124.285270][ T5922] ? __context_tracking_exit+0x4c/0x80 [ 124.290776][ T5922] ? __lock_acquire+0x7d40/0x7d40 [ 124.295851][ T5922] ksys_mmap_pgoff+0x140/0x790 [ 124.300665][ T5922] ? mmap_region+0x1730/0x1730 [ 124.305576][ T5922] ? lockdep_hardirqs_on+0x94/0x140 [ 124.310826][ T5922] do_syscall_64+0x4c/0xa0 [ 124.315296][ T5922] ? clear_bhb_loop+0x30/0x80 [ 124.320018][ T5922] ? clear_bhb_loop+0x30/0x80 [ 124.324784][ T5922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.330719][ T5922] RIP: 0033:0x7f6480e42559 [ 124.335175][ T5922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.354812][ T5922] RSP: 002b:00007f647f09a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.363287][ T5922] RAX: ffffffffffffffda RBX: 00007f64810c9fa0 RCX: 00007f6480e42559 [ 124.371293][ T5922] RDX: 000000000300000b RSI: 0000000000c00001 RDI: 0000000000000000 [ 124.379314][ T5922] RBP: 00007f6480ed98b0 R08: ffffffffffffffff R09: 0000000000000000 [ 124.387305][ T5922] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 124.395297][ T5922] R13: 00007f64810ca038 R14: 00007f64810c9fa0 R15: 00007ffd53a9c118 [ 124.403310][ T5922] [ 124.407446][ T4422] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 124.422210][ T4422] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 124.430893][ T4422] usb 3-1: Product: syz [ 124.435101][ T4422] usb 3-1: Manufacturer: syz [ 124.440848][ T4422] usb 3-1: SerialNumber: syz [ 124.457415][ T4422] usb 3-1: config 0 descriptor?? [ 124.499689][ T4422] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 124.518096][ T4422] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 124.525965][ T4422] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 124.536151][ T4422] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 124.546208][ T4422] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 124.556683][ T4422] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 124.612037][ T4422] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 124.620761][ T4314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.641499][ T4422] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 124.662863][ T4422] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 124.676448][ T4314] usb 2-1: not running at top speed; connect to a high speed hub [ 124.689058][ T4422] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 124.720024][ T4422] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 124.778181][ T4314] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 125.007759][ T4314] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 125.035281][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.053917][ T4314] usb 2-1: Product: syz [ 125.064051][ T4314] usb 2-1: Manufacturer: syz [ 125.083775][ T4314] usb 2-1: SerialNumber: syz [ 125.129820][ T5944] loop4: detected capacity change from 0 to 1764 [ 125.188595][ T4422] usb 3-1: USB disconnect, device number 5 [ 125.197008][ T4422] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 125.217936][ C0] ================================================================== [ 125.226524][ C0] BUG: KASAN: use-after-free in usa49_glocont_callback+0x19f/0x270 [ 125.234504][ C0] Read of size 4 at addr ffff8880208f2ab0 by task syz.5.540/5939 [ 125.242286][ C0] [ 125.244680][ C0] CPU: 0 PID: 5939 Comm: syz.5.540 Not tainted syzkaller #0 [ 125.252156][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.262420][ C0] Call Trace: [ 125.265817][ C0] [ 125.268721][ C0] dump_stack_lvl+0x188/0x250 [ 125.273451][ C0] ? show_regs_print_info+0x20/0x20 [ 125.278730][ C0] ? _printk+0xda/0x130 [ 125.282931][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 