last executing test programs: 6.544672972s ago: executing program 3 (id=275): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ff"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 6.486077534s ago: executing program 3 (id=276): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @empty}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 6.400123326s ago: executing program 3 (id=278): socket(0x400000000010, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1f2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x9, 0x6, 0x40, 0x10000, 'syz1\x00', 0x5}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(r0, &(0x7f00000002c0)='stat\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) 4.489431892s ago: executing program 2 (id=284): add_key$keyring(&(0x7f0000001980), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0xefe, &(0x7f00000019c0)={0x0, 0xffffffbe, 0x2, 0x86, 0x3ab}, &(0x7f0000001a40)=0x0, &(0x7f0000001a80)=0x0, &(0x7f0000001ac0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000) io_uring_enter(r0, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 4.14362344s ago: executing program 2 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0xbe2}], 0x1) 3.904007106s ago: executing program 1 (id=286): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 3.887501346s ago: executing program 0 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001400)={0x1, 0x0, [{0x400000f1, 0x0, 0x40}]}) 3.777401549s ago: executing program 2 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0xffff8001, 0x6, 0xffffffff, 0x3}, {0x7, 0xfffffff8, 0x7, 0xfffffffd, 0x1000001}]}) 3.654153372s ago: executing program 0 (id=289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x1f0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c4, 0x2, [@TCA_BPF_ACT={0x1c0, 0x1, [@m_bpf={0xc8, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x6a, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd56"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}]}, {0x6d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x38, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5bb5}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.549531115s ago: executing program 2 (id=290): socket(0x400000000010, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1f2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x9, 0x6, 0x40, 0x10000, 'syz1\x00', 0x5}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(r0, &(0x7f00000002c0)='stat\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) 3.516859725s ago: executing program 0 (id=291): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x5}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 3.269718421s ago: executing program 3 (id=292): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000ff01000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000000000000009220c84689b645a6b2c0c66d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) accept4$unix(r5, &(0x7f00000010c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r12, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0xb, 0x5e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x40050) recvmsg(r11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) 2.599347217s ago: executing program 0 (id=293): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0) 2.447189941s ago: executing program 1 (id=294): r0 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x200}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f00000002c0), 0x2) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x7765, 0x0, 0x2, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 2.336893804s ago: executing program 1 (id=295): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/ifindex\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x64) 2.260370266s ago: executing program 1 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000400)={{0x60000, 0xffff1000, 0x10, 0x49, 0x7d, 0x7, 0x81, 0xff, 0x0, 0x84, 0x80, 0xb}, {0xd000, 0x26000, 0x10, 0x3, 0x81, 0x7, 0x6, 0x4, 0x1, 0x6, 0x2, 0x7}, {0xf000, 0xeeee8000, 0xf, 0x4, 0x14, 0x3, 0x4, 0x13, 0x5, 0x4, 0x91, 0x80}, {0x9000, 0x9f241c6d2d73e697, 0xc, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x5, 0xc, 0x9}, {0x58000, 0x41000, 0xa, 0x9, 0xc8, 0x9, 0x7, 0xef, 0x2, 0x6e, 0x2, 0xc1}, {0x4000, 0x30000, 0xc, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0x8, 0x6, 0xa}, {0x10000, 0x60000, 0x8, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x0, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x9, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x48}, {0xd000, 0x5}, {0x80a0000, 0xff7f}, 0x80000003, 0x0, 0x4000, 0x252031, 0x5, 0x1101, 0x41000, 0x1, [0x6, 0x2, 0x8000000000000006, 0x49]}) 2.157266578s ago: executing program 0 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e6509", 0x5, 0x2) 2.102874139s ago: executing program 1 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd29, 0x65dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4) 2.084820039s ago: executing program 0 (id=299): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058af7"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 2.027571921s ago: executing program 1 (id=300): socket(0x400000000010, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1f2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x9, 0x6, 0x40, 0x10000, 'syz1\x00', 0x5}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(r0, &(0x7f00000002c0)='stat\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) 1.182389862s ago: executing program 3 (id=301): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000004c0)="c1dfb080cd21d308", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getrlimit(0xd, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb74cd3660dab9e200000000a900", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x5385, &(0x7f0000000040)=0x7ff) 205.413745ms ago: executing program 2 (id=302): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x4c, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "44486d6d3afd8de2ceb42cb8c3"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 111.997967ms ago: executing program 2 (id=303): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x20, 0x0) 0s ago: executing program 3 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010003, 0x0, 0x1}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 66.503604][ T5754] cgroup: Unknown subsys name 'net' [ 66.664607][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.010240][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.512670][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.512670][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.513725][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.537543][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.542147][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.545850][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.552056][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.560493][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.573947][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.577022][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.581098][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.589761][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.602152][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.603941][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.617341][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.617353][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.631514][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.639078][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.648320][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.655728][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.663331][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.667249][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.677750][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.694871][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.739300][ T5766] (null): rxe_set_mtu: Set mtu to 1024 [ 69.746081][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.762737][ T5769] (null): rxe_set_mtu: Set mtu to 1024 [ 69.769718][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.778757][ T5767] (null): rxe_set_mtu: Set mtu to 1024 [ 69.784883][ T5767] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.792198][ T5769] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.800649][ T5768] (null): rxe_set_mtu: Set mtu to 1024 [ 69.808338][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.827364][ T5768] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.059247][ T5766] infiniband rxe0: set active [ 70.068161][ T5766] infiniband rxe0: added rxe_eth0 [ 70.084895][ T5772] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.129140][ T5766] RDS/IB: rxe0: added [ 70.133821][ T5766] smc: adding ib device rxe0 with port count 1 [ 70.141058][ T5766] smc: ib device rxe0 port 1 has pnetid [ 70.157725][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.174898][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.454388][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 