last executing test programs: 4.830438988s ago: executing program 0 (id=599): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x200002e6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.580896293s ago: executing program 4 (id=593): io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4.407460433s ago: executing program 4 (id=595): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2}) 4.11757281s ago: executing program 4 (id=601): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x5}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.286405808s ago: executing program 0 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) syz_usb_connect(0x2, 0x36, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xfa, 0xb9, 0x1d, 0x40, 0x45e, 0x283, 0x43bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0xd4, 0x80, 0x9, [{{0x9, 0x4, 0x1, 0xff, 0x1, 0xaf, 0xc9, 0xfb, 0xb, [], [{{0x9, 0x5, 0x1, 0x4, 0x0, 0x3, 0x4, 0x53}}]}}, {{0x9, 0x4, 0x2f, 0xff, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) 3.027267223s ago: executing program 1 (id=615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000840}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4040845}, 0x40000) recvmsg$can_bcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)=""/153, 0x99}, {&(0x7f0000000b40)=""/253, 0x127}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000940)=""/243, 0xf3}, {&(0x7f0000000680)=""/148, 0x94}], 0x6}, 0x0) 2.879534262s ago: executing program 1 (id=617): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)="341c", 0x2}], 0x1}}], 0x1, 0x4008041) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x464, 0x2, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x800c}, 0x20000001) 2.602395948s ago: executing program 2 (id=622): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents(r2, 0x0, 0x7) 2.559329471s ago: executing program 2 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000037000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000340)="66730e0f20e035000002000f22e0c4c10567d266b873000f00d866b8e5008ee8c4c329413361c4c3816c580b08360f01cfb955090000b885c50000ba000000000f3066ba2100b8c8720f27ef", 0x4c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.411534719s ago: executing program 2 (id=625): r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000003b80)='numa_maps\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 2.074674649s ago: executing program 2 (id=626): io_submit(0x0, 0x1, &(0x7f0000001680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000000380)="16", 0x1, 0x3, 0x0, 0x2}]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000443000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0xf8, 0x8, 0x6, 0x0, 0xb, 0x2, 0x2, 0x9, 0xfc, 0x8, 0x0, 0x1, 0x0, 0x5, 0x9, 0xb, 0x43, 0x4, 0x5, '\x00', 0x2, 0x3}) 2.013910603s ago: executing program 1 (id=627): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000003c0)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.859538352s ago: executing program 2 (id=628): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0xfffffffd, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x80000) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x6, 0x4000000, 0x88, 0xffffff3e, 0x3, "a4f0b1641553dbde35be19b597e027c690356b", 0x8, 0x9}) 1.412008278s ago: executing program 2 (id=629): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000003c0)="045b854a9ac8f74254cb24892017544aad2eee1a89244a80bec23c7beef967f02ce31b5548c59883fa920f6d24bf51bbd5620069d9acdcb82d392c7144c48b4bb1695e237c0d96b8713c4d3c6cbf530d4a7684dd8fb9326d26b60a38dfe6755d616ea8fe36d4700b5b3881014f932f1879aee5bc791a9423ac7fb270c97b7bf4", 0x80}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 1.298373205s ago: executing program 3 (id=630): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/95, 0x15}], 0x1}, 0x2}], 0x1, 0x2100, 0x0) close(r1) 1.219232249s ago: executing program 0 (id=631): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701fe"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.122903705s ago: executing program 0 (id=632): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001380)={r2, 0x3ff}, 0x8) 1.122389735s ago: executing program 3 (id=633): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x2c, 0x6e}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 1.092837406s ago: executing program 1 (id=634): r0 = fanotify_init(0x0, 0x181000) r1 = fanotify_init(0x4, 0x1000) fanotify_mark(r1, 0x1, 0x48000000, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x12000021) readv(r2, &(0x7f0000005600)=[{&(0x7f0000003200)=""/34, 0x22}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1.087335697s ago: executing program 3 (id=635): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x2fd}) 1.037343s ago: executing program 4 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8901) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) 1.03673437s ago: executing program 4 (id=637): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f5, &(0x7f00000005c0)="$eJzs3F1oJVcdAPD/mb03e5Mu7e3XdrUFgyIbW7sk2bS7GpGmXWOFoGCagj4oaT7W0HwsSSpN8aMgiqAg+KAFn/vQIrKKoPTJJx98VhH6Ij74KEEKPogoM5n7kextE3tzk83m94Pknjvzn7kzw/2fOefcmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOLpz0wMj6Tj3goA4Ch9fvqLw6PO/wBwqjyn/w8AAKdFiiw+ESnG/7adLhbvd9SmllZfennm2mTnxfpTseSZIj7/q42MXh574skrVxuv7738YftAfGH6uYnBZ9ZWbqwvbGwszA/OrC7Nrc0vHHgN3S6/16PFARhcefGl+cXFjcHRS5d3zX65/vezd52vj18de2KuETtzbXJyui2mUn3fn34LPTw66YssfhUpXvvkL9JQRGTRfS7sU3f0Wn9U8vwrdmLm2mSxI8tLs6ub+czUSITK7pzoa+TIEeRiV4YiHs+3tU9G071qZDERKT4U2+ljEXGmkQePFT8M7r+CyhFsZAf5dl6JiGfjBOQs3KbORha/jRQr99Ti0eNLZ+AYVCKL70eKi5/eTo8V7YH8fJo3m6eeH/zc6uJaW2xK5Rn1pPcPjpK2CbexWmQxVLT4t9PHj3tjgCPVH1l8OVL8+U9fL8aVohiXvmf86lefGm4fYXpon/XksZciYvSAffJqY6wxXzY73H0CAAAAAAAAAACAO10tZfHzSPHNh2vF+2ebF8j/7r+FY94+oIdSFv+JFM//cru4Nb79uRRn2p7v0XTS7/3p7fb3155Zu7G1vnT9a5sd5w/UJl7Y2Fyfnes8O/qj1rouurDfcwygC9WUxYcjxcNTN1vfu3rKy+WtwK0v2uufan03a2nP3KLeuHvneTaNewi+MvnR9nLHr+z/cX9cvfxc9ygDQHdSyuIPkeKzL1wozqspBuKWNmgZdzZSvPOPR8q4rC8vNE7T9eJ/bXFpeWE4j/11pOj/XiM2itiBMvb+VuxIHvt0pPjxD3bH3lXGPtCKHc1jvxMpfv9a59gHW7GX89if5u2a6cFG7EBeeLCMPd+KvTS3tjzfswMMt7G8/f9GpFi+ezA1crnMl7KZfaYZ+/o3Wu39V/eu6F3a/N22/+tt014t66G8vlh860JR9xT1VaVzffWXSPGbfz9Sxu3UFX3l/HuL/6366s1I8cbbu2MbDwq5rxU7cuADCydAnv/nIsUft242c6PM/zID2/r/bfn/wbJ2aI0Z9Cb/722bVi8/9+zh7Dqcehtbr7w4u7y8sK6goKDQLBx3zQT0Wt7+fydS/Gz57WZ/t2z/n9t51+r//+tbrfb/+N4V9aj9f1/btPGyN1KtRNQ2V25UH4qobWy98vjSyuz1hesLq2PDI0+OjoyNjV6p9jU6961S18cK7jR5/n83Uqx96c3m+Pzu/n/n8b+BvSvqUf7f3zZtYFd/petdh1Mvz/+pSPGTf95s/o72XuN/jfG+oY/svDYfpt2j/H+gbVq9/Nxzh7PrAAAAAAAAAAAAcGJVUxY/ihR//WElNZ6NcZDrf295YEaPrv873zZt/ojuV+z6oAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K6yyGItUrz11Hb6dj7hQsTF9lfgjvW/AAAA//8Qgywy") r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x91) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000d6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 983.421133ms ago: executing program 3 (id=638): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2000000012000100030000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x40006}, 0x4000800) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000001280)=[{&(0x7f00000017c0)="390000001300034700bb65e1c3e4ffff010000000100000056000000ff63b6065699e002242a6700000007fdd411efc4080004000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) 951.464785ms ago: executing program 1 (id=639): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000100)=ANY=[], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = open(&(0x7f0000000300)='./bus\x00', 0x14927e, 0x110) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) write$tun(r0, &(0x7f0000000bc0)=ANY=[], 0x91) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) lseek(r1, 0x0, 0x3) 926.101636ms ago: executing program 3 (id=640): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x401}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x6, 0x3, 0x6, 0x2, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x64}}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 871.394899ms ago: executing program 4 (id=641): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x200002e6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 567.307737ms ago: executing program 3 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) syz_usb_connect(0x2, 0x36, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xfa, 0xb9, 0x1d, 0x40, 0x45e, 0x283, 0x43bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0xd4, 0x80, 0x9, [{{0x9, 0x4, 0x1, 0xff, 0x1, 0xaf, 0xc9, 0xfb, 0xb, [], [{{0x9, 0x5, 0x1, 0x4, 0x0, 0x3, 0x4, 0x53}}]}}, {{0x9, 0x4, 0x2f, 0xff, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) 291.894473ms ago: executing program 0 (id=643): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) unshare(0x2c020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r0}, 0x10) 166.11443ms ago: executing program 0 (id=644): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 0s ago: executing program 1 (id=645): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000003c0)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 51.709895][ T4170] cgroup: Unknown subsys name 'net' [ 51.833871][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.123379][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.981719][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 55.008065][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 55.045882][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 55.067654][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 55.108411][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 55.166755][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.174356][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.182480][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.212340][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.219479][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.227090][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.246486][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.253645][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.261886][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.274162][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.281457][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.289749][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.319792][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.343888][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.360076][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.379397][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.386751][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.394885][ T4184] device bridge_slave_0 entered promiscuous mode [ 55.403528][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.425092][ T4186] team0: Port device team_slave_0 added [ 55.431077][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.438839][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.446558][ T4182] device bridge_slave_0 entered promiscuous mode [ 55.453945][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.461164][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.469305][ T4184] device bridge_slave_1 entered promiscuous mode [ 55.477694][ T4186] team0: Port device team_slave_1 added [ 55.483625][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.490957][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.498899][ T4185] device bridge_slave_0 entered promiscuous mode [ 55.511447][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.518740][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.526687][ T4185] device bridge_slave_1 entered promiscuous mode [ 55.534611][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.541760][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.549791][ T4182] device bridge_slave_1 entered promiscuous mode [ 55.595532][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.602642][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.629485][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.647549][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.654741][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.681038][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.694382][ T4183] team0: Port device team_slave_0 added [ 55.702223][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.718076][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.730070][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.744710][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.755521][ T4183] team0: Port device team_slave_1 added [ 55.763076][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.778914][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.819619][ T4184] team0: Port device team_slave_0 added [ 55.838942][ T4185] team0: Port device team_slave_0 added [ 55.852007][ T4184] team0: Port device team_slave_1 added [ 55.858321][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.865248][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.891418][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.908231][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.915302][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.941274][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.955877][ T4186] device hsr_slave_0 entered promiscuous mode [ 55.962801][ T4186] device hsr_slave_1 entered promiscuous mode [ 55.970688][ T4185] team0: Port device team_slave_1 added [ 55.984140][ T4182] team0: Port device team_slave_0 added [ 55.991978][ T4182] team0: Port device team_slave_1 added [ 56.049210][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.056170][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.082344][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.093895][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.100980][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.130038][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.151166][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.158138][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.184435][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.201701][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.208837][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.234990][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.246537][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.253718][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.279654][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.297533][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.304819][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.331094][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.368665][ T4183] device hsr_slave_0 entered promiscuous mode [ 56.375384][ T4183] device hsr_slave_1 entered promiscuous mode [ 56.381973][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.389858][ T4183] Cannot create hsr debugfs directory [ 56.420387][ T4185] device hsr_slave_0 entered promiscuous mode [ 56.426944][ T4185] device hsr_slave_1 entered promiscuous mode [ 56.433713][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.441355][ T4185] Cannot create hsr debugfs directory [ 56.469788][ T4184] device hsr_slave_0 entered promiscuous mode [ 56.476356][ T4184] device hsr_slave_1 entered promiscuous mode [ 56.482862][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.490774][ T4184] Cannot create hsr debugfs directory [ 56.514415][ T4182] device hsr_slave_0 entered promiscuous mode [ 56.521217][ T4182] device hsr_slave_1 entered promiscuous mode [ 56.527710][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.535490][ T4182] Cannot create hsr debugfs directory [ 56.748631][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 56.758211][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 56.764422][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 56.770994][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 56.777162][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 56.806382][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.818724][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.828366][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.837410][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.882334][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.892942][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.905758][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.920962][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.984623][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.994077][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.022693][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.037746][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.060550][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.076223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.096608][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.104014][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.117264][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.136460][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.143843][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.159558][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.169306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.177293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.186327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.195368][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.202553][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.212305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.239360][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.248328][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.256637][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.263711][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.273960][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.283078][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.291255][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.299367][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.311415][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.335541][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.346614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.355948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.376713][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.387023][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.398484][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.407165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.416952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.426759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.435373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.444068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.455011][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.466422][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.494895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.504575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.513121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.523767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.532619][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.539702][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.581624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.590425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.600581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.612233][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.619337][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.633023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.642781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.656662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.665967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.679022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.687673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.696731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.710306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.719292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.727610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.736924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.775854][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.797058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.804785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.833201][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.852222][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.874045][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.892974][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.914435][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.923205][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.932941][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.942172][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.950560][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.972654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.982381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.990936][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.998021][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.006053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.014875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.024850][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.031951][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.047452][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.069735][ T4186] device veth0_vlan entered promiscuous mode [ 58.092053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.101284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.114889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.124558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.133561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.141586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.151085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.159844][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.166912][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.174730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.183245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.192588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.201895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.211366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.220328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.228848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.238400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.247052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.255283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.263355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.271428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.286361][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.295678][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.304992][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.312092][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.325759][ T4186] device veth1_vlan entered promiscuous mode [ 58.339641][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.355412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.365182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.374783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.384293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.397541][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.408667][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.442244][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.455533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.465832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.473909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.483335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.491827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.500721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.510100][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.517158][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.526005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.535246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.545171][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.552257][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.560692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.569488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.594348][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.605185][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.618777][ T4186] device veth0_macvtap entered promiscuous mode [ 58.625909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.637352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.647788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.659242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.669173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.677622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.687664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.696531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.705105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.714145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.723116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.731858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.740997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.754781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.765486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.774348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.782072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.805422][ T4186] device veth1_macvtap entered promiscuous mode [ 58.824229][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.829264][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 58.837641][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.846642][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.849557][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 58.861275][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.870781][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 58.872833][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.877068][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 58.885874][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.899553][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.903641][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 58.909598][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.922135][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.929929][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.943761][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.967728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.983640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.020454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.029690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.038864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.047061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.075780][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.085731][ T4184] device veth0_vlan entered promiscuous mode [ 59.103023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.116997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.125538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.135627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.152873][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.170605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.180590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.197067][ T4184] device veth1_vlan entered promiscuous mode [ 59.208575][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.217370][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.226948][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.244121][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.255194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.264260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.273617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.281395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.289765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.297481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.306792][ T4183] device veth0_vlan entered promiscuous mode [ 59.343067][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.356019][ T4183] device veth1_vlan entered promiscuous mode [ 59.398276][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.416005][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.424559][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.441091][ T4184] device veth0_macvtap entered promiscuous mode [ 59.475255][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.495731][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.505640][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.514205][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.521742][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.539800][ T4184] device veth1_macvtap entered promiscuous mode [ 59.554007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.567562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.576291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.597601][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.610899][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.626674][ T4183] device veth0_macvtap entered promiscuous mode [ 59.643028][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.652385][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.670728][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.685968][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.700558][ T4183] device veth1_macvtap entered promiscuous mode [ 59.714608][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.723524][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.734852][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.745409][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.747786][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.777191][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.799392][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.813427][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.825113][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.842123][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.851432][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.859845][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.867639][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.877303][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.886665][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.895290][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.905902][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.918851][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.930182][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.960477][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.974250][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.984179][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.995138][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.006760][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.019209][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.040752][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.052793][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.061560][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.070626][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.079688][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.088903][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.097428][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.108837][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.117540][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.127126][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.137050][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.148760][ T4185] device veth0_vlan entered promiscuous mode [ 60.173030][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.182139][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.199032][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.209264][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.219700][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.228535][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.258914][ T4185] device veth1_vlan entered promiscuous mode [ 60.275134][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.293768][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.338709][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.354841][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.384279][ T4182] device veth0_vlan entered promiscuous mode [ 60.463376][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.473136][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.485624][ T4182] device veth1_vlan entered promiscuous mode [ 60.500702][ T4185] device veth0_macvtap entered promiscuous mode [ 60.509323][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.517149][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.554944][ T4185] device veth1_macvtap entered promiscuous mode [ 60.578019][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.586066][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.595553][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.607098][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.623079][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.638600][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.646432][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.682627][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.694780][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.705036][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.718581][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.729350][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.739885][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.751450][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.759572][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.767306][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.776063][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.795828][ T4182] device veth0_macvtap entered promiscuous mode [ 60.812025][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.822592][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.834454][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.842679][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.850800][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.859825][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.868378][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.879186][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.889266][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.899794][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.909082][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 60.915690][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 60.922106][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 60.925074][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.928859][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 60.947605][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.958766][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.972024][ T4182] device veth1_macvtap entered promiscuous mode [ 60.980541][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.988673][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 60.992960][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.004365][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.024829][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.032198][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.043803][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.053009][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.054384][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.062247][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.094195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.103987][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.115074][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.126361][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.137614][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.147660][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.159571][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.171339][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.182013][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.193366][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.206843][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.217756][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.227934][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.240712][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.250758][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.261452][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.272348][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.283070][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.294730][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.318276][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.326822][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.337648][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.346480][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.360592][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.391457][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.426775][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.444460][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.555886][ T4312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 61.687953][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.695807][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.775409][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.797794][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.819685][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.840822][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.855324][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.870533][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.891827][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.897345][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.931397][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.968504][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.286199][ T4343] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5'. [ 62.340682][ T4346] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 62.412438][ T4348] device wlan0 entered promiscuous mode [ 62.434014][ T4341] loop3: detected capacity change from 0 to 8192 [ 62.470002][ T4348] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 62.488656][ T4341] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 62.499437][ T4341] REISERFS (device loop3): using ordered data mode [ 62.507491][ T4341] reiserfs: using flush barriers [ 62.523577][ T4341] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.540455][ T4341] REISERFS (device loop3): checking transaction log (loop3) [ 62.554736][ T4341] REISERFS (device loop3): Using r5 hash to sort names [ 62.568379][ T4341] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 62.743228][ T4354] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 62.779797][ T4354] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 62.792988][ T4354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 62.988748][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 62.995475][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 63.001759][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 63.008292][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 63.068440][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 63.157678][ T4369] netlink: 'syz.4.32': attribute type 26 has an invalid length. [ 63.218135][ T4250] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.396878][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 63.423224][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 63.453865][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 63.465515][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 63.498223][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 63.638783][ T4250] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 63.652063][ T4250] usb 2-1: config 0 has no interface number 0 [ 63.788896][ T4394] loop0: detected capacity change from 0 to 1024 [ 63.848129][ T4250] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 63.866674][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.880874][ T4394] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.893221][ T4250] usb 2-1: Product: syz [ 63.897399][ T4250] usb 2-1: Manufacturer: syz [ 63.902481][ T4250] usb 2-1: SerialNumber: syz [ 63.929245][ T4250] usb 2-1: config 0 descriptor?? [ 63.985334][ T4250] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 64.004301][ T4394] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 64.032948][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.061298][ T4394] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.44: missing EA_INODE flag [ 64.078270][ T4394] EXT4-fs (loop0): Remounting filesystem read-only [ 64.098593][ T4394] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.44: error while reading EA inode 11 err=-117 [ 64.111650][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.125242][ T4394] EXT4-fs (loop0): Remounting filesystem read-only [ 64.132103][ T4394] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.147059][ T4394] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.44: missing EA_INODE flag [ 64.166120][ T4394] EXT4-fs (loop0): Remounting filesystem read-only [ 64.177745][ T4394] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.44: error while reading EA inode 11 err=-117 [ 64.195897][ T4394] EXT4-fs (loop0): Remounting filesystem read-only [ 64.378105][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 64.481701][ T4408] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.504606][ T4410] loop2: detected capacity change from 0 to 128 [ 64.511815][ T7] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 64.522195][ T7] usb 5-1: config 0 has no interface number 0 [ 64.533219][ T7] usb 5-1: config 0 interface 89 has no altsetting 0 [ 64.562219][ T4410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.587677][ T4410] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.733102][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 64.756939][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.786147][ T7] usb 5-1: Product: syz [ 64.796253][ T7] usb 5-1: Manufacturer: syz [ 64.803813][ T7] usb 5-1: SerialNumber: syz [ 64.816775][ T7] usb 5-1: config 0 descriptor?? [ 64.881225][ T7] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 64.935578][ T7] em28xx 5-1:0.89: Video interface 89 found: bulk [ 65.522565][ T4250] gspca_spca1528: reg_w err -71 [ 65.527620][ T7] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 65.533857][ T4250] spca1528: probe of 2-1:0.1 failed with error -71 [ 65.566637][ T4250] usb 2-1: USB disconnect, device number 2 [ 65.752949][ T4425] loop2: detected capacity change from 0 to 32768 [ 65.822238][ T4425] XFS (loop2): Mounting V5 Filesystem [ 65.899607][ T4425] XFS (loop2): Ending clean mount [ 65.958098][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.044430][ T4186] XFS (loop2): Unmounting Filesystem [ 66.153143][ T4442] loop1: detected capacity change from 0 to 2048 [ 66.190253][ T4440] loop0: detected capacity change from 0 to 4096 [ 66.256879][ T4442] loop1: p1 p3 p4 [ 66.280250][ T4442] loop1: p4 size 589824 extends beyond EOD, truncated [ 66.296296][ T4440] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 66.298446][ T7] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 66.322002][ T7] em28xx 5-1:0.89: board has no eeprom [ 66.328442][ T1108] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 66.336632][ T1108] usb 4-1: config 0 has no interface number 0 [ 66.355311][ T4440] ntfs3: loop0: Failed to load $Extend. [ 66.466414][ T26] audit: type=1800 audit(1771265353.994:2): pid=4440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.57" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 66.489779][ T7] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 66.497017][ T7] em28xx 5-1:0.89: analog set to bulk mode. [ 66.516360][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 66.517088][ T4445] udevd[4445]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 66.558160][ T1108] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=fe.ea [ 66.561549][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 66.584690][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.608248][ T7] usb 5-1: USB disconnect, device number 2 [ 66.617048][ T1108] usb 4-1: Product: syz [ 66.633672][ T1108] usb 4-1: Manufacturer: syz [ 66.646100][ T1108] usb 4-1: SerialNumber: syz [ 66.649712][ T7] em28xx 5-1:0.89: Disconnecting em28xx [ 66.664154][ T4449] xt_hashlimit: max too large, truncated to 1048576 [ 66.677585][ T4250] em28xx 5-1:0.89: Registering V4L2 extension [ 66.689318][ T1108] usb 4-1: config 0 descriptor?? [ 66.751714][ T1108] usb 4-1: unknown interface protocol 0xf6, assuming v1 [ 66.765303][ T4250] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 66.786169][ T1108] usb 4-1: cannot find UAC_HEADER [ 66.792793][ T4250] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 66.828420][ T4250] em28xx 5-1:0.89: No AC97 audio processor [ 66.850226][ T4250] usb 5-1: Decoder not found [ 66.863978][ T4250] em28xx 5-1:0.89: failed to create media graph [ 66.873529][ T1108] snd-usb-audio: probe of 4-1:0.143 failed with error -22 [ 66.890399][ T4250] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 66.915509][ T4250] em28xx 5-1:0.89: Registering snapshot button... [ 66.923836][ T4172] udevd[4172]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.143/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.939129][ T4250] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input5 [ 66.972917][ T4250] em28xx 5-1:0.89: Remote control support is not available for this card. [ 66.981877][ T7] em28xx 5-1:0.89: Closing input extension [ 66.988582][ T7] em28xx 5-1:0.89: Deregistering snapshot button [ 67.350467][ T4459] loop4: detected capacity change from 0 to 32768 [ 67.414656][ T4459] XFS (loop4): Mounting V5 Filesystem [ 67.457211][ T4459] XFS (loop4): Ending clean mount [ 67.472322][ T4459] XFS (loop4): Quotacheck needed: Please wait. [ 67.657374][ T4183] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 67.681359][ T4459] XFS (loop4): Quotacheck: Done. [ 67.716799][ T7] em28xx 5-1:0.89: Freeing device [ 67.762617][ T4250] usb 4-1: USB disconnect, device number 2 [ 67.909422][ T4475] loop0: detected capacity change from 0 to 2048 [ 67.984047][ T4471] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 67.996352][ T4471] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 68.008343][ T4475] loop0: p2 < > p4 [ 68.027747][ T4475] loop0: p4 size 262144 extends beyond EOD, truncated [ 68.112967][ T4182] XFS (loop4): Unmounting Filesystem [ 68.311314][ T4487] loop3: detected capacity change from 0 to 512 [ 68.338114][ T4228] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.552906][ T4483] loop2: detected capacity change from 0 to 32768 [ 68.577991][ T4228] usb 1-1: Using ep0 maxpacket: 32 [ 68.619330][ T4483] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.70 (4483) [ 68.647773][ T4483] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 68.657712][ T4483] BTRFS info (device loop2): using free space tree [ 68.664610][ T4483] BTRFS info (device loop2): has skinny extents [ 68.704977][ T4483] BTRFS info (device loop2): enabling ssd optimizations [ 68.708531][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 68.723053][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 68.734423][ T4228] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.745105][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.760744][ T4228] usb 1-1: config 0 descriptor?? [ 68.780842][ T4479] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.822018][ T4483] BTRFS warning (device loop2): can't clear the free_space_tree,compat_ro:1 feature bits while mounted [ 68.822417][ T4228] hub 1-1:0.0: USB hub found [ 68.838027][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.038322][ T4228] hub 1-1:0.0: 1 port detected [ 69.121359][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 69.134590][ T4523] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.160169][ T4525] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.169770][ T4525] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.178538][ T4525] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.187251][ T4525] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.200681][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 69.209156][ T4523] CIFS mount error: No usable UNC path provided in device string! [ 69.209156][ T4523] [ 69.245200][ T4523] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 69.513279][ T1108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 69.529470][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.539536][ T1108] usb 5-1: Product: syz [ 69.543792][ T1108] usb 5-1: Manufacturer: syz [ 69.548602][ T1108] usb 5-1: SerialNumber: syz [ 69.555918][ T1108] usb 5-1: config 0 descriptor?? [ 69.649609][ T4549] loop3: detected capacity change from 0 to 256 [ 69.688941][ T4549] ======================================================= [ 69.688941][ T4549] WARNING: The mand mount option has been deprecated and [ 69.688941][ T4549] and is ignored by this kernel. Remove the mand [ 69.688941][ T4549] option from the mount to silence this warning. [ 69.688941][ T4549] ======================================================= [ 69.757287][ T4549] FAT-fs (loop3): Directory bread(block 64) failed [ 69.764434][ T4549] FAT-fs (loop3): Directory bread(block 65) failed [ 69.772741][ T4549] FAT-fs (loop3): Directory bread(block 66) failed [ 69.780461][ T4549] FAT-fs (loop3): Directory bread(block 67) failed [ 69.787190][ T4549] FAT-fs (loop3): Directory bread(block 68) failed [ 69.794275][ T4549] FAT-fs (loop3): Directory bread(block 69) failed [ 69.803310][ T4549] FAT-fs (loop3): Directory bread(block 70) failed [ 69.812725][ T4549] FAT-fs (loop3): Directory bread(block 71) failed [ 69.818588][ T1108] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 69.820654][ T4549] FAT-fs (loop3): Directory bread(block 72) failed [ 69.834437][ T4549] FAT-fs (loop3): Directory bread(block 73) failed [ 69.870798][ T4228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.998038][ T4250] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 70.006823][ T7] usb 1-1: USB disconnect, device number 2 [ 70.238085][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.249260][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.259350][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.272436][ T4228] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.282078][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.300305][ T4228] usb 2-1: config 0 descriptor?? [ 70.725471][ T4520] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.749034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 70.789419][ T1108] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 70.802059][ T4228] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 70.811912][ T1108] usb 5-1: USB disconnect, device number 3 [ 70.870445][ T4228] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 71.088147][ T4520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.102405][ T4520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.113141][ T4520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.126472][ T4520] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.135732][ T4520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.152301][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.158973][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.171337][ T4520] usb 3-1: config 0 descriptor?? [ 71.379180][ T4571] loop4: detected capacity change from 0 to 512 [ 71.405360][ T4569] loop0: detected capacity change from 0 to 32768 [ 71.424000][ T4571] EXT4-fs (loop4): Ignoring removed oldalloc option [ 71.435608][ T4571] EXT4-fs (loop4): 1 truncate cleaned up [ 71.441720][ T4571] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 71.489010][ T4569] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 71.507590][ T4569] JBD2: Ignoring recovery information on journal [ 71.548029][ T1108] Bluetooth: hci4: command 0x0405 tx timeout [ 71.573294][ T4569] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 71.662570][ T4520] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 71.680689][ T4569] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 71.697521][ T4569] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 71.707536][ T4569] OCFS2: File system is now read-only. [ 71.713997][ T4569] (syz.0.90,4569,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 71.722013][ T4569] (syz.0.90,4569,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 71.729699][ T4569] (syz.0.90,4569,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 71.738070][ T4569] (syz.0.90,4569,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 71.746337][ T4569] (syz.0.90,4569,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 71.754447][ T4569] (syz.0.90,4569,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 71.762502][ T4569] (syz.0.90,4569,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 71.771114][ T4569] (syz.0.90,4569,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 71.779658][ T4569] (syz.0.90,4569,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 71.791289][ T4569] (syz.0.90,4569,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 71.800353][ T4569] (syz.0.90,4569,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 71.809537][ T4569] (syz.0.90,4569,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 71.818926][ T4569] (syz.0.90,4569,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 71.828024][ T4569] (syz.0.90,4569,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 71.836992][ T4569] (syz.0.90,4569,1):ocfs2_mknod:357 ERROR: status = -30 [ 71.847305][ T4569] (syz.0.90,4569,1):ocfs2_mknod:502 ERROR: status = -30 [ 71.854528][ T4569] (syz.0.90,4569,1):ocfs2_mkdir:659 ERROR: status = -30 [ 72.083330][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 72.170380][ T4579] loop3: detected capacity change from 0 to 32768 [ 72.278492][ T4579] XFS (loop3): Mounting V5 Filesystem [ 72.291533][ T4520] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.312964][ T4520] usb 3-1: USB disconnect, device number 2 [ 72.404726][ T4579] XFS (loop3): Ending clean mount [ 72.456158][ T4579] XFS (loop3): Quotacheck needed: Please wait. [ 72.516191][ T4579] XFS (loop3): Quotacheck: Done. [ 72.523862][ T4598] fido_id[4598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 72.693194][ T4184] XFS (loop3): Unmounting Filesystem [ 72.857448][ T4600] Zero length message leads to an empty skb [ 73.049228][ T4228] usb 2-1: USB disconnect, device number 3 [ 73.171531][ T4609] loop1: detected capacity change from 0 to 128 [ 73.239466][ T4611] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.279574][ T4611] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.300198][ T4609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.447036][ T4618] loop3: detected capacity change from 0 to 128 [ 73.456746][ T4609] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.536030][ T4618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.555202][ T4618] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.668325][ T4618] EXT4-fs (loop3): shut down requested (0) [ 73.821686][ T4616] loop4: detected capacity change from 0 to 32768 [ 73.872972][ T4616] (syz.4.104,4616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.924406][ T4616] (syz.4.104,4616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.074306][ T4616] JBD2: Ignoring recovery information on journal [ 74.161784][ T4616] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 74.195951][ T4631] loop0: detected capacity change from 0 to 4096 [ 74.289520][ T4631] ntfs: volume version 3.1. [ 74.349680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 74.616643][ T4182] ocfs2: Unmounting device (7,4) on (node local) [ 75.032200][ T4654] device batadv_slave_1 entered promiscuous mode [ 75.051738][ T4654] device bridge0 entered promiscuous mode [ 75.066141][ T4653] device bridge0 left