125.288517][ C0] ? load_image+0x410/0x410 [ 125.293061][ C0] print_address_description+0x60/0x2d0 [ 125.298651][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 125.304271][ C0] kasan_report+0xdf/0x130 [ 125.308743][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 125.314358][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 125.319625][ C0] usa49_glocont_callback+0x19f/0x270 [ 125.325068][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 125.330496][ C0] dummy_timer+0xa47/0x34a0 [ 125.335147][ C0] ? verify_lock_unused+0x140/0x140 [ 125.340496][ C0] ? dummy_free_streams+0x520/0x520 [ 125.345763][ C0] ? dummy_free_streams+0x520/0x520 [ 125.351011][ C0] call_timer_fn+0x17b/0x540 [ 125.355679][ C0] ? dummy_free_streams+0x520/0x520 [ 125.360915][ C0] ? __run_timers+0x810/0x810 [ 125.365657][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 125.370900][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 125.376152][ C0] ? dummy_free_streams+0x520/0x520 [ 125.381411][ C0] __run_timers+0x56c/0x810 [ 125.385978][ C0] ? detach_timer+0x2b0/0x2b0 [ 125.390692][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.396735][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 125.401635][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 125.407924][ C0] run_timer_softirq+0x63/0xf0 [ 125.412731][ C0] handle_softirqs+0x336/0x830 [ 125.417565][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 125.422454][ C0] ? do_softirq+0x210/0x210 [ 125.426994][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 125.432157][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 125.437411][ C0] __irq_exit_rcu+0x13b/0x230 [ 125.442139][ C0] ? irq_exit_rcu+0x20/0x20 [ 125.446729][ C0] irq_exit_rcu+0x5/0x20 [ 125.451020][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 125.456704][ C0] [ 125.459673][ C0] [ 125.462639][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 125.468658][ C0] RIP: 0010:lock_page_memcg+0x240/0x440 [ 125.474242][ C0] Code: 00 00 9c 8f 44 24 40 f7 44 24 40 00 02 00 00 c6 44 01 04 f8 0f 85 ff 00 00 00 f7 c3 00 02 00 00 74 01 fb 4d 8d af 80 10 00 00 <4c> 89 ef be 04 00 00 00 e8 b3 8b fb ff 4c 89 e8 48 c1 e8 03 48 b9 [ 125.493887][ C0] RSP: 0018:ffffc90002e6f3e0 EFLAGS: 00000206 [ 125.499995][ C0] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: 1ffff920005cde80 [ 125.508002][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: ffffffff8a7a4b40 [ 125.516016][ C0] RBP: ffffc90002e6f4b8 R08: ffffffff910150c7 R09: 1ffffffff2202a18 [ 125.524035][ C0] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: ffff888017a7c670 [ 125.532047][ C0] R13: ffff888017a7d080 R14: ffffea00015c3638 R15: ffff888017a7c000 [ 125.540087][ C0] ? mem_cgroup_get_oom_group+0x350/0x350 [ 125.545849][ C0] ? rcu_lock_acquire+0x30/0x30 [ 125.550771][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 125.555847][ C0] page_remove_rmap+0x2a/0x10f0 [ 125.560734][ C0] ? __tlb_remove_page_size+0x19b/0x3f0 [ 125.566331][ C0] ? vm_normal_page+0x95/0x1e0 [ 125.571152][ C0] unmap_page_range+0xee4/0x2410 [ 125.576166][ C0] unmap_vmas+0x131/0x250 [ 125.580646][ C0] ? unmap_page_range+0x2410/0x2410 [ 125.585895][ C0] ? __mutex_lock_common+0x435/0x2400 [ 125.591318][ C0] ? exit_mm_release+0x16/0x30 [ 125.596179][ C0] exit_mmap+0x3b9/0x640 [ 125.600463][ C0] ? vm_brk+0x20/0x20 [ 125.604505][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 125.609780][ C0] __mmput+0x115/0x390 [ 125.613896][ C0] exit_mm+0x632/0x7b0 [ 125.618009][ C0] ? perf_pmu_migrate_context+0xb70/0xb70 [ 125.623788][ C0] ? do_exit+0x2110/0x2110 [ 125.628244][ C0] ? __ia32_sys_timer_delete+0x40/0x40 [ 125.634173][ C0] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 125.639678][ C0] ? tty_audit_exit+0x149/0x1f0 [ 125.644574][ C0] do_exit+0x5b8/0x2110 [ 125.648783][ C0] ? put_task_struct+0x80/0x80 [ 125.653582][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.659704][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 125.664777][ C0] do_group_exit+0x12c/0x2f0 [ 125.669404][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 125.674649][ C0] get_signal+0x7eb/0x12e0 [ 125.679126][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 125.684820][ C0] ? futex_exit_release+0x1c0/0x1c0 [ 125.690054][ C0] ? get_sigframe_size+0x10/0x10 [ 125.695033][ C0] ? __context_tracking_exit+0x4c/0x80 [ 125.700544][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.706574][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 125.712073][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 125.717396][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 125.722998][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 125.728496][ C0] do_syscall_64+0x58/0xa0 [ 125.732952][ C0] ? clear_bhb_loop+0x30/0x80 [ 125.737664][ C0] ? clear_bhb_loop+0x30/0x80 [ 125.742385][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.748403][ C0] RIP: 0033:0x7fc6635c8559 [ 125.752845][ C0] Code: Unable to access opcode bytes at RIP 0x7fc6635c852f. [ 125.760274][ C0] RSP: 002b:00007fc6618200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.768765][ C0] RAX: fffffffffffffe00 RBX: 00007fc66384ffa8 RCX: 00007fc6635c8559 [ 125.776802][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc66384ffa8 [ 125.785248][ C0] RBP: 00007fc66384ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 125.793385][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.801395][ C0] R13: 00007fc663850038 R14: 00007ffcfac26610 R15: 00007ffcfac266f8 [ 125.809423][ C0] [ 125.812484][ C0] [ 125.814833][ C0] Allocated by task 4422: [ 125.819202][ C0] __kasan_kmalloc+0xaf/0xe0 [ 125.823832][ C0] keyspan_port_probe+0xa7/0xd10 [ 125.828805][ C0] usb_serial_device_probe+0xd6/0x2d0 [ 125.834214][ C0] really_probe+0x276/0xc70 [ 125.838775][ C0] __driver_probe_device+0x1f5/0x390 [ 125.844116][ C0] driver_probe_device+0x4f/0x420 [ 125.849173][ C0] __device_attach_driver+0x2b0/0x500 [ 125.854586][ C0] bus_for_each_drv+0x184/0x210 [ 125.859469][ C0] __device_attach+0x2a7/0x480 [ 125.864364][ C0] bus_probe_device+0xba/0x1d0 [ 125.869163][ C0] device_add+0xbcf/0x1050 [ 125.873618][ C0] usb_serial_probe+0x265c/0x2c90 [ 125.878674][ C0] usb_probe_interface+0x5be/0xae0 [ 125.883820][ C0] really_probe+0x276/0xc70 [ 125.888358][ C0] __driver_probe_device+0x1f5/0x390 [ 125.893690][ C0] driver_probe_device+0x4f/0x420 [ 125.898765][ C0] __device_attach_driver+0x2b0/0x500 [ 125.904180][ C0] bus_for_each_drv+0x184/0x210 [ 125.909058][ C0] __device_attach+0x2a7/0x480 [ 125.913868][ C0] bus_probe_device+0xba/0x1d0 [ 125.918667][ C0] device_add+0xbcf/0x1050 [ 125.923126][ C0] usb_set_configuration+0x19d5/0x2030 [ 125.928618][ C0] usb_generic_driver_probe+0x89/0x150 [ 125.934125][ C0] usb_probe_device+0x126/0x250 [ 125.939021][ C0] really_probe+0x276/0xc70 [ 125.943606][ C0] __driver_probe_device+0x1f5/0x390 [ 125.948927][ C0] driver_probe_device+0x4f/0x420 [ 125.954029][ C0] __device_attach_driver+0x2b0/0x500 [ 125.959438][ C0] bus_for_each_drv+0x184/0x210 [ 125.964324][ C0] __device_attach+0x2a7/0x480 [ 125.969129][ C0] bus_probe_device+0xba/0x1d0 [ 125.973929][ C0] device_add+0xbcf/0x1050 [ 125.978373][ C0] usb_new_device+0x9f6/0x15d0 [ 125.983173][ C0] hub_event+0x2b8d/0x5260 [ 125.987627][ C0] process_one_work+0x867/0xff0 [ 125.992512][ C0] worker_thread+0xad7/0x12a0 [ 125.997226][ C0] kthread+0x42e/0x520 [ 126.001343][ C0] ret_from_fork+0x1f/0x30 [ 126.005796][ C0] [ 126.008143][ C0] Freed by task 4422: [ 126.012145][ C0] kasan_set_track+0x4b/0x70 [ 126.016776][ C0] kasan_set_free_info+0x1f/0x40 [ 126.021755][ C0] ____kasan_slab_free+0xd5/0x110 [ 126.026815][ C0] slab_free_freelist_hook+0xec/0x170 [ 126.032222][ C0] kfree+0xef/0x2a0 [ 126.036067][ C0] usb_serial_device_remove+0x11c/0x1e0 [ 126.041649][ C0] device_release_driver_internal+0x44c/0x710 [ 126.047981][ C0] bus_remove_device+0x2dd/0x400 [ 126.052960][ C0] device_del+0x63f/0xa80 [ 126.057349][ C0] usb_serial_disconnect+0x294/0x480 [ 126.062705][ C0] usb_unbind_interface+0x203/0x870 [ 126.067947][ C0] device_release_driver_internal+0x487/0x710 [ 126.074060][ C0] bus_remove_device+0x2dd/0x400 [ 126.079053][ C0] device_del+0x63f/0xa80 [ 126.083639][ C0] usb_disable_device+0x3e7/0x8a0 [ 126.088747][ C0] usb_disconnect+0x33c/0x8a0 [ 126.093468][ C0] hub_event+0x1d64/0x5260 [ 126.097924][ C0] process_one_work+0x867/0xff0 [ 126.102820][ C0] worker_thread+0xad7/0x12a0 [ 126.107532][ C0] kthread+0x42e/0x520 [ 126.111632][ C0] ret_from_fork+0x1f/0x30 [ 126.116171][ C0] [ 126.118519][ C0] Last potentially related work creation: [ 126.124257][ C0] kasan_save_stack+0x35/0x60 [ 126.129054][ C0] kasan_record_aux_stack+0xb8/0x100 [ 126.134376][ C0] insert_work+0x54/0x3d0 [ 126.138747][ C0] __queue_work+0x90b/0xc80 [ 126.143285][ C0] queue_work_on+0x124/0x1f0 [ 126.147901][ C0] netdevice_event+0x898/0x930 [ 126.152717][ C0] raw_notifier_call_chain+0xcb/0x160 [ 126.158179][ C0] register_netdevice+0x12a8/0x1720 [ 126.163424][ C0] macvlan_common_newlink+0x1119/0x18a0 [ 126.169006][ C0] rtnl_newlink+0x139e/0x1920 [ 126.173735][ C0] rtnetlink_rcv_msg+0x7f1/0xf10 [ 126.178755][ C0] netlink_rcv_skb+0x1e9/0x430 [ 126.183557][ C0] netlink_unicast+0x78f/0x940 [ 126.188367][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 126.193161][ C0] __sys_sendto+0x46d/0x620 [ 126.197787][ C0] __x64_sys_sendto+0xda/0xf0 [ 126.202501][ C0] do_syscall_64+0x4c/0xa0 [ 126.206954][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.213063][ C0] [ 126.215413][ C0] The buggy address belongs to the object at ffff8880208f2a00 [ 126.215413][ C0] which belongs to the cache kmalloc-192 of size 192 [ 126.229496][ C0] The buggy address is located 176 bytes inside of [ 126.229496][ C0] 192-byte region [ffff8880208f2a00, ffff8880208f2ac0) [ 126.242824][ C0] The buggy address belongs to the page: [ 126.248505][ C0] page:ffffea0000823c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x208f2 [ 126.258692][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 126.266312][ C0] raw: 00fff00000000200 ffffea000082bf00 0000000300000002 ffff888017841a00 [ 126.274938][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 126.283584][ C0] page dumped because: kasan: bad access detected [ 126.290300][ C0] page_owner tracks the page as allocated [ 126.296046][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 13, ts 14277955839, free_ts 7868237735 [ 126.311709][ C0] get_page_from_freelist+0x24f6/0x2670 [ 126.317319][ C0] __alloc_pages+0x1ee/0x480 [ 126.321951][ C0] new_slab+0xc0/0x4b0 [ 126.326083][ C0] ___slab_alloc+0x807/0xdd0 [ 126.330706][ C0] __kmalloc+0x11d/0x340 [ 126.334982][ C0] usb_alloc_urb+0x3f/0x140 [ 126.339525][ C0] usb_control_msg+0x115/0x3e0 [ 126.344346][ C0] hub_ext_port_status+0x103/0x6c0 [ 126.349581][ C0] hub_activate+0x73e/0x1ad0 [ 126.354210][ C0] process_one_work+0x867/0xff0 [ 126.359142][ C0] worker_thread+0xad7/0x12a0 [ 126.364071][ C0] kthread+0x42e/0x520 [ 126.368198][ C0] ret_from_fork+0x1f/0x30 [ 126.372832][ C0] page last free stack