last executing test programs: 16.437959115s ago: executing program 4 (id=119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200002, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.590896972s ago: executing program 4 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 15.289065516s ago: executing program 3 (id=127): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 13.83481069s ago: executing program 1 (id=130): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580), 0x1, 0x4ee, &(0x7f0000000d40)="$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") pipe2$9p(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x44080) sendmsg$nl_route_sched(r1, 0x0, 0x800) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 13.514125644s ago: executing program 1 (id=131): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 12.783870356s ago: executing program 4 (id=133): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 12.645723322s ago: executing program 3 (id=135): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x10001, 0x2001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(r5, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) fcntl$setstatus(r0, 0x4, 0x2c00) 12.644997212s ago: executing program 2 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x4c}}}}, ["", ""]}, 0x28}}, 0x200400c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$mouse(0x0, 0x0, 0x2042) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x10000804) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) open(0x0, 0x0, 0x1a1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r7, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x29, 0x1f, &(0x7f00000002c0), 0x4) 11.34185044s ago: executing program 3 (id=137): open(0x0, 0x20000, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x32) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000), 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x400) 10.862275391s ago: executing program 2 (id=138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, 0x0, 0x60b, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6d}]}, 0x34}}, 0x0) 10.775431895s ago: executing program 2 (id=139): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x10001, 0x2001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(r5, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) fcntl$setstatus(r0, 0x4, 0x2c00) 10.774830385s ago: executing program 1 (id=149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, 0x0, 0x60b, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6d}]}, 0x34}}, 0x0) 9.546885869s ago: executing program 4 (id=140): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x10001, 0x2001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(r5, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) fcntl$setstatus(r0, 0x4, 0x2c00) 9.546229899s ago: executing program 0 (id=141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) 9.483331712s ago: executing program 1 (id=142): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) fcntl$notify(r0, 0x402, 0x2) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket(0x10, 0x80002, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r5, 0x0, 0x0, 0x5405, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x7ff, 0x0, [0x2, 0x81, 0x2, 0x3ff, 0x97a], [0x100000001, 0x8, 0x1, 0x8001, 0x9, 0xcf, 0x9, 0x7, 0xffff, 0xffffffffffffff35, 0x80000000, 0x5, 0xf, 0x0, 0x2, 0x5, 0x6, 0x3, 0xfc, 0x7, 0x7, 0x5, 0x9, 0xb430, 0x8f7, 0x5, 0x0, 0x0, 0x3, 0x341, 0x6, 0xfffffffffffffb3a, 0x2, 0x9, 0x6, 0x10001, 0x3, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x858, 0x3, 0x5, 0x5, 0x7, 0x8000000000000001, 0xad1, 0x2, 0x4, 0xc, 0x3ff, 0x5b6, 0x7, 0x3ff, 0xffffffff, 0x3, 0x9, 0x9, 0x7fffffffffffffff, 0xfdd, 0x5, 0x2, 0xff, 0x8, 0x5c2b, 0x6, 0x1, 0xdb, 0x2, 0x8, 0xda2, 0x4, 0x17, 0xa, 0x7, 0x3, 0x0, 0x6, 0x263, 0x0, 0x8, 0xfb5, 0xe763, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x163a, 0x7, 0xe, 0x0, 0x5, 0x2, 0xffffffffffffcb52, 0x7, 0x6, 0x1000, 0x3, 0x0, 0x4, 0xa6b1, 0x9, 0x9, 0x101, 0x6, 0x1ff, 0x4, 0x10001b, 0x3, 0xf, 0x9, 0x5, 0x9, 0x30aa, 0x0, 0x6, 0xeb, 0x6, 0x229, 0xf]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 8.311880323s ago: executing program 0 (id=143): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580), 0x1, 0x4ee, &(0x7f0000000d40)="$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") pipe2$9p(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x44080) sendmsg$nl_route_sched(r1, 0x0, 0x800) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 8.295711114s ago: executing program 2 (id=144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 6.973075932s ago: executing program 1 (id=145): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 6.972931753s ago: executing program 4 (id=146): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 6.80205269s ago: executing program 3 (id=147): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) fcntl$notify(r0, 0x402, 0x2) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket(0x10, 0x80002, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r5, 0x0, 0x0, 0x5405, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x7ff, 0x0, [0x2, 0x81, 0x2, 0x3ff, 0x97a], [0x100000001, 0x8, 0x1, 0x8001, 0x9, 0xcf, 0x9, 0x7, 0xffff, 0xffffffffffffff35, 0x80000000, 0x5, 0xf, 0x0, 0x2, 0x5, 0x6, 0x3, 0xfc, 0x7, 0x7, 0x5, 0x9, 0xb430, 0x8f7, 0x5, 0x0, 0x0, 0x3, 0x341, 0x6, 0xfffffffffffffb3a, 0x2, 0x9, 0x6, 0x10001, 0x3, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x858, 0x3, 0x5, 0x5, 0x7, 0x8000000000000001, 0xad1, 0x2, 0x4, 0xc, 0x3ff, 0x5b6, 0x7, 0x3ff, 0xffffffff, 0x3, 0x9, 0x9, 0x7fffffffffffffff, 0xfdd, 0x5, 0x2, 0xff, 0x8, 0x5c2b, 0x6, 0x1, 0xdb, 0x2, 0x8, 0xda2, 0x4, 0x17, 0xa, 0x7, 0x3, 0x0, 0x6, 0x263, 0x0, 0x8, 0xfb5, 0xe763, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x163a, 0x7, 0xe, 0x0, 0x5, 0x2, 0xffffffffffffcb52, 0x7, 0x6, 0x1000, 0x3, 0x0, 0x4, 0xa6b1, 0x9, 0x9, 0x101, 0x6, 0x1ff, 0x4, 0x10001b, 0x3, 0xf, 0x9, 0x5, 0x9, 0x30aa, 0x0, 0x6, 0xeb, 0x6, 0x229, 0xf]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={r6, 0x7, 0x9, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 6.725661644s ago: executing program 0 (id=148): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x10001, 0x2001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(r5, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) 4.867547966s ago: executing program 3 (id=150): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) fcntl$notify(r0, 0x402, 0x2) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket(0x10, 0x80002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r4, 0x0, 0x0, 0x5405, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x7ff, 0x0, [0x2, 0x81, 0x2, 0x3ff, 0x97a], [0x100000001, 0x8, 0x1, 0x8001, 0x9, 0xcf, 0x9, 0x7, 0xffff, 0xffffffffffffff35, 0x80000000, 0x5, 0xf, 0x0, 0x2, 0x5, 0x6, 0x3, 0xfc, 0x7, 0x7, 0x5, 0x9, 0xb430, 0x8f7, 0x5, 0x0, 0x0, 0x3, 0x341, 0x6, 0xfffffffffffffb3a, 0x2, 0x9, 0x6, 0x10001, 0x3, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x858, 0x3, 0x5, 0x5, 0x7, 0x8000000000000001, 0xad1, 0x2, 0x4, 0xc, 0x3ff, 0x5b6, 0x7, 0x3ff, 0xffffffff, 0x3, 0x9, 0x9, 0x7fffffffffffffff, 0xfdd, 0x5, 0x2, 0xff, 0x8, 0x5c2b, 0x6, 0x1, 0xdb, 0x2, 0x8, 0xda2, 0x4, 0x17, 0xa, 0x7, 0x3, 0x0, 0x6, 0x263, 0x0, 0x8, 0xfb5, 0xe763, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x163a, 0x7, 0xe, 0x0, 0x5, 0x2, 0xffffffffffffcb52, 0x7, 0x6, 0x1000, 0x3, 0x0, 0x4, 0xa6b1, 0x9, 0x9, 0x101, 0x6, 0x1ff, 0x4, 0x10001b, 0x3, 0xf, 0x9, 0x5, 0x9, 0x30aa, 0x0, 0x6, 0xeb, 0x6, 0x229, 0xf]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={r5, 0x7, 0x9, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 3.796720073s ago: executing program 3 (id=151): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 3.782341254s ago: executing program 0 (id=161): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) fcntl$notify(r0, 0x402, 0x2) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket(0x10, 0x80002, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r5, 0x0, 0x0, 0x5405, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x7ff, 0x0, [0x2, 0x81, 0x2, 0x3ff, 0x97a], [0x100000001, 0x8, 0x1, 0x8001, 0x9, 0xcf, 0x9, 0x7, 0xffff, 0xffffffffffffff35, 0x80000000, 0x5, 0xf, 0x0, 0x2, 0x5, 0x6, 0x3, 0xfc, 0x7, 0x7, 0x5, 0x9, 0xb430, 0x8f7, 0x5, 0x0, 0x0, 0x3, 0x341, 0x6, 0xfffffffffffffb3a, 0x2, 0x9, 0x6, 0x10001, 0x3, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x858, 0x3, 0x5, 0x5, 0x7, 0x8000000000000001, 0xad1, 0x2, 0x4, 0xc, 0x3ff, 0x5b6, 0x7, 0x3ff, 0xffffffff, 0x3, 0x9, 0x9, 0x7fffffffffffffff, 0xfdd, 0x5, 0x2, 0xff, 0x8, 0x5c2b, 0x6, 0x1, 0xdb, 0x2, 0x8, 0xda2, 0x4, 0x17, 0xa, 0x7, 0x3, 0x0, 0x6, 0x263, 0x0, 0x8, 0xfb5, 0xe763, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x163a, 0x7, 0xe, 0x0, 0x5, 0x2, 0xffffffffffffcb52, 0x7, 0x6, 0x1000, 0x3, 0x0, 0x4, 0xa6b1, 0x9, 0x9, 0x101, 0x6, 0x1ff, 0x4, 0x10001b, 0x3, 0xf, 0x9, 0x5, 0x9, 0x30aa, 0x0, 0x6, 0xeb, 0x6, 0x229, 0xf]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 2.481919331s ago: executing program 0 (id=152): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x10001, 0x2001) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(r5, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) 1.322900432s ago: executing program 2 (id=153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r1, 0x60b, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6d}]}, 0x34}}, 0x0) 1.281711093s ago: executing program 4 (id=154): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x10001, 0x2001) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(r5, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) 1.253030205s ago: executing program 1 (id=155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) 1.198373808s ago: executing program 2 (id=156): signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c}) read(r2, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) inotify_init1(0x800) 0s ago: executing program 0 (id=157): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1fe, 0x4, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x10001, 0x2001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) read(r5, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 49.671049][ T4247] cgroup: Unknown subsys name 'net' [ 49.806022][ T4247] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.025401][ T4247] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.185339][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.196957][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.202952][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.205080][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.218841][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.219069][ T4271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.226785][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.234277][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.241345][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.247686][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.254254][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.261867][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.268781][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.275319][ T4271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.282378][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.289664][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.296000][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.303858][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.310364][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.317714][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.325281][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.331945][ T4271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.354785][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.362943][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.364814][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.378333][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.379407][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.386474][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.422871][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.430211][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.741621][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 53.841252][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 53.892262][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.899371][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.908069][ T4272] device bridge_slave_0 entered promiscuous mode [ 53.919518][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 53.934922][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 53.950985][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.958093][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.966834][ T4272] device bridge_slave_1 entered promiscuous mode [ 