last executing test programs: 1m12.766825175s ago: executing program 2 (id=104): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8100, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001b00)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000ff0000000000000000000000ecf2"]) 1m11.664902232s ago: executing program 2 (id=111): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2a, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x8080) 1m11.25085773s ago: executing program 2 (id=114): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@empty, 0x3}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m10.931680899s ago: executing program 2 (id=120): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f0000000700)={[{@grpjquota}, {@quota}, {@abort}, {@usrquota}, {@block_validity}]}, 0x12, 0x51d, &(0x7f0000000780)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x30, 0x0, 0x0, [{0x1, 0xdfc, 0x1, 0x4, '['}]}, 0x0, 0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x0) 1m9.982290886s ago: executing program 2 (id=130): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@empty, 0x3}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m8.934358123s ago: executing program 2 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24000000430001"], 0x24}}, 0x0) 1m8.747406662s ago: executing program 32 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24000000430001"], 0x24}}, 0x0) 25.763368064s ago: executing program 4 (id=423): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000020303000000000000000000035d568974"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000810) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f00000014c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 24.84524618s ago: executing program 4 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000200)}, 0x20) 24.74335907s ago: executing program 4 (id=430): mkdir(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x0, 0x6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 24.57831712s ago: executing program 4 (id=432): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x32, 0x0, 0x0) 24.470898969s ago: executing program 4 (id=435): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x29}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x840) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) syncfs(r1) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x1184025, &(0x7f0000000500)={[{@data_ordered}, {@nobh}, {@errors_continue}, {@grpquota}, {@dax_inode}, {@noblock_validity}, {@nombcache}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8cc}}, {@discard}, {@grpid}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@measure}, {@uid_eq}, {@permit_directio}, {@seclabel}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@audit}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}]}, 0x0, 0x76a, &(0x7f0000000f00)="$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") syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000240)) 23.666488767s ago: executing program 4 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x1000000, 0x25dfdbfe, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4000) 16.370003693s ago: executing program 3 (id=488): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x800, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000ff01000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800800000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) 15.240640539s ago: executing program 3 (id=495): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05267a13ad00000001090224000100000000090400000103000000092100400001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xb, '\b\x00'}, @local=@item_012={0x2, 0x2, 0xa, '\x00\x00'}, @local=@item_012={0x2, 0x2, 0x1, "b558"}]}}, 0x0}, 0x0) 13.158009713s ago: executing program 5 (id=504): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x101100) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x0) syz_usb_disconnect(r0) 13.135508233s ago: executing program 3 (id=505): r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 12.955745422s ago: executing program 3 (id=506): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000240)='./file2\x00', 0x800000, &(0x7f0000001500)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRES8], 0x1, 0x1e4, &(0x7f0000000280)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utime(&(0x7f0000000200)='.\x00', 0x0) 12.748835492s ago: executing program 3 (id=507): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r1, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 12.22223822s ago: executing program 3 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 12.012966589s ago: executing program 33 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 11.286346347s ago: executing program 5 (id=515): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "b51c27035a2f7304", "2d0309172d05da5d2ace61795d0526e8", "e7b2bae0", "dabb1a5d151dfea2"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10.472741694s ago: executing program 5 (id=516): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfdef) 10.043369983s ago: executing program 5 (id=517): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000240)='./file2\x00', 0x800000, &(0x7f0000001500)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRES8], 0x1, 0x1e4, &(0x7f0000000280)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utime(&(0x7f0000000200)='.\x00', 0x0) 9.746119661s ago: executing program 5 (id=518): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@remote}, {@empty, 0x3}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.022121519s ago: executing program 34 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x1000000, 0x25dfdbfe, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4000) 8.530306218s ago: executing program 5 (id=522): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e2, &(0x7f0000000c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 8.246122887s ago: executing program 35 (id=522): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e2, &(0x7f0000000c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 7.218294814s ago: executing program 1 (id=527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.038782503s ago: executing program 1 (id=528): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xd47c, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x80000000}}, 0x0, 0x0, 0x29, 0x0, "ea1898a00b6204693e3766585245a5d0707ca6b0c12ed01958a174e9ba610b16695751ff45884198948013d9b8107d8f6976fedfb2befd2651de59977687a0529c82bda1758073342891521c63a86b50"}, 0xd8) syz_emit_ethernet(0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad701"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000080)=ANY=[]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f00000000c0)={0x6, 0x13, 0x80}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) 4.046255073s ago: executing program 1 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 3.925326463s ago: executing program 1 (id=532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000001c0)={0x9, 0x6, 0x3, 0x4800}) openat$sndtimer(0xffffff9c, 0x0, 0x40000) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) fstat(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000ac40)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000001bc0)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x9e7, 0x4) bind$inet(r4, 0x0, 0x0) read$FUSE(r3, &(0x7f0000001440)={0x2020}, 0x2020) connect$rose(0xffffffffffffffff, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x1c) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 2.783101399s ago: executing program 1 (id=534): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d2, &(0x7f0000000f00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000380)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) r0 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 2.446085598s ago: executing program 1 (id=535): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x800, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000ff01000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800800000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r5, &(0x7f0000000080), 0x208e24b) 1.478812225s ago: executing program 6 (id=537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28012, r0, 0xe25f5000) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 902.233663ms ago: executing program 6 (id=538): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xd47c, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x80000000}}, 0x0, 0x0, 0x29, 0x0, "ea1898a00b6204693e3766585245a5d0707ca6b0c12ed01958a174e9ba610b16695751ff45884198948013d9b8107d8f6976fedfb2befd2651de59977687a0529c82bda1758073342891521c63a86b50"}, 0xd8) syz_emit_ethernet(0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad701"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000080)=ANY=[]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f00000000c0)={0x6, 0x13, 0x80}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) 489.604802ms ago: executing program 0 (id=540): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000180)={[{@creator={'creator', 0x3d, "437c061b"}}, {}, {@type={'type', 0x3d, "f8450349"}}, {@gid={'gid', 0x3d, 0xee01}}, {@barrier}, {@nls={'nls', 0x3d, 'cp936'}}]}, 0x3, 0x6c7, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 371.245041ms ago: executing program 0 (id=541): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f", 0x68}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f", 0x47}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fdc23a30e510d2fba92bd55ed7f4f893103b2772151cbdb17e1ddb141ea1e99c28e7482afc2dfc1386d6a8cba0fb55b4997f0e28b04c7642e528fd0b224592d2a7a5cd33d94fb939552713a2547d5ede0d3bbf8037e447ebfb57ec6eb6a74c3e8135158393d4bd15619b37d04c6ffadd5c52928ac7f9", 0xb5}], 0x6}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)="76dbc0", 0x3}], 0x1}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 259.588471ms ago: executing program 0 (id=542): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) 130.3755ms ago: executing program 0 (id=543): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d2, &(0x7f0000000f00)="$eJzs3cFvHFcdB/DvrNeOt1TBaROaQxFWIhWkiMSJlUK4YBBCOVSoKoeercRprG6SKnFRWiFIAcEJiUP/gILkGweExD0oXLiUW68+VkLiEiEU9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn42qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9La/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuPJf8p55tJoZrMt95J/JJk57Hj3oBi18P7k4wAAAICnMvsE23z5UR7lbo726p2ifM2fr1Svl2fzfm5mLatZSzsruVq/hi5f9Tc21hfbG+uLN8qprA/3+71/7SmMmbqHqao2as8nqzVauZbVasnZXKmCuZpGd9+nk5O9eAbiGvBRGVPx3dqYkTXrtJY7+91O7yLsi+G3IhqPWbO1GVzSz8hCHVu55bFuBorqjZpkayZ2PTvNodpc1et0f0/n0+i/83P8AHL+Qj0vj+fXB5rzvepnopEqExd6o6+8Zh6fieTrf/nj29fbN9+9fu3OmWfnkHYxtcPyrWNicSATrzzXmWjucf2FKhMn+vXL+WF+nDOZz5u5ndX8JMtZy0o6dftyPZ7Ln3OPz9TSUO3N3SKZqc9L95yNE9N8flCVlnOq2vZoVlPkVq5mJa9X/y7kfL6Vi7mYSwNn+MSOcVfHVl31ja1Xfe9M/3Vk8Ke/URfKu9tvNu9yS4874p1G537p3vvLvB4byGt31D/sr3Vs4DpYGMjSS73sTI/sfG/3xi1vtZf7+OUuz4nJmqszUV5AvadEL7qXu5loVs+i7eP8951yu7RvdjrXl9/bof97W+qv1fNyWK1/dbe1e0afiv1VnqqXMlvfSYZHR9n2cv8uM9DW2RzL3bbhJ2653YmqrSh6V+qPcqsaANuv1Jn6d7jtPV2o2l4Z2bZYtZ0caBv6fSu30s7VCeQPgCfx97f7xbm8MNP6Z+vT1ietX7Wut96Y/f6Rbx95dSbTf5v+TnNh6rXGq8Wf80l+tvn6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHJ3Pvjw3eV2e+X26EJj56ahQitbl+zU85HR/RT1F/qMsa/nojCbZGhJ9T1HEw+jtTWMbYXOz5OJ56f3nVaj1/ltWWhuG1GjCktDS/60vcOP9hhhMd51cYCFRia706mMHgCHeFMCJuLc2o33zt354MNvrt5YfmflnZWb0xcvXlq4dPH1xXPXVtsrC92fhx0lcBA2H/qHHQkAAAAAAAAAAAAwrlEfDDj14m4fGhnrMx7+ZyEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwLy6fSfN+ipxfOLtQ1jfWF9vl1CtvrtlM0mgkxU+T4kGylO6UuYHuivzhQToj9vPx6qW3Pnu48flmX83u+kmjnu/s8a1J7tVT5pNM1fOnMNTflafur/h37xjKhH3R6XSWni4+2B//DQAA//9KkvWS") socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000380)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, 0x0, 0x0, 0x7fff, 0x0, 0x0) 85.96778ms ago: executing program 0 (id=544): ioperm(0x0, 0x2, 0x13cc) io_uring_setup(0x25f3, 0x0) 0s ago: executing program 0 (id=545): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): 511][ T4292] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 70.978613][ T4300] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 71.112620][ T26] audit: type=1326 audit(1734713887.964:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3f59bd29 code=0x7ffc0000 [ 71.218366][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.225125][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.280655][ T26] audit: type=1326 audit(1734713887.974:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1c3f59bd29 code=0x7ffc0000 [ 71.413702][ T26] audit: type=1326 audit(1734713887.974:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3f59bd29 code=0x7ffc0000 [ 71.454817][ T4320] capability: warning: `syz.3.27' uses 32-bit capabilities (legacy support in use) [ 71.489408][ T26] audit: type=1326 audit(1734713887.974:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c3f59bd29 code=0x7ffc0000 [ 71.661232][ T4325] loop2: detected capacity change from 0 to 512 [ 71.713622][ T4325] ======================================================= [ 71.713622][ T4325] WARNING: The mand mount option has been deprecated and [ 71.713622][ T4325] and is ignored by this kernel. Remove the mand [ 71.713622][ T4325] option from the mount to silence this warning. [ 71.713622][ T4325] ======================================================= [ 71.716257][ T4329] netlink: 128 bytes leftover after parsing attributes in process `syz.3.31'. [ 71.759692][ T4324] syz.1.28 (4324) used greatest stack depth: 19288 bytes left [ 71.822315][ T4332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.841367][ T4329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 71.857103][ T4325] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 71.873324][ T4325] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.911333][ T4329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 71.942120][ T4325] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.29: bg 0: block 131: padding at end of block bitmap is not set [ 72.007269][ T4308] loop0: detected capacity change from 0 to 32768 [ 72.062598][ T4340] loop3: detected capacity change from 0 to 256 [ 72.070025][ T4325] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 72.089631][ T4308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.23 (4308) [ 72.135064][ T4325] EXT4-fs (loop2): 1 truncate cleaned up [ 72.140747][ T4325] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,max_batch_time=0x0000000000000008,sysvgroups,mblk_io_submit,dioread_lock,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 72.166512][ T4340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d) [ 72.260927][ T4308] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 72.317583][ T4308] BTRFS info (device loop0): using free space tree [ 72.337465][ T4308] BTRFS info (device loop0): has skinny extents [ 72.422852][ T4344] kvm: emulating exchange as write [ 72.498274][ T4157] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.739334][ T4308] BTRFS info (device loop0): enabling ssd optimizations [ 72.821956][ T4379] loop4: detected capacity change from 0 to 8 [ 73.044339][ T4157] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 73.354394][ T4157] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.434760][ T4157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.611415][ T4157] usb 2-1: Product: syz [ 73.643029][ T4157] usb 2-1: Manufacturer: syz [ 73.669499][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 73.669515][ T26] audit: type=1800 audit(1734713890.524:22): pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=261 res=0 errno=0 [ 73.697759][ T4157] usb 2-1: SerialNumber: syz [ 73.783430][ T4389] netlink: 44 bytes leftover after parsing attributes in process `syz.3.44'. [ 73.792446][ T4389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 73.862592][ T4392] loop4: detected capacity change from 0 to 128 [ 