last executing test programs: 7.970356009s ago: executing program 4 (id=313): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0xa, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.176984043s ago: executing program 2 (id=321): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents(r0, &(0x7f0000001fc0)=""/171, 0xab) 6.042605662s ago: executing program 2 (id=323): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000000020d0000052406000105240000000d240f0100000000000000000006241a00000008241c07000803000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.932866882s ago: executing program 4 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0f01c366b9e00600000f32baf80c66b80880c18166efbafc0cedba2100b8983def0f7961003e660f388127bad10466ed0f001efd0066b90d0400000f32760d", 0x3f}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.53233364s ago: executing program 4 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 5.262971199s ago: executing program 4 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.153063179s ago: executing program 1 (id=329): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="597798f1b2"], 0x0) 4.967350708s ago: executing program 0 (id=330): setrlimit(0x0, &(0x7f00000001c0)={0x0, 0x1323}) 3.973027595s ago: executing program 3 (id=332): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d40"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x18, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.852549434s ago: executing program 0 (id=333): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents(r0, &(0x7f0000001fc0)=""/171, 0xab) 3.562174633s ago: executing program 2 (id=334): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 3.291725282s ago: executing program 3 (id=335): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0xa, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.232257062s ago: executing program 1 (id=336): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x40000000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4}}) 3.162504072s ago: executing program 0 (id=337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0f01c366b9e00600000f32baf80c66b80880c18166efbafc0cedba2100b8983def0f7961003e660f388127bad10466ed0f001efd0066b90d0400000f32760d", 0x3f}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.110249191s ago: executing program 2 (id=338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 2.8354043s ago: executing program 2 (id=339): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x4, 0x0, &(0x7f0000019400)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0xfffffffa, 0x0, 0x3a, 0x10}, 0x1c) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0xa, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000300)='GPL\x00', 0xc, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x6, 0x3ff}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) 2.7330667s ago: executing program 4 (id=340): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000088, &(0x7f00000000c0)={[{@barrier}, {@autodefrag}, {@noflushoncommit}, {@compress_algo={'compress', 0x3d, 'no'}}, {@noflushoncommit}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x37, 0x39, 0x6b, 0x37]}}, {@thread_pool={'thread_pool', 0x3d, 0x6}}, {@ssd_spread}]}, 0x1, 0x55ae, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x10) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x1d) 2.63208389s ago: executing program 0 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000400), 0x0, 0x4ec, &(0x7f0000000c40)="$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") 1.482737615s ago: executing program 0 (id=342): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x4884) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x9c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000300)=@ethtool_coalesce={0xe, 0x5, 0x81, 0x7ff, 0x1, 0x7, 0x7, 0xa, 0x7f, 0x203, 0x2ffff, 0x2, 0x1, 0x7ff, 0xffffffff, 0xfffffffa, 0xc6f, 0x5, 0x2, 0x1, 0x800, 0x0, 0x28eb}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f000000080003", @ANYRESOCT, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602022f2b020204002a0008000c000001000008000d52323ee1a52a59bfcc6bf95e8cfc74358323ba2356858e10b57ff4ff664e011e1a63033f7dcb271e19362298cb65d785612e22359fdff6"], 0x74}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socket$nl_crypto(0x10, 0x3, 0x15) pipe(0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="e40000000001010200000000000000000200000808000340000014020400188008001a40000032080800074000200008b40001800c00028005000100110002002c00018014000300fc00000000000008000000000000000014000400fe8000000000000000000000000000bb0c00028005000100110000002c000180140003000000000000000000000000000000000114000400fc0200000000200000000000000000002c00018014000300fc0222e1fdde00000000000000000000000000000001060003400c00028005000100ad00000000"], 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x44) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)={0x90000010}) 1.398389675s ago: executing program 3 (id=343): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f00000002c0)='K', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x10) 1.324746785s ago: executing program 1 (id=344): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x80000000}) 1.167042434s ago: executing program 3 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d4400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x18, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.126517804s ago: executing program 1 (id=346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab28"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 965.062304ms ago: executing program 0 (id=347): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="597798f1b2"], 0x0) 838.278353ms ago: executing program 1 (id=348): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents(r0, &(0x7f0000001fc0)=""/171, 0xab) 572.769812ms ago: executing program 4 (id=349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 457.016812ms ago: executing program 3 (id=350): syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@rand_addr=0xfffffffc}, {@dev}, {@private}]}]}}}}}}}, 0x0) 389.964472ms ago: executing program 3 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 310.491741ms ago: executing program 2 (id=352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0f01c366b9e00600000f32baf80c66b80880c18166efbafc0cedba2100b8983def0f7961003e660f388127bad10466ed0f001efd0066b90d0400000f32760d", 0x3f}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000400), 0x0, 0x4ec, &(0x7f0000000c40)="$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") kernel console output (not intermixed with test programs): (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.360679][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.372222][ T4250] team0: Port device team_slave_0 added [ 70.388148][ T4253] team0: Port device team_slave_1 added [ 70.414096][ T4250] team0: Port device team_slave_1 added [ 70.423058][ T4249] team0: Port device team_slave_0 added [ 70.435463][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.442778][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.450743][ T4252] device bridge_slave_0 entered promiscuous mode [ 70.475076][ T4249] team0: Port device team_slave_1 added [ 70.488212][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.495490][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.503566][ T4252] device bridge_slave_1 entered promiscuous mode [ 70.547926][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.556561][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.587162][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.611177][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.619099][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.627841][ T4254] device bridge_slave_0 entered promiscuous mode [ 70.636762][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.645165][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.671187][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.690868][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.697897][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.724059][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.742789][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.749877][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.758504][ T4254] device bridge_slave_1 entered promiscuous mode [ 70.773531][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.780482][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.807248][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.818981][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.825996][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.851979][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.870144][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.889696][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.896846][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.922901][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.941415][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.987308][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.022710][ T4252] team0: Port device team_slave_0 added [ 71.037941][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.058070][ T4253] device hsr_slave_0 entered promiscuous mode [ 71.064901][ T4253] device hsr_slave_1 entered promiscuous mode [ 71.082213][ T4252] team0: Port device team_slave_1 added [ 71.095086][ T4250] device hsr_slave_0 entered promiscuous mode [ 71.101848][ T4250] device hsr_slave_1 entered promiscuous mode [ 71.109348][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.117571][ T4250] Cannot create hsr debugfs directory [ 71.127559][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.134069][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.154597][ T4249] device hsr_slave_0 entered promiscuous mode [ 71.161572][ T4249] device hsr_slave_1 entered promiscuous mode [ 71.168159][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.175807][ T4249] Cannot create hsr debugfs directory [ 71.208448][ T4254] team0: Port device team_slave_0 added [ 71.248499][ T4254] team0: Port device team_slave_1 added [ 71.254770][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.261961][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.288176][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.342143][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.349126][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.361967][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 71.375747][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.413392][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.420436][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.441142][ T4256] Bluetooth: hci4: command 0x0409 tx timeout [ 71.452799][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 71.458979][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 71.459021][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.477988][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.485414][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.511419][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.531010][ T4256] Bluetooth: hci2: command 0x0409 tx timeout [ 71.595868][ T4254] device hsr_slave_0 entered promiscuous mode [ 71.602837][ T4254] device hsr_slave_1 entered promiscuous mode [ 71.609365][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.617221][ T4254] Cannot create hsr debugfs directory [ 71.645254][ T4252] device hsr_slave_0 entered promiscuous mode [ 71.652074][ T4252] device hsr_slave_1 entered promiscuous mode [ 71.658575][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.666199][ T4252] Cannot create hsr debugfs directory [ 71.887658][ T4249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.901869][ T4249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.914858][ T4249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.929097][ T4249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.959450][ T4253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.978901][ T4253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.989129][ T4253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.009019][ T4253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.036710][ T4254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.053713][ T4254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.064132][ T4254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.101611][ T4254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.152700][ T4252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.165539][ T4252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.176355][ T4252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.186036][ T4252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.273453][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.292658][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.305846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.318634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.342098][ T4250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.352029][ T4250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.375584][ T4250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.388115][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.397339][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.407936][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.415147][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.424027][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.433600][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.442447][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.449641][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.457432][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.468283][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.482050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.494026][ T4250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.508300][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.521198][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.545527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.555056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.583561][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.592776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.600862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.612011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.619855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.628807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.637950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.646241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.654989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.663755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.685810][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.701077][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.710073][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.719774][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.726899][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.735417][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.744482][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.753020][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.760157][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.774358][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.785986][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.806488][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.814744][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.823571][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.835552][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.844753][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.854534][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.863166][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.870225][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.878618][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.897057][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.938374][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.958112][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.968174][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.987457][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.996683][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.003823][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.012104][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.022479][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.031879][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.040491][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.049885][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.058541][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.067927][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.076807][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.085458][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.093927][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.105184][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.122006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.130872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.140169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.149699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.163734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.183494][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.196974][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.217072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.226458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.235232][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.244430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.253569][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.260700][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.287060][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.306206][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.318689][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.329139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.337918][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.347345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.356345][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.363559][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.372291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.381140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.389688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.406988][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.428244][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.441420][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 73.467048][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.488818][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.508023][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.517715][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.525644][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 73.531836][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 73.537859][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 73.548294][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.557344][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.577865][ T4252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.588790][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.601815][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 73.623812][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.642681][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.663842][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.675857][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.685751][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.699881][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.714173][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.733948][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.741772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.751730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.811436][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.820753][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.844975][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.852218][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.868230][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.877917][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.888262][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.895408][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.951922][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.960412][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.971599][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.980490][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.990817][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.000544][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.018474][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.029065][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.042542][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.049955][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.060402][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.073366][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.094896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.104661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.133059][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.142992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.150432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.159381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.169564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.178386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.186951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.195381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.203892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.220652][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.228175][ T4249] device veth0_vlan entered promiscuous mode [ 74.237894][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.261228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.268683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.288819][ T4249] device veth1_vlan entered promiscuous mode [ 74.297809][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.324885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.338937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.348777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.364881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.376952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.387208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.442566][ T4249] device veth0_macvtap entered promiscuous mode [ 74.466153][ T4249] device veth1_macvtap entered promiscuous mode [ 74.483748][ T4254] device veth0_vlan entered promiscuous mode [ 74.491625][ T4252] device veth0_vlan entered promiscuous mode [ 74.502814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.522650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.538249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.548973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.564986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.576075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.587841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.599655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.611072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.618904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.627590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.635460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.662721][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.679475][ T4252] device veth1_vlan entered promiscuous mode [ 74.703265][ T4254] device veth1_vlan entered promiscuous mode [ 74.710109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.723532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.741652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.761459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.777154][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.823050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.842315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.853184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.870496][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.879640][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.892329][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.901274][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.948861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.960254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.968632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.976840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.985755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.995093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.003885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.023251][ T4252] device veth0_macvtap entered promiscuous mode [ 75.038901][ T4254] device veth0_macvtap entered promiscuous mode [ 75.052910][ T4254] device veth1_macvtap entered promiscuous mode [ 75.075454][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.083359][ T4252] device veth1_macvtap entered promiscuous mode [ 75.113466][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.128416][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.139930][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.154800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.164890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.173765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.183182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.224159][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.234950][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.245457][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.254314][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.255196][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.272753][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.284984][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.295414][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.306302][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.319909][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.333038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.343877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.352735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.362258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.370848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.387844][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.398841][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.409347][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.419986][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.432159][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.469644][ T4254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.480042][ T4254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.489180][ T4254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.498328][ T4254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.508543][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.517861][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.521320][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 75.527874][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.540546][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.551966][ T4252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.560665][ T4252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.569612][ T4252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.578541][ T4252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.600085][ T4250] device veth0_vlan entered promiscuous mode [ 75.606386][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 75.612536][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 75.614626][ T4253] device veth0_vlan entered promiscuous mode [ 75.618531][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 75.646340][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.655822][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.665265][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.673852][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.682225][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 