70.480394][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.517947][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 70.545102][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 70.672000][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.794733][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.806240][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.813928][ T5768] bridge_slave_0: entered allmulticast mode [ 70.821565][ T5768] bridge_slave_0: entered promiscuous mode [ 70.831486][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.838693][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.845861][ T5768] bridge_slave_1: entered allmulticast mode [ 70.853211][ T5768] bridge_slave_1: entered promiscuous mode [ 70.873156][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.880640][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.888146][ T5769] bridge_slave_0: entered allmulticast mode [ 70.897825][ T5769] bridge_slave_0: entered promiscuous mode [ 70.912332][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.919812][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.927097][ T5767] bridge_slave_0: entered allmulticast mode [ 70.933904][ T5767] bridge_slave_0: entered promiscuous mode [ 70.961196][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.970048][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.977470][ T5769] bridge_slave_1: entered allmulticast mode [ 70.984123][ T5769] bridge_slave_1: entered promiscuous mode [ 71.001678][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.013278][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.020608][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.031176][ T5767] bridge_slave_1: entered allmulticast mode [ 71.038607][ T5767] bridge_slave_1: entered promiscuous mode [ 71.076763][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.127969][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.154884][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.166710][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.178910][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.221461][ T5768] team0: Port device team_slave_0 added [ 71.229814][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.273571][ T5768] team0: Port device team_slave_1 added [ 71.330963][ T5767] team0: Port device team_slave_0 added [ 71.359701][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.366710][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.395791][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.413592][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.423815][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.455409][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.473967][ T5769] team0: Port device team_slave_0 added [ 71.484210][ T5769] team0: Port device team_slave_1 added [ 71.495867][ T5767] team0: Port device team_slave_1 added [ 71.592677][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.600727][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.637334][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.638621][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.654539][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.669943][ T5768] hsr_slave_0: entered promiscuous mode [ 71.676721][ T5768] hsr_slave_1: entered promiscuous mode [ 71.690245][ T5776] Bluetooth: hci3: command tx timeout [ 71.699245][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.706243][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.741248][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.761805][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.769313][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.772218][ T5776] Bluetooth: hci1: command tx timeout [ 71.795827][ T51] Bluetooth: hci0: command tx timeout [ 71.801739][ T5776] Bluetooth: hci2: command tx timeout [ 71.813962][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.825647][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.834469][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.861332][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.947653][ T5769] hsr_slave_0: entered promiscuous mode [ 71.953893][ T5769] hsr_slave_1: entered promiscuous mode [ 71.960612][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.969120][ T5769] Cannot create hsr debugfs directory [ 72.045539][ T5767] hsr_slave_0: entered promiscuous mode [ 72.052176][ T5767] hsr_slave_1: entered promiscuous mode [ 72.058811][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.066411][ T5767] Cannot create hsr debugfs directory [ 72.125466][ T5432] infiniband rxe0: set active [ 72.179174][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.236555][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 72.416682][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.424453][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.432712][ T5766] bridge_slave_0: entered allmulticast mode [ 72.448261][ T5766] bridge_slave_0: entered promiscuous mode [ 72.479111][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.486274][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.497877][ T5766] bridge_slave_1: entered allmulticast mode [ 72.504584][ T5766] bridge_slave_1: entered promiscuous mode [ 72.528930][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.545204][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.596215][ T5766] team0: Port device team_slave_0 added [ 72.610779][ T5766] team0: Port device team_slave_1 added [ 72.636675][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.660719][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.672671][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.692756][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.699857][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.726079][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.746302][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.753595][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.779873][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.791130][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.865854][ T5766] hsr_slave_0: entered promiscuous mode [ 72.872386][ T5766] hsr_slave_1: entered promiscuous mode [ 72.879037][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.886697][ T5766] Cannot create hsr debugfs directory [ 72.911613][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.932323][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.967872][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.979619][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.050913][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.062346][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.104168][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.116927][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.252627][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.263446][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.273697][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.284330][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.374293][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.431060][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.444058][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.468488][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.475837][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.492770][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.508778][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.515914][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.551089][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.582390][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.589520][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.599896][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.607070][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.624300][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.645029][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.652234][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.676621][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.683831][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.749586][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.786983][ T5776] Bluetooth: hci3: command tx timeout [ 73.797334][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.808596][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.847522][ T5776] Bluetooth: hci0: command tx timeout [ 73.847538][ T51] Bluetooth: hci1: command tx timeout [ 73.847563][ T51] Bluetooth: hci2: command tx timeout [ 73.865536][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.949366][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.957133][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.001079][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.008296][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.153729][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.290304][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.328997][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.351384][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.426464][ T5768] veth0_vlan: entered promiscuous mode [ 74.465383][ T5768] veth1_vlan: entered