last executing test programs: 8.496967988s ago: executing program 0 (id=420): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x2180c8, &(0x7f0000000580)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) statfs(0x0, &(0x7f00000000c0)=""/2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7.134642757s ago: executing program 2 (id=423): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 7.134288818s ago: executing program 0 (id=424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 7.107020649s ago: executing program 2 (id=425): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d6"], 0x0) 6.984057416s ago: executing program 3 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0xef}}, 0x30) syz_emit_ethernet(0xd81, &(0x7f0000001900)={@multicast, @random="5265735cee29", @void, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0xf, 0x6, "b617a3", 0xd4b, 0x3a, 0xff, @private2, @loopback, {[], @param_prob={0x4, 0x2, 0x0, 0x6, {0x8, 0x6, "0db78f", 0x3, 0x6, 0x1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [], "3385e61ae13ccdf0f3908198ccdf7bc01a2036d4efd7a7f3b01d751e7f40b47e823455d91af38ea75bd0a734d43420687fdc806463d849738037895055fa572b015f3023babbc446cc05d46c9a728d7e6b071619574c56597a749483165d139b97644a27d7fce5125a2c7500ae4a1c893a40b3e3628c554febcae4507f3b803d247a18263cb594e4f1c36ff67b180b92b04eb0df823cbd8c1fd56b49dd93fcaea1bd62f0cd147ba676acc461f54a28b39cc55b6eb0da7617285139c4c6dd869729c6804ef9f376738e9ab3a50336a6e0e5e5265f28b859c869bddbde6e1667875dfa9043065698f99a205fb4a69304fc4b34ef49adf46b8bc283107ccf490693a13f3f41dc82914410f1978e2a89e31928b1fd9c6fd4295ecf1b2fba8da5ef62fc5c06e4a9e99b76b23b371bcf65d4f1d6d85344d6c651fa609b74923b418557d614e78d7b54611d7103bb75a5e4c3e22f413e6eb1ef0b79cc18819b1058d79a8bb9ea759544fe47e1b95558aa5748b27c3cb9a41eaf2543881e3a8e03231fdf2867ce25333f0506219abfaf467db6556224e021999f0b848676aef39e6c5f6642da3662d6246e84b647868e9dc753cb3045baa970bf5281f518b25c359de9ab91f731dfc9be19ded65c770857c367586241c68f883492b9a5e02941503868d5f3845e6d244e2f9d48383d4ce6f6ee0c347622b50f4d27cce0defebe89948375d9b94b2ec6f44cefa7ddba01f8a17740324eac6925a1f10552c7811b02231f02ad672de9a891ea1f8dcc5b93cff3f99105251122be089470c084bc8631adaf45d9e8deea284cd46c51f2775a3c7bb4192054dce5de6e31cd8a544c9fc644f0f667165b20ab7fe0ff0a4eb04e7b8b19f2bac18eda4d3c38ae6557d7d4995fd5cae7d116d397ad5780142f530ec2248c9fbca9cb31fd7db3853dabea14aa9da9b8b493479bdd5ee6d88a5ae349652bebca6e59f48dae2d7ee8f84aca9debb162ea2f7b6c92a656d2adae6b1960a6512623eb45db936c1f0e04a8bbacf744d7018bd37b6803451c18837d15d7a5595bcb1923a363e1a9e1db4f73b4821be0e2a490c99667efca8bf49e79a43ff308b2481f3a3527fb093d0b7441e1a180de7e38a006b29da65d9b147fa0056c8451a90405e8d3c656a2025a53dc68abcaa9377b568b9569187957012e902038631936aafa7ac9318bdf94d897ef616f46a4420f55595f95b8686fb241be22e27629aa5d19a865b2cbf4d5ddaf1a39093ef36bed154fc1a637c3e9b2ebe99c73a73a6e50aca33a16ec9ae8a7b81b89c28e50477b62b3a43746865f9b2489f82090f96d80d8f9f302f98be8d8b2f00bf6f3a13cc6768458cf89d2ad7460a24da375f43463de27e91f8b42cc995acce9f91d84c5314f8aba6b0ed371252f9f686bf275fb2c63afb39d01a350a19efa2c087511b8c20ef45a063a0618669197f94320e233aed5d58440d7af1c0ce9b62b017490f15eda176c14f1ba221be2d0b8e9f84445d79be1cd4225daef55ba60ca47bcbdba7ef8894640eba4d29fa28c1ab591c09743b0ccad4b7965a123e10c8fdec2f79dab83b3c5f7f87f2b838074aa6267e81c8341a405c9bb5a59750409403ee59a49ad0a80d54f5b5ddef46b7c76ccd832edfcf33a61e46540585a736fa523a555e9b4299481253f396e54f9aa93e4fe0904619bb7908a15b5b72c2678d598e7d4e964e8ee5513ad786be8e200a159717eba2f803813321dc60a5bd9b779223cd4cafe4bb03dbcb6399a4dae891ff8bc411064eef856eb688c86f663db8a7c15901eb3e1f7f74e7a6089292bf8de756da1fd833068e8e8b46784005fdb61962ed1441dde504217e72d81cabb54d08ca8c6b615491ff3ff8010c827c39e7daf2ed045d0aa1649d18742f273d3cf376fa01888d4a29bed28eacc7f2112570f35957465270d47339d1504593f9c864c82e7753fbde6b9dbc100358ba0c561162b41e621bc8af441ab26576fd8160a75c48f8e9f4e95de472bf25db832d1d42741760fad438789a4795dbc4286eb94a7083cdbffe42ef2c50c04d31205445a1ada8941195abafa4d49f28568f8eb485b4bc19232020c4ea1210782561b021b09df4ddc6cd07e42de4bf60679f544762b215caa2576a186c729569fe15269384cad4804bd7318922f9c72c827aa7f5cfc1a768210f6add4f9f1da62383c1a36efd117aa677308893772ba62dce4a3ad7ed78b63352345c76fcd59b3c7db96a44eed106df805a0038a01d2f236f8c62b09702429fda9805db34b74d8e3906e00d7ad8159db97c8fca1272e023211b80c9a2f17c8223afd92870b4c321143f6c887c112d9d31ad552cecc7c23506d717d4b0e6f86bdbd9e5737668616ad2939e05232824a0d97d8db1f32d0c4fc5abfeb89b9010e535d1035d41ddfffe024937a736a00da878398f4eabe8b3057927aefbd82c2a5c45affc0c309a34bfa6d012b8641e60a3f3d83e29efc7ee576c29779e8e2113ad95f0bdf26448b4e60ed64ea99d076465e4f0b22ab0663c5f4dafcfc1c4bb74d65582aa91c455229f54d2354f4e3ef60e7f9e502e7a669454b1a3dbb906150d2d9e8ab1bbb5538c5bdb59c1ccfbbac566180d482842607f3017665b69d0b2f21d2e6fef6eff38e59e89ad350a81f0143dcdea078ac2eacfe020e894c75444e7edd0bffb0e4568eb20392ed1aa3c9015ce6018a3fa96f39cdfccd98c6542f87c9ef1c39c8514fdd444a140cef2d79dfb45768d4e829bfa8788980f9704ff24b0a1eaf33c50409fe50e60fb1ce211e2d673661a443d2ea22383e7caadffc5bdf40986d3c74b6ebf316d11cf4901afe68e4614e4f406cea601224117777f016d08558d41cca0d905936174796bfba5ef2bf7e60e8af598401cdd54b810cf2d6ab752b8d41d12fb0da75cb393517d6a58cd0a8205377f20fcaba21e1967fa0b5762163f3478623ee29c0604d36479bdd3ebca2582a8a66b25bb2bb012cc73e2c66d1cc03079cacdbc6e8456aaeb163e50fec94eb782e9361bcb60468f6cf6b1fa1113a89b299698691e43b1c45791e8deeb5f1e69437229fb86a97a63f6cf12e2c36802bc8fa0d022300a89372e7b4649d7fcf8f20c4ca2441143c113f155f52a2dc5ed8c688349d988c09f880d01dd04c26a2e6abd4ed320c31619e1b4cfe39e750a133f32c4f1f1d337c344432a10f34b35a6dbf0a41320e438442993f9f898526a1ffa686a7f2000e3c5df1caaa7260dd1c30b03bfcde555691d7332079bc6c461c8e96bdcd3883e1f168c5f477f2b132f9c3812c8fbae131084528f299994a512ba7e01780965ac527230d1dc186c0b65fe6d5e583a2d4a082f8c71e2aad18171cad3851cff201bc9f1febc698b472c420d826b2a20fa0bac24266cafd1b327545be949573e58bb10327bdeab35a7f880b1f8c9a40d3ccdcff78d8d5da6e60c89d9d02508c5b64752034c30e279d848eb754ae4d2014f624770e490ff2e3857066cd8510b8587d29ae0f62e83460957fbafe5073b6e09c9a9a9344f6156c4e2a32a197902b7ce50fc34fb9be15ff95ce512c739c9b88ec190015fb996228d823d09435115a1e7659579031c7b87e3edc8e75e8cf45506b8a8f35ce40bcf67d7f8c50f6b545fb2e3b6543a5543ea723a3a7c1d269a8ef71c15e9c48c24f573349a03637371882d1b24dfdd542f1027daca07ae84d02e1a97fd69f9bfd34920c198b7bb0e376ddd9ece719b8827d1c6c9678045d91d5d0c0d608212cde9c432a9d5262a955637d856cf3f7593d7089ebdb96993687a43e9fac939aa75da0297ce27c52a6af8969942d2a36c074b3182b0220c8286803e80e1f774dfc013a8d6f5191bef15a28e6fd3b8e25bfacf401cf1a5cdefb1872750e8192a4dfcd07d672cf086d98baf947c5d7b7df0c638404214010c7d9ba2fe4e77db603bbabed413615fa1a26809fbe8995ad72fcaffdffa8a7b3f05800369b32b36a97a691195b5a9db455fd1c6ddddc75820f06ec11091d1f663824e3e7512d90da808fa48e26f7c5d69aed2188c523eef6a3cee9d1840a8db65f41786927c656f4e73c75cc76291eab46018f3f02efe5ddc869456f946f294a3bb7adc1cb336bc31b39313fea6289250ec22aca59b2b23fcd15a4d14e762361d38e381044ae8eb11ceaf3d6badb178277b0b71eff04c7d0a0b768e460dfdbc951382a525d091726f155ea21cc3047b05919f75b04a5ad3f631394b5ad528f29b871936ac9a1c07ef4f0bdc8277614d9f1746ffdfd2712a94f8f9227875f7def9408d98dc623c5508fb5e7d1e4cdbfdd12176616935a08b17911e24971cfed6aa867479595e200a3f681ee9283700e7538011159b4c5e1c3cc80daf2afda159c05c8b3fc09787609c7061c5860334fc1fdc85060cc61f0df943fa4a423f449f2493789a975de2303f13c3112aaa8da21ec719b97e0801ee726aef5f30b53b893941647dfab8c7e1bab08263bed14fc7940f1fca8f00799ae697078d8628d094af7776a1a3b1b104e879065fb04971759990aa7bbe2f7fb8b875edbf553667b916ac4b299c77edb666b9debfbf1796a577a34ae072b4af130de74d2068d63a84c0deaefc71bdbadce6c42b0d8e04ba4f1d30ed411f03594b8d7326046b3020cad0f7819ad9daabaad51ad2fbca36adbd09644914222f44dfb10046800fde7ee87057b1a4f24b3d155ad7b4c6fb8c361ab5b02902d92d1712663a376ef61"}}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 6.914430259s ago: executing program 3 (id=427): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002700)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x28001c}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="d2", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x3182, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1ff}, 0x1c, &(0x7f0000002680)=[{&(0x7f00000005c0)="761655aa3a44883a25b1940a779e87a5fdba12ca5f6e9ea823bc10e248efeb46376ba54a6da3a6cb0b2633a9ac9ad997afb05a20b328a8afeba521269074c26ec71a4f0d1259458bc85f3415c8866893f94ae7dd269f7b739828", 0x5a}], 0x1}}], 0x2, 0x0) 6.857871102s ago: executing program 3 (id=428): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) listen(r0, 0x8) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x50}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.743858518s ago: executing program 3 (id=429): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8000000000000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000480)={[{@uni_xlate}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@utf8}, {@utf8}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@tz_utc}]}, 0x1, 0x370, &(0x7f0000002980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) 6.740588328s ago: executing program 4 (id=430): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x62400) fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x101, 0x80000002}, 0x0, 0x0) 5.575686257s ago: executing program 4 (id=434): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018fe0000000000003400000034"], 0x0, 0x52}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000500), 0x2002, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f00000007c0)={{}, 0x40}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x1000000, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f0000000380)=ANY=[]}, 0x78) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300)='qnx6\x00', 0x2208004, 0x0) 4.382317017s ago: executing program 4 (id=436): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 4.381527817s ago: executing program 4 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0xfffffc7a) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000001cc0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 3.081731924s ago: executing program 2 (id=439): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) listen(r0, 0x8) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x50}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.850734116s ago: executing program 1 (id=440): mkdir(&(0x7f0000000400)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00') 2.804101988s ago: executing program 2 (id=441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f57584"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 2.227854497s ago: executing program 3 (id=442): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xcc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|4\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2.118592753s ago: executing program 0 (id=443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x9, 0x0, [{0xc, 0xe, 0x5, '\x00', 0x4}, {0xf, 0x0, 0x4, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0x7f, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x4}, {0x9, 0x1, 0x49}, {0xb8, 0x5e, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x7f, '\x00', 0x4}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x5, 0xb, 0xc4, '\x00', 0x4}, {0x40, 0x3, 0x4, '\x00', 0x9}, {0x5, 0x1}, {0xfd, 0x9, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0xc, 0x0, '\x00', 0xe}, {0x7, 0x6, 0x1b, '\x00', 0x2}, {0x4, 0x4, 0x3, '\x00', 0x4}, {0x42, 0x4e, 0x5, '\x00', 0x4}, {0xf0, 0x1, 0x7, '\x00', 0x1}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xdb, '\x00', 0x5}, {0x7f, 0x63, 0x5, '\x00', 0x3}]}}) 1.767938801s ago: executing program 1 (id=444): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x62400) fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x101, 0x80000002}, 0x0, 0x0) 1.488010135s ago: executing program 4 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) semget$private(0x0, 0x207, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0xfffffffffffffffc, 0x0) 663.654797ms ago: executing program 1 (id=446): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1) 521.735064ms ago: executing program 1 (id=447): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 521.160494ms ago: executing program 4 (id=448): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x2180c8, &(0x7f0000000580)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) statfs(0x0, &(0x7f00000000c0)=""/2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 460.278457ms ago: executing program 0 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 372.792182ms ago: executing program 1 (id=450): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r5, r3, 0x0) 276.145537ms ago: executing program 2 (id=451): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) listen(r0, 0x8) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x50}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 275.697077ms ago: executing program 0 (id=452): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x11, 0xfffc, @empty, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) 171.434372ms ago: executing program 3 (id=453): syz_open_dev$loop(0x0, 0x8, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) tkill(0xffffffffffffffff, 0x2a) socket(0x2, 0x80805, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) 122.882305ms ago: executing program 2 (id=454): getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_LK(r0, &(0x7f00000001c0)={0x28, 0x0, r4, {{0x8, 0x3, 0x1, r1}}}, 0x28) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 62.755617ms ago: executing program 0 (id=455): socket$netlink(0x10, 0x3, 0xf) r0 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x100087}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000002700)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) socket(0x40000000015, 0x5, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 0s ago: executing program 1 (id=456): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x100000005, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000001000)=""/73) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000003, 0xfa11, 0x79f7}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 58.195219][ T4169] cgroup: Unknown subsys name 'net' [ 58.319344][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.791011][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.273217][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.282571][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.350626][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.387229][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.466793][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.477894][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.485786][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.494237][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.506460][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.513788][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.522631][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.557256][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.564708][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.572801][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.606986][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.614642][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.622538][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.654678][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.666477][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.681121][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.689095][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.698112][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.727383][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.734827][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.742905][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.753331][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.760806][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.769000][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.783341][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.795555][ T4184] team0: Port device team_slave_0 added [ 61.814311][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.821506][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.830184][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.845926][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.863336][ T4184] team0: Port device team_slave_1 added [ 61.883108][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.909294][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.929605][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.939157][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.946990][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.955803][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.965295][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.974695][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.981949][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.990881][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.000485][ T4183] team0: Port device team_slave_0 added [ 62.009238][ T4183] team0: Port device team_slave_1 added [ 62.057668][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.065092][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.091390][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.110291][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.117470][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.144265][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.159801][ T4190] team0: Port device team_slave_0 added [ 62.168647][ T4186] team0: Port device team_slave_0 added [ 62.184225][ T4186] team0: Port device team_slave_1 added [ 62.191327][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.198818][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.225200][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.243112][ T4190] team0: Port device team_slave_1 added [ 62.251455][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.269847][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.280604][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.288435][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.315231][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.376538][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.383894][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.409919][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.430750][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.437842][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.465198][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.484735][ T4185] team0: Port device team_slave_0 added [ 62.497863][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.506645][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.533842][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.546768][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.554025][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.581220][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.608335][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.615740][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.624636][ T4185] team0: Port device team_slave_1 added [ 62.640264][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.647621][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.654641][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.662885][ T4183] Cannot create hsr debugfs directory [ 62.696646][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.704324][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.730649][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.773247][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.780415][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.807029][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.823179][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.830300][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.837974][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.846196][ T4190] Cannot create hsr debugfs directory [ 62.890428][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.898261][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.905810][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.913965][ T4186] Cannot create hsr debugfs directory [ 62.973584][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.974538][ T1354] Bluetooth: hci0: command 0x0409 tx timeout [ 62.983540][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 62.988259][ T1354] Bluetooth: hci3: command 0x0409 tx timeout [ 62.993964][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.999776][ T1354] Bluetooth: hci4: command 0x0409 tx timeout [ 63.010736][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.019031][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.026854][ T4185] Cannot create hsr debugfs directory [ 63.290412][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.314053][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.324356][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.334079][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.369430][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.397417][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.408451][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.430174][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.476001][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.495008][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.507108][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.537075][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.557344][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.606346][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.617462][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.642923][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.658114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.668156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.678158][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.685630][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.704967][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.714956][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.730580][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.740147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.752444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.762427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.771803][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.779342][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.787574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.815834][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.835272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.855166][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.866537][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.878971][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.890910][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.901286][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.910429][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.920018][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.929086][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.950618][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.967478][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.977823][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.986880][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.993979][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.003751][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.012517][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.022087][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.030435][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.038684][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.050022][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.059201][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.068390][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.077684][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.092816][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.105613][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.122089][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.138486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.149917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.160181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.179808][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.231806][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.241606][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.251650][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.262011][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.271654][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.280753][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.290127][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.299903][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.315404][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.323889][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.348123][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.365823][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.382129][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.412115][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.454801][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.471658][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.480820][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.488071][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.499503][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.508569][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.518405][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.525569][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.535026][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.547701][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.571890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.583205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.592292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.601571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.612189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.647502][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.670442][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.678085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.686841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.697060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.706792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.717092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.726005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.734383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.747409][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.758970][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.775615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.784535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.796845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.805851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.816079][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.823339][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.831282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.867890][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.884492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.894607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.904928][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.912233][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.920562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.928922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.951473][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.961013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.976561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.994599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.009410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.044512][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.059858][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 65.063811][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 65.066620][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 65.072204][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 65.086330][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 65.086699][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.111775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.121181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.137643][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.145128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.154991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.164534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.176589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.187715][ T4184] device veth0_vlan entered promiscuous mode [ 65.224795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.234768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.242485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.252304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.261862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.271949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.280994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.290098][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.297754][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.306575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.316928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.325839][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.333446][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.341319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.350516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.370340][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.382655][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.399814][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.417700][ T4184] device veth1_vlan entered promiscuous mode [ 65.426154][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.435068][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.444283][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.452922][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.462418][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.472288][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.481158][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.502813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.513237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.567564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.578524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.589077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.599068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.611963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.643999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.659272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.670756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.686440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.702146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.715916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.725434][ T4190] device veth0_vlan entered promiscuous mode [ 65.744039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.754000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.762920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.772559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.781787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.790188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.806645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.815726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.828659][ T4190] device veth1_vlan entered promiscuous mode [ 65.837007][ T4184] device veth0_macvtap entered promiscuous mode [ 65.845750][ T4183] device veth0_vlan entered promiscuous mode [ 65.864900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.873059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.884848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.893261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.902621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.921253][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.934802][ T4183] device veth1_vlan entered promiscuous mode [ 65.945863][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.957708][ T4184] device veth1_macvtap entered promiscuous mode [ 65.965908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.975334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.984468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.992065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.003220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.012734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.060181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.074932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.085747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.102368][ T4190] device veth0_macvtap entered promiscuous mode [ 66.114568][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.124037][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.132985][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.142324][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.170221][ T4186] device veth0_vlan entered promiscuous mode [ 66.195508][ T4190] device veth1_macvtap entered promiscuous mode [ 66.205565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.223916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.233185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.250578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.261936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.272796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.281966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.296489][ T4186] device veth1_vlan entered promiscuous mode [ 66.307657][ T4183] device veth0_macvtap entered promiscuous mode [ 66.318288][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.330416][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.343113][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.352814][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.362083][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.389200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.398451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.408231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.418323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.429851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.442890][ T4183] device veth1_macvtap entered promiscuous mode [ 66.469912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.482461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.500788][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.516061][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.528243][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.547757][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.559467][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.571097][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.585083][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.598982][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.609947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.621112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.633444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.642423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.656261][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.668912][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.680790][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.700438][ T4186] device veth0_macvtap entered promiscuous mode [ 66.714023][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.728234][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.738682][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.750265][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.761366][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.770588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.779205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.788197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.797278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.806404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.819382][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.829522][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.839594][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.849577][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.870850][ T4186] device veth1_macvtap entered promiscuous mode [ 66.889154][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.900635][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.909590][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.919877][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.936168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.945043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.952595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.001672][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.012249][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.024583][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.035356][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.047502][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.058658][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.070415][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.082285][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.128330][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.137663][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.146752][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.147752][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 67.156275][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.168624][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 67.175146][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.177008][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 67.188835][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.193626][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 67.202529][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.213184][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 67.219118][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.219207][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.219218][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.219231][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.220533][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.316453][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.332711][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.346059][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.356348][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.365944][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.375962][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.429276][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.438071][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.452944][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.460127][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.470982][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.474009][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.480980][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.492800][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.504112][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.511937][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.519986][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.563022][ T4185] device veth0_vlan entered promiscuous mode [ 67.583829][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.593134][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.615754][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.634349][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.671210][ T4185] device veth1_vlan entered promiscuous mode [ 67.726060][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.748728][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.783090][ T4185] device veth0_macvtap entered promiscuous mode [ 67.807245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.820785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.833324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.841673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.851040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.860991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.890178][ T4185] device veth1_macvtap entered promiscuous mode [ 67.928219][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.929129][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.961348][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.964748][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.989184][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.000852][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.016671][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.031961][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.045896][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.060257][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.075273][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.094057][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.104348][ T4264] loop1: detected capacity change from 0 to 32768 [ 68.113011][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.132036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.150686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.162432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.179228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.191585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.215296][ T4264] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4264) [ 68.240811][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.267674][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.282359][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.301686][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.322718][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.323546][ T4264] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 68.343606][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.361697][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.373653][ T4264] BTRFS info (device loop1): force zlib compression, level 3 [ 68.379917][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.394969][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.414655][ T4264] BTRFS info (device loop1): force clearing of disk cache [ 68.439446][ T4264] BTRFS info (device loop1): setting nodatasum [ 68.454065][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.463254][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.489062][ T4264] BTRFS info (device loop1): use zlib compression, level 3 [ 68.511711][ T4264] BTRFS info (device loop1): allowing degraded mounts [ 68.514316][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.533957][ T4264] BTRFS info (device loop1): enabling disk space caching [ 68.541136][ T4264] BTRFS info (device loop1): disk space caching is enabled [ 68.550311][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.571178][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.576495][ T4264] BTRFS info (device loop1): has skinny extents [ 68.586718][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.605269][ T4211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.652726][ T4211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.701350][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.765152][ T4266] loop2: detected capacity change from 0 to 32768 [ 68.862140][ T4266] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4266) [ 68.888736][ T4266] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 68.899824][ T4266] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 68.911339][ T4266] BTRFS info (device loop2): use zstd compression, level 3 [ 68.921724][ T4266] BTRFS info (device loop2): using free space tree [ 68.932002][ T4266] BTRFS info (device loop2): has skinny extents [ 68.934835][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.955295][ T4264] BTRFS info (device loop1): enabling ssd optimizations [ 68.997033][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.033004][ T4264] BTRFS info (device loop1): clearing free space tree [ 69.091670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.092408][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.114259][ T4264] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.170910][ T4264] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.187673][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.209365][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.221933][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 69.246111][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 69.292448][ T4266] BTRFS info (device loop2): enabling ssd optimizations [ 69.312541][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 69.324418][ T4269] loop4: detected capacity change from 0 to 32768 [ 69.358851][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 69.364461][ T4269] ======================================================= [ 69.364461][ T4269] WARNING: The mand mount option has been deprecated and [ 69.364461][ T4269] and is ignored by this kernel. Remove the mand [ 69.364461][ T4269] option from the mount to silence this warning. [ 69.364461][ T4269] ======================================================= [ 69.382461][ T4312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.450569][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 69.476249][ T4269] JBD2: Ignoring recovery information on journal [ 69.644844][ T4269] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 69.797883][ T4264] BTRFS info (device loop1): balance: start -f -svrange=0..18446744073709551612,limit=6,limit=6..0,stripes=0..511 [ 69.814269][ T4264] BTRFS info (device loop1): balance: ended with status: 0 [ 70.317049][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 70.763514][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.845690][ T4322] loop3: detected capacity change from 0 to 32768 [ 70.909813][ T4352] loop4: detected capacity change from 0 to 64 [ 70.941667][ T4322] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 70.983583][ T4322] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 71.183315][ T4322] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 71.224088][ T4231] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.250209][ T4350] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 71.259150][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 71.263835][ T4350] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 71.268800][ T4358] syz.4.13 uses obsolete (PF_INET,SOCK_PACKET) [ 71.360478][ T4356] loop1: detected capacity change from 0 to 4096 [ 71.438010][ T4350] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 174ms [ 71.447699][ T4350] gfs2: fsid=syz:syz.0: jid=0: Done [ 71.454994][ T4322] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 71.472996][ T4231] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.501120][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.547731][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.549010][ T4231] usb 1-1: Product: syz [ 71.556704][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.561173][ T4231] usb 1-1: Manufacturer: syz [ 71.571495][ T4231] usb 1-1: SerialNumber: syz [ 71.582689][ T4231] usb 1-1: config 0 descriptor?? [ 71.662096][ T4231] usb 1-1: selecting invalid altsetting 0 [ 71.882184][ T4348] loop2: detected capacity change from 0 to 32768 [ 72.010065][ T4369] loop4: detected capacity change from 0 to 256 [ 72.036833][ T4368] loop1: detected capacity change from 0 to 16 [ 72.095853][ T4368] erofs: (device loop1): mounted with root inode @ nid 36. [ 72.110231][ T4368] attempt to access beyond end of device [ 72.110231][ T4368] loop1: rw=524288, want=12304, limit=16 [ 72.116566][ T4369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 72.122312][ T4368] attempt to access beyond end of device [ 72.122312][ T4368] loop1: rw=524288, want=1072, limit=16 [ 72.144420][ T4368] attempt to access beyond end of device [ 72.144420][ T4368] loop1: rw=0, want=12304, limit=16 [ 72.158390][ T26] audit: type=1800 audit(1777250104.093:2): pid=4368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 72.213589][ T4348] JBD2: Ignoring recovery information on journal [ 72.254948][ T4369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 72.331489][ T4369] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 72.404692][ T4348] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 72.424808][ T4369] UDF-fs: Scanning with blocksize 512 failed [ 72.470365][ T4369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 72.523924][ T4369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.694037][ T4369] 9pnet_virtio: no channels available for device syz [ 72.738126][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 72.793587][ T4322] loop3: detected capacity change from 32768 to 0 [ 72.822586][ C1] blk_update_request: I/O error, dev loop3, sector 18752 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 72.853553][ T4231] usb 1-1: USB disconnect, device number 2 [ 73.019904][ T4319] loop: Write error at byte offset 9223372036856297471, length 1024. [ 73.047212][ C0] blk_update_request: I/O error, dev loop3, sector 2972 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 0 [ 73.058736][ C0] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0 [ 73.067630][ T4319] loop: Write error at byte offset 9223372036856302591, length 1024. [ 73.095171][ C0] blk_update_request: I/O error, dev loop3, sector 2982 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0 [ 73.107244][ C0] blk_update_request: I/O error, dev loop3, sector 2982 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0 [ 73.121299][ T4186] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 73.211704][ T4383] loop4: detected capacity change from 0 to 2048 [ 73.222520][ T4385] loop2: detected capacity change from 0 to 256 [ 73.297327][ T4383] loop4: p1 < > p4 [ 73.297327][ T4383] p4: [ 73.350457][ T4385] FAT-fs (loop2): Directory bread(block 64) failed [ 73.355890][ T4381] loop1: detected capacity change from 0 to 32768 [ 73.366754][ T4385] FAT-fs (loop2): Directory bread(block 65) failed [ 73.371086][ T4383] loop4: p4 size 722688 extends beyond EOD, truncated [ 73.393747][ T4381] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.18 (4381) [ 73.410962][ T4385] FAT-fs (loop2): Directory bread(block 66) failed [ 73.420159][ T4385] FAT-fs (loop2): Directory bread(block 67) failed [ 73.439828][ T4385] FAT-fs (loop2): Directory bread(block 68) failed [ 73.466973][ T4381] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 73.476180][ T4385] FAT-fs (loop2): Directory bread(block 69) failed [ 73.495226][ T4385] FAT-fs (loop2): Directory bread(block 70) failed [ 73.502106][ T4385] FAT-fs (loop2): Directory bread(block 71) failed [ 73.510811][ T4381] BTRFS info (device loop1): using free space tree [ 73.515077][ T4385] FAT-fs (loop2): Directory bread(block 72) failed [ 73.541499][ T4381] BTRFS info (device loop1): has skinny extents [ 73.541860][ T4385] FAT-fs (loop2): Directory bread(block 73) failed [ 73.595760][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 73.611996][ T4301] udevd[4301]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 74.006548][ T26] audit: type=1800 audit(1777250105.943:3): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="bus" dev="loop2" ino=1048590 res=0 errno=0 [ 74.077278][ T4381] BTRFS info (device loop1): enabling ssd optimizations [ 74.635108][ T4430] loop0: detected capacity change from 0 to 16 [ 74.714981][ T4430] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.725312][ T4430] attempt to access beyond end of device [ 74.725312][ T4430] loop0: rw=524288, want=12304, limit=16 [ 74.734271][ T4347] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.738665][ T4430] attempt to access beyond end of device [ 74.738665][ T4430] loop0: rw=524288, want=1072, limit=16 [ 74.756658][ T4430] attempt to access beyond end of device [ 74.756658][ T4430] loop0: rw=0, want=12304, limit=16 [ 74.769608][ T26] audit: type=1800 audit(1777250106.703:4): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.28" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 75.113811][ T4347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.135280][ T4347] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.201991][ T4381] BTRFS info (device loop1): balance: start -s [ 75.244475][ T4347] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.258970][ T4381] BTRFS info (device loop1): relocating block group 1048576 flags system [ 75.279025][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.289193][ T4347] usb 5-1: SerialNumber: syz [ 75.387602][ T4432] loop2: detected capacity change from 0 to 40427 [ 75.461249][ T4381] BTRFS info (device loop1): balance: ended with status: 0 [ 75.489348][ T4432] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x1ffff [ 75.596660][ T4347] usb 5-1: 0:2 : does not exist [ 75.621361][ T4439] loop0: detected capacity change from 0 to 256 [ 75.630957][ T4347] usb 5-1: USB disconnect, device number 2 [ 75.701655][ T4439] exfat: Deprecated parameter 'namecase' [ 75.722924][ T4439] exfat: Deprecated parameter 'namecase' [ 75.776343][ T4439] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 75.909197][ T4301] udevd[4301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.086283][ T4443] comedi comedi1: comedi_parport: I/O port conflict (0x2f00,3) [ 76.483251][ T4456] loop0: detected capacity change from 0 to 256 [ 76.633580][ T4456] FAT-fs (loop0): Directory bread(block 64) failed [ 76.640419][ T4456] FAT-fs (loop0): Directory bread(block 65) failed [ 76.681825][ T4456] FAT-fs (loop0): Directory bread(block 66) failed [ 76.704691][ T4456] FAT-fs (loop0): Directory bread(block 67) failed [ 76.712064][ T4456] FAT-fs (loop0): Directory bread(block 68) failed [ 76.759345][ T4456] FAT-fs (loop0): Directory bread(block 69) failed [ 76.772256][ T4456] FAT-fs (loop0): Directory bread(block 70) failed [ 76.791622][ T4456] FAT-fs (loop0): Directory bread(block 71) failed [ 76.804771][ T4456] FAT-fs (loop0): Directory bread(block 72) failed [ 76.811676][ T4456] FAT-fs (loop0): Directory bread(block 73) failed [ 77.107408][ T26] audit: type=1800 audit(1777250109.043:5): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.38" name="bus" dev="loop0" ino=1048600 res=0 errno=0 [ 77.440480][ T4445] loop4: detected capacity change from 0 to 65536 [ 77.565156][ T4445] XFS (loop4): Mounting V5 Filesystem [ 77.616452][ T4458] loop1: detected capacity change from 0 to 32768 [ 77.730603][ T4458] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.34 (4458) [ 77.787654][ T4445] XFS (loop4): Ending clean mount [ 77.834144][ T4458] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 77.851833][ T4445] XFS (loop4): Quotacheck needed: Please wait. [ 77.873495][ T4458] BTRFS info (device loop1): force clearing of disk cache [ 77.883758][ T4458] BTRFS info (device loop1): enabling disk space caching [ 77.891009][ T4458] BTRFS info (device loop1): enabling auto defrag [ 77.918079][ T4458] BTRFS info (device loop1): max_inline at 0 [ 77.939344][ T4458] BTRFS info (device loop1): disk space caching is enabled [ 77.958807][ T4445] XFS (loop4): Quotacheck: Done. [ 77.978967][ T4458] BTRFS info (device loop1): has skinny extents [ 78.091335][ T26] audit: type=1800 audit(1777250110.023:6): pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.36" name="file1" dev="loop4" ino=70 res=0 errno=0 [ 78.121430][ T4458] BTRFS info (device loop1): enabling ssd optimizations [ 78.134157][ T4458] BTRFS info (device loop1): clearing free space tree [ 78.152233][ T4458] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.163656][ T4458] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.256924][ T4463] loop0: detected capacity change from 0 to 65536 [ 78.273489][ T4186] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 78.304865][ T4186] CPU: 1 PID: 4186 Comm: syz-executor Not tainted syzkaller #0 [ 78.312666][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 78.323113][ T4186] Call Trace: [ 78.326628][ T4186] [ 78.329684][ T4186] dump_stack_lvl+0x188/0x250 [ 78.334717][ T4186] ? show_regs_print_info+0x20/0x20 [ 78.340822][ T4186] ? load_image+0x400/0x400 [ 78.346005][ T4186] ? do_raw_spin_unlock+0x11d/0x230 [ 78.351526][ T4186] gfs2_assert_warn_i+0x18f/0x2c0 [ 78.356696][ T4186] gfs2_quota_cleanup+0x4b4/0x6a0 [ 78.362120][ T4186] gfs2_make_fs_ro+0x440/0x620 [ 78.367268][ T4186] ? __might_sleep+0xf0/0xf0 [ 78.371930][ T4186] ? gfs2_dinode_out+0xb00/0xb00 [ 78.377182][ T4186] ? _raw_spin_unlock+0x24/0x40 [ 78.382425][ T4186] ? gfs2_glock_nq+0xcb0/0x1550 [ 78.387505][ T4186] ? init_wait_entry+0xd0/0xd0 [ 78.392549][ T4186] gfs2_withdraw+0x610/0x1490 [ 78.397469][ T4186] ? gfs2_lm+0x240/0x240 [ 78.401929][ T4186] ? do_raw_spin_lock+0x128/0x2f0 [ 78.407578][ T4186] ? gfs2_freeze_lock+0x52/0xc0 [ 78.410588][ T154] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 78.413866][ T4186] ? up_write+0x1bb/0x420 [ 78.413929][ T4186] gfs2_log_flush+0x1e1a/0x2600 [ 78.413970][ T4186] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 78.413989][ T4186] ? unregister_shrinker+0x247/0x300 [ 78.414009][ T4186] ? kfree+0x4a/0x2a0 [ 78.414028][ T4186] ? up_write+0x1bb/0x420 [ 78.414056][ T4186] gfs2_kill_sb+0x50/0xd0 [ 78.414077][ T4186] deactivate_locked_super+0x93/0xf0 [ 78.414100][ T4186] cleanup_mnt+0x42d/0x4e0 [ 78.414123][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 78.414148][ T4186] task_work_run+0x125/0x1a0 [ 78.480608][ T4186] exit_to_user_mode_loop+0x10f/0x130 [ 78.486306][ T4186] exit_to_user_mode_prepare+0xee/0x180 [ 78.492001][ T4186] syscall_exit_to_user_mode+0x16/0x40 [ 78.498053][ T4186] do_syscall_64+0x58/0xa0 [ 78.502772][ T4186] ? clear_bhb_loop+0x30/0x80 [ 78.508016][ T4186] ? clear_bhb_loop+0x30/0x80 [ 78.513003][ T4186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.519392][ T4186] RIP: 0033:0x7f7354ceb017 [ 78.523854][ T4186] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 78.545175][ T4186] RSP: 002b:00007ffd027966f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 78.555401][ T4186] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007f7354ceb017 [ 78.563591][ T4186] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffd027978a0 [ 78.571780][ T4186] RBP: 00007f7354d7f120 R08: 00000000000205a0 R09: 00000000ffffffff [ 78.580462][ T4186] R10: 0000000000000100 R11: 0000000000000202 R12: 00007ffd027978a0 [ 78.589206][ T4186] R13: 00007f7354d7f120 R14: 0000555566df54e8 R15: 00007ffd02798970 [ 78.598486][ T4186] [ 78.601987][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.613538][ T4183] XFS (loop4): Unmounting Filesystem [ 78.785472][ T4463] XFS (loop0): Mounting V5 Filesystem [ 78.803627][ T4186] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 78.813057][ T4186] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 78.936690][ T4463] XFS (loop0): Ending clean mount [ 78.984960][ T4186] gfs2: fsid=syz:syz.0: File system withdrawn [ 78.990441][ T4463] XFS (loop0): Quotacheck needed: Please wait. [ 78.991415][ T4186] CPU: 0 PID: 4186 Comm: syz-executor Not tainted syzkaller #0 [ 79.005626][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.015887][ T4186] Call Trace: [ 79.019424][ T4186] [ 79.022469][ T4186] dump_stack_lvl+0x188/0x250 [ 79.027442][ T4186] ? kobject_uevent_env+0x371/0x890 [ 79.032927][ T4186] ? show_regs_print_info+0x20/0x20 [ 79.037522][ T4463] XFS (loop0): Quotacheck: Done. [ 79.038439][ T4186] ? load_image+0x400/0x400 [ 79.048005][ T4186] ? kobject_uevent_env+0x371/0x890 [ 79.053592][ T4186] ? lockref_put_or_lock+0x6e/0xb0 [ 79.059006][ T4186] gfs2_withdraw+0x1149/0x1490 [ 79.063825][ T4186] ? gfs2_lm+0x240/0x240 [ 79.068359][ T4186] ? do_raw_spin_lock+0x128/0x2f0 [ 79.072004][ T26] audit: type=1800 audit(1777250110.983:7): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name="file1" dev="loop0" ino=38 res=0 errno=0 [ 79.073523][ T4186] ? up_write+0x1bb/0x420 [ 79.073557][ T4186] gfs2_log_flush+0x1e1a/0x2600 [ 79.104397][ T4186] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 79.109634][ T4186] ? unregister_shrinker+0x247/0x300 [ 79.115225][ T4186] ? kfree+0x4a/0x2a0 [ 79.119240][ T4186] ? up_write+0x1bb/0x420 [ 79.123780][ T4186] gfs2_kill_sb+0x50/0xd0 [ 79.128410][ T4186] deactivate_locked_super+0x93/0xf0 [ 79.134010][ T4186] cleanup_mnt+0x42d/0x4e0 [ 79.138176][ T26] audit: type=1800 audit(1777250111.043:8): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name="file1" dev="loop0" ino=38 res=0 errno=0 [ 79.138544][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 79.164834][ T4186] task_work_run+0x125/0x1a0 [ 79.170215][ T4186] exit_to_user_mode_loop+0x10f/0x130 [ 79.175980][ T4186] exit_to_user_mode_prepare+0xee/0x180 [ 79.181567][ T4186] syscall_exit_to_user_mode+0x16/0x40 [ 79.187259][ T4186] do_syscall_64+0x58/0xa0 [ 79.191885][ T4186] ? clear_bhb_loop+0x30/0x80 [ 79.196971][ T4186] ? clear_bhb_loop+0x30/0x80 [ 79.201869][ T4186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.207984][ T4186] RIP: 0033:0x7f7354ceb017 [ 79.212439][ T4186] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 79.232536][ T4186] RSP: 002b:00007ffd027966f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 79.240995][ T4186] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007f7354ceb017 [ 79.249087][ T4186] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffd027978a0 [ 79.257264][ T4186] RBP: 