73.894724][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.931547][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.938836][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.962264][ T4308] BTRFS error (device loop0): unrecognized mount option '' [ 74.047180][ T4392] attempt to access beyond end of device [ 74.047180][ T4392] loop4: rw=2051, want=129, limit=128 [ 74.102338][ T4396] loop3: detected capacity change from 0 to 512 [ 74.135501][ T4398] loop2: detected capacity change from 0 to 256 [ 74.333598][ T4402] loop4: detected capacity change from 0 to 1024 [ 74.581628][ T4402] EXT4-fs (loop4): Test dummy encryption mode enabled [ 74.616712][ T4402] EXT4-fs (loop4): inline encryption not supported [ 74.645599][ T4402] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,usrquota,commit=0x0000000000000005,inlinecrypt,errors=remount-ro,grpjquota=,data_err=abort,. Quota mode: writeback. [ 74.883302][ T4157] cdc_ncm 2-1:1.0: bind() failure [ 74.937890][ T4157] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 74.985557][ T4157] cdc_ncm 2-1:1.1: bind() failure [ 75.021244][ T4157] usb 2-1: USB disconnect, device number 2 [ 75.300846][ T4436] loop3: detected capacity change from 0 to 256 [ 75.349180][ T26] audit: type=1326 audit(1734713892.201:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3b476d29 code=0x0 [ 75.412717][ T4436] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 75.487897][ T4436] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 75.577152][ T4449] loop1: detected capacity change from 0 to 128 [ 75.730003][ T4449] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.754842][ T4449] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.858066][ T4449] syz.1.61 (pid 4449) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 75.906498][ T4464] loop2: detected capacity change from 0 to 256 [ 76.042584][ T4464] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 76.062503][ T4449] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 76.073509][ T4474] capability: warning: `syz.3.68' uses deprecated v2 capabilities in a way that may be insecure [ 76.100205][ T26] audit: type=1800 audit(1734713892.951:24): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.67" name="file1" dev="loop2" ino=1048603 res=0 errno=0 [ 76.150545][ T26] audit: type=1800 audit(1734713892.951:25): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.67" name="file2" dev="loop2" ino=1048604 res=0 errno=0 [ 76.291203][ T4482] loop3: detected capacity change from 0 to 1024 [ 76.302247][ T4405] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.416638][ T4482] EXT4-fs (loop3): Test dummy encryption mode enabled [ 76.436380][ T4482] EXT4-fs (loop3): Ignoring removed oldalloc option [ 76.537979][ T4482] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,oldalloc,barrier=0x0000000000000200,max_batch_time=0x0000000000000009,data_err=abort,,errors=continue. Quota mode: writeback. [ 76.684380][ T4405] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 76.719892][ T4405] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 76.734084][ T4502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.80'. [ 76.914369][ T4405] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 76.938304][ T4405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.967777][ T4405] usb 5-1: Product: syz [ 76.972020][ T4405] usb 5-1: Manufacturer: syz [ 76.990865][ T4405] usb 5-1: SerialNumber: syz [ 77.016692][ T4482] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 77.035373][ T4405] usb 5-1: config 0 descriptor?? [ 77.070619][ T4476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.099080][ T4476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.228082][ T4521] loop3: detected capacity change from 0 to 512 [ 77.331942][ T4476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.352020][ T4476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.435897][ T4521] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noblock_validity,grpjquota=,norecovery,abort,,errors=continue. Quota mode: writeback. [ 77.460617][ T4521] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.663155][ T4405] Error reading MAC address [ 77.714466][ T4405] usb 5-1: USB disconnect, device number 2 [ 77.788214][ T4535] loop2: detected capacity change from 0 to 1024 [ 77.926574][ T4535] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 78.034818][ T26] audit: type=1326 audit(1734713894.891:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb911b11d29 code=0x7ffc0000 [ 78.059620][ T26] audit: type=1326 audit(1734713894.891:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb911b11d29 code=0x7ffc0000 [ 78.112608][ T26] audit: type=1326 audit(1734713894.951:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb911b11d29 code=0x7ffc0000 [ 78.180905][ T4535] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 78.227713][ T26] audit: type=1326 audit(1734713894.951:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb911b11d29 code=0x7ffc0000 [ 78.267593][ T26] audit: type=1326 audit(1734713894.951:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb911b11d29 code=0x7ffc0000 [ 78.297976][ T4535] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 860 with error 28 [ 78.311986][ T4535] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.311986][ T4535] [ 78.327922][ T26] audit: type=1326 audit(1734713894.951:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb911b11d29 code=0x7ffc0000 [ 78.360987][ T4535] EXT4-fs (loop2): Total free blocks count 0 [ 78.367992][ T4535] EXT4-fs (loop2): Free/Dirty block details [ 78.379550][ T4405] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.410347][ T4535] EXT4-fs (loop2): free_blocks=68451041280 [ 78.422823][ T4535] EXT4-fs (loop2): dirty_blocks=864 [ 78.432733][ T4535] EXT4-fs (loop2): Block reservation details [ 78.479357][ T4559] loop1: detected capacity change from 0 to 1024 [ 78.519224][ T4535] EXT4-fs (loop2): i_reserved_data_blocks=54 [ 78.639788][ T4559] EXT4-fs (loop1): Ignoring removed orlov option [ 78.660561][ T4559] EXT4-fs (loop1): Test dummy encryption mode enabled [ 78.676608][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 4 with error 28 [ 78.737673][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.737673][ T144] [ 78.876593][ T4563] process 'syz.4.100' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 78.975383][ T4405] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.047185][ T4405] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 79.179639][ T4405] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 79.226149][ T4405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.293206][ T4559] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.320221][ T4405] usb 4-1: config 0 descriptor?? [ 79.368695][ T4559] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 79.444071][ T4559] EXT4-fs (loop1): invalid journal inode [ 79.449810][ T4559] EXT4-fs (loop1): can't get journal size [ 79.494415][ T4567] loop2: detected capacity change from 0 to 1024 [ 79.513335][ T4559] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 79.579318][ T4567] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 79.654480][ T4567] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 79.873115][ T4405] Bluetooth: Can't get state to change to load configuration err [ 79.899981][ T4581] loop1: detected capacity change from 0 to 1024 [ 79.910592][ T4405] Bluetooth: Loading sysconfig file failed [ 79.917204][ T4405] ath3k: probe of 4-1:0.0 failed with error -16 [ 79.918448][ T4578] loop4: detected capacity change from 0 to 2048 [ 79.947514][ T4405] usb 4-1: USB disconnect, device number 2 [ 79.994650][ T4581] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 80.063038][ T4578] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 80.166925][ T4578] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 80.340664][ T4578] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.112: bg 0: block 234: padding at end of block bitmap is not set [ 80.359137][ T4578] EXT4-fs (loop4): Remounting filesystem read-only [ 80.550205][ T4604] loop2: detected capacity change from 0 to 512 [ 80.727924][ T4613] 9pnet: Could not find request transport: f184467440737095516150xffffffffffffffff [ 80.737658][ T4597] loop1: detected capacity change from 0 to 32768 [ 80.789956][ T4597] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.115 (4597) [ 80.799299][ T4604] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,quota,abort,usrquota,block_validity,,errors=continue. Quota mode: writeback. [ 80.833685][ T4604] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.889016][ T4597] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 80.898043][ T4597] BTRFS info (device loop1): using free space tree [ 80.904657][ T4597] BTRFS info (device loop1): has skinny extents [ 80.922974][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.166497][ T4597] BTRFS info (device loop1): enabling ssd optimizations [ 81.173085][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 81.247498][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 81.247513][ T26] audit: type=1800 audit(1734713898.101:41): pid=4597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.115" name="file1" dev="loop1" ino=261 res=0 errno=0 [ 81.320244][ T4597] BTRFS error (device loop1): unrecognized mount option '' [ 81.333505][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.393926][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.415504][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.429835][ T1111] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.439896][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.485961][ T1108] cfg80211: failed to load regulatory.db [ 81.493680][ T1111] usb 5-1: config 0 descriptor?? [ 81.558369][ T4180] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 81.603100][ T4213] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.623920][ T4180] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 81.653346][ T4180] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz-executor: Failed to acquire dquot type 0 [ 81.682759][ T4650] loop3: detected capacity change from 0 to 8 [ 81.817126][ T4650] SQUASHFS error: lzo decompression failed, data probably corrupt [ 81.836419][ T4650] SQUASHFS error: Failed to read block 0x91: -5 [ 81.842713][ T4650] SQUASHFS error: Unable to read metadata cache entry [8f] [ 81.873019][ T4213] usb 1-1: Using ep0 maxpacket: 32 [ 81.889234][ T4650] SQUASHFS error: Unable to read inode 0x11f [ 81.994133][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.005601][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.028090][ T4213] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.039638][ T1111] microsoft 0003:045E:07DA.0001: item fetching failed at offset 30/34 [ 82.049309][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.058456][ T1111] microsoft 0003:045E:07DA.0001: parse failed [ 82.072785][ T4650] loop3: detected capacity change from 0 to 1024 [ 82.074016][ T1111] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 82.088438][ T4213] usb 1-1: config 0 descriptor?? [ 82.099129][ T4657] loop1: detected capacity change from 0 to 1024 [ 82.144365][ T4213] hub 1-1:0.0: USB hub found [ 82.243324][ T4209] usb 5-1: USB disconnect, device number 3 [ 82.368587][ T4213] hub 1-1:0.0: 1 port detected [ 82.473604][ T4180] syz-executor (4180) used greatest stack depth: 18528 bytes left [ 82.583433][ T4213] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 82.590228][ T4213] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 82.703214][ T4213] usbhid 1-1:0.0: can't add hid device: -71 [ 82.709329][ T4213] usbhid: probe of 1-1:0.0 failed with error -71 [ 82.805169][ T4213] usb 1-1: USB disconnect, device number 2 [ 83.053351][ T4669] loop1: detected capacity change from 0 to 32768 [ 83.136469][ T4669] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.139 (4669) [ 83.161883][ T4676] loop4: detected capacity change from 0 to 256 [ 83.207990][ T4669] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 83.216904][ T4669] BTRFS info (device loop1): using free space tree [ 83.223525][ T4669] BTRFS info (device loop1): has skinny extents [ 83.259147][ T4676] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89a169d, utbl_chksum : 0xe619d30d) [ 83.574107][ T4669] BTRFS info (device loop1): enabling ssd optimizations [ 83.633995][ T26] audit: type=1800 audit(1734713900.491:42): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.139" name="file1" dev="loop1" ino=261 res=0 errno=0 [ 83.686423][ T4669] BTRFS error (device loop1): unrecognized mount option '' [ 83.792098][ T4708] loop4: detected capacity change from 0 to 256 [ 84.074857][ T4691] chnl_net:caif_netlink_parms(): no params data found [ 84.247178][ T4736] loop1: detected capacity change from 0 to 2048 [ 84.291862][ T4738] loop3: detected capacity change from 0 to 512 [ 84.321607][ T4736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.412081][ T4738] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.154: invalid indirect mapped block 10 (level 1) [ 84.437190][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.483487][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.529915][ T4691] device bridge_slave_0 entered promiscuous mode [ 84.550531][ T4738] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.154: invalid indirect mapped block 8 (level 1) [ 84.587696][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.596776][ T26] audit: type=1326 audit(1734713901.451:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3c1e5d29 code=0x7fc00000 [ 84.623825][ T4738] EXT4-fs (loop3): 1 truncate cleaned up [ 84.629509][ T4738] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 84.633218][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.672170][ T26] audit: type=1326 audit(1734713901.451:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf3c1e5d29 code=0x7fc00000 [ 84.759265][ T4691] device bridge_slave_1 entered promiscuous mode [ 84.790491][ T26] audit: type=1326 audit(1734713901.451:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3c1e5d29 code=0x7fc00000 [ 84.862186][ T26] audit: type=1326 audit(1734713901.451:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3c1e5d29 code=0x7fc00000 [ 84.874202][ T4749] loop1: detected capacity change from 0 to 1024 [ 84.906063][ T26] audit: type=1326 audit(1734713901.451:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3c1e5d29 code=0x7fc00000 [ 84.982053][ T4691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.023839][ T4691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.039907][ T26] audit: type=1326 audit(1734713901.451:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3c1e5d29 code=0x7fc00000 [ 85.223633][ T4753] loop3: detected capacity change from 0 to 32768 [ 85.239755][ T4755] loop4: detected capacity change from 0 to 512 [ 85.271895][ T4691] team0: Port device team_slave_0 added [ 85.278068][ T4749] hfsplus: xattr searching failed [ 85.285722][ T4753] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.159 (4753) [ 85.305705][ T4691] team0: Port device team_slave_1 added [ 85.351200][ T4755] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.366894][ T4753] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 85.375820][ T4753] BTRFS info (device loop3): using free space tree [ 85.382344][ T4753] BTRFS info (device loop3): has skinny extents [ 85.432306][ T4755] EXT4-fs (loop4): 1 truncate cleaned up [ 85.441630][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.477389][ T4755] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: none. [ 85.503372][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.533350][ T4409] Bluetooth: hci4: command 0x0409 tx timeout [ 85.551658][ T4755] fscrypt (loop4, inode 18): Direct key flag not allowed with different contents and filenames modes [ 85.583181][ T4691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.602533][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.643694][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.795807][ T4691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.830900][ T4753] BTRFS info (device loop3): enabling ssd optimizations [ 86.231884][ T4691] device hsr_slave_0 entered promiscuous mode [ 86.369989][ T4691] device hsr_slave_1 entered promiscuous mode [ 86.464243][ T4691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.510908][ T4691] Cannot create hsr debugfs directory [ 86.511147][ T4753] BTRFS error (device loop3): unrecognized mount option '' [ 87.717216][ T4798] loop4: detected capacity change from 0 to 256 [ 87.760301][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 88.092565][ T4691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.142462][ T4691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.174506][ T4691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.199528][ T4691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.205666][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 88.402323][ T4798] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 88.429888][ T4798] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 88.453380][ T4691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.461052][ T4798] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 88.477440][ T4798] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 88.500351][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.516830][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.536937][ T4691] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.574642][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.593491][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.608486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.616958][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 88.627093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.633763][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.644775][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.651896][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.663977][ T23] usb 1-1: config 0 descriptor?? [ 88.692495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.730974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.785293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.797886][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.805055][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.937668][ T4833] input: syz0 as /devices/virtual/input/input6 [ 88.949744][ T479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.988639][ T1111] usb 4-1: config 7 has an invalid descriptor of length 48, skipping remainder of the config [ 89.006554][ T1111] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 89.030712][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.050611][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.153294][ T1111] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 89.172845][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 89.203893][ T1111] usb 4-1: Product: syz [ 89.213244][ T1111] usb 4-1: SerialNumber: syz [ 89.385950][ T1111] usb 4-1: bad CDC descriptors [ 89.399074][ T1111] usb 4-1: bad CDC descriptors [ 89.418771][ T1111] option 4-1:7.0: GSM modem (1-port) converter detected [ 89.590948][ T1111] usb 4-1: USB disconnect, device number 3 [ 89.619162][ T1111] option 4-1:7.0: device disconnected [ 89.654004][ T4837] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 89.674103][ T23] wacom 0003:056A:0094.0002: Using device in hidraw-only mode [ 89.679445][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.692569][ T23] wacom 0003:056A:0094.0002: hidraw0: USB HID v0.04 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 89.701874][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.728052][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.747331][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.786309][ T23] usb 1-1: USB disconnect, device number 3 [ 89.825403][ T479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.855234][ T4407] Bluetooth: hci4: command 0x040f tx timeout [ 90.040727][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.122464][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.223527][ T4407] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.298896][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.359251][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.378469][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.408554][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.478920][ T479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.564562][ T4860] loop3: detected capacity change from 0 to 2048 [ 90.612391][ T479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.633184][ T4407] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 90.641459][ T4407] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.662584][ T4407] usb 2-1: config 0 has no interface number 0 [ 90.680090][ T4860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.867539][ T4407] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 90.889613][ T4407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.919833][ T4407] usb 2-1: Product: syz [ 90.956318][ T4407] usb 2-1: Manufacturer: syz [ 90.960948][ T4407] usb 2-1: SerialNumber: syz [ 91.007753][ T4407] usb 2-1: config 0 descriptor?? [ 91.030448][ T4691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.074378][ T4407] cyberjack 2-1:0.69: required endpoints missing [ 91.095130][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.105048][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.357253][ T4848] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.428211][ T1111] usb 2-1: USB disconnect, device number 3 [ 91.675428][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.701546][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.721307][ T4905] loop4: detected capacity change from 0 to 512 [ 91.794339][ T4905] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.831110][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.833325][ T4905] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 91.844396][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.864645][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.885646][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.933023][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 91.994916][ T4691] device veth0_vlan entered promiscuous mode [ 92.021807][ T4691] device veth1_vlan entered promiscuous mode [ 92.096152][ T4919] loop3: detected capacity change from 0 to 128 [ 92.141451][ T4919] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 92.238778][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.253698][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.278299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.312443][ T4279] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 92.318190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.362616][ T4929] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 92.393280][ T4209] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.443657][ T4691] device veth0_macvtap entered promiscuous mode [ 92.457055][ T4927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 92.482415][ T4691] device veth1_macvtap entered promiscuous mode [ 92.581017][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.615850][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.634367][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.668636][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.693001][ T4209] usb 2-1: Using ep0 maxpacket: 8 [ 92.699525][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.716346][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.731818][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.763516][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.792880][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.832121][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.862999][ T4209] usb 2-1: config index 0 descriptor too short (expected 113, got 80) [ 92.877490][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.882772][ T4209] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 92.893548][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.905134][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.934121][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.936901][ T4209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.958264][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.975094][ T1111] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.990306][ T4209] usb 2-1: config 0 has no interface number 0 [ 93.021836][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.042348][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.056898][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.071674][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.087462][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.117495][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.136460][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.147652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.156886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.164742][ T4209] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 93.175068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.184691][ T4209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.193920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.206700][ T4209] usb 2-1: Product: syz [ 93.222624][ T4209] usb 2-1: Manufacturer: syz [ 93.230755][ T4209] usb 2-1: SerialNumber: syz [ 93.233606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.253663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.272394][ T4209] usb 2-1: config 0 descriptor?? [ 93.307446][ T4691] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.345968][ T4691] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.355152][ T4691] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.363970][ T4691] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.403277][ T1111] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 93.418015][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.434619][ T1111] usb 5-1: config 0 has no interface number 0 [ 93.569640][ T2345] usb 2-1: USB disconnect, device number 4 [ 93.609632][ T4966] input: syz0 as /devices/virtual/input/input7 [ 93.627010][ T1111] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 93.651010][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.667640][ T1111] usb 5-1: Product: syz [ 93.672308][ T1111] usb 5-1: Manufacturer: syz [ 93.678007][ T1111] usb 5-1: SerialNumber: syz [ 93.715271][ T1111] usb 5-1: config 0 descriptor?? [ 93.767574][ T1111] cyberjack 5-1:0.69: required endpoints missing [ 93.920856][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.950490][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.979924][ T4942] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.008836][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.038632][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.074532][ T4407] usb 5-1: USB disconnect, device number 4 [ 94.084472][ T479] device hsr_slave_0 left promiscuous mode [ 94.118811][ T479] device hsr_slave_1 left promiscuous mode [ 94.135519][ T479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.152075][ T479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.180061][ T479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.200992][ T479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.218978][ T479] device bridge_slave_1 left promiscuous mode [ 94.230509][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.310924][ T479] device bridge_slave_0 left promiscuous mode [ 94.339340][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.455323][ T479] device veth1_macvtap left promiscuous mode [ 94.461900][ T479] device veth0_macvtap left promiscuous mode [ 94.481835][ T479] device veth1_vlan left promiscuous mode [ 94.488158][ T479] device veth0_vlan left promiscuous mode [ 94.552898][ T4999] loop3: detected capacity change from 0 to 1024 [ 95.417017][ T5009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 95.566912][ T5017] loop4: detected capacity change from 0 to 1024 [ 95.633476][ T5017] EXT4-fs (loop4): Ignoring removed orlov option [ 95.680513][ T5017] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 95.707036][ T5023] loop3: detected capacity change from 0 to 2048 [ 95.736591][ T479] team0 (unregistering): Port device team_slave_1 removed [ 95.753685][ T5017] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 95.777689][ T5023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.828043][ T479] team0 (unregistering): Port device team_slave_0 removed [ 95.884404][ T479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.905410][ T479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.957306][ T4403] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.496462][ T479] bond0 (unregistering): Released all slaves [ 96.770422][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.800319][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.108955][ T5050] loop1: detected capacity change from 0 to 32768 [ 97.224782][ T4403] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 97.239252][ T4403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.276469][ T5054] loop3: detected capacity change from 0 to 2048 [ 97.304046][ T4403] usb 1-1: config 0 has no interface number 0 [ 97.484278][ T4403] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 97.505976][ T4403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.526886][ T4403] usb 1-1: Product: syz [ 97.545518][ T4403] usb 1-1: Manufacturer: syz [ 97.555444][ T4403] usb 1-1: SerialNumber: syz [ 97.660058][ T4403] usb 1-1: config 0 descriptor?? [ 97.702067][ T4403] cyberjack 1-1:0.69: required endpoints missing [ 97.836605][ T5050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.238 (5050) [ 97.880798][ T5050] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 97.889981][ T5050] BTRFS info (device loop1): using free space tree [ 97.896617][ T5050] BTRFS info (device loop1): has skinny extents [ 97.915209][ T5025] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.949318][ T5054] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.011599][ T4403] usb 1-1: USB disconnect, device number 4 [ 98.186082][ T5097] loop5: detected capacity change from 0 to 8 [ 98.352829][ T5050] BTRFS info (device loop1): enabling ssd optimizations [ 98.413472][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 98.413488][ T26] audit: type=1800 audit(1734713915.450:89): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.238" name="file1" dev="loop1" ino=261 res=0 errno=0 [ 98.466731][ T5050] BTRFS error (device loop1): unrecognized mount option '' [ 98.543846][ T5111] loop4: detected capacity change from 0 to 512 [ 98.788847][ T5111] EXT4-fs (loop4): Ignoring removed nobh option [ 98.799570][ T5111] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 98.883220][ T5111] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,mblk_io_submit,dioread_nolock,,errors=continue. Quota mode: writeback. [ 98.947732][ T5123] loop5: detected capacity change from 0 to 8 [ 99.302923][ T26] audit: type=1800 audit(1734713916.395:90): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.247" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 99.453829][ T26] audit: type=1800 audit(1734713916.395:91): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.247" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 99.468933][ T5139] tipc: Started in network mode [ 99.564953][ T5139] tipc: Node identity 6, cluster identity 4711 [ 99.617785][ T5139] tipc: Node number set to 6 [ 100.419880][ T4403] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.777948][ T4403] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 100.796345][ T4403] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.844373][ T4403] usb 5-1: config 0 has no interface number 0 [ 100.996626][ T4403] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 