53.997741][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.021623][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.051681][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 54.091500][ T4272] team0: Port device team_slave_0 added [ 54.117906][ T4272] team0: Port device team_slave_1 added [ 54.167473][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.174744][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.182599][ T4260] device bridge_slave_0 entered promiscuous mode [ 54.196820][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.204010][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.212111][ T4262] device bridge_slave_0 entered promiscuous mode [ 54.221828][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.228895][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.236664][ T4270] device bridge_slave_0 entered promiscuous mode [ 54.245693][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.252926][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.260524][ T4260] device bridge_slave_1 entered promiscuous mode [ 54.268017][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.275106][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.301053][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.312801][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.319895][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.328081][ T4262] device bridge_slave_1 entered promiscuous mode [ 54.342154][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.349229][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.356926][ T4270] device bridge_slave_1 entered promiscuous mode [ 54.371753][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.378694][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.404745][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.455059][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.462468][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.470052][ T4269] device bridge_slave_0 entered promiscuous mode [ 54.488241][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.499056][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.509755][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.519026][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.526247][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.533990][ T4269] device bridge_slave_1 entered promiscuous mode [ 54.542607][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.553697][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.564091][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.646996][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.665760][ T4272] device hsr_slave_0 entered promiscuous mode [ 54.672651][ T4272] device hsr_slave_1 entered promiscuous mode [ 54.680949][ T4270] team0: Port device team_slave_0 added [ 54.688944][ T4260] team0: Port device team_slave_0 added [ 54.696664][ T4262] team0: Port device team_slave_0 added [ 54.704496][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.714324][ T4270] team0: Port device team_slave_1 added [ 54.727688][ T4260] team0: Port device team_slave_1 added [ 54.734368][ T4262] team0: Port device team_slave_1 added [ 54.787951][ T4269] team0: Port device team_slave_0 added [ 54.794324][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.801595][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.828030][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.858101][ T4269] team0: Port device team_slave_1 added [ 54.870964][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.877890][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.903938][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.915478][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.922697][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.948766][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.960203][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.967445][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.993523][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.019316][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.026309][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.052284][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.064028][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.071203][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.097258][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.112266][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.119208][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.145271][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.176871][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.183940][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.210350][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.229542][ T4270] device hsr_slave_0 entered promiscuous mode [ 55.236127][ T4270] device hsr_slave_1 entered promiscuous mode [ 55.242836][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.250929][ T4270] Cannot create hsr debugfs directory [ 55.276419][ T4262] device hsr_slave_0 entered promiscuous mode [ 55.283387][ T4262] device hsr_slave_1 entered promiscuous mode [ 55.289964][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.297745][ T4262] Cannot create hsr debugfs directory [ 55.380942][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 55.402690][ T4260] device hsr_slave_0 entered promiscuous mode [ 55.409250][ T4260] device hsr_slave_1 entered promiscuous mode [ 55.415922][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.423511][ T4260] Cannot create hsr debugfs directory [ 55.443672][ T4269] device hsr_slave_0 entered promiscuous mode [ 55.450261][ T4269] device hsr_slave_1 entered promiscuous mode [ 55.450789][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 55.460678][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 55.462727][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 55.468407][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 55.480901][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.488429][ T4269] Cannot create hsr debugfs directory [ 55.677720][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.699835][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.708535][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.725742][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.763524][ T4270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.776232][ T4270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.798313][ T4270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.809569][ T4270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.864365][ T4262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.885421][ T4262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.903626][ T4262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.912771][ T4262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.925778][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.964681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.974148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.985116][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.013440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.022246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.032117][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.039244][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.047876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.073732][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.088368][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.097491][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.106604][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.113675][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.125472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.135593][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.148837][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.198669][ T4260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.207480][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.216582][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.226026][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.236230][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.245113][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.255741][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.263508][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.271509][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.280002][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.292729][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.302488][ T4260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.311506][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.332174][ T4260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.341363][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.350968][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.359458][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.366531][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.374650][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.384384][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.392896][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.401558][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.409658][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.422888][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.438744][ T4260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.450190][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.468862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.477990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.486728][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.493827][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.509080][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.524790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.533164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.541762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.550405][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.560298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.569357][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.576509][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.587069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.612155][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.625405][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.635010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.649225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.658411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.668990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.677738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.686623][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.693742][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.701735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.709896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.718627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.742766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.760271][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.820887][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.829269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.838144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.847093][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.857251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.865804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.874894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.884279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.894018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.911472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.926879][ T4262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.945269][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.962204][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.977982][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.019248][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.045829][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.062195][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.069632][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.121475][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.145476][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.155868][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.168665][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.184639][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.227135][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.244423][ T4272] device veth0_vlan entered promiscuous mode [ 