00007f7354d7f120 R08: 00000000000205a0 R09: 00000000ffffffff [ 79.265716][ T4186] R10: 0000000000000100 R11: 0000000000000202 R12: 00007ffd027978a0 [ 79.274078][ T4186] R13: 00007f7354d7f120 R14: 0000555566df54e8 R15: 00007ffd02798970 [ 79.282095][ T4186] [ 79.455442][ T4185] XFS (loop0): Unmounting Filesystem [ 79.874998][ T150] gfs2: fsid=syz:syz.0: Error -5 syncing glock [ 79.881811][ T150] gfs2: fsid=syz:syz.0: G: s:EX n:3/2090 f:lDpfio t:UN d:UN/0 a:0 v:0 r:3 m:20 p:0 [ 79.891084][ T4501] loop2: detected capacity change from 0 to 1024 [ 79.892342][ T150] gfs2: fsid=syz:syz.0: R: n:8336 f:b0000000 b:7001/7000 i:6 q:0 r:0 e:7032 [ 79.910172][ T150] gfs2: fsid=syz:syz.0: Error -5 syncing glock [ 79.917163][ T150] gfs2: fsid=syz:syz.0: G: s:EX n:2/208e f:lDpfi t:UN d:UN/10000 a:0 v:0 r:2 m:20 p:1 [ 79.917783][ T263] gfs2: fsid=syz:syz.0: Error -5 syncing glock [ 79.934380][ T263] gfs2: fsid=syz:syz.0: G: s:EX n:2/2093 f:lDpfi t:UN d:UN/20000 a:0 v:0 r:2 m:20 p:260 [ 79.974043][ T263] gfs2: fsid=syz:syz.0: Error -5 syncing glock [ 79.980352][ T263] gfs2: fsid=syz:syz.0: G: s:EX n:2/24a1 f:lDpfi t:UN d:UN/0 a:0 v:0 r:2 m:20 p:1 [ 80.021176][ T4501] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 80.087985][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.106377][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.116218][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.128823][ T4505] device bridge_slave_0 left promiscuous mode [ 80.138366][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.181492][ T4501] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,errors=continue,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 80.209320][ T4505] device bridge_slave_1 left promiscuous mode [ 80.222328][ T4501] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.243969][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.258594][ T4501] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.42: lblock 3 mapped to illegal pblock 3 (length 3) [ 80.304919][ T4501] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 80.318565][ T4501] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.318565][ T4501] [ 80.337145][ T4501] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.42: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.358032][ T4505] bond0: (slave bond_slave_0): Releasing backup interface [ 80.412103][ T4347] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.573090][ T4247] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 5) [ 80.594721][ T4505] bond0: (slave bond_slave_1): Releasing backup interface [ 80.639991][ T4247] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 80.681165][ T4247] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.681165][ T4247] [ 80.711906][ T4505] team0: Port device team_slave_0 removed [ 80.723497][ T4347] usb 5-1: Using ep0 maxpacket: 16 [ 80.739075][ T4247] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 112: padding at end of block bitmap is not set [ 80.747122][ T4505] team0: Port device team_slave_1 removed [ 80.772488][ T4247] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 80.802083][ T4247] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.802083][ T4247] [ 80.814084][ T4247] EXT4-fs (loop2): Total free blocks count 0 [ 80.820644][ T4247] EXT4-fs (loop2): Free/Dirty block details [ 80.827918][ T4247] EXT4-fs (loop2): free_blocks=0 [ 80.834755][ T4247] EXT4-fs (loop2): dirty_blocks=64 [ 80.837884][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.854546][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.869911][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.878963][ T4347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.891674][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.896301][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.912280][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.922625][ T4347] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.933090][ T4347] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.961861][ T4506] netlink: 'syz.0.41': attribute type 10 has an invalid length. [ 80.990649][ T4529] loop2: detected capacity change from 0 to 256 [ 81.002721][ T4529] exfat: Deprecated parameter 'namecase' [ 81.011532][ T4529] exfat: Deprecated parameter 'namecase' [ 81.029215][ T4506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.043692][ T4347] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.055970][ T4506] team0: Port device bond0 added [ 81.073764][ T4347] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.090367][ T4347] usb 5-1: Manufacturer: syz [ 81.114216][ T4347] usb 5-1: config 0 descriptor?? [ 81.115921][ T4529] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 81.209981][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 81.298187][ T4531] loop3: detected capacity change from 0 to 512 [ 81.583644][ T4347] rc_core: IR keymap rc-hauppauge not found [ 81.598004][ T4347] Registered IR keymap rc-empty [ 81.605487][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 81.651872][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 81.957560][ T4347] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 82.208095][ T4347] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 82.352094][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.375073][ T4544] loop1: detected capacity change from 0 to 256 [ 82.453995][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.523588][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.533467][ T4453] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.556020][ T4544] FAT-fs (loop1): Directory bread(block 64) failed [ 82.588104][ T4544] FAT-fs (loop1): Directory bread(block 65) failed [ 82.603514][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.613672][ T4544] FAT-fs (loop1): Directory bread(block 66) failed [ 82.618348][ T4550] IPv6: Can't replace route, no match found [ 82.621469][ T4544] FAT-fs (loop1): Directory bread(block 67) failed [ 82.640685][ T4548] loop3: detected capacity change from 0 to 2048 [ 82.673503][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.696490][ T4544] FAT-fs (loop1): Directory bread(block 68) failed [ 82.703289][ T4544] FAT-fs (loop1): Directory bread(block 69) failed [ 82.710531][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.741488][ T4544] FAT-fs (loop1): Directory bread(block 70) failed [ 82.751431][ T4548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.763641][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.770338][ T4552] loop4: detected capacity change from 0 to 2048 [ 82.773748][ T4544] FAT-fs (loop1): Directory bread(block 71) failed [ 82.788961][ T4544] FAT-fs (loop1): Directory bread(block 72) failed [ 82.796221][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.804494][ T26] audit: type=1800 audit(1777250114.743:9): pid=4548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.51" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 82.814121][ T4544] FAT-fs (loop1): Directory bread(block 73) failed [ 82.853544][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.893497][ T4347] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.925157][ T4347] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 82.964135][ T4347] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 82.981514][ T4552] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.037161][ T4552] NILFS (loop4): mounting unchecked fs [ 83.065145][ T4453] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.071568][ T4347] usb 5-1: USB disconnect, device number 3 [ 83.078041][ T4453] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.155627][ T26] audit: type=1800 audit(1777250115.083:10): pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.49" name="bus" dev="loop1" ino=1048612 res=0 errno=0 [ 83.231950][ T4552] NILFS (loop4): recovery complete [ 83.346336][ T4558] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.446856][ T4211] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 83.537558][ T4211] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 674 with error 28 [ 83.593891][ T4211] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.593891][ T4211] [ 83.605567][ T4211] EXT4-fs (loop3): Total free blocks count 0 [ 83.611890][ T4211] EXT4-fs (loop3): Free/Dirty block details [ 83.618463][ T4211] EXT4-fs (loop3): free_blocks=4096 [ 83.623971][ T4211] EXT4-fs (loop3): dirty_blocks=704 [ 83.629774][ T4211] EXT4-fs (loop3): Block reservation details [ 83.636420][ T4211] EXT4-fs (loop3): i_reserved_data_blocks=44 [ 83.654564][ T4453] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.666290][ T4211] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 83.679346][ T4453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.687747][ T4453] usb 3-1: SerialNumber: syz [ 83.693439][ T4211] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.693439][ T4211] [ 83.997020][ T4453] usb 3-1: 0:2 : does not exist [ 84.033464][ T4349] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.038631][ T4453] usb 3-1: USB disconnect, device number 2 [ 84.103207][ T4301] udevd[4301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.283453][ T4349] usb 5-1: Using ep0 maxpacket: 16 [ 84.314399][ T4560] loop1: detected capacity change from 0 to 32768 [ 84.398267][ T4560] XFS (loop1): Mounting V5 Filesystem [ 84.403562][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 46390, setting to 1024 [ 84.440227][ T4349] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 84.614503][ T4349] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 84.615372][ T4560] XFS (loop1): Ending clean mount [ 84.632878][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.652580][ T4349] usb 5-1: Product: syz [ 84.671504][ T4349] usb 5-1: Manufacturer: syz [ 84.686202][ T4349] usb 5-1: SerialNumber: syz [ 84.702185][ T4349] usb 5-1: config 0 descriptor?? [ 84.710250][ T4560] XFS (loop1): Quotacheck needed: Please wait. [ 84.723778][ T4552] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.745158][ T4349] hub 5-1:0.0: bad descriptor, ignoring hub [ 84.751133][ T4349] hub: probe of 5-1:0.0 failed with error -5 [ 84.773968][ T4349] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 84.807470][ T4560] XFS (loop1): Quotacheck: Done. [ 84.836165][ T26] audit: type=1800 audit(1777250116.773:11): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.55" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 85.055295][ T4552] usb 5-1: USB disconnect, device number 4 [ 86.185719][ T4589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.270726][ T4582] loop2: detected capacity change from 0 to 32768 [ 86.286444][ T4589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.443603][ T4582] JBD2: Ignoring recovery information on journal [ 86.581903][ T4584] infiniband syz1: set active [ 86.608971][ T4584] infiniband syz1: added syz_tun [ 86.616434][ T4582] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.875502][ T4604] loop3: detected capacity change from 0 to 256 [ 86.895709][ T13] cfg80211: failed to load regulatory.db [ 86.972479][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 87.008389][ T4604] FAT-fs (loop3): Directory bread(block 64) failed [ 87.024536][ T4604] FAT-fs (loop3): Directory bread(block 65) failed [ 87.031250][ T4604] FAT-fs (loop3): Directory bread(block 66) failed [ 87.047619][ T4604] FAT-fs (loop3): Directory bread(block 67) failed [ 87.112766][ T4604] FAT-fs (loop3): Directory bread(block 68) failed [ 87.153618][ T4604] FAT-fs (loop3): Directory bread(block 69) failed [ 87.175828][ T4604] FAT-fs (loop3): Directory bread(block 70) failed [ 87.184017][ T4584] RDS/IB: syz1: added [ 87.189021][ T4584] smc: adding ib device syz1 with port count 1 [ 87.199199][ T4604] FAT-fs (loop3): Directory bread(block 71) failed [ 87.234314][ T4604] FAT-fs (loop3): Directory bread(block 72) failed [ 87.246953][ T4184] XFS (loop1): Unmounting Filesystem [ 87.258852][ T4604] FAT-fs (loop3): Directory bread(block 73) failed [ 87.267347][ T4584] smc: ib device syz1 port 1 has pnetid [ 87.370925][ T4585] loop0: detected capacity change from 0 to 32768 [ 87.572780][ T4585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.59 (4585) [ 87.651439][ T26] audit: type=1800 audit(1777250119.583:12): pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="bus" dev="loop3" ino=1048613 res=0 errno=0 [ 87.935512][ T4613] netlink: 'syz.4.69': attribute type 2 has an invalid length. [ 88.209437][ T4585] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 88.272244][ T4585] BTRFS info (device loop0): using free space tree [ 88.282520][ T4585] BTRFS info (device loop0): has skinny extents [ 89.442901][ T4585] BTRFS error (device loop0): open_ctree failed: -12 [ 89.575668][ T4301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4301) [ 89.581024][ T4610] loop2: detected capacity change from 0 to 32768 [ 89.672161][ T4610] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.68 (4610) [ 89.755133][ T4610] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 89.786804][ T4610] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 89.833442][ T4610] BTRFS info (device loop2): trying to use backup root at mount time [ 89.873110][ T4610] BTRFS info (device loop2): setting nodatasum [ 89.893844][ T4610] BTRFS info (device loop2): enabling ssd optimizations [ 89.901132][ T4610] BTRFS info (device loop2): using spread ssd allocation scheme [ 90.123711][ T4610] BTRFS info (device loop2): turning on flush-on-commit [ 90.171666][ T4610] BTRFS info (device loop2): force zlib compression, level 3 [ 90.179658][ T4610] BTRFS info (device loop2): using free space tree [ 90.186667][ T4610] BTRFS info (device loop2): has skinny extents [ 90.333749][ T4665] capability: warning: `syz.1.76' uses 32-bit capabilities (legacy support in use) [ 90.655009][ T4349] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 90.665294][ T4349] Bluetooth: hci0: Injecting HCI hardware error event [ 90.675192][ T4194] Bluetooth: hci0: hardware error 0x00 [ 95.542507][ T4718] loop0: detected capacity change from 0 to 32768 [ 95.634197][ T4718] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.92 (4718) [ 95.760475][ T4737] loop4: detected capacity change from 0 to 16 [ 95.833385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 95.853384][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.863379][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.883378][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.903432][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.913388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.923385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.933382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.953405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.963380][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 96.069610][ T4718] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 96.070895][ T4737] erofs: (device loop4): mounted with root inode @ nid 36. [ 96.084721][ T4718] BTRFS info (device loop0): setting nodatasum [ 96.100269][ T4718] BTRFS info (device loop0): using free space tree [ 96.107983][ T4734] attempt to access beyond end of device [ 96.107983][ T4734] loop4: rw=524288, want=12304, limit=16 [ 96.119696][ T4734] attempt to access beyond end of device [ 96.119696][ T4734] loop4: rw=524288, want=1072, limit=16 [ 96.131562][ T4734] attempt to access beyond end of device [ 96.131562][ T4734] loop4: rw=0, want=12304, limit=16 [ 96.143644][ T26] audit: type=1800 audit(1777250128.083:13): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.97" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 