last executing test programs: 1m3.000911538s ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000240)) 1m2.82759766s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) 1m2.466594085s ago: executing program 0 (id=6): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000001140)={@multicast2, @local}, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) 1m1.794244036s ago: executing program 2 (id=17): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005640)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0xffffffffffffffff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}}, 0x0) 1m1.565034999s ago: executing program 2 (id=20): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xd, r0}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r2, 0x0) 1m1.372820231s ago: executing program 2 (id=24): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 1m1.262032323s ago: executing program 2 (id=25): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x3210842, &(0x7f0000001800)={[{@errors_remount}, {@noquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@errors_continue}, {@noquota}, {@quota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x24, 0x6297, &(0x7f00000089c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 1m0.639503072s ago: executing program 0 (id=30): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) setresuid(r1, 0x0, 0xffffffffffffffff) 59.870254213s ago: executing program 32 (id=30): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) setresuid(r1, 0x0, 0xffffffffffffffff) 59.843344474s ago: executing program 2 (id=32): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) io_setup(0x2, &(0x7f0000000080)=0x0) r2 = eventfd(0x3) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0xa1f, 0x0, 0x1, r2}]) 59.011493705s ago: executing program 2 (id=34): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 58.518328983s ago: executing program 33 (id=34): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.254166863s ago: executing program 4 (id=534): unshare(0x6020400) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) accept$alg(r0, 0x0, 0x0) 3.042210246s ago: executing program 4 (id=530): mkdir(&(0x7f0000000e40)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000640)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x410281, 0x0) 2.847402139s ago: executing program 4 (id=533): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) 2.620557891s ago: executing program 4 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) close(r1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x98e47}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.423261095s ago: executing program 4 (id=550): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fff}) 1.267663771s ago: executing program 1 (id=560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1.115314253s ago: executing program 1 (id=563): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x4000}], 0x1, 0xc) 1.004203425s ago: executing program 1 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 1.004026315s ago: executing program 5 (id=565): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa23ffffffffffff0806000108"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 920.230836ms ago: executing program 5 (id=566): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x2a020400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/time\x00') setns(r0, 0x2000000) 896.709357ms ago: executing program 4 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 842.777168ms ago: executing program 5 (id=569): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x7b}, 0xdf, 0x1, 0x3, 0x1, 0x24, 0x4007}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 628.171451ms ago: executing program 3 (id=570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/104, 0x68}, 0x4d1ee337}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10042, 0x0) 627.225681ms ago: executing program 1 (id=571): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 620.762171ms ago: executing program 5 (id=572): socket$inet(0x2, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 551.547612ms ago: executing program 3 (id=573): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x20000800) 465.600083ms ago: executing program 1 (id=574): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 465.487653ms ago: executing program 3 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 396.040544ms ago: executing program 5 (id=576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x6) close(0x3) 334.050585ms ago: executing program 3 (id=577): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x112c96ce12743aa7, 0x70bd2b, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x200400d6}, 0x0) 310.458255ms ago: executing program 1 (id=578): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 213.236826ms ago: executing program 3 (id=579): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 97.776598ms ago: executing program 5 (id=580): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 0s ago: executing program 3 (id=581): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty, 0xfff}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000540)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 83.883676][ T5772] cgroup: Unknown subsys name 'net' [ 84.049914][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.797594][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.558887][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.577397][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.585657][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.602044][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.603375][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.610908][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.617400][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.632263][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.633020][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.641095][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.647110][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.654434][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.661519][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.668089][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.677445][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.693399][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.703119][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.703201][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.718798][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.718926][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.741486][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.749928][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.759248][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.767224][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.399251][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.459498][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 88.578133][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 88.653888][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.661478][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.668898][ T5782] bridge_slave_0: entered allmulticast mode [ 88.677275][ T5782] bridge_slave_0: entered promiscuous mode [ 88.698187][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.740367][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.747628][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.755024][ T5782] bridge_slave_1: entered allmulticast mode [ 88.762402][ T5782] bridge_slave_1: entered promiscuous mode [ 88.788965][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.796232][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.803545][ T5789] bridge_slave_0: entered allmulticast mode [ 88.810653][ T5789] bridge_slave_0: entered promiscuous mode [ 88.842318][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.849563][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.856985][ T5789] bridge_slave_1: entered allmulticast mode [ 88.864122][ T5789] bridge_slave_1: entered promiscuous mode [ 88.902877][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.914694][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.992823][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.003687][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.010927][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.018500][ T5794] bridge_slave_0: entered allmulticast mode [ 89.026583][ T5794] bridge_slave_0: entered promiscuous mode [ 89.035236][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.042506][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.049798][ T5794] bridge_slave_1: entered allmulticast mode [ 89.057151][ T5794] bridge_slave_1: entered promiscuous mode [ 89.082609][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.134894][ T5782] team0: Port device team_slave_0 added [ 89.183990][ T5782] team0: Port device team_slave_1 added [ 89.190129][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.197390][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.205546][ T5781] bridge_slave_0: entered allmulticast mode [ 89.213036][ T5781] bridge_slave_0: entered promiscuous mode [ 89.223671][ T5789] team0: Port device team_slave_0 added [ 89.232691][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.245771][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.267638][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.275367][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.283078][ T5781] bridge_slave_1: entered allmulticast mode [ 89.290215][ T5781] bridge_slave_1: entered promiscuous mode [ 89.299312][ T5789] team0: Port device team_slave_1 added [ 89.393576][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.400773][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.429126][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.458579][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.466423][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.493151][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.508096][ T5794] team0: Port device team_slave_0 added [ 89.518090][ T5794] team0: Port device team_slave_1 added [ 89.524939][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.532320][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.558926][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.573236][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.591566][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.601848][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.609177][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.635580][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.715489][ T5781] team0: Port device team_slave_0 added [ 89.722594][ T5790] Bluetooth: hci3: command tx timeout [ 89.739570][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.747287][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.774873][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.787554][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.794841][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.802206][ T5792] Bluetooth: hci0: command tx timeout [ 89.822285][ T5790] Bluetooth: hci2: command tx timeout [ 89.827004][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.847839][ T5781] team0: Port device team_slave_1 added [ 89.882625][ T5790] Bluetooth: hci1: command tx timeout [ 89.905094][ T5782] hsr_slave_0: entered promiscuous mode [ 89.912119][ T5782] hsr_slave_1: entered promiscuous mode [ 89.926443][ T5789] hsr_slave_0: entered promiscuous mode [ 89.932964][ T5789] hsr_slave_1: entered promiscuous mode [ 89.939125][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.947434][ T5789] Cannot create hsr debugfs directory [ 90.036525][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.043804][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.070316][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.084107][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.091353][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.118115][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.158971][ T5794] hsr_slave_0: entered promiscuous mode [ 90.166124][ T5794] hsr_slave_1: entered promiscuous mode [ 90.173167][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.180852][ T5794] Cannot create hsr debugfs directory [ 90.277169][ T5781] hsr_slave_0: entered promiscuous mode [ 90.284536][ T5781] hsr_slave_1: entered promiscuous mode [ 90.290722][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.298743][ T5781] Cannot create hsr debugfs directory [ 90.657996][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.672771][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.685619][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.699181][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.769549][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.782468][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.796633][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.808119][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.899975][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.916415][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.947224][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.965947][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.057107][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.070829][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.083928][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.096018][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.181739][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.269561][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.298523][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.330546][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.338259][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.372512][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.380916][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.413348][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.450831][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.464399][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.471703][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.510702][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.538304][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.545720][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.558088][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.573315][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.580703][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.610528][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.660034][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.667251][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.698945][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.706434][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.757965][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.765445][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.801961][ T5790] Bluetooth: hci3: command tx timeout [ 91.883363][ T5790] Bluetooth: hci2: command tx timeout [ 91.888944][ T5790] Bluetooth: hci0: command tx timeout [ 91.950429][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.961300][ T5790] Bluetooth: hci1: command tx timeout [ 92.252589][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.298626][ T9] cfg80211: failed to load regulatory.db [ 92.418747][ T5789] veth0_vlan: entered promiscuous mode [ 92.443507][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.478837][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.497701][ T5789] veth1_vlan: entered promiscuous mode [ 92.525530][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.628223][ T5794] veth0_vlan: entered promiscuous mode [ 92.639103][ T5782] veth0_vlan: entered promiscuous mode [ 92.663721][ T5789] veth0_macvtap: entered promiscuous mode [ 92.684815][ T5782] veth1_vlan: entered promiscuous mode [ 92.706317][ T5789] veth1_macvtap: entered promiscuous mode [ 92.715151][ T5794] veth1_vlan: entered promiscuous mode [ 92.740368][ T5781] veth0_vlan: entered promiscuous mode [ 92.788199][ T5781] veth1_vlan: entered promiscuous mode [ 92.800071][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.829565][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.851720][ T5782] veth0_macvtap: entered promiscuous mode [ 92.875404][ T5794] veth0_macvtap: entered promiscuous mode [ 92.887824][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.898009][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.906929][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.917419][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.934801][ T5782] veth1_macvtap: entered promiscuous mode [ 92.947441][ T5794] veth1_macvtap: entered promiscuous mode [ 93.027029][ T5781] veth0_macvtap: entered promiscuous mode [ 93.036762][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.050569][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.063505][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.078064][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.089884][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.100644][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.112740][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.124886][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.140352][ T5781] veth1_macvtap: entered promiscuous mode [ 93.169020][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.181301][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.197203][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.206441][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.218312][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.229589][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.240700][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.255647][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.284314][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294256][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.304881][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.313883][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.340701][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.349800][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.359117][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.368796][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.397397][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.413679][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.425671][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.437308][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.447499][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.458152][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.469891][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.520201][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.532848][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.544419][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.555364][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.567292][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.578206][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.590075][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.616380][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.617711][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.633981][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.649545][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.659132][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.668410][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829456][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.847204][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.878499][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.887169][ T5790] Bluetooth: hci3: command tx timeout [ 93.895264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.961434][ T5790] Bluetooth: hci0: command tx timeout [ 93.966912][ T5790] Bluetooth: hci2: command tx timeout [ 93.986218][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.999765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.031964][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.040337][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.051208][ T5790] Bluetooth: hci1: command tx timeout [ 94.120309][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.166635][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.182169][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.190168][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.289952][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.317872][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.415028][ T5880] ======================================================= [ 94.415028][ T5880] WARNING: The mand mount option has been deprecated and [ 94.415028][ T5880] and is ignored by this kernel. Remove the mand [ 94.415028][ T5880] option from the mount to silence this warning. [ 94.415028][ T5880] ======================================================= [ 95.674404][ T5920] syz.1.22[5920]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.963403][ T5790] Bluetooth: hci3: command tx timeout [ 96.041945][ T5790] Bluetooth: hci0: command tx timeout [ 96.121168][ T5790] Bluetooth: hci1: command tx timeout [ 96.251534][ T5920] loop1: detected capacity change from 0 to 32768 [ 96.273558][ T5920] XFS: ikeep mount option is deprecated. [ 96.358847][ T5920] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.574146][ T5926] loop2: detected capacity change from 0 to 32768 [ 96.595150][ T1132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.631974][ T5920] XFS (loop1): Ending clean mount [ 96.688280][ T5920] XFS (loop1): Quotacheck needed: Please wait. [ 96.842014][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.899826][ T5920] XFS (loop1): Quotacheck: Done. [ 96.925054][ T5794] read_mapping_page failed! [ 96.934719][ T1132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.945648][ T5794] ERROR: (device loop2): txCommit: [ 96.945648][ T5794] [ 96.957909][ T5794] read_mapping_page failed! [ 96.987277][ T5794] ERROR: (device loop2): txCommit: [ 96.987277][ T5794] [ 97.061240][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 97.075742][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.117915][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.144620][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.171271][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.185617][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.204973][ T1132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.224233][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 