promiscuous mode [ 75.082654][ T4653] device batadv_slave_1 left promiscuous mode [ 75.617980][ T4521] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.868036][ T4521] usb 1-1: Using ep0 maxpacket: 32 [ 75.988243][ T4521] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 75.997318][ T4521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.048725][ T4521] usb 1-1: config 0 descriptor?? [ 76.147810][ T4685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.308371][ T4521] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 76.330631][ T4521] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.378594][ T4521] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 76.390180][ T4521] usb 1-1: media controller created [ 76.453069][ T4521] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.471057][ T4691] process 'syz.1.132' launched '/dev/fd/6' with NULL argv: empty string added [ 76.948024][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.107935][ T4520] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.359189][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.370051][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.468201][ T4228] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.472752][ T4520] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.482417][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 77.497335][ T4520] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.506778][ T4228] usb 3-1: SerialNumber: syz [ 77.507113][ T4521] stb0899_attach: Driver disabled by Kconfig [ 77.523264][ T4520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.531506][ T4521] az6027: no front-end attached [ 77.531506][ T4521] [ 77.545371][ T4520] usb 4-1: config 0 descriptor?? [ 77.588063][ T4521] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 77.597408][ T4520] pwc: Askey VC010 type 2 USB webcam detected. [ 77.610513][ T4521] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 77.626561][ T4521] dvb-usb: schedule remote query interval to 400 msecs. [ 77.634650][ T4521] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 77.791284][ T4228] usb 3-1: 0:2 : does not exist [ 77.816559][ T4228] usb 3-1: unit 5: unexpected type 0x0a [ 77.833999][ T4521] usb 1-1: USB disconnect, device number 3 [ 77.850804][ T4228] usb 3-1: USB disconnect, device number 3 [ 77.917022][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.935814][ T4521] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 78.028217][ T4520] pwc: recv_control_msg error -32 req 02 val 2b00 [ 78.037684][ T4727] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.068052][ T4520] pwc: recv_control_msg error -32 req 02 val 2700 [ 78.108236][ T4520] pwc: recv_control_msg error -32 req 02 val 2c00 [ 78.148013][ T4520] pwc: recv_control_msg error -32 req 04 val 1000 [ 78.371194][ T4735] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 78.395536][ T4735] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.408029][ T4520] pwc: recv_control_msg error -71 req 04 val 1400 [ 78.448874][ T4520] pwc: recv_control_msg error -71 req 02 val 2000 [ 78.468781][ T4520] pwc: recv_control_msg error -71 req 02 val 2100 [ 78.489064][ T4520] pwc: recv_control_msg error -71 req 04 val 1500 [ 78.508176][ T4520] pwc: recv_control_msg error -71 req 02 val 2500 [ 78.527992][ T4520] pwc: recv_control_msg error -71 req 02 val 2400 [ 78.550559][ T4520] pwc: recv_control_msg error -71 req 02 val 2600 [ 78.567988][ T4520] pwc: recv_control_msg error -71 req 02 val 2900 [ 78.588107][ T4520] pwc: recv_control_msg error -71 req 02 val 2800 [ 78.603888][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.611710][ T4520] pwc: recv_control_msg error -71 req 04 val 1100 [ 78.638142][ T4520] pwc: recv_control_msg error -71 req 04 val 1200 [ 78.670478][ T4520] pwc: Registered as video103. [ 78.677684][ T4520] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 78.703496][ T4753] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 78.710340][ T4521] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 78.722848][ T4753] netlink: 'syz.0.153': attribute type 4 has an invalid length. [ 78.731264][ T4753] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.153'. [ 78.741083][ T4520] usb 4-1: USB disconnect, device number 3 [ 78.834151][ T4756] loop0: detected capacity change from 0 to 256 [ 78.853692][ T4758] loop4: detected capacity change from 0 to 764 [ 78.868010][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 78.923110][ T4756] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 78.988173][ T1108] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 79.007098][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.051700][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.111994][ T4521] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.132378][ T4521] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.238077][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.252257][ T4766] loop0: detected capacity change from 0 to 512 [ 79.263173][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.277942][ T1108] usb 2-1: Product: syz [ 79.287683][ T1108] usb 2-1: Manufacturer: syz [ 79.298046][ T4766] EXT4-fs (loop0): Ignoring removed bh option [ 79.307561][ T1108] usb 2-1: SerialNumber: syz [ 79.312830][ T4521] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.332059][ T4521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.357845][ T4521] usb 3-1: Product: syz [ 79.366888][ T4521] usb 3-1: Manufacturer: syz [ 79.395136][ T4766] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 79.415146][ T4521] usb 3-1: SerialNumber: syz [ 79.440634][ T4766] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.746777][ T4774] loop0: detected capacity change from 0 to 4096 [ 79.767988][ T4774] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 79.808286][ T1108] usb 2-1: 0:2 : does not exist [ 79.933253][ T4776] loop4: detected capacity change from 0 to 512 [ 80.064398][ T4776] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.090255][ T4776] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.141975][ T4776] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 80.173153][ T4776] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 80.211308][ T4776] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.211308][ T4776] [ 80.222043][ T4776] EXT4-fs (loop4): Total free blocks count 0 [ 80.228827][ T4776] EXT4-fs (loop4): Free/Dirty block details [ 80.235181][ T4776] EXT4-fs (loop4): free_blocks=65281 [ 80.240854][ T4776] EXT4-fs (loop4): dirty_blocks=1 [ 80.246029][ T4776] EXT4-fs (loop4): Block reservation details [ 80.276809][ T4776] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 80.301825][ T1108] usb 2-1: USB disconnect, device number 4 [ 80.368159][ T4521] usb 3-1: 0:2 : does not exist [ 80.402947][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.424334][ T4521] usb 3-1: USB disconnect, device number 4 [ 80.424509][ T4775] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 80.515971][ T4799] loop3: detected capacity change from 0 to 16 [ 80.516546][ T4775] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.516546][ T4775] [ 80.587244][ T4799] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.608861][ T26] audit: type=1800 audit(1771265624.148:3): pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.169" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 80.625702][ T4799] attempt to access beyond end of device [ 80.625702][ T4799] loop3: rw=0, want=34359738367, limit=16 [ 80.700655][ T4172] udevd[4172]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 80.863163][ T4814] device syzkaller1 entered promiscuous mode [ 81.136747][ T4829] loop4: detected capacity change from 0 to 512 [ 81.146878][ T4829] EXT4-fs (loop4): Ignoring removed nobh option [ 81.167097][ T4829] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.199546][ T4829] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.183: iget: bad extra_isize 90 (inode size 256) [ 81.221341][ T4829] EXT4-fs (loop4): Remounting filesystem read-only [ 81.230116][ T4829] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.183: error while reading EA inode 11 err=-117 [ 81.244042][ T4829] EXT4-fs (loop4): Remounting filesystem read-only [ 81.251304][ T4829] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.183: iget: bad extra_isize 90 (inode size 256) [ 81.269731][ T4829] EXT4-fs (loop4): Remounting filesystem read-only [ 81.277323][ T4829] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.183: error while reading EA inode 11 err=-117 [ 81.293188][ T4829] EXT4-fs (loop4): Remounting filesystem read-only [ 81.300063][ T4829] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.183: iget: bad extra_isize 90 (inode size 256) [ 81.314299][ T4829] EXT4-fs (loop4): Remounting filesystem read-only [ 81.321140][ T4829] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.183: error while reading EA inode 18 err=-117 [ 81.334111][ T4829] EXT4-fs (loop4): Remounting filesystem read-only [ 81.335842][ T4235] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 81.353303][ T4829] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.183: iget: bad extra_isize 90 (inode size 256) [ 81.368097][ T4829] EXT4-fs (loop4): Remounting filesystem read-only [ 81.374659][ T4829] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.183: error while reading EA inode 18 err=-117 [ 81.392034][ T23] cfg80211: failed to load regulatory.db [ 81.395495][ T4829] EXT4-fs (loop4): Remounting filesystem read-only [ 81.415583][ T4829] EXT4-fs (loop4): 1 orphan inode deleted [ 81.430828][ T4829] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,nombcache,nolazytime,nobh,. Quota mode: none. [ 81.718567][ T4235] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.728883][ T4235] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.808160][ T4235] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.817323][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.825625][ T4235] usb 2-1: SerialNumber: syz [ 81.890590][ T4846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.186'. [ 82.093308][ T4858] Illegal XDP return value 4294967274, expect packet loss! [ 82.120845][ T4235] usb 2-1: 0:2 : does not exist [ 82.135763][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 82.163823][ T4235] usb 2-1: USB disconnect, device number 5 [ 82.254543][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.279936][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.291324][ T4866] loop3: detected capacity change from 0 to 4096 [ 82.325074][ T4866] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 82.420752][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.481252][ T4870] kvm [4869]: vcpu0, guest rIP: 0x9130 disabled perfctr wrmsr: 0xc1 data 0xe00020ff [ 82.491749][ T4866] EXT4-fs (loop3): Test dummy encryption mode enabled [ 82.495042][ T4870] kvm [4869]: vcpu0, guest rIP: 0x9130 disabled perfctr wrmsr: 0xc2 data 0xe00020ff [ 82.504612][ T4866] EXT4-fs (loop3): Ignoring removed orlov option [ 82.513274][ T4870] kvm [4869]: vcpu0, guest rIP: 0x9130 disabled perfctr wrmsr: 0xc1 data 0xe00020ff [ 82.525966][ T4870] kvm [4869]: vcpu0, guest rIP: 0x9130 disabled perfctr wrmsr: 0xc2 data 0xe00020ff [ 82.548116][ T4866] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 82.813984][ T4884] loop3: detected capacity change from 0 to 512 [ 82.837728][ T4884] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 82.926006][ T4884] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 82.976850][ T4884] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.063275][ T4895] loop0: detected capacity change from 0 to 4096 [ 83.235761][ T4906] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.235761][ T4906] The task syz.1.204 (4906) triggered the difference, watch for misbehavior. [ 83.373013][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 83.777133][ T26] audit: type=1800 audit(1771265627.308:4): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.202" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 83.957773][ T4928] loop0: detected capacity change from 0 to 164 [ 84.050846][ T4932] netlink: 64595 bytes leftover after parsing attributes in process `syz.4.217'. [ 84.248395][ T4944] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 84.256086][ T4944] netlink: 'syz.2.223': attribute type 4 has an invalid length. [ 84.324779][ T4944] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.223'. [ 84.473447][ T4960] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 84.535444][ T4960] bond1: (slave gretap1): making interface the new active one [ 84.549549][ T4960] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 84.786469][ T4972] Bluetooth: (null): Too short H5 packet [ 85.094836][ T4966] loop1: detected capacity change from 0 to 40427 [ 85.147962][ T4966] F2FS-fs (loop1): invalid crc value [ 85.192476][ T4966] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.307423][ T4992] loop0: detected capacity change from 0 to 2048 [ 85.344869][ T4966] F2FS-fs (loop1): Start checkpoint disabled! [ 85.415511][ T4992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.438196][ T4966] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 85.593853][ T4966] attempt to access beyond end of device [ 85.593853][ T4966] loop1: rw=2049, want=45192, limit=40427 [ 85.847166][ T395] attempt to access beyond end of device [ 85.847166][ T395] loop1: rw=1, want=45200, limit=40427 [ 85.915397][ T395] attempt to access beyond end of device [ 85.915397][ T395] loop1: rw=2049, want=40976, limit=40427 [ 85.922504][ T5004] IPVS: nq: FWM 3 0x00000003 - no destination available [ 86.156122][ T5014] loop0: detected capacity change from 0 to 512 [ 86.253877][ T5020] loop3: detected capacity change from 0 to 512 [ 86.299620][ T5014] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 86.330061][ T5023] loop4: detected capacity change from 0 to 512 [ 86.359728][ T5014] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.392360][ T5020] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.420455][ T5023] EXT4-fs (loop4): Ignoring removed oldalloc option [ 86.443914][ T5020] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.455047][ T5023] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.574148][ T5023] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.259: Parent and EA inode have the same ino 15 [ 86.630531][ T5023] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.259: Parent and EA inode have the same ino 15 [ 86.660288][ T5023] EXT4-fs (loop4): 1 orphan inode deleted [ 86.706440][ T5023] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue. Quota mode: none. [ 86.814208][ T5041] netlink: 27 bytes leftover after parsing attributes in process `syz.2.266'. [ 86.837323][ T5023] EXT4-fs (loop4): shut down requested (1) [ 87.029510][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.038174][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.183173][ T5050] device bridge_slave_1 left promiscuous mode [ 87.201284][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.231826][ T5050] device bridge_slave_0 left promiscuous mode [ 87.239038][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.398107][ T4250] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 87.435601][ T5063] capability: warning: `syz.3.273' uses deprecated v2 capabilities in a way that may be insecure [ 87.496168][ T5051] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.875057][ T4250] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 87.904219][ T4250] usb 5-1: can't read configurations, error -71 [ 88.348713][ T5089] loop0: detected capacity change from 0 to 128 [ 88.412266][ T5089] EXT4-fs (loop0): Ignoring removed nobh option [ 88.448985][ T5089] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 88.469639][ T5089] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.869111][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 89.322590][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 89.374095][ T5124] loop0: detected capacity change from 0 to 512 [ 89.410093][ T5124] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.426854][ T5124] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 89.428164][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.579839][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 89.586085][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 89.738034][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 89.878609][ T13] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 89.893202][ T13] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 89.904449][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 89.919855][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.933235][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.946491][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 89.963356][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 89.973826][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.987334][ T13] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 89.996686][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.012885][ T13] usb 5-1: config 0 descriptor?? [ 90.038613][ T5114] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.094888][ T5136] user requested TSC rate below hardware speed [ 90.288781][ T13] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 90.342623][ T5144] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 90.358414][ T5144] netlink: 'syz.1.305': attribute type 4 has an invalid length. [ 90.366166][ T5144] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.305'. [ 90.519062][ T13] usb 5-1: USB disconnect, device number 6 [ 90.537930][ C0] usblp0: nonzero read bulk status received: -108 [ 90.584295][ T5154] loop1: detected capacity change from 0 to 4096 [ 90.695731][ T5157] loop0: detected capacity change from 0 to 2048 [ 90.704596][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 90.717897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 90.738174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 90.800253][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 90.810280][ T5157] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000002000,. Quota mode: writeback. [ 90.828531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 90.858064][ T5157] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.950996][ T5157] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 91.051157][ T5114] usblp0: removed [ 91.337023][ T5169] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 91.345440][ T5169] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.493025][ T5179] ubi31: attaching mtd0 [ 91.498568][ T5179] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 91.538042][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.629212][ T4521] Bluetooth: hci5: command 0x1001 tx timeout [ 91.635362][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 91.755281][ T5192] syz.2.323 sent an empty control message without MSG_MORE. [ 91.958551][ T7] usb 5-1: config 0 has no interfaces? [ 92.158130][ T7] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 92.177719][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.207815][ T7] usb 5-1: Product: syz [ 92.222573][ T7] usb 5-1: Manufacturer: syz [ 92.227196][ T7] usb 5-1: SerialNumber: syz [ 92.249173][ T7] usb 5-1: config 0 descriptor?? [ 92.652468][ T7] usb 5-1: USB disconnect, device number 7 [ 93.238109][ T4235] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.618072][ T4235] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 93.631312][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.646266][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.661215][ T4235] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.675547][ T4520] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.687097][ T4235] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.697764][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.720471][ T4235] usb 1-1: config 0 descriptor?? [ 93.728895][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 93.877961][ T4521] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.038165][ T4520] usb 5-1: config index 0 descriptor too short (expected 65293, got 45) [ 94.117996][ T4521] usb 2-1: Using ep0 maxpacket: 8 [ 94.200268][ T4235] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 94.207826][ T4520] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 94.216964][ T4520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.226862][ T4235] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 94.236370][ T4520] usb 5-1: Product: syz [ 94.245161][ T4520] usb 5-1: Manufacturer: syz [ 94.250139][ T4235] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 94.265053][ T4520] usb 5-1: SerialNumber: syz [ 94.398067][ T4521] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 94.407310][ T4521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.415439][ T4521] usb 2-1: Product: syz [ 94.419727][ T4521] usb 2-1: Manufacturer: syz [ 94.424331][ T4521] usb 2-1: SerialNumber: syz [ 94.443297][ T4521] usb 2-1: config 0 descriptor?? [ 94.464365][ T5269] overlayfs: upper fs does not support file handles, falling back to index=off. [ 94.490702][ T4521] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 94.526873][ T4235] usb 1-1: USB disconnect, device number 4 [ 94.758112][ T4520] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 95.076983][ T5273] loop0: detected capacity change from 0 to 256 [ 95.107192][ T5273] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.118655][ T5273] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 95.132874][ T5273] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 95.480145][ T4520] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 95.509816][ T4520] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 95.521755][ T4520] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 95.548822][ T4520] lan78xx: probe of 5-1:1.0 failed with error -71 [ 95.575403][ T4520] usb 5-1: USB disconnect, device number 8 [ 95.591886][ T5289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 95.631694][ T5289] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 95.643996][ T5289] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 96.038042][ T4521] gspca_sonixj: i2c_w8 err -71 [ 96.057618][ T5317] netlink: 104 bytes leftover after parsing attributes in process `syz.4.367'. [ 96.158074][ T4521] sonixj: probe of 2-1:0.0 failed with error -71 [ 96.188584][ T4521] usb 2-1: USB disconnect, device number 6 [ 96.833540][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 96.868029][ T4521] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 96.994414][ T5354] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.014527][ T5354] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.040787][ T5354] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 97.050012][ T5354] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 97.060186][ T5354] overlayfs: d_ino too big (99, ino=9223372036854776370, xinobits=3) [ 97.068798][ T5354] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 97.077767][ T5354] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 97.086995][ T5354] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 97.095627][ T5354] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 97.098769][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.114069][ T5354] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 97.124534][ T5354] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 97.136968][ T5354] overlayfs: d_ino too big (kernel, ino=4611686018427389040, xinobits=3) [ 97.228951][ T5359] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 97.248498][ T4521] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.256450][ T5359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.259987][ T4521] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 97.278393][ T4521] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.285034][ T4521] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 97.294418][ T4521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.314023][ T4521] usb 2-1: config 0 descriptor?? [ 97.323434][ T5359] bond1: (slave gretap1): making interface the new active one [ 97.333247][ T5359] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 97.342549][ T5336] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.343614][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 97.369364][ T5359] syz.2.383 (5359) used greatest stack depth: 20176 bytes left [ 97.478138][ T1108] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 97.489709][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.501397][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.511384][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 97.524586][ T4250] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 97.608089][ T1108] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 97.617498][ T1108] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 97.626644][ T1108] usb 1-1: Manufacturer: syz [ 97.648978][ T1108] usb 1-1: config 0 descriptor?? [ 97.783096][ T5370] capability: warning: `syz.2.387' uses 32-bit capabilities (legacy support in use) [ 97.788279][ T4250] usb 5-1: Using ep0 maxpacket: 8 [ 97.819424][ T5373] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 97.830191][ T4521] wacom 0003:056A:00E5.0005: unknown main item tag 0x0 [ 97.837107][ T4521] wacom 0003:056A:00E5.0005: unknown main item tag 0x0 [ 97.844394][ T4521] wacom 0003:056A:00E5.0005: unknown main item tag 0x0 [ 97.852036][ T4521] wacom 0003:056A:00E5.0005: unknown main item tag 0x0 [ 97.859167][ T4521] wacom 0003:056A:00E5.0005: unknown main item tag 0x0 [ 97.872149][ T5373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.891695][ T4521] wacom 0003:056A:00E5.0005: hidraw0: USB HID v0.03 Device [HID 056a:00e5] on usb-dummy_hcd.1-1/input0 [ 97.915278][ T5375] bond2: (slave dummy0): making interface the new active one [ 97.925381][ T5375] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 97.939115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 98.052202][ T4521] usb 2-1: USB disconnect, device number 7 [ 98.070099][ T5380] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 98.120391][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 98.143906][ T5383] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 98.153284][ T1108] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 98.160784][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 98.165954][ T1108] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 98.172012][ T4250] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 98.189561][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.198070][ T4250] usb 5-1: Product: syz [ 98.202619][ T4250] usb 5-1: Manufacturer: syz [ 98.207333][ T4250] usb 5-1: SerialNumber: syz [ 98.214143][ T4250] usb 5-1: config 0 descriptor?? [ 98.221681][ T1108] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 98.240408][ T5380] bond3: (slave ip6gretap1): making interface the new active one [ 98.290951][ T5380] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 98.317279][ T5380] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 98.325296][ T5380] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 98.450174][ T4521] usb 1-1: USB disconnect, device number 5 [ 98.478200][ T4250] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 98.634216][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 98.851201][ T5416] device syzkaller1 entered promiscuous mode [ 99.171556][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 99.268865][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'. [ 99.453051][ T5442] loop1: detected capacity change from 0 to 512 [ 99.579161][ T5442] EXT4-fs (loop1): Ignoring removed bh option [ 99.605219][ T5442] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 99.668157][ T5442] EXT4-fs (loop1): 1 truncate cleaned up [ 99.673839][ T5442] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 99.768224][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.788254][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.796582][ T7] usb 4-1: Product: syz [ 99.800933][ T7] usb 4-1: Manufacturer: syz [ 99.805818][ T7] usb 4-1: SerialNumber: syz [ 99.814558][ T7] usb 4-1: config 0 descriptor?? [ 100.068024][ T4250] usb write operation failed. (-71) [ 100.120051][ T4250] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 100.148273][ T7] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 