last executing test programs: 6.134723944s ago: executing program 4 (id=217): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 4.169676328s ago: executing program 3 (id=243): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 3.207867144s ago: executing program 2 (id=248): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000001c0)='./file1\x00') 3.030202674s ago: executing program 4 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be004411"], 0xfdef) 2.710891003s ago: executing program 1 (id=252): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x4000, 0x81, {}, {0x4, 0x8, 0xc, 0x5, 0x29, 0x5c, "0adb3fb8"}, 0x5}) poll(&(0x7f0000000080)=[{r0, 0x4004}], 0x1, 0x9) 2.484586496s ago: executing program 4 (id=254): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 2.262749768s ago: executing program 3 (id=256): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x694, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) 1.956916686s ago: executing program 3 (id=258): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='H', 0x206c}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 1.858915822s ago: executing program 1 (id=259): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000000c0)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) 1.841891913s ago: executing program 0 (id=260): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x32}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 1.72959518s ago: executing program 1 (id=261): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYRES64, @ANYRESOCT], 0x1, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000580)="dcef58b7f29c1f7c93d183044a9c33a4b17f028f68610a6c55bb2bf8282853f3", 0x20}) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) 1.655380214s ago: executing program 0 (id=262): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x401) 1.596042377s ago: executing program 0 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x600}, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x3, 0x17c1, 0x8}}}}}}, 0x36) 1.54669207s ago: executing program 1 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r1, 0x1, 0x1, 0xffffffbc, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) 1.434820177s ago: executing program 4 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0xd87b9d09c83670d}, @void, @eth={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0xb1, 0xd9}}}}}, 0x19) 1.434505097s ago: executing program 1 (id=266): mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 1.397979669s ago: executing program 0 (id=267): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000040)=[{r0, 0x240}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1.323922083s ago: executing program 4 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000740)={0x1, 0x0, [{0xd, 0x0, 0x7, 0x5, 0xff, 0x8000000, 0x1a}]}) 1.21089692s ago: executing program 2 (id=269): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x2, 0x4000020}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x6}], 0xf000, 0x10123, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.210608409s ago: executing program 0 (id=270): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x8, 0x2) getdents64(r0, &(0x7f0000000300)=""/175, 0xaf) 938.617586ms ago: executing program 0 (id=271): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000980)={0x0, 0x70, 0x7, &(0x7f0000000940)={0x1b, "79b8142115db2c05f171f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) 767.865045ms ago: executing program 3 (id=272): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) 526.53597ms ago: executing program 3 (id=273): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0xffffffffffffffff, 0xa}}, 0x30) r0 = syz_io_uring_setup(0xd2, &(0x7f00000002c0)={0x0, 0xbd84, 0x0, 0x1, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 526.07976ms ago: executing program 4 (id=274): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r0, 0x11, 0x0, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x11, 0x0, 0x8003) 364.783529ms ago: executing program 3 (id=275): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a2faff4df3b102000ee0b3d41b1b", @ANYRES32=r0]) 352.935229ms ago: executing program 1 (id=276): unshare(0x2040600) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x3, 0xa78c, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)=[0x4, 0x7, 0xb, 0x10]) 313.160742ms ago: executing program 2 (id=277): socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 142.909432ms ago: executing program 2 (id=278): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCNEWUNIT(r1, 0x4020744f, 0x0) 98.418014ms ago: executing program 2 (id=279): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000000)=r2, 0x4) 0s ago: executing program 2 (id=280): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000580), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 50.856129][ T4252] cgroup: Unknown subsys name 'net' [ 50.989818][ T4252] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.235341][ T4252] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.394073][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.402771][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.410743][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.418600][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.426257][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.433638][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.457388][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.465606][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.474226][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.483294][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.494540][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.501828][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.535977][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.543623][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.552840][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.561518][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.569483][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.577833][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.583969][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.585201][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.599065][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.610313][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.618010][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.625518][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.674105][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.682492][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.699903][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.709635][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.717284][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.725139][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.896025][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 54.024919][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 54.063127][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.072009][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.081041][ T4271] device bridge_slave_0 entered promiscuous mode [ 54.097266][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 54.111039][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 54.124398][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.131501][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.139520][ T4271] device bridge_slave_1 entered promiscuous mode [ 54.197266][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 54.214757][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.242206][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.269002][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.276326][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.284203][ T4276] device bridge_slave_0 entered promiscuous mode [ 54.312037][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.320775][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.329720][ T4276] device bridge_slave_1 entered promiscuous mode [ 54.369607][ T4271] team0: Port device team_slave_0 added [ 54.377774][ T4271] team0: Port device team_slave_1 added [ 54.388177][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.395373][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.403032][ T4267] device bridge_slave_0 entered promiscuous mode [ 54.410678][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.417935][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.426460][ T4273] device bridge_slave_0 entered promiscuous mode [ 54.444759][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.461814][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.469055][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.476906][ T4267] device bridge_slave_1 entered promiscuous mode [ 54.484156][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.494065][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.501954][ T4273] device bridge_slave_1 entered promiscuous mode [ 54.516311][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.526375][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.533339][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.559510][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.598252][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.607841][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.634422][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.651810][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.681412][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.692170][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.701707][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.710177][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.718098][ T4279] device bridge_slave_0 entered promiscuous mode [ 54.726447][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.733540][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.742493][ T4279] device bridge_slave_1 entered promiscuous mode [ 54.752298][ T4276] team0: Port device team_slave_0 added [ 54.760297][ T4276] team0: Port device team_slave_1 added [ 54.770501][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.810924][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.843324][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.855021][ T4273] team0: Port device team_slave_0 added [ 54.871332][ T4267] team0: Port device team_slave_0 added [ 54.878072][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.885308][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.911356][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.939438][ T4273] team0: Port device team_slave_1 added [ 54.950505][ T4267] team0: Port device team_slave_1 added [ 54.964765][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.971727][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.997842][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.012501][ T4271] device hsr_slave_0 entered promiscuous mode [ 55.019834][ T4271] device hsr_slave_1 entered promiscuous mode [ 55.047724][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.055031][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.081671][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.107546][ T4279] team0: Port device team_slave_0 added [ 55.121149][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.128310][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.157105][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.168686][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.176034][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.202167][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.214765][ T4279] team0: Port device team_slave_1 added [ 55.234965][ T4276] device hsr_slave_0 entered promiscuous mode [ 55.241892][ T4276] device hsr_slave_1 entered promiscuous mode [ 55.248609][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.256672][ T4276] Cannot create hsr debugfs directory [ 55.262675][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.271130][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.299773][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.368446][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.375604][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.401726][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.436044][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.443013][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.469256][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.482886][ T4267] device hsr_slave_0 entered promiscuous mode [ 55.490669][ T4267] device hsr_slave_1 entered promiscuous mode [ 55.497646][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 55.504576][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.512183][ T4267] Cannot create hsr debugfs directory [ 55.530481][ T4273] device hsr_slave_0 entered promiscuous mode [ 55.538577][ T4273] device hsr_slave_1 entered promiscuous mode [ 55.545184][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.552746][ T4273] Cannot create hsr debugfs directory [ 55.584413][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 55.643897][ T4279] device hsr_slave_0 entered promiscuous mode [ 55.650600][ T4279] device hsr_slave_1 entered promiscuous mode [ 55.656828][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 55.664057][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.671925][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 55.680935][ T4279] Cannot create hsr debugfs directory [ 55.815348][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 55.890583][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.908502][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.922784][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.938193][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.989787][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.012795][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.026823][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.037801][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.077186][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.105556][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.117188][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.131712][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.199462][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.229925][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.237400][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.249028][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.268030][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.285566][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.301160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.311194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.337922][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.345950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.353925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.364126][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.377739][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.400219][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.410856][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.420492][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.427789][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.438464][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.448728][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.457233][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.464345][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.475613][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.484001][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.495731][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.510209][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.530554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.540023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.551993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.561815][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.568971][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.577102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.586044][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.594543][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.601714][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.610001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.661905][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.676181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.687816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.697903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.709126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.718852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.731010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.740582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.749928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.759073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.768548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.780138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.809643][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.818454][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.828465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.837400][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.850230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.859174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.869334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.877764][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.900528][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.917994][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.931487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.941249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.950421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.959817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.972235][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.016381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.039324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.048558][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.056429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.065734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.075513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.084038][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.091201][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.106747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.116054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.140952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.161525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.184666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.205059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.214730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.235381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.252019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.260927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.281541][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.297610][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.326981][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.348662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.369354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.390513][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.418240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.436963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.468015][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.496513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.504138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.527818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.555414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.564037][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.571216][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.579660][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 57.599092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.608593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.617738][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.624893][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.632796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.653518][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.660756][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 57.675411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.687010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.712054][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.725522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.735163][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 57.735298][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 57.756778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.768685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.777968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.787041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.795930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.814819][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.822343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.843903][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.861129][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.873117][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.894844][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 57.901383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.915383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.929807][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.939521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.952885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.999686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.025977][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.035639][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.055637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.064280][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.071520][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.094983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.115024][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.141451][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.148797][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.165837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.173588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.203642][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.212656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.229663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.241167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.252060][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.264506][ T4271] device veth0_vlan entered promiscuous mode [ 58.276805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.285523][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.294056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.317171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.327204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.343184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.352203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.369481][ T4271] device veth1_vlan entered promiscuous mode [ 58.384038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.392491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.420663][ T4276] device veth0_vlan entered promiscuous mode [ 58.435134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.443216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.458917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.467935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.476860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.486120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.495087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.505575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.514176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.523136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.531594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.546735][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.558933][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.578530][ T4276] device veth1_vlan entered promiscuous mode [ 58.586882][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.596212][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.605255][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.613545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.625130][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.640526][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.648976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.677851][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.692042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.702298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.711268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.727710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.745094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.754880][ T4267] device veth0_vlan entered promiscuous mode [ 58.776924][ T4271] device veth0_macvtap entered promiscuous mode [ 58.797088][ T4267] device veth1_vlan entered promiscuous mode [ 58.807410][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.826751][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.838620][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.849243][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.861018][ T4271] device veth1_macvtap entered promiscuous mode [ 58.895358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.903574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.913991][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.929052][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.947148][ T4276] device veth0_macvtap entered promiscuous mode [ 58.969526][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.998716][ T4279] device veth0_vlan entered promiscuous mode [ 59.010903][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.019532][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.029585][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.042988][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.052882][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.065930][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.074115][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.085289][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.093402][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.106455][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.117327][ T4267] device veth0_macvtap entered promiscuous mode [ 59.136235][ T4276] device veth1_macvtap entered promiscuous mode [ 59.148366][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.159624][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.168359][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.177471][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.185730][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.196184][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.205858][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.214693][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.223442][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.235736][ T4267] device veth1_macvtap entered promiscuous mode [ 59.272165][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.290376][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.305815][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.318748][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.328737][ T4279] device veth1_vlan entered promiscuous mode [ 59.348713][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.363000][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.375260][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.385832][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.398503][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.408689][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.421277][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.430788][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.439704][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.450895][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.462366][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.473666][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.516421][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.529290][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.539775][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.552120][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.563087][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.570677][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.581306][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.590687][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.599424][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.608347][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.617199][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.629635][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.639150][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.648390][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.658378][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 59.667080][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711600][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.722214][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.730921][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.737613][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.741291][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.756002][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 59.765058][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.796365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.804650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.813110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.821299][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 59.828205][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 59.846346][ T4279] device veth0_macvtap entered promiscuous mode [ 59.859654][ T4279] device veth1_macvtap entered promiscuous mode [ 59.909546][ T4273] device veth0_vlan entered promiscuous mode [ 59.933892][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.948520][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.959254][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.972787][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.982869][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 59.989638][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.001159][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.016451][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.031548][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.042123][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.053156][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.065038][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.075983][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.086631][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.100221][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.108049][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.116455][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.124504][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.132694][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.142841][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.153115][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.162034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.170762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.179928][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.187986][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.204802][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.212948][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.213667][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.223392][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.241462][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.257042][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.266651][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.275422][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.291979][ T4273] device veth1_vlan entered promiscuous mode [ 60.304982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.313118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.397106][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.405073][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.415039][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.422888][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.431024][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.439382][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.452448][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.461764][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.484196][ T4273] device veth0_macvtap entered promiscuous mode [ 60.496735][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.530461][ T4273] device veth1_macvtap entered promiscuous mode [ 60.583189][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.601726][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.613276][ T4375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.632576][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.648098][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.658807][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.669649][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.680205][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.690784][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.703491][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.716439][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.727761][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.738303][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.754831][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.770461][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.789311][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.799876][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.816247][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.830703][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.844555][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.856189][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.871301][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.879823][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.891069][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.902298][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.928757][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.960734][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.999765][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.027786][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.040104][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.052562][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.090373][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.099470][ T4381] device pim6reg1 entered promiscuous mode [ 61.120869][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.143311][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.156042][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.189555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.203145][ T4389] loop0: detected capacity change from 0 to 512 [ 61.205113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.262894][ T4389] EXT4-fs (loop0): 1 truncate cleaned up [ 61.268920][ T4389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 61.290023][ T27] audit: type=1800 audit(1770817930.639:2): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 61.314866][ T4344] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 61.327872][ T4389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1: bg 0: block 465: padding at end of block bitmap is not set [ 61.364900][ T4389] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 61.394807][ T4389] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.394807][ T4389] [ 61.395124][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.436084][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.444020][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.453524][ T4389] EXT4-fs (loop0): Total free blocks count 0 [ 61.484974][ T4389] EXT4-fs (loop0): Free/Dirty block details [ 61.490963][ T4389] EXT4-fs (loop0): free_blocks=0 [ 61.502893][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.502893][ T9] [ 61.539604][ T4389] EXT4-fs (loop0): dirty_blocks=66 [ 61.548742][ T4344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.557713][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 61.571723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.589554][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.634561][ T4344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.647145][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.670033][ T4344] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 61.672953][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.684906][ T4344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.733508][ T4344] usb 