promiscuous mode [ 74.511323][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.536459][ T5767] veth0_vlan: entered promiscuous mode [ 74.545902][ T5769] veth0_vlan: entered promiscuous mode [ 74.564875][ T5767] veth1_vlan: entered promiscuous mode [ 74.594033][ T5769] veth1_vlan: entered promiscuous mode [ 74.642858][ T5768] veth0_macvtap: entered promiscuous mode [ 74.651790][ T5767] veth0_macvtap: entered promiscuous mode [ 74.676258][ T5769] veth0_macvtap: entered promiscuous mode [ 74.687860][ T5767] veth1_macvtap: entered promiscuous mode [ 74.704117][ T5768] veth1_macvtap: entered promiscuous mode [ 74.725381][ T5766] veth0_vlan: entered promiscuous mode [ 74.743971][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.770373][ T5769] veth1_macvtap: entered promiscuous mode [ 74.778350][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.791647][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.804299][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.823535][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.841104][ T5766] veth1_vlan: entered promiscuous mode [ 74.852813][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.864180][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.873400][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.883716][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.907360][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.918226][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.930650][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.952630][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.962406][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.972427][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.981964][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.003247][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.013982][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.024373][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.034911][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.046164][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.065508][ T5766] veth0_macvtap: entered promiscuous mode [ 75.090734][ T5766] veth1_macvtap: entered promiscuous mode [ 75.098333][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.109793][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.119777][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.131504][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.142871][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.156798][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.165688][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.174831][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.183649][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.305120][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.321662][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.331909][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.342633][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.352662][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.363340][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.375877][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.417082][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.431539][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.444068][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.455446][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.466277][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.476792][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.487275][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.498060][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.509280][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.534587][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.545676][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.552600][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.563883][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.574049][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.582918][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607922][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.615986][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.692237][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.718213][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.805900][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.845645][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.853599][ T51] Bluetooth: hci3: command tx timeout [ 75.864615][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.884533][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.927543][ T5773] Bluetooth: hci0: command tx timeout [ 75.933001][ T5773] Bluetooth: hci1: command tx timeout [ 75.938626][ T51] Bluetooth: hci2: command tx timeout [ 75.964731][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.975394][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.094090][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.117773][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.811211][ T5891] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12'. [ 76.849882][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 76.994624][ T5898] netem: incorrect ge model size [ 77.007099][ T5898] netem: change failed [ 77.462089][ T5919] Cannot find set identified by id 0 to match [ 77.469035][ T5918] tipc: Started in network mode [ 77.474051][ T5918] tipc: Node identity 1, cluster identity 6 [ 77.497319][ T5918] tipc: Node number set to 1 [ 77.913330][ T5942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.30'. [ 77.928581][ T51] Bluetooth: hci3: command tx timeout [ 78.007252][ T51] Bluetooth: hci2: command tx timeout [ 78.012710][ T51] Bluetooth: hci1: command tx timeout [ 78.019396][ T5773] Bluetooth: hci0: command tx timeout [ 78.129407][ T5955] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 83.920301][ T5772] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.097641][ T6048] Illegal XDP return value 2455384479 on prog (id 6) dev N/A, expect packet loss! [ 84.188470][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.211850][ T5772] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 84.226977][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 84.244787][ T5772] usb 3-1: Product: syz [ 84.256943][ T5772] usb 3-1: Manufacturer: syz [ 84.289118][ T5772] usb 3-1: selecting invalid altsetting 1 [ 84.296451][ T5772] dvb_ttusb_budget: ttusb_init_controller: error [ 84.303508][ T5772] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 84.408243][ T55] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.426191][ T5772] DVB: Unable to find symbol cx22700_attach() [ 84.449321][ T6063] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.481206][ T6036] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 84.563885][ T5772] DVB: Unable to find symbol tda10046_attach() [ 84.578281][ T5772] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 84.613075][ T5772] usb 3-1: USB disconnect, device number 2 [ 84.629150][ T55] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.678679][ T55] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.714416][ T55] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.738683][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.755864][ T6052] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 84.791641][ T55] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 85.161551][ T5860] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.172855][ T55] usb 2-1: USB disconnect, device number 2 [ 85.347008][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 85.354620][ T5860] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.373186][ T5860] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.386629][ T5860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 85.399089][ T5860] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 85.411792][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.480315][ T6095] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6095] [ 85.536974][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.553990][ T5860] usb 4-1: config 0 descriptor?? [ 85.719275][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 85.757714][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.828166][ T8] usb 3-1: config 0 descriptor?? [ 85.874778][ T8] cp210x 3-1:0.0: cp210x converter detected [ 85.973168][ T6103] syz.1.76[6103]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.029202][ T6103] loop1: detected capacity change from 0 to 4096 [ 86.080510][ T55] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.111823][ T6106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.230524][ T6103] overlayfs: upper fs does not support tmpfile. [ 86.275789][ T6103] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.283139][ T6103] overlayfs: failed to set xattr on upper [ 86.289722][ T6103] overlayfs: ...falling back to redirect_dir=nofollow. [ 86.353581][ T6103] overlayfs: ...falling back to index=off. [ 86.370164][ T6103] overlayfs: ...falling back to uuid=null. [ 86.436498][ T5860] apple 0003:05AC:025B.0001: unknown main item tag 0x0 [ 86.444955][ T5860] apple 