last executing test programs: 23.096364153s ago: executing program 0 (id=98): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640), 0x4) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 22.743540747s ago: executing program 0 (id=103): openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 22.386754366s ago: executing program 0 (id=106): r0 = socket$tipc(0x1e, 0x2, 0x0) recvmsg(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000380)=""/33, 0x21}, {0x0}], 0x2, &(0x7f0000000e80)=""/4096, 0x1000}, 0x10102) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) 22.044431984s ago: executing program 0 (id=112): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@order_strict}], [], 0x2c}, 0x3, 0xf02, &(0x7f0000001e40)="$eJzs3U9sHNUZAPCZtdd2YideAwUDJaTQikDBDkmqprcgUI+IS++gkNAIQ2lDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFVlUqBfXQRkpcxX5vvfvs6a7H69l/v5/0+fnNm53vG69lzYxn32TA2Kqtfz1xYjHPsnc+efuRl57Mf3192Z3NNQ6vf81Dr5FlWb2lnyfb+ywsuHr5xdPbtXl2bP1r7GePXmq+djbLstXscPZp1sg+XF754oN3Hz7y0WszN7954emX92j3m9L9AACAUXTxjyt/vffvf7h/4crFQ6ey6ebyeHzeCP3ZcNx/NBwox+PlWtbez1ui1VSy3kSIWrLeRLLeZJJnsiBfPdlOvWC9qQ75JlqWbbefAAAAMIzieW0jy2tLbf1abWlp47z/us/mp/KlZ8+tnD3fp0IBAACA0v79yvpNt0IIIYQQm5ENQA1CCCGE6Gmszff5AgQAAAAwdlrnC5vZboXV3s7U1dxaY2v+7da/9FBt+9dDD3T6/ev177/8w5X//Vf9xQEAoLxRPZqM+xWPo+M8Buk8ghPJ63Z6/F9LtjO5wzqL5hUclvkGi+pMf66Dqqj+nb6P/VJUfzof5qAqqj+dp3NQFdU/XXEdZRXVv+211wFUVP++iusoq6j+/RXXUVZR/bMV11FWUf1zFddRVlH9Byquo6yi+g9WXEdZRfUPy221RfU3Kq6jrKL6Fyquo6yi+m/o7uX/6GUtZRTVf2PFdZRVVP9NFdfRL3eENv4cDiXjrefP6TndsJzjAQAAwLj7r/n/RE+iPgA1CCGEGNn4z1r/axBCCFF5rA5ADaMUr/T7AgQAAADQd/FzAfFT72tBHJ/oML5xoaF4vN7h9VMdxqc75gcAAAB+8/rZW9/KNz/nv9v58OK8UXH+pZ3OY5TOR7jT/Lud92y3+Ydl3jIAAADGS/7tT6/d98h7zy9cuXjoVMvZ77VwvhvnAZ0M1wY+Dv14X8Bc0s/jOfSp9jy1gvXS6wMHirb32C53FAAAAMZYPH9vZHltqeW8u5HVaktLk83z8cWsnp89t3LmaOjH57P8fr4+fX35g11lG5ankgEAAMBo2Tzf3+78f/M5vovZVL707LmVs+c3+nPN5fVa63WB+c3leet1gUay/FjB8uOhH5/f+d35fevLl05/b+XJXu88AAAAjInzL1x4+omVlTM/8I1vxvOb/YNRxqB90++/TAAAQK99/vnb9R8en/vtxuf/N+e/i5//Pxz6jTC335/CCvE+gfg5gC2f13+8Pc980XrPta/XSNabCDGd1D3Tsp2sZb7B+LqFonyN9u1MFeSbTfLNJfnSeQomk/VjvoPJ8vQTEHG9+WR5Og/jZJIjT/LflQEAAECx5eefeW75/AsXHjj3zBNPnXnqzLPHj5381smTRx/85oPL6/f1L7fe3Q8AAAAMo82bfvtdCQAAAAAAAAAAAAAAAAAAAIyvKh4n1u99BAAAgHH3r1eyLFsVQhTExiMw+1+HEEIIsbOID0vudx2i2pgYgBpEiNrmSVffaxFiI9bW0ifNAwAAAOytq5dfPN3abrGa9zRfc2uNjeZayBvbuQf+snA94mqXHmq/XrK/p9Uw7qr+/Zd/uPK//2pv88d/DXb/96/WvoFT5fLes/zzxdb8t012mT/d/8fK5T+S5L8n6y7/2ntJ/sfL5b83yb+/y/xb9v+5cvnvC/kXQ//I3d3mb3//p0Mb92Nfl/m/nuz/k1m3+ZP9b3SZMHF/yA8A46jW7wL2SDxKiMfRs6Ef9zccbmbp3Q87Pf6vJduZ3HXl7duNx0G3hH48XppL8kY7rX822d6BzaH6TupMDctdJUX19+p93GtF9Xf15g2AovqnKq6jrKL6pyuuo6yi+mcqrqOsovq7PQ/tt6L6h+W6clH9sxXXUVZR/XMV11FWUf0HKq6jrKL6D1ZcR1lF9c9XXEdZRfWXvKxWuaL6Fyquo6yi+m+ouI6yiuq/seI6yiqq/6aK6+iX20NbdD4czz/nw1jsN5L+9DY/y1G9tgAAAADD5p/m/xNCCCGEEEIIIfYivv+N/tfQjLW1fl+BoJ/29tPMAAwqf//Hm/d/vHn/x5v3n/8n3sOfJ/1oosP4ZIfxeofxqWQ8/X2d7jB+Y7LdtSCO39Rh/Esdxg92GL+lw/hih/FbO4zf1mH89g7jAAAAjIebQ+v8EAAAAEbXS7/4+I1f3fP45YUrFw+dyqa2zDt/NPSnw//WXw/9dN77qB7+5/+j0P9ZaH8X2r8l67v/BAAAAPZefE6M//8DAADA6IrPKXX+DwAAAKNrIbTO/wEAAGB03RBa5/8AAAAwwvKZ7ReHNl4XuCu03c7rBwAMvi+H9o7QHgrtnaH9SmjjccDdof1qRfUBAL3z0+/8+ORb+eZ8/8eT8atheWy3WN24UpDX2mfy3xfa/aH9Wpf1pM8D6DZ/dLDLPHuVf36X+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0VFb/3rixGKeZe988vYjP5l648/Xl93ZXOPw+tc89BpZltWbr4ujm/1fhhWvXn7xdGt7LbR5dizLs7y5PHv0UjPTbJZlq9nh7NOskX24vPLFB+8+fOSj12ZufvPC0y/v4Y+gbf8AAABgFP0vAAD//5d6H5E=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) 21.245032028s ago: executing program 0 (id=119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r1, 0xffec}, 0x8) 20.265285s ago: executing program 0 (id=123): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x1b1) rmdir(&(0x7f0000000000)='./file0\x00') 19.07550604s ago: executing program 32 (id=123): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x1b1) rmdir(&(0x7f0000000000)='./file0\x00') 4.102764416s ago: executing program 4 (id=239): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000008740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38, 0x1000}}], 0x1, 0x40080c1) 3.723996886s ago: executing program 4 (id=244): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406104724e00000000000109022d0001000000830904000001030001000921fcff0001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "00dec300"}, @global=@item_012={0x0, 0x1, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "035c1e4a"}]}}, 0x0}, 0x0) 3.503968107s ago: executing program 3 (id=246): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x1b, 0xf5, 0xf7, 0x8, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xb, 0x80, 0x5, "", [{{0x9, 0x4, 0xaf, 0x9, 0x0, 0x8, 0x6, 0x1, 0x2}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(r0, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x1}) 2.881141557s ago: executing program 1 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1', 0x3) 2.447992873s ago: executing program 2 (id=255): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/151, 0x97}], 0x1, &(0x7f0000000500)=""/15, 0xf}, 0x4}], 0x1, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 2.302268643s ago: executing program 1 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}}, 0x40014) 2.178172052s ago: executing program 1 (id=259): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x4) listen(r0, 0x6) 1.997652178s ago: executing program 1 (id=260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="9d0e", 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x40001143, 0x0, 0x0) 1.832505715s ago: executing program 4 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1.76063141s ago: executing program 3 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000002000000000000000000000000000000000000006d79") 1.731555745s ago: executing program 1 (id=264): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffff91, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x8, 0x0, 0x64, 0x0, 0x0, 0x0, 0xffffff31, 0x0, 0x8, 0x16, &(0x7f0000001380)}}, 0x10) 1.594253359s ago: executing program 1 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='vhci_hcd.0', 0xa) 1.528150664s ago: executing program 3 (id=267): syz_mount_image$bfs(&(0x7f0000000a80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xb7, &(0x7f0000001a40)="$eJzs0rFJBUEQBuD/3Ts9DkELsAd7MDW3ggsNjRRBK7EDW7GE68DgUpOR5U7BxEAQFb4v2J2dYeGH3efXp9McJ3WfVFUdJhmz1tc3t1eXF23dJ8lj+gxZve/8c13q4y3rpJ2Tl/MMD1uvDeflbpp3meal/YqjqtqGB7+TGQAA+J4uZ1u1+9Qfv7rUJ9l3PxkLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M94CwAA///K8iH3") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.512734151s ago: executing program 4 (id=268): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00']}, &(0x7f0000001040)={[&(0x7f00000000c0)='-\xf3\x00', &(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) 1.415971092s ago: executing program 2 (id=269): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000b00)={[{@session={'session', 0x3d, 0x6}}, {@gid}, {@session={'session', 0x3d, 0x30}}, {@unhide}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'none'}}, {}, {@map_normal}, {}, {@cruft}, {@map_off}]}, 0x0, 0x411, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.415749075s ago: executing program 5 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 1.092001999s ago: executing program 2 (id=271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newtclass={0x30, 0x28, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0xfff2, 0x7}, {0x9, 0xfff1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.089711595s ago: executing program 4 (id=272): socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f00000000c0)={[{@showassoc}, {@session={'session', 0x3d, 0x2a}}, {@hide}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@check_relaxed}, {}, {@nojoliet}]}, 0x2, 0x558, &(0x7f00000002c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 1.062776903s ago: executing program 5 (id=273): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1.018524664s ago: executing program 3 (id=274): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 884.684025ms ago: executing program 2 (id=275): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x40047459, 0x0) 815.956848ms ago: executing program 2 (id=276): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 739.792599ms ago: executing program 2 (id=277): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4434, &(0x7f0000008940)="$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") symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000020980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x25a89e, 0x0, 0x42, 0x0, &(0x7f0000000140)) 734.608738ms ago: executing program 4 (id=278): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 565.555815ms ago: executing program 5 (id=279): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000009200)=[{{&(0x7f0000000540)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x8800) 373.726529ms ago: executing program 3 (id=280): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x29b, &(0x7f0000000ac0)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97454800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) 288.069947ms ago: executing program 5 (id=281): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 236.682678ms ago: executing program 5 (id=282): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) vmsplice(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) 173.289786ms ago: executing program 5 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x808d}, 0x4000) 0s ago: executing program 3 (id=284): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000200)={"e3e05db0cfa476cfbe8f03f63fb92ed4785b97c80887b42b6c6a638941e7b75a", r2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 75.658953][ T5605] cgroup: Unknown subsys name 'net' [ 75.753945][ T5605] cgroup: Unknown subsys name 'cpuset' [ 