100.198595][ T4250] dvbdev: DVB: registering new adapter (Terratec H7) [ 100.227978][ T4250] usb 5-1: media controller created [ 100.278392][ T4250] usb read operation failed. (-71) [ 100.308063][ T4250] usb write operation failed. (-71) [ 100.320164][ T4250] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 100.358011][ T4250] usb 5-1: USB disconnect, device number 9 [ 100.480901][ T5460] overlayfs: upper fs does not support file handles, falling back to index=off. [ 100.786233][ T5468] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.958085][ T4521] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 100.977124][ T5473] netlink: 104 bytes leftover after parsing attributes in process `syz.2.426'. [ 101.328046][ T4521] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 101.336377][ T4521] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 101.338914][ T7] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 101.354338][ T4250] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.378109][ T4228] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 101.390558][ T7] usb 4-1: USB disconnect, device number 4 [ 101.508018][ T4521] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 101.523604][ T4521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.532156][ T4521] usb 5-1: Product: syz [ 101.536401][ T4521] usb 5-1: Manufacturer: syz [ 101.546217][ T4521] usb 5-1: SerialNumber: syz [ 101.557211][ T4521] usb 5-1: config 0 descriptor?? [ 101.601655][ T4521] hub 5-1:0.0: bad descriptor, ignoring hub [ 101.610538][ T4521] hub: probe of 5-1:0.0 failed with error -5 [ 101.627995][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 101.769656][ T4250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.787909][ T4250] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 101.798092][ T4228] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 101.828066][ T4228] usb 3-1: config 1 has no interface number 0 [ 101.853948][ T5466] loop4: detected capacity change from 0 to 512 [ 101.859810][ T4250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 101.870344][ T4228] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 101.891182][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.899898][ T4250] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 101.943948][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 101.983817][ T4228] rndis_wlan 3-1:1.236: More than one union descriptor, skipping ... [ 102.028634][ T5466] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.424: Invalid inode bitmap blk 4 in block_group 0 [ 102.054354][ T4228] usb 3-1: bad CDC descriptors [ 102.063825][ T5479] loop0: detected capacity change from 0 to 32768 [ 102.083926][ T5466] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 102.104830][ T4228] rndis_host 3-1:1.236: More than one union descriptor, skipping ... [ 102.113542][ T4250] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 102.142566][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.156429][ T4228] usb 3-1: bad CDC descriptors [ 102.161709][ T4250] usb 2-1: Product: syz [ 102.165956][ T4250] usb 2-1: Manufacturer: syz [ 102.181576][ T4228] cdc_acm 3-1:1.236: More than one union descriptor, skipping ... [ 102.193753][ T4250] usb 2-1: SerialNumber: syz [ 102.224069][ T4250] usb 2-1: config 0 descriptor?? [ 102.230433][ T4228] usb 3-1: USB disconnect, device number 5 [ 102.258376][ T4520] usb 5-1: USB disconnect, device number 10 [ 102.302523][ T4250] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 102.324376][ T4250] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 102.357489][ T5479] XFS (loop0): Mounting V5 Filesystem [ 102.408165][ T5479] XFS (loop0): Ending clean mount [ 102.515081][ T4183] XFS (loop0): Unmounting Filesystem [ 102.524723][ T4250] usb 2-1: USB disconnect, device number 8 [ 102.554253][ T4250] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 102.572361][ T4250] omninet 2-1:0.0: device disconnected [ 102.579144][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 102.923259][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 103.008231][ T7] usb 4-1: config 3 has an invalid interface number: 47 but max is 1 [ 103.026985][ T7] usb 4-1: config 3 has no interface number 0 [ 103.037952][ T4521] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.046328][ T7] usb 4-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.071107][ T7] usb 4-1: config 3 interface 1 has no altsetting 0 [ 103.077751][ T7] usb 4-1: config 3 interface 47 has no altsetting 0 [ 103.163036][ T5496] loop4: detected capacity change from 0 to 32768 [ 103.246425][ T5496] XFS (loop4): Mounting V5 Filesystem [ 103.287998][ T4521] usb 3-1: Using ep0 maxpacket: 8 [ 103.299157][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 103.321466][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.332665][ T7] usb 4-1: Product: syz [ 103.336869][ T7] usb 4-1: Manufacturer: syz [ 103.344586][ T7] usb 4-1: SerialNumber: syz [ 103.365296][ T5496] XFS (loop4): Ending clean mount [ 103.375556][ T5496] XFS (loop4): Quotacheck needed: Please wait. [ 103.408293][ T4521] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 103.421822][ T4521] usb 3-1: config 0 has no interface number 0 [ 103.429252][ T4521] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 103.442466][ T4521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.458112][ T4521] usb 3-1: config 0 descriptor?? [ 103.485958][ T5496] XFS (loop4): Quotacheck: Done. [ 103.499191][ T4521] ftdi_sio 3-1:0.130: FTDI USB Serial Device converter detected [ 103.507663][ T4521] usb 3-1: Detected FT-X [ 103.569292][ T5496] XFS (loop4): Unmounting Filesystem [ 103.704510][ T7] usb 4-1: selecting invalid altsetting 0 [ 103.716845][ T5497] udc-core: couldn't find an available UDC or it's busy [ 103.739883][ T5497] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.749942][ T5497] udc-core: couldn't find an available UDC or it's busy [ 103.763068][ T5497] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.853827][ T7] usb 4-1: USB disconnect, device number 5 [ 103.868199][ T4521] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 103.889825][ T4521] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 103.952691][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.958260][ T4521] ftdi_sio 3-1:0.130: GPIO initialisation failed: -71 [ 103.966750][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.976095][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.988332][ T4521] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 104.024774][ T4521] usb 3-1: USB disconnect, device number 6 [ 104.050483][ T4521] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.077483][ T4521] ftdi_sio 3-1:0.130: device disconnected [ 104.222729][ T5525] loop0: detected capacity change from 0 to 512 [ 104.277268][ T5525] EXT4-fs (loop0): Ignoring removed oldalloc option [ 104.343844][ T5525] EXT4-fs (loop0): 1 truncate cleaned up [ 104.349678][ T5525] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 104.615710][ T5536] device batadv_slave_0 entered promiscuous mode [ 104.657806][ T5535] device batadv_slave_0 left promiscuous mode [ 104.665730][ T5539] netlink: 7 bytes leftover after parsing attributes in process `syz.3.445'. [ 104.797935][ T1108] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 104.953312][ T5554] loop1: detected capacity change from 0 to 1024 [ 105.070492][ T5554] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.451: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 105.122735][ T5554] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.451: Bad quota inode: 4, type: 1 [ 105.137427][ T5554] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.167318][ T5554] EXT4-fs (loop1): mount failed [ 105.177375][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 105.204295][ T1108] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 105.232050][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.266909][ T1108] usb 3-1: config 0 descriptor?? [ 105.298176][ T5532] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.772327][ T1108] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 105.981375][ T4250] usb 3-1: USB disconnect, device number 7 [ 106.175013][ T5584] overlayfs: failed to clone upperpath [ 106.269089][ T5581] loop1: detected capacity change from 0 to 8192 [ 106.296356][ T5586] fuse: Bad value for 'fd' [ 106.325301][ T5581] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 106.378477][ T5581] REISERFS (device loop1): using ordered data mode [ 106.385089][ T5581] reiserfs: using flush barriers [ 106.426294][ T5581] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.453775][ T5581] REISERFS (device loop1): checking transaction log (loop1) [ 106.690043][ T5581] REISERFS (device loop1): Using tea hash to sort names [ 106.708943][ T5581] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 106.742615][ T5581] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 106.915267][ T5601] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~  [ 106.938358][ T5581] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 107.010147][ T5602] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 107.699169][ T5619] loop1: detected capacity change from 0 to 8192 [ 107.964537][ T4185] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 108.008764][ T4185] FAT-fs (loop1): Filesystem has been set read-only [ 108.658054][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.928019][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 108.963631][ T5637] loop1: detected capacity change from 0 to 32768 [ 109.001046][ T5637] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.485 (5637) [ 109.056553][ T5637] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.072214][ T5637] BTRFS info (device loop1): setting nodatacow, compression disabled [ 109.096221][ T5637] BTRFS info (device loop1): turning on flush-on-commit [ 109.112861][ T5637] BTRFS info (device loop1): using free space tree [ 109.124053][ T5637] BTRFS info (device loop1): has skinny extents [ 109.253164][ T7] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 109.262490][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.271201][ T7] usb 4-1: Product: syz [ 109.275468][ T7] usb 4-1: Manufacturer: syz [ 109.280738][ T7] usb 4-1: SerialNumber: syz [ 109.293098][ T7] usb 4-1: config 0 descriptor?? [ 109.318664][ T5652] loop0: detected capacity change from 0 to 40427 [ 109.349344][ T7] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 109.364010][ T5652] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 109.384585][ T5637] BTRFS info (device loop1): enabling ssd optimizations [ 109.438108][ T5652] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.491172][ T5652] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.600091][ T5652] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.617481][ T5652] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.403781][ T5692] overlayfs: failed to resolve './file0': -2 [ 110.641242][ T7] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 110.847246][ T4250] usb 4-1: USB disconnect, device number 6 [ 110.869082][ T4250] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 110.889517][ T4250] ssu100 4-1:0.0: device disconnected [ 111.018022][ T4228] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.045006][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 111.318168][ T4228] usb 1-1: Using ep0 maxpacket: 8 [ 111.468157][ T4228] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.484029][ T4228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.498391][ T4228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.514810][ T4228] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.533877][ T4228] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.543507][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.622252][ T5738] loop3: detected capacity change from 0 to 32768 [ 111.691084][ T5738] XFS (loop3): Mounting V5 Filesystem [ 111.727461][ T5738] XFS (loop3): Ending clean mount [ 111.737218][ T5738] XFS (loop3): Quotacheck needed: Please wait. [ 111.778556][ T5738] XFS (loop3): Quotacheck: Done. [ 111.815612][ T5738] XFS (loop3): Unmounting Filesystem [ 111.828186][ T4228] usb 1-1: GET_CAPABILITIES returned 0 [ 111.833899][ T4228] usbtmc 1-1:16.0: can't read capabilities [ 112.055466][ T4250] usb 1-1: USB disconnect, device number 6 [ 112.625456][ T5770] overlayfs: failed to clone upperpath [ 112.981002][ T5688] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.565896][ T5768] sched: RT throttling activated [ 113.565955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.887945][ T5688] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.948476][ T5688] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 113.956125][ T5688] usb 2-1: can't read configurations, error -71 [ 114.194172][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 114.650766][ T5688] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 114.958162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 114.967177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 115.008318][ T5688] usb 2-1: not running at top speed; connect to a high speed hub [ 115.108748][ T5688] usb 2-1: config 3 has an invalid interface number: 47 but max is 1 [ 115.147305][ T5688] usb 2-1: config 3 has no interface number 0 [ 115.225454][ T5688] usb 2-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.348688][ T5688] usb 2-1: config 3 interface 1 has no altsetting 0 [ 115.422576][ T5688] usb 2-1: config 3 interface 47 has no altsetting 0 [ 115.648793][ T5688] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 115.685810][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.769389][ T5688] usb 2-1: Product: syz [ 115.831239][ T5688] usb 2-1: Manufacturer: syz [ 115.835903][ T5688] usb 2-1: SerialNumber: syz [ 116.204504][ T5688] usb 2-1: selecting invalid altsetting 0 [ 116.293331][ T5688] usb 2-1: USB disconnect, device number 10 [ 117.139470][ T5863] loop1: detected capacity change from 0 to 512 [ 117.294871][ T5863] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.002323][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 118.247914][ T4511] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.262505][ T5688] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 118.509792][ T5688] usb 2-1: Using ep0 maxpacket: 32 [ 118.628252][ T5688] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 118.646446][ T5688] usb 2-1: config 0 has no interface number 0 [ 118.667411][ T5688] usb 2-1: config 0 interface 12 has no altsetting 0 [ 118.788044][ T4511] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.801719][ T4511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.828043][ T4511] usb 1-1: Product: syz [ 118.838186][ T5688] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 118.847576][ T4511] usb 1-1: Manufacturer: syz [ 118.856096][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.869267][ T4511] usb 1-1: SerialNumber: syz [ 118.905259][ T5688] usb 2-1: Product: syz [ 118.909555][ T5688] usb 2-1: Manufacturer: syz [ 118.914359][ T5688] usb 2-1: SerialNumber: syz [ 118.921432][ T5688] usb 2-1: config 0 descriptor?? [ 119.544983][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 119.889018][ T4228] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 120.038338][ T4511] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 120.045529][ T4511] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 120.208000][ T4228] usb 3-1: not running at top speed; connect to a high speed hub [ 120.288117][ T4228] usb 3-1: config 3 has an invalid interface number: 47 but max is 1 [ 120.296446][ T4228] usb 3-1: config 3 has no interface number 0 [ 120.302665][ T4228] usb 3-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.312685][ T4228] usb 3-1: config 3 interface 1 has no altsetting 0 [ 120.319578][ T4228] usb 3-1: config 3 interface 47 has no altsetting 0 [ 120.476673][ T4511] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 120.478604][ T4228] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 120.501050][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.509416][ T4228] usb 3-1: Product: syz [ 120.513670][ T4228] usb 3-1: Manufacturer: syz [ 120.518674][ T4228] usb 3-1: SerialNumber: syz [ 120.527004][ T4511] usb 1-1: USB disconnect, device number 7 [ 120.545439][ T4511] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 120.718140][ T5688] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 120.726430][ T5688] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 120.734101][ T5688] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 120.742037][ T5688] f81534: probe of 2-1:0.12 failed with error -71 [ 120.751852][ T5688] usb 2-1: USB disconnect, device number 11 [ 120.840859][ T4228] usb 3-1: selecting invalid altsetting 0 [ 120.905502][ T4228] usb 3-1: USB disconnect, device number 8 [ 121.162977][ T4446] udevd[4446]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.625964][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 123.027935][ T4228] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 123.357936][ T4228] usb 1-1: not running at top speed; connect to a high speed hub [ 123.442583][ T4228] usb 1-1: config 3 has an invalid interface number: 47 but max is 1 [ 123.462621][ T4228] usb 1-1: config 3 has no interface number 0 [ 123.468865][ T4228] usb 1-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.502581][ T4228] usb 1-1: config 3 interface 1 has no altsetting 0 [ 123.518036][ T4228] usb 1-1: config 3 interface 47 has no altsetting 0 [ 123.678082][ T4228] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 123.687174][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.707885][ T4228] usb 1-1: Product: syz [ 123.712178][ T4228] usb 1-1: Manufacturer: syz [ 123.716815][ T4228] usb 1-1: SerialNumber: syz [ 124.090311][ T4228] usb 1-1: selecting invalid altsetting 0 [ 124.173875][ T4228] usb 1-1: USB disconnect, device number 8 [ 124.470162][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.648960][ T6060] Bluetooth: hci0: invalid len left 7, exp >= 257 [ 124.742810][ T5688] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 124.840387][ T6076] netlink: 25 bytes leftover after parsing attributes in process `syz.3.638'. [ 124.868517][ T6076] netlink: 'syz.3.638': attribute type 4 has an invalid length. [ 125.008007][ T5688] usb 3-1: Using ep0 maxpacket: 32 [ 125.142756][ T5688] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 125.162768][ T5688] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 125.182869][ T5688] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 125.203127][ T5688] usb 3-1: config 1 has no interface number 0 [ 125.233315][ T5688] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.262637][ T5688] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 125.296393][ T5688] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 125.308048][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.364321][ T6079] loop1: detected capacity change from 0 to 40427 [ 125.393528][ T5688] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 125.401819][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 125.402376][ T6079] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.424954][ T6079] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.465904][ T6079] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.555010][ T6079] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.580938][ T6079] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.599057][ T5688] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 125.715185][ T6099] loop0: detected capacity change from 0 to 512 [ 125.763816][ T6079] attempt to access beyond end of device [ 125.763816][ T6079] loop1: rw=10241, want=45104, limit=40427 [ 125.788558][ T6079] attempt to access beyond end of device [ 125.788558][ T6079] loop1: rw=2049, want=45112, limit=40427 [ 125.857421][ T4185] attempt to access beyond end of device [ 125.857421][ T4185] loop1: rw=2049, want=40968, limit=40427 [ 125.875149][ T6099] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.887478][ T6099] ext4 filesystem being mounted at /126/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.998376][ T6099] [ 126.000825][ T6099] ====================================================== [ 126.007852][ T6099] WARNING: possible circular locking dependency detected [ 126.014894][ T6099] syzkaller #0 Not tainted [ 126.019314][ T6099] ------------------------------------------------------ [ 126.026345][ T6099] syz.0.644/6099 is trying to acquire lock: [ 126.032247][ T6099] ffff88805ecfda80 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_get+0xfc/0x800 [ 126.041247][ T6099] [ 126.041247][ T6099] but task is already holding lock: [ 126.048634][ T6099] ffff888078932bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2d7/0xe60 [ 126.058752][ T6099] [ 126.058752][ T6099] which lock already depends on the new lock. [ 126.058752][ T6099] [ 126.069164][ T6099] [ 126.069164][ T6099] the existing dependency chain (in reverse order) is: [ 126.078190][ T6099] [ 126.078190][ T6099] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 126.086755][ T6099] percpu_down_read+0x46/0x1b0 [ 126.092059][ T6099] ext4_writepages+0x20f/0x2df0 [ 126.097449][ T6099] do_writepages+0x476/0x6e0 [ 126.102573][ T6099] __writeback_single_inode+0x153/0xda0 [ 126.108676][ T6099] writeback_single_inode+0x3cb/0x8e0 [ 126.114586][ T6099] write_inode_now+0x23b/0x2c0 [ 126.119896][ T6099] iput+0x5ab/0x8a0 [ 126.124247][ T6099] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 126.130157][ T6099] ext4_xattr_block_set+0x4fd/0x2d20 [ 126.135993][ T6099] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 126.142341][ T6099] __ext4_expand_extra_isize+0x301/0x3e0 [ 126.148516][ T6099] __ext4_mark_inode_dirty+0x469/0x700 [ 126.154513][ T6099] ext4_evict_inode+0xa8d/0x1090 [ 126.159998][ T6099] evict+0x4c9/0x8d0 [ 126.164514][ T6099] ext4_orphan_cleanup+0xad2/0x1320 [ 126.170233][ T6099] ext4_fill_super+0x8e25/0x95a0 [ 126.175690][ T6099] mount_bdev+0x287/0x3c0 [ 126.180545][ T6099] legacy_get_tree+0xe6/0x180 [ 126.185859][ T6099] vfs_get_tree+0x88/0x270 [ 126.190811][ T6099] do_new_mount+0x24a/0xa40 [ 126.195857][ T6099] __se_sys_mount+0x2e3/0x3d0 [ 126.201056][ T6099] do_syscall_64+0x4c/0xa0 [ 126.205997][ T6099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.212412][ T6099] [ 126.212412][ T6099] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 126.219970][ T6099] __lock_acquire+0x2c42/0x7d10 [ 126.225344][ T6099] lock_acquire+0x19e/0x400 [ 126.230370][ T6099] down_read+0x44/0x2e0 [ 126.235045][ T6099] ext4_xattr_get+0xfc/0x800 [ 126.240154][ T6099] ext4_get_acl+0x80/0x660 [ 126.245089][ T6099] get_acl+0x154/0x250 [ 126.249676][ T6099] posix_acl_create+0x124/0x430 [ 126.255067][ T6099] ext4_init_acl+0xb7/0x330 [ 126.260099][ T6099] __ext4_new_inode+0x2eb3/0x3a40 [ 126.265651][ T6099] ext4_ext_migrate+0x5f1/0xe60 [ 126.271024][ T6099] ext4_ioctl+0x1a84/0x3820 [ 126.276050][ T6099] __se_sys_ioctl+0xfa/0x170 [ 126.281154][ T6099] do_syscall_64+0x4c/0xa0 [ 126.286111][ T6099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.292535][ T6099] [ 126.292535][ T6099] other info that might help us debug this: [ 126.292535][ T6099] [ 126.302763][ T6099] Possible unsafe locking scenario: [ 126.302763][ T6099] [ 126.310212][ T6099] CPU0 CPU1 [ 126.315573][ T6099] ---- ---- [ 126.320934][ T6099] lock(&sbi->s_writepages_rwsem); [ 126.326128][ T6099] lock(&ei->xattr_sem); [ 126.332972][ T6099] lock(&sbi->s_writepages_rwsem); [ 126.340688][ T6099] lock(&ei->xattr_sem); [ 126.345024][ T6099] [ 126.345024][ T6099] *** DEADLOCK *** [ 126.345024][ T6099] [ 126.353164][ T6099] 3 locks held by syz.0.644/6099: [ 126.358182][ T6099] #0: ffff888078934460 (sb_writers#5){++++}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 126.367842][ T6099] #1: ffff88805ed58de8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_ioctl+0x1a7c/0x3820 [ 126.378197][ T6099] #2: ffff888078932bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2d7/0xe60 [ 126.388730][ T6099] [ 126.388730][ T6099] stack backtrace: [ 126.394632][ T6099] CPU: 0 PID: 6099 Comm: syz.0.644 Not tainted syzkaller #0 [ 126.401921][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.412079][ T6099] Call Trace: [ 126.415391][ T6099] [ 126.418341][ T6099] dump_stack_lvl+0x188/0x250 [ 126.423022][ T6099] ? load_image+0x400/0x400 [ 126.427538][ T6099] ? show_regs_print_info+0x20/0x20 [ 126.432741][ T6099] ? print_circular_bug+0x12b/0x1a0 [ 126.437978][ T6099] check_noncircular+0x296/0x330 [ 126.442924][ T6099] ? look_up_lock_class+0x71/0x110 [ 126.448040][ T6099] ? add_chain_block+0x940/0x940 [ 126.452978][ T6099] ? lockdep_lock+0xf1/0x1f0 [ 126.457596][ T6099] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 126.463490][ T6099] ? mark_lock+0x94/0x320 [ 126.467823][ T6099] __lock_acquire+0x2c42/0x7d10 [ 126.472687][ T6099] ? ext4_write_dquot+0x1f0/0x360 [ 126.477711][ T6099] ? __ext4_new_inode+0x2e11/0x3a40 [ 126.483011][ T6099] ? verify_lock_unused+0x140/0x140 [ 126.488221][ T6099] ? do_syscall_64+0x4c/0xa0 [ 126.492816][ T6099] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.498890][ T6099] ? verify_lock_unused+0x140/0x140 [ 126.504092][ T6099] ? mark_lock+0x94/0x320 [ 126.508426][ T6099] lock_acquire+0x19e/0x400 [ 126.512962][ T6099] ? ext4_xattr_get+0xfc/0x800 [ 126.517736][ T6099] ? read_lock_is_recursive+0x10/0x10 [ 126.523136][ T6099] ? rcu_lock_release+0x5/0x20 [ 126.527919][ T6099] ? __lock_acquire+0x7d10/0x7d10 [ 126.532946][ T6099] down_read+0x44/0x2e0 [ 126.537101][ T6099] ? ext4_xattr_get+0xfc/0x800 [ 126.541866][ T6099] ext4_xattr_get+0xfc/0x800 [ 126.546467][ T6099] ? get_cached_acl+0x491/0x4e0 [ 126.551326][ T6099] ext4_get_acl+0x80/0x660 [ 126.555747][ T6099] get_acl+0x154/0x250 [ 126.559835][ T6099] posix_acl_create+0x124/0x430 [ 126.564697][ T6099] ext4_init_acl+0xb7/0x330 [ 126.569214][ T6099] ? dquot_alloc_inode+0x82e/0x9c0 [ 126.574349][ T6099] ? __ext4_set_acl+0x610/0x610 [ 126.579210][ T6099] ? ext4_has_metadata_csum+0x132/0x1d0 [ 126.584768][ T6099] __ext4_new_inode+0x2eb3/0x3a40 [ 126.589807][ T6099] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 126.595530][ T6099] ? from_kgid+0x169/0x690 [ 126.599959][ T6099] ? make_kgid+0x660/0x660 [ 126.604397][ T6099] ext4_ext_migrate+0x5f1/0xe60 [ 126.609263][ T6099] ? mb_regenerate_buddy+0x4f0/0x4f0 [ 126.614560][ T6099] ? sb_start_write+0x112/0x1c0 [ 126.619466][ T6099] ext4_ioctl+0x1a84/0x3820 [ 126.623981][ T6099] ? do_vfs_ioctl+0x1d16/0x1ef0 [ 126.628839][ T6099] ? ext4_fileattr_set+0x1750/0x1750 [ 126.634147][ T6099] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 126.639790][ T6099] ? rcu_lock_release+0x5/0x20 [ 126.644571][ T6099] ? __lock_acquire+0x7d10/0x7d10 [ 126.649709][ T6099] ? kfree+0xef/0x2a0 [ 126.653704][ T6099] ? tomoyo_path_number_perm+0x5b4/0x660 [ 126.659344][ T6099] ? verify_lock_unused+0x140/0x140 [ 126.664548][ T6099] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 126.670045][ T6099] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.675007][ T6099] ? security_file_ioctl+0x7c/0xa0 [ 126.680138][ T6099] ? ext4_fileattr_set+0x1750/0x1750 [ 126.685427][ T6099] __se_sys_ioctl+0xfa/0x170 [ 126.690015][ T6099] do_syscall_64+0x4c/0xa0 [ 126.694433][ T6099] ? clear_bhb_loop+0x30/0x80 [ 126.699111][ T6099] ? clear_bhb_loop+0x30/0x80 [ 126.703876][ T6099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.709781][ T6099] RIP: 0033:0x7f38000c0f79 [ 126.714196][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.733799][ T6099] RSP: 002b:00007f37fe31b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.742222][ T6099] RAX: ffffffffffffffda RBX: 00007f380033afa0 RCX: 00007f38000c0f79 [ 126.750192][ T6099] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 126.758168][ T6099] RBP: 00007f38001577e0 R08: 0000000000000000 R09: 0000000000000000 [ 126.766146][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.774115][ T6099] R13: 00007f380033b038 R14: 00007f380033afa0 R15: 00007fff4ed73918 [ 126.782089][ T6099] [ 126.788200][ T5688] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 127.817917][ T7] usb 3-1: USB disconnect, device number 9 [ 127.828958][ T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 132.589529][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.595823][ T1421] ieee802154 phy1 wpan1: encryption failed: -22