0003:05AC:025B.0001: global environment stack underflow [ 86.446614][ T8] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 86.452798][ T5860] apple 0003:05AC:025B.0001: item 0 4 1 11 parsing failed [ 86.453610][ T5860] apple 0003:05AC:025B.0001: parse failed [ 86.475604][ T5860] apple: probe of 0003:05AC:025B.0001 failed with error -22 [ 86.508464][ T8] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 86.540525][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 86.564927][ T8] usb 3-1: USB disconnect, device number 3 [ 86.615565][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 86.647744][ T5860] usb 4-1: USB disconnect, device number 2 [ 86.666073][ T8] cp210x 3-1:0.0: device disconnected [ 86.982754][ T1198] cfg80211: failed to load regulatory.db [ 87.225722][ T6134] vlan2: entered promiscuous mode [ 87.277193][ T6134] bridge0: entered promiscuous mode [ 87.841498][ T6161] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5768] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6161] [ 87.873501][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 87.907298][ T6158] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 88.124503][ T6166] loop0: detected capacity change from 0 to 2048 [ 88.199074][ T6166] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4294967289, location=4294967289 [ 88.244553][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 88.295978][ T6166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.492675][ T6176] Bluetooth: MGMT ver 1.22 [ 88.777863][ T5838] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.957142][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 88.977247][ T5838] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 88.991490][ T5838] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 89.005469][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.023842][ T5838] usb 4-1: Product: syz [ 89.034260][ T5838] usb 4-1: Manufacturer: syz [ 89.039546][ T5838] usb 4-1: SerialNumber: syz [ 89.056093][ T5838] usb 4-1: config 0 descriptor?? [ 89.079147][ T5838] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 89.097983][ T5838] dvb-usb: bulk message failed: -22 (2/0) [ 89.115348][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.125638][ T5838] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 89.146424][ T5838] usb 4-1: media controller created [ 89.192699][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.243540][ T5838] usb 4-1: selecting invalid altsetting 7 [ 89.257131][ T5838] cxusb: set interface failed [ 89.267369][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 89.281845][ T6178] cxusb: i2c wr: len=8192 is too big! [ 89.281845][ T6178] [ 89.382529][ T5838] DVB: Unable to find symbol lgdt330x_attach() [ 89.400175][ T5838] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 89.409473][ T6198] bond_slave_0: entered promiscuous mode [ 89.415379][ T6198] bond_slave_1: entered promiscuous mode [ 89.447377][ T6198] vlan2: entered promiscuous mode [ 89.452475][ T6198] bond0: entered promiscuous mode [ 89.547986][ T5838] rc_core: IR keymap rc-dvico-portable not found [ 89.566886][ T5838] Registered IR keymap rc-empty [ 89.579874][ T5838] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 89.596527][ T6190] loop1: detected capacity change from 0 to 32768 [ 89.615471][ T5838] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 89.643808][ T6190] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.101 (6190) [ 89.669817][ T5838] dvb-usb: schedule remote query interval to 100 msecs. [ 89.678034][ T5838] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 89.740787][ T5838] usb 4-1: USB disconnect, device number 3 [ 89.760809][ T6190] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.807600][ T6190] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 89.816409][ T6190] BTRFS info (device loop1): setting nodatasum [ 89.846907][ T6190] BTRFS info (device loop1): force zlib compression, level 3 [ 89.855214][ T6190] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 89.906311][ T6190] BTRFS info (device loop1): use lzo compression, level 0 [ 89.916205][ T5838] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 89.937048][ T6190] BTRFS info (device loop1): turning on flush-on-commit [ 89.944065][ T6190] BTRFS info (device loop1): enabling auto defrag [ 89.988056][ T6190] BTRFS info (device loop1): max_inline at 4096 [ 90.000840][ T6190] BTRFS info (device loop1): using free space tree [ 90.080959][ T6208] loop3: detected capacity change from 0 to 2048 [ 90.102089][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 91.077030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 91.446964][ T6208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.512484][ T6190] BTRFS info (device loop1): enabling ssd optimizations [ 91.741650][ T5767] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.315393][ T6073] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (6073) [ 93.342585][ T6242] Cannot find set identified by id 0 to match [ 93.617815][ T6245] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5766] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6245] [ 94.052298][ T6249] loop1: detected capacity change from 0 to 4096 [ 94.059943][ T6249] EXT4-fs: inline encryption not supported [ 94.107015][ T6249] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.115767][ T6249] EXT4-fs (loop1): Test dummy encryption mode enabled [ 94.172284][ T6249] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 94.197100][ T6249] System zones: 0-5 [ 94.216646][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.271650][ T6249] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 94.279361][ T6249] EXT4-fs warning (device loop1): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 94.420842][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.942183][ T6265] loop2: detected capacity change from 0 to 256 [ 94.949735][ T6265] ======================================================= [ 94.949735][ T6265] WARNING: The mand mount option has been deprecated and [ 94.949735][ T6265] and is ignored by this kernel. Remove the mand [ 94.949735][ T6265] option from the mount to silence this warning. [ 94.949735][ T6265] ======================================================= [ 94.977067][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.191818][ T55] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.211771][ T55] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.223274][ T55] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.249519][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.295222][ T6257] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.346444][ T55] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 96.618859][ T9] usb 1-1: USB disconnect, device number 2 [ 97.395164][ T6287] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 97.936259][ T6302] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6302] [ 98.436622][ T6296] loop3: detected capacity change from 0 to 32768 [ 98.461996][ T6296] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 98.634528][ T6054] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 99.293775][ T6328] ip_tables: iptables: counters copy to user failed while replacing table [ 99.503079][ T6330] loop3: detected capacity change from 0 to 64 [ 99.823075][ T6326] loop2: detected capacity change from 0 to 32768 [ 99.903280][ T6326] JBD2: Ignoring recovery information on journal [ 100.089877][ T6326] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.284515][ T6332] loop3: detected capacity change from 0 to 32768 [ 100.337375][ T6332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.148 (6332) [ 100.412991][ T6332] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.437535][ T6332] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 100.466696][ T6332] BTRFS info (device loop3): using free space tree [ 100.526027][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 100.667219][ T6332] BTRFS info (device loop3): enabling ssd optimizations [ 100.688800][ T6332] BTRFS info (device loop3): auto enabling async discard [ 100.893356][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.094879][ T6054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (6054) [ 101.173729][ T6336] loop0: detected capacity change from 0 to 32768 [ 101.319365][ T6336] XFS (loop0): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 101.555267][ T6336] XFS (loop0): Ending clean mount [ 101.592180][ T6336] XFS (loop0): Quotacheck needed: Please wait. [ 103.003970][ T6336] XFS (loop0): Quotacheck: Done. [ 103.051505][ T1198] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.156990][ T5769] XFS (loop0): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 103.269340][ T1198] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.286797][ T1198] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.307203][ T1198] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.321611][ T1198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.349969][ T6384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.372257][ T1198] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 103.396997][ T5860] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.611430][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 