97.248058][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.281876][ T9] usb 4-1: Manufacturer: syz [ 97.298243][ T9] usb 4-1: config 0 descriptor?? [ 97.317152][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.443150][ T1132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.841627][ T9] rc_core: IR keymap rc-hauppauge not found [ 97.847857][ T9] Registered IR keymap rc-empty [ 97.874659][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.969582][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.991714][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.043291][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 98.122452][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 98.180923][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.242947][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.292972][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.346232][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.360332][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.361419][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.370698][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.394208][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.405146][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.413996][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.546369][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.612587][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.701583][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.751854][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.785457][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.843536][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.900106][ T9] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 98.929679][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 98.979241][ T9] usb 4-1: USB disconnect, device number 2 [ 99.393166][ T5973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.512354][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.522620][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.531662][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.543977][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.547000][ T5976] loop3: detected capacity change from 0 to 2048 [ 99.565457][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.573829][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.675389][ T5976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.379096][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 100.521704][ T5792] Bluetooth: hci2: command tx timeout [ 100.530691][ T1132] hsr_slave_0: left promiscuous mode [ 100.542947][ T1132] hsr_slave_1: left promiscuous mode [ 100.549767][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.559511][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.573420][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.587764][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.597377][ T1132] bridge_slave_1: left allmulticast mode [ 100.608435][ T1132] bridge_slave_1: left promiscuous mode [ 100.617097][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.625335][ T5824] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.641659][ T1132] bridge_slave_0: left allmulticast mode [ 100.647402][ T1132] bridge_slave_0: left promiscuous mode [ 100.677880][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.790513][ T1132] veth1_macvtap: left promiscuous mode [ 100.807657][ T1132] veth0_macvtap: left promiscuous mode [ 100.814836][ T1132] veth1_vlan: left promiscuous mode [ 100.820500][ T1132] veth0_vlan: left promiscuous mode [ 100.837591][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 100.858475][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 100.888560][ T5824] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 100.913326][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.951624][ T5824] usb 2-1: Product: syz [ 100.955879][ T5824] usb 2-1: Manufacturer: syz [ 100.964054][ T5824] usb 2-1: SerialNumber: syz [ 100.984040][ T5824] usb 2-1: config 0 descriptor?? [ 101.015677][ T5824] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 101.358430][ T5824] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 101.516794][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.612951][ T5824] usb 2-1: USB disconnect, device number 2 [ 101.721163][ T5792] Bluetooth: hci3: command tx timeout [ 101.877363][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 101.933784][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 101.975537][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.015914][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.598029][ T1132] bond0 (unregistering): Released all slaves [ 102.604409][ T5792] Bluetooth: hci2: command tx timeout [ 102.714514][ T6019] tap0: tun_chr_ioctl cmd 1074025680 [ 102.871297][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.907241][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.931344][ T5953] bridge_slave_0: entered allmulticast mode [ 102.959900][ T5953] bridge_slave_0: entered promiscuous mode [ 102.980387][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.005643][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.017956][ T5953] bridge_slave_1: entered allmulticast mode [ 103.027406][ T5953] bridge_slave_1: entered promiscuous mode [ 103.402620][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.445233][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.609766][ T5953] team0: Port device team_slave_0 added [ 103.637133][ T5953] team0: Port device team_slave_1 added [ 103.747862][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.774894][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.816268][ T5792] Bluetooth: hci3: command tx timeout [ 103.823155][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.868500][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 103.968247][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.008152][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.081251][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.326699][ T5953] hsr_slave_0: entered promiscuous mode [ 104.361908][ T5953] hsr_slave_1: entered promiscuous mode [ 104.411390][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.420034][ T5953] Cannot create hsr debugfs directory [ 104.681376][ T5792] Bluetooth: hci2: command tx timeout [ 104.741646][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.748824][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.821587][ T5977] bridge_slave_0: entered allmulticast mode [ 104.849246][ T5977] bridge_slave_0: entered promiscuous mode [ 104.870616][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.885490][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.896261][ T5977] bridge_slave_1: entered allmulticast mode [ 104.910783][ T5977] bridge_slave_1: entered promiscuous mode [ 105.035962][ T1132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.346467][ T1132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.395507][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.434580][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.649424][ T6087] loop1: detected capacity change from 0 to 4096 [ 105.698061][ T6087] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 105.708979][ T1132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.809642][ T6087] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.882522][ T5792] Bluetooth: hci3: command tx timeout [ 105.917322][ T1132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.993819][ T5977] team0: Port device team_slave_0 added [ 106.038733][ T5977] team0: Port device team_slave_1 added [ 106.329732][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.363399][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.392486][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.415047][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.427174][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.475583][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.761241][ T5792] Bluetooth: hci2: command tx timeout [ 106.895495][ T6108] loop1: detected capacity change from 0 to 8 [ 106.938811][ T5977] hsr_slave_0: entered promiscuous mode [ 106.956478][ T5977] hsr_slave_1: entered promiscuous mode [ 106.984641][ T5977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.007706][ T5977] Cannot create hsr debugfs directory [ 107.231857][ T5953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.333482][ T5953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.461108][ T5953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.482206][ T5953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.903818][ T6112] loop3: detected capacity change from 0 to 32768 [ 107.961829][ T5792] Bluetooth: hci3: command tx timeout [ 108.022918][ T6112] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 108.146186][ T6112] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 108.307125][ T6138] binfmt_misc: register: failed to install interpreter file ./file1 [ 108.349711][ T28] audit: type=1800 audit(1751705677.961:2): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.74" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 108.391153][ T2131] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.528130][ T5977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.530494][ T5782] ocfs2: Unmounting device (7,3) on (node local) [ 108.547322][ T5977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.598353][ T2131] usb 2-1: Using ep0 maxpacket: 16 [ 108.602853][ T5977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.634258][ T2131] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 108.639674][ T5977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.650262][ T2131] usb 2-1: config 0 has no interface number 0 [ 108.661518][ T2131] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.682062][ T1132] hsr_slave_0: left promiscuous mode [ 108.684895][ T2131] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 108.701669][ T1132] hsr_slave_1: left promiscuous mode [ 108.710857][ T2131] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 108.719794][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.733197][ T2131] usb 2-1: Product: syz [ 108.737525][ T2131] usb 2-1: SerialNumber: syz [ 108.741767][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.762652][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.763803][ T2131] usb 2-1: config 0 descriptor?? [ 108.770113][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.812141][ T1132] bridge_slave_1: left allmulticast mode [ 108.817335][ T2131] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 108.824324][ T1132] bridge_slave_1: left promiscuous mode [ 108.832004][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.856312][ T1132] bridge_slave_0: left allmulticast mode [ 108.875251][ T1132] bridge_slave_0: left promiscuous mode [ 108.881324][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.945768][ T6144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.958560][ T1132] veth1_macvtap: left promiscuous mode [ 108.966214][ T1132] veth0_macvtap: left promiscuous mode [ 108.971956][ T1132] veth1_vlan: left promiscuous mode [ 108.977276][ T1132] veth0_vlan: left promiscuous mode [ 109.545970][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 109.598549][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 