96.174339][ T4718] BTRFS info (device loop0): has skinny extents [ 97.118646][ T4760] netlink: 56 bytes leftover after parsing attributes in process `syz.4.101'. [ 97.129086][ T4760] netlink: 92 bytes leftover after parsing attributes in process `syz.4.101'. [ 97.140048][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 97.149306][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 97.749852][ T4718] BTRFS error (device loop0): open_ctree failed: -12 [ 98.346209][ T4770] loop4: detected capacity change from 0 to 32768 [ 98.387053][ T4770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.105 (4770) [ 98.504748][ T4770] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.514044][ T4770] BTRFS info (device loop4): force clearing of disk cache [ 98.521615][ T4770] BTRFS info (device loop4): enabling auto defrag [ 98.528662][ T4770] BTRFS info (device loop4): max_inline at 0 [ 98.534965][ T4770] BTRFS info (device loop4): enabling ssd optimizations [ 98.541910][ T4770] BTRFS info (device loop4): using spread ssd allocation scheme [ 98.549830][ T4770] BTRFS info (device loop4): using free space tree [ 98.556573][ T4770] BTRFS info (device loop4): has skinny extents [ 99.070078][ T4770] BTRFS info (device loop4): clearing free space tree [ 99.078298][ T4770] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.088231][ T4770] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.120101][ T4770] BTRFS info (device loop4): creating free space tree [ 99.130229][ T4770] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.140290][ T4770] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.390914][ T790] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 99.730262][ T4810] Zero length message leads to an empty skb [ 99.805665][ T4806] loop1: detected capacity change from 0 to 16 [ 99.881761][ T4806] erofs: (device loop1): mounted with root inode @ nid 36. [ 99.894105][ T4806] attempt to access beyond end of device [ 99.894105][ T4806] loop1: rw=524288, want=12304, limit=16 [ 99.906839][ T4806] attempt to access beyond end of device [ 99.906839][ T4806] loop1: rw=524288, want=1072, limit=16 [ 99.918907][ T4806] attempt to access beyond end of device [ 99.918907][ T4806] loop1: rw=0, want=12304, limit=16 [ 99.948577][ T26] audit: type=1800 audit(1777250131.863:14): pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.112" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 100.413576][ T4519] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.570562][ T4835] loop4: detected capacity change from 0 to 256 [ 101.651631][ T4835] FAT-fs (loop4): Directory bread(block 64) failed [ 101.671432][ T4835] FAT-fs (loop4): Directory bread(block 65) failed [ 101.734588][ T4835] FAT-fs (loop4): Directory bread(block 66) failed [ 101.741375][ T4835] FAT-fs (loop4): Directory bread(block 67) failed [ 101.853625][ T4835] FAT-fs (loop4): Directory bread(block 68) failed [ 101.897152][ T4835] FAT-fs (loop4): Directory bread(block 69) failed [ 101.907542][ T4837] loop1: detected capacity change from 0 to 40427 [ 101.933642][ T4835] FAT-fs (loop4): Directory bread(block 70) failed [ 101.954516][ T4519] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 101.962691][ T4835] FAT-fs (loop4): Directory bread(block 71) failed [ 101.969914][ T4519] usb 1-1: config 8 has no interface number 0 [ 101.982885][ T4519] usb 1-1: config 8 interface 177 altsetting 9 has an invalid endpoint with address 0xE8, skipping [ 101.991539][ T4835] FAT-fs (loop4): Directory bread(block 72) failed [ 101.995876][ T4519] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 102.023941][ T4837] F2FS-fs (loop1): invalid crc value [ 102.033229][ T4519] usb 1-1: config 8 interface 177 has no altsetting 0 [ 102.047072][ T4837] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.100234][ T4837] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 102.201735][ T4519] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 102.202311][ T4835] FAT-fs (loop4): Directory bread(block 73) failed [ 102.212239][ T4519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.283873][ T4815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.594616][ T4845] netlink: 'syz.3.120': attribute type 7 has an invalid length. [ 102.602492][ T4845] netlink: 'syz.3.120': attribute type 8 has an invalid length. [ 102.612960][ T26] audit: type=1800 audit(1777250134.433:15): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.118" name="bus" dev="loop4" ino=1048614 res=0 errno=0 [ 103.303365][ C1] sched: RT throttling activated [ 103.493596][ T4519] usb 1-1: string descriptor 0 read error: -71 [ 103.502307][ T4519] ir_toy 1-1:8.177: required endpoints not found [ 103.731899][ T4519] usb 1-1: USB disconnect, device number 3 [ 103.747232][ T4859] loop3: detected capacity change from 0 to 16 [ 103.758836][ T4859] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.769015][ T4859] attempt to access beyond end of device [ 103.769015][ T4859] loop3: rw=524288, want=12304, limit=16 [ 103.780635][ T4859] attempt to access beyond end of device [ 103.780635][ T4859] loop3: rw=524288, want=1072, limit=16 [ 103.792733][ T4859] attempt to access beyond end of device [ 103.792733][ T4859] loop3: rw=0, want=12304, limit=16 [ 103.804109][ T26] audit: type=1800 audit(1777250135.743:16): pid=4859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.124" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 103.966419][ T4871] tipc: Started in network mode [ 104.191598][ T4871] tipc: Node identity fe80000000000000000000000000004, cluster identity 4711 [ 104.237920][ T4871] tipc: Enabled bearer , priority 10 [ 104.804993][ T4878] IPVS: nq: FWM 3 0x00000003 - no destination available [ 104.844923][ T4862] loop4: detected capacity change from 0 to 32768 [ 105.178661][ T4887] loop1: detected capacity change from 0 to 512 [ 105.199535][ T4338] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.350120][ T4518] tipc: Node number set to 4269801536 [ 106.307735][ T4338] usb 1-1: Using ep0 maxpacket: 16 [ 106.903613][ T4338] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 106.912727][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.974168][ T4896] loop3: detected capacity change from 0 to 1024 [ 107.020555][ T4338] usb 1-1: config 0 descriptor?? [ 107.106169][ T4338] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 107.677664][ T4902] loop4: detected capacity change from 0 to 16 [ 107.861814][ T4902] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.871521][ T4902] attempt to access beyond end of device [ 107.871521][ T4902] loop4: rw=524288, want=12304, limit=16 [ 107.883697][ T4902] attempt to access beyond end of device [ 107.883697][ T4902] loop4: rw=524288, want=1072, limit=16 [ 107.895468][ T4902] attempt to access beyond end of device [ 107.895468][ T4902] loop4: rw=0, want=12304, limit=16 [ 107.924596][ T26] audit: type=1800 audit(1777250139.843:17): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.137" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 108.425226][ T4338] gspca_sonixj: reg_r err -110 [ 108.449819][ T4338] sonixj: probe of 1-1:0.0 failed with error -110 [ 109.429081][ T4924] sctp: failed to load transform for md5: -2 [ 110.430179][ T4340] usb 1-1: USB disconnect, device number 4 [ 112.399349][ T4968] ptrace attach of "./syz-executor exec"[4185] was attempted by " wlan1 H"[4968] [ 113.979473][ T4985] loop1: detected capacity change from 0 to 256 [ 114.369780][ T4985] FAT-fs (loop1): Directory bread(block 64) failed [ 114.391181][ T4988] loop0: detected capacity change from 0 to 512 [ 114.398594][ T4985] FAT-fs (loop1): Directory bread(block 65) failed [ 114.416072][ T4985] FAT-fs (loop1): Directory bread(block 66) failed [ 114.436298][ T4985] FAT-fs (loop1): Directory bread(block 67) failed [ 114.451284][ T4985] FAT-fs (loop1): Directory bread(block 68) failed [ 114.499694][ T4985] FAT-fs (loop1): Directory bread(block 69) failed [ 114.543598][ T4985] FAT-fs (loop1): Directory bread(block 70) failed [ 114.625166][ T4988] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.632550][ T4985] FAT-fs (loop1): Directory bread(block 71) failed [ 114.693444][ T4349] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.707970][ T4985] FAT-fs (loop1): Directory bread(block 72) failed [ 114.763940][ T4985] FAT-fs (loop1): Directory bread(block 73) failed [ 114.804009][ T4994] loop3: detected capacity change from 0 to 512 [ 114.836957][ T26] audit: type=1800 audit(1777250146.773:18): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.162" name="bus" dev="loop1" ino=1048617 res=0 errno=0 [ 114.945828][ T4988] loop0: detected capacity change from 0 to 256 [ 114.962002][ T4994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 114.998113][ T4994] System zones: 1-20 [ 115.010057][ T4988] FAT-fs (loop0): Unrecognized mount option "nodots(sx=0x000000000000ee00" or missing value [ 115.024421][ T4994] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,debug,lazytime,,errors=continue. Quota mode: writeback. [ 115.094593][ T4998] loop1: detected capacity change from 0 to 512 [ 115.243636][ T4349] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.476888][ T5000] process 'syz.0.163' launched './file0' with NULL argv: empty string added [ 115.497131][ T4349] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.507784][ T4349] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.423589][ T4349] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.490830][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.536220][ T4349] usb 3-1: Product: syz [ 116.575058][ T4349] usb 3-1: Manufacturer: syz [ 116.579979][ T4349] usb 3-1: SerialNumber: syz [ 116.781011][ T5007] loop3: detected capacity change from 0 to 1024 [ 116.833672][ T5007] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 116.923798][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.255768][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 117.473126][ T4349] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 117.563560][ T4349] cdc_ncm 3-1:1.0: bind() failure [ 117.585830][ T4349] usb 3-1: USB disconnect, device number 3 [ 117.703755][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.740068][ T5011] loop3: detected capacity change from 0 to 512 [ 117.803971][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.831632][ T7] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 117.860591][ T5011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 117.869074][ T5011] System zones: 1-20 [ 117.890763][ T5011] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,debug,lazytime,,errors=continue. Quota mode: writeback. [ 118.044246][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 118.064268][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.080273][ T7] usb 1-1: Product: syz [ 118.090877][ T7] usb 1-1: Manufacturer: syz [ 118.097785][ T7] usb 1-1: SerialNumber: syz [ 118.993806][ T7] usb 1-1: unit 45 not found! [ 118.998776][ T7] usb 1-1: unit 0 not found! [ 119.707362][ T7] usb 1-1: USB disconnect, device number 5 [ 119.829361][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.994255][ T5041] loop1: detected capacity change from 0 to 256 [ 120.401295][ T5053] xt_HMARK: proto mask must be zero with L3 mode [ 120.493676][ T4520] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.804333][ T4520] usb 3-1: Using ep0 maxpacket: 16 [ 120.993724][ T4520] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.122777][ T5060] loop1: detected capacity change from 0 to 512 [ 121.133831][ T4520] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.159473][ T4520] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 121.179769][ T4520] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 121.303450][ T4520] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 121.785028][ T4520] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.41 [ 122.013410][ T4520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.021926][ T4520] usb 3-1: Product: syz [ 122.067496][ T4520] usb 3-1: Manufacturer: syz [ 122.073307][ T4520] usb 3-1: SerialNumber: syz [ 122.184123][ T5047] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.292025][ T5066] ptrace attach of "./syz-executor exec"[4183] was attempted by " [ 122.374021][ T4341] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.193561][ T4341] usb 1-1: Using ep0 maxpacket: 32 [ 123.545820][ T26] audit: type=1326 audit(1777250155.233:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905fbddd9 code=0x7ffc0000 [ 124.322926][ T26] audit: type=1326 audit(1777250155.233:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905fbddd9 code=0x7ffc0000 [ 124.399665][ T26] audit: type=1326 audit(1777250155.243:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6905fbddd9 code=0x7ffc0000 [ 124.474822][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 124.963962][ T4520] usb 3-1: MIDIStreaming interface descriptor not found [ 125.016765][ T4341] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 125.310667][ T4341] usb 1-1: config 0 has no interface number 0 [ 125.483419][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 125.597494][ T4341] usb 1-1: config 0 interface 12 has no altsetting 0 [ 125.602297][ T4520] usb 3-1: USB disconnect, device number 4 [ 126.014414][ T4341] usb 1-1: string descriptor 0 read error: -71 [ 126.154997][ T4341] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 126.678187][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.766668][ T4341] usb 1-1: config 0 descriptor?? [ 126.844800][ T4341] usb 1-1: can't set config #0, error -71 [ 126.896379][ T4341] usb 1-1: USB disconnect, device number 6 [ 127.095279][ T4374] udevd[4374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.126398][ T5106] IPVS: Scheduler module ip_vs_sip not found [ 127.144661][ T4520] libceph: connect (1)[c::]:6789 error -101 [ 127.152083][ T4520] libceph: mon0 (1)[c::]:6789 connect error [ 127.165414][ T4520] libceph: connect (1)[c::]:6789 error -101 [ 127.172194][ T4520] libceph: mon0 (1)[c::]:6789 connect error [ 127.452271][ T4520] libceph: connect (1)[c::]:6789 error -101 [ 127.459653][ T4520] libceph: mon0 (1)[c::]:6789 connect error [ 127.843090][ T5102] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 127.861019][ T5102] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 127.871223][ T5102] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 127.882217][ T26] audit: type=1800 audit(1777250159.773:22): pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.195" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 127.957728][ T5102] syz.3.195 (5102) used greatest stack depth: 17232 bytes left [ 128.147010][ T5124] ceph: No mds server is up or the cluster is laggy [ 128.156511][ T5130] loop2: detected capacity change from 0 to 256 [ 128.285100][ T4520] libceph: connect (1)[c::]:6789 error -101 [ 128.298502][ T4520] libceph: mon0 (1)[c::]:6789 connect error [ 129.182832][ T5130] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 129.703917][ T4520] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.762465][ T5157] capability: warning: `syz.3.209' uses deprecated v2 capabilities in a way that may be insecure [ 130.109805][ T4520] usb 2-1: Using ep0 maxpacket: 16 [ 131.023556][ T4520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.039228][ T4520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.053151][ T4520] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.069642][ T4520] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.080237][ T4520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.091853][ T4520] usb 2-1: config 0 descriptor?? [ 132.743809][ T5176] binder: Binderfs stats mode cannot be changed during a remount [ 133.308466][ T4517] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.327915][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.342475][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.448154][ T4520] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 133.457421][ T4520] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 133.469082][ T4520] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 133.497505][ T4520] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 133.554921][ T4520] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 133.590239][ T4520] microsoft 0003:045E:07DA.0001: no inputs found [ 133.599039][ T4520] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 133.643028][ T4520] usb 2-1: USB disconnect, device number 2 [ 133.664356][ T4517] usb 3-1: Using ep0 maxpacket: 8 [ 133.804156][ T4517] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.972128][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 133.987237][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 134.629623][ T4517] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 134.644133][ T4517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.653044][ T4517] usb 3-1: Product: syz [ 134.658383][ T4517] usb 3-1: Manufacturer: syz [ 134.663247][ T4517] usb 3-1: SerialNumber: syz [ 134.671505][ T4517] usb 3-1: config 0 descriptor?? [ 134.713648][ T4517] usb 3-1: can't set config #0, error -71 [ 134.774752][ T4517] usb 3-1: USB disconnect, device number 5 [ 134.890829][ T5190] fido_id[5190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 134.932213][ T5207] netlink: 'syz.3.226': attribute type 4 has an invalid length. [ 135.004797][ T5210] netlink: 'syz.3.226': attribute type 4 has an invalid length. [ 135.411629][ T4517] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.939287][ T5218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 136.948276][ T5218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 137.253578][ T4517] usb 3-1: Using ep0 maxpacket: 8 [ 137.413638][ T4517] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 137.423439][ T4517] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 137.449745][ T4517] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 137.941100][ T4517] usb 3-1: config 127 has no interface number 0 [ 137.964496][ T4517] usb 3-1: config 127 interface 171 has no altsetting 0 [ 138.014539][ T4517] usb 3-1: string descriptor 0 read error: -71 [ 138.021835][ T4517] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 138.271436][ T4517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.896274][ T4517] usb 3-1: can't set config #127, error -71 [ 139.961557][ T5255] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.971932][ T4517] usb 3-1: USB disconnect, device number 6 [ 143.643645][ T4349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.672255][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 144.019944][ T5283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'. [ 144.281303][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 144.291865][ T5291] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 144.346064][ T5298] udc-core: couldn't find an available UDC or it's busy [ 144.349200][ T5291] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 144.393703][ T5298] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 144.493671][ T4349] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.573689][ T4349] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 144.620411][ T4349] usb 2-1: can't read configurations, error -71 [ 144.832472][ T5312] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.258'. [ 146.666809][ T5315] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 146.953445][ T5315] bridge0: port 3(netdevsim0) entered blocking state [ 146.980362][ T5315] bridge0: port 3(netdevsim0) entered disabled state [ 147.115088][ T5315] device netdevsim0 entered promiscuous mode [ 148.080852][ T5334] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 148.145480][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 148.169800][ T5334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 148.319073][ T5348] x_tables: duplicate underflow at hook 4 [ 148.573705][ T4231] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.613402][ T4515] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.265140][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 149.270775][ T4515] usb 4-1: Using ep0 maxpacket: 16 [ 149.393580][ T4515] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.416528][ T5362] loop0: detected capacity change from 0 to 512 [ 149.423685][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.436199][ T4515] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.554086][ T4515] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 149.568717][ T4515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.953613][ T4231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.990511][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.173662][ T4231] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 150.595540][ T4515] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 151.189594][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.201028][ T4231] usb 2-1: Product: syz [ 151.205743][ T4231] usb 2-1: Manufacturer: syz [ 151.211167][ T4231] usb 2-1: SerialNumber: syz [ 151.323543][ T4231] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 151.331340][ T4231] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 151.488857][ T4231] usb 2-1: USB disconnect, device number 5 [ 152.493568][ T4515] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 152.654272][ T4231] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.173476][ T4519] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.204032][ T4231] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 154.677169][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.787733][ T4231] usb 2-1: Product: syz [ 154.794542][ T4519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.876252][ T4231] usb 2-1: Manufacturer: syz [ 154.897795][ T4519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.953634][ T4231] usb 2-1: SerialNumber: syz [ 155.042973][ T4519] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 155.191968][ T4519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.202343][ T4231] usb 2-1: can't set config #68, error -71 [ 155.268237][ T4231] usb 2-1: USB disconnect, device number 6 [ 155.534610][ T4520] usb 4-1: USB disconnect, device number 2 [ 155.544366][ T4519] usb 3-1: config 0 descriptor?? [ 156.323929][ T4519] usbhid 3-1:0.0: can't add hid device: -71 [ 156.330727][ T4519] usbhid: probe of 3-1:0.0 failed with error -71 [ 156.366126][ T4519] usb 3-1: USB disconnect, device number 7 [ 156.570572][ T4319] Bluetooth: hci5: Frame reassembly failed (-84) [ 158.710882][ T4349] Bluetooth: hci5: command 0x1003 tx timeout [ 158.710995][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 160.767869][ T4335] Bluetooth: hci5: command 0x1001 tx timeout [ 160.774257][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 161.405600][ T5454] vivid-001: ================= START STATUS ================= [ 161.414074][ T5454] vivid-001: Radio HW Seek Mode: Bounded [ 161.420687][ T5454] vivid-001: Radio Programmable HW Seek: false [ 161.427361][ T5454] vivid-001: RDS Rx I/O Mode: Block I/O [ 161.433226][ T5454] vivid-001: Generate RBDS Instead of RDS: false [ 161.440244][ T5454] vivid-001: RDS Reception: true [ 161.445519][ T5454] vivid-001: RDS Program Type: 0 inactive [ 161.451984][ T5454] vivid-001: RDS PS Name: inactive [ 161.457897][ T5454] vivid-001: RDS Radio Text: inactive [ 161.463851][ T5454] vivid-001: RDS Traffic Announcement: false inactive [ 161.471909][ T5454] vivid-001: RDS Traffic Program: false inactive [ 161.479162][ T5454] vivid-001: RDS Music: false inactive [ 161.485531][ T5454] vivid-001: ================== END STATUS ================== [ 162.813460][ T4341] Bluetooth: hci5: command 0x1009 tx timeout [ 164.373432][ T4519] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 164.943513][ T4519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.955763][ T4519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.973388][ T4519] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 164.984484][ T4519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.334527][ T4519] usb 1-1: config 0 descriptor?? [ 167.177309][ T5489] netlink: 256 bytes leftover after parsing attributes in process `syz.1.308'. [ 167.785284][ T4519] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 167.880209][ T5496] device syzkaller0 entered promiscuous mode [ 167.983600][ T4519] isku 0003:1E7D:319C.0003: couldn't init struct isku_device [ 168.003481][ T4519] isku 0003:1E7D:319C.0003: couldn't install keyboard [ 168.036213][ T4519] isku: probe of 0003:1E7D:319C.0003 failed with error -71 [ 168.083605][ T4519] usb 1-1: USB disconnect, device number 7 [ 168.237401][ T5502] fido_id[5502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 168.583626][ T4341] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.515967][ T5517] binder: Binderfs stats mode cannot be changed during a remount [ 170.153460][ T4341] usb 3-1: Using ep0 maxpacket: 32 [ 170.283786][ T4341] usb 3-1: config 1 interface 0 has no altsetting 0 [ 170.942834][ T5534] trusted_key: encrypted_key: keyword 'upfault' not recognized [ 171.204076][ T4341] usb 3-1: string descriptor 0 read error: -22 [ 171.237017][ T4341] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.40 [ 171.641837][ T4341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.973798][ T4341] usb 3-1: can't set config #1, error -71 [ 172.003933][ T4341] usb 3-1: USB disconnect, device number 8 [ 172.084300][ T5547] kAFS: No cell specified [ 173.978849][ T5565] loop0: detected capacity change from 0 to 16 [ 174.113573][ T4341] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 174.201231][ T5566] binder: Binderfs stats mode cannot be changed during a remount [ 174.373519][ T4341] usb 3-1: Using ep0 maxpacket: 8 [ 174.533747][ T4341] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.623657][ T4341] usb 3-1: config 6 has an invalid interface number: 188 but max is 0 [ 174.638376][ T4341] usb 3-1: config 6 has no interface number 0 [ 174.656172][ T4341] usb 3-1: config 6 interface 188 has no altsetting 0 [ 174.753781][ T4349] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.833712][ T4341] usb 3-1: New USB device found, idVendor=08dd, idProduct=0114, bcdDevice=f8.f9 [ 174.874554][ T4341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.893791][ T4341] usb 3-1: Product: syz [ 174.898456][ T4341] usb 3-1: Manufacturer: syz [ 174.910936][ T4341] usb 3-1: SerialNumber: syz [ 175.051739][ T4349] usb 4-1: Using ep0 maxpacket: 32 [ 176.142085][ T4349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.186628][ T4349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.239683][ T4349] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 176.254313][ T4341] asix: probe of 3-1:6.188 failed with error -22 [ 176.289917][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.312891][ T4341] usb 3-1: USB disconnect, device number 9 [ 176.361223][ T4349] usb 4-1: config 0 descriptor?? [ 176.833445][ T4231] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 176.854333][ T5569] udc-core: couldn't find an available UDC or it's busy [ 176.865706][ T5569] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 176.937005][ T4349] hid (null): unknown global tag 0xc [ 176.975080][ T4349] ft260 0003:0403:6030.0004: unknown global tag 0xc [ 177.002388][ T4349] ft260 0003:0403:6030.0004: item 0 1 1 12 parsing failed [ 177.020052][ T4349] ft260 0003:0403:6030.0004: failed to parse HID [ 177.037908][ T4349] ft260: probe of 0003:0403:6030.0004 failed with error -22 [ 177.154589][ T4349] usb 4-1: USB disconnect, device number 3 [ 177.253411][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 177.483698][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.695293][ T7] usb 3-1: device descriptor read/64, error -71 [ 177.929090][ T5596] netlink: 48 bytes leftover after parsing attributes in process `syz.3.345'. [ 177.960559][ T5596] bridge0: port 3(netdevsim0) entered blocking state [ 177.968554][ T5596] bridge0: port 3(netdevsim0) entered forwarding state [ 177.983512][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.157485][ T4231] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.181018][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.183433][ T7] usb 3-1: device descriptor read/64, error -71 [ 178.188666][ T4231] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 178.205362][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.252197][ T4231] usb 1-1: config 0 descriptor?? [ 178.384441][ T7] usb usb3-port1: attempt power cycle [ 178.823461][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 178.984792][ T5582] udc-core: couldn't find an available UDC or it's busy [ 179.493515][ T5606] binder: Binderfs stats mode cannot be changed during a remount [ 179.983716][ T5582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.086089][ T7] usb 3-1: device descriptor read/8, error -71 [ 180.284870][ T4231] hid-generic 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 180.619912][ T4341] usb 1-1: USB disconnect, device number 8 [ 180.662107][ T5610] loop3: detected capacity change from 0 to 256 [ 180.706629][ T5611] fido_id[5611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 180.746802][ T5613] input: syz1 as /devices/virtual/input/input8 [ 180.806758][ T5610] FAT-fs (loop3): Directory bread(block 64) failed [ 180.833511][ T5610] FAT-fs (loop3): Directory bread(block 65) failed [ 180.872473][ T5610] FAT-fs (loop3): Directory bread(block 66) failed [ 180.892724][ T5615] binder: 5614:5615 ioctl c0306201 2000000007c0 returned -11 [ 180.909594][ T5610] FAT-fs (loop3): Directory bread(block 67) failed [ 180.946050][ T5610] FAT-fs (loop3): Directory bread(block 68) failed [ 180.971251][ T5610] FAT-fs (loop3): Directory bread(block 69) failed [ 180.994017][ T5610] FAT-fs (loop3): Directory bread(block 70) failed [ 181.019346][ T5610] FAT-fs (loop3): Directory bread(block 71) failed [ 181.050534][ T5610] FAT-fs (loop3): Directory bread(block 72) failed [ 181.068637][ T5610] FAT-fs (loop3): Directory bread(block 73) failed [ 182.300146][ T26] audit: type=1800 audit(1777250214.233:23): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.348" name="bus" dev="loop3" ino=1048660 res=0 errno=0 [ 182.366444][ T5637] loop1: detected capacity change from 0 to 16 [ 182.630229][ T5637] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.680722][ T5637] attempt to access beyond end of device [ 182.680722][ T5637] loop1: rw=524288, want=12304, limit=16 [ 182.785300][ T5637] attempt to access beyond end of device [ 182.785300][ T5637] loop1: rw=524288, want=1072, limit=16 [ 182.883562][ T4231] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 182.925551][ T5637] attempt to access beyond end of device [ 182.925551][ T5637] loop1: rw=0, want=12304, limit=16 [ 183.337961][ T26] audit: type=1800 audit(1777250215.263:24): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.358" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 183.933799][ T4231] usb 1-1: device descriptor read/64, error -71 [ 184.203478][ T4231] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.413748][ T4231] usb 1-1: device descriptor read/64, error -71 [ 184.544461][ T4231] usb