101.005708][ T4403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.084776][ T4403] usb 5-1: Product: syz [ 101.099109][ T4403] usb 5-1: Manufacturer: syz [ 101.130220][ T4403] usb 5-1: SerialNumber: syz [ 101.138322][ T4403] usb 5-1: config 0 descriptor?? [ 101.208721][ T4403] cyberjack 5-1:0.69: required endpoints missing [ 101.321107][ T5211] loop1: detected capacity change from 0 to 256 [ 101.416567][ T5211] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 101.430594][ T4403] usb 5-1: USB disconnect, device number 5 [ 101.709807][ T5222] loop1: detected capacity change from 0 to 512 [ 101.918401][ T5222] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.988053][ T5222] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.169498][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 103.009442][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 103.209666][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 103.389922][ T4403] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.517334][ T2345] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.575809][ T5270] loop5: detected capacity change from 0 to 2048 [ 103.713320][ T5270] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.741955][ T4403] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.759215][ T2345] usb 5-1: Using ep0 maxpacket: 16 [ 103.785157][ T4403] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.883249][ T2345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.911162][ T2345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.911578][ T4403] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.920927][ T2345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 103.920982][ T2345] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 103.921007][ T2345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.951307][ T2345] usb 5-1: config 0 descriptor?? [ 104.069475][ T4403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.097510][ T4403] usb 2-1: SerialNumber: syz [ 104.402396][ T4403] usb 2-1: 0:2 : does not exist [ 104.412621][ T4403] usb 2-1: unit 5 not found! [ 104.457031][ T2345] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 104.484408][ T2345] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 104.511921][ T4403] usb 2-1: USB disconnect, device number 5 [ 104.878525][ T2345] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 104.886745][ T2345] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 104.895236][ T2345] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 104.937533][ T2345] hid-generic 0003:0955:7214.0003: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 104.961594][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.008628][ T2345] usb 5-1: USB disconnect, device number 6 [ 105.330747][ T5311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.290'. [ 106.430211][ T5325] syz.4.294 uses obsolete (PF_INET,SOCK_PACKET) [ 106.467426][ T5325] tipc: Started in network mode [ 106.472340][ T5325] tipc: Node identity 7, cluster identity 4711 [ 106.501596][ T5325] tipc: Node number set to 7 [ 106.673017][ T5334] loop4: detected capacity change from 0 to 512 [ 106.702438][ T2345] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.805800][ T5315] loop3: detected capacity change from 0 to 32768 [ 106.821699][ T5334] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 106.880236][ T5339] Disabled LAPIC found during irq injection [ 106.918890][ T5334] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,data_err=abort,norecovery,norecovery,. Quota mode: writeback. [ 106.942510][ T5334] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.982739][ T5334] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.298: corrupted xattr block 32 [ 107.039591][ T5350] Zero length message leads to an empty skb [ 107.047643][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 107.101456][ T5334] EXT4-fs (loop4): Remounting filesystem read-only [ 107.339156][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 107.407440][ T2345] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 107.425017][ T2345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.657680][ T5360] loop3: detected capacity change from 0 to 32768 [ 107.664295][ T2345] usb 2-1: Product: syz [ 107.668803][ T2345] usb 2-1: Manufacturer: syz [ 107.673476][ T2345] usb 2-1: SerialNumber: syz [ 107.729654][ T2345] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 107.748400][ T5360] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.308 (5360) [ 107.812467][ T5360] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 107.821270][ T5360] BTRFS info (device loop3): using free space tree [ 107.821330][ T5360] BTRFS info (device loop3): has skinny extents [ 108.035681][ T4173] cgroup: fork rejected by pids controller in /syz4 [ 108.135301][ T5360] BTRFS info (device loop3): enabling ssd optimizations [ 108.231629][ T26] audit: type=1800 audit(1734713925.759:92): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.308" name="file1" dev="loop3" ino=261 res=0 errno=0 [ 108.286986][ T5360] BTRFS error (device loop3): unrecognized mount option '. [ 108.286986][ T5360] #)|:fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 108.286986][ T5360] ://8x'+?[e\J銹95/' [ 108.556248][ T5124] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.648367][ T479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.794441][ T479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.897604][ T479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.006340][ T4720] usb 2-1: USB disconnect, device number 6 [ 109.019321][ T479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.028492][ T5418] loop5: detected capacity change from 0 to 64 [ 109.093367][ T4403] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.112312][ T4721] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.243499][ T5413] chnl_net:caif_netlink_parms(): no params data found [ 109.341053][ T4403] usb 1-1: Using ep0 maxpacket: 8 [ 109.349524][ T479] tipc: Left network mode [ 109.459901][ T4403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.471132][ T4403] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 109.514215][ T4403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.523567][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.530697][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.548212][ T4403] usb 1-1: config 0 descriptor?? [ 109.563497][ T5413] device bridge_slave_0 entered promiscuous mode [ 109.586495][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.594138][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.601645][ T5124] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 109.602147][ T5124] ath9k_htc: Failed to initialize the device [ 109.613680][ T4403] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 109.623470][ T5413] device bridge_slave_1 entered promiscuous mode [ 109.624944][ T4720] usb 2-1: ath9k_htc: USB layer deinitialized [ 109.664527][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.674359][ T4721] usb 4-1: config 0 has no interfaces? [ 109.682077][ T4721] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 109.694374][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.710561][ T4721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.749771][ T4721] usb 4-1: config 0 descriptor?? [ 109.803307][ T5413] team0: Port device team_slave_0 added [ 109.824260][ T5413] team0: Port device team_slave_1 added [ 109.889256][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.909474][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.935885][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.943043][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.973244][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.988889][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.014832][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.023090][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.096156][ T2345] usb 4-1: USB disconnect, device number 4 [ 110.121864][ T5413] device hsr_slave_0 entered promiscuous mode [ 110.144339][ T5413] device hsr_slave_1 entered promiscuous mode [ 110.277728][ T4720] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.541258][ T4720] usb 2-1: Using ep0 maxpacket: 16 [ 110.686001][ T4720] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 110.704544][ T4720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.739336][ T4720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.750285][ T5449] loop5: detected capacity change from 0 to 32768 [ 110.769254][ T479] device hsr_slave_0 left promiscuous mode [ 110.776669][ T479] device hsr_slave_1 left promiscuous mode [ 110.811886][ T479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.820118][ T479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.829033][ T479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.850714][ T479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.872592][ T479] device bridge_slave_1 left promiscuous mode [ 110.880024][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.889776][ T479] device bridge_slave_0 left promiscuous mode [ 110.894141][ T2345] Bluetooth: hci3: command 0x0409 tx timeout [ 110.896899][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.928427][ T479] device veth1_macvtap left promiscuous mode [ 110.935046][ T479] device veth0_macvtap left promiscuous mode [ 110.941840][ T4720] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.943411][ T479] device veth1_vlan left promiscuous mode [ 110.952967][ T4720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.956986][ T479] device veth0_vlan left promiscuous mode [ 110.971480][ T4720] usb 2-1: Product: syz [ 110.975743][ T4720] usb 2-1: Manufacturer: syz [ 110.980920][ T4720] usb 2-1: SerialNumber: syz [ 111.416059][ T479] team0 (unregistering): Port device team_slave_1 removed [ 111.425367][ T4720] usb 2-1: 0:2 : does not exist [ 111.445658][ T479] team0 (unregistering): Port device team_slave_0 removed [ 111.473877][ T479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.477400][ T2345] usb 1-1: USB disconnect, device number 5 [ 111.515337][ T479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.601904][ T4403] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.624871][ T479] bond0 (unregistering): Released all slaves [ 111.836906][ T4403] usb 6-1: Using ep0 maxpacket: 8 [ 111.920374][ T5489] loop3: detected capacity change from 0 to 128 [ 111.941821][ T5413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.953245][ T5413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.998306][ T5413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.037599][ T5413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.103932][ T4403] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 112.113016][ T4403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.130266][ T4403] usb 6-1: Product: syz [ 112.178713][ T4403] usb 6-1: Manufacturer: syz [ 112.188647][ T4403] usb 6-1: SerialNumber: syz [ 112.219747][ T4403] usb 6-1: config 0 descriptor?? [ 112.232976][ T5497] loop3: detected capacity change from 0 to 512 [ 112.284274][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.300399][ T5497] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.343656][ T5497] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 112.348938][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.371616][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.389377][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.397685][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.398649][ T5497] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 112.406671][ T4721] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 112.424996][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.433727][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.440859][ T4216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.449490][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.459885][ T5497] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 112.469321][ T5497] System zones: 0-2, 18-18, 34-34 [ 112.475215][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.489874][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.498831][ T5497] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 112.503773][ T4403] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.530353][ T4720] usb 2-1: USB disconnect, device number 7 [ 112.550149][ T5497] EXT4-fs (loop3): 1 truncate cleaned up [ 112.556310][ T5497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.566174][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.598166][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.605404][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.619089][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.676270][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.727578][ T26] audit: type=1800 audit(1734713930.420:93): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.341" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 112.763985][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.811446][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.876702][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.911144][ T5124] Bluetooth: hci3: command 0x041b tx timeout [ 113.046049][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.054953][ T4721] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 113.084600][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.105525][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 113.129693][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.161517][ T4721] usb 1-1: config 0 descriptor?? [ 113.214006][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.235406][ T4721] pwc: Samsung MPC-C10 USB webcam detected. [ 113.262383][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.312198][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.321578][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.334321][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.427374][ T4721] pwc: send_video_command error -71 [ 113.433047][ T4721] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 113.459864][ T4721] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 113.481203][ T4721] usb 1-1: USB disconnect, device number 6 [ 113.625054][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.642779][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.690236][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.883452][ T5539] loop3: detected capacity change from 0 to 8 [ 113.972369][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.995331][ T5539] SQUASHFS error: lzo decompression failed, data probably corrupt [ 114.006529][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.024107][ T5539] SQUASHFS error: Failed to read block 0x91: -5 [ 114.032052][ T5539] SQUASHFS error: Unable to read metadata cache entry [8f] [ 114.040004][ T5539] SQUASHFS error: Unable to read inode 0x11f [ 114.049337][ T4721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.060344][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.069804][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.081664][ T5413] device veth0_vlan entered promiscuous mode [ 114.095631][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.158580][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.193608][ T5413] device veth1_vlan entered promiscuous mode [ 114.220073][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.230331][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.239884][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.249200][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.263271][ T5413] device veth0_macvtap entered promiscuous mode [ 114.283217][ T5413] device veth1_macvtap entered promiscuous mode [ 