3-1: config 0 descriptor?? [ 61.739165][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 61.815156][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 61.905397][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 61.911468][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 62.066570][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 62.183008][ T4344] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 62.251749][ T4398] loop4: detected capacity change from 0 to 40427 [ 62.283405][ T4398] F2FS-fs (loop4): invalid crc value [ 62.337405][ T4398] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 62.349105][ T4308] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.520163][ T4344] usb 3-1: USB disconnect, device number 2 [ 62.542017][ T4405] fido_id[4405]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1E7D:2D5A.0001/report_descriptor': No such device [ 62.559387][ T4398] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.568485][ T4308] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.587887][ T4308] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 62.639170][ T4308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.672697][ T4308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 62.689766][ T4308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 62.707412][ T4398] syz.4.7: attempt to access beyond end of device [ 62.707412][ T4398] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.733635][ T4308] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.745831][ T4308] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.754470][ T4308] usb 2-1: Product: syz [ 62.758792][ T4308] usb 2-1: Manufacturer: syz [ 62.780154][ T4308] cdc_wdm 2-1:1.0: skipping garbage [ 62.794380][ T4308] cdc_wdm 2-1:1.0: skipping garbage [ 62.811661][ T4308] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 62.812571][ T4276] syz-executor: attempt to access beyond end of device [ 62.812571][ T4276] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 62.817844][ T4308] cdc_wdm 2-1:1.0: Unknown control protocol [ 62.954524][ T3533] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 62.994412][ T4387] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.165534][ T3533] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 63.183827][ T3533] usb 1-1: config 0 has no interface number 0 [ 63.198414][ T3533] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 63.211680][ T4387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.227068][ T4387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.243652][ T3533] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 63.265208][ T4387] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.265805][ T4423] netlink: 'syz.4.14': attribute type 6 has an invalid length. [ 63.282828][ T3533] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 63.304363][ T4387] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.314333][ T3533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.324793][ T3533] usb 1-1: config 0 descriptor?? [ 63.329904][ T4387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.339982][ T4413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.357089][ T4387] usb 4-1: config 0 descriptor?? [ 63.377128][ T3533] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 63.479997][ T27] audit: type=1326 audit(1770817932.829:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cbcf3d399 code=0x7ffc0000 [ 63.534480][ T27] audit: type=1326 audit(1770817932.829:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbcf9bf79 code=0x7ffc0000 [ 63.563231][ T27] audit: type=1326 audit(1770817932.829:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbcf9bf79 code=0x7ffc0000 [ 63.618520][ T3533] usb 1-1: USB disconnect, device number 2 [ 63.661798][ T27] audit: type=1326 audit(1770817932.829:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cbcf3d399 code=0x7ffc0000 [ 63.685618][ T27] audit: type=1326 audit(1770817932.829:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cbcf3d399 code=0x7ffc0000 [ 63.709305][ T27] audit: type=1326 audit(1770817932.829:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cbcf3d399 code=0x7ffc0000 [ 63.735960][ T27] audit: type=1326 audit(1770817932.829:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cbcf3d399 code=0x7ffc0000 [ 63.784571][ T27] audit: type=1326 audit(1770817932.829:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cbcf3d399 code=0x7ffc0000 [ 63.807500][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 63.814264][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 63.822789][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 63.829411][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 63.838925][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 63.845559][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 63.855384][ T4344] usb 2-1: USB disconnect, device number 2 [ 63.867248][ T4387] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 63.897952][ T4387] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 63.921823][ T27] audit: type=1326 audit(1770817932.829:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cbcf3d399 code=0x7ffc0000 [ 64.201270][ T4439] Illegal XDP return value 1391067179 on prog (id 3) dev N/A, expect packet loss! [ 64.358130][ T4308] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.580639][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.602070][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.617597][ T4452] loop4: detected capacity change from 0 to 512 [ 64.632153][ T4308] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 64.655971][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.692134][ T4452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 64.723147][ T4308] usb 3-1: config 0 descriptor?? [ 64.825306][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 65.138657][ T4308] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 65.170737][ T4308] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 65.201423][ T4308] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 65.209454][ T4308] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 65.223605][ T4308] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 65.256105][ T4308] playstation 0003:054C:0DF2.0003: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 65.346206][ T4476] "syz.1.35" (4476) uses obsolete ecb(arc4) skcipher [ 65.750491][ T4308] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 5: -71 [ 65.772741][ T4308] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense calibration info: -71 [ 65.784983][ T4308] playstation 0003:054C:0DF2.0003: Failed to get calibration data from DualSense [ 65.794708][ T4308] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 65.808320][ T4308] playstation: probe of 0003:054C:0DF2.0003 failed with error -71 [ 65.823832][ T4489] raw_sendmsg: syz.3.41 forgot to set AF_INET. Fix it! [ 65.827962][ T4308] usb 3-1: USB disconnect, device number 3 [ 65.913664][ T4492] ======================================================= [ 65.913664][ T4492] WARNING: The mand mount option has been deprecated and [ 65.913664][ T4492] and is ignored by this kernel. Remove the mand [ 65.913664][ T4492] option from the mount to silence this warning. [ 65.913664][ T4492] ======================================================= [ 65.949298][ T4490] fido_id[4490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 66.044525][ T4387] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.048525][ T3533] usb 4-1: USB disconnect, device number 2 [ 66.227204][ T4387] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.246961][ T4387] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.268808][ T4387] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.288621][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.307855][ T4387] usb 1-1: SerialNumber: syz [ 66.551283][ T4387] usb 1-1: 0:2 : does not exist [ 66.634841][ T4506] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.644828][ T4387] usb 1-1: USB disconnect, device number 3 [ 66.737637][ T4506] overlayfs: failed to look up (tracing) for ino (-66) [ 66.789138][ T4509] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 66.928848][ T4411] udevd[4411]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.130092][ T4519] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 67.276343][ T4524] loop0: detected capacity change from 0 to 512 [ 67.331508][ T4524] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.56: inode has both inline data and extents flags [ 67.359052][ T3533] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 67.380531][ T4524] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.56: couldn't read orphan inode 15 (err -117) [ 67.409984][ T4524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.552200][ T4524] EXT4-fs error (device loop0): ext4_check_dx_root:2266: inode #2: comm syz.0.56: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 67.569565][ T3533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.591730][ T3533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.610342][ T4529] loop2: detected capacity change from 0 to 128 [ 67.625178][ T3533] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 67.651014][ T4529] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.670902][ T3533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.703652][ T3533] usb 5-1: config 0 descriptor?? [ 67.711497][ T4529] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.723835][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 67.920881][ T62] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.002999][ T4521] loop3: detected capacity change from 0 to 32768 [ 68.143692][ T3533] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 68.144785][ T4521] XFS (loop3): Mounting V5 Filesystem [ 68.286502][ T4521] XFS (loop3): Ending clean mount [ 68.303696][ T4533] loop2: detected capacity change from 0 to 8192 [ 68.341789][ T4533] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.369021][ T4521] XFS (loop3): Quotacheck needed: Please wait. [ 68.387561][ T4533] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 68.406083][ T26] usb 5-1: USB disconnect, device number 2 [ 68.435826][ T4533] REISERFS (device loop2): using ordered data mode [ 68.442468][ T4533] reiserfs: using flush barriers [ 68.456768][ T4533] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.464307][ T4521] XFS (loop3): Quotacheck: Done. [ 68.477609][ T4533] REISERFS (device loop2): checking transaction log (loop2) [ 68.489875][ T4533] REISERFS (device loop2): Using r5 hash to sort names [ 68.497983][ T4533] REISERFS (device loop2): using 3.5.x disk format [ 68.507332][ T4533] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 68.785447][ T4549] XFS (loop3): User initiated shutdown received. [ 68.823359][ T27] kauditd_printk_skb: 121 callbacks suppressed [ 68.823373][ T27] audit: type=1800 audit(1770817938.169:133): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.55" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 68.886205][ T4549] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 68.912413][ T4552] loop2: detected capacity change from 0 to 512 [ 68.933184][ T4531] loop0: detected capacity change from 0 to 40427 [ 68.943797][ T4549] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 68.963734][ T4552] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.63: inode has both inline data and extents flags [ 68.998254][ T4531] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 69.014610][ T4531] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 69.023016][ T4552] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.63: couldn't read orphan inode 15 (err -117) [ 69.049885][ T4531] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 69.077388][ T4531] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 69.093816][ T4552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.113829][ T4531] F2FS-fs (loop0): invalid crc value [ 69.143563][ T4279] XFS (loop3): Unmounting Filesystem [ 69.170465][ T4531] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.299350][ T4531] F2FS-fs (loop0): Start checkpoint disabled! [ 69.390534][ T4531] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 69.404475][ T4531] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 69.404530][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.518251][ T4531] syz.0.59: attempt to access beyond end of device [ 69.518251][ T4531] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.560844][ T4531] syz.0.59: attempt to access beyond end of device [ 69.560844][ T4531] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.583825][ T4566] loop3: detected capacity change from 0 to 256 [ 69.626103][ T7] usb 3-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 69.650212][ T4566] FAT-fs (loop3): Directory bread(block 64) failed [ 69.657259][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.666902][ T4566] FAT-fs (loop3): Directory bread(block 65) failed [ 69.675060][ T4566] FAT-fs (loop3): Directory bread(block 66) failed [ 69.682277][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.692706][ T4566] FAT-fs (loop3): Directory bread(block 67) failed [ 69.699824][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.708376][ T4566] FAT-fs (loop3): Directory bread(block 68) failed [ 69.715456][ T7] usb 3-1: SerialNumber: syz [ 69.721048][ T4566] FAT-fs (loop3): Directory bread(block 69) failed [ 69.732045][ T4566] FAT-fs (loop3): Directory bread(block 70) failed [ 69.739181][ T4566] FAT-fs (loop3): Directory bread(block 71) failed [ 69.746290][ T4566] FAT-fs (loop3): Directory bread(block 72) failed [ 69.749810][ T46] kworker/u4:3: attempt to access beyond end of device [ 69.749810][ T46] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 69.752907][ T4566] FAT-fs (loop3): Directory bread(block 73) failed [ 69.936927][ T7] usb 3-1: 0:2 : does not exist [ 69.986117][ T7] usb 3-1: USB disconnect, device number 4 [ 70.198203][ T4575] loop0: detected capacity change from 0 to 1024 [ 70.206586][ T4575] EXT4-fs: Ignoring removed oldalloc option [ 70.212553][ T4575] EXT4-fs: Ignoring removed bh option [ 70.235836][ T4411] udevd[4411]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.236504][ T4575] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.310844][ T4575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.406283][ T4308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.455553][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 70.561837][ T4587] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.571008][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 70.597603][ T4308] usb 4-1: Using ep0 maxpacket: 32 [ 70.606271][ T4308] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.608624][ T4587] overlayfs: failed to look up (tracing) for ino (-66) [ 70.668568][ T4308] usb 4-1: config 0 has no interface number 0 [ 70.695083][ T4308] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 70.720904][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.745085][ T4308] usb 4-1: Product: syz [ 70.751615][ T4308] usb 4-1: Manufacturer: syz [ 70.773721][ T4308] usb 4-1: SerialNumber: syz [ 70.796341][ T4308] usb 4-1: config 0 descriptor?? [ 70.812360][ T4308] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 70.830139][ T4308] usb 4-1: selecting invalid altsetting 1 [ 70.841630][ T4308] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 70.871218][ T4308] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 70.891257][ T4308] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 70.906283][ T4308] usb 4-1: media controller created [ 70.953671][ T4308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.129748][ T4321] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 71.261805][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.268600][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.315689][ T4596] loop4: detected capacity change from 0 to 32768 [ 71.315970][ T4321] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.352107][ T4321] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 71.398747][ T4321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.420583][ T4321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 71.427241][ T4596] XFS (loop4): Mounting V5 Filesystem [ 71.447547][ T4321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 71.477834][ T4321] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.523337][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.543406][ T4321] usb 3-1: Product: syz [ 71.568226][ T4321] usb 3-1: Manufacturer: syz [ 71.600537][ T4596] XFS (loop4): Ending clean mount [ 71.636502][ T4596] XFS (loop4): Quotacheck needed: Please wait. [ 71.646175][ T4321] cdc_wdm 3-1:1.0: skipping garbage [ 71.663653][ T4321] cdc_wdm 3-1:1.0: skipping garbage [ 71.700787][ T4321] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 71.702131][ T4596] XFS (loop4): Quotacheck: Done. [ 71.709152][ T4321] cdc_wdm 3-1:1.0: Unknown control protocol [ 71.875844][ T4607] XFS (loop4): User initiated shutdown received. [ 71.906306][ T4607] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 71.914940][ T27] audit: type=1800 audit(1770817941.259:134): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.77" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 71.973896][ T4607] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 72.055619][ T4308] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 72.065665][ T4571] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 72.073849][ T4308] zl10353_read_register: readreg error (reg=127, ret==-110) [ 72.104832][ T4276] XFS (loop4): Unmounting Filesystem [ 72.160289][ T4613] loop0: detected capacity change from 0 to 256 [ 72.193475][ T4308] usb 4-1: USB disconnect, device number 3 [ 72.269147][ T4613] FAT-fs (loop0): Directory bread(block 64) failed [ 72.279087][ T4613] FAT-fs (loop0): Directory bread(block 65) failed [ 72.301605][ T4613] FAT-fs (loop0): Directory bread(block 66) failed [ 72.322046][ T4613] FAT-fs (loop0): Directory bread(block 67) failed [ 72.336725][ T4613] FAT-fs (loop0): Directory bread(block 68) failed [ 72.364359][ T4613] FAT-fs (loop0): Directory bread(block 69) failed [ 72.371120][ T4613] FAT-fs (loop0): Directory bread(block 70) failed [ 72.378167][ T4613] FAT-fs (loop0): Directory bread(block 71) failed [ 72.385162][ T4613] FAT-fs (loop0): Directory bread(block 72) failed [ 72.391830][ T4613] FAT-fs (loop0): Directory bread(block 73) failed [ 72.603628][ T4620] loop4: detected capacity change from 0 to 1024 [ 72.640067][ T4620] EXT4-fs: Ignoring removed oldalloc option [ 72.655307][ T4620] EXT4-fs: Ignoring removed bh option [ 72.663884][ T4620] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.727134][ T4387] usb 3-1: USB disconnect, device number 5 [ 72.753471][ T4620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.908784][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 72.943394][ T4622] loop0: detected capacity change from 0 to 32768 [ 73.040109][ T4622] XFS (loop0): Mounting V5 Filesystem [ 73.068296][ T4635] loop4: detected capacity change from 0 to 512 [ 73.129776][ T4635] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.87: inode has both inline data and extents flags [ 73.155626][ T4622] XFS (loop0): Ending clean mount [ 73.199421][ T4622] XFS (loop0): Quotacheck needed: Please wait. [ 73.266596][ T4622] XFS (loop0): Quotacheck: Done. [ 73.274703][ T4635] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.87: couldn't read orphan inode 15 (err -117) [ 73.314602][ T4635] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.405934][ T4644] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.439280][ T4646] XFS (loop0): User initiated shutdown received. [ 73.443920][ T27] audit: type=1800 audit(1770817942.789:135): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.95" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 73.467207][ T4644] overlayfs: failed to look up (tracing) for ino (-66) [ 73.477518][ T4646] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 73.539331][ T4646] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 73.644353][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.669999][ T4267] XFS (loop0): Unmounting Filesystem [ 73.848290][ T26] usb 5-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 73.868483][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.898321][ T26] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 73.928933][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.948606][ T26] usb 5-1: SerialNumber: syz [ 73.956771][ T4641] loop1: detected capacity change from 0 to 32768 [ 74.059639][ T4641] XFS (loop1): Mounting V5 Filesystem [ 74.144488][ T4641] XFS (loop1): Ending clean mount [ 74.176320][ T26] usb 5-1: 0:2 : does not exist [ 74.198842][ T4641] XFS (loop1): Quotacheck needed: Please wait. [ 74.226438][ T26] usb 5-1: USB disconnect, device number 3 [ 74.255355][ T4641] XFS (loop1): Quotacheck: Done. [ 74.515650][ T4411] udevd[4411]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.536271][ T4273] XFS (loop1): Unmounting Filesystem [ 74.831553][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 74.986003][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 75.524336][ T4387] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.717592][ T4387] usb 5-1: Using ep0 maxpacket: 8 [ 75.725589][ T4387] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.784106][ T4387] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.809527][ T4689] netlink: 72 bytes leftover after parsing attributes in process `syz.3.108'. [ 75.810783][ T4387] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 75.830883][ T4387] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 75.839824][ T4693] loop0: detected capacity change from 0 to 1024 [ 75.842339][ T4387] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.860878][ T4387] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.872210][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.873923][ T4693] EXT4-fs: Ignoring removed orlov option [ 75.924430][ T4321] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 75.970600][ T4693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.050426][ T4702] loop3: detected capacity change from 0 to 256 [ 76.083237][ T4702] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 76.117888][ T4321] usb 3-1: config 0 has no interfaces? [ 76.123421][ T4321] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.140801][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.153550][ T4387] usb 5-1: GET_CAPABILITIES returned 0 [ 76.160039][ T4387] usbtmc 5-1:16.0: can't read capabilities [ 76.166676][ T4321] usb 3-1: config 0 descriptor?? [ 76.208798][ T4267] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 76.247559][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 76.306290][ T4704] device pim6reg1 entered promiscuous mode [ 76.376804][ T14] cfg80211: failed to load regulatory.db [ 76.384307][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.401142][ T14] usb 5-1: USB disconnect, device number 4 [ 76.474574][ T4387] usb 3-1: USB disconnect, device number 6 [ 76.484203][ T4706] Bluetooth: MGMT ver 1.22 [ 76.604362][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 76.614101][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.622212][ T26] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 76.631388][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.650572][ T26] usb 4-1: config 0 descriptor?? [ 76.751504][ T4711] loop1: detected capacity change from 0 to 1024 [ 76.766612][ T4711] EXT4-fs: Ignoring removed oldalloc option [ 76.782901][ T4711] EXT4-fs: Ignoring removed bh option [ 76.804348][ T4711] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.843512][ T4712] loop0: detected capacity change from 0 to 8192 [ 76.867466][ T4711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.883025][ T4712] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.933793][ T4712] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.977006][ T4712] REISERFS (device loop0): using ordered data mode [ 76.983746][ T4712] reiserfs: using flush barriers [ 77.068330][ T26] hid (null): unknown global tag 0x14 [ 77.101592][ T4712] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.130264][ T4712] REISERFS (device loop0): checking transaction log (loop0) [ 77.153473][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 77.268509][ T4387] usb 4-1: USB disconnect, device number 4 [ 77.377483][ T4712] REISERFS (device loop0): Using tea hash to sort names [ 77.385215][ T4712] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 77.507463][ T26] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 77.624476][ T3533] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 77.695824][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.707114][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.716915][ T26] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 77.726239][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.736133][ T26] usb 5-1: config 0 descriptor?? [ 77.807338][ T3533] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.816156][ T3533] usb 2-1: config 0 has no