75.689770][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.697696][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.705626][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.713657][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.732153][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.740237][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.764482][ T4253] device veth1_vlan entered promiscuous mode [ 75.784044][ T4250] device veth1_vlan entered promiscuous mode [ 75.796561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.804747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.817310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.825549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.857003][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.879595][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.908759][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.926765][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.942193][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.950701][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.972131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.980681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.994858][ T4250] device veth0_macvtap entered promiscuous mode [ 76.016917][ T4253] device veth0_macvtap entered promiscuous mode [ 76.041369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.049431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.091284][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.092859][ T4253] device veth1_macvtap entered promiscuous mode [ 76.099215][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.126846][ T4250] device veth1_macvtap entered promiscuous mode [ 76.144966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.169114][ T4331] input: syz0 as /devices/virtual/input/input5 [ 76.209815][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.229536][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.266193][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.278249][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.303770][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.331290][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.350943][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.370947][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.383405][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.427782][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.442603][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.462825][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.483862][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.530981][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.540811][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.567986][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.583806][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.596765][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.627222][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.636455][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.658287][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.678608][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.696372][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.707726][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.728920][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.745465][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.758881][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.799355][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.818429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.821097][ T4298] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.855581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.871897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.880688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.894429][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.904774][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.913813][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.926226][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.960319][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.962314][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.981162][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.999167][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.009268][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.010042][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.037326][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.051000][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 77.078518][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.118235][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.163695][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.207812][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.278122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.287470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.297272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.319806][ T4338] device vlan2 entered promiscuous mode [ 77.386455][ T4250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.407798][ T4250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.418366][ T4250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.433099][ T4250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.553985][ T4298] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.601060][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 77.626247][ T4298] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 77.661083][ T4298] usb 4-1: can't read configurations, error -71 [ 77.681327][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 77.687355][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 77.693556][ T4256] Bluetooth: hci4: command 0x0419 tx timeout [ 77.700577][ T26] audit: type=1326 audit(1737829497.377:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 77.724552][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.748425][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.761103][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 77.828601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.839685][ T26] audit: type=1326 audit(1737829497.447:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 77.873575][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.886620][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.914132][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.922081][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.973151][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.997690][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.011459][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.031821][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.058135][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.068599][ T26] audit: type=1326 audit(1737829497.447:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 78.202871][ T26] audit: type=1326 audit(1737829497.467:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 78.304896][ T26] audit: type=1326 audit(1737829497.467:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 78.348481][ T4356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.367262][ T26] audit: type=1326 audit(1737829497.467:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 78.471240][ T26] audit: type=1326 audit(1737829497.477:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 78.504056][ T4352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.550703][ T4352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.601327][ T4352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.602547][ T26] audit: type=1326 audit(1737829497.477:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 78.669511][ T26] audit: type=1326 audit(1737829497.477:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 78.706822][ T4266] Bluetooth: hci4: Dropping invalid advertising data [ 78.713856][ T4266] Bluetooth: hci4: Malformed LE Event: 0x02 [ 78.726641][ T26] audit: type=1326 audit(1737829497.477:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd718cd29 code=0x7ffc0000 [ 78.894939][ T4370] input: syz0 as /devices/virtual/input/input6 [ 78.931353][ T4329] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.131039][ T4329] usb 2-1: Using ep0 maxpacket: 16 [ 79.137910][ T4329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.162868][ T4329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.190399][ T4329] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.199657][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.225834][ T4384] fuse: Unknown parameter 'fd0x0000000000000003' [ 79.229977][ T4329] usb 2-1: Product: syz [ 79.242193][ T4329] usb 2-1: Manufacturer: syz [ 79.246826][ T4329] usb 2-1: SerialNumber: syz [ 79.319346][ T4385] loop4: detected capacity change from 0 to 512 [ 79.626622][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.732380][ T4385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 79.741557][ T4385] System zones: 1-12 [ 79.978779][ T4385] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.19: invalid indirect mapped block 8 (level 2) [ 80.035797][ T4385] EXT4-fs (loop4): 1 truncate cleaned up [ 80.042026][ T4385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.059046][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 80.894528][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 80.913459][ T126] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 80.925851][ T126] usb 3-1: Product: syz [ 80.930586][ T126] usb 3-1: Manufacturer: syz [ 80.934163][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 80.972443][ T126] usb 3-1: SerialNumber: syz [ 80.983431][ T126] usb 3-1: config 0 descriptor?? [ 81.022664][ T126] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 81.071823][ T4329] usb 2-1: 0:2 : does not exist [ 81.090015][ T4329] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 81.171865][ T4396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 81.188223][ T4329] usb 2-1: USB disconnect, device number 2 [ 81.215082][ T4396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 81.257430][ T4396] device team0 entered promiscuous mode [ 81.271359][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.271810][ T4396] device team_slave_0 entered promiscuous mode [ 81.292762][ T4396] device team_slave_1 entered promiscuous mode [ 81.303005][ T4396] device bridge0 entered promiscuous mode [ 81.312395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 81.363845][ T14] cfg80211: failed to load regulatory.db [ 81.399450][ T126] gspca_zc3xx: reg_r err -71 [ 81.404311][ T126] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 81.431972][ T126] usb 3-1: USB disconnect, device number 2 [ 81.471132][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 81.495320][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.503236][ T4392] device vlan2 entered promiscuous mode [ 81.607243][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 81.633556][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 81.661641][ T7] usb 4-1: can't read configurations, error -71 [ 81.741768][ T4405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.751503][ T4405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.760377][ T4405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 82.172804][ T4410] loop1: detected capacity change from 0 to 512 [ 82.210261][ T4410] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 82.224881][ T4410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 82.279191][ T4410] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.26: corrupted in-inode xattr [ 82.339574][ T4410] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.26: couldn't read orphan inode 15 (err -117) [ 82.400242][ T4410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.794944][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 82.939171][ T4435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 82.959890][ T4434] input: syz0 as /devices/virtual/input/input7 [ 82.989592][ T4435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 83.005797][ T4435] device team0 entered promiscuous mode [ 83.017368][ T4435] device team_slave_0 entered promiscuous mode [ 83.029135][ T4435] device team_slave_1 entered promiscuous mode [ 83.057842][ T4435] device bridge0 entered promiscuous mode [ 83.074775][ T4435] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 83.092726][ T4435] Cannot create hsr debugfs directory [ 83.102824][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 83.117709][ T4442] loop1: detected capacity change from 0 to 512 [ 83.340832][ T4442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 83.349998][ T4442] System zones: 1-12 [ 83.442963][ T4442] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.33: invalid indirect mapped block 8 (level 2) [ 83.465918][ T4442] EXT4-fs (loop1): 1 truncate cleaned up [ 83.472238][ T4442] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.772424][ T4414] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 83.960269][ T4439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 84.655211][ T4439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 84.671237][ T4439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 84.708158][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 84.964381][ T4457] fuse: Unknown parameter 'fd0x0000000000000003' [ 85.069608][ T4452] loop3: detected capacity change from 0 to 32768 [ 85.082089][ T4452] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.38 (4452) [ 85.105239][ T4452] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 85.115593][ T4452] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 85.124297][ T4452] BTRFS info (device loop3): enabling auto defrag [ 85.131362][ T4452] BTRFS info (device loop3): use no compression [ 85.138435][ T4452] BTRFS info (device loop3): max_inline at 4096 [ 85.141184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 85.144920][ T4452] BTRFS info (device loop3): enabling ssd optimizations [ 85.154922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.159757][ T4452] BTRFS info (device loop3): using spread ssd allocation scheme [ 85.168466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.175589][ T4452] BTRFS info (device loop3): using free space tree [ 85.190941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.192201][ T4329] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.199305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.214911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.230212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.291124][ T4296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.331171][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.431047][ T4329] usb 5-1: Using ep0 maxpacket: 16 [ 85.439583][ T4329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.468867][ T4329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.492064][ T4329] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.501222][ T4296] usb 3-1: Using ep0 maxpacket: 8 [ 85.501243][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.514364][ T4329] usb 5-1: Product: syz [ 85.519559][ T4329] usb 5-1: Manufacturer: syz [ 85.524719][ T4329] usb 5-1: SerialNumber: syz [ 85.530994][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 85.551189][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 85.611964][ T4458] device vlan2 entered promiscuous mode [ 85.617622][ T7] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 85.636298][ T7] usb 1-1: Product: syz [ 85.646435][ T7] usb 1-1: Manufacturer: syz [ 85.660822][ T7] usb 1-1: SerialNumber: syz [ 85.679911][ T7] usb 1-1: config 0 descriptor?? [ 85.710575][ T7] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 85.747263][ T4296] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.759652][ T4329] usb 5-1: 0:2 : does not exist [ 85.782154][ T4329] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 85.802693][ T4296] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 85.831653][ T4296] usb 3-1: can't read configurations, error -71 [ 85.886611][ T4329] usb 5-1: USB disconnect, device number 2 [ 85.939893][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.988127][ T4249] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.109644][ T7] gspca_zc3xx: reg_r err -71 [ 86.118050][ T7] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 86.191805][ T7] usb 1-1: USB disconnect, device number 2 [ 86.469298][ T4495] loop4: detected capacity change from 0 to 512 [ 86.564397][ T4495] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 86.640769][ T4495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 86.668370][ T4495] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.44: corrupted in-inode xattr [ 86.686165][ T4495] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.44: couldn't read orphan inode 15 (err -117) [ 86.700335][ T4495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.828514][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 87.177534][ T4506] loop1: detected capacity change from 0 to 32768 [ 87.202740][ T4506] (syz.1.46,4506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 87.223162][ T4506] (syz.1.46,4506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 87.238403][ T4506] (syz.1.46,4506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 87.290841][ T4506] JBD2: Ignoring recovery information on journal [ 87.313113][ T4519] input: syz0 as /devices/virtual/input/input8 [ 87.337547][ T4506] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.528612][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 87.575106][ T4526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 87.595923][ T4526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 87.609336][ T4526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 87.983178][ T4536] loop0: detected capacity change from 0 to 512 [ 88.004804][ T4536] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 88.018189][ T4536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 88.028160][ T4536] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.56: corrupted in-inode xattr [ 88.042752][ T4536] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.56: couldn't read orphan inode 15 (err -117) [ 88.055467][ T4536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.071064][ T4491] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.111006][ T4296] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.165803][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 88.271159][ T4491] usb 2-1: Using ep0 maxpacket: 8 [ 88.301113][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 88.309735][ T4296] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.351888][ T4491] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.360314][ T4296] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.372466][ T4491] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 88.380138][ T4491] usb 2-1: can't read configurations, error -71 [ 88.389046][ T4296] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.413699][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.427527][ T4296] usb 3-1: Product: syz [ 88.436268][ T4296] usb 3-1: Manufacturer: syz [ 88.447203][ T4296] usb 3-1: SerialNumber: syz [ 88.670077][ T4296] usb 3-1: 0:2 : does not exist [ 88.683860][ T4296] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 88.761250][ T4296] usb 3-1: USB disconnect, device number 5 [ 88.826703][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.831280][ T4553] fuse: Unknown parameter 'fd0x0000000000000003' [ 89.090046][ T4558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'. [ 89.116892][ T4558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'. [ 89.211057][ T4297] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.230125][ T4558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'. [ 89.421069][ T4297] usb 5-1: Using ep0 maxpacket: 8 [ 89.433407][ T4297] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 89.466947][ T4297] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 89.476747][ T4568] input: syz0 as /devices/virtual/input/input9 [ 89.503843][ T4297] usb 5-1: Product: syz [ 89.663849][ T4570] loop0: detected capacity change from 0 to 32768 [ 89.675786][ T4570] (syz.0.68,4570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 89.690851][ T4570] (syz.0.68,4570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.704283][ T4570] (syz.0.68,4570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.729456][ T4297] usb 5-1: Manufacturer: syz [ 89.760425][ T4570] JBD2: Ignoring recovery information on journal [ 89.807168][ T4570] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 89.853274][ T4297] usb 5-1: SerialNumber: syz [ 89.889734][ T4297] usb 5-1: config 0 descriptor?? [ 89.905566][ T4297] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 89.942209][ T4254] ocfs2: Unmounting device (7,0) on (node local) [ 90.316566][ T4297] gspca_zc3xx: reg_r err -71 [ 90.328660][ T4297] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 90.355195][ T4297] usb 5-1: USB disconnect, device number 3 [ 90.369622][ T4585] loop0: detected capacity change from 0 to 512 [ 90.396314][ T4585] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 90.436447][ T4585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 90.457724][ T4585] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.72: corrupted in-inode xattr [ 90.474728][ T4585] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.72: couldn't read orphan inode 15 (err -117) [ 90.487027][ T4585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.562034][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 90.638147][ T4594] loop0: detected capacity change from 0 to 2048 [ 90.666038][ T4594] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.676233][ T4491] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.723582][ T4595] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.769591][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 90.769605][ T26] audit: type=1800 audit(1737829510.447:16): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.75" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 90.772512][ T4594] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 90.809766][ T4594] Remounting filesystem read-only [ 90.867645][ T4491] usb 3-1: Using ep0 maxpacket: 8 [ 90.972740][ T4491] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.991000][ T4491] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 90.998604][ T4491] usb 3-1: can't read configurations, error -71 [ 91.074657][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 91.087228][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 91.096457][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 91.351025][ T4296] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.420413][ T4611] loop3: detected capacity change from 0 to 32768 [ 91.428683][ T4611] (syz.3.82,4611,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 91.442720][ T4611] (syz.3.82,4611,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.457201][ T4611] (syz.3.82,4611,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.505355][ T4611] JBD2: Ignoring recovery information on journal [ 91.541025][ T4611] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 91.641212][ T4296] usb 1-1: device descriptor read/64, error -71 [ 91.766850][ T4249] ocfs2: Unmounting device (7,3) on (node local) [ 91.911246][ T4296] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.072519][ T4624] input: syz0 as /devices/virtual/input/input10 [ 92.081411][ T4296] usb 1-1: device descriptor read/64, error -71 [ 92.201268][ T4296] usb usb1-port1: attempt power cycle [ 92.210023][ T4628] loop2: detected capacity change from 0 to 512 [ 92.237666][ T4628] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 92.275560][ T4628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 92.299962][ T4628] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.87: corrupted in-inode xattr [ 92.330376][ T4628] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.87: couldn't read orphan inode 15 (err -117) [ 92.364614][ T4628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.475583][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 92.611050][ T4296] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.663747][ T4296] usb 1-1: device descriptor read/8, error -71 [ 92.684179][ T4633] loop1: detected capacity change from 0 to 1024 [ 92.821172][ T4639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 92.830213][ T4639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 92.839471][ T4639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 92.941268][ T4296] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.999766][ T4296] usb 1-1: device descriptor read/8, error -71 [ 93.142668][ T4296] usb usb1-port1: unable to enumerate USB device [ 93.246952][ T4641] loop1: detected capacity change from 0 to 32768 [ 93.263276][ T4641] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.92 (4641) [ 93.284039][ T4641] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.293956][ T4646] fuse: Unknown parameter 'fd0x0000000000000003' [ 93.294341][ T4641] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 93.309284][ T4641] BTRFS info (device loop1): enabling auto defrag [ 93.315768][ T4641] BTRFS info (device loop1): use no compression [ 93.322844][ T4641] BTRFS info (device loop1): max_inline at 4096 [ 93.329156][ T4641] BTRFS info (device loop1): enabling ssd optimizations [ 93.336164][ T4641] BTRFS info (device loop1): using spread ssd allocation scheme [ 93.343901][ T4641] BTRFS info (device loop1): using free space tree [ 93.431013][ T4492] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.603137][ T4252] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.624066][ T4492] usb 5-1: Using ep0 maxpacket: 8 [ 93.636137][ T4491] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.695286][ T4492] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.713608][ T4492] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 93.728579][ T4492] usb 5-1: can't read configurations, error -71 [ 93.831128][ T4491] usb 4-1: Using ep0 maxpacket: 8 [ 93.849732][ T4491] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 93.888537][ T4491] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 93.899535][ T4491] usb 4-1: Product: syz [ 93.914469][ T4491] usb 4-1: Manufacturer: syz [ 93.919196][ T4491] usb 4-1: SerialNumber: syz [ 93.944140][ T4491] usb 4-1: config 0 descriptor?? [ 93.955292][ T4491] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 94.153161][ T4491] gspca_zc3xx: reg_w_i err -71 [ 94.158115][ T4491] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 94.188956][ T4491] usb 4-1: USB disconnect, device number 6 [ 94.309019][ T4687] loop2: detected capacity change from 0 to 512 [ 94.328982][ T4687] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 94.355707][ T4687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 94.372955][ T4687] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.99: corrupted in-inode xattr [ 94.395043][ T4687] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.99: couldn't read orphan inode 15 (err -117) [ 94.411662][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.494828][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 94.552479][ T4693] input: syz0 as /devices/virtual/input/input11 [ 94.678139][ T4697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 94.687907][ T4697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 94.697098][ T4697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 95.044560][ T4701] loop3: detected capacity change from 0 to 32768 [ 95.052636][ T4701] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.105 (4701) [ 95.068046][ T4701] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.078252][ T4701] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 95.086967][ T4701] BTRFS info (device loop3): enabling auto defrag [ 95.093489][ T4701] BTRFS info (device loop3): use no compression [ 95.099786][ T4701] BTRFS info (device loop3): max_inline at 4096 [ 95.106171][ T4701] BTRFS info (device loop3): enabling ssd optimizations [ 95.113169][ T4701] BTRFS info (device loop3): using spread ssd allocation scheme [ 95.120857][ T4701] BTRFS info (device loop3): using free space tree [ 95.434287][ T4249] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.805629][ T4737] loop1: detected capacity change from 0 to 512 [ 95.820988][ T4298] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.870326][ T4737] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 95.911832][ T4737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 95.966780][ T4737] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.114: corrupted in-inode xattr [ 95.989262][ T4737] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.114: couldn't read orphan inode 15 (err -117) [ 96.002062][ T4298] usb 3-1: device descriptor read/64, error -71 [ 96.019239][ T4737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.043464][ T4747] fuse: Unknown parameter 'fd0x0000000000000003' [ 96.067399][ T4746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 96.077262][ T4746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 96.089535][ T4746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 96.120187][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 96.231103][ T4482] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.270997][ T4298] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 96.351113][ T4668] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.420980][ T4482] usb 4-1: Using ep0 maxpacket: 8 [ 96.426259][ T4298] usb 3-1: device descriptor read/64, error -71 [ 96.457465][ T4482] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.471268][ T4482] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 96.479052][ T4482] usb 4-1: can't read configurations, error -71 [ 96.541017][ T4668] usb 5-1: Using ep0 maxpacket: 8 [ 96.551336][ T4668] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 96.552199][ T4298] usb usb3-port1: attempt power cycle [ 96.560394][ T4668] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 96.560437][ T4668] usb 5-1: Product: syz [ 96.560453][ T4668] usb 5-1: Manufacturer: syz [ 96.560470][ T4668] usb 5-1: SerialNumber: syz [ 96.567698][ T4668] usb 5-1: config 0 descriptor?? [ 96.595330][ T4668] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 96.796959][ T4668] gspca_zc3xx: reg_w_i err -71 [ 96.805403][ T4668] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 96.824106][ T4668] usb 5-1: USB disconnect, device number 6 [ 96.991072][ T4298] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.035877][ T4298] usb 3-1: device descriptor read/8, error -71 [ 97.341088][ T4298] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 97.341517][ T4755] loop3: detected capacity change from 0 to 32768 [ 97.359968][ T4755] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.120 (4755) [ 97.414883][ T4755] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.425816][ T4755] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 97.434825][ T4298] usb 3-1: device descriptor read/8, error -71 [ 97.441786][ T4755] BTRFS info (device loop3): enabling auto defrag [ 97.448220][ T4755] BTRFS info (device loop3): use no compression [ 97.454555][ T4755] BTRFS info (device loop3): max_inline at 4096 [ 97.460979][ T4755] BTRFS info (device loop3): enabling ssd optimizations [ 97.467948][ T4755] BTRFS info (device loop3): using spread ssd allocation scheme [ 97.475843][ T4755] BTRFS info (device loop3): using free space tree [ 97.551570][ T4298] usb usb3-port1: unable to enumerate USB device [ 97.776526][ T4249] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.824741][ T4789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'. [ 97.838018][ T4789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'. [ 97.850952][ T4789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'. [ 98.211152][ T4298] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.313657][ T4804] loop1: detected capacity change from 0 to 512 [ 98.333625][ T4804] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 98.348706][ T4804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 98.387030][ T4804] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.132: corrupted in-inode xattr [ 98.391207][ T4298] usb 5-1: Using ep0 maxpacket: 8 [ 98.421560][ T4298] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.430218][ T4298] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 98.438148][ T4298] usb 5-1: can't read configurations, error -71 [ 98.461558][ T4804] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.132: couldn't read orphan inode 15 (err -117) [ 98.498737][ T4804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.649107][ T4807] loop3: detected capacity change from 0 to 32768 [ 98.658898][ T4807] (syz.3.133,4807,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 98.675226][ T4807] (syz.3.133,4807,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.688795][ T4807] (syz.3.133,4807,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.719122][ T4807] JBD2: Ignoring recovery information on journal [ 98.758711][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 98.772984][ T4807] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.887128][ T4249] ocfs2: Unmounting device (7,3) on (node local) [ 99.393758][ T4825] fuse: Unknown parameter 'fd0x0000000000000003' [ 99.449945][ T4821] loop0: detected capacity change from 0 to 32768 [ 99.457741][ T4821] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.139 (4821) [ 99.483254][ T4821] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.493510][ T4821] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 99.502294][ T4821] BTRFS info (device loop0): enabling auto defrag [ 99.508780][ T4821] BTRFS info (device loop0): use no compression [ 99.515134][ T4821] BTRFS info (device loop0): max_inline at 4096 [ 99.521732][ T4821] BTRFS info (device loop0): enabling ssd optimizations [ 99.528698][ T4821] BTRFS info (device loop0): using spread ssd allocation scheme [ 99.536431][ T4821] BTRFS info (device loop0): using free space tree [ 99.610508][ T4832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.141'. [ 99.720852][ T4254] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.765880][ T4793] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.973889][ T4793] usb 4-1: Using ep0 maxpacket: 8 [ 99.984876][ T4793] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 99.994353][ T4793] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 100.002863][ T4793] usb 4-1: Product: syz [ 100.007464][ T4793] usb 4-1: Manufacturer: syz [ 100.012528][ T4793] usb 4-1: SerialNumber: syz [ 100.019298][ T4793] usb 4-1: config 0 descriptor?? [ 100.029897][ T4857] user requested TSC rate below hardware speed [ 100.030165][ T4793] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 100.193180][ T4240] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 100.227945][ T4793] gspca_zc3xx: reg_w_i err -71 [ 100.245048][ T4793] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 100.266880][ T4793] usb 4-1: USB disconnect, device number 9 [ 100.314247][ T4863] loop1: detected capacity change from 0 to 512 [ 100.333120][ T4863] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 100.351023][ T4240] usb 3-1: device descriptor read/64, error -71 [ 100.364588][ T4863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 100.374814][ T4863] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.146: corrupted in-inode xattr [ 100.388590][ T4863] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.146: couldn't read orphan inode 15 (err -117) [ 100.400860][ T4863] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.462394][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 100.621072][ T4240] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 100.865162][ T4240] usb 3-1: device descriptor read/64, error -71 [ 100.875208][ T4482] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.244371][ T4876] loop4: detected capacity change from 0 to 32768 [ 101.323139][ T4876] (syz.4.151,4876,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 101.371527][ T4876] (syz.4.151,4876,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.390122][ T4876] (syz.4.151,4876,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.468545][ T4240] usb usb3-port1: attempt power cycle [ 101.570973][ T4876] JBD2: Ignoring recovery information on journal [ 101.631091][ T4876] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 101.670961][ T4482] usb 1-1: Using ep0 maxpacket: 8 [ 101.723844][ T4482] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.750777][ T4882] __nla_validate_parse: 2 callbacks suppressed [ 101.769766][ T4882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 101.789975][ T4253] ocfs2: Unmounting device (7,4) on (node local) [ 101.798168][ T4482] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 101.811154][ T4882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 101.813153][ T4482] usb 1-1: can't read configurations, error -71 [ 101.841769][ T4882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 101.910561][ T4889] Zero length message leads to an empty skb [ 101.991088][ T4240] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 101.994884][ T4891] loop1: detected capacity change from 0 to 512 [ 102.012371][ T4891] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 102.031677][ T4240] usb 3-1: device descriptor read/8, error -71 [ 102.071641][ T4891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 102.099484][ T4891] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.157: corrupted in-inode xattr [ 102.119769][ T4891] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.157: couldn't read orphan inode 15 (err -117) [ 102.141001][ T4891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.290274][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 102.300993][ T4240] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 102.351628][ T4240] usb 3-1: device descriptor read/8, error -71 [ 102.518489][ T4240] usb usb3-port1: unable to enumerate USB device [ 103.507118][ T4917] fuse: Unknown parameter 'fd0x0000000000000003' [ 104.427268][ T4914] loop0: detected capacity change from 0 to 4096 [ 104.461549][ T4914] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 104.606056][ T4929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.167'. [ 104.647471][ T4929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.167'. [ 104.675656][ T4929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.167'. [ 104.775280][ T4931] loop2: detected capacity change from 0 to 32768 [ 104.786273][ T4931] (syz.2.168,4931,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 104.801630][ T4931] (syz.2.168,4931,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.815157][ T4931] (syz.2.168,4931,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.857660][ T4931] JBD2: Ignoring recovery information on journal [ 104.893309][ T4938] loop0: detected capacity change from 0 to 512 [ 104.907220][ T4938] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.920409][ T4931] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.021191][ T4938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 105.048842][ T4250] ocfs2: Unmounting device (7,2) on (node local) [ 105.078842][ T4938] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.169: corrupted in-inode xattr [ 105.132203][ T4938] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.169: couldn't read orphan inode 15 (err -117) [ 105.144360][ T4343] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 105.162222][ T4938] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.321526][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 105.351086][ T4343] usb 4-1: Using ep0 maxpacket: 8 [ 105.404935][ T4343] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.429776][ T4343] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 105.447953][ T4343] usb 4-1: can't read configurations, error -71 [ 105.522117][ T4240] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 105.689370][ T4240] usb 5-1: device descriptor read/64, error -71 [ 106.288847][ T4240] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.771172][ T4240] usb 5-1: device descriptor read/64, error -71 [ 106.799819][ T4974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 106.810100][ T4974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 106.825008][ T4974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 106.891092][ T4240] usb usb5-port1: attempt power cycle [ 106.966869][ T4980] fuse: Unknown parameter 'fd0x0000000000000003' [ 107.165231][ T4989] loop3: detected capacity change from 0 to 512 [ 107.177009][ T4989] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 107.199565][ T4989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 107.211783][ T4989] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.187: corrupted in-inode xattr [ 107.238548][ T4989] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.187: couldn't read orphan inode 15 (err -117) [ 107.278193][ T4989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.301112][ T4240] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.328076][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 107.354658][ T4240] usb 5-1: device descriptor read/8, error -71 [ 107.621012][ T4240] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 107.662684][ T4240] usb 5-1: device descriptor read/8, error -71 [ 107.731144][ T4343] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.746744][ T5006] loop0: detected capacity change from 0 to 512 [ 107.773560][ T5006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 107.781769][ T5006] System zones: 1-12 [ 107.787485][ T4240] usb usb5-port1: unable to enumerate USB device [ 107.795078][ T5006] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.192: invalid indirect mapped block 8 (level 2) [ 107.809286][ T5006] EXT4-fs (loop0): 1 truncate cleaned up [ 107.815260][ T5006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.874942][ T5012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'. [ 107.884415][ T5012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'. [ 107.893441][ T5012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'. [ 107.980975][ T4343] usb 2-1: Using ep0 maxpacket: 8 [ 108.004136][ T4343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.014916][ T4343] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 108.022675][ T4343] usb 2-1: can't read configurations, error -71 [ 108.384125][ T5017] loop2: detected capacity change from 0 to 32768 [ 108.403105][ T5017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.196 (5017) [ 108.418927][ T5017] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.436202][ T5017] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 108.445281][ T5017] BTRFS info (device loop2): enabling auto defrag [ 108.459249][ T5017] BTRFS info (device loop2): use no compression [ 108.468773][ T5017] BTRFS info (device loop2): max_inline at 4096 [ 108.482706][ T5017] BTRFS info (device loop2): enabling ssd optimizations [ 108.489673][ T5017] BTRFS info (device loop2): using spread ssd allocation scheme [ 108.493940][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 108.520147][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 108.530418][ T5017] BTRFS info (device loop2): using free space tree [ 108.690170][ T5034] loop0: detected capacity change from 0 to 512 [ 108.738026][ T5034] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 108.783610][ T5040] fuse: Unknown parameter 'fd0x0000000000000003' [ 108.800178][ T5034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 108.853869][ T5034] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.200: corrupted in-inode xattr [ 108.896317][ T5034] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.200: couldn't read orphan inode 15 (err -117) [ 108.959541][ T5034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.023075][ T5056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 109.075165][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 109.101081][ T5056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 109.111598][ T4250] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.142639][ T5056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 109.651722][ T5080] loop1: detected capacity change from 0 to 512 [ 109.677560][ T5080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 109.685927][ T5080] System zones: 1-12 [ 109.693539][ T5080] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.211: invalid indirect mapped block 8 (level 2) [ 109.715025][ T5080] EXT4-fs (loop1): 1 truncate cleaned up [ 109.720783][ T5080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.721105][ T4487] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 109.775650][ T5083] loop3: detected capacity change from 0 to 128 [ 109.786397][ T5083] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.841271][ T4488] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 109.881142][ T4487] usb 3-1: device descriptor read/64, error -71 [ 110.020967][ T4488] usb 5-1: Using ep0 maxpacket: 8 [ 110.053680][ T4488] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.063010][ T4488] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 110.070673][ T4488] usb 5-1: can't read configurations, error -71 [ 110.151959][ T4487] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 110.268134][ T5094] loop3: detected capacity change from 0 to 512 [ 110.275838][ T5094] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 110.292772][ T5094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 110.302656][ T5094] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.218: corrupted in-inode xattr [ 110.315867][ T5094] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.218: couldn't read orphan inode 15 (err -117) [ 110.328290][ T4487] usb 3-1: device descriptor read/64, error -71 [ 110.329364][ T5094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 110.381129][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 110.461288][ T4487] usb usb3-port1: attempt power cycle [ 110.488509][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 110.739785][ T5108] fuse: Unknown parameter 'fd0x0000000000000003' [ 110.911021][ T4487] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 110.962023][ T4487] usb 3-1: device descriptor read/8, error -71 [ 111.021012][ T4259] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.080692][ T5113] kvm: emulating exchange as write [ 111.098442][ T5099] loop1: detected capacity change from 0 to 32768 [ 111.106382][ T5099] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.220 (5099) [ 111.142774][ T5099] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.171133][ T5099] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 111.179818][ T5099] BTRFS info (device loop1): enabling auto defrag [ 111.196497][ T5099] BTRFS info (device loop1): use no compression [ 111.215819][ T5099] BTRFS info (device loop1): max_inline at 4096 [ 111.222402][ T4259] usb 1-1: Using ep0 maxpacket: 8 [ 111.231141][ T4487] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 111.247122][ T5099] BTRFS info (device loop1): enabling ssd optimizations [ 111.254780][ T4259] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 111.286628][ T5099] BTRFS info (device loop1): using spread ssd allocation scheme [ 111.294432][ T4259] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 111.310371][ T4487] usb 3-1: device descriptor read/8, error -71 [ 111.326551][ T5099] BTRFS info (device loop1): using free space tree [ 111.333229][ T4259] usb 1-1: Product: syz [ 111.337441][ T4259] usb 1-1: Manufacturer: syz [ 111.353072][ T4259] usb 1-1: SerialNumber: syz [ 111.360152][ T4259] usb 1-1: config 0 descriptor?? [ 111.382350][ T4259] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 111.441161][ T4487] usb usb3-port1: unable to enumerate USB device [ 111.488377][ T5111] loop4: detected capacity change from 0 to 32768 [ 111.515406][ T5111] (syz.4.225,5111,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 111.541628][ T5111] (syz.4.225,5111,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.588487][ T5111] (syz.4.225,5111,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.680506][ T5111] JBD2: Ignoring recovery information on journal [ 111.710391][ T4252] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.785804][ T4259] gspca_zc3xx: reg_r err -71 [ 111.790515][ T4259] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 111.805278][ T4259] usb 1-1: USB disconnect, device number 9 [ 111.855827][ T5111] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 112.039695][ T4253] ocfs2: Unmounting device (7,4) on (node local) [ 112.049371][ T5137] mmap: syz.3.228 (5137) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.542880][ T5148] loop1: detected capacity change from 0 to 512 [ 112.852140][ T5148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 112.861649][ T5148] System zones: 1-12 [ 113.164628][ T5148] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.230: invalid indirect mapped block 8 (level 2) [ 113.178827][ T5148] EXT4-fs (loop1): 1 truncate cleaned up [ 113.184612][ T5148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.247225][ T5152] loop4: detected capacity change from 0 to 512 [ 113.268326][ T5152] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 113.343257][ T5152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 113.353947][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 113.429936][ T5152] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.231: corrupted in-inode xattr [ 113.455684][ T5157] __nla_validate_parse: 3 callbacks suppressed [ 113.455699][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'. [ 113.481802][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'. [ 113.490689][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'. [ 113.523654][ T5152] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.231: couldn't read orphan inode 15 (err -117) [ 113.546807][ T5152] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.588307][ T5165] input: syz0 as /devices/virtual/input/input18 [ 113.631095][ T4488] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 113.688780][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 113.722808][ T5169] loop0: detected capacity change from 0 to 64 [ 113.831071][ T4488] usb 4-1: Using ep0 maxpacket: 8 [ 113.875160][ T4488] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.897196][ T4488] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 113.905629][ T4488] usb 4-1: can't read configurations, error -71 [ 113.918074][ T5173] netlink: 132 bytes leftover after parsing attributes in process `syz.0.239'. [ 114.390510][ T5171] loop4: detected capacity change from 0 to 32768 [ 114.431383][ T5171] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.238 (5171) [ 114.507241][ T5171] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.548643][ T5171] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 114.565879][ T5175] loop2: detected capacity change from 0 to 32768 [ 114.568880][ T5171] BTRFS info (device loop4): enabling auto defrag [ 114.594764][ T5185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.244'. [ 114.610634][ T5175] (syz.2.240,5175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 114.615684][ T5171] BTRFS info (device loop4): use no compression [ 114.655786][ T5171] BTRFS info (device loop4): max_inline at 4096 [ 114.670862][ T5187] fuse: Unknown parameter 'fd0x0000000000000003' [ 114.676743][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.678494][ T5175] (syz.2.240,5175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.696571][ T5171] BTRFS info (device loop4): enabling ssd optimizations [ 114.709951][ T5171] BTRFS info (device loop4): using spread ssd allocation scheme [ 114.738637][ T5175] (syz.2.240,5175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.751740][ T5171] BTRFS info (device loop4): using free space tree [ 114.790708][ T5175] JBD2: Ignoring recovery information on journal [ 114.792363][ T5185] device bridge_slave_0 left promiscuous mode [ 114.804771][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.873777][ T5175] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 114.953739][ T4253] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.003146][ T4250] ocfs2: Unmounting device (7,2) on (node local) [ 115.132368][ T4488] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 115.185407][ T5209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.247'. [ 115.199857][ T5209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.247'. [ 115.210663][ T5209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.247'. [ 115.330990][ T4488] usb 4-1: Using ep0 maxpacket: 8 [ 115.349120][ T4488] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 115.399074][ T4488] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 115.419344][ T4488] usb 4-1: Product: syz [ 115.429466][ T4488] usb 4-1: Manufacturer: syz [ 115.460993][ T4488] usb 4-1: SerialNumber: syz [ 115.483224][ T4488] usb 4-1: config 0 descriptor?? [ 115.508613][ T4488] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 115.623984][ T5224] loop2: detected capacity change from 0 to 512 [ 116.159512][ T4669] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 118.440170][ T5224] EXT4-fs: failed to create workqueue [ 118.445668][ T5224] EXT4-fs (loop2): mount failed [ 118.485829][ T5219] loop1: detected capacity change from 0 to 40427 [ 118.497769][ T4488] gspca_zc3xx: reg_w_i err -110 [ 118.502779][ T4488] gspca_zc3xx: probe of 4-1:0.0 failed with error -110 [ 118.541018][ T5219] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 118.549056][ T5219] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 118.569446][ T5219] F2FS-fs (loop1): invalid crc value [ 118.575858][ T5219] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 118.642920][ T4488] usb 4-1: USB disconnect, device number 14 [ 118.821171][ T5235] input: syz0 as /devices/virtual/input/input19 [ 119.138946][ T5245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 119.164801][ T5245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 119.198815][ T5245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 119.357238][ T5239] loop2: detected capacity change from 0 to 32768 [ 119.366332][ T4854] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.390802][ T5239] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.256 (5239) [ 119.430154][ T5239] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.449931][ T5239] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 119.460264][ T5239] BTRFS info (device loop2): enabling auto defrag [ 119.473229][ T5239] BTRFS info (device loop2): use no compression [ 119.479725][ T5239] BTRFS info (device loop2): max_inline at 4096 [ 119.491046][ T5239] BTRFS info (device loop2): enabling ssd optimizations [ 119.498195][ T5239] BTRFS info (device loop2): using spread ssd allocation scheme [ 119.510841][ T5239] BTRFS info (device loop2): using free space tree [ 119.542554][ T5243] loop0: detected capacity change from 0 to 32768 [ 119.571148][ T4854] usb 2-1: Using ep0 maxpacket: 8 [ 119.598239][ T5243] (syz.0.257,5243,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 119.643918][ T4854] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.665545][ T4854] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 119.701072][ T4854] usb 2-1: can't read configurations, error -71 [ 119.712823][ T5243] (syz.0.257,5243,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.733667][ T4250] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.768377][ T5243] (syz.0.257,5243,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.809847][ T5243] JBD2: Ignoring recovery information on journal [ 119.953887][ T5243] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 120.095831][ T4254] ocfs2: Unmounting device (7,0) on (node local) [ 120.212997][ T5281] loop4: detected capacity change from 0 to 512 [ 120.825515][ T5281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 120.834942][ T5281] System zones: 1-12 [ 121.195545][ T5280] loop2: detected capacity change from 0 to 32768 [ 121.360197][ T5281] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.262: invalid indirect mapped block 8 (level 2) [ 121.399484][ T5281] EXT4-fs (loop4): 1 truncate cleaned up [ 121.405251][ T5281] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.679521][ T5280] find_entry called with index = 0 [ 121.687280][ T5280] read_mapping_page failed! [ 121.692103][ T5280] ERROR: (device loop2): txCommit: [ 121.692103][ T5280] [ 121.735049][ T5280] ERROR: (device loop2): diFree: numfree > numinos [ 121.735049][ T5280] [ 121.782717][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 121.899819][ T5289] fuse: Unknown parameter 'fd0x0000000000000003' [ 122.005113][ T5292] tipc: Started in network mode [ 122.031035][ T5292] tipc: Node identity 76892cdefbe9, cluster identity 4711 [ 122.054295][ T5292] tipc: Enabled bearer , priority 0 [ 122.077593][ T5292] syzkaller0: MTU too low for tipc bearer [ 