103.637578][ T5860] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.658820][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.702131][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.739418][ T5860] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 103.763076][ T5839] usb 4-1: USB disconnect, device number 4 [ 103.791548][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.855172][ T5860] usb 3-1: config 0 descriptor?? [ 104.073245][ T6400] loop1: detected capacity change from 0 to 4096 [ 104.211349][ T6400] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 104.323964][ T6400] ntfs3: loop1: Failed to load $Extend (-22). [ 104.333932][ T5860] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 104.351899][ T6400] ntfs3: loop1: Failed to initialize $Extend. [ 104.362081][ T5860] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x4 [ 104.514166][ T5860] hid-led: probe of 0003:0FC5:B080.0002 failed with error -71 [ 104.569042][ T5860] usb 3-1: USB disconnect, device number 4 [ 104.762531][ T6407] loop1: detected capacity change from 0 to 256 [ 104.783638][ T6407] exfat: Deprecated parameter 'namecase' [ 104.816981][ T6407] exfat: Deprecated parameter 'utf8' [ 104.842766][ T6407] exfat: Deprecated parameter 'namecase' [ 104.873133][ T6407] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 104.931076][ T6407] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 106.027370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.446560][ T6419] loop3: detected capacity change from 0 to 512 [ 106.565491][ T6419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.624791][ T6425] loop2: detected capacity change from 0 to 512 [ 106.643391][ T6425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.655462][ T6419] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.664223][ T6425] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.679384][ T6425] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.721017][ T6425] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.173: Invalid block bitmap block 0 in block_group 0 [ 106.778037][ T6425] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 106.827142][ T6425] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.173: attempt to clear invalid blocks 983261 len 1 [ 106.861696][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.880251][ T6425] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.173: Invalid inode table block 0 in block_group 0 [ 106.939050][ T6425] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 106.997325][ T6425] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 107.025964][ T6425] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.173: Invalid inode table block 0 in block_group 0 [ 107.059412][ T6425] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 107.097131][ T6425] EXT4-fs error (device loop2): ext4_truncate:4314: inode #11: comm syz.2.173: mark_inode_dirty error [ 107.147090][ T6425] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 107.175003][ T6425] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.173: Invalid inode table block 0 in block_group 0 [ 107.215129][ T6425] EXT4-fs (loop2): 1 truncate cleaned up [ 107.237640][ T6425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.637273][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.787274][ T6439] netlink: 'syz.2.178': attribute type 12 has an invalid length. [ 108.873926][ T6428] loop0: detected capacity change from 0 to 32768 [ 109.021944][ T6428] read_mapping_page failed! [ 109.050223][ T6428] ERROR: (device loop0): txCommit: [ 109.050223][ T6428] [ 109.421866][ T6437] loop1: detected capacity change from 0 to 32768 [ 109.477157][ T6437] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 109.597040][ T6437] XFS (loop1): Ending clean mount [ 109.672549][ T6441] loop2: detected capacity change from 0 to 32768 [ 109.678661][ T6453] loop0: detected capacity change from 0 to 512 [ 109.773619][ T6441] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.834152][ T6437] syz.1.172 (6437) used greatest stack depth: 20584 bytes left [ 109.954829][ T6441] XFS (loop2): Ending clean mount [ 109.968376][ T5767] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 109.986519][ T6453] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.008210][ T6453] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.055662][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.057490][ T6453] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.180: bad orphan inode 131072 [ 110.098613][ T6453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.117061][ T42] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.315689][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.348048][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 110.363164][ T42] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.388878][ T42] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.412795][ T42] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.431399][ T6472] loop1: detected capacity change from 0 to 256 [ 110.442022][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.461832][ T42] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 110.471944][ T6474] loop0: detected capacity change from 0 to 256 [ 110.480210][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.501852][ T42] usb 4-1: config 0 descriptor?? [ 110.560233][ T6476] loop2: detected capacity change from 0 to 16 [ 110.628872][ T6476] erofs: (device loop2): mounted with root inode @ nid 36. [ 110.665515][ T27] audit: type=1800 audit(1791995981.333:2): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.183" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 111.131400][ T42] mcp2200 0003:04D8:00DF.0003: unknown main item tag 0x0 [ 111.140003][ T42] mcp2200 0003:04D8:00DF.0003: unknown main item tag 0x0 [ 111.149460][ T42] mcp2200 0003:04D8:00DF.0003: unknown main item tag 0x0 [ 111.156568][ T42] mcp2200 0003:04D8:00DF.0003: unknown main item tag 0x0 [ 111.164868][ T42] mcp2200 0003:04D8:00DF.0003: unknown main item tag 0x0 [ 111.174039][ T42] mcp2200 0003:04D8:00DF.0003: unknown main item tag 0x0 [ 111.181904][ T42] mcp2200 0003:04D8:00DF.0003: unknown main item tag 0x0 [ 111.830723][ T42] mcp2200 0003:04D8:00DF.0003: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 111.841932][ T6484] sctp: failed to load transform for md5: -2 [ 112.000345][ T42] usb 4-1: USB disconnect, device number 5 [ 112.016705][ T6499] loop3: detected capacity change from 0 to 256 [ 112.232693][ T6478] loop1: detected capacity change from 0 to 40427 [ 112.283941][ T6478] F2FS-fs (loop1): invalid crc value [ 112.325819][ T6478] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.345777][ T6506] loop3: detected capacity change from 0 to 164 [ 112.490350][ T6478] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.678830][ T5767] syz-executor: attempt to access beyond end of device [ 112.678830][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.721784][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 112.890994][ T6501] loop0: detected capacity change from 0 to 40427 [ 112.911335][ T6501] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 112.932107][ T6501] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.952818][ T6501] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.045432][ T6501] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.066149][ T6501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.315576][ T6509] loop3: detected capacity change from 0 to 40427 [ 113.342765][ T6509] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 113.365384][ T6509] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 113.403883][ T6509] F2FS-fs (loop3): invalid crc value [ 113.744809][ T6522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'. [ 114.428391][ T6509] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 114.447265][ T6509] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.489483][ T27] audit: type=1800 audit(1791995985.163:3): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 114.549551][ T5766] syz-executor: attempt to access beyond end of device [ 114.549551][ T5766] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.584530][ T5766] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 114.621258][ T6529] loop0: detected capacity change from 0 to 64 [ 114.635136][ T6529] MINIX-fs: mounting file system with errors, running fsck is recommended [ 114.658582][ T6529] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 116.866752][ T6562] hsr0: entered promiscuous mode [ 116.887803][ T6562] macsec1: entered promiscuous mode [ 118.096950][ T6584] Cannot find del_set index 14804 as target [ 118.243394][ T6590] loop2: detected capacity change from 0 to 164 [ 118.265677][ T6574] loop0: detected capacity change from 0 to 32768 [ 118.351012][ T6574] JBD2: Ignoring recovery information on journal [ 118.422522][ T6594] Zero length message leads to an empty skb [ 118.462650][ T6574] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.698911][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 120.511082][ T6624] bridge0: entered promiscuous mode [ 120.521058][ T6623] bridge0: left promiscuous