114.310667][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.330659][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.341590][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.358544][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.385482][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.404755][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.415718][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.432652][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.445067][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.456549][ T4721] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 114.470062][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.475658][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.487883][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.500760][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.507309][ T4721] usb 1-1: config 0 descriptor?? [ 114.526241][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.551496][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.568679][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.583651][ T4721] pwc: Samsung MPC-C10 USB webcam detected. [ 114.588005][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.606828][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.617082][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.636607][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.653331][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.677665][ T4403] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 114.708659][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.712238][ T4403] usb 6-1: USB disconnect, device number 2 [ 114.740034][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.778964][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.796739][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.832537][ T5413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.851247][ T5413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.860458][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 114.886219][ T5413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.913725][ T5413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.991629][ T4721] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.046955][ T4721] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.089147][ T4786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.099677][ T4721] pwc: recv_control_msg error -32 req 04 val 1700 [ 115.121237][ T4786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.142061][ T4721] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.171755][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.180017][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.183702][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.195253][ T4721] pwc: recv_control_msg error -32 req 04 val 1000 [ 115.246791][ T4721] pwc: recv_control_msg error -32 req 04 val 1300 [ 115.251263][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.294899][ T4721] pwc: recv_control_msg error -32 req 04 val 1400 [ 115.342480][ T4721] pwc: recv_control_msg error -32 req 02 val 2000 [ 115.344731][ T5554] loop5: detected capacity change from 0 to 512 [ 115.380517][ T4721] pwc: recv_control_msg error -32 req 02 val 2100 [ 115.415345][ T5548] mmap: syz.3.351 (5548) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 115.428231][ T4721] pwc: recv_control_msg error -71 req 02 val 2200 [ 115.448682][ T4721] pwc: recv_control_msg error -71 req 06 val 0600 [ 115.477649][ T4721] pwc: recv_control_msg error -71 req 04 val 1500 [ 115.493126][ T5554] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.504596][ T4721] pwc: recv_control_msg error -71 req 02 val 2500 [ 115.543254][ T4721] pwc: recv_control_msg error -71 req 02 val 2400 [ 115.557925][ T5554] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 115.571267][ T4721] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.601164][ T5554] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 115.619399][ T4721] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.638686][ T4721] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.669212][ T4721] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.677941][ T5554] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 115.690611][ T5554] System zones: 0-2, 18-18, 34-34 [ 115.695878][ T4721] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.706147][ T4721] pwc: Registered as video103. [ 115.712823][ T4721] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 115.729743][ T5554] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 115.747384][ T4721] usb 1-1: USB disconnect, device number 7 [ 115.775901][ T5554] EXT4-fs (loop5): 1 truncate cleaned up [ 115.797500][ T5554] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.887062][ T26] audit: type=1800 audit(1734713933.800:94): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.353" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 116.838674][ T5124] Bluetooth: hci3: command 0x0419 tx timeout [ 117.184988][ T5598] loop5: detected capacity change from 0 to 512 [ 117.242978][ T5604] loop4: detected capacity change from 0 to 1024 [ 117.401924][ T5604] hfsplus: xattr searching failed [ 117.439574][ T5598] EXT4-fs (loop5): 1 orphan inode deleted [ 117.445356][ T5598] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.542661][ T5598] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.625484][ T4208] hfsplus: b-tree write err: -5, ino 3 [ 118.365352][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.367'. [ 118.378145][ T5634] loop4: detected capacity change from 0 to 512 [ 118.481014][ T5634] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.539227][ T5634] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 118.607909][ T5634] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 118.630764][ T5634] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 118.667211][ T5634] System zones: 0-2, 18-18, 34-34 [ 118.712440][ T5634] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 118.764729][ T5634] EXT4-fs (loop4): 1 truncate cleaned up [ 118.770242][ T5652] loop5: detected capacity change from 0 to 512 [ 118.770607][ T5634] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.796813][ T26] audit: type=1800 audit(1734713936.858:95): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.370" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 118.804993][ T5651] loop3: detected capacity change from 0 to 1024 [ 118.881812][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 119.646900][ T5651] hfsplus: xattr searching failed [ 119.684150][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 119.820159][ T4208] hfsplus: b-tree write err: -5, ino 3 [ 120.135833][ T5685] tipc: Started in network mode [ 120.140748][ T5685] tipc: Node identity 6, cluster identity 4711 [ 120.179871][ T5685] tipc: Node number set to 6 [ 120.440110][ T5703] loop5: detected capacity change from 0 to 8 [ 120.518113][ T5703] SQUASHFS error: lzo decompression failed, data probably corrupt [ 120.552112][ T5703] SQUASHFS error: Failed to read block 0x91: -5 [ 120.567582][ T5703] SQUASHFS error: Unable to read metadata cache entry [8f] [ 120.592975][ T5703] SQUASHFS error: Unable to read inode 0x11f [ 120.731220][ T5677] loop4: detected capacity change from 0 to 32768 [ 120.781690][ T4721] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.797980][ T5677] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.383 (5677) [ 120.992116][ T5677] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 121.017105][ T5677] BTRFS info (device loop4): using free space tree [ 121.039311][ T5677] BTRFS info (device loop4): has skinny extents [ 121.791102][ T5677] BTRFS info (device loop4): enabling ssd optimizations [ 121.893821][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 121.943415][ T4721] usb 4-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 121.978006][ T4721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.083988][ T26] audit: type=1800 audit(1734713940.302:96): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.383" name="file1" dev="loop4" ino=261 res=0 errno=0 [ 122.134338][ T4721] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.149851][ T4721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.201671][ T4721] usb 4-1: SerialNumber: syz [ 122.208252][ T5677] BTRFS error (device loop4): unrecognized mount option '. [ 122.208252][ T5677] #)|:fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 122.208252][ T5677] ://8x'+?[e\J銹95/' [ 122.518141][ T4721] usb 4-1: 0:2 : does not exist [ 122.580691][ T4721] usb 4-1: USB disconnect, device number 5 [ 122.609617][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.001160][ T4715] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.369297][ T4407] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.610929][ T4407] usb 6-1: device descriptor read/64, error -71 [ 123.943667][ T4407] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 124.145478][ T4407] usb 6-1: device descriptor read/64, error -71 [ 124.201179][ T4715] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 124.211133][ T4715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.221480][ T4715] usb 1-1: config 0 has no interface number 0 [ 124.238452][ T5814] loop4: detected capacity change from 0 to 1024 [ 124.258620][ T4407] usb usb6-port1: attempt power cycle [ 124.401081][ T4715] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=61.bd [ 124.410253][ T4715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.435495][ T5814] hfsplus: request for non-existent node 2048 in B*Tree [ 124.437596][ T4715] usb 1-1: Product: syz [ 124.456324][ T4715] usb 1-1: Manufacturer: syz [ 124.468724][ T4715] usb 1-1: SerialNumber: syz [ 124.484908][ T4715] usb 1-1: config 0 descriptor?? [ 124.555139][ T4715] usb 1-1: selecting invalid altsetting 3 [ 124.561290][ T4715] comedi comedi0: could not set alternate setting 3 in high speed [ 124.570509][ T4715] usbdux 1-1:0.24: driver 'usbdux' failed to auto-configure device. [ 124.573396][ T5814] hfsplus: request for non-existent node 2048 in B*Tree [ 124.585851][ T4715] usbdux: probe of 1-1:0.24 failed with error -22 [ 124.667983][ T4407] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 124.763027][ T4157] usb 1-1: USB disconnect, device number 8 [ 124.772487][ T4407] usb 6-1: device descriptor read/8, error -71 [ 125.029753][ T4407] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.129602][ T4407] usb 6-1: device descriptor read/8, error -71 [ 125.253347][ T4407] usb usb6-port1: unable to enumerate USB device [ 125.465589][ T5859] tipc: Started in network mode [ 125.471937][ T5859] tipc: Node identity 7, cluster identity 4711 [ 125.484192][ T5859] tipc: Node number set to 7 [ 126.485308][ T5872] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.558489][ T5875] loop5: detected capacity change from 0 to 512 [ 126.671962][ T5875] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 126.685611][ T5875] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.711772][ T5875] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 126.740326][ T4721] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.767933][ T4174] Bluetooth: Wrong link type (-71) [ 126.773321][ T5875] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.774649][ T4174] Bluetooth: hci1: link tx timeout [ 126.794455][ T4174] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.815052][ T5875] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 126.831591][ T5875] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.426: bg 0: block 40: padding at end of block bitmap is not set [ 126.862290][ T5875] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 126.882107][ T5875] EXT4-fs (loop5): 1 truncate cleaned up [ 126.887969][ T5875] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.002106][ T4721] usb 1-1: Using ep0 maxpacket: 8 [ 127.041211][ T5896] loop4: detected capacity change from 0 to 512 [ 127.144514][ T4721] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 127.174595][ T4721] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.194943][ T4721] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.210999][ T5896] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000029,minixdf,,errors=continue. Quota mode: writeback. [ 127.239884][ T5896] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.247408][ T4721] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.268050][ T4721] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.281648][ T4721] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.291204][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.370979][ T5896] Trying to write to read-only block-device loop4 [ 127.414527][ T5896] Trying to write to read-only block-device loop4 [ 127.439890][ T5896] Trying to write to read-only block-device loop4 [ 127.455399][ T5896] Trying to write to read-only block-device loop4 [ 127.464178][ T4715] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 127.474432][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 127.483929][ T5896] Trying to write to read-only block-device loop4 [ 127.506698][ T5896] Trying to write to read-only block-device loop4 [ 127.543771][ T5896] Trying to write to read-only block-device loop4 [ 127.550657][ T5896] Trying to write to read-only block-device loop4 [ 127.563510][ T4721] usb 1-1: usb_control_msg returned -32 [ 127.569496][ T4721] usbtmc 1-1:16.0: can't read capabilities [ 127.768944][ T5413] Trying to write to read-only block-device loop4 [ 127.789248][ T5413] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.849757][ T4715] usb 6-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 127.883794][ T4715] usb 6-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 127.921934][ T4715] usb 6-1: config 1 interface 0 has no altsetting 0 [ 127.973145][ T5909] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 128.003470][ T4400] usb 1-1: USB disconnect, device number 9 [ 128.068887][ T4721] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.098538][ T4715] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 128.125334][ T4715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.160764][ T4715] usb 6-1: Product: syz [ 128.170962][ T4715] usb 6-1: Manufacturer: syz [ 128.175963][ T4715] usb 6-1: SerialNumber: syz [ 128.258813][ T4721] usb 2-1: device descriptor read/64, error -71 [ 128.535449][ T4721] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.725608][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 128.747037][ T4721] usb 2-1: device descriptor read/64, error -71 [ 128.860471][ T4721] usb usb2-port1: attempt power cycle [ 128.871644][ T4715] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 129.256616][ T4721] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.281130][ T4715] usb 6-1: USB disconnect, device number 7 [ 129.294638][ T4715] usblp0: removed [ 129.363961][ T4721] usb 2-1: device descriptor read/8, error -71 [ 129.515016][ T26] audit: type=1326 audit(1734713948.102:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b476d29 code=0x7ffc0000 [ 129.573787][ T26] audit: type=1326 audit(1734713948.102:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b476d29 code=0x7ffc0000 [ 129.621313][ T4721] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.629033][ T26] audit: type=1326 audit(1734713948.144:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad3b476d29 code=0x7ffc0000 [ 129.686320][ T5935] loop3: detected capacity change from 0 to 32768 [ 129.693057][ T26] audit: type=1326 audit(1734713948.144:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b476d29 code=0x7ffc0000 [ 129.728048][ T26] audit: type=1326 audit(1734713948.144:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b476d29 code=0x7ffc0000 [ 129.767329][ T5935] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.447 (5935) [ 129.785401][ T26] audit: type=1326 audit(1734713948.144:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad3b476d29 code=0x7ffc0000 [ 129.801264][ T4721] usb 2-1: device descriptor read/8, error -71 [ 129.839347][ T5935] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 129.873070][ T5935] BTRFS info (device loop3): using free space tree [ 129.897398][ T5935] BTRFS info (device loop3): has skinny extents [ 129.903809][ T26] audit: type=1326 audit(1734713948.144:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b476d29 code=0x7ffc0000 [ 129.942984][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.451'. [ 129.951150][ T5949] tipc: Failed to remove unknown binding: 66,1,1/6:518255541/518255543 [ 129.954951][ T4721] usb usb2-port1: unable to enumerate USB device [ 129.969260][ T26] audit: type=1326 audit(1734713948.144:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad3b46dce7 code=0x7ffc0000 [ 130.008199][ T5949] tipc: Failed to remove unknown binding: 66,1,1/6:518255541/518255543 [ 130.127166][ T26] audit: type=1326 audit(1734713948.144:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad3b412f29 code=0x7ffc0000 [ 130.225720][ T26] audit: type=1326 audit(1734713948.144:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad3b46dce7 code=0x7ffc0000 [ 130.311849][ T5935] BTRFS info (device loop3): enabling ssd optimizations [ 130.554795][ T5935] BTRFS error (device loop3): unrecognized mount option '. [ 130.554795][ T5935] #)|:fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 130.554795][ T5935] ://8x'+?