usb1-port1: attempt power cycle [ 184.963641][ T4231] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 185.063763][ T4231] usb 1-1: device descriptor read/8, error -71 [ 185.343800][ T4231] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.433669][ T4231] usb 1-1: device descriptor read/8, error -71 [ 185.563753][ T4231] usb usb1-port1: unable to enumerate USB device [ 186.278707][ T1354] Bluetooth: hci4: command 0x0406 tx timeout [ 186.458139][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 186.464901][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 186.471899][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 187.544008][ T4233] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.843627][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 187.993862][ T4233] usb 2-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFF, skipping [ 188.007820][ T4233] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 188.025272][ T4233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.213829][ T4233] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 188.237542][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.288131][ T4233] usb 2-1: Product: syz [ 190.152559][ T4233] usb 2-1: Manufacturer: syz [ 190.170670][ T4233] usb 2-1: SerialNumber: syz [ 190.227412][ T4233] usb 2-1: config 0 descriptor?? [ 190.647312][ T4233] usb 2-1: can't set config #0, error -71 [ 190.675791][ T4233] usb 2-1: USB disconnect, device number 7 [ 193.179562][ T5749] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.420314][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.429008][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.726299][ T4333] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.763426][ T4333] usb 2-1: Using ep0 maxpacket: 32 [ 196.884380][ T4333] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 196.908592][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.552429][ T4333] usb 2-1: config 0 descriptor?? [ 197.607868][ T4333] usb 2-1: can't set config #0, error -71 [ 197.636671][ T4333] usb 2-1: USB disconnect, device number 8 [ 198.898922][ T5805] loop0: detected capacity change from 0 to 512 [ 199.603414][ T5813] loop1: detected capacity change from 0 to 16 [ 200.261445][ T5813] erofs: (device loop1): mounted with root inode @ nid 36. [ 200.282653][ T5811] attempt to access beyond end of device [ 200.282653][ T5811] loop1: rw=524288, want=12304, limit=16 [ 200.295267][ T5811] attempt to access beyond end of device [ 200.295267][ T5811] loop1: rw=524288, want=1072, limit=16 [ 200.307839][ T5811] attempt to access beyond end of device [ 200.307839][ T5811] loop1: rw=0, want=12304, limit=16 [ 200.319109][ T26] audit: type=1800 audit(1777250232.253:25): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.417" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 200.533433][ T4233] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 200.641811][ T5829] loop3: detected capacity change from 0 to 256 [ 200.648750][ T4227] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.761732][ T5829] FAT-fs (loop3): Directory bread(block 64) failed [ 200.841548][ T5829] FAT-fs (loop3): Directory bread(block 65) failed [ 200.890291][ T5829] FAT-fs (loop3): Directory bread(block 66) failed [ 200.943194][ T5829] FAT-fs (loop3): Directory bread(block 67) failed [ 200.983745][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 200.991513][ T5829] FAT-fs (loop3): Directory bread(block 68) failed [ 201.055827][ T5829] FAT-fs (loop3): Directory bread(block 69) failed [ 201.112977][ T5829] FAT-fs (loop3): Directory bread(block 70) failed [ 201.193545][ T5829] FAT-fs (loop3): Directory bread(block 71) failed [ 201.232015][ T5829] FAT-fs (loop3): Directory bread(block 72) failed [ 201.268423][ T5829] FAT-fs (loop3): Directory bread(block 73) failed [ 202.092090][ T4233] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 202.145566][ T26] audit: type=1800 audit(1777250234.023:26): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.429" name="bus" dev="loop3" ino=1048662 res=0 errno=0 [ 202.145667][ T5845] qnx6: unable to read the first superblock [ 202.168275][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.226292][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.252860][ T4233] usb 3-1: Product: syz [ 202.403951][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.490815][ T4233] usb 3-1: Manufacturer: syz [ 202.559104][ T4227] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 202.599080][ T4233] usb 3-1: SerialNumber: syz [ 202.788857][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.881617][ T4227] usb 1-1: config 0 descriptor?? [ 202.888372][ T4233] usb 3-1: config 0 descriptor?? [ 202.910687][ T5847] loop1: detected capacity change from 0 to 512 [ 202.995399][ T4233] powermate: probe of 3-1:0.0 failed with error -22 [ 203.239510][ T5853] xt_nat: multiple ranges no longer supported [ 204.249071][ T4233] usb 3-1: USB disconnect, device number 14 [ 204.273528][ T4227] usbhid 1-1:0.0: can't add hid device: -71 [ 204.280583][ T4227] usbhid: probe of 1-1:0.0 failed with error -71 [ 204.378506][ T4227] usb 1-1: USB disconnect, device number 13 [ 204.803617][ T4227] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 204.863523][ T4233] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.063502][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 205.273894][ T4227] usb 1-1: unable to read config index 0 descriptor/all [ 205.282180][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.294789][ T4227] usb 1-1: can't read configurations, error -71 [ 205.315164][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.413363][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.497251][ T4233] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.561477][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.592999][ T4233] usb 3-1: config 0 descriptor?? [ 205.671329][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 205.725502][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 205.750919][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 206.255727][ T4233] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 206.290662][ T5871] ceph: No mds server is up or the cluster is laggy [ 206.308334][ T5869] ceph: No mds server is up or the cluster is laggy [ 206.643168][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 206.650344][ T4233] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 206.659357][ T4233] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 206.668991][ T4233] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 206.677826][ T4233] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 206.689497][ T4233] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 206.712102][ T4233] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 206.822903][ T4233] usb 3-1: USB disconnect, device number 15 [ 206.962321][ T5887] loop4: detected capacity change from 0 to 512 [ 207.076740][ T5888] fido_id[5888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 208.193067][ T4197] ================================================================== [ 208.202432][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 208.211616][ T4197] Read of size 1 at addr ffff88805fae4c07 by task kworker/u5:5/4197 [ 208.220299][ T4197] [ 208.222836][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 208.231981][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.243075][ T4197] Workqueue: hci4 hci_rx_work [ 208.248256][ T4197] Call Trace: [ 208.251739][ T4197] [ 208.254695][ T4197] dump_stack_lvl+0x188/0x250 [ 208.259580][ T4197] ? show_regs_print_info+0x20/0x20 [ 208.265765][ T4197] ? load_image+0x400/0x400 [ 208.270446][ T4197] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 208.276314][ T4197] ? mutex_lock_io_nested+0x60/0x60 [ 208.282167][ T4197] print_address_description+0x60/0x2d0 [ 208.287877][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 208.293361][ T4197] kasan_report+0xdf/0x130 [ 208.297989][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 208.303865][ T4197] hci_le_meta_evt+0x133f/0x3c90 [ 208.308854][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 208.315204][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 208.320878][ T4197] ? mark_lock+0x94/0x320 [ 208.326154][ T4197] ? mutex_unlock+0x10/0x10 [ 208.330985][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 208.338332][ T4197] ? lock_chain_count+0x20/0x20 [ 208.344982][ T4197] ? __rwlock_init+0x140/0x140 [ 208.350264][ T4197] hci_event_packet+0xe48/0x1370 [ 208.356316][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 208.361663][ T4197] ? rcu_lock_release+0x20/0x20 [ 208.367016][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 208.372966][ T4197] hci_rx_work+0x255/0xa10 [ 208.378063][ T4197] process_one_work+0x85f/0x1010 [ 208.384194][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 208.389979][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 208.395781][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 208.401338][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 208.407260][ T4197] ? wq_worker_running+0x97/0x170 [ 208.412624][ T4197] worker_thread+0xaa6/0x1290 [ 208.417499][ T4197] kthread+0x436/0x520 [ 208.421626][ T4197] ? rcu_lock_release+0x20/0x20 [ 208.426738][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 208.431809][ T4197] ret_from_fork+0x1f/0x30 [ 208.436607][ T4197] [ 208.439666][ T4197] [ 208.442632][ T4197] Allocated by task 5907: [ 208.447925][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 208.452905][ T4197] __alloc_skb+0x22c/0x750 [ 208.457532][ T4197] vhci_write+0xbc/0x450 [ 208.462044][ T4197] vfs_write+0x745/0xd60 [ 208.467275][ T4197] ksys_write+0x152/0x260 [ 208.471953][ T4197] do_syscall_64+0x4c/0xa0 [ 208.476772][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.483062][ T4197] [ 208.485677][ T4197] The buggy address belongs to the object at ffff88805fae4800 [ 208.485677][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 208.500853][ T4197] The buggy address is located 7 bytes to the right of [ 208.500853][ T4197] 1024-byte region [ffff88805fae4800, ffff88805fae4c00) [ 208.516547][ T4197] The buggy address belongs to the page: [ 208.522304][ T4197] page:ffffea00017eb800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fae0 [ 208.534054][ T4197] head:ffffea00017eb800 order:3 compound_mapcount:0 compound_pincount:0 [ 208.542810][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 208.551282][ T4197] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 208.560325][ T4197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 208.569258][ T4197] page dumped because: kasan: bad access detected [ 208.575938][ T4197] page_owner tracks the page as allocated [ 208.582119][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4185, ts 65742601789, free_ts 23401499687 [ 208.604538][ T4197] get_page_from_freelist+0x1bbd/0x1ca0 [ 208.610421][ T4197] __alloc_pages+0x1ee/0x480 [ 208.615201][ T4197] new_slab+0xc0/0x4b0 [ 208.619487][ T4197] ___slab_alloc+0x80a/0xdd0 [ 208.624741][ T4197] __kmalloc_node+0x200/0x3b0 [ 208.629891][ T4197] qdisc_alloc+0x8d/0xb10 [ 208.634415][ T4197] qdisc_create_dflt+0x5f/0x430 [ 208.639393][ T4197] dev_activate+0x331/0x12b0 [ 208.644257][ T4197] __dev_open+0x33b/0x430 [ 208.648860][ T4197] __dev_change_flags+0x20d/0x6a0 [ 208.654456][ T4197] dev_change_flags+0x82/0x1a0 [ 208.659744][ T4197] do_setlink+0xcdb/0x3d60 [ 208.664456][ T4197] rtnl_newlink+0x1658/0x1a50 [ 208.669623][ T4197] rtnetlink_rcv_msg+0x844/0xf30 [ 208.674739][ T4197] netlink_rcv_skb+0x1f5/0x440 [ 208.680006][ T4197] netlink_unicast+0x774/0x920 [ 208.685414][ T4197] page last free stack trace: [ 208.690405][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 208.696138][ T4197] free_unref_page+0x8f/0x2a0 [ 208.701729][ T4197] free_contig_range+0x96/0xf0 [ 208.706943][ T4197] destroy_args+0xf0/0xa00 [ 208.711741][ T4197] debug_vm_pgtable+0x321/0x380 [ 208.717082][ T4197] do_one_initcall+0x272/0x730 [ 208.721858][ T4197] do_initcall_level+0x137/0x1f0 [ 208.726825][ T4197] do_initcalls+0x4b/0x90 [ 208.732024][ T4197] kernel_init_freeable+0x3e9/0x570 [ 208.737567][ T4197] kernel_init+0x19/0x1b0 [ 208.742980][ T4197] ret_from_fork+0x1f/0x30 [ 208.747792][ T4197] [ 208.750121][ T4197] Memory state around the buggy address: [ 208.755925][ T4197] ffff88805fae4b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 208.764429][ T4197] ffff88805fae4b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 208.772937][ T4197] >ffff88805fae4c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.781423][ T4197] ^ [ 208.785690][ T4197] ffff88805fae4c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.794453][ T4197] ffff88805fae4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.802599][ T4197] ================================================================== [ 208.811365][ T4197] Disabling lock debugging due to kernel taint [ 208.817691][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.896105][ T5903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.068169][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.075886][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:5 Tainted: G B syzkaller #0 [ 209.086225][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.099060][ T4197] Workqueue: hci4 hci_rx_work [ 209.105021][ T4197] Call Trace: [ 209.108676][ T4197] [ 209.111755][ T4197] dump_stack_lvl+0x188/0x250 [ 209.116824][ T4197] ? show_regs_print_info+0x20/0x20 [ 209.122242][ T4197] ? load_image+0x400/0x400 [ 209.127262][ T4197] panic+0x2e5/0x810 [ 209.131964][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 209.137563][ T4197] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 209.144719][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 209.150364][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 209.155773][ T4197] check_panic_on_warn+0x80/0xa0 [ 209.161717][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 209.167621][ T4197] end_report+0x6d/0xf0 [ 209.172052][ T4197] kasan_report+0x102/0x130 [ 209.177014][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 209.182928][ T4197] hci_le_meta_evt+0x133f/0x3c90 [ 209.188309][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 209.195148][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 209.202118][ T4197] ? mark_lock+0x94/0x320 [ 209.207695][ T4197] ? mutex_unlock+0x10/0x10 [ 209.212523][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 209.218971][ T4197] ? lock_chain_count+0x20/0x20 [ 209.224768][ T4197] ? __rwlock_init+0x140/0x140 [ 209.230127][ T4197] hci_event_packet+0xe48/0x1370 [ 209.235367][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 209.240888][ T4197] ? rcu_lock_release+0x20/0x20 [ 209.246758][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 209.252335][ T4197] hci_rx_work+0x255/0xa10 [ 209.257028][ T4197] process_one_work+0x85f/0x1010 [ 209.262151][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 209.267961][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 209.273695][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 209.278908][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 209.284550][ T4197] ? wq_worker_running+0x97/0x170 [ 209.291627][ T4197] worker_thread+0xaa6/0x1290 [ 209.296783][ T4197] kthread+0x436/0x520 [ 209.302091][ T4197] ? rcu_lock_release+0x20/0x20 [ 209.307331][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 209.311943][ T4197] ret_from_fork+0x1f/0x30 [ 209.316715][ T4197] [ 209.320228][ T4197] Kernel Offset: disabled [ 209.325081][ T4197] Rebooting in 86400 seconds..