57.273233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.282253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.291510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.300129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.311337][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.318419][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.327467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.336552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.345426][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.352554][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.360347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.369337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.380264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.387734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.395352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.403329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.411920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.424847][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.443455][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.450940][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 57.457147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.465097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.472941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.482438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.491084][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.498138][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.505923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.514841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.523362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.531783][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 57.531817][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 57.531843][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 57.541311][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 57.544873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.564486][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.571577][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.579720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.588778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.599953][ T4272] device veth1_vlan entered promiscuous mode [ 57.614746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.623991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.632813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.640951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.649547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.658230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.667181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.692325][ T4272] device veth0_macvtap entered promiscuous mode [ 57.708409][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.719748][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.737365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.749691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.764179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.776610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.788636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.804140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.815153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.827176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.837033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.845620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.853794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.865736][ T4272] device veth1_macvtap entered promiscuous mode [ 57.893190][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.900992][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.908427][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.924393][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.943129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.955194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.992118][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.003032][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.014811][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.025400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.038937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.053433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.065726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.095178][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.120261][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.136949][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.161408][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.168832][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.183967][ T4270] device veth0_vlan entered promiscuous mode [ 58.193052][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.211326][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.219558][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.250297][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.258461][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.273842][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.287355][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.297278][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.310316][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.352859][ T4270] device veth1_vlan entered promiscuous mode [ 58.380136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.398124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.424356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.476575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.486660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.496330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.506704][ T4269] device veth0_vlan entered promiscuous mode [ 58.526810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.538889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.564670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.574975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.607003][ T4270] device veth0_macvtap entered promiscuous mode [ 58.616711][ T4269] device veth1_vlan entered promiscuous mode [ 58.627552][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.631171][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.643720][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.650026][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.660021][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.667690][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.685933][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.695430][ T4270] device veth1_macvtap entered promiscuous mode [ 58.716354][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.724711][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.734810][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.749906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.759363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.775441][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.775885][ T4269] device veth0_macvtap entered promiscuous mode [ 58.790011][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.799168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.807552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.826943][ T4269] device veth1_macvtap entered promiscuous mode [ 58.848665][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.859645][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.872431][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.890810][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.909913][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.919783][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.930262][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.941765][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.949172][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.957426][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.966453][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.979363][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.988380][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.997326][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.005972][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.015030][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.024186][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.035103][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.046068][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.058053][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.084441][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.093807][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.127018][ T4262] device veth0_vlan entered promiscuous mode [ 59.137111][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.148143][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.157196][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.166210][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.180203][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.201761][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.324452][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.397884][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.410549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 59.606728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.613138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 59.635415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 59.635473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 59.643610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 59.651851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 59.659931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 59.668172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 59.676254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 59.684502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 59.720716][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 59.727069][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 59.727374][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 59.740351][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 59.740368][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 59.741262][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.848627][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.860804][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.872214][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.940802][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.950406][ T4260] device veth0_vlan entered promiscuous mode [ 59.964761][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.972786][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.980533][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.988105][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.996420][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.004981][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.019391][ T4262] device veth1_vlan entered promiscuous mode [ 60.037191][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.046123][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.055162][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.064238][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.082936][ T4260] device veth1_vlan entered promiscuous mode [ 60.160088][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.175258][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.180133][ T4262] device veth0_macvtap entered promiscuous mode [ 60.200884][ T4262] device veth1_macvtap entered promiscuous mode [ 60.210536][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.218638][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.228824][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.237619][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.246411][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.255121][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.281550][ T4260] device veth0_macvtap entered promiscuous mode [ 60.290297][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.299487][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.310899][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.322023][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.332701][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.344589][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.354935][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.366210][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.377513][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.393883][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.404951][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.415200][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.426074][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.435968][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.505793][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.533958][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.546157][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.555107][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.565982][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.584678][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.612324][ T4262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.621407][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.629514][ T4262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.638889][ T4262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.642839][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.647920][ T4262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.667524][ T4260] device veth1_macvtap entered promiscuous mode [ 60.688192][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.704676][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.718129][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.733680][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.745037][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.755797][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.777519][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.789223][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.804518][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.817398][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.828951][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.839026][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.854304][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.864669][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.880373][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.892133][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.902608][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.913330][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.929728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.939459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.966519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.084237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.129897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.175621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.515726][ T4260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.525203][ T4260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.536142][ T4260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.556345][ T4260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.591893][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.613187][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.659802][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.705215][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.742589][ T4386] loop1: detected capacity change from 0 to 8 [ 61.758107][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.771399][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 61.777420][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 61.783727][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 61.789741][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 61.795934][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 61.841889][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.845810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.849784][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.907151][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.929414][ T4386] SQUASHFS error: Failed to read block 0x4de: -5 [ 61.981080][ T4386] SQUASHFS error: Failed to read block 0x4de: -5 [ 61.995837][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.007967][ T26] audit: type=1800 audit(1765049345.361:2): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 62.019726][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.048985][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.074721][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.101334][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.131653][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.157460][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.237392][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.297107][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.156007][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.162560][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.272133][ T41] cfg80211: failed to load regulatory.db [ 82.048362][ T4494] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.444704][ T4503] device syzkaller0 entered promiscuous mode [ 82.643963][ T4507] netlink: 'syz.3.32': attribute type 4 has an invalid length. [ 83.838489][ T4516] device syzkaller0 entered promiscuous mode [ 83.880064][ T4520] loop0: detected capacity change from 0 to 1024 [ 83.909644][ T4516] Zero length message leads to an empty skb [ 83.912444][ T4518] tipc: Started in network mode [ 83.957929][ T4518] tipc: Node identity 461c2bd97dde, cluster identity 4711 [ 83.994408][ T4518] tipc: Enabled bearer , priority 0 [ 84.029261][ T26] audit: type=1800 audit(1765049367.381:3): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.36" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 84.054503][ T4521] device syzkaller0 entered promiscuous mode [ 84.118368][ T4522] tipc: Resetting bearer [ 84.207763][ T4517] tipc: Resetting bearer [ 84.305129][ T4517] tipc: Disabling bearer [ 84.324169][ T4526] device syzkaller0 entered promiscuous mode [ 86.796183][ T4538] loop1: detected capacity change from 0 to 8 [ 86.927335][ T26] audit: type=1326 audit(1765049370.281:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.40" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb656f8f749 code=0x0 [ 87.179792][ T4549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'. [ 87.229340][ T26] audit: type=1326 audit(1765049370.581:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf28b8f749 code=0x7ffc0000 [ 87.271723][ T26] audit: type=1326 audit(1765049370.581:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf28b8f749 code=0x7ffc0000 [ 87.349813][ T26] audit: type=1326 audit(1765049370.581:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf28b8f749 code=0x7ffc0000 [ 87.386016][ T26] audit: type=1326 audit(1765049370.591:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7faf28b915dc code=0x7ffc0000 [ 87.414120][ T26] audit: type=1326 audit(1765049370.591:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7faf28b91514 code=0x7ffc0000 [ 87.479485][ T26] audit: type=1326 audit(1765049370.591:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7faf28b91514 code=0x7ffc0000 [ 87.555814][ T26] audit: type=1326 audit(1765049370.591:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf28b8f749 code=0x7ffc0000 [ 87.585059][ T26] audit: type=1326 audit(1765049370.591:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7faf28b8f749 code=0x7ffc0000 [ 87.756249][ T4562] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.856856][ T4562] kvm: pic: non byte read [ 87.869226][ T4562] kvm: pic: level sensitive irq not supported [ 87.871467][ T4562] kvm: pic: non byte read [ 87.899933][ T4562] kvm: pic: level sensitive irq not supported [ 87.900263][ T4562] kvm: pic: non byte read [ 87.919873][ T4570] loop3: detected capacity change from 0 to 1024 [ 87.926890][ T4562] kvm: pic: level sensitive irq not supported [ 87.927045][ T4562] kvm: pic: non byte read [ 87.945478][ T4562] kvm: pic: level sensitive irq not supported [ 87.945633][ T4562] kvm: pic: non byte read [ 88.316890][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 88.747227][ T4584] loop2: detected capacity change from 0 to 1024 [ 89.480536][ T4263] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.714027][ T4263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.786375][ T4263] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.820558][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.850515][ T4263] usb 2-1: config 0 descriptor?? [ 89.902930][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880762f6000: rx timeout, send abort [ 90.508760][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880762f4800: rx timeout, send abort [ 90.517017][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880762f6000: abort rx timeout. Force session deactivation [ 90.550112][ T4263] usbhid 2-1:0.0: can't add hid device: -71 [ 90.556372][ T4263] usbhid: probe of 2-1:0.0 failed with error -71 [ 90.567044][ T4263] usb 2-1: USB disconnect, device number 2 [ 90.600548][ T4329] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 91.361894][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880762f4800: abort rx timeout. Force session deactivation [ 92.032032][ T4329] usb 4-1: config 0 has no interfaces? [ 92.037578][ T4329] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.060480][ T4329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.081352][ T4329] usb 4-1: config 0 descriptor?? [ 92.225874][ T4602] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 92.251672][ T4263] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.269488][ T4602] kvm: pic: non byte read [ 92.281508][ T4602] kvm: pic: level sensitive irq not supported [ 92.281601][ T4602] kvm: pic: non byte read [ 92.311762][ T4329] usb 4-1: USB disconnect, device number 2 [ 92.333099][ T4602] kvm: pic: level sensitive irq not supported [ 92.333177][ T4602] kvm: pic: non byte read [ 92.370884][ T4602] kvm: pic: level sensitive irq not supported [ 92.370960][ T4602] kvm: pic: non byte read [ 92.394039][ T4602] kvm: pic: level sensitive irq not supported [ 92.394233][ T4602] kvm: pic: non byte read [ 92.558806][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f38c00: rx timeout, send abort [ 93.058900][ C1] vcan0: j1939_tp_rxtimer: 0xffff88814c11b400: rx timeout, send abort [ 93.606491][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f38c00: abort rx timeout. Force session deactivation [ 93.616832][ C1] vcan0: j1939_tp_rxtimer: 0xffff88814c11b400: abort rx timeout. Force session deactivation [ 93.949595][ T4622] block device autoloading is deprecated and will be removed. [ 94.212498][ T4606] loop1: detected capacity change from 0 to 32768 [ 94.466846][ T4606] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.520501][ T4606] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 95.624592][ T4606] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 95.661711][ T4263] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 95.675332][ T4263] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 95.766141][ T4263] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 90ms [ 95.787476][ T4263] gfs2: fsid=syz:syz.0: jid=0: Done [ 95.809194][ T4606] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 95.920399][ T4606] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 96.237509][ T4638] capability: warning: `syz.3.67' uses 32-bit capabilities (legacy support in use) [ 97.541463][ T4645] loop0: detected capacity change from 0 to 32768 [ 97.561415][ T4645] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 97.569571][ T4645] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.579499][ T4645] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 97.594561][ T4338] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 97.610540][ T4338] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 97.742673][ T4338] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 132ms [ 97.810819][ T4338] gfs2: fsid=syz:syz.0: jid=0: Done [ 97.831123][ T4645] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 98.053252][ T4650] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 98.053252][ T4650] inode = 11 2339 [ 98.053252][ T4650] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 98.077333][ T4645] gfs2: fsid=syz:syz.0: found 1 quota changes [ 98.271036][ T4651] loop3: detected capacity change from 0 to 32768 [ 98.302503][ T4651] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 98.309923][ T4651] CPU: 0 PID: 4651 Comm: syz.3.71 Not tainted syzkaller #0 [ 98.317127][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.327196][ T4651] Call Trace: [ 98.330480][ T4651] [ 98.333416][ T4651] dump_stack_lvl+0x168/0x22e [ 98.338116][ T4651] ? show_regs_print_info+0x12/0x12 [ 98.343327][ T4651] ? load_image+0x3b0/0x3b0 [ 98.347855][ T4651] sysfs_create_dir_ns+0x252/0x280 [ 98.352981][ T4651] ? sysfs_warn_dup+0xa0/0xa0 [ 98.357669][ T4651] ? kobject_set_name_vargs+0x5d/0x110 [ 98.363141][ T4651] ? do_raw_spin_unlock+0x11d/0x230 [ 98.368353][ T4651] kobject_add_internal+0x6b8/0xc80 [ 98.373573][ T4651] kobject_init_and_add+0x122/0x190 [ 98.378786][ T4651] ? lockdep_softirqs_off+0x420/0x420 [ 98.384172][ T4651] ? kobject_add+0x210/0x210 [ 98.388775][ T4651] ? __init_swait_queue_head+0xa5/0x150 [ 98.394328][ T4651] gfs2_sys_fs_add+0x234/0x480 [ 98.399104][ T4651] ? gfs2_recover_set+0x240/0x240 [ 98.404133][ T4651] ? snprintf+0xd7/0x120 [ 98.408387][ T4651] ? vscnprintf+0x80/0x80 [ 98.412733][ T4651] gfs2_fill_super+0x126f/0x1f80 [ 98.417693][ T4651] ? gfs2_reconfigure+0xcd0/0xcd0 [ 98.422735][ T4651] ? sb_set_blocksize+0xa5/0xe0 [ 98.427590][ T4651] get_tree_bdev+0x3f1/0x610 [ 98.432182][ T4651] ? gfs2_reconfigure+0xcd0/0xcd0 [ 98.437212][ T4651] gfs2_get_tree+0x4d/0x1e0 [ 98.441722][ T4651] vfs_get_tree+0x88/0x270 [ 98.446141][ T4651] do_new_mount+0x24a/0xa40 [ 98.450654][ T4651] __se_sys_mount+0x2d6/0x3c0 [ 98.455338][ T4651] ? __x64_sys_mount+0xc0/0xc0 [ 98.460110][ T4651] ? lockdep_hardirqs_on+0x94/0x140 [ 98.465310][ T4651] ? __x64_sys_mount+0x1c/0xc0 [ 98.470075][ T4651] do_syscall_64+0x4c/0xa0 [ 98.474495][ T4651] ? clear_bhb_loop+0x60/0xb0 [ 98.479174][ T4651] ? clear_bhb_loop+0x60/0xb0 [ 98.483850][ T4651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.489743][ T4651] RIP: 0033:0x7fde15190eea [ 98.494166][ T4651] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.513778][ T4651] RSP: 002b:00007fde15ff3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.522196][ T4651] RAX: ffffffffffffffda RBX: 00007fde15ff3ef0 RCX: 00007fde15190eea [ 98.530168][ T4651] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fde15ff3eb0 [ 98.538138][ T4651] RBP: 00002000000124c0 R08: 00007fde15ff3ef0 R09: 0000000000000000 [ 98.546106][ T4651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 98.554076][ T4651] R13: 00007fde15ff3eb0 R14: 00000000000125c7 R15: 0000200000000180 [ 98.562066][ T4651] [ 98.566027][ T4651] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 98.579173][ T4651] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 98.713704][ T4650] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 98.723028][ T4650] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4650 [gfs2_quotad] gfs2_quota_sync+0x32c/0x6f0 [ 98.734039][ T4650] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 98.742337][ T4650] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 100.041873][ T4665] loop4: detected capacity change from 0 to 32768 [ 100.057765][ T4665] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 100.065197][ T4665] CPU: 1 PID: 4665 Comm: syz.4.70 Not tainted syzkaller #0 [ 100.072401][ T4665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.082451][ T4665] Call Trace: [ 100.085716][ T4665] [ 100.088634][ T4665] dump_stack_lvl+0x168/0x22e [ 100.093306][ T4665] ? show_regs_print_info+0x12/0x12 [ 100.098491][ T4665] ? load_image+0x3b0/0x3b0 [ 100.102993][ T4665] sysfs_create_dir_ns+0x252/0x280 [ 100.108094][ T4665] ? sysfs_warn_dup+0xa0/0xa0 [ 100.112755][ T4665] ? kobject_set_name_vargs+0x5d/0x110 [ 100.118200][ T4665] ? do_raw_spin_unlock+0x11d/0x230 [ 100.123391][ T4665] kobject_add_internal+0x6b8/0xc80 [ 100.128582][ T4665] kobject_init_and_add+0x122/0x190 [ 100.133768][ T4665] ? lockdep_softirqs_off+0x420/0x420 [ 100.139140][ T4665] ? kobject_add+0x210/0x210 [ 100.143720][ T4665] ? __init_swait_queue_head+0xa5/0x150 [ 100.149256][ T4665] gfs2_sys_fs_add+0x234/0x480 [ 100.154016][ T4665] ? gfs2_recover_set+0x240/0x240 [ 100.159026][ T4665] ? snprintf+0xd7/0x120 [ 100.163258][ T4665] ? vscnprintf+0x80/0x80 [ 100.167584][ T4665] gfs2_fill_super+0x126f/0x1f80 [ 100.172521][ T4665] ? gfs2_reconfigure+0xcd0/0xcd0 [ 100.177539][ T4665] ? sb_set_blocksize+0xa5/0xe0 [ 100.182381][ T4665] get_tree_bdev+0x3f1/0x610 [ 100.186958][ T4665] ? gfs2_reconfigure+0xcd0/0xcd0 [ 100.191973][ T4665] gfs2_get_tree+0x4d/0x1e0 [ 100.196468][ T4665] vfs_get_tree+0x88/0x270 [ 100.200871][ T4665] do_new_mount+0x24a/0xa40 [ 100.205367][ T4665] __se_sys_mount+0x2d6/0x3c0 [ 100.210030][ T4665] ? __x64_sys_mount+0xc0/0xc0 [ 100.214781][ T4665] ? lockdep_hardirqs_on+0x94/0x140 [ 100.219965][ T4665] ? __x64_sys_mount+0x1c/0xc0 [ 100.224712][ T4665] do_syscall_64+0x4c/0xa0 [ 100.229113][ T4665] ? clear_bhb_loop+0x60/0xb0 [ 100.233775][ T4665] ? clear_bhb_loop+0x60/0xb0 [ 100.238439][ T4665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.244315][ T4665] RIP: 0033:0x7f6e53f90eea [ 100.248718][ T4665] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.268308][ T4665] RSP: 002b:00007f6e54ee8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.276713][ T4665] RAX: ffffffffffffffda RBX: 00007f6e54ee8ef0 RCX: 00007f6e53f90eea [ 100.284669][ T4665] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f6e54ee8eb0 [ 100.292626][ T4665] RBP: 00002000000124c0 R08: 00007f6e54ee8ef0 R09: 0000000000000000 [ 100.300583][ T4665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 100.308537][ T4665] R13: 00007f6e54ee8eb0 R14: 00000000000125c7 R15: 0000200000000180 [ 100.316507][ T4665] [ 100.320546][ T4665] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 100.333873][ T4665] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 102.120527][ T4263] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.210482][ T41] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.362267][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.380483][ T4263] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.389596][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.404674][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.418698][ T41] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.418761][ T4263] usb 3-1: config 0 descriptor?? [ 102.432909][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.440548][ T14] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 102.448913][ T41] usb 4-1: config 0 descriptor?? [ 102.633198][ T14] usb 2-1: config 0 has no interfaces? [ 102.638687][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.648241][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.651714][ T4263] usbhid 3-1:0.0: can't add hid device: -71 [ 102.668880][ T4263] usbhid: probe of 3-1:0.0 failed with error -71 [ 102.676822][ T41] usbhid 4-1:0.0: can't add hid device: -71 [ 102.679327][ T14] usb 2-1: config 0 descriptor?? [ 102.687710][ T41] usbhid: probe of 4-1:0.0 failed with error -71 [ 102.687863][ T4338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.696301][ T4263] usb 3-1: USB disconnect, device number 2 [ 102.720222][ T41] usb 4-1: USB disconnect, device number 3 [ 102.891991][ T4338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.902960][ T4338] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.912303][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.928145][ T4338] usb 5-1: config 0 descriptor?? [ 102.929692][ T22] usb 2-1: USB disconnect, device number 4 [ 103.142695][ T4338] usbhid 5-1:0.0: can't add hid device: -71 [ 103.148655][ T4338] usbhid: probe of 5-1:0.0 failed with error -71 [ 103.158418][ T4338] usb 5-1: USB disconnect, device number 2 [ 103.179096][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055356000: rx timeout, send abort [ 103.250498][ T4263] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.260642][ T41] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.430679][ T4263] usb 3-1: Using ep0 maxpacket: 32 [ 103.438559][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.449540][ T4263] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 103.458596][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.466645][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 103.478373][ T4263] usb 3-1: config 0 descriptor?? [ 103.483404][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.495090][ T41] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 103.504680][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.514885][ T4263] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 103.525992][ T41] usb 4-1: config 0 descriptor?? [ 103.537414][ T41] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 103.548675][ T4263] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 103.560459][ T41] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 103.679164][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055355400: rx timeout, send abort [ 103.687381][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055356000: abort rx timeout. Force session deactivation [ 103.730521][ T4338] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.839343][ T4324] usb 3-1: USB disconnect, device number 3 [ 103.867222][ T4324] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 103.914315][ T4338] usb 5-1: Using ep0 maxpacket: 32 [ 103.922390][ T4338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.949195][ T4338] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 103.973212][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.995024][ T4338] usb 5-1: config 0 descriptor?? [ 104.015961][ T4650] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 104.027912][ T4338] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 104.038141][ T4650] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 104.049320][ T4650] gfs2: fsid=syz:syz.0: File system withdrawn [ 104.058967][ T4338] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 104.067189][ T4650] CPU: 0 PID: 4650 Comm: gfs2_quotad Not tainted syzkaller #0 [ 104.074652][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.084716][ T4650] Call Trace: [ 104.087994][ T4650] [ 104.090926][ T4650] dump_stack_lvl+0x168/0x22e [ 104.095616][ T4650] ? kobject_uevent_env+0x35f/0x8a0 [ 104.100828][ T4650] ? show_regs_print_info+0x12/0x12 [ 104.106030][ T4650] ? load_image+0x3b0/0x3b0 [ 104.110542][ T4650] ? kobject_uevent_env+0x35f/0x8a0 [ 104.115763][ T4650] gfs2_withdraw+0x143f/0x1780 [ 104.120550][ T4650] ? gfs2_lm+0x220/0x220 [ 104.124793][ T4650] ? wake_bit_function+0x200/0x200 [ 104.129893][ T4650] ? gfs2_consist_inode_i+0xf1/0x110 [ 104.135169][ T4650] gfs2_inode_refresh+0xb5e/0xfc0 [ 104.140183][ T4650] ? gfs2_inode_metasync+0xf0/0xf0 [ 104.145280][ T4650] ? gfs2_glock_nq+0xcf0/0x14e0 [ 104.150122][ T4650] gfs2_instantiate+0x15e/0x210 [ 104.154965][ T4650] gfs2_glock_wait+0x1d0/0x2a0 [ 104.159721][ T4650] do_sync+0x49a/0xc00 [ 104.163774][ T4650] ? gfs2_quota_sync+0x32c/0x6f0 [ 104.168698][ T4650] ? slot_put+0x1e0/0x1e0 [ 104.173019][ T4650] ? gfs2_quota_sync+0x32c/0x6f0 [ 104.177946][ T4650] ? do_raw_spin_unlock+0x11d/0x230 [ 104.183134][ T4650] gfs2_quota_sync+0x32c/0x6f0 [ 104.187890][ T4650] gfs2_quotad+0x413/0x670 [ 104.192301][ T4650] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 104.197395][ T4650] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 104.203277][ T4650] ? wake_bit_function+0x200/0x200 [ 104.208378][ T4650] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 104.214260][ T4650] ? __kthread_parkme+0x162/0x1c0 [ 104.219276][ T4650] kthread+0x29d/0x330 [ 104.223341][ T4650] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 104.228435][ T4650] ? kthread_blkcg+0xd0/0xd0 [ 104.233012][ T4650] ret_from_fork+0x1f/0x30 [ 104.237423][ T4650] [ 104.240823][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055355400: abort rx timeout. Force session deactivation [ 104.286429][ T4270] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 104.303971][ T4338] usb 4-1: USB disconnect, device number 4 [ 104.315140][ T4338] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 104.331035][ T4270] CPU: 0 PID: 4270 Comm: syz-executor Not tainted syzkaller #0 [ 104.338596][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.348655][ T4270] Call Trace: [ 104.351934][ T4270] [ 104.354872][ T4270] dump_stack_lvl+0x168/0x22e [ 104.359558][ T4270] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 104.364686][ T4270] ? show_regs_print_info+0x12/0x12 [ 104.369897][ T4270] ? load_image+0x3b0/0x3b0 [ 104.374414][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 104.379605][ T4270] gfs2_assert_warn_i+0x18f/0x2c0 [ 104.384631][ T4270] gfs2_quota_cleanup+0x4b4/0x6a0 [ 104.389656][ T4270] gfs2_put_super+0x22f/0x8c0 [ 104.394322][ T4270] ? gfs2_evict_inode+0x1170/0x1170 [ 104.399504][ T4270] generic_shutdown_super+0x130/0x340 [ 104.404864][ T4270] kill_block_super+0x7c/0xe0 [ 104.409527][ T4270] deactivate_locked_super+0x93/0xf0 [ 104.414797][ T4270] cleanup_mnt+0x463/0x4f0 [ 104.419199][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 104.424387][ T4270] task_work_run+0x1ca/0x250 [ 104.428965][ T4270] ? task_work_cancel+0x230/0x230 [ 104.433979][ T4270] ? exit_to_user_mode_loop+0x3b/0x110 [ 104.439427][ T4270] exit_to_user_mode_loop+0xe6/0x110 [ 104.444701][ T4270] exit_to_user_mode_prepare+0xee/0x180 [ 104.450231][ T4270] syscall_exit_to_user_mode+0x16/0x40 [ 104.455673][ T4270] do_syscall_64+0x58/0xa0 [ 104.460072][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 104.464735][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 104.469398][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.475273][ T4270] RIP: 0033:0x7faf28b90a77 [ 104.479670][ T4270] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 104.499258][ T4270] RSP: 002b:00007fff3d2eb278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.507656][ T4270] RAX: 0000000000000000 RBX: 00007faf28c13d7d RCX: 00007faf28b90a77 [ 104.515611][ T4270] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3d2eb330 [ 104.523569][ T4270] RBP: 00007fff3d2eb330 R08: 0000000000000000 R09: 0000000000000000 [ 104.531522][ T4270] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3d2ec3c0 [ 104.539475][ T4270] R13: 00007faf28c13d7d R14: 000000000001818c R15: 00007fff3d2ec400 [ 104.547441][ T4270] [ 104.583697][ T41] usb 5-1: USB disconnect, device number 3 [ 104.597212][ T41] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 104.710686][ T4263] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.798270][ T4324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.912099][ T4263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.923332][ T4263] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.932635][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.946493][ T4263] usb 2-1: config 0 descriptor?? [ 105.991804][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.003648][ T4324] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 106.012723][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.028179][ T4324] usb 3-1: config 0 descriptor?? [ 106.110507][ T4338] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.162465][ T4263] usbhid 2-1:0.0: can't add hid device: -71 [ 106.168436][ T4263] usbhid: probe of 2-1:0.0 failed with error -71 [ 106.180538][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.185555][ T4263] usb 2-1: USB disconnect, device number 5 [ 106.242453][ T4324] usbhid 3-1:0.0: can't add hid device: -71 [ 106.248401][ T4324] usbhid: probe of 3-1:0.0 failed with error -71 [ 106.258203][ T4324] usb 3-1: USB disconnect, device number 4 [ 106.291782][ T4338] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.300626][ T4338] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.311658][ T4338] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.320861][ T4338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.380641][ T4338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.412144][ T14] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.420897][ T14] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.431873][ T4338] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.457013][ T4338] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.475999][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.485264][ T4338] usb 4-1: Product: syz [ 106.489436][ T4338] usb 4-1: Manufacturer: syz [ 106.499014][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.528573][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.546477][ T4338] cdc_wdm 4-1:1.0: skipping garbage [ 106.553073][ T4338] cdc_wdm 4-1:1.0: skipping garbage [ 106.566147][ T14] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.578225][ T4338] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 106.589061][ T14] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.597149][ T4338] cdc_wdm 4-1:1.0: Unknown control protocol [ 106.609540][ T14] usb 5-1: Product: syz [ 106.613785][ T14] usb 5-1: Manufacturer: syz [ 106.658769][ T14] cdc_wdm 5-1:1.0: skipping garbage [ 106.665617][ T14] cdc_wdm 5-1:1.0: skipping garbage [ 106.677808][ T14] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 106.683881][ T14] cdc_wdm 5-1:1.0: Unknown control protocol [ 106.800549][ T4263] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.832978][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 106.839630][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 106.846246][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 106.852853][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 106.859054][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 106.865662][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 106.871854][ T4324] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.879437][ T41] usb 5-1: USB disconnect, device number 4 [ 106.879542][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 106.891833][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 106.898607][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 106.905212][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 106.911523][ T4307] usb 4-1: USB disconnect, device number 5 [ 107.010465][ T4263] usb 2-1: Using ep0 maxpacket: 32 [ 107.017113][ T4263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.028582][ T4263] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 107.037973][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.047393][ T4263] usb 2-1: config 0 descriptor?? [ 107.064978][ T4263] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.076079][ T4263] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 107.090658][ T4324] usb 3-1: Using ep0 maxpacket: 32 [ 107.100204][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.100500][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.115780][ T4324] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 107.128087][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.143310][ T4324] usb 3-1: config 0 descriptor?? [ 107.150094][ T4324] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.161112][ T4324] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 107.302282][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.313289][ T22] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.322672][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.332857][ T22] usb 1-1: config 0 descriptor?? [ 107.547440][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 107.553500][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 107.564021][ T22] usb 1-1: USB disconnect, device number 2 [ 107.586571][ T4324] usb 3-1: USB disconnect, device number 5 [ 107.586979][ T41] usb 2-1: USB disconnect, device number 6 [ 107.606007][ T4324] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 107.629354][ T41] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 107.950538][ T4314] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.040536][ T4307] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.133254][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.163490][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.174717][ T4314] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.185039][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.196829][ T4314] usb 5-1: config 0 descriptor?? [ 108.221921][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.233016][ T4307] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.242104][ T4307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.252635][ T4307] usb 4-1: config 0 descriptor?? [ 108.370500][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 108.377170][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.388454][ T22] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 108.397605][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.414159][ T4324] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.416676][ T4314] usbhid 5-1:0.0: can't add hid device: -71 [ 108.427889][ T22] usb 1-1: config 0 descriptor?? [ 108.437321][ T4314] usbhid: probe of 5-1:0.0 failed with error -71 [ 108.445972][ T22] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 108.457603][ T4314] usb 5-1: USB disconnect, device number 5 [ 108.460545][ T4338] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 108.464367][ T22] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 108.485310][ T4307] usbhid 4-1:0.0: can't add hid device: -71 [ 108.495404][ T4307] usbhid: probe of 4-1:0.0 failed with error -71 [ 108.515214][ T4307] usb 4-1: USB disconnect, device number 6 [ 108.624369][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.638902][ T4324] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.648672][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.673627][ T4324] usb 2-1: config 0 descriptor?? [ 108.692013][ T4338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 108.703269][ T4338] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 108.716310][ T4338] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 108.726264][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.736524][ T4338] usb 3-1: config 0 descriptor?? [ 108.742754][ T4721] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 108.886909][ T4324] usbhid 2-1:0.0: can't add hid device: -71 [ 108.896015][ T4324] usbhid: probe of 2-1:0.0 failed with error -71 [ 108.912797][ T4324] usb 2-1: USB disconnect, device number 7 [ 108.959336][ T4721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.971250][ T4721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.980681][ T4314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.993653][ T4338] usbhid 3-1:0.0: can't add hid device: -71 [ 108.994854][ T22] usb 1-1: USB disconnect, device number 3 [ 108.999611][ T4338] usbhid: probe of 3-1:0.0 failed with error -71 [ 109.009838][ T22] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 109.022778][ T4338] usb 3-1: USB disconnect, device number 6 [ 109.081285][ T4307] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.180576][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 109.187105][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.199007][ T4314] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 109.208257][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.221303][ T4314] usb 5-1: config 0 descriptor?? [ 109.227692][ T4314] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 109.242838][ T4314] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 109.270709][ T4307] usb 4-1: Using ep0 maxpacket: 32 [ 109.277553][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.288833][ T4307] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 109.298232][ T4307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.311900][ T4307] usb 4-1: config 0 descriptor?? [ 109.321313][ T4307] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 109.334142][ T4307] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 109.490506][ T4324] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.749054][ T4314] usb 5-1: USB disconnect, device number 6 [ 109.760713][ T4324] usb 2-1: Using ep0 maxpacket: 32 [ 109.762936][ T4314] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 109.815645][ T22] usb 4-1: USB disconnect, device number 7 [ 109.838223][ T22] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 109.884452][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.235456][ T4324] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 110.316781][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.354634][ T4324] usb 2-1: config 0 descriptor?? [ 110.369999][ T4324] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 110.419705][ T4324] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.641594][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057bd5400: rx timeout, send abort [ 110.690754][ T4307] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 110.911794][ T4307] usb 3-1: config 0 has no interfaces? [ 110.917487][ T4307] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.927577][ T4263] usb 2-1: USB disconnect, device number 8 [ 110.943120][ T4263] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 110.948522][ T4307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.970733][ T4329] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.984840][ T4307] usb 3-1: config 0 descriptor?? [ 111.060503][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.141700][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055ac7800: rx timeout, send abort [ 111.150602][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057bd5400: abort rx timeout. Force session deactivation [ 111.161829][ T4329] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 111.175586][ T4329] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.204548][ T4329] usb 4-1: config 0 has no interfaces? [ 111.210032][ T4329] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 111.240762][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888055ac7800: connection exists (fe ff). last cmd: 20 [ 111.253494][ T22] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.262456][ T22] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.295772][ T4329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.304086][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.319213][ T4329] usb 4-1: config 0 descriptor?? [ 111.324778][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 111.339589][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 111.352484][ T4329] usb 3-1: USB disconnect, device number 7 [ 111.391807][ T22] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.401952][ T22] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.409957][ T22] usb 5-1: Product: syz [ 111.414520][ T22] usb 5-1: Manufacturer: syz [ 111.425470][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 111.439039][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 111.470675][ T22] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 111.477218][ T22] cdc_wdm 5-1:1.0: Unknown control protocol [ 111.490753][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d4a6000: rx timeout, send abort [ 111.673756][ T4749] loop1: detected capacity change from 0 to 1024 [ 111.680614][ T4307] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.715616][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 