[e\J銹95/' [ 130.853117][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.866742][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.469182][ T4799] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 131.690586][ T4721] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 131.698651][ T4799] usb 6-1: Using ep0 maxpacket: 16 [ 131.821482][ T4799] usb 6-1: config 0 has no interfaces? [ 131.868936][ T4400] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.926473][ T4721] usb 1-1: Using ep0 maxpacket: 16 [ 131.974205][ T4799] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 131.983392][ T4799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.992269][ T4799] usb 6-1: Product: syz [ 131.996951][ T5900] Trying to write to read-only block-device loop4 [ 132.006088][ T4799] usb 6-1: Manufacturer: syz [ 132.010885][ T4799] usb 6-1: SerialNumber: syz [ 132.027244][ T4799] r8152-cfgselector 6-1: config 0 descriptor?? [ 132.050098][ T4400] usb 4-1: device descriptor read/64, error -71 [ 132.269340][ T4721] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 132.282351][ T4799] r8152-cfgselector 6-1: Unknown version 0x0000 [ 132.308084][ T4721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.329941][ T4721] usb 1-1: Product: syz [ 132.334144][ T4721] usb 1-1: Manufacturer: syz [ 132.349041][ T4721] usb 1-1: SerialNumber: syz [ 132.355142][ T4400] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.371608][ T4721] usb 1-1: config 0 descriptor?? [ 132.432558][ T4721] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 132.536035][ T4400] usb 4-1: device descriptor read/64, error -71 [ 132.650578][ T4400] usb usb4-port1: attempt power cycle [ 132.840738][ T4721] ssu100: probe of 1-1:0.0 failed with error -71 [ 132.854061][ T4721] usb 1-1: USB disconnect, device number 10 [ 133.045703][ T4400] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.146039][ T4400] usb 4-1: device descriptor read/8, error -71 [ 133.402604][ T4400] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.507572][ T4400] usb 4-1: device descriptor read/8, error -71 [ 133.621917][ T4400] usb usb4-port1: unable to enumerate USB device [ 133.631298][ T4721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.869318][ T4721] usb 1-1: Using ep0 maxpacket: 8 [ 133.993647][ T4721] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.037551][ T4721] usb 1-1: config 179 has no interface number 0 [ 134.100243][ T4721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 134.157444][ T4721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 134.220648][ T4721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.302074][ T4721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 134.393611][ T4721] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.452306][ T4721] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.519081][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.559982][ T1111] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 134.593909][ T6024] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 134.849560][ T1111] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 134.870152][ T1111] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 134.888243][ T6052] loop5: detected capacity change from 0 to 128 [ 134.910722][ T1111] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 135.052224][ T4400] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.111200][ T6056] loop3: detected capacity change from 0 to 2048 [ 135.217185][ T1111] usb 1-1: USB disconnect, device number 11 [ 135.223208][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 135.223301][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.281956][ T4400] usb 2-1: Using ep0 maxpacket: 8 [ 135.303333][ T6056] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.575364][ T4715] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 135.603521][ T4400] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 135.616911][ T4400] usb 2-1: config 0 has no interface number 0 [ 135.623213][ T4400] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 135.641336][ T4400] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 135.652726][ T4400] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.786380][ T4715] usb 6-1: device descriptor read/64, error -71 [ 135.812769][ T4400] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 135.821847][ T4400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.849222][ T4400] usb 2-1: Product: syz [ 135.860321][ T4400] usb 2-1: Manufacturer: syz [ 135.865228][ T4400] usb 2-1: SerialNumber: syz [ 135.879088][ T6071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.492'. [ 135.898012][ T4400] usb 2-1: config 0 descriptor?? [ 135.939238][ T4400] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 136.069818][ T4715] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 136.270006][ T4715] usb 6-1: device descriptor read/64, error -71 [ 136.337568][ T4799] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.397749][ T4715] usb usb6-port1: attempt power cycle [ 136.584203][ T4799] usb 1-1: Using ep0 maxpacket: 16 [ 136.631771][ T4409] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 136.698535][ T4799] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 136.710173][ T4799] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.724632][ T4799] usb 1-1: config 0 has no interface number 0 [ 136.784540][ T4715] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 136.793800][ T5900] Trying to write to read-only block-device loop4 [ 136.870306][ T4715] usb 6-1: device descriptor read/8, error -71 [ 136.879756][ T4799] usb 1-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 136.893511][ T4799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.904677][ T4799] usb 1-1: Product: syz [ 136.913513][ T4799] usb 1-1: Manufacturer: syz [ 136.920940][ T4799] usb 1-1: SerialNumber: syz [ 136.942155][ T4799] usb 1-1: config 0 descriptor?? [ 136.984525][ T4409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.007595][ T4409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.017657][ T4799] rndis_wlan 1-1:0.195: More than one union descriptor, skipping ... [ 137.033195][ T4799] usb 1-1: bad CDC descriptors [ 137.038324][ T4409] usb 4-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13 [ 137.056044][ T4409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.064899][ T4799] rndis_host 1-1:0.195: More than one union descriptor, skipping ... [ 137.080964][ T4799] usb 1-1: bad CDC descriptors [ 137.087408][ T4799] cdc_acm 1-1:0.195: More than one union descriptor, skipping ... [ 137.114705][ T4409] usb 4-1: config 0 descriptor?? [ 137.127515][ T4715] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 137.195914][ T1111] usb 1-1: USB disconnect, device number 12 [ 137.213397][ T4715] usb 6-1: device descriptor read/8, error -71 [ 137.327759][ T4715] usb usb6-port1: unable to enumerate USB device [ 137.576062][ T4409] hid (null): bogus close delimiter [ 137.593182][ T4409] wacom 0003:056A:7A26.0005: bogus close delimiter [ 137.602064][ T4409] wacom 0003:056A:7A26.0005: item 0 2 2 10 parsing failed [ 137.616684][ T4409] wacom 0003:056A:7A26.0005: parse failed [ 137.625545][ T4409] wacom: probe of 0003:056A:7A26.0005 failed with error -22 [ 137.675071][ T4409] usb 2-1: USB disconnect, device number 12 [ 137.769478][ T4799] usb 4-1: USB disconnect, device number 10 [ 138.512332][ T6104] loop3: detected capacity change from 0 to 8 [ 138.632412][ T4409] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 138.688418][ T4166] SQUASHFS error: Unable to read directory block [631:72] [ 138.713200][ T4166] SQUASHFS error: Unable to read inode 0x0 [ 138.723384][ T4166] SQUASHFS error: Unable to read inode 0x0 [ 139.009793][ T4409] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 139.030466][ T4409] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.058355][ T4409] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.095647][ T4409] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.125084][ T4409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.182105][ T4409] usb 6-1: invalid MIDI out EP 0 [ 139.335296][ T4409] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 139.364942][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.396501][ T4409] usb 6-1: USB disconnect, device number 13 [ 139.442784][ T4208] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.533926][ T4208] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.621822][ T4208] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.698916][ T4208] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.794695][ T4715] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.802991][ T4725] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.070555][ T4725] usb 2-1: Using ep0 maxpacket: 8 [ 140.109446][ T4715] usb 1-1: no configurations [ 140.114092][ T4715] usb 1-1: can't read configurations, error -22 [ 140.203019][ T6117] chnl_net:caif_netlink_parms(): no params data found [ 140.290141][ T4715] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.387446][ T4725] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.399000][ T4725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.402571][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.407594][ T4725] usb 2-1: Product: syz [ 140.419120][ T4725] usb 2-1: Manufacturer: syz [ 140.424366][ T4725] usb 2-1: SerialNumber: syz [ 140.438914][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.439892][ T4725] usb 2-1: config 0 descriptor?? [ 140.453137][ T6117] device bridge_slave_0 entered promiscuous mode [ 140.468880][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.486823][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.507295][ T6117] device bridge_slave_1 entered promiscuous mode [ 140.585197][ T4715] usb 1-1: no configurations [ 140.589840][ T4715] usb 1-1: can't read configurations, error -22 [ 140.605850][ T4715] usb usb1-port1: attempt power cycle [ 140.619637][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.653837][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.718736][ T4725] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.821518][ T6117] team0: Port device team_slave_0 added [ 140.839279][ T6117] team0: Port device team_slave_1 added [ 141.023186][ T4715] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.035419][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.051980][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.077936][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.114553][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.156595][ T4715] usb 1-1: no configurations [ 141.161349][ T4715] usb 1-1: can't read configurations, error -22 [ 141.235215][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.256255][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.282193][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.318362][ T4715] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 141.326923][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.442307][ T6147] loop5: detected capacity change from 0 to 8 [ 141.452171][ T4715] usb 1-1: no configurations [ 141.457440][ T4715] usb 1-1: can't read configurations, error -22 [ 141.464482][ T4715] usb usb1-port1: unable to enumerate USB device [ 141.596369][ T5900] Trying to write to read-only block-device loop4 [ 141.628242][ T6117] device hsr_slave_0 entered promiscuous mode [ 141.646045][ T6117] device hsr_slave_1 entered promiscuous mode [ 141.648273][ T4691] SQUASHFS error: Unable to read directory block [631:72] [ 141.662508][ T6117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.668713][ T4691] SQUASHFS error: Unable to read inode 0x0 [ 141.670205][ T6117] Cannot create hsr debugfs directory [ 141.676652][ T4715] Bluetooth: hci0: command 0x0409 tx timeout [ 141.691548][ T4691] SQUASHFS error: Unable to read inode 0x0 [ 141.731891][ T4208] device hsr_slave_0 left promiscuous mode [ 141.750505][ T4208] device hsr_slave_1 left promiscuous mode [ 141.767118][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.774739][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.795925][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.816267][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.826320][ T4208] device bridge_slave_1 left promiscuous mode [ 141.836529][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.864696][ T4208] device bridge_slave_0 left promiscuous mode [ 141.870951][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.923206][ T4208] device veth1_macvtap left promiscuous mode [ 141.938341][ T4208] device veth0_macvtap left promiscuous mode [ 142.213907][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 142.234893][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 142.271899][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.302362][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.482838][ T4208] bond0 (unregistering): Released all slaves [ 142.688479][ T4725] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 142.706019][ T4725] usb 2-1: USB disconnect, device number 13 [ 143.008501][ T5413] Trying to write to read-only block-device loop4 [ 143.039051][ T5413] Trying to write to read-only block-device loop4 [ 143.084524][ T5413] Trying to write to read-only block-device loop4 [ 143.099344][ T5413] Trying to write to read-only block-device loop4 [ 143.127598][ T5413] Trying to write to read-only block-device loop4 [ 143.141297][ T5413] Trying to write to read-only block-device loop4 [ 143.195527][ T5413] Trying to write to read-only block-device loop4 [ 143.241403][ T5900] Trying to write to read-only block-device loop4 [ 143.264785][ T6117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.310926][ T6117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.363023][ T6117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.419947][ T6168] chnl_net:caif_netlink_parms(): no params data found [ 143.451352][ T6117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.656172][ T4715] Bluetooth: hci0: command 0x041b tx timeout [ 143.779181][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.794573][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.812743][ T6168] device bridge_slave_0 entered promiscuous mode [ 143.841540][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.867833][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.888248][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.916533][ T6168] device bridge_slave_1 entered promiscuous mode [ 