109.646291][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.694514][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.152403][ T1132] bond0 (unregistering): Released all slaves [ 110.361658][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.474429][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.535047][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.542382][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.604249][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.611522][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.790517][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.870662][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.966133][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.973397][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.054927][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.062315][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.217692][ T5115] usb 2-1: USB disconnect, device number 3 [ 111.491638][ T6177] bond1 (unregistering): Released all slaves [ 111.633509][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.945235][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.162996][ T6191] loop3: detected capacity change from 0 to 8192 [ 112.747389][ T5953] veth0_vlan: entered promiscuous mode [ 112.847801][ T5953] veth1_vlan: entered promiscuous mode [ 112.865622][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 112.962876][ T5953] veth0_macvtap: entered promiscuous mode [ 112.978537][ T5977] veth0_vlan: entered promiscuous mode [ 113.014120][ T5953] veth1_macvtap: entered promiscuous mode [ 113.037371][ T5977] veth1_vlan: entered promiscuous mode [ 113.097180][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.126334][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.140249][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.160602][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.183742][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.209186][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.225864][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.236147][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.247233][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.269536][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.319488][ T5953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.336789][ T5953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.347166][ T5953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.360744][ T5953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.414410][ T5977] veth0_macvtap: entered promiscuous mode [ 113.450801][ T5977] veth1_macvtap: entered promiscuous mode [ 113.544955][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.559406][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.573568][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.588089][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.606630][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.618864][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.632945][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.727696][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.739495][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.749712][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.760654][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.787825][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.804994][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.818190][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.837239][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.850819][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.857721][ T5977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.873126][ T5977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.883763][ T5977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.893723][ T5977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.907764][ T6230] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 114.073499][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.095739][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.232811][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.240707][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.381849][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.422009][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.760400][ T28] audit: type=1326 audit(1751705684.371:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d178e929 code=0x7ffc0000 [ 114.856406][ T28] audit: type=1326 audit(1751705684.411:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3d178e929 code=0x7ffc0000 [ 115.031214][ T28] audit: type=1326 audit(1751705684.411:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d178e929 code=0x7ffc0000 [ 115.104473][ T28] audit: type=1326 audit(1751705684.411:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3d17858e7 code=0x7ffc0000 [ 115.169771][ T28] audit: type=1326 audit(1751705684.411:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3d172ab19 code=0x7ffc0000 [ 115.228824][ T28] audit: type=1326 audit(1751705684.411:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d178e929 code=0x7ffc0000 [ 115.301124][ T28] audit: type=1326 audit(1751705684.411:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3d17858e7 code=0x7ffc0000 [ 115.350927][ T28] audit: type=1326 audit(1751705684.411:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3d172ab19 code=0x7ffc0000 [ 115.398258][ T28] audit: type=1326 audit(1751705684.411:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d178e929 code=0x7ffc0000 [ 115.464482][ T28] audit: type=1326 audit(1751705684.411:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3d17858e7 code=0x7ffc0000 [ 115.744664][ T6268] loop5: detected capacity change from 0 to 2048 [ 115.773356][ T6268] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 115.798314][ T6268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.465656][ T6295] loop1: detected capacity change from 0 to 128 [ 116.482607][ T6295] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 116.582334][ T6279] loop3: detected capacity change from 0 to 32768 [ 116.590055][ T6279] XFS: ikeep mount option is deprecated. [ 116.599471][ T6279] XFS: ikeep mount option is deprecated. [ 116.653743][ T6279] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.824436][ T6279] XFS (loop3): Ending clean mount [ 116.848298][ T6279] XFS (loop3): Quotacheck needed: Please wait. [ 116.887905][ T6320] loop4: detected capacity change from 0 to 16 [ 116.909459][ T6279] XFS (loop3): Quotacheck: Done. [ 116.960344][ T6320] erofs: (device loop4): mounted with root inode @ nid 36. [ 117.152700][ T6327] loop1: detected capacity change from 0 to 2048 [ 117.171717][ T6327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.210954][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.735954][ T6346] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 117.758827][ T6345] loop1: detected capacity change from 0 to 1764 [ 117.849425][ T6340] loop4: detected capacity change from 0 to 4096 [ 117.904712][ T6350] Bluetooth: MGMT ver 1.22 [ 117.910422][ T6340] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 117.938023][ T6340] ntfs3: loop4: Failed to load $Extend (-22). [ 117.949990][ T6340] ntfs3: loop4: Failed to initialize $Extend. [ 118.016426][ T6352] tap0: tun_chr_ioctl cmd 1074025677 [ 118.028326][ T6352] tap0: linktype set to 776 [ 118.573733][ T6369] loop5: detected capacity change from 0 to 4096 [ 118.597332][ T6369] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 118.760657][ T6369] ntfs3: loop5: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 118.812315][ T6369] ntfs3: loop5: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 118.860731][ T6362] loop4: detected capacity change from 0 to 32768 [ 118.876957][ T6362] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.142 (6362) [ 118.935607][ T6362] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.962851][ T6362] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 118.991699][ T6362] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.007249][ T6362] BTRFS info (device loop4): use zstd compression, level 3 [ 119.015398][ T6362] BTRFS info (device loop4): using free space tree [ 119.023774][ T54] ntfs3: loop5: ino=1e, failed to parse mft record [ 119.181287][ T6362] BTRFS info (device loop4): enabling ssd optimizations [ 119.199323][ T6362] BTRFS info (device loop4): auto enabling async discard [ 119.718112][ T5953] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.181238][ T5824] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 120.229271][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 120.374294][ T5824] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 120.395670][ T5824] usb 2-1: config 0 has no interface number 0 [ 120.413375][ T5824] usb 2-1: config 0 interface 106 has no altsetting 0 [ 120.433442][ T5824] usb 2-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 120.451364][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.460877][ T6428] loop4: detected capacity change from 0 to 4096 [ 120.469889][ T5824] usb 2-1: Product: syz [ 120.480036][ T5824] usb 2-1: Manufacturer: syz [ 120.485025][ T5824] usb 2-1: SerialNumber: syz [ 120.488056][ T6428] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 120.505068][ T5824] usb 2-1: config 0 descriptor?? [ 120.557605][ T6428] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 120.640250][ T6428] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 120.727320][ T5824] usb 2-1: USB disconnect, device number 4 [ 120.888959][ T11] ntfs3: loop4: ino=1e, failed to parse mft record [ 120.971778][ T6435] loop3: detected capacity change from 0 to 64 [ 121.551457][ T6458] loop5: detected capacity change from 0 to 2048 [ 121.596185][ T6458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.629219][ T6458] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.771298][ T5824] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.829942][ T5977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.908048][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 121.933678][ T6452] loop3: detected capacity change from 0 to 32768 [ 121.951507][ T6452] XFS: attr2 mount option is deprecated. [ 121.961548][ T5824] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 121.969887][ T5824] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 121.983692][ T5824] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 122.004567][ T5824] usb 2-1: config 220 has no interface number 2 [ 122.011166][ T5824] usb 2-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 122.023761][ T5824] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 122.029374][ T6452] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.037942][ T5824] usb 2-1: config 220 interface 0 has no altsetting 0 [ 122.053134][ T5824] usb 2-1: config 220 interface 76 has no altsetting 0 [ 122.060071][ T5824] usb 2-1: config 220 interface 1 has no altsetting 0 [ 122.071229][ T5824] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.080595][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.089080][ T5824] usb 2-1: Product: syz [ 122.093736][ T5824] usb 2-1: Manufacturer: syz [ 122.098554][ T5824] usb 2-1: SerialNumber: syz [ 122.164837][ T6452] XFS (loop3): Ending clean mount [ 122.187171][ T6452] XFS (loop3): Quotacheck needed: Please wait. [ 122.248561][ T6484] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.276787][ T6452] XFS (loop3): Quotacheck: Done. [ 122.341595][ T5824] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 122.366529][ T5824] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 122.377852][ T5824] usb 2-1: No valid video chain found. [ 122.384440][ T5824] usb 2-1: selecting invalid altsetting 0 [ 122.409784][ T5824] usb 2-1: selecting invalid altsetting 0 [ 122.422358][ T5824] usbtest: probe of 2-1:220.1 failed with error -22 [ 122.450699][ T5824] usb 2-1: USB disconnect, device number 5 [ 122.480093][ T5782] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.616419][ T6490] loop4: detected capacity change from 0 to 4096 [ 122.634710][ T6490] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 122.878252][ T6497] netlink: 124 bytes leftover after parsing attributes in process `syz.5.192'. [ 123.371201][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.553962][ T5824] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.571220][ T5824] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 123.591111][ T5824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.600153][ T5824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 123.631095][ T5824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 123.653785][ T5824] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.663192][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.672728][ T5824] usb 6-1: Product: syz [ 123.677285][ T5824] usb 6-1: Manufacturer: syz [ 123.689765][ T5824] cdc_wdm 6-1:1.0: skipping garbage [ 123.692011][ T23] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 123.695189][ T5824] cdc_wdm 6-1:1.0: skipping garbage [ 123.719412][ T5824] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 123.725774][ T5824] cdc_wdm 6-1:1.0: Unknown control protocol [ 123.755913][ T6514] loop4: detected capacity change from 0 to 32768 [ 123.765554][ T6514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.199 (6514) [ 123.785764][ T6514] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.796144][ T6514] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 123.805934][ T6514] BTRFS info (device loop4): enabling ssd optimizations [ 123.813018][ T6514] BTRFS info (device loop4): using spread ssd allocation scheme [ 123.820777][ T6514] BTRFS info (device loop4): using free space tree [ 123.850770][ T6514] BTRFS info (device loop4): auto enabling async discard [ 123.921659][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.930749][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 123.938517][ T23] usb 2-1: can't read configurations, error -71 [ 123.968479][ T27] usb 6-1: USB disconnect, device number 2 [ 124.005977][ T5953] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.651178][ T6549] mmap: syz.1.209 (6549) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.826492][ T6555] capability: warning: `syz.5.213' uses deprecated v2 capabilities in a way that may be insecure [ 125.378792][ T6573] loop1: detected capacity change from 0 to 4096 [ 125.400972][ T6577] loop3: detected capacity change from 0 to 64 [ 125.431167][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.436815][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 125.436833][ T28] audit: type=1800 audit(1751705695.051:105): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.222" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 125.577956][ T6581] loop3: detected capacity change from 0 to 24 [ 125.592274][ T6581] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 125.608474][ T6581] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 125.625832][ T27] usb 5-1: config 0 has no interfaces? [ 125.641279][ T27] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 125.662657][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.683546][ T27] usb 5-1: config 0 descriptor?? [ 125.696871][ T6583] loop1: detected capacity change from 0 to 16 [ 125.734689][ T6583] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 125.779653][ T6587] loop5: detected capacity change from 0 to 128 [ 125.785902][ T6589] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 125.799979][ T6589] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 125.922000][ T2131] usb 5-1: USB disconnect, device number 2 [ 126.082470][ T6597] sctp: [Deprecated]: syz.1.231 (pid 6597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.082470][ T6597] Use struct sctp_sack_info instead [ 126.653594][ T6621] loop3: detected capacity change from 0 to 512 [ 126.709160][ T6621] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.244: invalid block [ 126.748526][ T6621] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.244: invalid indirect mapped block 10 (level 1) [ 126.780562][ T6621] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.244: invalid indirect mapped block 8 (level 1) [ 126.824269][ T6621] EXT4-fs (loop3): 1 truncate cleaned up [ 126.860491][ T6621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.024652][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.498209][ T6638] syz.3.250 (6638): /proc/6637/oom_adj is deprecated, please use /proc/6637/oom_score_adj instead. [ 127.699948][ T6617] loop5: detected capacity change from 0 to 65536 [ 127.736527][ T6617] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 127.788621][ T6617] XFS (loop5): Ending clean mount [ 127.808641][ T6617] XFS (loop5): Quotacheck needed: Please wait. [ 127.868108][ T6617] XFS (loop5): Quotacheck: Done. [ 127.936882][ T5977] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 128.166916][ T6668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.260'. [ 128.848063][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.957769][ T6702] loop4: detected capacity change from 0 to 256 [ 128.970903][ T6702] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.982460][ T6702] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 129.002720][ T6702] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xce89e5da, utbl_chksum : 0xe619d30d) [ 129.041097][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 129.054000][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.064049][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 129.089480][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.107005][ T23] usb 4-1: config 0 descriptor?? [ 129.209053][ T6705] loop1: detected capacity change from 0 to 512 [ 129.224285][ T6705] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.266165][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.279187][ T6705] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.343383][ T6705] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.276: corrupted inode contents [ 129.360153][ T6705] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #2: comm syz.1.276: mark_inode_dirty error [ 129.378545][ T6705] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.276: corrupted inode contents [ 129.405031][ T6713] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.276: corrupted inode contents [ 129.433381][ T6713] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #2: comm syz.1.276: mark_inode_dirty error [ 129.452295][ T6713] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.276: corrupted inode contents [ 129.470114][ T6713] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.276: mark_inode_dirty error [ 129.485735][ T6715] IPv6: Can't replace route, no match found [ 129.494395][ T6713] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.276: corrupted inode contents [ 129.514311][ T6713] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #2: comm syz.1.276: mark_inode_dirty error [ 129.547657][ T23] hid (null): global environment stack overflow [ 129.572070][ T23] hid (null): invalid report_size 18151 [ 129.577741][ T23] hid (null): global environment stack overflow [ 129.611731][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.815593][ T23] usb 4-1: USB disconnect, device number 3 [ 129.885434][ T6725] loop4: detected capacity change from 0 to 256 [ 129.930749][ T6723] loop5: detected capacity change from 0 to 8192 [ 129.939385][ T6725] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 129.960528][ T6723] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.994997][ T6723] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 130.021737][ T6723] REISERFS (device loop5): using ordered data mode [ 130.039774][ T6723] reiserfs: using flush barriers [ 130.074966][ T6723] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.110011][ T6723] REISERFS (device loop5): checking transaction log (loop5) [ 130.147416][ T6723] REISERFS (device loop5): Using rupasov hash to sort names [ 130.163136][ T6723] REISERFS (device loop5): using 3.5.x disk format [ 130.308515][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 130.409293][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 130.484218][ T1132] Bluetooth: hci4: Frame reassembly failed (-84) [ 130.491049][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 130.513968][ T6741] vlan2: entered allmulticast mode [ 130.520103][ T6744] Bluetooth: hci4: Frame reassembly failed (-84) [ 130.542750][ T6746] loop3: detected capacity change from 0 to 1764 [ 130.640321][ T6746] loop3: detected capacity change from 0 to 256 [ 130.853625][ T6756] loop4: detected capacity change from 0 to 128 [ 130.868582][ T6756] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.882818][ T6756] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.891563][ T6759] loop3: detected capacity change from 0 to 1024 [ 130.938601][ T5953] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.050313][ T54] hfsplus: b-tree write err: -5, ino 8 [ 131.082644][ T5824] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.292854][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 131.324399][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 131.343945][ T5824] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 131.357004][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.378721][ T5824] usb 2-1: Product: syz [ 131.386610][ T5824] usb 2-1: Manufacturer: syz [ 131.403470][ T5824] usb 2-1: SerialNumber: syz [ 131.432292][ T5824] usb 2-1: config 0 descriptor?? [ 131.444998][ T6754] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.464242][ T5824] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 131.815297][ T27] usb 2-1: USB disconnect, device number 8 [ 131.815346][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 131.924027][ T6770] loop4: detected capacity change from 0 to 128 [ 132.070820][ T6768] loop3: detected capacity change from 0 to 32768 [ 132.080409][ T6768] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.303 (6768) [ 132.096978][ T6768] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 132.110149][ T6768] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 132.125412][ T6768] BTRFS info (device loop3): using free space tree [ 132.186322][ T6768] BTRFS info (device loop3): enabling ssd optimizations [ 132.186347][ T6790] loop4: detected capacity change from 0 to 16 [ 132.194650][ T6768] BTRFS info (device loop3): auto enabling async discard [ 132.203012][ T6790] erofs: (device loop4): mounted with root inode @ nid 36. [ 132.387898][ T5782] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 132.536858][ T5792] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 132.544928][ T5790] Bluetooth: hci4: command 0xfc11 tx timeout [ 132.624885][ T6797] loop5: detected capacity