75.763087][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.379374][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.728958][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.730827][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.748385][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.748850][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.749760][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.751693][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.752889][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.753265][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.754910][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.755874][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.757261][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.757395][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.758874][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.761155][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.762332][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.763920][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.764758][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.765380][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.767720][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.786795][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.787946][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.808181][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.812844][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.817760][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.817963][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.653944][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.654746][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.655427][ T5624] bridge_slave_0: entered allmulticast mode [ 81.657276][ T5624] bridge_slave_0: entered promiscuous mode [ 81.661773][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.661877][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.662340][ T5624] bridge_slave_1: entered allmulticast mode [ 81.664180][ T5624] bridge_slave_1: entered promiscuous mode [ 81.738518][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.765460][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.790998][ T5617] Bluetooth: hci4: command tx timeout [ 81.870385][ T5617] Bluetooth: hci2: command tx timeout [ 81.870688][ T5617] Bluetooth: hci3: command tx timeout [ 81.870806][ T5617] Bluetooth: hci1: command tx timeout [ 81.870910][ T5617] Bluetooth: hci0: command tx timeout [ 81.966855][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.966989][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.967120][ T5615] bridge_slave_0: entered allmulticast mode [ 81.969623][ T5615] bridge_slave_0: entered promiscuous mode [ 81.975480][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.977173][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.977302][ T5615] bridge_slave_1: entered allmulticast mode [ 81.982885][ T5615] bridge_slave_1: entered promiscuous mode [ 81.991668][ T5624] team0: Port device team_slave_0 added [ 81.997952][ T5624] team0: Port device team_slave_1 added [ 82.030376][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.030485][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.030615][ T5619] bridge_slave_0: entered allmulticast mode [ 82.041012][ T5619] bridge_slave_0: entered promiscuous mode [ 82.123653][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.123804][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.123929][ T5619] bridge_slave_1: entered allmulticast mode [ 82.125849][ T5619] bridge_slave_1: entered promiscuous mode [ 82.233267][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.269752][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.292862][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.299913][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.304861][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.309772][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.350021][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.363979][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.364062][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.364088][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.460680][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.461651][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.461795][ T5616] bridge_slave_0: entered allmulticast mode [ 82.463643][ T5616] bridge_slave_0: entered promiscuous mode [ 82.469616][ T5619] team0: Port device team_slave_0 added [ 82.487357][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.487463][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.487865][ T5618] bridge_slave_0: entered allmulticast mode [ 82.489777][ T5618] bridge_slave_0: entered promiscuous mode [ 82.523807][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.525341][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.525497][ T5616] bridge_slave_1: entered allmulticast mode [ 82.527249][ T5616] bridge_slave_1: entered promiscuous mode [ 82.532024][ T5619] team0: Port device team_slave_1 added [ 82.532214][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.532314][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.533115][ T5618] bridge_slave_1: entered allmulticast mode [ 82.535795][ T5618] bridge_slave_1: entered promiscuous mode [ 82.556214][ T5615] team0: Port device team_slave_0 added [ 82.559381][ T5615] team0: Port device team_slave_1 added [ 82.669967][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.671171][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.671185][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.671209][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.674641][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.674654][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.674688][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.696973][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.697653][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.697665][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.697687][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.704024][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.722808][ T5624] hsr_slave_0: entered promiscuous mode [ 82.723973][ T5624] hsr_slave_1: entered promiscuous mode [ 82.729162][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.744817][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.744833][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.744857][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.830740][ T5618] team0: Port device team_slave_0 added [ 82.834052][ T5616] team0: Port device team_slave_0 added [ 82.913379][ T5618] team0: Port device team_slave_1 added [ 82.916760][ T5616] team0: Port device team_slave_1 added [ 82.924235][ T5619] hsr_slave_0: entered promiscuous mode [ 82.925351][ T5619] hsr_slave_1: entered promiscuous mode [ 82.926693][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 82.926761][ T5619] Cannot create hsr debugfs directory [ 82.962417][ T5615] hsr_slave_0: entered promiscuous mode [ 82.963519][ T5615] hsr_slave_1: entered promiscuous mode [ 82.964328][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 82.964347][ T5615] Cannot create hsr debugfs directory [ 83.037655][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.037738][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.037764][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.065206][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.065225][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.065248][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.093856][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.093873][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.093896][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.114470][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.114488][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.114512][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.274757][ T5616] hsr_slave_0: entered promiscuous mode [ 83.275769][ T5616] hsr_slave_1: entered promiscuous mode [ 83.276457][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 83.276475][ T5616] Cannot create hsr debugfs directory [ 83.354282][ T5618] hsr_slave_0: entered promiscuous mode [ 83.355285][ T5618] hsr_slave_1: entered promiscuous mode [ 83.355998][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 83.356016][ T5618] Cannot create hsr debugfs directory [ 83.700549][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.712325][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.713601][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.724254][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.755268][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.765495][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.766487][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.777190][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.867165][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.881551][ T5625] Bluetooth: hci4: command tx timeout [ 83.892346][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.896080][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.906111][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.915012][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.923707][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.938730][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.948094][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.956704][ T5625] Bluetooth: hci0: command tx timeout [ 83.956738][ T5625] Bluetooth: hci1: command tx timeout [ 83.956761][ T5625] Bluetooth: hci3: command tx timeout [ 83.956784][ T5625] Bluetooth: hci2: command tx timeout [ 