143.961601][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.998452][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.012644][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.071559][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.100634][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.132175][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.139378][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.172659][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.197830][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.218186][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.225324][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.234707][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.259550][ T6168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.294283][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.313456][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.332525][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.354564][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.421785][ T6168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.461813][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.478528][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.517945][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.554844][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.580507][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.599213][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.626116][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.695001][ T4400] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 144.719820][ T4725] Bluetooth: hci3: command 0x0409 tx timeout [ 144.745496][ T6168] team0: Port device team_slave_0 added [ 144.755656][ T6168] team0: Port device team_slave_1 added [ 144.826539][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.833515][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.878803][ T6168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.901493][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 144.923414][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.938489][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.970638][ T6168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.981802][ T4400] usb 2-1: no configurations [ 144.986677][ T4400] usb 2-1: can't read configurations, error -22 [ 145.059084][ T6168] device hsr_slave_0 entered promiscuous mode [ 145.080484][ T6168] device hsr_slave_1 entered promiscuous mode [ 145.104150][ T6168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.112397][ T6168] Cannot create hsr debugfs directory [ 145.141791][ T4400] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 145.238873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.253692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.277033][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.303480][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.319543][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.337780][ T6192] device bridge_slave_0 entered promiscuous mode [ 145.369833][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.395675][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.414165][ T6192] device bridge_slave_1 entered promiscuous mode [ 145.443343][ T4400] usb 2-1: no configurations [ 145.461509][ T4400] usb 2-1: can't read configurations, error -22 [ 145.468732][ T4400] usb usb2-port1: attempt power cycle [ 145.509051][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.534835][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.567377][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 145.614949][ T4715] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 145.644049][ T5777] Bluetooth: hci0: command 0x040f tx timeout [ 145.677341][ T6192] team0: Port device team_slave_0 added [ 145.706300][ T6192] team0: Port device team_slave_1 added [ 145.770253][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.777299][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.803775][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.828990][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.852994][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.880633][ T4715] usb 1-1: Using ep0 maxpacket: 16 [ 145.881050][ T4400] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 145.887297][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.907490][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.918503][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.002100][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.015691][ T4715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.034143][ T4715] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.034609][ T4400] usb 2-1: no configurations [ 146.049249][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.071215][ T4400] usb 2-1: can't read configurations, error -22 [ 146.080369][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.101163][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.141632][ T6117] device veth0_vlan entered promiscuous mode [ 146.166377][ T6192] device hsr_slave_0 entered promiscuous mode [ 146.183016][ T6192] device hsr_slave_1 entered promiscuous mode [ 146.189564][ T4715] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 146.198966][ T4715] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 146.207988][ T4715] usb 1-1: Manufacturer: syz [ 146.212699][ T4715] usb 1-1: SerialNumber: syz [ 146.219820][ T6192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.233708][ T4400] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 146.239431][ T4715] usb 1-1: config 0 descriptor?? [ 146.246778][ T6192] Cannot create hsr debugfs directory [ 146.268236][ T6117] device veth1_vlan entered promiscuous mode [ 146.301104][ T6168] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 146.345949][ T4208] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.366937][ T4400] usb 2-1: no configurations [ 146.373050][ T4400] usb 2-1: can't read configurations, error -22 [ 146.379852][ T4400] usb usb2-port1: unable to enumerate USB device [ 146.398359][ T6168] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 146.410281][ T6168] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 146.420669][ T6168] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 146.441226][ T4208] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.469615][ T6117] device veth0_macvtap entered promiscuous mode [ 146.489873][ T6117] device veth1_macvtap entered promiscuous mode [ 146.498263][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.507051][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.521642][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.531589][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.544134][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.545131][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.570859][ T4208] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.629758][ T1111] usb 1-1: USB disconnect, device number 17 [ 146.653990][ T4208] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.684410][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.695535][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.706594][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.710835][ T4715] Bluetooth: hci3: command 0x041b tx timeout [ 146.717218][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.734319][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.745266][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.755356][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.766000][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.783195][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.801724][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.811315][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.824107][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.836337][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.847495][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.859222][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.869232][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.879862][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.889985][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.901641][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.913403][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.931019][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.949583][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.986811][ T6117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.997200][ T6117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.006697][ T6117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.015569][ T6117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.176213][ T4208] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.275146][ T4785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.293766][ T4208] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.318827][ T4785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.350459][ T6168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.409406][ T4208] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.446439][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.500628][ T6168] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.523725][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.539101][ T5777] Bluetooth: hci4: command 0x041b tx timeout [ 147.549035][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.551022][ T6273] loop7: detected capacity change from 0 to 16384 [ 147.610333][ T4208] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.625904][ T4725] Bluetooth: hci0: command 0x0419 tx timeout [ 147.666145][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.686850][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.691422][ T6275] loop_set_status: loop7 () has still dirty pages (nrpages=48) [ 147.715919][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.723071][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.767250][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.789332][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.801500][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.808707][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.823308][ T4785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.846979][ T4785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.881903][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.905960][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.945672][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.972184][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.012078][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.035276][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.053412][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.125686][ T6168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.171755][ T6168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.215043][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.245050][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.263352][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.272814][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.313066][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.332592][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.349860][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.499691][ T6192] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 148.530374][ T6192] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 148.682488][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 148.776737][ T6282] loop6: detected capacity change from 0 to 32768 [ 148.836553][ T4208] tipc: Left network mode [ 148.841871][ T6192] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 148.878660][ T6282] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.512 (6282) [ 148.911965][ T6282] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 148.921019][ T6282] BTRFS info (device loop6): using free space tree [ 148.927563][ T6282] BTRFS info (device loop6): has skinny extents [ 148.953635][ T6192] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 148.992269][ T4208] tipc: Left network mode [ 149.234479][ T6168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.340832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.352241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.628193][ T6282] BTRFS info (device loop6): enabling ssd optimizations [ 149.706250][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 149.706267][ T26] audit: type=1800 audit(1734713969.308:117): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.512" name="file1" dev="loop6" ino=261 res=0 errno=0 [ 149.720221][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 149.810792][ T6282] BTRFS error (device loop6): unrecognized mount option '. [ 149.810792][ T6282] #)|:fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 149.810792][ T6282] ://8x'+?[e\J銹95/' [ 149.833165][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.943873][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.314043][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.337981][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.373056][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.420280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.441473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.487674][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.494974][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.520900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.589183][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.609441][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.628778][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.636223][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.652547][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.662565][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.671282][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 150.676830][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.686975][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.712539][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.729482][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.765909][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.810189][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.826213][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 150.826467][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.844136][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.852321][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.876070][ T6168] device veth0_vlan entered promiscuous mode [ 150.886516][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.908146][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.952512][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.979660][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.020315][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.038408][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.063082][ T6192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.086837][ T6168] device veth1_vlan entered promiscuous mode [ 151.120640][ T7] usb 7-1: no configurations [ 151.125282][ T7] usb 7-1: can't read configurations, error -22 [ 151.206954][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.226624][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.245954][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.264223][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.283621][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 151.327740][ T6168] device veth0_macvtap entered promiscuous mode [ 151.384200][ T6168] device veth1_macvtap entered promiscuous mode [ 151.497389][ T6360] [ 151.499747][ T6360] ====================================================== [ 151.506776][ T6360] WARNING: possible circular locking dependency detected [ 151.513792][ T6360] 5.15.175-syzkaller #0 Not tainted [ 151.519000][ T6360] ------------------------------------------------------ [ 151.526020][ T6360] syz.0.545/6360 is trying to acquire lock: [ 151.531906][ T6360] ffff888028ce0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 