change from 0 to 128 [ 132.633873][ T6797] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 132.946841][ T6800] loop5: detected capacity change from 0 to 65 [ 133.011092][ T6800] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 133.051425][ T6800] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 133.247039][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254191][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.307168][ T6795] loop1: detected capacity change from 0 to 32768 [ 133.631128][ T965] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 133.710557][ T6810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 133.748096][ T6810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 133.843249][ T965] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.858010][ T965] usb 6-1: config 0 has no interface number 0 [ 133.875421][ T965] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 133.901299][ T965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.910392][ T965] usb 6-1: Product: syz [ 133.921112][ T965] usb 6-1: Manufacturer: syz [ 133.926082][ T965] usb 6-1: SerialNumber: syz [ 133.935310][ T6812] loop1: detected capacity change from 0 to 512 [ 133.952166][ T965] usb 6-1: config 0 descriptor?? [ 133.976707][ T6808] loop4: detected capacity change from 0 to 32768 [ 133.986249][ T6804] loop3: detected capacity change from 0 to 32768 [ 134.003202][ T6812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.025761][ T6812] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.038635][ T6804] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.057202][ T6812] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes [ 134.098440][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.183400][ T965] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 134.215255][ T6804] XFS (loop3): Ending clean mount [ 134.235817][ T6804] XFS (loop3): Quotacheck needed: Please wait. [ 134.244938][ T965] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.269323][ T965] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 134.282345][ T965] usb 6-1: media controller created [ 134.334998][ T965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.350794][ T6804] XFS (loop3): Quotacheck: Done. [ 134.384240][ T6806] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 134.424621][ T965] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 134.471379][ T6831] veth0_to_team: entered promiscuous mode [ 134.487518][ T6831] veth0_to_team: entered allmulticast mode [ 134.516007][ T965] usb 6-1: USB disconnect, device number 3 [ 134.528991][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.835421][ T28] audit: type=1326 audit(1751705704.451:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8811b8e929 code=0x7ffc0000 [ 134.881165][ T28] audit: type=1326 audit(1751705704.451:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8811b8e929 code=0x7ffc0000 [ 134.921175][ T28] audit: type=1326 audit(1751705704.481:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8811b8e929 code=0x7ffc0000 [ 134.956767][ T28] audit: type=1326 audit(1751705704.491:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8811b8e929 code=0x7ffc0000 [ 135.011093][ T28] audit: type=1326 audit(1751705704.491:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8811b8e929 code=0x7ffc0000 [ 135.034843][ T28] audit: type=1326 audit(1751705704.491:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8811b8e929 code=0x7ffc0000 [ 135.059235][ T28] audit: type=1326 audit(1751705704.491:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8811b858e7 code=0x7ffc0000 [ 135.082202][ T28] audit: type=1326 audit(1751705704.491:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8811b2ab19 code=0x7ffc0000 [ 135.105471][ T28] audit: type=1326 audit(1751705704.491:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8811b858e7 code=0x7ffc0000 [ 135.167375][ T28] audit: type=1326 audit(1751705704.491:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8811b2ab19 code=0x7ffc0000 [ 135.281193][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.302931][ T6849] loop5: detected capacity change from 0 to 8 [ 135.488622][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 135.497249][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 135.511490][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.533146][ T23] usb 5-1: config 0 descriptor?? [ 135.681289][ T2131] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 135.766716][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 135.779369][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.339'. [ 135.785311][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.819882][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 135.837948][ T23] usb 5-1: media controller created [ 135.866929][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.913789][ T2131] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 135.922757][ T2131] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 135.930917][ T2131] usb 4-1: config 0 has no interface number 0 [ 135.937440][ T2131] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 135.947822][ T2131] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.959444][ T2131] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 135.970323][ T23] az6027: usb out operation failed. (-71) [ 135.979381][ T2131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.987901][ T23] az6027: usb out operation failed. (-71) [ 135.993921][ T23] stb0899_attach: Driver disabled by Kconfig [ 136.000216][ T23] az6027: no front-end attached [ 136.000216][ T23] [ 136.009822][ T2131] usb 4-1: config 0 descriptor?? [ 136.015666][ T23] az6027: usb out operation failed. (-71) [ 136.021566][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 136.037788][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 136.051643][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 136.061935][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 136.080894][ T23] usb 5-1: USB disconnect, device number 3 [ 136.186054][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 136.350016][ T6879] loop1: detected capacity change from 0 to 1024 [ 136.360590][ T6879] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.391795][ T6879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.417628][ T6879] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 136.458090][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.655329][ T2131] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input8 [ 136.678322][ T2131] input: failed to attach handler kbd to device input8, error: -5 [ 136.843399][ T2131] IPVS: starting estimator thread 0... [ 136.905733][ T2131] usb 4-1: USB disconnect, device number 4 [ 136.941412][ T6890] IPVS: using max 17 ests per chain, 40800 per kthread [ 137.232795][ T6907] loop1: detected capacity change from 0 to 256 [ 137.632978][ T6918] Zero length message leads to an empty skb [ 139.191218][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.375161][ T23] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.398705][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.422046][ T23] usb 5-1: config 0 descriptor?? [ 139.439206][ T23] cp210x 5-1:0.0: cp210x converter detected [ 139.638276][ T6946] loop3: detected capacity change from 0 to 32768 [ 139.656064][ T6946] XFS: ikeep mount option is deprecated. [ 139.669385][ T6946] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.730894][ T6946] XFS (loop3): Ending clean mount [ 139.747686][ T6946] XFS (loop3): Quotacheck needed: Please wait. [ 139.788085][ T6946] XFS (loop3): Quotacheck: Done. [ 139.905958][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.991128][ T6964] loop1: detected capacity change from 0 to 1024 [ 140.066713][ T23] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 140.093209][ T23] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 140.117781][ T23] usb 5-1: cp210x converter now attached to ttyUSB0 [ 140.145195][ T23] usb 5-1: USB disconnect, device number 4 [ 140.163318][ T6964] hfsplus: bad catalog entry type [ 140.181745][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.190083][ T23] cp210x 5-1:0.0: device disconnected [ 140.230545][ T1132] hfsplus: b-tree write err: -5, ino 4 [ 140.797877][ T6966] loop3: detected capacity change from 0 to 32768 [ 140.901949][ T23] Process accounting resumed [ 141.235096][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 141.235112][ T28] audit: type=1326 audit(1751705710.851:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8811b858e7 code=0x0 [ 141.827999][ T7017] netlink: 27 bytes leftover after parsing attributes in process `syz.4.401'. [ 142.246298][ T7024] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 142.262285][ T7024] macsec1: entered promiscuous mode [ 142.267968][ T7024] macsec1: entered allmulticast mode [ 142.280638][ T7024] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 142.291738][ T7029] warning: `syz.1.407' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.409872][ T7016] loop3: detected capacity change from 0 to 32768 [ 142.471632][ T7016] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 142.509665][ T7016] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.674773][ T5782] ocfs2: Unmounting device (7,3) on (node local) [ 142.882815][ T7054] loop4: detected capacity change from 0 to 2048 [ 142.930209][ T7054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.951224][ T7054] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.008546][ T7061] loop3: detected capacity change from 0 to 8 [ 143.088113][ T5953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.452848][ T7052] loop5: detected capacity change from 0 to 40427 [ 143.494927][ T7052] F2FS-fs (loop5): invalid crc value [ 143.538424][ T7052] F2FS-fs (loop5): Found nat_bits in checkpoint [ 143.691619][ T7052] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 143.818248][ T7066] loop1: detected capacity change from 0 to 32768 [ 143.834909][ T7066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.422 (7066) [ 143.854927][ T5977] syz-executor: attempt to access beyond end of device [ 143.854927][ T5977] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.894252][ T5977] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 143.901152][ T7066] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.901249][ T7066] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 143.948602][ T7066] BTRFS info (device loop1): using free space tree [ 144.132287][ T7066] BTRFS info (device loop1): enabling ssd optimizations [ 144.157905][ T7066] BTRFS info (device loop1): auto enabling async discard [ 144.654160][ T60] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 144.727990][ T5781] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.941385][ T7112] loop5: detected capacity change from 0 to 2048 [ 145.001235][ T7112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.025969][ T7091] loop4: detected capacity change from 0 to 32768 [ 145.046639][ T7091] XFS: ikeep mount option is deprecated. [ 145.100269][ T7091] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.270572][ T7091] XFS (loop4): Ending clean mount [ 145.293879][ T7091] XFS (loop4): Quotacheck needed: Please wait. [ 145.389028][ T7091] XFS (loop4): Quotacheck: Done. [ 145.547031][ T5953] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.679865][ T7132] loop5: detected capacity change from 0 to 1024 [ 145.722889][ T7132] EXT4-fs: Ignoring removed nobh option [ 145.729165][ T7132] EXT4-fs: Ignoring removed bh option [ 145.801361][ T7132] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.871425][ T7132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.950074][ T7136] loop1: detected capacity change from 0 to 512 [ 146.002873][ T7136] EXT4-fs: Ignoring removed nobh option [ 146.064686][ T7136] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 146.092789][ T5977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.216616][ T7136] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.441: corrupted inode contents [ 146.256759][ T7136] EXT4-fs (loop1): Remounting filesystem read-only [ 146.264725][ T7136] EXT4-fs (loop1): 1 truncate cleaned up [ 146.272921][ T7136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.292019][ T11] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.310167][ T7136] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.341609][ T11] Quota error (device loop1): write_blk: dquota write failed [ 146.349894][ T11] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 146.391098][ T11] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.430666][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.431661][ T11] Quota error (device loop1): write_blk: dquota write failed [ 146.458961][ T11] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 146.476436][ T11] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 146.501534][ T11] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 146.534788][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 146.717208][ T7163] loop1: detected capacity change from 0 to 2048 [ 146.754709][ T7163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.268052][ T7165] loop4: detected capacity change from 0 to 32768 [ 147.286580][ T5825] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 147.317114][ T7165] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 147.356956][ T7165] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 147.514986][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.532807][ T5825] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 147.568922][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.601631][ T5825] usb 4-1: config 0 descriptor?? [ 147.630567][ T7176] loop5: detected capacity change from 0 to 32768 [ 147.654120][ T7176] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.697643][ T7176] XFS (loop5): Ending clean mount [ 147.711144][ T7176] XFS (loop5): Quotacheck needed: Please wait. [ 147.714690][ T5953] ocfs2: Unmounting device (7,4) on (node local) [ 147.795449][ T7176] XFS (loop5): Quotacheck: Done. [ 147.927876][ T5977] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.072156][ T5825] nintendo 0003:057E:200E.0002: unbalanced delimiter at end of report description [ 148.082837][ T5825] nintendo 0003:057E:200E.0002: HID parse failed [ 148.090893][ T5825] nintendo 0003:057E:200E.0002: probe - fail = -22 [ 148.098128][ T5825] nintendo: probe of 0003:057E:200E.0002 failed with error -22 [ 148.272141][ T23] usb 4-1: USB disconnect, device number 5 [ 148.318483][ T28] audit: type=1326 audit(1751705717.931:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.4.464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe3d17858e7 code=0x0 [ 149.231245][ T28] audit: type=1326 audit(1751705718.841:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d775858e7 code=0x7ffc0000 [ 149.276744][ T7210] loop4: detected capacity change from 0 to 2048 [ 149.311203][ T28] audit: type=1326 audit(1751705718.841:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d7752ab19 code=0x7ffc0000 [ 149.328679][ T7210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.367692][ T28] audit: type=1326 audit(1751705718.841:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d775858e7 code=0x7ffc0000 [ 149.606625][ T7221] loop1: detected capacity change from 0 to 2048 [ 149.649546][ T7221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.681292][ T7221] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.771406][ T7228] loop5: detected capacity change from 0 to 4096 [ 149.788991][ T7228] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 149.840423][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.067409][ T7239] process 'syz.5.481' launched './file0' with NULL argv: empty string added [ 150.121190][ T5876] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.216825][ T1124] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 150.248339][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.331256][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 150.342383][ T5876] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 150.354162][ T5876] usb 4-1: config 0 has no interface number 0 [ 150.367580][ T5876] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.393218][ T5876] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 150.411152][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 150.426990][ T5876] usb 4-1: Product: syz [ 150.431471][ T5876] usb 4-1: SerialNumber: syz [ 150.439688][ T5876] usb 4-1: config 0 descriptor?? [ 150.450350][ T5876] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 150.568347][ T7257] loop5: detected capacity change from 0 to 256 [ 150.582553][ T7257] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 150.795152][ T7263] loop5: detected capacity change from 0 to 2048 [ 150.810177][ T7263] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.839500][ T7264] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.997784][ T7268] fuse: Invalid group_id [ 151.049811][ T7271] loop5: detected capacity change from 0 to 64 [ 152.281284][ T5790] Bluetooth: hci4: command 0x1003 tx timeout [ 152.281367][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.723470][ T7288] loop4: detected capacity change from 0 to 8192 [ 152.909922][ T965] usb 4-1: USB disconnect, device number 6 [ 152.990882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.199863][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 153.871410][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 153.871427][ T28] audit: type=1326 audit(1751705723.481:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcdf8e929 code=0x7ffc0000 [ 153.951586][ T28] audit: type=1326 audit(1751705723.481:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcdf8e929 code=0x7ffc0000 [ 153.994264][ T28] audit: type=1326 audit(1751705723.481:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dcdf8e929 code=0x7ffc0000 [ 154.050407][ T28] audit: type=1326 audit(1751705723.481:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcdf8e929 code=0x7ffc0000 [ 154.074370][ T28] audit: type=1326 audit(1751705723.481:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7dcdf858e7 code=0x7ffc0000 [ 154.106500][ T28] audit: type=1326 audit(1751705723.481:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dcdf2ab19 code=0x7ffc0000 [ 154.177499][ T28] audit: type=1326 audit(1751705723.481:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7dcdf858e7 code=0x7ffc0000 [ 154.237569][ T28] audit: type=1326 audit(1751705723.481:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dcdf2ab19 code=0x7ffc0000 [ 154.275658][ T28] audit: type=1326 audit(1751705723.481:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7dcdf858e7 code=0x7ffc0000 [ 154.321236][ T28] audit: type=1326 audit(1751705723.481:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dcdf2ab19 code=0x7ffc0000 [ 154.513225][ T7360] bond1 (unregistering): Released all slaves [ 154.710308][ T7373] loop5: detected capacity change from 0 to 128 [ 154.726673][ T7373] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 154.937914][ T7381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.544'. [ 154.949021][ T7383] loop5: detected capacity change from 0 to 16 [ 154.964325][ T7383] erofs: (device loop5): mounted with root inode @ nid 36. [ 155.144832][ T7389] loop1: detected capacity change from 0 to 2048 [ 155.166139][ T7389] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 155.185272][ T7389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.636457][ T7377] loop4: detected capacity change from 0 to 40427 [ 155.684524][ T7377] F2FS-fs (loop4): invalid crc value [ 155.714944][ T7377] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.824864][ T7377] F2FS-fs (loop4): Start checkpoint disabled! [ 155.869628][ T7377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 156.013733][ T7422] loop3: detected capacity change from 0 to 128 [ 156.031223][ T7422] EXT4-fs: Ignoring removed nobh option [ 156.050368][ T7422] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.066548][ T7422] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.245100][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.290137][ T7430] tap0: tun_chr_ioctl cmd 1074025677 [ 156.307103][ T7430] tap0: linktype set to 776 [ 156.364309][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 156.370776][ T48] kworker/u4:3: attempt to access beyond end of device [ 156.370776][ T48] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 156.395527][ T48] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 156.426710][ T48] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 157.136349][ T7459] sp0: Synchronizing with TNC [ 157.183324][ T1132] [ 157.185768][ T1132] ===================================================== [ 157.192724][ T1132] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 157.200192][ T1132] 6.6.95-syzkaller #0 Not tainted [ 157.205219][ T1132] ----------------------------------------------------- [ 157.212182][ T1132] kworker/u4:7/1132 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 157.219994][ T1132] ffffffff8d7d9338 (disc_data_lock#2){.+.+}-{2:2}, at: sixpack_write_wakeup+0x30/0x480 [ 157.229700][ T1132] [ 157.229700][ T1132] and this task is already holding: [ 157.237062][ T1132] ffffffff971d60b8 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0xfb/0x5d0 [ 157.245675][ T1132] which would create a new lock dependency: [ 157.251563][ T1132] (&port_lock_key){-.-.}-{2:2} -> (disc_data_lock#2){.+.+}-{2:2} [ 157.259415][ T1132] [ 157.259415][ T1132] but this new dependency connects a HARDIRQ-irq-safe lock: [ 157.268965][ T1132] (&port_lock_key){-.-.}-{2:2} [ 157.268985][ T1132] [ 157.268985][ T1132] ... which became HARDIRQ-irq-safe at: [ 157.281559][ T1132] lock_acquire+0x197/0x410 [ 157.286160][ T1132] _raw_spin_lock_irqsave+0xa8/0xf0 [ 157.291448][ T1132] serial8250_handle_irq+0x7a/0x6e0 [ 157.296739][ T1132] serial8250_default_handle_irq+0xb8/0x1a0 [ 157.302746][ T1132] serial8250_interrupt+0x9f/0x1c0 [ 157.307971][ T1132] __handle_irq_event_percpu+0x276/0x930 [ 157.313697][ T1132] handle_irq_event+0x8b/0x1e0 [ 157.318643][ T1132] handle_edge_irq+0x247/0xb30 [ 157.323519][ T1132] __common_interrupt+0x13b/0x230 [ 157.328736][ T1132] common_interrupt+0xb4/0xd0 [ 157.333508][ T1132] asm_common_interrupt+0x26/0x40 [ 157.338619][ T1132] pv_native_safe_halt+0x13/0x20 [ 157.343643][ T1132] default_idle+0x13/0x20 [ 157.348068][ T1132] default_idle_call+0x6c/0xa0 [ 157.352914][ T1132] do_idle+0x1eb/0x510 [ 157.357073][ T1132] cpu_startup_entry+0x43/0x60 [ 157.361928][ T1132] rest_init+0x2e2/0x300 [ 157.366288][ T1132] arch_call_rest_init+0xe/0x10 [ 157.371222][ T1132] start_kernel+0x459/0x4e0 [ 157.375815][ T1132] x86_64_start_reservations+0x2a/0x30 [ 157.381380][ T1132] copy_bootdata+0x0/0xe0 [ 157.385801][ T1132] secondary_startup_64_no_verify+0x179/0x17b [ 157.391978][ T1132] [ 157.391978][ T1132] to a HARDIRQ-irq-unsafe lock: [ 157.398994][ T1132] (disc_data_lock#2){.