interface number 0 [ 77.822347][ T3533] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 77.833948][ T3533] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 77.845645][ T3533] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.855232][ T3533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.883624][ T3533] usb 2-1: config 0 descriptor?? [ 77.896306][ T4724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 77.911609][ T3533] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 78.156563][ T26] savu 0003:1E7D:2D5A.0006: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 78.157124][ T14] usb 2-1: USB disconnect, device number 3 [ 78.168407][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 78.312914][ T4741] loop2: detected capacity change from 0 to 512 [ 78.400151][ T3533] usb 5-1: USB disconnect, device number 5 [ 78.451444][ T4741] EXT4-fs (loop2): 1 truncate cleaned up [ 78.458102][ T4741] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.473379][ T27] audit: type=1800 audit(1770817947.819:136): pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 78.518264][ T4741] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.124: bg 0: block 465: padding at end of block bitmap is not set [ 78.535372][ T4741] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 78.548091][ T4741] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.548091][ T4741] [ 78.558365][ T4741] EXT4-fs (loop2): Total free blocks count 0 [ 78.564629][ T4741] EXT4-fs (loop2): Free/Dirty block details [ 78.571021][ T4741] EXT4-fs (loop2): free_blocks=0 [ 78.576701][ T4741] EXT4-fs (loop2): dirty_blocks=66 [ 78.576876][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 78.582201][ T4741] EXT4-fs (loop2): Block reservation details [ 78.601363][ T4741] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 79.261480][ T4761] loop1: detected capacity change from 0 to 128 [ 79.336541][ T4761] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.421883][ T4761] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.471112][ T4748] loop0: detected capacity change from 0 to 40427 [ 79.492455][ T4748] F2FS-fs (loop0): invalid crc value [ 79.519763][ T4761] syz.1.144 (pid 4761) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 79.546997][ T4748] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 79.679308][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 79.755816][ T4748] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.802572][ T4748] syz.0.127: attempt to access beyond end of device [ 79.802572][ T4748] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.871789][ T4267] syz-executor: attempt to access beyond end of device [ 79.871789][ T4267] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 80.011933][ T4308] kernel write not supported for file /video8 (pid: 4308 comm: kworker/0:4) [ 80.243320][ T4759] loop2: detected capacity change from 0 to 32768 [ 80.386312][ T4759] XFS (loop2): Mounting V5 Filesystem [ 80.501825][ T4790] loop1: detected capacity change from 0 to 1024 [ 80.505415][ T4759] XFS (loop2): Ending clean mount [ 80.509223][ T4790] EXT4-fs: Ignoring removed orlov option [ 80.558379][ T4790] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.574900][ T4759] XFS (loop2): Quotacheck needed: Please wait. [ 80.718660][ T4759] XFS (loop2): Quotacheck: Done. [ 80.878081][ T4796] XFS (loop2): User initiated shutdown received. [ 80.900779][ T27] audit: type=1800 audit(1770817950.239:137): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.133" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 80.916183][ T4796] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 81.064441][ T4796] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 81.088226][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 81.221217][ T4271] XFS (loop2): Unmounting Filesystem [ 81.421075][ T4783] loop3: detected capacity change from 0 to 32768 [ 81.553113][ T4783] XFS (loop3): Mounting V5 Filesystem [ 81.662629][ T4783] XFS (loop3): Ending clean mount [ 81.676671][ T4783] XFS (loop3): Quotacheck needed: Please wait. [ 81.718187][ T4783] XFS (loop3): Quotacheck: Done. [ 81.751614][ T4814] loop2: detected capacity change from 0 to 1024 [ 81.796465][ T4814] EXT4-fs: Ignoring removed orlov option [ 81.861506][ T4814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.882074][ T4279] XFS (loop3): Unmounting Filesystem [ 81.909182][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.075652][ T4798] loop1: detected capacity change from 0 to 32768 [ 82.108262][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.123124][ T14] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 82.146606][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.191177][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 82.203721][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 82.247379][ T4798] XFS (loop1): Mounting V5 Filesystem [ 82.254791][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.265401][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.267398][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 82.273400][ T14] usb 1-1: Product: syz [ 82.273416][ T14] usb 1-1: Manufacturer: syz [ 82.286277][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 82.293520][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 82.302092][ T14] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 82.308555][ T14] cdc_wdm 1-1:1.0: Unknown control protocol [ 82.362204][ T4798] XFS (loop1): Ending clean mount [ 82.382863][ T4798] XFS (loop1): Quotacheck needed: Please wait. [ 82.408792][ T4798] XFS (loop1): Quotacheck: Done. [ 82.498856][ T4825] XFS (loop1): User initiated shutdown received. [ 82.537356][ T27] audit: type=1800 audit(1770817951.889:138): pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 82.579036][ T4825] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 82.586100][ T4827] loop3: detected capacity change from 0 to 1024 [ 82.605293][ T4827] EXT4-fs: Ignoring removed orlov option [ 82.617337][ T4825] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 82.649927][ T4827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.731888][ T4273] XFS (loop1): Unmounting Filesystem [ 82.816703][ T14] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 83.015908][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 83.027663][ T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.056231][ T14] usb 3-1: config 0 has no interface number 0 [ 83.062388][ T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 83.113837][ T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 83.180026][ T14] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.234330][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.266620][ T14] usb 3-1: config 0 descriptor?? [ 83.272154][ T4829] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 83.291521][ T4322] usb 1-1: USB disconnect, device number 4 [ 83.310776][ T14] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 83.511337][ T3533] usb 3-1: USB disconnect, device number 7 [ 84.315375][ T4851] loop0: detected capacity change from 0 to 512 [ 84.317695][ T4855] loop4: detected capacity change from 0 to 512 [ 84.375598][ T4851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.487751][ T4855] EXT4-fs error (device loop4): ext4_iget_extra_inode:4756: inode #17: comm syz.4.151: corrupted in-inode xattr [ 84.510222][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 84.519169][ T4855] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.151: couldn't read orphan inode 17 (err -117) [ 84.540967][ T4855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.642340][ T27] audit: type=1800 audit(1770817953.989:139): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.151" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 84.745432][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 85.733579][ T4879] device pim6reg1 entered promiscuous mode [ 85.870713][ T4865] loop2: detected capacity change from 0 to 32768 [ 85.947745][ T4865] XFS (loop2): Mounting V5 Filesystem [ 85.996730][ T4865] XFS (loop2): Ending clean mount [ 86.017617][ T4865] XFS (loop2): Quotacheck needed: Please wait. [ 86.056350][ T4865] XFS (loop2): Quotacheck: Done. [ 86.151599][ T4890] XFS (loop2): User initiated shutdown received. [ 86.151738][ T27] audit: type=1800 audit(1770817955.499:140): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.160" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 86.170585][ T4890] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 86.194442][ T4890] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 86.196273][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572c8400: rx timeout, send abort [ 86.212620][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572ca000: rx timeout, send abort [ 86.221389][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572c8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 86.237381][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572ca000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 86.254458][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.396142][ T4271] XFS (loop2): Unmounting Filesystem [ 86.464527][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 86.479029][ T126] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.492870][ T126] usb 5-1: config 0 has no interface number 0 [ 86.521437][ T126] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 86.537900][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.546771][ T126] usb 5-1: Product: syz [ 86.550967][ T126] usb 5-1: Manufacturer: syz [ 86.556081][ T126] usb 5-1: SerialNumber: syz [ 86.562512][ T126] usb 5-1: config 0 descriptor?? [ 86.582743][ T126] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 86.604772][ T126] usb 5-1: selecting invalid altsetting 1 [ 86.610596][ T126] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 86.623052][ T126] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 86.638219][ T126] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 86.648790][ T126] usb 5-1: media controller created [ 86.676135][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.754488][ T4308] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.945851][ T4308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.956104][ T4308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.968283][ T4308] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.977486][ T4308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.985648][ T4308] usb 4-1: SerialNumber: syz [ 87.208057][ T4308] usb 4-1: 0:2 : does not exist [ 87.220314][ T4308] usb 4-1: USB disconnect, device number 5 [ 87.434922][ T4411] udevd[4411]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.734561][ T126] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 87.751972][ T4886] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 87.759810][ T126] zl10353_read_register: readreg error (reg=127, ret==-110) [ 87.777020][ T126] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 87.851047][ T126] usb 5-1: USB disconnect, device number 6 [ 88.085632][ T26] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 88.142818][ T4901] loop0: detected capacity change from 0 to 32768 [ 88.192454][ T4901] XFS (loop0): Mounting V5 Filesystem [ 88.240634][ T4901] XFS (loop0): Ending clean mount [ 88.259139][ T4901] XFS (loop0): Quotacheck needed: Please wait. [ 88.286603][ T26] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.304968][ T26] usb 4-1: config 0 has no interface number 0 [ 88.311286][ T26] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 88.338761][ T26] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 88.360318][ T4901] XFS (loop0): Quotacheck: Done. [ 88.374920][ T26] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.410705][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.437259][ T26] usb 4-1: config 0 descriptor?? [ 88.458473][ T4902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.489418][ T26] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 88.498203][ T4913] XFS (loop0): User initiated shutdown received. [ 88.511377][ T27] audit: type=1800 audit(1770817957.859:141): pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 88.545326][ T4913] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 88.561526][ T4913] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 88.620228][ T4267] XFS (loop0): Unmounting Filesystem [ 88.724419][ T4308] usb 4-1: USB disconnect, device number 6 [ 88.730337][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 88.749122][ T126] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.946656][ T126] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.969088][ T126] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.989921][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.013448][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 89.046831][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 89.083277][ T126] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.113734][ T126] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.128679][ T126] usb 5-1: Product: syz [ 89.133105][ T126] usb 5-1: Manufacturer: syz [ 89.168771][ T126] cdc_wdm 5-1:1.0: skipping garbage [ 89.177367][ T126] cdc_wdm 5-1:1.0: skipping garbage [ 89.200111][ T126] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 89.240838][ T126] cdc_wdm 5-1:1.0: Unknown control protocol [ 89.598868][ T4387] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 89.796234][ T4387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.812483][ T4387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.830148][ T4387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.843355][ T4387] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.852697][ T4387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.869039][ T4387] usb 3-1: config 0 descriptor?? [ 89.900664][ T4938] loop3: detected capacity change from 0 to 32768 [ 89.934457][ T4938] XFS (loop3): Mounting V5 Filesystem [ 89.968877][ T126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.973951][ T4938] XFS (loop3): Ending clean mount [ 89.991406][ T4938] XFS (loop3): Quotacheck needed: Please wait. [ 90.020971][ T4938] XFS (loop3): Quotacheck: Done. [ 90.133935][ T4950] XFS (loop3): User initiated shutdown received. [ 90.143578][ T26] usb 5-1: USB disconnect, device number 7 [ 90.150930][ T27] audit: type=1800 audit(1770817959.499:142): pid=4938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.184" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 90.154358][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 90.189408][ T4950] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 90.214465][ T4950] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 90.218760][ T126] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.244371][ T126] usb 1-1: config 0 has no interface number 0 [ 90.259286][ T126] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 90.268589][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.284005][ T4387] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 90.294112][ T4279] XFS (loop3): Unmounting Filesystem [ 90.299988][ T4387] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 90.301407][ T126] usb 1-1: Product: syz [ 90.312806][ T126] usb 1-1: Manufacturer: syz [ 90.315540][ T4387] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 90.325102][ T126] usb 1-1: SerialNumber: syz [ 90.358022][ T126] usb 1-1: config 0 descriptor?? [ 90.375841][ T126] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 90.385466][ T126] usb 1-1: selecting invalid altsetting 1 [ 90.391227][ T126] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 90.408915][ T126] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.419639][ T126] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 90.428397][ T126] usb 1-1: media controller created [ 90.445444][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.580606][ T26] usb 3-1: USB disconnect, device number 8 [ 90.665007][ T4955] loop1: detected capacity change from 0 to 512 [ 90.684670][ T4955] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.145588][ T4965] Zero length message leads to an empty skb [ 91.414098][ T4962] loop1: detected capacity change from 0 to 32768 [ 91.522460][ T4962] jfs_readdir called with invalid offset! [ 91.574987][ T126] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 91.585616][ T4940] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 91.592330][ T126] zl10353_read_register: readreg error (reg=127, ret==-110) [ 91.626793][ T126] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 91.733529][ T126] usb 1-1: USB disconnect, device number 5 [ 91.791148][ T4977] loop1: detected capacity change from 0 to 16 [ 91.832365][ T4977] erofs: (device loop1): mounted with root inode @ nid 36. [ 92.057779][ T4981] loop1: detected capacity change from 0 to 22 [ 92.075355][ T4981] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 92.110440][ T4981] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 92.427807][ T4979] loop3: detected capacity change from 0 to 32768 [ 92.464770][ T4979] XFS (loop3): Mounting V5 Filesystem [ 92.494215][ T4979] XFS (loop3): Ending clean mount [ 92.502379][ T4979] XFS (loop3): Quotacheck needed: Please wait. [ 92.533998][ T4979] XFS (loop3): Quotacheck: Done. [ 92.644747][ T4992] XFS (loop3): User initiated shutdown received. [ 92.651143][ T27] audit: type=1800 audit(1770817961.999:143): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.196" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 92.659474][ T4992] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 92.691256][ T4992] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 92.779281][ T4279] XFS (loop3): Unmounting Filesystem [ 93.138022][ T5006] netlink: 'syz.0.205': attribute type 11 has an invalid length. [ 93.459812][ T5012] loop0: detected capacity change from 0 to 1024 [ 93.630615][ T4999] loop1: detected capacity change from 0 to 131072 [ 93.650121][ T4999] F2FS-fs (loop1): invalid crc value [ 93.713344][ T5019] loop5: detected capacity change from 0 to 2559 [ 93.749549][ T4999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.806682][ T4999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.811637][ T5019] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 93.852149][ T4999] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 93.872302][ T4999] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 93.920358][ T11] hfsplus: b-tree write err: -5, ino 4 [ 94.164440][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 94.386012][ T14] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.407748][ T14] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.430022][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 94.434294][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.468869][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 94.499745][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 94.520431][ T3637] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 94.530912][ T14] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.585440][ T14] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.629093][ T14] usb 4-1: Product: syz [ 94.633311][ T14] usb 4-1: Manufacturer: syz [ 94.667319][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 94.677730][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 94.693673][ T14] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 94.705622][ T14] cdc_wdm 4-1:1.0: Unknown control protocol [ 94.806276][ T4308] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.004462][ T4308] usb 5-1: Using ep0 maxpacket: 8 [ 95.011437][ T4308] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 95.030438][ T4308] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.051133][ T4308] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.072440][ T5051] loop1: detected capacity change from 0 to 256 [ 95.091832][ T4308] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.093156][ T5051] exfat: Deprecated parameter 'utf8' [ 95.117829][ T4308] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.130744][ T5051] exfat: Deprecated parameter 'namecase' [ 95.146363][ T4308] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.148569][ T5051] exfat: Deprecated parameter 'utf8' [ 95.156122][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.199937][ T5051] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 95.707385][ T14] usb 4-1: USB disconnect, device number 7 [ 96.170754][ T5092] sctp: [Deprecated]: syz.1.240 (pid 5092) Use of int in max_burst socket option deprecated. [ 96.170754][ T5092] Use struct sctp_assoc_value instead [ 96.332817][ T5095] loop1: detected capacity change from 0 to 2048 [ 96.456020][ T5095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.589118][ T5095] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.614524][ T4308] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.614527][ T5095] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 96.614552][ T5095] EXT4-fs (loop1): This should not happen!! Data will be lost [ 96.614552][ T5095] [ 96.675195][ T5095] EXT4-fs (loop1): Total free blocks count 0 [ 96.681262][ T5095] EXT4-fs (loop1): Free/Dirty block details [ 96.702883][ T5097] loop0: detected capacity change from 0 to 32768 [ 96.713429][ T5095] EXT4-fs (loop1): free_blocks=2415919104 [ 96.722268][ T5095] EXT4-fs (loop1): dirty_blocks=64 [ 96.732684][ T5095] EXT4-fs (loop1): Block reservation details [ 96.740786][ T5095] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 96.767554][ T5097] XFS (loop0): Mounting V5 Filesystem [ 96.774066][ T5109] loop2: detected capacity change from 0 to 4096 [ 96.804597][ T5109] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 96.814091][ T4308] usb 4-1: Using ep0 maxpacket: 32 [ 96.822433][ T4308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.834418][ T4308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.844673][ T4308] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 96.853811][ T4308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.868986][ T4308] usb 4-1: config 0 descriptor?? [ 96.904983][ T46] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.925833][ T5097] XFS (loop0): Ending clean mount [ 96.930692][ T5109] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 96.933965][ T5097] XFS (loop0): Quotacheck needed: Please wait. [ 97.038830][ T5097] XFS (loop0): Quotacheck: Done. [ 97.097224][ T5119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'. [ 97.203880][ T4267] XFS (loop0): Unmounting Filesystem [ 97.318089][ T4308] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 97.390326][ T14] usb 5-1: USB disconnect, device number 8 [ 97.581600][ T4308] usb 4-1: USB disconnect, device number 8 [ 97.725778][ T5122] fido_id[5122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 97.746108][ T4270] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 97.754656][ T4270] Bluetooth: hci3: Injecting HCI hardware error event [ 97.764221][ T48] Bluetooth: hci3: hardware error 0x00 [ 98.166428][ T5124] loop2: detected capacity change from 0 to 40427 [ 98.211145][ T5124] F2FS-fs (loop2): invalid crc value [ 98.272389][ T5124] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.276670][ T5146] loop3: detected capacity change from 0 to 1024 [ 98.492928][ T5124] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.780544][ T5159] loop1: detected capacity change from 0 to 256 [ 99.192982][ T4271] syz-executor: attempt to access beyond end of device [ 99.192982][ T4271] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.275603][ T5179] loop0: detected capacity change from 0 to 512 [ 99.302122][ T5176] loop4: detected capacity change from 0 to 1024 [ 99.319344][ T5179] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.349893][ T5176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.362159][ T5179] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.380436][ T5179] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 99.399163][ T5179] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.270: invalid block [ 99.417773][ T5179] EXT4-fs (loop0): Remounting filesystem read-only [ 99.417856][ T5176] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.425950][ T5179] EXT4-fs (loop0): 1 truncate cleaned up [ 99.441598][ T5179] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.515309][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 99.593807][ T5176] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.880910][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 99.900833][ T48] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 99.907607][ T4322] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.104370][ T4322] usb 1-1: Using ep0 maxpacket: 16 [ 100.117332][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.168654][ T4322] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 100.190575][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.202026][ T4322] usb 1-1: config 0 descriptor?? [ 100.467654][ T4308] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 100.509182][ T5209] loop2: detected capacity change from 0 to 1024 [ 100.524149][ T5195] loop4: detected capacity change from 0 to 40427 [ 100.525405][ T5209] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.549195][ T5195] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 100.563343][ T5195] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2 [ 100.582486][ T5195] F2FS-fs (loop4): invalid crc value [ 100.590666][ T5209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.610263][ T5195] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.626019][ T4322] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 100.655101][ T4308] usb 4-1: Using ep0 maxpacket: 32 [ 100.667236][ T4308] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 100.676631][ T5209] ================================================================== [ 100.684729][ T5209] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x965/0x1e90 [ 100.686855][ T4308] usb 4-1: config 0 has no interface number 0 [ 100.692468][ T5209] Read of size 18446744073709551588 at addr ffff888055beb040 by task syz.2.280/5209 [ 100.692489][ T5209] [ 100.692512][ T5209] CPU: 1 PID: 5209 Comm: syz.2.280 Not tainted syzkaller #0 [ 100.717671][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.722747][ T4308] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 100.728176][ T5209] Call Trace: [ 100.728201][ T5209] [ 100.728209][ T5209] dump_stack_lvl+0x188/0x24e [ 100.728236][ T5209] ? __lock_acquire+0x7d10/0x7d10 [ 100.728260][ T5209] ? show_regs_print_info+0x12/0x12 [ 100.728280][ T5209] ? load_image+0x400/0x400 [ 100.728297][ T5209] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 100.728314][ T5209] ? __virt_addr_valid+0x188/0x540 [ 100.740908][ T5195] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.743537][ T5209] ? __virt_addr_valid+0x465/0x540 [ 100.786493][ T5209] ? ext4_xattr_set_entry+0x965/0x1e90 [ 100.791553][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.791954][ T5209] print_report+0xa8/0x210 [ 100.804644][ T5209] kasan_report+0x10b/0x140 [ 100.809176][ T5209] ? ext4_xattr_set_entry+0x965/0x1e90 [ 100.814660][ T5209] ? ext4_xattr_set_entry+0x965/0x1e90 [ 100.820145][ T5209] kasan_check_range+0x235/0x290 [ 100.822573][ T4308] usb 4-1: Product: syz [ 100.825092][ T5209] ? ext4_xattr_set_entry+0x965/0x1e90 [ 100.825122][ T5209] memmove+0x25/0x60 [ 100.825138][ T5209] ext4_xattr_set_entry+0x965/0x1e90 [ 100.825165][ T5209] ext4_xattr_block_set+0xae4/0x32b0 [ 100.825186][ T5209] ? ext4_destroy_inode+0x200/0x200 [ 100.825207][ T5209] ? proc_nr_inodes+0x2f0/0x2f0 [ 100.825229][ T5209] ? _raw_spin_unlock+0x24/0x40 [ 100.825244][ T5209] ? iput+0x768/0x980 [ 100.825264][ T5209] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 100.825287][ T5209] ? ext4_xattr_ibody_set+0x509/0x690 [ 100.843576][ T4308] usb 4-1: Manufacturer: syz [ 100.844049][ T5209] ext4_xattr_set_handle+0x1338/0x1570 [ 100.850237][ T4308] usb 4-1: SerialNumber: syz [ 100.854526][ T5209] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 100.854565][ T5209] ext4_xattr_set+0x242/0x320 [ 100.854588][ T5209] ? ext4_xattr_set_credits+0x290/0x290 [ 100.854608][ T5209] ? posix_xattr_acl+0x8f/0xb0 [ 100.854628][ T5209] ? evm_protect_xattr+0x333/0x9d0 [ 100.854647][ T5209] ? ext4_xattr_trusted_get+0x40/0x40 [ 100.854669][ T5209] __vfs_setxattr+0x3e0/0x420 [ 100.854696][ T5209] __vfs_setxattr_noperm+0x129/0x5e0 [ 100.854722][ T5209] vfs_setxattr+0x167/0x2e0 [ 100.854746][ T5209] ? xattr_permission+0x500/0x500 [ 100.854768][ T5209] ? _copy_from_user+0x10b/0x170 [ 100.854789][ T5209] ? setxattr+0x2ce/0x360 [ 100.894990][ T4308] usb 4-1: config 0 descriptor?? [ 100.900180][ T5209] setxattr+0x346/0x360 [ 100.900216][ T5209] ? path_setxattr+0x290/0x290 [ 100.900247][ T5209] ? __mnt_want_write+0x21f/0x2a0 [ 100.922424][ T4308] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 100.925619][ T5209] path_setxattr+0x147/0x290 [ 100.925653][ T5209] ? simple_xattr_list_add+0xf0/0xf0 [ 100.925675][ T5209] ? lock_chain_count+0x20/0x20 [ 100.925700][ T5209] __x64_sys_lsetxattr+0xb4/0xd0 [ 100.925722][ T5209] do_syscall_64+0x4c/0xa0 [ 100.925743][ T5209] ? clear_bhb_loop+0x60/0xb0 [ 100.925762][ T5209] ? clear_bhb_loop+0x60/0xb0 [ 100.925783][ T5209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.925802][ T5209] RIP: 0033:0x7f0cbcf9bf79 [ 100.925826][ T5209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.045679][ T5209] RSP: 002b:00007f0cbdebe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 101.054120][ T5209] RAX: ffffffffffffffda RBX: 00007f0cbd215fa0 RCX: 00007f0cbcf9bf79 [ 101.062203][ T5209] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 101.070192][ T5209] RBP: 00007f0cbd0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 101.078176][ T5209] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 101.086158][ T5209] R13: 00007f0cbd216038 R14: 00007f0cbd215fa0 R15: 00007ffc38b34128 [ 101.094163][ T5209] [ 101.097198][ T5209] [ 101.099543][ T5209] Allocated by task 5209: [ 101.103875][ T5209] kasan_set_track+0x4b/0x70 [ 101.108485][ T5209] __kasan_kmalloc+0x8e/0xa0 [ 101.113097][ T5209] __kmalloc_node_track_caller+0xae/0x230 [ 101.118845][ T5209] kmemdup+0x27/0x60 [ 101.122758][ T5209] ext4_xattr_block_set+0x9e6/0x32b0 [ 101.128064][ T5209] ext4_xattr_set_handle+0x1338/0x1570 [ 101.130047][ T4308] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 101.133529][ T5209] ext4_xattr_set+0x242/0x320 [ 101.133554][ T5209] __vfs_setxattr+0x3e0/0x420 [ 101.133575][ T5209] __vfs_setxattr_noperm+0x129/0x5e0 [ 101.153955][ T4308] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 101.157349][ T5209] vfs_setxattr+0x167/0x2e0 [ 101.157375][ T5209] setxattr+0x346/0x360 [ 101.157393][ T5209] path_setxattr+0x147/0x290 [ 101.157413][ T5209] __x64_sys_lsetxattr+0xb4/0xd0 [ 101.157432][ T5209] do_syscall_64+0x4c/0xa0 [ 101.157451][ T5209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.157469][ T5209] [ 101.157473][ T5209] The buggy address belongs to the object at ffff888055beb000 [ 101.157473][ T5209] which belongs to the cache kmalloc-1k of size 1024 [ 101.157487][ T5209] The buggy address is located 64 bytes inside of [ 101.157487][ T5209] 1024-byte region [ffff888055beb000, ffff888055beb400) [ 101.224757][ T5209] [ 101.227084][ T5209] The buggy address belongs to the physical page: [ 101.233523][ T5209] page:ffffea000156fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888055bee000 pfn:0x55be8 [ 101.244999][ T5209] head:ffffea000156fa00 order:3 compound_mapcount:0 compound_pincount:0 [ 101.253334][ T5209] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 101.261344][ T5209] raw: 00fff00000010200 ffffea00009c5800 dead000000000003 ffff888017441dc0 [ 101.269943][ T5209] raw: ffff888055bee000 000000008010000c 00000001ffffffff 0000000000000000 [ 101.278531][ T5209] page dumped because: kasan: bad access detected [ 101.284960][ T5209] page_owner tracks the page as allocated [ 101.290673][ T5209] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 46, tgid 46 (kworker/u4:3), ts 60312332383, free_ts 12032766234 [ 101.311065][ T5209] post_alloc_hook+0x173/0x1a0 [ 101.315895][ T5209] get_page_from_freelist+0x1a1e/0x1ab0 [ 101.321451][ T5209] __alloc_pages+0x1ec/0x4f0 [ 101.326057][ T5209] alloc_slab_page+0x5d/0x160 [ 101.330765][ T5209] new_slab+0x87/0x2c0 [ 101.334850][ T5209] ___slab_alloc+0xbc6/0x1240 [ 101.339542][ T5209] __kmem_cache_alloc_node+0x1a0/0x260 [ 101.345028][ T5209] __kmalloc_node_track_caller+0x9e/0x230 [ 101.350787][ T5209] __alloc_skb+0x22a/0x7e0 [ 101.355267][ T5209] inet6_rt_notify+0xb0/0x240 [ 101.359991][ T5209] fib6_add+0x1db0/0x3d10 [ 101.364326][ T5209] ip6_route_add+0x86/0x130 [ 101.368843][ T5209] addrconf_add_dev+0x298/0x3a0 [ 101.373710][ T5209] addrconf_init_auto_addrs+0x6ab/0xaf0 [ 101.379280][ T5209] addrconf_notify+0xaca/0xf40 [ 101.384066][ T5209] raw_notifier_call_chain+0xcb/0x160 [ 101.389461][ T5209] page last free stack trace: [ 101.394139][ T5209] free_unref_page_prepare+0x8b4/0x9a0 [ 101.399620][ T5209] free_unref_page+0x2e/0x3f0 [ 101.404314][ T5209] free_contig_range+0x9d/0x150 [ 101.409189][ T5209] destroy_args+0xf0/0xa0a [ 101.413622][ T5209] debug_vm_pgtable+0x33c/0x38e [ 101.418498][ T5209] do_one_initcall+0x26a/0x840 [ 101.423274][ T5209] do_initcall_level+0x137/0x1e4 [ 101.428317][ T5209] do_initcalls+0x4b/0x8a [ 101.432763][ T5209] kernel_init_freeable+0x415/0x5be [ 101.437992][ T5209] kernel_init+0x19/0x1b0 [ 101.442349][ T5209] ret_from_fork+0x1f/0x30 [ 101.446795][ T5209] [ 101.449121][ T5209] Memory state around the buggy address: [ 101.454757][ T5209] ffff888055beaf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.463005][ T5209] ffff888055beaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.471083][ T5209] >ffff888055beb000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.479156][ T5209] ^ [ 101.485310][ T5209] ffff888055beb080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.493462][ T5209] ffff888055beb100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.501524][ T5209] ================================================================== [ 101.510798][ T5209] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.518099][ T5209] CPU: 0 PID: 5209 Comm: syz.2.280 Not tainted syzkaller #0 [ 101.525579][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 101.535958][ T5209] Call Trace: [ 101.539243][ T5209] [ 101.542169][ T5209] dump_stack_lvl+0x188/0x24e [ 101.546843][ T5209] ? memcpy+0x3c/0x60 [ 101.550816][ T5209] ? show_regs_print_info+0x12/0x12 [ 101.556018][ T5209] ? load_image+0x400/0x400 [ 101.560582][ T5209] panic+0x2e5/0x730 [ 101.564471][ T5209] ? asm_common_interrupt+0x22/0x40 [ 101.569666][ T5209] ? bpf_jit_dump+0xd0/0xd0 [ 101.574164][ T5209] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 101.580228][ T5209] ? _raw_spin_unlock+0x40/0x40 [ 101.585068][ T5209] check_panic_on_warn+0x80/0xa0 [ 101.590017][ T5209] ? ext4_xattr_set_entry+0x965/0x1e90 [ 101.595470][ T5209] end_report+0x66/0x110 [ 101.599706][ T5209] kasan_report+0x118/0x140 [ 101.604203][ T5209] ? ext4_xattr_set_entry+0x965/0x1e90 [ 101.609656][ T5209] ? ext4_xattr_set_entry+0x965/0x1e90 [ 101.615106][ T5209] kasan_check_range+0x235/0x290 [ 101.620125][ T5209] ? ext4_xattr_set_entry+0x965/0x1e90 [ 101.625595][ T5209] memmove+0x25/0x60 [ 101.629601][ T5209] ext4_xattr_set_entry+0x965/0x1e90 [ 101.634897][ T5209] ext4_xattr_block_set+0xae4/0x32b0 [ 101.640194][ T5209] ? ext4_destroy_inode+0x200/0x200 [ 101.645401][ T5209] ? proc_nr_inodes+0x2f0/0x2f0 [ 101.650245][ T5209] ? _raw_spin_unlock+0x24/0x40 [ 101.655115][ T5209] ? iput+0x768/0x980 [ 101.659103][ T5209] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 101.664563][ T5209] ? ext4_xattr_ibody_set+0x509/0x690 [ 101.669959][ T5209] ext4_xattr_set_handle+0x1338/0x1570 [ 101.675444][ T5209] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 101.681455][ T5209] ext4_xattr_set+0x242/0x320 [ 101.686226][ T5209] ? ext4_xattr_set_credits+0x290/0x290 [ 101.691786][ T5209] ? posix_xattr_acl+0x8f/0xb0 [ 101.696554][ T5209] ? evm_protect_xattr+0x333/0x9d0 [ 101.701687][ T5209] ? ext4_xattr_trusted_get+0x40/0x40 [ 101.707055][ T5209] __vfs_setxattr+0x3e0/0x420 [ 101.711741][ T5209] __vfs_setxattr_noperm+0x129/0x5e0 [ 101.717023][ T5209] vfs_setxattr+0x167/0x2e0 [ 101.721529][ T5209] ? xattr_permission+0x500/0x500 [ 101.726662][ T5209] ? _copy_from_user+0x10b/0x170 [ 101.731591][ T5209] ? setxattr+0x2ce/0x360 [ 101.735999][ T5209] setxattr+0x346/0x360 [ 101.740156][ T5209] ? path_setxattr+0x290/0x290 [ 101.744930][ T5209] ? __mnt_want_write+0x21f/0x2a0 [ 101.750206][ T5209] path_setxattr+0x147/0x290 [ 101.754821][ T5209] ? simple_xattr_list_add+0xf0/0xf0 [ 101.760114][ T5209] ? lock_chain_count+0x20/0x20 [ 101.764966][ T5209] __x64_sys_lsetxattr+0xb4/0xd0 [ 101.769917][ T5209] do_syscall_64+0x4c/0xa0 [ 101.774336][ T5209] ? clear_bhb_loop+0x60/0xb0 [ 101.779003][ T5209] ? clear_bhb_loop+0x60/0xb0 [ 101.783730][ T5209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.789618][ T5209] RIP: 0033:0x7f0cbcf9bf79 [ 101.794023][ T5209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.813985][ T5209] RSP: 002b:00007f0cbdebe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 101.822406][ T5209] RAX: ffffffffffffffda RBX: 00007f0cbd215fa0 RCX: 00007f0cbcf9bf79 [ 101.830364][ T5209] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 101.838330][ T5209] RBP: 00007f0cbd0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 101.846289][ T5209] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 101.854265][ T5209] R13: 00007f0cbd216038 R14: 00007f0cbd215fa0 R15: 00007ffc38b34128 [ 101.862238][ T5209] [ 101.865545][ T5209] Kernel Offset: disabled [ 101.869855][ T5209] Rebooting in 86400 seconds..