151.543109][ T6360] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 151.543109][ T6360] but task is already holding lock: [ 151.550485][ T6360] ffffffff8decdaa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 151.560183][ T6360] [ 151.560183][ T6360] which lock already depends on the new lock. [ 151.560183][ T6360] [ 151.570601][ T6360] [ 151.570601][ T6360] the existing dependency chain (in reverse order) is: [ 151.579627][ T6360] [ 151.579627][ T6360] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 151.587656][ T6360] lock_acquire+0x1db/0x4f0 [ 151.592708][ T6360] __mutex_lock_common+0x1da/0x25a0 [ 151.598452][ T6360] mutex_lock_nested+0x17/0x20 [ 151.603763][ T6360] rfkill_register+0x30/0x880 [ 151.608990][ T6360] hci_register_dev+0x4dd/0xa50 [ 151.614385][ T6360] vhci_create_device+0x310/0x590 [ 151.619963][ T6360] vhci_write+0x382/0x430 [ 151.624838][ T6360] vfs_write+0xacd/0xe50 [ 151.629627][ T6360] ksys_write+0x1a2/0x2c0 [ 151.634511][ T6360] do_syscall_64+0x3b/0xb0 [ 151.639470][ T6360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.645916][ T6360] [ 151.645916][ T6360] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 151.653769][ T6360] lock_acquire+0x1db/0x4f0 [ 151.658822][ T6360] __mutex_lock_common+0x1da/0x25a0 [ 151.664578][ T6360] mutex_lock_nested+0x17/0x20 [ 151.669898][ T6360] vhci_send_frame+0x8a/0xf0 [ 151.675037][ T6360] hci_send_frame+0x1af/0x2f0 [ 151.680276][ T6360] hci_tx_work+0xb2e/0x1a30 [ 151.685322][ T6360] process_one_work+0x8a1/0x10c0 [ 151.690815][ T6360] worker_thread+0xaca/0x1280 [ 151.696044][ T6360] kthread+0x3f6/0x4f0 [ 151.700658][ T6360] ret_from_fork+0x1f/0x30 [ 151.705622][ T6360] [ 151.705622][ T6360] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 151.714865][ T6360] lock_acquire+0x1db/0x4f0 [ 151.719919][ T6360] __flush_work+0xeb/0x1a0 [ 151.724891][ T6360] hci_dev_do_close+0x20a/0x1070 [ 151.730379][ T6360] hci_unregister_dev+0x2d7/0x580 [ 151.735956][ T6360] vhci_release+0x73/0xc0 [ 151.740837][ T6360] __fput+0x3fe/0x8e0 [ 151.745368][ T6360] task_work_run+0x129/0x1a0 [ 151.750521][ T6360] do_exit+0x6a3/0x2480 [ 151.755225][ T6360] do_group_exit+0x144/0x310 [ 151.760372][ T6360] __x64_sys_exit_group+0x3b/0x40 [ 151.765943][ T6360] do_syscall_64+0x3b/0xb0 [ 151.770909][ T6360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.777358][ T6360] [ 151.777358][ T6360] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 151.785039][ T6360] lock_acquire+0x1db/0x4f0 [ 151.790092][ T6360] __mutex_lock_common+0x1da/0x25a0 [ 151.795843][ T6360] mutex_lock_nested+0x17/0x20 [ 151.801200][ T6360] bg_scan_update+0xa1/0x4a0 [ 151.806359][ T6360] process_one_work+0x8a1/0x10c0 [ 151.811847][ T6360] worker_thread+0xaca/0x1280 [ 151.817078][ T6360] kthread+0x3f6/0x4f0 [ 151.821700][ T6360] ret_from_fork+0x1f/0x30 [ 151.826673][ T6360] [ 151.826673][ T6360] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 151.836517][ T6360] validate_chain+0x1649/0x5930 [ 151.841919][ T6360] __lock_acquire+0x1295/0x1ff0 [ 151.847318][ T6360] lock_acquire+0x1db/0x4f0 [ 151.852371][ T6360] __flush_work+0xeb/0x1a0 [ 151.857334][ T6360] __cancel_work_timer+0x519/0x6a0 [ 151.862989][ T6360] hci_request_cancel_all+0xcb/0x300 [ 151.868954][ T6360] hci_dev_do_close+0x51/0x1070 [ 151.874362][ T6360] hci_rfkill_set_block+0x114/0x1a0 [ 151.880124][ T6360] rfkill_set_block+0x1e7/0x430 [ 151.885524][ T6360] rfkill_fop_write+0x5b7/0x790 [ 151.890928][ T6360] vfs_write+0x30c/0xe50 [ 151.895719][ T6360] ksys_write+0x1a2/0x2c0 [ 151.900597][ T6360] do_syscall_64+0x3b/0xb0 [ 151.905560][ T6360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.912009][ T6360] [ 151.912009][ T6360] other info that might help us debug this: [ 151.912009][ T6360] [ 151.922247][ T6360] Chain exists of: [ 151.922247][ T6360] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 151.922247][ T6360] [ 151.938095][ T6360] Possible unsafe locking scenario: [ 151.938095][ T6360] [ 151.945555][ T6360] CPU0 CPU1 [ 151.950912][ T6360] ---- ---- [ 151.956266][ T6360] lock(rfkill_global_mutex); [ 151.961030][ T6360] lock(&data->open_mutex); [ 151.968151][ T6360] lock(rfkill_global_mutex); [ 151.975443][ T6360] lock((work_completion)(&hdev->bg_scan_update)); [ 151.982027][ T6360] [ 151.982027][ T6360] *** DEADLOCK *** [ 151.982027][ T6360] [ 151.990163][ T6360] 1 lock held by syz.0.545/6360: [ 151.995086][ T6360] #0: ffffffff8decdaa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 152.005180][ T6360] [ 152.005180][ T6360] stack backtrace: [ 152.011097][ T6360] CPU: 0 PID: 6360 Comm: syz.0.545 Not tainted 5.15.175-syzkaller #0 [ 152.019162][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 152.029235][ T6360] Call Trace: [ 152.032515][ T6360] [ 152.035445][ T6360] dump_stack_lvl+0x1e3/0x2d0 [ 152.040138][ T6360] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 152.045772][ T6360] ? print_circular_bug+0x12b/0x1a0 [ 152.050967][ T6360] check_noncircular+0x2f8/0x3b0 [ 152.055909][ T6360] ? add_chain_block+0x850/0x850 [ 152.060840][ T6360] ? lockdep_lock+0x11f/0x2a0 [ 152.065507][ T6360] ? _find_first_zero_bit+0xcf/0xf0 [ 152.070695][ T6360] validate_chain+0x1649/0x5930 [ 152.075545][ T6360] ? reacquire_held_locks+0x660/0x660 [ 152.080909][ T6360] ? mark_lock+0x98/0x340 [ 152.085230][ T6360] ? look_up_lock_class+0x77/0x120 [ 152.090345][ T6360] ? register_lock_class+0x100/0x9a0 [ 152.095652][ T6360] ? mark_lock+0x98/0x340 [ 152.099976][ T6360] ? is_dynamic_key+0x1f0/0x1f0 [ 152.104930][ T6360] ? __lock_acquire+0x1295/0x1ff0 [ 152.109946][ T6360] ? mark_lock+0x98/0x340 [ 152.114268][ T6360] __lock_acquire+0x1295/0x1ff0 [ 152.119113][ T6360] lock_acquire+0x1db/0x4f0 [ 152.123775][ T6360] ? __flush_work+0xcf/0x1a0 [ 152.128374][ T6360] ? rcu_lock_release+0x5/0x20 [ 152.133131][ T6360] ? read_lock_is_recursive+0x10/0x10 [ 152.138501][ T6360] ? start_flush_work+0x776/0x820 [ 152.143529][ T6360] __flush_work+0xeb/0x1a0 [ 152.147939][ T6360] ? __flush_work+0xcf/0x1a0 [ 152.152516][ T6360] ? flush_work+0x20/0x20 [ 152.156864][ T6360] ? print_irqtrace_events+0x210/0x210 [ 152.162331][ T6360] ? lock_timer_base+0x260/0x260 [ 152.167264][ T6360] ? __cancel_work_timer+0x467/0x6a0 [ 152.172537][ T6360] __cancel_work_timer+0x519/0x6a0 [ 152.177644][ T6360] ? cancel_work_sync+0x20/0x20 [ 152.182486][ T6360] ? lockdep_hardirqs_on+0x94/0x130 [ 152.187684][ T6360] ? __cancel_work+0x2ef/0x380 [ 152.192464][ T6360] ? cancel_work+0x20/0x20 [ 152.196876][ T6360] ? print_irqtrace_events+0x210/0x210 [ 152.202331][ T6360] hci_request_cancel_all+0xcb/0x300 [ 152.207617][ T6360] hci_dev_do_close+0x51/0x1070 [ 152.212479][ T6360] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 152.218366][ T6360] ? _raw_spin_unlock+0x40/0x40 [ 152.223208][ T6360] hci_rfkill_set_block+0x114/0x1a0 [ 152.228400][ T6360] ? rcu_lock_release+0x20/0x20 [ 152.233239][ T6360] rfkill_set_block+0x1e7/0x430 [ 152.238098][ T6360] rfkill_fop_write+0x5b7/0x790 [ 152.242944][ T6360] ? rfkill_fop_read+0x470/0x470 [ 152.247884][ T6360] ? fsnotify_perm+0x64/0x590 [ 152.252577][ T6360] ? security_file_permission+0x75/0xa0 [ 152.258253][ T6360] ? rfkill_fop_read+0x470/0x470 [ 152.263218][ T6360] vfs_write+0x30c/0xe50 [ 152.267471][ T6360] ? file_end_write+0x250/0x250 [ 152.272328][ T6360] ? __fget_files+0x413/0x480 [ 152.277002][ T6360] ? __fdget_pos+0x1e9/0x380 [ 152.281586][ T6360] ? ksys_write+0x77/0x2c0 [ 152.285998][ T6360] ksys_write+0x1a2/0x2c0 [ 152.290347][ T6360] ? print_irqtrace_events+0x210/0x210 [ 152.295804][ T6360] ? __ia32_sys_read+0x80/0x80 [ 152.300563][ T6360] ? syscall_enter_from_user_mode+0x2e/0x240 [ 152.306531][ T6360] ? lockdep_hardirqs_on+0x94/0x130 [ 152.311732][ T6360] ? syscall_enter_from_user_mode+0x2e/0x240 [ 152.317727][ T6360] do_syscall_64+0x3b/0xb0 [ 152.322138][ T6360] ? clear_bhb_loop+0x15/0x70 [ 152.326854][ T6360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.332761][ T6360] RIP: 0033:0x7fad3b476d29 [ 152.337166][ T6360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.356770][ T6360] RSP: 002b:00007fad392e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.365181][ T6360] RAX: ffffffffffffffda RBX: 00007fad3b666fa0 RCX: 00007fad3b476d29 [ 152.373154][ T6360] RDX: 0000000000000008 RSI: 0000000020000100 RDI: 0000000000000003 [ 152.381131][ T6360] RBP: 00007fad3b4f2aa8 R08: 0000000000000000 R09: 0000000000000000 [ 152.389105][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.397069][ T6360] R13: 0000000000000000 R14: 00007fad3b666fa0 R15: 00007ffddb61e858 [ 152.405051][ T6360] [ 152.443675][ T4715] Bluetooth: hci4: command 0x0419 tx timeout [ 152.698843][ T4208] device hsr_slave_0 left promiscuous mode [ 152.705570][ T4208] device hsr_slave_1 left promiscuous mode [ 152.714999][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.727656][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.740068][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.747515][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.786317][ T4208] device bridge_slave_1 left promiscuous mode [ 152.797176][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.821115][ T4208] device bridge_slave_0 left promiscuous mode [ 152.829715][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.844404][ T4208] device hsr_slave_0 left promiscuous mode [ 152.851134][ T4208] device hsr_slave_1 left promiscuous mode [ 152.860714][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.868831][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.877234][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.885251][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.893301][ T4208] device bridge_slave_1 left promiscuous mode [ 152.899498][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.914194][ T4208] device bridge_slave_0 left promiscuous mode [ 152.920444][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.933002][ T4208] device veth1_macvtap left promiscuous mode [ 152.939041][ T4208] device veth0_macvtap left promiscuous mode [ 152.945447][ T4208] device veth1_vlan left promiscuous mode [ 152.951351][ T4208] device veth0_vlan left promiscuous mode [ 152.957654][ T4208] device veth1_macvtap left promiscuous mode [ 152.963823][ T4208] device veth0_macvtap left promiscuous mode [ 152.970096][ T4208] device veth1_vlan left promiscuous mode [ 152.975869][ T4208] device veth0_vlan left promiscuous mode [ 153.145974][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 153.159534][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 153.170677][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.183513][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.234871][ T4208] bond0 (unregistering): Released all slaves [ 153.346987][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 153.363930][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 153.374550][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.386906][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.439519][ T4208] bond0 (unregistering): Released all slaves [ 153.930729][ T7] usb 7-1: device descriptor read/all, error -71 [ 153.939121][ T7] usb usb7-port1: attempt power cycle [ 155.042676][ T4208] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.077751][ T4208] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.126105][ T4208] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.183083][ T4208] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.533985][ T4208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.594535][ T4208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.640348][ T4208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.687319][ T4208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.630859][ T4208] device hsr_slave_0 left promiscuous mode [ 156.637603][ T4208] device hsr_slave_1 left promiscuous mode [ 156.643807][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.652562][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.660239][ T4208] device bridge_slave_1 left promiscuous mode [ 156.666488][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.674998][ T4208] device bridge_slave_0 left promiscuous mode [ 156.681188][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.691473][ T4208] device hsr_slave_0 left promiscuous mode [ 156.697932][ T4208] device hsr_slave_1 left promiscuous mode [ 156.704244][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.711634][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.720245][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.728044][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.736056][ T4208] device bridge_slave_1 left promiscuous mode [ 156.742917][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.751098][ T4208] device bridge_slave_0 left promiscuous mode [ 156.757239][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.767683][ T4208] device hsr_slave_0 left promiscuous mode [ 156.774011][ T4208] device hsr_slave_1 left promiscuous mode [ 156.780548][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.788051][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.795943][ T4208] device bridge_slave_1 left promiscuous mode [ 156.802226][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.811799][ T4208] device bridge_slave_0 left promiscuous mode [ 156.818124][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.829781][ T4208] device hsr_slave_0 left promiscuous mode [ 156.836321][ T4208] device hsr_slave_1 left promiscuous mode [ 156.843006][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.850872][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.858804][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.866464][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.874243][ T4208] device bridge_slave_1 left promiscuous mode [ 156.880394][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.889436][ T4208] device bridge_slave_0 left promiscuous mode [ 156.895798][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.908934][ T4208] device veth1_macvtap left promiscuous mode [ 156.915084][ T4208] device veth0_macvtap left promiscuous mode [ 156.921108][ T4208] device veth1_vlan left promiscuous mode [ 156.928879][ T4208] device veth0_vlan left promiscuous mode [ 156.935048][ T4208] device veth1_macvtap left promiscuous mode [ 156.942342][ T4208] device veth0_macvtap left promiscuous mode [ 156.948386][ T4208] device veth1_vlan left promiscuous mode [ 156.954335][ T4208] device veth0_vlan left promiscuous mode [ 156.960964][ T4208] device veth1_macvtap left promiscuous mode [ 156.967033][ T4208] device veth0_macvtap left promiscuous mode [ 156.973191][ T4208] device veth1_vlan left promiscuous mode [ 156.979086][ T4208] device veth0_vlan left promiscuous mode [ 157.205710][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 157.220287][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 157.230828][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.245822][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.292241][ T4208] bond0 (unregistering): Released all slaves [ 157.405794][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 157.418673][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 157.429747][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.442238][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.495680][ T4208] bond0 (unregistering): Released all slaves [ 157.580839][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 157.592076][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 157.604503][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.619039][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.668675][ T4208] bond0 (unregistering): Released all slaves [ 157.811388][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 157.825413][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 157.836986][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.848967][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.897715][ T4208] bond0 (unregistering): Released all slaves