84.030053][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.041976][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.047971][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.059544][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.070506][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.075195][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.087695][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.094552][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.178063][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.222209][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.233735][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.237909][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.253071][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.264286][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.274002][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.274831][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.284215][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.332398][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.387190][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.391440][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.395942][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.396077][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.419252][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.428901][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.436077][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.446030][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.449459][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.456699][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.466972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.467085][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.529191][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.606221][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.634358][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.661758][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.661871][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.685699][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.685832][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.757006][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.787596][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.787725][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.818678][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.819452][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.838832][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.939434][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.964876][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.965002][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.989375][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.989504][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.018569][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.179786][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.226129][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.226301][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.255811][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.255949][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.772193][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.952082][ T5617] Bluetooth: hci4: command tx timeout [ 86.010719][ T5624] veth0_vlan: entered promiscuous mode [ 86.031898][ T5617] Bluetooth: hci2: command tx timeout [ 86.032466][ T5617] Bluetooth: hci3: command tx timeout [ 86.032509][ T5617] Bluetooth: hci1: command tx timeout [ 86.032549][ T5617] Bluetooth: hci0: command tx timeout [ 86.075783][ T5624] veth1_vlan: entered promiscuous mode [ 86.268945][ T5624] veth0_macvtap: entered promiscuous mode [ 86.316455][ T5624] veth1_macvtap: entered promiscuous mode [ 86.392587][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.399135][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.444498][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.517124][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.529389][ T161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.580857][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.582048][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.629461][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.683178][ T5615] veth0_vlan: entered promiscuous mode [ 86.746531][ T5615] veth1_vlan: entered promiscuous mode [ 86.858966][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.912003][ T161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.941706][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.941766][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.979076][ T5615] veth0_macvtap: entered promiscuous mode [ 86.993980][ T25] cfg80211: failed to load regulatory.db [ 87.048854][ T5616] veth0_vlan: entered promiscuous mode [ 87.055338][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.055362][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.065402][ T5615] veth1_macvtap: entered promiscuous mode [ 87.134022][ T5616] veth1_vlan: entered promiscuous mode [ 87.137985][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.172929][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.179525][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.187131][ T5618] veth0_vlan: entered promiscuous mode [ 87.224307][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.224391][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.224428][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.224463][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.257239][ T5618] veth1_vlan: entered promiscuous mode [ 87.314822][ T5619] veth0_vlan: entered promiscuous mode [ 87.371883][ T5616] veth0_macvtap: entered promiscuous mode [ 87.642226][ T5619] veth1_vlan: entered promiscuous mode [ 87.662851][ T5616] veth1_macvtap: entered promiscuous mode [ 87.788096][ T5618] veth0_macvtap: entered promiscuous mode [ 87.805523][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.815696][ T5618] veth1_macvtap: entered promiscuous mode [ 87.822950][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.822989][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.848626][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.896039][ T5619] veth0_macvtap: entered promiscuous mode [ 87.925813][ T5619] veth1_macvtap: entered promiscuous mode [ 87.933589][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.943273][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.964704][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.974518][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.990353][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.990901][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.991245][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.991300][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.047360][ T5625] Bluetooth: hci4: command tx timeout [ 88.111647][ T5617] Bluetooth: hci1: command tx timeout [ 88.111706][ T5617] Bluetooth: hci3: command tx timeout [ 88.111729][ T5617] Bluetooth: hci2: command tx timeout [ 88.111790][ T5625] Bluetooth: hci0: command tx timeout [ 88.139089][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.200816][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.251814][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.251870][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.363304][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.363536][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.363692][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.363835][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.469841][ T161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.480649][ T161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.494962][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.495192][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.541921][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.543057][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.301605][ T5829] loop0: detected capacity change from 0 to 512 [ 89.394553][ T5829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.531689][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.673701][ T5834] loop3: detected capacity change from 0 to 512 [ 89.728803][ T5822] loop2: detected capacity change from 0 to 131072 [ 89.733508][ T5822] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 89.733538][ T5822] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 89.739022][ T5822] F2FS-fs (loop2): invalid crc value [ 89.761453][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.761503][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.879097][ T5822] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 89.886057][ T5822] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 89.886197][ T5822] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 90.074183][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.074922][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.220067][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.220124][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.331783][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.331841][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.385400][ T5846] process 'syz.3.17' launched '/dev/fd/4' with NULL argv: empty string added [ 90.607979][ T5850] ªªªªªª: renamed from vlan0 (while UP) [ 91.311402][ T2405] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.535829][ T2405] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 91.548467][ T2405] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.548566][ T2405] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.548614][ T2405] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.549176][ T2405] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.549232][ T2405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.701369][ T5856] loop1: detected capacity change from 0 to 32768 [ 91.725453][ T5856] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (5856) [ 91.766413][ T5856] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.777616][ T5856] BTRFS info (device loop1): using crc32c checksum algorithm [ 91.818177][ T5876] ÿ [ 92.057487][ T2405] gud 