+.+}-{2:2} [ 157.399022][ T1132] [ 157.399022][ T1132] ... which became HARDIRQ-irq-unsafe at: [ 157.411909][ T1132] ... [ 157.411915][ T1132] lock_acquire+0x197/0x410 [ 157.419166][ T1132] _raw_read_lock+0x36/0x50 [ 157.423757][ T1132] sixpack_receive_buf+0x59/0x1360 [ 157.429096][ T1132] tty_ldisc_receive_buf+0x117/0x160 [ 157.434478][ T1132] tty_port_default_receive_buf+0x6e/0xa0 [ 157.440286][ T1132] flush_to_ldisc+0x2f2/0x830 [ 157.445051][ T1132] process_scheduled_works+0xa45/0x15b0 [ 157.450795][ T1132] worker_thread+0xa55/0xfc0 [ 157.455473][ T1132] kthread+0x2fa/0x390 [ 157.459627][ T1132] ret_from_fork+0x48/0x80 [ 157.464218][ T1132] ret_from_fork_asm+0x11/0x20 [ 157.469073][ T1132] [ 157.469073][ T1132] other info that might help us debug this: [ 157.469073][ T1132] [ 157.479395][ T1132] Possible interrupt unsafe locking scenario: [ 157.479395][ T1132] [ 157.487727][ T1132] CPU0 CPU1 [ 157.493196][ T1132] ---- ---- [ 157.498563][ T1132] lock(disc_data_lock#2); [ 157.503070][ T1132] local_irq_disable(); [ 157.509821][ T1132] lock(&port_lock_key); [ 157.516668][ T1132] lock(disc_data_lock#2); [ 157.523739][ T1132] [ 157.527200][ T1132] lock(&port_lock_key); [ 157.531699][ T1132] [ 157.531699][ T1132] *** DEADLOCK *** [ 157.531699][ T1132] [ 157.539840][ T1132] 6 locks held by kworker/u4:7/1132: [ 157.545124][ T1132] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 157.556821][ T1132] #1: ffffc900045ffd00 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 157.568686][ T1132] #2: ffff888020c30ce8 (&buf->lock){+.+.}-{3:3}, at: flush_to_ldisc+0x38/0x830 [ 157.577760][ T1132] #3: ffff88802a3b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 157.587072][ T1132] #4: ffffffff971d60b8 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0xfb/0x5d0 [ 157.596129][ T1132] #5: ffff88802a3b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 157.605442][ T1132] [ 157.605442][ T1132] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 157.615848][ T1132] -> (&port_lock_key){-.-.}-{2:2} { [ 157.621081][ T1132] IN-HARDIRQ-W at: [ 157.625088][ T1132] lock_acquire+0x197/0x410 [ 157.631246][ T1132] _raw_spin_lock_irqsave+0xa8/0xf0 [ 157.638189][ T1132] serial8250_handle_irq+0x7a/0x6e0 [ 157.645045][ T1132] serial8250_default_handle_irq+0xb8/0x1a0 [ 157.652611][ T1132] serial8250_interrupt+0x9f/0x1c0 [ 157.659461][ T1132] __handle_irq_event_percpu+0x276/0x930 [ 157.666749][ T1132] handle_irq_event+0x8b/0x1e0 [ 157.673180][ T1132] handle_edge_irq+0x247/0xb30 [ 157.679602][ T1132] __common_interrupt+0x13b/0x230 [ 157.686297][ T1132] common_interrupt+0xb4/0xd0 [ 157.692646][ T1132] asm_common_interrupt+0x26/0x40 [ 157.699334][ T1132] pv_native_safe_halt+0x13/0x20 [ 157.706036][ T1132] default_idle+0x13/0x20 [ 157.712018][ T1132] default_idle_call+0x6c/0xa0 [ 157.718536][ T1132] do_idle+0x1eb/0x510 [ 157.724259][ T1132] cpu_startup_entry+0x43/0x60 [ 157.730692][ T1132] rest_init+0x2e2/0x300 [ 157.736597][ T1132] arch_call_rest_init+0xe/0x10 [ 157.743124][ T1132] start_kernel+0x459/0x4e0 [ 157.749379][ T1132] x86_64_start_reservations+0x2a/0x30 [ 157.756586][ T1132] copy_bootdata+0x0/0xe0 [ 157.762588][ T1132] secondary_startup_64_no_verify+0x179/0x17b [ 157.770330][ T1132] IN-SOFTIRQ-W at: [ 157.774335][ T1132] lock_acquire+0x197/0x410 [ 157.780511][ T1132] _raw_spin_lock_irqsave+0xa8/0xf0 [ 157.787560][ T1132] serial8250_handle_irq+0x7a/0x6e0 [ 157.794419][ T1132] serial8250_default_handle_irq+0xb8/0x1a0 [ 157.801973][ T1132] serial8250_interrupt+0x9f/0x1c0 [ 157.808768][ T1132] __handle_irq_event_percpu+0x276/0x930 [ 157.816170][ T1132] handle_irq_event+0x8b/0x1e0 [ 157.822623][ T1132] handle_edge_irq+0x247/0xb30 [ 157.829075][ T1132] __common_interrupt+0x13b/0x230 [ 157.835761][ T1132] common_interrupt+0x5d/0xd0 [ 157.842095][ T1132] asm_common_interrupt+0x26/0x40 [ 157.848787][ T1132] handle_softirqs+0x1b0/0x820 [ 157.855217][ T1132] __irq_exit_rcu+0xc7/0x190 [ 157.861465][ T1132] irq_exit_rcu+0x9/0x20 [ 157.867401][ T1132] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 157.874794][ T1132] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.882618][ T1132] pv_native_safe_halt+0x13/0x20 [ 157.889308][ T1132] default_idle+0x13/0x20 [ 157.895295][ T1132] default_idle_call+0x6c/0xa0 [ 157.901712][ T1132] do_idle+0x1eb/0x510 [ 157.907446][ T1132] cpu_startup_entry+0x43/0x60 [ 157.913861][ T1132] rest_init+0x2e2/0x300 [ 157.919758][ T1132] arch_call_rest_init+0xe/0x10 [ 157.926388][ T1132] start_kernel+0x459/0x4e0 [ 157.932538][ T1132] x86_64_start_reservations+0x2a/0x30 [ 157.939655][ T1132] copy_bootdata+0x0/0xe0 [ 157.945642][ T1132] secondary_startup_64_no_verify+0x179/0x17b [ 157.953366][ T1132] INITIAL USE at: [ 157.957260][ T1132] lock_acquire+0x197/0x410 [ 157.963325][ T1132] _raw_spin_lock_irqsave+0xa8/0xf0 [ 157.970084][ T1132] serial8250_do_set_termios+0x548/0x17e0 [ 157.977375][ T1132] uart_set_options+0x3bc/0x5b0 [ 157.983792][ T1132] serial8250_console_setup+0x2d2/0x3a0 [ 157.990909][ T1132] univ8250_console_setup+0x3c4/0x480 [ 157.997851][ T1132] try_enable_preferred_console+0x48a/0x600 [ 158.005313][ T1132] register_console+0x3be/0xe60 [ 158.011785][ T1132] univ8250_console_init+0x45/0x50 [ 158.018557][ T1132] console_init+0x17b/0x5e0 [ 158.024624][ T1132] start_kernel+0x2c0/0x4e0 [ 158.030693][ T1132] x86_64_start_reservations+0x2a/0x30 [ 158.037733][ T1132] copy_bootdata+0x0/0xe0 [ 158.043635][ T1132] secondary_startup_64_no_verify+0x179/0x17b [ 158.051273][ T1132] } [ 158.053770][ T1132] ... key at: [] port_lock_key+0x0/0x20 [ 158.061401][ T1132] [ 158.061401][ T1132] the dependencies between the lock to be acquired [ 158.061409][ T1132] and HARDIRQ-irq-unsafe lock: [ 158.075039][ T1132] -> (disc_data_lock#2){.+.+}-{2:2} { [ 158.080550][ T1132] HARDIRQ-ON-R at: [ 158.084529][ T1132] lock_acquire+0x197/0x410 [ 158.090703][ T1132] _raw_read_lock+0x36/0x50 [ 158.096877][ T1132] sixpack_receive_buf+0x59/0x1360 [ 158.103655][ T1132] tty_ldisc_receive_buf+0x117/0x160 [ 158.111131][ T1132] tty_port_default_receive_buf+0x6e/0xa0 [ 158.118512][ T1132] flush_to_ldisc+0x2f2/0x830 [ 158.124851][ T1132] process_scheduled_works+0xa45/0x15b0 [ 158.132060][ T1132] worker_thread+0xa55/0xfc0 [ 158.138313][ T1132] kthread+0x2fa/0x390 [ 158.144040][ T1132] ret_from_fork+0x48/0x80 [ 158.150159][ T1132] ret_from_fork_asm+0x11/0x20 [ 158.156586][ T1132] SOFTIRQ-ON-R at: [ 158.160571][ T1132] lock_acquire+0x197/0x410 [ 158.166731][ T1132] _raw_read_lock+0x36/0x50 [ 158.172926][ T1132] sixpack_receive_buf+0x59/0x1360 [ 158.179712][ T1132] tty_ldisc_receive_buf+0x117/0x160 [ 158.186670][ T1132] tty_port_default_receive_buf+0x6e/0xa0 [ 158.194139][ T1132] flush_to_ldisc+0x2f2/0x830 [ 158.200489][ T1132] process_scheduled_works+0xa45/0x15b0 [ 158.207728][ T1132] worker_thread+0xa55/0xfc0 [ 158.213986][ T1132] kthread+0x2fa/0x390 [ 158.219711][ T1132] ret_from_fork+0x48/0x80 [ 158.225967][ T1132] ret_from_fork_asm+0x11/0x20 [ 158.232392][ T1132] INITIAL READ USE at: [ 158.236725][ T1132] lock_acquire+0x197/0x410 [ 158.243236][ T1132] _raw_read_lock+0x36/0x50 [ 158.250008][ T1132] sixpack_receive_buf+0x59/0x1360 [ 158.257132][ T1132] tty_ldisc_receive_buf+0x117/0x160 [ 158.264426][ T1132] tty_port_default_receive_buf+0x6e/0xa0 [ 158.272153][ T1132] flush_to_ldisc+0x2f2/0x830 [ 158.279010][ T1132] process_scheduled_works+0xa45/0x15b0 [ 158.286582][ T1132] worker_thread+0xa55/0xfc0 [ 158.293263][ T1132] kthread+0x2fa/0x390 [ 158.299348][ T1132] ret_from_fork+0x48/0x80 [ 158.305817][ T1132] ret_from_fork_asm+0x11/0x20 [ 158.312594][ T1132] } [ 158.315112][ T1132] ... key at: [] disc_data_lock+0x18/0x100 [ 158.323014][ T1132] ... acquired at: [ 158.326823][ T1132] _raw_read_lock+0x36/0x50 [ 158.331501][ T1132] sixpack_write_wakeup+0x30/0x480 [ 158.336788][ T1132] tty_wakeup+0xb8/0x100 [ 158.341208][ T1132] tty_port_default_wakeup+0xa2/0xf0 [ 158.346673][ T1132] serial8250_tx_chars+0x6bd/0x8a0 [ 158.351968][ T1132] __start_tx+0x313/0x450 [ 158.356479][ T1132] __uart_start+0x23a/0x3e0 [ 158.361153][ T1132] uart_write+0x449/0x5d0 [ 158.365744][ T1132] sixpack_receive_buf+0x424/0x1360 [ 158.371120][ T1132] tty_ldisc_receive_buf+0x117/0x160 [ 158.376577][ T1132] tty_port_default_receive_buf+0x6e/0xa0 [ 158.382475][ T1132] flush_to_ldisc+0x2f2/0x830 [ 158.387346][ T1132] process_scheduled_works+0xa45/0x15b0 [ 158.393095][ T1132] worker_thread+0xa55/0xfc0 [ 158.397868][ T1132] kthread+0x2fa/0x390 [ 158.402124][ T1132] ret_from_fork+0x48/0x80 [ 158.406737][ T1132] ret_from_fork_asm+0x11/0x20 [ 158.411697][ T1132] [ 158.414023][ T1132] [ 158.414023][ T1132] stack backtrace: [ 158.419926][ T1132] CPU: 1 PID: 1132 Comm: kworker/u4:7 Not tainted 6.6.95-syzkaller #0 [ 158.428094][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.438201][ T1132] Workqueue: events_unbound flush_to_ldisc [ 158.444040][ T1132] Call Trace: [ 158.447325][ T1132] [ 158.450266][ T1132] dump_stack_lvl+0x16c/0x230 [ 158.454980][ T1132] ? load_image+0x3b0/0x3b0 [ 158.459488][ T1132] ? show_regs_print_info+0x20/0x20 [ 158.464701][ T1132] ? load_image+0x3b0/0x3b0 [ 158.469236][ T1132] ? print_shortest_lock_dependencies+0xf4/0x160 [ 158.475577][ T1132] __lock_acquire+0x678f/0x7c80 [ 158.480457][ T1132] ? verify_lock_unused+0x140/0x140 [ 158.485704][ T1132] lock_acquire+0x197/0x410 [ 158.490215][ T1132] ? sixpack_write_wakeup+0x30/0x480 [ 158.495512][ T1132] ? read_lock_is_recursive+0x20/0x20 [ 158.500921][ T1132] ? tty_port_default_wakeup+0x9a/0xf0 [ 158.506475][ T1132] ? read_lock_is_recursive+0x20/0x20 [ 158.511875][ T1132] ? ldsem_down_read_trylock+0x138/0x1a0 [ 158.517515][ T1132] ? tty_ldisc_ref+0x1c/0x80 [ 158.522201][ T1132] ? __ldsem_down_read_nested+0x820/0x820 [ 158.528017][ T1132] ? sixpack_receive_buf+0x1360/0x1360 [ 158.533509][ T1132] _raw_read_lock+0x36/0x50 [ 158.538015][ T1132] ? sixpack_write_wakeup+0x30/0x480 [ 158.543303][ T1132] sixpack_write_wakeup+0x30/0x480 [ 158.548425][ T1132] ? sixpack_receive_buf+0x1360/0x1360 [ 158.553890][ T1132] tty_wakeup+0xb8/0x100 [ 158.558138][ T1132] tty_port_default_wakeup+0xa2/0xf0 [ 158.563433][ T1132] serial8250_tx_chars+0x6bd/0x8a0 [ 158.568589][ T1132] __start_tx+0x313/0x450 [ 158.572933][ T1132] __uart_start+0x23a/0x3e0 [ 158.577442][ T1132] uart_write+0x449/0x5d0 [ 158.581796][ T1132] sixpack_receive_buf+0x424/0x1360 [ 158.587006][ T1132] ? sixpack_ioctl+0x570/0x570 [ 158.591775][ T1132] tty_ldisc_receive_buf+0x117/0x160 [ 158.597084][ T1132] tty_port_default_receive_buf+0x6e/0xa0 [ 158.602826][ T1132] flush_to_ldisc+0x2f2/0x830 [ 158.607617][ T1132] ? process_scheduled_works+0x957/0x15b0 [ 158.613351][ T1132] process_scheduled_works+0xa45/0x15b0 [ 158.618911][ T1132] ? assign_work+0x400/0x400 [ 158.623509][ T1132] ? assign_work+0x39e/0x400 [ 158.628105][ T1132] worker_thread+0xa55/0xfc0 [ 158.632699][ T1132] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 158.638685][ T1132] ? _raw_spin_unlock+0x40/0x40 [ 158.643535][ T1132] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 158.649437][ T1132] kthread+0x2fa/0x390 [ 158.653529][ T1132] ? pr_cont_work+0x560/0x560 [ 158.658219][ T1132] ? kthread_blkcg+0xd0/0xd0 [ 158.662807][ T1132] ret_from_fork+0x48/0x80 [ 158.667225][ T1132] ? kthread_blkcg+0xd0/0xd0 [ 158.671816][ T1132] ret_from_fork_asm+0x11/0x20 [ 158.676588][ T1132]