trace: [ 126.377529][ C0] free_unref_page_prepare+0x637/0x6c0 [ 126.383028][ C0] free_unref_page+0x8f/0x2a0 [ 126.387739][ C0] __mmdrop+0xaa/0x3e0 [ 126.391839][ C0] free_bprm+0x122/0x2d0 [ 126.396113][ C0] kernel_execve+0x386/0x8e0 [ 126.400762][ C0] call_usermodehelper_exec_async+0x207/0x350 [ 126.406891][ C0] ret_from_fork+0x1f/0x30 [ 126.411345][ C0] [ 126.413718][ C0] Memory state around the buggy address: [ 126.419371][ C0] ffff8880208f2980: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.427473][ C0] ffff8880208f2a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.435565][ C0] >ffff8880208f2a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 126.443684][ C0] ^ [ 126.449357][ C0] ffff8880208f2b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 126.457541][ C0] ffff8880208f2b80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.465624][ C0] ================================================================== [ 126.473756][ C0] Disabling lock debugging due to kernel taint [ 126.479951][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.487278][ C0] CPU: 0 PID: 5939 Comm: syz.5.540 Tainted: G B syzkaller #0 [ 126.495994][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.506075][ C0] Call Trace: [ 126.509382][ C0] [ 126.512258][ C0] dump_stack_lvl+0x188/0x250 [ 126.516977][ C0] ? show_regs_print_info+0x20/0x20 [ 126.522211][ C0] ? load_image+0x410/0x410 [ 126.526789][ C0] panic+0x2f8/0x850 [ 126.530720][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 126.535261][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 126.541199][ C0] ? _raw_spin_unlock+0x40/0x40 [ 126.546082][ C0] ? print_memory_metadata+0x314/0x400 [ 126.551574][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 126.557155][ C0] check_panic_on_warn+0x80/0xa0 [ 126.562130][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 126.567714][ C0] end_report+0x6d/0xf0 [ 126.571903][ C0] kasan_report+0x102/0x130 [ 126.576440][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 126.582017][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 126.587249][ C0] usa49_glocont_callback+0x19f/0x270 [ 126.592683][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 126.598121][ C0] dummy_timer+0xa47/0x34a0 [ 126.602668][ C0] ? verify_lock_unused+0x140/0x140 [ 126.607951][ C0] ? dummy_free_streams+0x520/0x520 [ 126.613196][ C0] ? dummy_free_streams+0x520/0x520 [ 126.618437][ C0] call_timer_fn+0x17b/0x540 [ 126.623071][ C0] ? dummy_free_streams+0x520/0x520 [ 126.628303][ C0] ? __run_timers+0x810/0x810 [ 126.633025][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 126.638263][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 126.643505][ C0] ? dummy_free_streams+0x520/0x520 [ 126.648751][ C0] __run_timers+0x56c/0x810 [ 126.653298][ C0] ? detach_timer+0x2b0/0x2b0 [ 126.658009][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.664051][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 126.668959][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 126.675268][ C0] run_timer_softirq+0x63/0xf0 [ 126.680070][ C0] handle_softirqs+0x336/0x830 [ 126.684882][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 126.689763][ C0] ? do_softirq+0x210/0x210 [ 126.694398][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 126.699580][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 126.704817][ C0] __irq_exit_rcu+0x13b/0x230 [ 126.709558][ C0] ? irq_exit_rcu+0x20/0x20 [ 126.714104][ C0] irq_exit_rcu+0x5/0x20 [ 126.718382][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 126.724126][ C0] [ 126.727079][ C0] [ 126.730033][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 126.736059][ C0] RIP: 0010:lock_page_memcg+0x240/0x440 [ 126.741643][ C0] Code: 00 00 9c 8f 44 24 40 f7 44 24 40 00 02 00 00 c6 44 01 04 f8 0f 85 ff 00 00 00 f7 c3 00 02 00 00 74 01 fb 4d 8d af 80 10 00 00 <4c> 89 ef be 04 00 00 00 e8 b3 8b fb ff 4c 89 e8 48 c1 e8 03 48 b9 [ 126.761283][ C0] RSP: 0018:ffffc90002e6f3e0 EFLAGS: 00000206 [ 126.767400][ C0] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: 1ffff920005cde80 [ 126.775428][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: ffffffff8a7a4b40 [ 126.783434][ C0] RBP: ffffc90002e6f4b8 R08: ffffffff910150c7 R09: 1ffffffff2202a18 [ 126.791446][ C0] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: ffff888017a7c670 [ 126.799461][ C0] R13: ffff888017a7d080 R14: ffffea00015c3638 R15: ffff888017a7c000 [ 126.807477][ C0] ? mem_cgroup_get_oom_group+0x350/0x350 [ 126.813242][ C0] ? rcu_lock_acquire+0x30/0x30 [ 126.818142][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 126.823204][ C0] page_remove_rmap+0x2a/0x10f0 [ 126.828089][ C0] ? __tlb_remove_page_size+0x19b/0x3f0 [ 126.833678][ C0] ? vm_normal_page+0x95/0x1e0 [ 126.838477][ C0] unmap_page_range+0xee4/0x2410 [ 126.843464][ C0] unmap_vmas+0x131/0x250 [ 126.847821][ C0] ? unmap_page_range+0x2410/0x2410 [ 126.853090][ C0] ? __mutex_lock_common+0x435/0x2400 [ 126.858497][ C0] ? exit_mm_release+0x16/0x30 [ 126.863302][ C0] exit_mmap+0x3b9/0x640 [ 126.867576][ C0] ? vm_brk+0x20/0x20 [ 126.871591][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 126.876825][ C0] __mmput+0x115/0x390 [ 126.880939][ C0] exit_mm+0x632/0x7b0 [ 126.885045][ C0] ? perf_pmu_migrate_context+0xb70/0xb70 [ 126.890804][ C0] ? do_exit+0x2110/0x2110 [ 126.895273][ C0] ? __ia32_sys_timer_delete+0x40/0x40 [ 126.900764][ C0] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 126.906299][ C0] ? tty_audit_exit+0x149/0x1f0 [ 126.911246][ C0] do_exit+0x5b8/0x2110 [ 126.915444][ C0] ? put_task_struct+0x80/0x80 [ 126.920243][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.926266][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 126.931325][ C0] do_group_exit+0x12c/0x2f0 [ 126.935979][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 126.941220][ C0] get_signal+0x7eb/0x12e0 [ 126.945683][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 126.951409][ C0] ? futex_exit_release+0x1c0/0x1c0 [ 126.956644][ C0] ? get_sigframe_size+0x10/0x10 [ 126.961616][ C0] ? __context_tracking_exit+0x4c/0x80 [ 126.967109][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.973134][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 126.978739][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 126.984060][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 126.989746][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 126.995252][ C0] do_syscall_64+0x58/0xa0 [ 126.999747][ C0] ? clear_bhb_loop+0x30/0x80 [ 127.004466][ C0] ? clear_bhb_loop+0x30/0x80 [ 127.009191][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.015124][ C0] RIP: 0033:0x7fc6635c8559 [ 127.019577][ C0] Code: Unable to access opcode bytes at RIP 0x7fc6635c852f. [ 127.026991][ C0] RSP: 002b:00007fc6618200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.035447][ C0] RAX: fffffffffffffe00 RBX: 00007fc66384ffa8 RCX: 00007fc6635c8559 [ 127.043733][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc66384ffa8 [ 127.051799][ C0] RBP: 00007fc66384ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 127.059858][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.067975][ C0] R13: 00007fc663850038 R14: 00007ffcfac26610 R15: 00007ffcfac266f8 [ 127.075998][ C0] [ 127.079366][ C0] Kernel Offset: disabled [ 127.083719][ C0] Rebooting in 86400 seconds..