111.716368][ T4338] usb 5-1: USB disconnect, device number 7 [ 111.722214][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 111.722231][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 111.724141][ T4743] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 111.795987][ T4329] usb 4-1: USB disconnect, device number 8 [ 111.802681][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 111.802693][ T26] audit: type=1800 audit(1765049395.161:27): pid=4749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.101" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 111.884392][ T4307] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.909069][ T4307] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.998927][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d4a6000: abort rx timeout. Force session deactivation [ 112.006742][ T4307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.075284][ T4307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 112.173739][ T4307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 112.318893][ T4307] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.373976][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.382326][ T4307] usb 1-1: Product: syz [ 112.387399][ T4307] usb 1-1: Manufacturer: syz [ 112.426238][ T4307] cdc_wdm 1-1:1.0: skipping garbage [ 112.469219][ T4307] cdc_wdm 1-1:1.0: skipping garbage [ 112.726777][ T4307] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 112.734149][ T4307] cdc_wdm 1-1:1.0: Unknown control protocol [ 113.067882][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 113.068052][ T4329] usb 1-1: USB disconnect, device number 4 [ 113.074499][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 113.074516][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 113.075486][ T4745] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 114.441804][ T4771] loop4: detected capacity change from 0 to 2048 [ 114.513060][ T4771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.600304][ T4771] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 114.951644][ T4778] hub 2-0:1.0: USB hub found [ 114.958282][ T4778] hub 2-0:1.0: 1 port detected [ 117.004587][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.111'. [ 117.104168][ T4797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 117.141946][ T4800] loop4: detected capacity change from 0 to 512 [ 117.190674][ T4314] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 117.443481][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 117.518383][ T4800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.579608][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 117.796892][ T4314] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 117.819334][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.841096][ T4314] usb 1-1: config 0 descriptor?? [ 117.848037][ T4813] EXT4-fs (loop4): shut down requested (0) [ 117.849227][ T4789] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.997611][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 118.139266][ T4789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.149641][ T4789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.170329][ T4314] usbhid 1-1:0.0: can't add hid device: -71 [ 118.176364][ T4314] usbhid: probe of 1-1:0.0 failed with error -71 [ 118.224622][ T4314] usb 1-1: USB disconnect, device number 5 [ 120.310561][ T4307] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.350581][ T4338] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.358112][ T4324] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 120.430615][ T4329] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.492018][ T4307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.502999][ T4307] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.516357][ T4307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.524442][ T4328] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.536210][ T4307] usb 5-1: config 0 descriptor?? [ 120.544848][ T4338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.556139][ T4338] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.565344][ T4324] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 120.575847][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.583922][ T4324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.594641][ T4324] usb 2-1: config 0 has no interfaces? [ 120.602170][ T4324] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 120.611787][ T4338] usb 1-1: config 0 descriptor?? [ 120.615720][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.616934][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.628956][ T4329] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.656063][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.658201][ T4324] usb 2-1: config 0 descriptor?? [ 120.668116][ T4329] usb 3-1: config 0 descriptor?? [ 120.732306][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.744106][ T4328] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.753255][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.772542][ T4328] usb 4-1: config 0 descriptor?? [ 120.788744][ T4307] usbhid 5-1:0.0: can't add hid device: -71 [ 120.795243][ T4307] usbhid: probe of 5-1:0.0 failed with error -71 [ 120.809409][ T4307] usb 5-1: USB disconnect, device number 8 [ 120.849015][ T4338] usbhid 1-1:0.0: can't add hid device: -71 [ 120.855006][ T4338] usbhid: probe of 1-1:0.0 failed with error -71 [ 120.869272][ T4338] usb 1-1: USB disconnect, device number 6 [ 120.884656][ T4329] usbhid 3-1:0.0: can't add hid device: -71 [ 120.895925][ T4329] usbhid: probe of 3-1:0.0 failed with error -71 [ 120.918326][ T4329] usb 3-1: USB disconnect, device number 8 [ 120.994836][ T4328] usbhid 4-1:0.0: can't add hid device: -71 [ 121.004027][ T4328] usbhid: probe of 4-1:0.0 failed with error -71 [ 121.021799][ T4328] usb 4-1: USB disconnect, device number 9 [ 121.037057][ T128] usb 2-1: USB disconnect, device number 9 [ 121.400536][ T4307] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.451081][ T4338] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.500496][ T4329] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.590542][ T4307] usb 5-1: Using ep0 maxpacket: 32 [ 121.601431][ T4307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.612759][ T4328] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 121.626128][ T4307] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 121.635823][ T4307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.647263][ T4307] usb 5-1: config 0 descriptor?? [ 121.653136][ T4338] usb 1-1: Using ep0 maxpacket: 32 [ 121.660714][ T4338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.681195][ T4307] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 121.686917][ T4329] usb 3-1: Using ep0 maxpacket: 32 [ 121.692386][ T4338] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 121.711563][ T4307] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 121.711952][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.734737][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.748645][ T4855] loop1: detected capacity change from 0 to 512 [ 121.756724][ T4338] usb 1-1: config 0 descriptor?? [ 121.766305][ T4338] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 121.768586][ T4329] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 121.787645][ T4338] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 121.817578][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.833103][ T4328] usb 4-1: Using ep0 maxpacket: 32 [ 121.833288][ T4855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.848184][ T4329] usb 3-1: config 0 descriptor?? [ 121.850827][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.858475][ T4329] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 121.864774][ T4328] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 121.883582][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.893177][ T4329] ldusb 3-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 121.913214][ T4328] usb 4-1: config 0 descriptor?? [ 121.921859][ T4328] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 121.944254][ T4855] EXT4-fs (loop1): shut down requested (0) [ 121.951682][ T4328] ldusb 4-1:0.0: LD USB Device #3 now attached to major 180 minor 3 [ 122.004355][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 122.213412][ T4338] usb 5-1: USB disconnect, device number 9 [ 122.222910][ T4338] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 122.237354][ T4307] usb 1-1: USB disconnect, device number 7 [ 122.244102][ T4307] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 122.306325][ T4329] usb 3-1: USB disconnect, device number 9 [ 122.313234][ T4329] ldusb 3-1:0.0: LD USB Device #2 now disconnected [ 122.332195][ T4328] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.347151][ T4314] usb 4-1: USB disconnect, device number 10 [ 122.354305][ T4314] ldusb 4-1:0.0: LD USB Device #3 now disconnected [ 122.521892][ T4328] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.530628][ T4328] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.542840][ T4328] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.552009][ T4328] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 122.563077][ T4328] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 122.575845][ T4328] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.585514][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.593545][ T4328] usb 2-1: Product: syz [ 122.597772][ T4328] usb 2-1: Manufacturer: syz [ 122.605841][ T4328] cdc_wdm 2-1:1.0: skipping garbage [ 122.611152][ T4328] cdc_wdm 2-1:1.0: skipping garbage [ 122.618017][ T4328] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 122.624065][ T4328] cdc_wdm 2-1:1.0: Unknown control protocol [ 122.899605][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.903910][ T41] usb 2-1: USB disconnect, device number 10 [ 122.906219][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.918179][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 124.092394][ T4314] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.100073][ T4329] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.752961][ T4329] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.761700][ T4314] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.770305][ T4314] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 124.790460][ T4329] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 125.849835][ T4314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.861531][ T4329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.870725][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 125.882051][ T4329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 125.893292][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 125.930512][ T4329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 125.977241][ T4314] usb 5-1: string descriptor 0 read error: -71 [ 125.983561][ T4329] usb 1-1: string descriptor 0 read error: -71 [ 125.989768][ T4329] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.011512][ T4314] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.045095][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.058651][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.223454][ T4329] usb 1-1: can't set config #1, error -71 [ 127.230177][ T4314] usb 5-1: can't set config #1, error -71 [ 127.237508][ T4329] usb 1-1: USB disconnect, device number 8 [ 127.244290][ T4314] usb 5-1: USB disconnect, device number 10 [ 127.426326][ T4896] loop0: detected capacity change from 0 to 512 [ 128.241318][ T4896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.350601][ T4910] EXT4-fs (loop0): shut down requested (0) [ 128.790106][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 130.098846][ T4328] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 130.751761][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.762859][ T4328] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.772336][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.797498][ T4328] usb 2-1: config 0 descriptor?? [ 130.959567][ T125] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.040707][ T128] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 131.111027][ T4328] usbhid 2-1:0.0: can't add hid device: -71 [ 131.138047][ T4328] usbhid: probe of 2-1:0.0 failed with error -71 [ 131.285383][ T4328] usb 2-1: USB disconnect, device number 11 [ 131.325677][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.444057][ T128] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.576655][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.589229][ T128] usb 5-1: config 0 descriptor?? [ 131.703569][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.729552][ T125] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.749885][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.786437][ T125] usb 3-1: config 0 descriptor?? [ 131.815095][ T128] usbhid 