122.089970][ T5292] tipc: Disabling bearer [ 122.151032][ T4259] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 122.174762][ T5298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'. [ 122.192244][ T5298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'. [ 122.207064][ T5298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'. [ 122.230997][ T4483] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.341202][ T4259] usb 4-1: Using ep0 maxpacket: 16 [ 122.357358][ T4259] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.367475][ T5307] input: syz0 as /devices/virtual/input/input20 [ 122.391039][ T4259] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.420637][ T4259] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.430054][ T4259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.440262][ T4483] usb 2-1: Using ep0 maxpacket: 8 [ 122.445559][ T4259] usb 4-1: Product: syz [ 122.449781][ T4259] usb 4-1: Manufacturer: syz [ 122.455759][ T4259] usb 4-1: SerialNumber: syz [ 122.463889][ T4483] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 122.473184][ T4483] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 122.483104][ T4483] usb 2-1: Product: syz [ 122.487440][ T4483] usb 2-1: Manufacturer: syz [ 122.496700][ T4483] usb 2-1: SerialNumber: syz [ 122.517961][ T4483] usb 2-1: config 0 descriptor?? [ 122.527991][ T4483] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 122.699537][ T4259] usb 4-1: 0:2 : does not exist [ 122.735687][ T4259] usb 4-1: USB disconnect, device number 15 [ 122.927430][ T4483] gspca_zc3xx: reg_r err -71 [ 122.936677][ T4483] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 122.946362][ T4483] usb 2-1: USB disconnect, device number 9 [ 122.992788][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.107692][ T5311] loop2: detected capacity change from 0 to 32768 [ 123.124854][ T5311] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.272 (5311) [ 123.161093][ T5311] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.181013][ T5311] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 123.189707][ T5311] BTRFS info (device loop2): enabling auto defrag [ 123.250955][ T5311] BTRFS info (device loop2): use no compression [ 123.257352][ T5311] BTRFS info (device loop2): max_inline at 4096 [ 123.321173][ T5311] BTRFS info (device loop2): enabling ssd optimizations [ 123.328814][ T5311] BTRFS info (device loop2): using spread ssd allocation scheme [ 123.361071][ T5311] BTRFS info (device loop2): using free space tree [ 123.436339][ T5315] loop4: detected capacity change from 0 to 32768 [ 123.475213][ T5315] (syz.4.274,5315,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 123.525574][ T5315] (syz.4.274,5315,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.570297][ T5315] (syz.4.274,5315,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.639400][ T4250] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.672180][ T128] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 123.718842][ T5315] JBD2: Ignoring recovery information on journal [ 123.864533][ T5315] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.901204][ T128] usb 4-1: Using ep0 maxpacket: 8 [ 123.995790][ T5350] loop2: detected capacity change from 0 to 512 [ 124.243626][ T128] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.635407][ T128] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 124.947224][ T128] usb 4-1: can't read configurations, error -71 [ 125.076939][ T5350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 125.085686][ T5350] System zones: 1-12 [ 125.160279][ T5350] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.278: invalid indirect mapped block 8 (level 2) [ 125.212526][ T5350] EXT4-fs (loop2): 1 truncate cleaned up [ 125.218263][ T5350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.443087][ T5284] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 125.481900][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 125.599686][ T4253] ocfs2: Unmounting device (7,4) on (node local) [ 125.730025][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 125.746286][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 125.771996][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 125.881035][ T128] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 126.004345][ T5366] input: syz0 as /devices/virtual/input/input21 [ 126.089575][ T128] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 126.116694][ T128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.138915][ T128] usb 4-1: config 0 has no interface number 0 [ 126.156747][ T128] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 126.170069][ T128] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 126.184906][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.197101][ T5376] fuse: Unknown parameter 'fd0x0000000000000003' [ 126.208445][ T128] usb 4-1: config 0 descriptor?? [ 126.226464][ T128] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 126.411107][ T4300] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 126.427207][ T40] usb 4-1: Failed to submit usb control message: -71 [ 126.436883][ T40] usb 4-1: unable to send the bmi data to the device: -71 [ 126.446614][ T4240] usb 4-1: USB disconnect, device number 17 [ 126.461640][ T40] usb 4-1: unable to get target info from device [ 126.468161][ T40] usb 4-1: could not get target info (-71) [ 126.474105][ T40] usb 4-1: could not probe fw (-71) [ 126.491340][ T126] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 126.596535][ T5381] loop4: detected capacity change from 0 to 32768 [ 126.612634][ T5381] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.289 (5381) [ 126.630993][ T4300] usb 2-1: Using ep0 maxpacket: 16 [ 126.638438][ T4300] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.647336][ T5381] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.657516][ T4300] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.663724][ T5381] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 126.679903][ T5381] BTRFS info (device loop4): enabling auto defrag [ 126.685335][ T4300] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.687185][ T5381] BTRFS info (device loop4): use no compression [ 126.695858][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 126.708132][ T5381] BTRFS info (device loop4): max_inline at 4096 [ 126.714720][ T5381] BTRFS info (device loop4): enabling ssd optimizations [ 126.719500][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 126.722033][ T5381] BTRFS info (device loop4): using spread ssd allocation scheme [ 126.734189][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.744000][ T5381] BTRFS info (device loop4): using free space tree [ 126.755963][ T126] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 126.765489][ T4300] usb 2-1: Product: syz [ 126.769769][ T126] usb 3-1: Product: syz [ 126.776607][ T4300] usb 2-1: Manufacturer: syz [ 126.788407][ T126] usb 3-1: Manufacturer: syz [ 126.793305][ T4300] usb 2-1: SerialNumber: syz [ 126.798335][ T126] usb 3-1: SerialNumber: syz [ 126.820316][ T126] usb 3-1: config 0 descriptor?? [ 126.835496][ T126] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 126.959954][ T4253] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.355403][ T126] gspca_zc3xx: reg_w_i err -110 [ 127.361527][ T126] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 127.674087][ T4300] usb 2-1: 0:2 : does not exist [ 127.915604][ T4300] usb 2-1: USB disconnect, device number 10 [ 128.209083][ T5413] loop3: detected capacity change from 0 to 512 [ 128.219634][ T5413] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 128.228272][ T5413] System zones: 1-12 [ 128.240662][ T5413] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.293: invalid indirect mapped block 8 (level 2) [ 128.255145][ T5413] EXT4-fs (loop3): 1 truncate cleaned up [ 128.260805][ T5413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.270643][ T4251] udevd[4251]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.281103][ T5415] loop4: detected capacity change from 0 to 512 [ 128.286780][ T128] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.294369][ T5415] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 128.319651][ T5415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 128.330212][ T5415] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.294: corrupted in-inode xattr [ 128.344366][ T5415] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.294: couldn't read orphan inode 15 (err -117) [ 128.356895][ T5415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.405921][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 128.508735][ T5421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 128.518164][ T5421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 128.527512][ T128] usb 1-1: Using ep0 maxpacket: 8 [ 128.533025][ T5421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 128.561778][ T5404] device vlan2 entered promiscuous mode [ 128.594212][ T128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.610446][ T128] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 128.626896][ T128] usb 1-1: can't read configurations, error -71 [ 128.925690][ T5419] loop4: detected capacity change from 0 to 32768 [ 128.959659][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 128.976469][ T5419] (syz.4.295,5419,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 129.022162][ T5419] (syz.4.295,5419,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.053844][ T5419] (syz.4.295,5419,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.126322][ T5419] JBD2: Ignoring recovery information on journal [ 129.218243][ T4296] usb 3-1: USB disconnect, device number 20 [ 129.239837][ T5437] input: syz0 as /devices/virtual/input/input22 [ 129.284606][ T5419] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 130.335690][ T4253] ocfs2: Unmounting device (7,4) on (node local) [ 130.444096][ T5448] loop1: detected capacity change from 0 to 512 [ 130.493178][ T5448] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 130.512869][ T5448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 130.539856][ T5448] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.305: corrupted in-inode xattr [ 130.775611][ T5448] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.305: couldn't read orphan inode 15 (err -117) [ 130.956062][ T5448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.250153][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.307'. [ 131.320334][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.307'. [ 131.371717][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.307'. [ 131.416868][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 131.596107][ T5441] loop2: detected capacity change from 0 to 32768 [ 131.613046][ T5441] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.303 (5441) [ 131.637874][ T5465] capability: warning: `syz.3.310' uses deprecated v2 capabilities in a way that may be insecure [ 131.663762][ T5441] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.686022][ T5466] loop1: detected capacity change from 0 to 512 [ 131.688322][ T5441] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 131.700972][ T4296] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 131.723116][ T5466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 131.731492][ T5466] System zones: 1-12 [ 131.740379][ T5466] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.309: invalid indirect mapped block 8 (level 2) [ 131.755193][ T5466] EXT4-fs (loop1): 1 truncate cleaned up [ 131.760851][ T5466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.789410][ T5441] BTRFS info (device loop2): enabling auto defrag [ 131.802279][ T5441] BTRFS info (device loop2): use no compression [ 131.820240][ T5441] BTRFS info (device loop2): max_inline at 4096 [ 131.842913][ T5441] BTRFS info (device loop2): enabling ssd optimizations [ 131.862654][ T5441] BTRFS info (device loop2): using spread ssd allocation scheme [ 131.880964][ T5441] BTRFS info (device loop2): using free space tree [ 131.901208][ T4296] usb 1-1: Using ep0 maxpacket: 16 [ 131.911747][ T4296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.929859][ T4296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.948093][ T4296] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.957699][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.972490][ T4296] usb 1-1: Product: syz [ 131.976784][ T4296] usb 1-1: Manufacturer: syz [ 131.983159][ T4296] usb 1-1: SerialNumber: syz [ 132.085035][ T4250] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.201773][ T4296] usb 1-1: 0:2 : does not exist [ 132.282985][ T4296] usb 1-1: USB disconnect, device number 12 [ 132.418911][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 132.532336][ T4251] udevd[4251]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.564573][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.570970][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.573200][ T5498] fuse: Unknown parameter 'fd0x0000000000000003' [ 132.675043][ T4491] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.906344][ T4795] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 133.172929][ T4491] usb 5-1: Using ep0 maxpacket: 8 [ 133.219362][ T4795] usb 2-1: Using ep0 maxpacket: 8 [ 133.501521][ T4795] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 133.531747][ T4795] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 133.533606][ T5491] device vlan2 entered promiscuous mode [ 133.560036][ T4795] usb 2-1: Product: syz [ 133.580493][ T4795] usb 2-1: Manufacturer: syz [ 133.608339][ T5506] input: syz0 as /devices/virtual/input/input23 [ 133.614799][ T4795] usb 2-1: SerialNumber: syz [ 133.651620][ T4491] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.663990][ T4795] usb 2-1: config 0 descriptor?? [ 133.665973][ T4491] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 133.686966][ T4491] usb 5-1: can't read configurations, error -71 [ 133.692175][ T4795] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 133.698825][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 133.878140][ T5515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 133.887486][ T5515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 133.897355][ T5515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 134.003970][ T5521] loop2: detected capacity change from 0 to 512 [ 134.015274][ T5521] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 134.034106][ T5521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 134.047094][ T5521] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.321: corrupted in-inode xattr [ 134.060402][ T5521] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.321: couldn't read orphan inode 15 (err -117) [ 134.077067][ T5521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.084444][ T4795] gspca_zc3xx: reg_r err -71 [ 134.090177][ T4795] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 134.149041][ T4795] usb 2-1: USB disconnect, device number 11 [ 134.180711][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 134.557219][ T5524] loop0: detected capacity change from 0 to 32768 [ 134.576269][ T5524] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.322 (5524) [ 134.590438][ T4296] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 134.648897][ T5534] loop3: detected capacity change from 0 to 512 [ 134.663297][ T5524] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.683339][ T5534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 134.692777][ T5534] System zones: 1-12 [ 134.698085][ T5524] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 134.707016][ T5534] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.325: invalid indirect mapped block 8 (level 2) [ 134.721497][ T5534] EXT4-fs (loop3): 1 truncate cleaned up [ 134.727188][ T5534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.777649][ T5524] BTRFS info (device loop0): enabling auto defrag [ 134.786954][ T4296] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.797753][ T5524] BTRFS info (device loop0): use no compression [ 134.804258][ T4296] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 134.826565][ T4296] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.841087][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.849319][ T4296] usb 3-1: Product: syz [ 134.854105][ T4296] usb 3-1: Manufacturer: syz [ 134.858781][ T4296] usb 3-1: SerialNumber: syz [ 134.868018][ T5524] BTRFS info (device loop0): max_inline at 4096 [ 134.881001][ T5524] BTRFS info (device loop0): enabling ssd optimizations [ 134.888248][ T5524] BTRFS info (device loop0): using spread ssd allocation scheme [ 134.906053][ T5524] BTRFS info (device loop0): using free space tree [ 135.195664][ T4254] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.382050][ T4668] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.461841][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 135.641039][ T4668] usb 2-1: Using ep0 maxpacket: 16 [ 135.648053][ T4668] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.725490][ T4668] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.760622][ T4668] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.789206][ T5565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 135.818655][ T4668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.844568][ T5565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 135.854756][ T4668] usb 2-1: Product: syz [ 135.858958][ T4668] usb 2-1: Manufacturer: syz [ 135.897635][ T4668] usb 2-1: SerialNumber: syz [ 135.920269][ T5565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 135.982239][ T4296] cdc_ncm 3-1:1.0: bind() failure [ 135.994294][ T4296] usbtest: probe of 3-1:1.1 failed with error -71 [ 136.011685][ T4296] usb 3-1: USB disconnect, device number 21 [ 136.149203][ T4668] usb 2-1: 0:2 : does not exist [ 136.201551][ T4668] usb 2-1: USB disconnect, device number 12 [ 136.437284][ T5575] loop0: detected capacity change from 0 to 512 [ 136.455252][ T5575] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 136.491888][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.577676][ T5575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 136.609939][ T5575] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.333: corrupted in-inode xattr [ 136.685423][ T5575] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.333: couldn't read orphan inode 15 (err -117) [ 136.739819][ T5575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.960762][ T5582] input: syz0 as /devices/virtual/input/input24 [ 137.012877][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 137.391081][ T4855] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 137.399495][ T5591] fuse: Unknown parameter 'fd0x0000000000000003' [ 137.590970][ T4855] usb 4-1: Using ep0 maxpacket: 8 [ 137.608019][ T5580] device vlan2 entered promiscuous mode [ 137.643324][ T4855] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.661610][ T4855] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 137.669260][ T4855] usb 4-1: can't read configurations, error -71 [ 137.688160][ T5596] loop0: detected capacity change from 0 to 512 [ 137.716421][ T4492] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 138.104962][ T5596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 138.113794][ T5596] System zones: 1-12 [ 138.251501][ T4492] usb 3-1: Using ep0 maxpacket: 8 [ 138.403288][ T5596] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.341: invalid indirect mapped block 8 (level 2) [ 138.419664][ T5596] EXT4-fs (loop0): 1 truncate cleaned up [ 138.425933][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.636224][ T4492] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 138.646035][ T4492] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 138.654131][ T4492] usb 3-1: Product: syz [ 138.658400][ T4492] usb 3-1: Manufacturer: syz [ 138.690573][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 138.706291][ T4492] usb 3-1: SerialNumber: syz [ 138.726252][ T4492] usb 3-1: config 0 descriptor?? [ 138.754399][ T4492] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 138.912424][ T5601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 138.941723][ T5601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 138.971862][ T5601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 139.050000][ T5593] loop4: detected capacity change from 0 to 32768 [ 139.071219][ T5593] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.340 (5593) [ 139.124360][ T5593] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.155609][ T4492] gspca_zc3xx: reg_r err -71 [ 139.160315][ T4492] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 139.177569][ T5593] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 139.198272][ T4492] usb 3-1: USB disconnect, device number 22 [ 139.217066][ T5593] BTRFS info (device loop4): enabling auto defrag [ 139.274079][ T5593] BTRFS info (device loop4): use no compression [ 139.290705][ T5593] BTRFS info (device loop4): max_inline at 4096 [ 139.303533][ T5593] BTRFS info (device loop4): enabling ssd optimizations [ 139.314318][ T5593] BTRFS info (device loop4): using spread ssd allocation scheme [ 139.349744][ T5593] BTRFS info (device loop4): using free space tree [ 139.516341][ T5634] loop1: detected capacity change from 0 to 512 [ 139.543638][ T5634] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 139.589887][ T4253] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.603542][ T5634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 139.612834][ T4668] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.717184][ T5634] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.348: corrupted in-inode xattr [ 139.821135][ T4668] usb 1-1: Using ep0 maxpacket: 16 [ 139.829809][ T4668] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.851294][ T5634] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.348: couldn't read orphan inode 15 (err -117) [ 139.896777][ T4668] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.961136][ T5634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.148328][ T4668] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.165648][ T4668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.192050][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 140.254295][ T4668] usb 1-1: Product: syz [ 140.259352][ T4668] usb 1-1: Manufacturer: syz [ 140.264082][ T4668] usb 1-1: SerialNumber: syz [ 140.475097][ T4668] usb 1-1: 0:2 : does not exist [ 140.487828][ T4668] usb 1-1: USB disconnect, device number 13 [ 245.530840][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 245.537927][ C0] (detected by 0, t=10502 jiffies, g=17073, q=33 ncpus=2) [ 245.545133][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294961697-4294951195), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 245.558502][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g17073 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 245.569707][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 245.579680][ C0] rcu: RCU grace-period kthread stack dump: [ 245.585570][ C0] task:rcu_preempt state:R running task stack:27064 pid:16 ppid:2 flags:0x00004000 [ 245.596373][ C0] Call Trace: [ 245.599683][ C0] [ 245.602626][ C0] __schedule+0x143f/0x4570 [ 245.607151][ C0] ? _raw_spin_unlock+0x40/0x40 [ 245.612038][ C0] ? __mod_timer+0x956/0xee0 [ 245.616651][ C0] ? release_firmware_map_entry+0x186/0x186 [ 245.622575][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 245.627965][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 245.633874][ C0] ? _raw_spin_unlock+0x40/0x40 [ 245.638751][ C0] schedule+0xbf/0x180 [ 245.642830][ C0] schedule_timeout+0x1b9/0x300 [ 245.647698][ C0] ? console_conditional_schedule+0x40/0x40 [ 245.653609][ C0] ? update_process_times+0x1b0/0x1b0 [ 245.658999][ C0] ? prepare_to_swait_event+0x329/0x350 [ 245.664567][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 245.669441][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 245.674656][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 245.679428][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 245.685341][ C0] ? finish_swait+0xcf/0x1e0 [ 245.689961][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 245.694575][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 245.699702][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 245.705632][ C0] ? __kthread_parkme+0x168/0x1c0 [ 245.710691][ C0] kthread+0x28d/0x320 [ 245.714772][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 245.719922][ C0] ? kthread_blkcg+0xd0/0xd0 [ 245.724524][ C0] ret_from_fork+0x1f/0x30 [ 245.729062][ C0] [ 245.732106][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 245.738452][ C0] CPU: 0 PID: 5648 Comm: syz.1.353 Not tainted 6.1.127-syzkaller #0 [ 245.746440][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 245.756531][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 245.762384][ C0] Code: a1 95 f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 87 ad f6 48 89 df e8 86 c5 ae f6 e8 11 1d d4 f6 fb bf 01 00 00 00 76 4f a1 f6 65 8b 05 17 2f 45 75 85 c0 74 02 5b c3 e8 c4 52 43 [ 245.782010][ C0] RSP: 0018:ffffc9000409fb30 EFLAGS: 00000286 [ 245.788094][ C0] RAX: 2dfc3f7f04625400 RBX: ffff888073e54a00 RCX: ffffffff97357103 [ 245.796094][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: 0000000000000001 [ 245.804080][ C0] RBP: ffffc9000409fc70 R08: dffffc0000000000 R09: ffffed100e7ca941 [ 245.812059][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e7ca9d3 [ 245.820043][ C0] R13: 000000001c000004 R14: 0000000000000021 R15: ffff888073e54e98 [ 245.828122][ C0] FS: 00007f1fd7f6e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 245.837066][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.843665][ C0] CR2: 000000002006b000 CR3: 000000007b9a3000 CR4: 00000000003526f0 [ 245.851656][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.859650][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.867631][ C0] Call Trace: [ 245.870926][ C0] [ 245.873784][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 245.880135][ C0] ? _find_next_bit+0x11b/0x120 [ 245.885002][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 245.890657][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 245.895621][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 245.901012][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 245.905893][ C0] ? hrtimer_run_queues+0x163/0x450 [ 245.911113][ C0] ? acct_account_cputime+0xdd/0x270 [ 245.916420][ C0] ? update_process_times+0x147/0x1b0 [ 245.921826][ C0] ? tick_sched_timer+0x386/0x550 [ 245.926866][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 245.932454][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 245.937865][ C0] ? hrtimer_interrupt+0x980/0x980 [ 245.942994][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 245.949101][ C0] ? hrtimer_interrupt+0x392/0x980 [ 245.954269][ C0] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 245.960444][ C0] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 245.966267][ C0] [ 245.969310][ C0] [ 245.972262][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 245.978441][ C0] ? _raw_spin_unlock_irq+0x25/0x40 [ 245.983656][ C0] get_signal+0x154b/0x17d0 [ 245.988198][ C0] ? ptrace_notify+0x370/0x370 [ 245.993007][ C0] arch_do_signal_or_restart+0xb0/0x1a10 [ 245.998656][ C0] ? __might_fault+0xa1/0x110 [ 246.003350][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 246.008400][ C0] ? do_sigaltstack+0x3f3/0x610 [ 246.013264][ C0] ? get_sigframe_size+0x10/0x10 [ 246.018211][ C0] ? restore_altstack+0x107/0x150 [ 246.023253][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 246.029273][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 246.034750][ C0] exit_to_user_mode_loop+0x6a/0x100 [ 246.040047][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 246.045604][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 246.051167][ C0] do_syscall_64+0x47/0xb0 [ 246.055589][ C0] ? clear_bhb_loop+0x45/0xa0 [ 246.060275][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.066207][ C0] RIP: 0033:0x7f1fd718cd27 [ 246.070647][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 246.090263][ C0] RSP: 002b:00007f1fd7f6e038 EFLAGS: 00000246 [ 246.096347][ C0] RAX: 00000000000000ca RBX: 00007f1fd73a5fa0 RCX: 00007f1fd718cd29 [ 246.104332][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000002000cffc [ 246.112310][ C0] RBP: 00007f1fd720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.120286][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.128361][ C0] R13: 0000000000000000 R14: 00007f1fd73a5fa0 R15: 00007fffaafead08 [ 246.136358][ C0]