mode [ 120.592224][ T6626] loop2: detected capacity change from 0 to 512 [ 120.600363][ T6626] EXT4-fs: Ignoring removed oldalloc option [ 120.631813][ T6626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.679953][ T6626] EXT4-fs (loop2): 1 truncate cleaned up [ 120.688109][ T6626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.801470][ T6626] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.812444][ T6619] loop1: detected capacity change from 0 to 32768 [ 120.831336][ T6619] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 121.796974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 122.200234][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.302671][ T6054] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 123.020511][ T6650] capability: warning: `syz.3.241' uses 32-bit capabilities (legacy support in use) [ 123.297042][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.492176][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 123.514192][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.538645][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.543746][ T6658] loop3: detected capacity change from 0 to 1024 [ 123.581730][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.596213][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.647004][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.668467][ T6658] hfsplus: invalid length 32517 has been corrected to 255 [ 123.709409][ T9] usb 2-1: config 0 descriptor?? [ 123.737259][ T27] audit: type=1800 audit(1791995994.403:4): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.244" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 123.810221][ T12] hfsplus: b-tree write err: -5, ino 20 [ 124.142061][ T9] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 124.160111][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.172621][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.180365][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.188014][ T55] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.195620][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.203552][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.212014][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.219899][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.229778][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.239440][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.251583][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.261444][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.273851][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.281838][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.341710][ T9] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 124.373876][ T9] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 124.390188][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 124.395791][ T9] microsoft 0003:045E:07DA.0004: no inputs found [ 124.403830][ T9] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 124.420937][ T55] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 124.432618][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.450625][ T9] usb 2-1: USB disconnect, device number 3 [ 124.456677][ T55] usb 4-1: Product: syz [ 124.471341][ T55] usb 4-1: Manufacturer: syz [ 124.475999][ T55] usb 4-1: SerialNumber: syz [ 124.509422][ T55] usb 4-1: config 0 descriptor?? [ 124.529682][ T55] gspca_main: se401-2.14.0 probing 047d:5003 [ 124.585506][ T6666] fido_id[6666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 124.950169][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 125.938937][ T6685] bridge0: port 3(syz_tun) entered blocking state [ 125.945760][ T6685] bridge0: port 3(syz_tun) entered disabled state [ 125.952726][ T6685] syz_tun: entered allmulticast mode [ 125.960636][ T6685] syz_tun: entered promiscuous mode [ 125.968433][ T6685] bridge0: port 3(syz_tun) entered blocking state [ 125.976025][ T6685] bridge0: port 3(syz_tun) entered forwarding state [ 126.235117][ T55] gspca_se401: read req failed req 0x06 error -19 [ 126.251894][ T55] usb 4-1: USB disconnect, device number 6 [ 126.427197][ T55] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 126.483824][ T6695] ip6gre1: entered allmulticast mode [ 126.532216][ T1097] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.636787][ T55] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 126.656466][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.676763][ T55] usb 4-1: Product: syz [ 126.686281][ T55] usb 4-1: Manufacturer: syz [ 126.697112][ T55] usb 4-1: SerialNumber: syz [ 126.709466][ T55] usb 4-1: config 0 descriptor?? [ 126.733088][ T55] gspca_main: se401-2.14.0 probing 047d:5003 [ 127.049597][ T6704] loop1: detected capacity change from 0 to 64 [ 127.118744][ T6704] syz.1.259: attempt to access beyond end of device [ 127.118744][ T6704] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 128.365767][ T6704] Buffer I/O error on dev loop1, logical block 512, async page read [ 128.410340][ T6704] syz.1.259: attempt to access beyond end of device [ 128.410340][ T6704] loop1: rw=0, sector=32768, nr_sectors = 2 limit=64 [ 128.432105][ T6704] Buffer I/O error on dev loop1, logical block 16384, async page read [ 128.499117][ T6717] erspan0: entered promiscuous mode [ 128.789617][ T55] gspca_se401: read req failed req 0x06 error -19 [ 128.827619][ T55] usb 4-1: USB disconnect, device number 7 [ 128.883499][ T6730] loop3: detected capacity change from 0 to 512 [ 129.067488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 129.886890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 130.133546][ T6730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.199481][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.210916][ T6730] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 130.232953][ T6730] System zones: 1-12 [ 130.265446][ T6730] EXT4-fs (loop3): 1 truncate cleaned up [ 130.304739][ T6730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.407221][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.419385][ T6730] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 130.441626][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 130.457529][ T8] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 130.477000][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.496277][ T8] usb 3-1: Product: syz [ 130.516592][ T8] usb 3-1: Manufacturer: syz [ 130.526078][ T8] usb 3-1: SerialNumber: syz [ 130.550176][ T8] usb 3-1: config 0 descriptor?? [ 130.572271][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 130.655034][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.769451][ T8] gspca_se401: read req failed req 0x06 error -19 [ 131.786663][ T8] usb 3-1: USB disconnect, device number 5 [ 131.957181][ T8] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 133.072701][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.282449][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.327166][ T8] usb 3-1: device descriptor read/all, error -71 [ 137.947155][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.161856][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 138.185000][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.194873][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 138.206007][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 138.220168][ T8] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 138.235688][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.250161][ T8] usb 1-1: Product: syz [ 138.257602][ T8] usb 1-1: Manufacturer: syz [ 138.265463][ T8] usb 1-1: SerialNumber: syz [ 138.279530][ T8] usb 1-1: config 0 descriptor?? [ 138.524589][ T8] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 138.724028][ T42] usb 1-1: USB disconnect, device number 3 [ 138.807079][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.807087][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.807052][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.508898][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.515256][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.576785][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.576964][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 196.582908][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.588862][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 250.807080][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.929985][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.936328][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.407129][ T28] INFO: task jbd2/sda1-8:5100 blocked for more than 143 seconds. [ 292.414911][ T28] Not tainted syzkaller #0 [ 292.420854][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.434539][ T28] task:jbd2/sda1-8 state:D stack:24680 pid:5100 ppid:2 flags:0x00004000 [ 292.444011][ T28] Call Trace: [ 292.447514][ T28] [ 292.450475][ T28] __schedule+0x15ae/0x4660 [ 292.455050][ T28] ? asan.module_dtor+0x20/0x20 [ 292.460253][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 292.465331][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 292.471341][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 292.476584][ T28] schedule+0xbd/0x170 [ 292.484874][ T28] io_schedule+0x80/0xd0 [ 292.489254][ T28] bit_wait_io+0x11/0xd0 [ 292.493531][ T28] __wait_on_bit+0x9f/0x2c0 [ 292.503672][ T28] ? bit_wait+0xd0/0xd0 [ 292.509173][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 292.514685][ T28] ? bit_wait+0xd0/0xd0 [ 292.522667][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 292.528380][ T28] ? do_raw_write_lock+0x11e/0x260 [ 292.533536][ T28] ? bit_waitqueue+0x30/0x30 [ 292.542149][ T28] ? do_raw_read_unlock+0x3d/0x80 [ 292.547378][ T28] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 292.553782][ T28] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 292.565048][ T28] ? lock_chain_count+0x20/0x20 [ 292.570096][ T28] ? _raw_spin_unlock+0x40/0x40 [ 292.574990][ T28] ? __try_to_del_timer_sync+0x1c2/0x280 [ 292.580860][ T28] ? __timer_delete_sync+0x23d/0x2e0 [ 292.586180][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 292.591350][ T28] ? timer_delete_sync+0x20/0x20 [ 292.596318][ T28] ? do_raw_read_unlock+0x80/0x80 [ 292.602917][ T28] ? prepare_to_wait+0x1aa/0x200 [ 292.607996][ T28] kjournald2+0x40f/0x810 [ 292.612370][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 292.618561][ T28] ? wake_bit_function+0x200/0x200 [ 292.623715][ T28] ? _raw_spin_unlock+0x40/0x40 [ 292.628661][ T28] ? __kthread_parkme+0x71/0x1c0 [ 292.633616][ T28] ? __kthread_parkme+0x15b/0x1c0 [ 292.638788][ T28] kthread+0x2fa/0x390 [ 292.642874][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 292.648450][ T28] ? kthread_blkcg+0xd0/0xd0 [ 292.653057][ T28] ret_from_fork+0x48/0x80 [ 292.657644][ T28] ? kthread_blkcg+0xd0/0xd0 [ 292.662250][ T28] ret_from_fork_asm+0x11/0x20 [ 292.667134][ T28] [ 292.670192][ T28] INFO: task syz-executor:5754 blocked for more than 143 seconds. [ 292.679127][ T28] Not tainted syzkaller #0 [ 292.684051][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.692792][ T28] task:syz-executor state:D stack:22008 pid:5754 ppid:5753 flags:0x00004002 [ 292.703183][ T28] Call Trace: [ 292.706497][ T28] [ 292.709551][ T28] __schedule+0x15ae/0x4660 [ 292.714094][ T28] ? mark_lock+0x94/0x320 [ 292.718478][ T28] ? asan.module_dtor+0x20/0x20 [ 292.723346][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 292.728523][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 292.734445][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 292.739762][ T28] schedule+0xbd/0x170 [ 292.743866][ T28] io_schedule+0x80/0xd0 [ 292.748216][ T28] bit_wait_io+0x11/0xd0 [ 292.752505][ T28] __wait_on_bit+0x9f/0x2c0 [ 292.757106][ T28] ? bit_wait+0xd0/0xd0 [ 292.761308][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 292.767026][ T28] ? bit_wait+0xd0/0xd0 [ 292.771182][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 292.775936][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 292.781038][ T28] ? bit_waitqueue+0x30/0x30 [ 292.785658][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 292.791021][ T28] do_get_write_access+0x5c9/0xe00 [ 292.796160][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 292.802229][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 292.809855][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 292.816037][ T28] ? __might_sleep+0xe0/0xe0 [ 292.820685][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 292.826255][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 292.831816][ T28] ext4_dirty_inode+0xcb/0x110 [ 292.836605][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 292.842531][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 292.847670][ T28] file_update_time+0x187/0x1a0 [ 292.852537][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 292.857676][ T28] ? do_wp_page+0x4ce/0x34d0 [ 292.862276][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 292.868643][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 292.873709][ T28] do_page_mkwrite+0x153/0x3f0 [ 292.878641][ T28] do_wp_page+0xd4d/0x34d0 [ 292.883091][ T28] ? folio_put+0xd0/0xd0 [ 292.892948][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 292.898104][ T28] ? __rwlock_init+0x150/0x150 [ 292.902909][ T28] handle_mm_fault+0x1306/0x4a50 [ 292.908842][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 292.913827][ T28] ? numa_migrate_prep+0x350/0x350 [ 292.919066][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 292.924375][ T28] do_user_addr_fault+0x736/0x12d0 [ 292.929574][ T28] exc_page_fault+0x64/0x100 [ 292.934182][ T28] ? clear_bhb_loop+0x40/0x90 [ 292.938940][ T28] asm_exc_page_fault+0x26/0x30 [ 292.943824][ T28] RIP: 0033:0x7fc2f0c7cae2 [ 292.948342][ T28] RSP: 002b:00007ffe95a1b8a0 EFLAGS: 00010202 [ 292.954426][ T28] RAX: 00007fc2eeaf0000 RBX: 000055555ecb2d60 RCX: 0000000000000001 [ 292.962507][ T28] RDX: 0000000000002165 RSI: 000055555ecb2598 RDI: 0000000000000002 [ 292.970802][ T28] RBP: 00007ffe95a1bda0 R08: 000055555ecb25d0 R09: 0000000000000092 [ 292.978896][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe95a1bbe0 [ 292.987028][ T28] R13: 00007ffe95a1b9d0 R14: 585858582e7a7973 R15: 00007ffe95a1b920 [ 292.995028][ T28] [ 292.998142][ T28] INFO: task syz.2.303:6833 blocked for more than 143 seconds. [ 293.005691][ T28] Not tainted syzkaller #0 [ 293.011408][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.020153][ T28] task:syz.2.303 state:D stack:25384 pid:6833 ppid:5768 flags:0x00004004 [ 293.029475][ T28] Call Trace: [ 293.032765][ T28] [ 293.035713][ T28] __schedule+0x15ae/0x4660 [ 293.040313][ T28] ? mark_lock+0x94/0x320 [ 293.044694][ T28] ? asan.module_dtor+0x20/0x20 [ 293.049679][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 293.054732][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 293.060729][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 293.065952][ T28] schedule+0xbd/0x170 [ 293.070120][ T28] io_schedule+0x80/0xd0 [ 293.074376][ T28] bit_wait_io+0x11/0xd0 [ 293.078707][ T28] __wait_on_bit+0x9f/0x2c0 [ 293.083246][ T28] ? bit_wait+0xd0/0xd0 [ 293.087684][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 293.093176][ T28] ? bit_wait+0xd0/0xd0 [ 293.097497][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 293.102291][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 293.107410][ T28] ? bit_waitqueue+0x30/0x30 [ 293.112752][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 293.118096][ T28] do_get_write_access+0x5c9/0xe00 [ 293.123234][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 293.129391][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 293.135572][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 293.141819][ T28] ? __might_sleep+0xe0/0xe0 [ 293.146429][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 293.152098][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 293.157682][ T28] ext4_dirty_inode+0xcb/0x110 [ 293.162484][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 293.168379][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 293.173444][ T28] file_update_time+0x187/0x1a0 [ 293.178387][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 293.183439][ T28] ? filemap_fault+0x103c/0x1540 [ 293.188449][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 293.194210][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 293.200529][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 293.205583][ T28] ? __pte_offset_map+0x20d/0x280 [ 293.210771][ T28] do_page_mkwrite+0x153/0x3f0 [ 293.216485][ T28] handle_mm_fault+0x1a2c/0x4a50 [ 293.221527][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 293.226514][ T28] ? numa_migrate_prep+0x350/0x350 [ 293.233289][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 293.238679][ T28] do_user_addr_fault+0x736/0x12d0 [ 293.243828][ T28] exc_page_fault+0x64/0x100 [ 293.248513][ T28] asm_exc_page_fault+0x26/0x30 [ 293.253407][ T28] RIP: 0033:0x7fcfa6e73332 [ 293.257924][ T28] RSP: 002b:00007fffb47a64a0 EFLAGS: 00010202 [ 293.264015][ T28] RAX: 0000000000001008 RBX: 00007fcfa7d55720 RCX: 0000000000000000 [ 293.272030][ T28] RDX: 0000001b2d623000 RSI: 0000000000000008 RDI: 00007fcfa7d55720 [ 293.280069][ T28] RBP: 00000000000005ac R08: 00007fcfa7210000 R09: 00007fcfa7226038 [ 293.288120][ T28] R10: 0000000000000007 R11: 0000000000000001 R12: ffffffff83ed77a1 [ 293.296102][ T28] R13: 00007fcfa7226038 R14: 00000000000001ed R15: fffffffffffff000 [ 293.304159][ T28] ? cap_mmap_addr+0x21/0x2b0 [ 293.308914][ T28] [ 293.311930][ T28] INFO: task syz.3.304:6836 blocked for more than 144 seconds. [ 293.320658][ T28] Not tainted syzkaller #0 [ 293.325610][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.334320][ T28] task:syz.3.304 state:D stack:27560 pid:6836 ppid:5766 flags:0x00004004 [ 293.343691][ T28] Call Trace: [ 293.347060][ T28] [ 293.350020][ T28] __schedule+0x15ae/0x4660 [ 293.354573][ T28] ? mark_lock+0x94/0x320 [ 293.358998][ T28] ? asan.module_dtor+0x20/0x20 [ 293.363873][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 293.369066][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 293.374989][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 293.380290][ T28] schedule+0xbd/0x170 [ 293.384378][ T28] io_schedule+0x80/0xd0 [ 293.388701][ T28] bit_wait_io+0x11/0xd0 [ 293.392956][ T28] __wait_on_bit+0x9f/0x2c0 [ 293.397531][ T28] ? bit_wait+0xd0/0xd0 [ 293.401707][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 