5-1:1.0: Unexpected status OK for failed transfer [ 92.057544][ T2405] gud 5-1:1.0: probe with driver gud failed with error -32 [ 92.153667][ T5856] BTRFS info (device loop1): enabling ssd optimizations [ 92.153732][ T5856] BTRFS info (device loop1): turning on async discard [ 92.163539][ T5856] BTRFS info (device loop1): enabling free space tree [ 92.307116][ T25] usb 5-1: USB disconnect, device number 2 [ 92.588221][ T5871] loop2: detected capacity change from 0 to 40427 [ 92.636039][ T5871] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 92.636093][ T5871] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 92.661410][ T5871] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 92.711382][ T5618] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 93.056324][ T5871] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 93.087449][ T5871] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 93.087515][ T5871] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.493237][ T5914] mmap: syz.4.36 (5914) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.713331][ T5873] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 93.941958][ T192] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.095451][ T5924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.112309][ T192] usb 1-1: not running at top speed; connect to a high speed hub [ 94.121140][ T192] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 94.135187][ T192] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.145624][ T192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.170013][ T192] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 94.178262][ T192] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 94.186368][ T192] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 94.200016][ T192] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 94.208315][ T192] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 94.242789][ T192] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 94.261181][ T192] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 94.269115][ T192] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 94.283192][ T192] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 94.639612][ T5931] loop3: detected capacity change from 0 to 32768 [ 94.670635][ T5931] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.742131][ T5931] XFS (loop3): Ending clean mount [ 94.834733][ T5616] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.875538][ T5940] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 94.916068][ T5944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 95.098432][ T5725] usb 1-1: USB disconnect, device number 2 [ 95.248656][ T5725] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 95.305619][ T5725] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 95.324898][ T5725] keyspan 1-1:1.0: device disconnected [ 95.886444][ T5970] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.167573][ T5975] loop3: detected capacity change from 0 to 4096 [ 96.535415][ T5984] loop4: detected capacity change from 0 to 8192 [ 96.580872][ T5984] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.639161][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 96.978916][ T5998] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 97.066078][ T5979] loop0: detected capacity change from 0 to 32768 [ 97.198820][ T5979] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.368298][ T5979] XFS (loop0): Ending clean mount [ 97.438360][ T6017] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.451514][ T5979] XFS (loop0): Quotacheck needed: Please wait. [ 97.678526][ T5979] XFS (loop0): Quotacheck: Done. [ 97.768282][ T30] audit: type=1800 audit(1786447090.527:2): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.59" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 97.847304][ T6006] loop3: detected capacity change from 0 to 32768 [ 97.863379][ T6006] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.72 (6006) [ 97.969908][ T5624] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.998218][ T6006] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 98.005720][ T6006] BTRFS info (device loop3): using crc32c checksum algorithm [ 98.045434][ T6011] loop2: detected capacity change from 0 to 32768 [ 98.132719][ T6011] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.252348][ T6011] XFS (loop2): Ending clean mount [ 98.352168][ T6006] BTRFS info (device loop3): enabling ssd optimizations [ 98.359476][ T6006] BTRFS info (device loop3): turning on async discard [ 98.366619][ T6006] BTRFS info (device loop3): enabling free space tree [ 98.438738][ T6011] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 98.561354][ T5616] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 98.657648][ T5615] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.169286][ T6057] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 99.356336][ T6063] loop2: detected capacity change from 0 to 512 [ 99.377141][ T6019] loop4: detected capacity change from 0 to 32768 [ 99.378087][ T6019] ======================================================= [ 99.378087][ T6019] WARNING: The mand mount option has been deprecated and [ 99.378087][ T6019] and is ignored by this kernel. Remove the mand [ 99.378087][ T6019] option from the mount to silence this warning. [ 99.378087][ T6019] ======================================================= [ 99.464810][ T6063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.480983][ T6063] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.545411][ T6019] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 100.016515][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.090641][ T5745] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.135425][ T5619] ocfs2: Unmounting device (7,4) on (node local) [ 100.160268][ T192] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.203193][ T30] audit: type=1326 audit(1786447092.957:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.233135][ T30] audit: type=1326 audit(1786447092.997:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.258650][ T5745] usb 1-1: Using ep0 maxpacket: 16 [ 100.260234][ T5745] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 100.266638][ T30] audit: type=1326 audit(1786447093.027:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.268976][ T30] audit: type=1326 audit(1786447093.027:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.269986][ T30] audit: type=1326 audit(1786447093.027:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.271055][ T30] audit: type=1326 audit(1786447093.027:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.272230][ T30] audit: type=1326 audit(1786447093.027:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.276952][ T30] audit: type=1326 audit(1786447093.037:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.276996][ T30] audit: type=1326 audit(1786447093.037:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.2.91" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7a59e0d9 code=0x7ffc0000 [ 100.354046][ T5745] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 100.354183][ T5745] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 100.354206][ T5745] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 100.354229][ T5745] usb 1-1: config 1 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 100.354250][ T5745] usb 1-1: config 1 interface 0 has no altsetting 0 [ 100.354285][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.356571][ T192] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 100.460799][ T192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.460859][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 100.460886][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 100.460911][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 100.460935][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 100.460960][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 100.460984][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 100.461008][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 100.461031][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 100.461055][ T192] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.461076][ T192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 100.461098][ T192] usb 4-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 100.530641][ T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.530668][ T192] usb 4-1: Product: syz [ 100.530682][ T192] usb 4-1: Manufacturer: syz [ 100.530695][ T192] usb 4-1: SerialNumber: syz [ 100.545405][ T5745] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 100.553624][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.553766][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.553879][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.554028][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.554964][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.555095][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.555200][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.555335][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.562046][ T192] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 100.565433][ T192] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 100.569243][ T192] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 100.572264][ T192] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 100.574832][ T192] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 100.574917][ T192] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 100.575030][ T192] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 100.576788][ T192] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 100.647733][ T6091] loop2: detected capacity change from 0 to 764 [ 100.670601][ T5725] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 100.832649][ T5725] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 100.835071][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.835092][ T5725] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.835134][ T5725] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 100.835172][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.939876][ T2405] usb 1-1: USB disconnect, device number 3 [ 101.007406][ T5725] hub 2-1:1.0: bad descriptor, ignoring hub [ 101.007465][ T5725] hub 2-1:1.0: probe with driver hub failed with error -5 [ 101.008159][ T5725] cdc_wdm 2-1:1.0: skipping garbage [ 101.008180][ T5725] cdc_wdm 2-1:1.0: skipping garbage [ 101.039020][ T5725] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 101.066721][ T192] usb 4-1: USB disconnect, device number 2 [ 101.214431][ T192] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 101.253677][ T192] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 101.265086][ T192] keyspan 4-1:1.0: device disconnected [ 101.301136][ T969] usb 2-1: USB disconnect, device number 2 [ 101.459935][ T6087] loop4: detected capacity change from 0 to 32768 [ 101.894770][ T6101] loop0: detected capacity change from 0 to 512 [ 101.915429][ T6101] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.915483][ T6101] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.968750][ T6101] EXT4-fs (loop0): 1 truncate cleaned up [ 101.994845][ T6101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.034770][ T6104] tun0: tun_chr_ioctl cmd 35108 [ 102.149977][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.172481][ T6108] loop2: detected capacity change from 0 to 1024 [ 102.257796][ T6108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.257921][ T6108] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.572492][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.635130][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.109'. [ 102.771807][ T6130] loop4: detected capacity change from 0 to 128 [ 102.784921][ T6130] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.803005][ T6130] hpfs: filesystem error: improperly stopped [ 102.809171][ T6130] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.817506][ T6130] hpfs: You really don't want any checks? You are crazy... [ 102.825298][ T6130] hpfs: hpfs_map_sector(): read error [ 102.830962][ T6130] hpfs: code page support is disabled [ 102.841918][ T6130] hpfs: hpfs_map_4sectors(): unaligned read [ 102.853888][ T6130] hpfs: hpfs_map_4sectors(): unaligned read [ 102.860050][ T6130] hpfs: filesystem error: unable to find root dir [ 102.872695][ T6130] hpfs: hpfs_map_4sectors(): unaligned read [ 102.882347][ T6130] hpfs: hpfs_map_sector(): read error [ 102.887905][ T6130] hpfs: hpfs_map_sector(): read error [ 103.204506][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.113'. [ 103.214959][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.113'. [ 103.226414][ T6134] loop0: detected capacity change from 0 to 4096 [ 103.447105][ T6143] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.460802][ T6134] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 103.496595][ T6121] loop1: detected capacity change from 0 to 32768 [ 103.508208][ T6134] Remounting filesystem read-only [ 103.520578][ T6121] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.105 (6121) [ 103.626564][ T6121] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.626629][ T6121] BTRFS info (device loop1): using sha256 checksum algorithm [ 103.812039][ T6121] BTRFS info (device loop1): enabling ssd optimizations [ 103.819294][ T6121] BTRFS info (device loop1): turning on async discard [ 103.826342][ T6121] BTRFS info (device loop1): enabling free space tree [ 103.833426][ T6121] BTRFS info (device loop1): force clearing of disk cache [ 103.841937][ T6121] BTRFS info (device loop1): force zlib compression, level 3 [ 103.849557][ T6121] BTRFS info (device loop1): max_inline set to 0 [ 104.048927][ T6164] loop2: detected capacity change from 0 to 512 [ 104.058169][ T6164] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.058208][ T6164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.073255][ T6164] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.120: bad orphan inode 131072 [ 104.073404][ T6164] loop2: lost filesystem error report for type 5 error -117 [ 104.085229][ T6164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.189909][ T6164] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 104.650265][ T6169] loop3: detected capacity change from 0 to 256 [ 104.723785][ T6144] loop4: detected capacity change from 0 to 32768 [ 104.725006][ T6169] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 104.754378][ T6144] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.116 (6144) [ 104.783532][ T5618] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.819625][ T6144] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 104.831965][ T6144] BTRFS info (device loop4): using crc32c checksum algorithm [ 104.848150][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.991578][ T6144] BTRFS info (device loop4): enabling ssd optimizations [ 104.991628][ T6144] BTRFS info (device loop4): turning on async discard [ 105.008712][ T6144] BTRFS info (device loop4): enabling free space tree [ 105.207129][ T161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.384549][ T5619] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.635284][ T161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.808410][ T161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.957857][ T6201] loop3: detected capacity change from 0 to 128 [ 106.047440][ T6201] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.102167][ T6201] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.217527][ T161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.318708][ T5616] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.338699][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.353943][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.360608][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.378613][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.392837][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.606958][ T6213] loop1: detected capacity change from 0 to 64 [ 106.727967][ T6213] Bad inode number on dev loop1: 2 is out of range [ 106.752056][ T6219] block2mtd: error: cannot open device #! [ 107.043643][ T161] bridge_slave_1: left allmulticast mode [ 107.057350][ T161] bridge_slave_1: left promiscuous mode [ 107.071212][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.144242][ T161] bridge_slave_0: left allmulticast mode [ 107.144301][ T161] bridge_slave_0: left promiscuous mode [ 107.144542][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.603580][ T6207] loop2: detected capacity change from 0 to 32768 [ 107.645669][ T6207] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.763921][ T6207] XFS (loop2): Ending clean mount [ 107.988710][ T5615] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.135470][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.167339][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.196946][ T161] bond0 (unregistering): Released all slaves [ 108.252630][ T6249] nlmon0: entered promiscuous mode [ 108.259000][ T6248] nlmon0: left promiscuous mode [ 108.430274][ T5625] Bluetooth: hci4: command tx timeout [ 108.949222][ T6280] loop2: detected capacity change from 0 to 512 [ 108.996270][ T6280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 108.996470][ T6280] System zones: 1-12 [ 109.043457][ T6280] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 109.069973][ T6280] loop2: lost filesystem error report for type 5 error -117 [ 109.075988][ T6280] EXT4-fs (loop2): 1 truncate cleaned up [ 109.083450][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 109.083474][ C1] EXT4-fs (loop2): initial error at time 1786447101: ext4_process_orphan:346 [ 109.083497][ C1] EXT4-fs (loop2): last error at time 1786447101: ext4_process_orphan:346 [ 109.123759][ T6280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.249035][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.385989][ T6292] loop3: detected capacity change from 0 to 64 [ 109.622648][ T6298] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 109.699359][ T161] hsr_slave_0: left promiscuous mode [ 109.707992][ T161] hsr_slave_1: left promiscuous mode [ 109.717780][ T6300] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 109.721982][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.722015][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.725643][ T6300] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.161'. [ 109.770571][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.770620][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.926116][ T161] veth1_macvtap: left promiscuous mode [ 109.926204][ T161] veth0_macvtap: left promiscuous mode [ 109.926315][ T161] veth1_vlan: left promiscuous mode [ 109.926480][ T161] veth0_vlan: left promiscuous mode [ 109.936462][ T6309] nfs: Bad value for 'source' [ 109.984873][ T6308] loop1: detected capacity change from 0 to 2048 [ 110.065737][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.065891][ T6308] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.169196][ T6314] loop2: detected capacity change from 0 to 512 [ 110.169836][ T6308] fs-verity (loop1, inode 13): Unsupported log_blocksize: 13 [ 110.206095][ T6314] EXT4-fs (loop2): Test dummy encryption mode enabled [ 110.232236][ T6314] EXT4-fs (loop2): 1 truncate cleaned up [ 110.251216][ T6314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.306653][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.382790][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.416699][ T6317] loop1: detected capacity change from 0 to 128 [ 110.478437][ T6317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 110.478558][ T6317] System zones: 1-3, 19-19, 35-36 [ 110.493002][ T6317] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.495083][ T6317] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.542683][ T5625] Bluetooth: hci4: command tx timeout [ 110.677136][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.889643][ T161] team0 (unregistering): Port device team_slave_1 removed [ 110.915952][ T161] team0 (unregistering): Port device team_slave_0 removed [ 111.115534][ T6327] loop1: detected capacity change from 0 to 32768 [ 111.128840][ T6327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.168 (6327) [ 111.163630][ T6327] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.163685][ T6327] BTRFS info (device loop1): using sha256 checksum algorithm [ 111.219288][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 111.356437][ T6327] BTRFS info (device loop1): enabling ssd optimizations [ 111.356496][ T6327] BTRFS info (device loop1): turning on async discard [ 111.356531][ T6327] BTRFS info (device loop1): enabling free space tree [ 111.810847][ T6354] veth1_to_batadv: entered promiscuous mode [ 111.856949][ T6361] loop2: detected capacity change from 0 to 512 [ 111.896609][ T5618] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.947322][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 112.063799][ T6361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.070340][ T6361] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.505788][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.592362][ T5625] Bluetooth: hci4: command tx timeout [ 113.176976][ T6401] loop3: detected capacity change from 0 to 64 [ 113.329779][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 113.356487][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 113.356544][ T30] audit: type=1800 audit(1786447106.117:23): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.185" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 113.438753][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.438890][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.439041][ T6206] bridge_slave_0: entered allmulticast mode [ 113.459619][ T6206] bridge_slave_0: entered promiscuous mode [ 113.495899][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.496756][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.497305][ T6206] bridge_slave_1: entered allmulticast mode [ 113.519178][ T6206] bridge_slave_1: entered promiscuous mode [ 113.530643][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 113.530689][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 113.530722][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 113.720114][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.734962][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.822633][ T6206] team0: Port device team_slave_0 added [ 113.831851][ T6206] team0: Port device team_slave_1 added [ 113.877711][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.884889][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.911804][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.927607][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.927653][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.927681][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.218154][ T6206] hsr_slave_0: entered promiscuous mode [ 114.219294][ T6206] hsr_slave_1: entered promiscuous mode [ 114.303875][ T6430] xt_hashlimit: size too large, truncated to 1048576 [ 114.576846][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.634235][ T6433] bridge_slave_0 (unregistering): left allmulticast mode [ 114.634295][ T6433] bridge_slave_0 (unregistering): left promiscuous mode [ 114.635830][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.664856][ T6438] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in; [ 114.664856][ T6438] program syz.2.198 not setting count and/or reply_len properly [ 114.682116][ T5625] Bluetooth: hci4: command tx timeout [ 115.074814][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 115.409758][ T6465] loop1: detected capacity change from 0 to 2048 [ 115.427976][ T6465] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.429657][ T6465] NILFS (loop1): mounting unchecked fs [ 115.455864][ T5738] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.494851][ T5632] udevd[5632]: incorrect nilfs2 checksum on /dev/loop1 [ 115.528325][ T6465] NILFS (loop1): recovery complete [ 115.557905][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 115.568272][ T6470] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.620771][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 115.623837][ T5738] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 115.643364][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.643424][ T5738] usb 5-1: Product: syz [ 115.643456][ T5738] usb 5-1: Manufacturer: syz [ 115.643472][ T5738] usb 5-1: SerialNumber: syz [ 115.663062][ T5738] usb 5-1: config 0 descriptor?? [ 115.714180][ T5738] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 115.791153][ T5725] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 115.928788][ T5738] gspca_sonixj: reg_w1 err -71 [ 115.928900][ T5738] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 115.961086][ T5725] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 115.965262][ T5738] usb 5-1: USB disconnect, device number 3 [ 115.978963][ T5725] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 115.979031][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 115.979082][ T5725] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 115.979115][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.979154][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.050510][ T5725] usb 3-1: config 0 descriptor?? [ 116.057552][ T6469] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.228714][ T6206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.246948][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.250579][ T6206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.298702][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.301821][ T6206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.329660][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.333004][ T6206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.382459][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.497584][ T5725] steelseries 0003:1038:1410.0001: unknown main item tag 0x2 [ 116.507546][ T5725] steelseries 0003:1038:1410.0001: unknown main item tag 0x3 [ 116.515667][ T5725] steelseries 0003:1038:1410.0001: unknown main item tag 0x1 [ 116.524505][ T5725] steelseries 0003:1038:1410.0001: unknown main item tag 0x2 [ 116.533365][ T5725] steelseries 0003:1038:1410.0001: not enough fields in HID_OUTPUT_REPORT 0 [ 116.728779][ T2405] usb 3-1: USB disconnect, device number 2 [ 116.796707][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.857239][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.893385][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.893521][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.942484][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.942616][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.147185][ T5738] kernel read not supported for file /vcs (pid: 5738 comm: kworker/1:5) [ 117.720941][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 118.070380][ T192] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.249431][ T192] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 118.260335][ T192] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.260381][ T192] usb 5-1: config 0 has no interface number 0 [ 118.280125][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.280251][ T192] usb 5-1: Product: syz [ 118.280300][ T192] usb 5-1: Manufacturer: syz [ 118.280321][ T192] usb 5-1: SerialNumber: syz [ 118.308654][ T192] usb 5-1: config 0 descriptor?? [ 118.546332][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.578304][ T192] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 118.602288][ T192] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.614201][ T192] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 118.633448][ T192] usb 5-1: media controller created [ 118.713106][ T192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.978523][ T6531] loop3: detected capacity change from 0 to 32768 [ 119.220494][ T5738] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 119.373465][ T5738] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 119.377849][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.377875][ T5738] usb 3-1: Product: syz [ 119.377889][ T5738] usb 3-1: Manufacturer: syz [ 119.377902][ T5738] usb 3-1: SerialNumber: syz [ 119.388955][ T5738] usb 3-1: config 0 descriptor?? [ 119.394816][ T5738] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 119.589331][ T6206] veth0_vlan: entered promiscuous mode [ 119.606955][ T6206] veth1_vlan: entered promiscuous mode [ 119.805885][ T192] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 119.863269][ T6206] veth0_macvtap: entered promiscuous mode [ 119.885379][ T6206] veth1_macvtap: entered promiscuous mode [ 119.942861][ T192] usb 5-1: USB disconnect, device number 4 [ 119.979496][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.010718][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.261468][ T5738] gspca_stk1135: reg_w 0x5 err -71 [ 120.262534][ T5738] gspca_stk1135: serial bus timeout: status=0x00 [ 120.262547][ T5738] gspca_stk1135: Sensor write failed [ 120.262613][ T5738] gspca_stk1135: serial bus timeout: status=0x00 [ 120.262622][ T5738] gspca_stk1135: Sensor write failed [ 120.262646][ T5738] gspca_stk1135: serial bus timeout: status=0x00 [ 120.262654][ T5738] gspca_stk1135: Sensor read failed [ 120.262678][ T5738] gspca_stk1135: serial bus timeout: status=0x00 [ 120.262687][ T5738] gspca_stk1135: Sensor read failed [ 120.262693][ T5738] gspca_stk1135: Detected sensor type unknown (0x0) [ 120.262721][ T5738] gspca_stk1135: serial bus timeout: status=0x00 [ 120.262737][ T5738] gspca_stk1135: Sensor read failed [ 120.262760][ T5738] gspca_stk1135: serial bus timeout: status=0x00 [ 120.262769][ T5738] gspca_stk1135: Sensor read failed [ 120.262792][ T5738] gspca_stk1135: serial bus timeout: status=0x00 [ 120.262801][ T5738] gspca_stk1135: Sensor write failed [ 120.262824][ T5738] gspca_stk1135: serial bus timeout: status=0x00 [ 120.262832][ T5738] gspca_stk1135: Sensor write failed [ 120.262905][ T5738] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 120.270461][ T142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.270503][ T142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.270534][ T142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.270563][ T142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.284358][ T5738] usb 3-1: USB disconnect, device number 3 [ 120.619166][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.619206][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.640000][ T6572] loop1: detected capacity change from 0 to 32768 [ 120.650413][ T6572] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.235 (6572) [ 120.684708][ T6572] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.684789][ T6572] BTRFS info (device loop1): using sha256 checksum algorithm [ 120.745723][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.745790][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.801605][ T6572] BTRFS info (device loop1): enabling ssd optimizations [ 120.801667][ T6572] BTRFS info (device loop1): turning on sync discard [ 120.801701][ T6572] BTRFS info (device loop1): enabling free space tree [ 120.801721][ T6572] BTRFS info (device loop1): use zlib compression, level 3 [ 121.093279][ T5618] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.408980][ T6613] netlink: 64 bytes leftover after parsing attributes in process `syz.1.243'. [ 121.481604][ T969] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.634983][ T969] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 121.636612][ T969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.636661][ T969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.636686][ T969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.636722][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.639738][ T969] usb 5-1: config 0 descriptor?? [ 121.777711][ T6621] ip_tables: iptables: counters copy to user failed while replacing table [ 121.800773][ T5620] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.865409][ T6623] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 121.982365][ T5620] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 121.982458][ T5620] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 121.984919][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.984967][ T5620] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.984990][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.986717][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.986765][ T5620] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.986828][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.988104][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.988147][ T5620] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.988171][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.989299][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.989341][ T5620] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.989365][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.992549][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.992592][ T5620] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.992616][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.994891][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.994936][ T5620] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.994960][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.001266][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.001314][ T5620] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.001339][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.005045][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.005090][ T5620] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.005114][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.014794][ T5620] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 122.014879][ T5620] usb 4-1: Product: syz [ 122.014893][ T5620] usb 4-1: Manufacturer: syz [ 122.014907][ T5620] usb 4-1: SerialNumber: syz [ 122.032169][ T5620] usb 4-1: config 0 descriptor?? [ 122.126786][ T5620] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 122.188568][ T5620] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 122.188970][ T5620] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 122.189363][ T5620] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 122.209872][ T5620] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 122.209897][ T5620] rtc rtc0: __rtc_set_alarm: err=-22 [ 122.242613][ T969] hid-rmi 0003:0461:4E72.0002: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 122.318482][ T969] usb 5-1: USB disconnect, device number 5 [ 122.322402][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.375142][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.439124][ T6631] fido_id[6631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 122.501468][ T44] usb 4-1: USB disconnect, device number 3 [ 122.529447][ T44] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 122.695071][ T6641] loop5: detected capacity change from 0 to 128 [ 123.208765][ T6655] capability: warning: `syz.1.264' uses deprecated v2 capabilities in a way that may be insecure [ 123.368515][ T6657] vhci_hcd vhci_hcd.0: remove, state 4 [ 123.368684][ T6657] usb usb34: USB disconnect, device number 1 [ 123.484675][ T6665] loop2: detected capacity change from 0 to 136 [ 123.494203][ T6663] loop3: detected capacity change from 0 to 64 [ 123.895975][ T6676] netlink: 'syz.2.271': attribute type 2 has an invalid length. [ 123.959214][ T6677] loop4: detected capacity change from 0 to 164 [ 124.063758][ T6682] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 124.167292][ T42] vhci_hcd vhci_hcd.0: stop threads [ 124.167296][ T6657] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 124.167357][ T42] vhci_hcd vhci_hcd.0: release socket [ 124.167391][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 124.167425][ T42] vhci_hcd vhci_hcd.0: stop threads [ 124.167440][ T42] vhci_hcd vhci_hcd.0: release socket [ 124.167456][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 124.167482][ T42] vhci_hcd vhci_hcd.0: stop threads [ 124.167495][ T42] vhci_hcd vhci_hcd.0: release socket [ 124.167511][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 124.167538][ T42] vhci_hcd vhci_hcd.0: stop threads [ 124.167550][ T42] vhci_hcd vhci_hcd.0: release socket [ 124.167566][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 124.167593][ T42] vhci_hcd vhci_hcd.0: stop threads [ 124.167606][ T42] vhci_hcd vhci_hcd.0: release socket [ 124.167621][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 124.167648][ T42] vhci_hcd vhci_hcd.0: stop threads [ 124.167661][ T42] vhci_hcd vhci_hcd.0: release socket [ 124.167677][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 124.167703][ T42] vhci_hcd vhci_hcd.0: stop threads [ 124.167716][ T42] vhci_hcd vhci_hcd.0: release socket [ 124.167732][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 124.167761][ T42] vhci_hcd vhci_hcd.0: stop threads [ 124.167772][ T42] vhci_hcd vhci_hcd.0: release socket [ 124.167785][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 124.434562][ T6657] vhci_hcd vhci_hcd.0: remove, state 4 [ 124.434628][ T6657] usb usb33: USB disconnect, device number 1 [ 124.540771][ T6693] loop3: detected capacity change from 0 to 512 [ 124.736006][ T6657] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 124.736861][ T150] vhci_hcd vhci_hcd.0: stop threads [ 124.738170][ T150] vhci_hcd vhci_hcd.0: release socket [ 124.738191][ T150] vhci_hcd vhci_hcd.0: disconnect device [ 124.738222][ T150] vhci_hcd vhci_hcd.0: stop threads [ 124.738233][ T150] vhci_hcd vhci_hcd.0: release socket [ 124.738247][ T150] vhci_hcd vhci_hcd.0: disconnect device [ 124.738272][ T150] vhci_hcd vhci_hcd.0: stop threads [ 124.738283][ T150] vhci_hcd vhci_hcd.0: release socket [ 124.738297][ T150] vhci_hcd vhci_hcd.0: disconnect device [ 124.738321][ T150] vhci_hcd vhci_hcd.0: stop threads [ 124.738331][ T150] vhci_hcd vhci_hcd.0: release socket [ 124.748697][ T150] vhci_hcd vhci_hcd.0: disconnect device [ 124.748738][ T150] vhci_hcd vhci_hcd.0: stop threads [ 124.748751][ T150] vhci_hcd vhci_hcd.0: release socket [ 124.748768][ T150] vhci_hcd vhci_hcd.0: disconnect device [ 124.792475][ T150] ================================================================== [ 124.792493][ T150] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550 ** replaying previous printk message ** [ 124.792493][ T150] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550 [ 124.792529][ T150] Read of size 8 at addr ffff888020b7d088 by task kworker/u8:7/150 [ 124.792546][ T150] [ 124.792557][ T150] CPU: 1 UID: 0 PID: 150 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 124.792580][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.792593][ T150] Workqueue: usbip_event event_handler [ 124.792620][ T150] Call Trace: [ 124.792628][ T150] [ 124.792637][ T150] dump_stack_lvl+0xe8/0x150 [ 124.792665][ T150] print_address_description+0x55/0x1e0 [ 124.792691][ T150] ? __mutex_lock+0x154/0x1550 [ 124.792717][ T150] print_report+0x58/0x70 [ 124.792738][ T150] kasan_report+0x117/0x150 [ 124.792764][ T150] ? __mutex_lock+0x154/0x1550 [ 124.792792][ T150] __mutex_lock+0x154/0x1550 [ 124.792832][ T150] ? event_handler+0x1db/0x4b0 [ 124.792855][ T150] ? __pfx___mutex_lock+0x10/0x10 [ 124.792881][ T150] ? kasan_quarantine_put+0xbb/0x1f0 [ 124.792905][ T150] ? kfree+0x1c5/0x650 [ 124.792925][ T150] event_handler+0x1db/0x4b0 [ 124.792947][ T150] ? process_scheduled_works+0x97e/0x1630 [ 124.792970][ T150] process_scheduled_works+0xc4e/0x1630 [ 124.793005][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 124.793030][ T150] ? assign_work+0x3cf/0x5d0 [ 124.793052][ T150] worker_thread+0xa47/0xfb0 [ 124.793086][ T150] kthread+0x388/0x470 [ 124.793102][ T150] ? __pfx_worker_thread+0x10/0x10 [ 124.793123][ T150] ? __pfx_kthread+0x10/0x10 [ 124.793139][ T150] ret_from_fork+0x514/0xb70 [ 124.793167][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 124.793192][ T150] ? __switch_to+0xc89/0x1420 [ 124.793216][ T150] ? __pfx_kthread+0x10/0x10 [ 124.793233][ T150] ret_from_fork_asm+0x1a/0x30 [ 124.793265][ T150] [ 124.793272][ T150] [ 124.793276][ T150] Allocated by task 1: [ 124.793285][ T150] kasan_save_track+0x3e/0x80 [ 124.793305][ T150] __kasan_kmalloc+0x93/0xb0 [ 124.793325][ T150] __kmalloc_noprof+0x367/0x710 [ 124.793342][ T150] __usb_create_hcd+0x67/0x900 [ 124.793363][ T150] vhci_hcd_probe+0x104/0x3e0 [ 124.793383][ T150] platform_probe+0xf9/0x190 [ 124.793399][ T150] really_probe+0x254/0xae0 [ 124.793416][ T150] __driver_probe_device+0x1e8/0x360 [ 124.793433][ T150] driver_probe_device+0x4f/0x240 [ 124.793452][ T150] __device_attach_driver+0x270/0x410 [ 124.793470][ T150] bus_for_each_drv+0x258/0x2f0 [ 124.793492][ T150] __device_attach+0x2c4/0x450 [ 124.793508][ T150] device_initial_probe+0xa1/0xd0 [ 124.793525][ T150] bus_probe_device+0x12a/0x220 [ 124.793547][ T150] device_add+0x7d7/0xb80 [ 124.793561][ T150] platform_device_add+0x4bd/0x860 [ 124.793585][ T150] platform_device_register_full+0x53a/0x620 [ 124.793609][ T150] vhci_hcd_init+0x227/0x360 [ 124.793631][ T150] do_one_initcall+0x250/0x870 [ 124.793657][ T150] do_initcall_level+0x10a/0x1a0 [ 124.793674][ T150] do_initcalls+0x59/0xa0 [ 124.793689][ T150] kernel_init_freeable+0x29d/0x3e0 [ 124.793705][ T150] kernel_init+0x22/0x1d0 [ 124.793721][ T150] ret_from_fork+0x514/0xb70 [ 124.793744][ T150] ret_from_fork_asm+0x1a/0x30 [ 124.793767][ T150] [ 124.793771][ T150] Freed by task 6657: [ 124.793779][ T150] kasan_save_track+0x3e/0x80 [ 124.793805][ T150] kasan_save_free_info+0x40/0x50 [ 124.793821][ T150] __kasan_slab_free+0x5c/0x80 [ 124.793841][ T150] kfree+0x1c5/0x650 [ 124.793855][ T150] vhci_hcd_remove+0xe4/0x110 [ 124.793875][ T150] device_release_driver_internal+0x48b/0x880 [ 124.793894][ T150] unbind_store+0x1a1/0x1d0 [ 124.793908][ T150] kernfs_fop_write_iter+0x3a4/0x540 [ 124.793931][ T150] vfs_write+0x612/0xba0 [ 124.793946][ T150] ksys_write+0x150/0x270 [ 124.793961][ T150] do_syscall_64+0x166/0x510 [ 124.793984][ T150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.794000][ T150] [ 124.794004][ T150] Last potentially related work creation: [ 124.794010][ T150] kasan_save_stack+0x3e/0x60 [ 124.794030][ T150] kasan_record_aux_stack+0xbd/0xd0 [ 124.794045][ T150] insert_work+0x3d/0x330 [ 124.794062][ T150] __queue_work+0xd05/0x10d0 [ 124.794083][ T150] queue_work_on+0x106/0x1d0 [ 124.794102][ T150] unlink1+0x344/0x3e0 [ 124.794120][ T150] usb_hcd_unlink_urb+0xe6/0x1e0 [ 124.794139][ T150] usb_kill_urb+0x10b/0x2f0 [ 124.794162][ T150] hub_quiesce+0x211/0x330 [ 124.794177][ T150] hub_suspend+0x904/0xad0 [ 124.794193][ T150] usb_suspend_both+0x285/0x1040 [ 124.794212][ T150] usb_runtime_suspend+0x58/0x110 [ 124.794231][ T150] __rpm_callback+0x2c7/0x950 [ 124.794251][ T150] rpm_suspend+0x89d/0x17a0 [ 124.794267][ T150] __pm_runtime_suspend+0x12f/0x1a0 [ 124.794283][ T150] usb_new_device+0xaee/0x1690 [ 124.794306][ T150] register_root_hub+0x250/0x5c0 [ 124.794327][ T150] usb_add_hcd+0xac7/0xf80 [ 124.794346][ T150] vhci_hcd_probe+0x141/0x3e0 [ 124.794367][ T150] platform_probe+0xf9/0x190 [ 124.794381][ T150] really_probe+0x254/0xae0 [ 124.794399][ T150] __driver_probe_device+0x1e8/0x360 [ 124.794416][ T150] driver_probe_device+0x4f/0x240 [ 124.794434][ T150] __device_attach_driver+0x270/0x410 [ 124.794452][ T150] bus_for_each_drv+0x258/0x2f0 [ 124.794473][ T150] __device_attach+0x2c4/0x450 [ 124.794489][ T150] device_initial_probe+0xa1/0xd0 [ 124.794506][ T150] bus_probe_device+0x12a/0x220 [ 124.794527][ T150] device_add+0x7d7/0xb80 [ 124.794541][ T150] platform_device_add+0x4bd/0x860 [ 124.794564][ T150] platform_device_register_full+0x53a/0x620 [ 124.794588][ T150] vhci_hcd_init+0x227/0x360 [ 124.794608][ T150] do_one_initcall+0x250/0x870 [ 124.794629][ T150] do_initcall_level+0x10a/0x1a0 [ 124.794645][ T150] do_initcalls+0x59/0xa0 [ 124.794660][ T150] kernel_init_freeable+0x29d/0x3e0 [ 124.794675][ T150] kernel_init+0x22/0x1d0 [ 124.794691][ T150] ret_from_fork+0x514/0xb70 [ 124.794714][ T150] ret_from_fork_asm+0x1a/0x30 [ 124.794736][ T150] [ 124.794740][ T150] Second to last potentially related work creation: [ 124.794747][ T150] kasan_save_stack+0x3e/0x60 [ 124.794772][ T150] kasan_record_aux_stack+0xbd/0xd0 [ 124.794787][ T150] insert_work+0x3d/0x330 [ 124.794812][ T150] __queue_work+0xd05/0x10d0 [ 124.794831][ T150] queue_work_on+0x106/0x1d0 [ 124.794851][ T150] usb_hcd_submit_urb+0xa3b/0x1b60 [ 124.794871][ T150] usb_start_wait_urb+0x13f/0x5b0 [ 124.794885][ T150] usb_control_msg+0x234/0x3e0 [ 124.794899][ T150] hub_ext_port_status+0x112/0x840 [ 124.794921][ T150] hub_activate+0x740/0x1b20 [ 124.794938][ T150] process_scheduled_works+0xc4e/0x1630 [ 124.794956][ T150] worker_thread+0xa47/0xfb0 [ 124.794975][ T150] kthread+0x388/0x470 [ 124.794988][ T150] ret_from_fork+0x514/0xb70 [ 124.795011][ T150] ret_from_fork_asm+0x1a/0x30 [ 124.795033][ T150] [ 124.795037][ T150] The buggy address belongs to the object at ffff888020b7c000 [ 124.795037][ T150] which belongs to the cache kmalloc-8k of size 8192 [ 124.795052][ T150] The buggy address is located 4232 bytes inside of [ 124.795052][ T150] freed 8192-byte region [ffff888020b7c000, ffff888020b7e000) [ 124.795070][ T150] [ 124.795075][ T150] The buggy address belongs to the physical page: [ 124.795084][ T150] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20b78 [ 124.795101][ T150] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 124.795116][ T150] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 124.795132][ T150] page_type: f5(slab) [ 124.795148][ T150] raw: 00fff00000000040 ffff88801b006280 dead000000000122 0000000000000000 [ 124.795163][ T150] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 124.795179][ T150] head: 00fff00000000040 ffff88801b006280 dead000000000122 0000000000000000 [ 124.795193][ T150] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 124.795209][ T150] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 124.795224][ T150] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 124.795233][ T150] page dumped because: kasan: bad access detected [ 124.795241][ T150] page_owner tracks the page as allocated [ 124.795248][ T150] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5191765082 [ 124.795275][ T150] post_alloc_hook+0x1f9/0x250 [ 124.795292][ T150] get_page_from_freelist+0x2205/0x2280 [ 124.795312][ T150] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 124.795332][ T150] allocate_slab+0x7d/0x620 [ 124.795354][ T150] refill_objects+0x2d5/0x350 [ 124.795377][ T150] __pcs_replace_empty_main+0x2c4/0x6b0 [ 124.795399][ T150] __kmalloc_noprof+0x477/0x710 [ 124.795416][ T150] vring_alloc_state_extra_split+0x4f/0x480 [ 124.795441][ T150] __vring_new_virtqueue_split+0x316/0x940 [ 124.795462][ T150] vring_create_virtqueue+0x16f/0x3b0 [ 124.795483][ T150] setup_vq+0xe8/0x2e0 [ 124.795505][ T150] vp_setup_vq+0xc4/0x400 [ 124.795526][ T150] vp_find_vqs+0x56d/0x7e0 [ 124.795547][ T150] init_vqs+0x305/0x5b0 [ 124.795561][ T150] virtballoon_probe+0x3d7/0x1030 [ 124.795576][ T150] virtio_dev_probe+0xdf6/0x10c0 [ 124.795593][ T150] page_owner free stack trace missing [ 124.795600][ T150] [ 124.795604][ T150] Memory state around the buggy address: [ 124.795613][ T150] ffff888020b7cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.795625][ T150] ffff888020b7d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.795637][ T150] >ffff888020b7d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.795645][ T150] ^ [ 124.795655][ T150] ffff888020b7d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.795666][ T150] ffff888020b7d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.795675][ T150] ================================================================== [ 124.851405][ T150] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.795532][ T150] CPU: 1 UID: 0 PID: 150 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 125.804912][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.814974][ T150] Workqueue: usbip_event event_handler [ 125.820452][ T150] Call Trace: [ 125.823732][ T150] [ 125.826664][ T150] vpanic+0x56c/0xa60 [ 125.830662][ T150] ? __pfx_vpanic+0x10/0x10 [ 125.835179][ T150] panic+0xc5/0xd0 [ 125.838913][ T150] ? __pfx_panic+0x10/0x10 [ 125.843364][ T150] ? preempt_schedule_thunk+0x16/0x40 [ 125.848751][ T150] ? __mutex_lock+0x154/0x1550 [ 125.854312][ T150] ? preempt_schedule_thunk+0x16/0x40 [ 125.859700][ T150] ? __mutex_lock+0x154/0x1550 [ 125.864516][ T150] check_panic_on_warn+0x89/0xb0 [ 125.869471][ T150] ? __mutex_lock+0x154/0x1550 [ 125.874259][ T150] end_report+0x73/0x170 [ 125.878527][ T150] ? __mutex_lock+0x154/0x1550 [ 125.883332][ T150] kasan_report+0x128/0x150 [ 125.887861][ T150] ? __mutex_lock+0x154/0x1550 [ 125.892658][ T150] __mutex_lock+0x154/0x1550 [ 125.897375][ T150] ? event_handler+0x1db/0x4b0 [ 125.902160][ T150] ? __pfx___mutex_lock+0x10/0x10 [ 125.907201][ T150] ? kasan_quarantine_put+0xbb/0x1f0 [ 125.912680][ T150] ? kfree+0x1c5/0x650 [ 125.916753][ T150] event_handler+0x1db/0x4b0 [ 125.921364][ T150] ? process_scheduled_works+0x97e/0x1630 [ 125.927185][ T150] process_scheduled_works+0xc4e/0x1630 [ 125.932750][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.938742][ T150] ? assign_work+0x3cf/0x5d0 [ 125.943342][ T150] worker_thread+0xa47/0xfb0 [ 125.947951][ T150] kthread+0x388/0x470 [ 125.952025][ T150] ? __pfx_worker_thread+0x10/0x10 [ 125.957143][ T150] ? __pfx_kthread+0x10/0x10 [ 125.961745][ T150] ret_from_fork+0x514/0xb70 [ 125.966417][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 125.971542][ T150] ? __switch_to+0xc89/0x1420 [ 125.976228][ T150] ? __pfx_kthread+0x10/0x10 [ 125.980821][ T150] ret_from_fork_asm+0x1a/0x30 [ 125.985688][ T150] [ 125.988849][ T150] Kernel Offset: disabled [ 125.993227][ T150] Rebooting in 86400 seconds..