5-1:0.0: can't add hid device: -71 [ 131.821156][ T128] usbhid: probe of 5-1:0.0 failed with error -71 [ 131.835499][ T128] usb 5-1: USB disconnect, device number 11 [ 131.960588][ T4328] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 132.002404][ T125] usbhid 3-1:0.0: can't add hid device: -71 [ 132.008858][ T125] usbhid: probe of 3-1:0.0 failed with error -71 [ 132.017529][ T125] usb 3-1: USB disconnect, device number 10 [ 132.143256][ T4329] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 132.177440][ T4328] usb 2-1: Using ep0 maxpacket: 32 [ 132.184574][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.195542][ T4328] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 132.210509][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.220215][ T4328] usb 2-1: config 0 descriptor?? [ 132.226751][ T4328] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.246201][ T4328] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 132.440633][ T128] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 132.681108][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.687889][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.710516][ T128] usb 5-1: Using ep0 maxpacket: 32 [ 132.733843][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.822060][ T4329] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.836764][ T4329] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.847946][ T4329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.857040][ T4329] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 132.865783][ T128] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 132.868503][ T4329] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 132.888948][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.897711][ T4329] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.905048][ T128] usb 5-1: config 0 descriptor?? [ 132.910681][ T4329] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.919801][ T4329] usb 4-1: Product: syz [ 132.923071][ T128] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.924305][ T4329] usb 4-1: Manufacturer: syz [ 132.947023][ T4329] cdc_wdm 4-1:1.0: skipping garbage [ 132.953495][ T4329] cdc_wdm 4-1:1.0: skipping garbage [ 132.959794][ T4329] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 132.970130][ T4329] cdc_wdm 4-1:1.0: Unknown control protocol [ 133.035249][ T128] ldusb 5-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 134.121518][ T125] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 134.230766][ T4329] usb 5-1: USB disconnect, device number 12 [ 134.251927][ T128] usb 2-1: USB disconnect, device number 12 [ 134.251976][ T4329] ldusb 5-1:0.0: LD USB Device #2 now disconnected [ 134.291771][ T128] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 134.356125][ T4328] usb 4-1: USB disconnect, device number 11 [ 135.515875][ T4650] ================================================================== [ 135.523963][ T4650] BUG: KASAN: use-after-free in __lock_acquire+0xf7/0x7c50 [ 135.531182][ T4650] Read of size 8 at addr ffff888079ad0bb0 by task gfs2_quotad/4650 [ 135.539065][ T4650] [ 135.541392][ T4650] CPU: 0 PID: 4650 Comm: gfs2_quotad Not tainted syzkaller #0 [ 135.548845][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.558893][ T4650] Call Trace: [ 135.562170][ T4650] [ 135.565102][ T4650] dump_stack_lvl+0x168/0x22e [ 135.569783][ T4650] ? __lock_acquire+0x7c50/0x7c50 [ 135.574811][ T4650] ? show_regs_print_info+0x12/0x12 [ 135.580011][ T4650] ? load_image+0x3b0/0x3b0 [ 135.584513][ T4650] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 135.589867][ T4650] ? __virt_addr_valid+0x188/0x540 [ 135.594958][ T4650] ? __virt_addr_valid+0x465/0x540 [ 135.600057][ T4650] ? __lock_acquire+0xf7/0x7c50 [ 135.604892][ T4650] print_report+0xa8/0x210 [ 135.609281][ T4650] kasan_report+0x10b/0x140 [ 135.613763][ T4650] ? __lock_acquire+0xf7/0x7c50 [ 135.618594][ T4650] __lock_acquire+0xf7/0x7c50 [ 135.623251][ T4650] ? verify_lock_unused+0x140/0x140 [ 135.628425][ T4650] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 135.634383][ T4650] ? lock_chain_count+0x20/0x20 [ 135.639212][ T4650] ? __free_object+0x203/0x9d0 [ 135.643953][ T4650] ? lockdep_hardirqs_on+0x94/0x140 [ 135.649138][ T4650] ? verify_lock_unused+0x140/0x140 [ 135.654315][ T4650] ? alloc_object+0x650/0x650 [ 135.658970][ T4650] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 135.664928][ T4650] ? lock_chain_count+0x20/0x20 [ 135.669756][ T4650] lock_acquire+0x1b4/0x490 [ 135.674239][ T4650] ? finish_wait+0xb8/0x1d0 [ 135.678721][ T4650] ? timer_delete_sync+0x20/0x20 [ 135.683637][ T4650] ? __mod_timer+0x91e/0xd00 [ 135.688204][ T4650] ? read_lock_is_recursive+0x10/0x10 [ 135.693650][ T4650] _raw_spin_lock_irqsave+0xa4/0xf0 [ 135.698834][ T4650] ? finish_wait+0xb8/0x1d0 [ 135.703314][ T4650] ? _raw_spin_lock+0x40/0x40 [ 135.707970][ T4650] ? update_process_times+0x1b0/0x1b0 [ 135.713334][ T4650] finish_wait+0xb8/0x1d0 [ 135.717685][ T4650] gfs2_quotad+0x4e6/0x670 [ 135.722081][ T4650] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 135.727168][ T4650] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 135.733041][ T4650] ? wake_bit_function+0x200/0x200 [ 135.738129][ T4650] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 135.744015][ T4650] ? __kthread_parkme+0x162/0x1c0 [ 135.749020][ T4650] kthread+0x29d/0x330 [ 135.753067][ T4650] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 135.758154][ T4650] ? kthread_blkcg+0xd0/0xd0 [ 135.762722][ T4650] ret_from_fork+0x1f/0x30 [ 135.767122][ T4650] [ 135.770117][ T4650] [ 135.772422][ T4650] Allocated by task 4833: [ 135.776734][ T4650] kasan_set_track+0x4b/0x70 [ 135.781302][ T4650] __kasan_kmalloc+0x8e/0xa0 [ 135.785872][ T4650] __kmalloc_node+0xb0/0x240 [ 135.790445][ T4650] kvmalloc_node+0x6c/0x180 [ 135.794929][ T4650] kvm_dev_ioctl_get_cpuid+0x1fe/0x790 [ 135.800386][ T4650] kvm_arch_dev_ioctl+0x35a/0x7d0 [ 135.805402][ T4650] kvm_dev_ioctl+0xd6/0x1800 [ 135.809969][ T4650] __se_sys_ioctl+0xfa/0x170 [ 135.814533][ T4650] do_syscall_64+0x4c/0xa0 [ 135.818924][ T4650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.824789][ T4650] [ 135.827086][ T4650] Freed by task 4833: [ 135.831059][ T4650] kasan_set_track+0x4b/0x70 [ 135.835628][ T4650] kasan_save_free_info+0x2d/0x50 [ 135.840631][ T4650] ____kasan_slab_free+0x126/0x1e0 [ 135.845719][ T4650] slab_free_freelist_hook+0x131/0x1a0 [ 135.851154][ T4650] __kmem_cache_free+0xb6/0x1f0 [ 135.855979][ T4650] kvm_dev_ioctl_get_cpuid+0x367/0x790 [ 135.861414][ T4650] kvm_arch_dev_ioctl+0x35a/0x7d0 [ 135.866426][ T4650] kvm_dev_ioctl+0xd6/0x1800 [ 135.870992][ T4650] __se_sys_ioctl+0xfa/0x170 [ 135.875558][ T4650] do_syscall_64+0x4c/0xa0 [ 135.879975][ T4650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.885858][ T4650] [ 135.888156][ T4650] The buggy address belongs to the object at ffff888079ad0000 [ 135.888156][ T4650] which belongs to the cache kmalloc-8k of size 8192 [ 135.902180][ T4650] The buggy address is located 2992 bytes inside of [ 135.902180][ T4650] 8192-byte region [ffff888079ad0000, ffff888079ad2000) [ 135.915602][ T4650] [ 135.917900][ T4650] The buggy address belongs to the physical page: [ 135.924291][ T4650] page:ffffea0001e6b400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079ad4000 pfn:0x79ad0 [ 135.935721][ T4650] head:ffffea0001e6b400 order:3 compound_mapcount:0 compound_pincount:0 [ 135.944017][ T4650] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 135.951980][ T4650] raw: 00fff00000010200 ffffea00014da400 dead000000000002 ffff888017442280 [ 135.960537][ T4650] raw: ffff888079ad4000 0000000080020001 00000001ffffffff 0000000000000000 [ 135.969093][ T4650] page dumped because: kasan: bad access detected [ 135.975482][ T4650] page_owner tracks the page as allocated [ 135.981168][ T4650] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4253, tgid 4253 (syz-executor), ts 49949204170, free_ts 46737614260 [ 136.001712][ T4650] post_alloc_hook+0x173/0x1a0 [ 136.006459][ T4650] get_page_from_freelist+0x1a26/0x1ac0 [ 136.011983][ T4650] __alloc_pages+0x1df/0x4e0 [ 136.016561][ T4650] alloc_slab_page+0x5d/0x160 [ 136.021251][ T4650] new_slab+0x87/0x2c0 [ 136.025301][ T4650] ___slab_alloc+0xbc6/0x1230 [ 136.029952][ T4650] __kmem_cache_alloc_node+0x1a0/0x260 [ 136.035382][ T4650] kmalloc_trace+0x26/0xe0 [ 136.039776][ T4650] tomoyo_init_log+0x1081/0x1f50 [ 136.044687][ T4650] tomoyo_supervisor+0x326/0x10b0 [ 136.049685][ T4650] tomoyo_env_perm+0x146/0x1e0 [ 136.054427][ T4650] tomoyo_find_next_domain+0x157a/0x1a40 [ 136.060033][ T4650] tomoyo_bprm_check_security+0x100/0x150 [ 136.065728][ T4650] security_bprm_check+0x5e/0x90 [ 136.070640][ T4650] bprm_execve+0xa77/0x18a0 [ 136.075120][ T4650] do_execveat_common+0x51b/0x6c0 [ 136.080118][ T4650] page last free stack trace: [ 136.084763][ T4650] free_unref_page_prepare+0x8b4/0x9a0 [ 136.090200][ T4650] free_unref_page+0x2e/0x3f0 [ 136.094853][ T4650] __unfreeze_partials+0x1a5/0x200 [ 136.099938][ T4650] put_cpu_partial+0x17c/0x250 [ 136.104674][ T4650] qlist_free_all+0x76/0xe0 [ 136.109157][ T4650] kasan_quarantine_reduce+0x144/0x160 [ 136.114589][ T4650] __kasan_slab_alloc+0x1e/0x80 [ 136.119416][ T4650] slab_post_alloc_hook+0x4b/0x480 [ 136.124502][ T4650] kmem_cache_alloc+0x123/0x2f0 [ 136.129328][ T4650] vm_area_alloc+0x20/0xe0 [ 136.133733][ T4650] mmap_region+0xc6a/0x1c70 [ 136.138212][ T4650] do_mmap+0x958/0xfd0 [ 136.142256][ T4650] vm_mmap_pgoff+0x1b2/0x2b0 [ 136.146826][ T4650] ksys_mmap_pgoff+0x516/0x6f0 [ 136.151565][ T4650] do_syscall_64+0x4c/0xa0 [ 136.155954][ T4650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.161829][ T4650] [ 136.164144][ T4650] Memory state around the buggy address: [ 136.169747][ T4650] ffff888079ad0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.177782][ T4650] ffff888079ad0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.185815][ T4650] >ffff888079ad0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.193847][ T4650] ^ [ 136.199452][ T4650] ffff888079ad0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.207485][ T4650] ffff888079ad0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.215515][ T4650] ================================================================== [ 136.223576][ T4650] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.230743][ T4650] CPU: 0 PID: 4650 Comm: gfs2_quotad Not tainted syzkaller #0 [ 136.238174][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.248203][ T4650] Call Trace: [ 136.251466][ T4650] [ 136.254372][ T4650] dump_stack_lvl+0x168/0x22e [ 136.259030][ T4650] ? memcpy+0x3c/0x60 [ 136.262994][ T4650] ? show_regs_print_info+0x12/0x12 [ 136.268169][ T4650] ? load_image+0x3b0/0x3b0 [ 136.272656][ T4650] panic+0x2c9/0x710 [ 136.276529][ T4650] ? __lock_acquire+0x7c50/0x7c50 [ 136.281534][ T4650] ? bpf_jit_dump+0xd0/0xd0 [ 136.286015][ T4650] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 136.291889][ T4650] ? _raw_spin_unlock+0x40/0x40 [ 136.296719][ T4650] check_panic_on_warn+0x80/0xa0 [ 136.301635][ T4650] ? __lock_acquire+0xf7/0x7c50 [ 136.306490][ T4650] end_report+0x66/0x110 [ 136.310712][ T4650] kasan_report+0x118/0x140 [ 136.315195][ T4650] ? __lock_acquire+0xf7/0x7c50 [ 136.320022][ T4650] __lock_acquire+0xf7/0x7c50 [ 136.324678][ T4650] ? verify_lock_unused+0x140/0x140 [ 136.329855][ T4650] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 136.335815][ T4650] ? lock_chain_count+0x20/0x20 [ 136.340642][ T4650] ? __free_object+0x203/0x9d0 [ 136.345379][ T4650] ? lockdep_hardirqs_on+0x94/0x140 [ 136.350554][ T4650] ? verify_lock_unused+0x140/0x140 [ 136.355730][ T4650] ? alloc_object+0x650/0x650 [ 136.360392][ T4650] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 136.366365][ T4650] ? lock_chain_count+0x20/0x20 [ 136.371193][ T4650] lock_acquire+0x1b4/0x490 [ 136.375675][ T4650] ? finish_wait+0xb8/0x1d0 [ 136.380155][ T4650] ? timer_delete_sync+0x20/0x20 [ 136.385082][ T4650] ? __mod_timer+0x91e/0xd00 [ 136.389658][ T4650] ? read_lock_is_recursive+0x10/0x10 [ 136.395011][ T4650] _raw_spin_lock_irqsave+0xa4/0xf0 [ 136.400189][ T4650] ? finish_wait+0xb8/0x1d0 [ 136.404669][ T4650] ? _raw_spin_lock+0x40/0x40 [ 136.409327][ T4650] ? update_process_times+0x1b0/0x1b0 [ 136.414679][ T4650] finish_wait+0xb8/0x1d0 [ 136.418988][ T4650] gfs2_quotad+0x4e6/0x670 [ 136.423383][ T4650] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 136.428467][ T4650] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 136.434339][ T4650] ? wake_bit_function+0x200/0x200 [ 136.439427][ T4650] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 136.445302][ T4650] ? __kthread_parkme+0x162/0x1c0 [ 136.450314][ T4650] kthread+0x29d/0x330 [ 136.454371][ T4650] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 136.459474][ T4650] ? kthread_blkcg+0xd0/0xd0 [ 136.464041][ T4650] ret_from_fork+0x1f/0x30 [ 136.468437][ T4650] [ 136.471671][ T4650] Kernel Offset: disabled [ 136.475979][ T4650] Rebooting in 86400 seconds..