293.407248][ T28] ? bit_wait+0xd0/0xd0 [ 293.411417][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 293.416168][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 293.422023][ T28] ? bit_waitqueue+0x30/0x30 [ 293.426645][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 293.432007][ T28] do_get_write_access+0x5c9/0xe00 [ 293.437293][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 293.443294][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 293.449548][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 293.455714][ T28] ? __might_sleep+0xe0/0xe0 [ 293.460390][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 293.465956][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 293.471503][ T28] ext4_dirty_inode+0xcb/0x110 [ 293.476279][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 293.482198][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 293.487322][ T28] file_update_time+0x187/0x1a0 [ 293.492210][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 293.497339][ T28] ? filemap_fault+0x103c/0x1540 [ 293.502292][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 293.508048][ T28] ? pte_alloc_one+0x3b6/0x540 [ 293.512825][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 293.519154][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 293.524861][ T28] do_page_mkwrite+0x153/0x3f0 [ 293.529705][ T28] handle_mm_fault+0x1a2c/0x4a50 [ 293.534690][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 293.539772][ T28] ? numa_migrate_prep+0x350/0x350 [ 293.544909][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 293.550285][ T28] do_user_addr_fault+0x736/0x12d0 [ 293.555417][ T28] exc_page_fault+0x64/0x100 [ 293.560068][ T28] ? clear_bhb_loop+0x40/0x90 [ 293.564761][ T28] asm_exc_page_fault+0x26/0x30 [ 293.569690][ T28] RIP: 0033:0x7fc69446bea3 [ 293.574118][ T28] RSP: 002b:00007fff9d15fa00 EFLAGS: 00010246 [ 293.580270][ T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d164000 [ 293.588294][ T28] RDX: 0000001b2d124000 RSI: 0000000000400000 RDI: 00007fc6947e3708 [ 293.596273][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.604309][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 293.612389][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff9d15fc90 [ 293.620465][ T28] [ 293.624576][ T28] [ 293.624576][ T28] Showing all locks held in the system: [ 293.632393][ T28] 1 lock held by khungtaskd/28: [ 293.637422][ T28] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 293.647459][ T28] 4 locks held by kworker/u4:2/41: [ 293.652579][ T28] #0: ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 293.662568][ T28] #1: ffff8880b8c28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 293.671349][ T28] #2: ffff8880b8c295d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 293.680742][ T28] #3: ffffffff9834c990 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x500 [ 293.691137][ T28] 2 locks held by getty/5524: [ 293.695806][ T28] #0: ffff888032b420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 293.705650][ T28] #1: ffffc900032862f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 293.715834][ T28] 3 locks held by syz-executor/5754: [ 293.721165][ T28] #0: ffff8880785ba7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 293.731790][ T28] #1: ffff88814dfc6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 293.741678][ T28] #2: ffff88814dfca990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 293.751466][ T28] 3 locks held by syz.2.303/6833: [ 293.756494][ T28] #0: ffff88807aebb120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 293.766569][ T28] #1: ffff88814dfc6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 293.776444][ T28] #2: ffff88814dfca990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 293.786217][ T28] 3 locks held by syz.3.304/6836: [ 293.791295][ T28] #0: ffff88801eba27a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 293.801304][ T28] #1: ffff88814dfc6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 293.811144][ T28] #2: ffff88814dfca990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 293.820872][ T28] [ 293.823203][ T28] ============================================= [ 293.823203][ T28] [ 293.832408][ T28] NMI backtrace for cpu 1 [ 293.836802][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 293.843995][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 293.854039][ T28] Call Trace: [ 293.857305][ T28] [ 293.860229][ T28] dump_stack_lvl+0x18c/0x250 [ 293.864893][ T28] ? __wake_up_klogd+0xd9/0x100 [ 293.869735][ T28] ? show_regs_print_info+0x20/0x20 [ 293.874933][ T28] ? load_image+0x420/0x420 [ 293.879430][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 293.884356][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 293.890509][ T28] ? load_image+0x420/0x420 [ 293.895014][ T28] ? wq_watchdog_touch+0xef/0x170 [ 293.900039][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 293.906108][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 293.912109][ T28] watchdog+0xf59/0xfa0 [ 293.916293][ T28] ? watchdog+0x1e1/0xfa0 [ 293.920642][ T28] kthread+0x2fa/0x390 [ 293.924719][ T28] ? hungtask_pm_notify+0x50/0x50 [ 293.929749][ T28] ? kthread_blkcg+0xd0/0xd0 [ 293.934345][ T28] ret_from_fork+0x48/0x80 [ 293.938769][ T28] ? kthread_blkcg+0xd0/0xd0 [ 293.943361][ T28] ret_from_fork_asm+0x11/0x20 [ 293.948137][ T28] [ 293.952407][ T28] Sending NMI from CPU 1 to CPUs 0: [ 293.957984][ C0] NMI backtrace for cpu 0 [ 293.957995][ C0] CPU: 0 PID: 1097 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 293.958010][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 293.958019][ C0] Workqueue: bat_events batadv_nc_worker [ 293.958044][ C0] RIP: 0010:kasan_check_range+0x14/0x290 [ 293.958065][ C0] Code: b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b4 01 00 00 55 41 57 41 56 <41> 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 13 02 00 00 49 89 f9 49 [ 293.958076][ C0] RSP: 0018:ffffc9000485f7a0 EFLAGS: 00000002 [ 293.958088][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff8168acfd [ 293.958098][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91ff1500 [ 293.958107][ C0] RBP: ffffc9000485fa08 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 293.958118][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 0000000000000000 [ 293.958127][ C0] R13: ffff888024863c00 R14: ffffffff919b4630 R15: ffff888024864758 [ 293.958138][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 293.958150][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.958160][ C0] CR2: 000055a113b66660 CR3: 000000000dd32000 CR4: 00000000003506f0 [ 293.958174][ C0] Call Trace: [ 293.958179][ C0] [ 293.958186][ C0] __lock_acquire+0xe8d/0x7eb0 [ 293.958216][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 293.958232][ C0] ? verify_lock_unused+0x140/0x140 [ 293.958253][ C0] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 293.958291][ C0] lock_acquire+0x19e/0x420 [ 293.958307][ C0] ? batadv_nc_worker+0xd2/0x600 [ 293.958325][ C0] ? batadv_nc_worker+0xd2/0x600 [ 293.958339][ C0] ? read_lock_is_recursive+0x20/0x20 [ 293.958356][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 293.958374][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 293.958389][ C0] ? batadv_nc_worker+0xd2/0x600 [ 293.958403][ C0] ? batadv_nc_worker+0xd2/0x600 [ 293.958417][ C0] batadv_nc_worker+0xef/0x600 [ 293.958430][ C0] ? batadv_nc_worker+0xd2/0x600 [ 293.958444][ C0] ? process_scheduled_works+0x975/0x1600 [ 293.958464][ C0] process_scheduled_works+0xa60/0x1600 [ 293.958493][ C0] ? worker_attach_to_pool+0x370/0x370 [ 293.958513][ C0] ? assign_work+0x3cc/0x5d0 [ 293.958532][ C0] worker_thread+0xa5e/0xfe0 [ 293.958553][ C0] ? _raw_spin_unlock+0x40/0x40 [ 293.958572][ C0] ? __kthread_parkme+0x71/0x1c0 [ 293.958589][ C0] kthread+0x2fa/0x390 [ 293.958603][ C0] ? pr_cont_work+0x550/0x550 [ 293.958620][ C0] ? kthread_blkcg+0xd0/0xd0 [ 293.958635][ C0] ret_from_fork+0x48/0x80 [ 293.958651][ C0] ? kthread_blkcg+0xd0/0xd0 [ 293.958666][ C0] ret_from_fork_asm+0x11/0x20 [ 293.958689][ C0] [ 293.968444][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 293.968457][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 293.968475][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 293.968485][ T28] Call Trace: [ 293.968492][ T28] [ 293.968500][ T28] dump_stack_lvl+0x18c/0x250 [ 293.968523][ T28] ? show_regs_print_info+0x20/0x20 [ 293.968540][ T28] ? load_image+0x420/0x420 [ 293.968572][ T28] panic+0x2ca/0x720 [ 293.968597][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 293.968617][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 293.968637][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 293.968661][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 293.968687][ T28] watchdog+0xf98/0xfa0 [ 293.968709][ T28] ? watchdog+0x1e1/0xfa0 [ 293.968735][ T28] kthread+0x2fa/0x390 [ 293.968752][ T28] ? hungtask_pm_notify+0x50/0x50 [ 293.968773][ T28] ? kthread_blkcg+0xd0/0xd0 [ 293.968790][ T28] ret_from_fork+0x48/0x80 [ 293.968809][ T28] ? kthread_blkcg+0xd0/0xd0 [ 293.968826][ T28] ret_from_fork_asm+0x11/0x20 [ 293.968858][ T28] [ 293.971519][ T28] Kernel Offset: disabled [ 294.345561][ T28] Rebooting in 86400 seconds..