last executing test programs: 2.635414327s ago: executing program 1 (id=132): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) r1 = epoll_create(0x4000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001cc0)={0xc}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x4, 0x0, 0x8000, 0x101, 0x15, "540e1bb3bc045d543803f577c06df9f801eb98"}) 2.541795153s ago: executing program 2 (id=133): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480), 0xc4, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.487207706s ago: executing program 3 (id=135): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.41127424s ago: executing program 1 (id=136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007ba0f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) 2.200423863s ago: executing program 3 (id=138): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2880010, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x4b2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$read(0xb, r0, 0x0, 0x0) 2.028673422s ago: executing program 1 (id=140): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xd9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2.015917173s ago: executing program 3 (id=141): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) 1.574161298s ago: executing program 3 (id=144): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 1.531607621s ago: executing program 2 (id=145): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc, 0xc4b, &(0x7f0000002800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000) 1.468403415s ago: executing program 0 (id=146): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0x4e5, 0x428}, {0xfd, 0xfc}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @addr={0x7, 0xe5}}, {0x6, 0x3, 0x9, 0x3, @time={0x81, 0x4}, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}], 0x54) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c) 1.365679141s ago: executing program 1 (id=147): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) 1.245033748s ago: executing program 0 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027a1000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.04193221s ago: executing program 2 (id=149): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x1, 0x9fc, 0x0, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 839.347731ms ago: executing program 0 (id=150): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 728.094048ms ago: executing program 2 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x9c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4, 0x1}}, @val={0x76, 0x6, {0x3, 0xe8, 0x24, 0x1}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) 608.604554ms ago: executing program 1 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={r2, 0x100, 0x3}) 573.948646ms ago: executing program 3 (id=153): syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') rmdir(&(0x7f0000000100)='./control\x00') 493.513831ms ago: executing program 0 (id=154): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x2f, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x6, 0x0, 0x2, 0x0, 0xdb27, 0x0, 0x80, 0x5, 0xa000, 0xfff, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 359.120559ms ago: executing program 2 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 268.834474ms ago: executing program 0 (id=156): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) 173.39074ms ago: executing program 1 (id=157): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 105.595054ms ago: executing program 2 (id=158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x34}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) 25.122378ms ago: executing program 0 (id=159): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 0s ago: executing program 3 (id=160): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[], 0x1, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x5d9f61795f7ff7ff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xf519, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8241, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 79.146689][ T5755] cgroup: Unknown subsys name 'net' [ 79.283390][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.011318][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.230572][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.246787][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.265060][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.300696][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.303364][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.315260][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.325430][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.327858][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.333739][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.348621][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.353672][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.365888][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.375148][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.382463][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.386361][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.397892][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.399573][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.413348][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.415587][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.428500][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.428589][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.445140][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.452689][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.460208][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.016780][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 84.048782][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 84.069041][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 84.128244][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 84.288216][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.296133][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.303486][ T5768] bridge_slave_0: entered allmulticast mode [ 84.311235][ T5768] bridge_slave_0: entered promiscuous mode [ 84.351935][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.359286][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.367294][ T5768] bridge_slave_1: entered allmulticast mode [ 84.375287][ T5768] bridge_slave_1: entered promiscuous mode [ 84.382696][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.390454][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.397873][ T5769] bridge_slave_0: entered allmulticast mode [ 84.405105][ T5769] bridge_slave_0: entered promiscuous mode [ 84.442718][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.450877][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.458447][ T5769] bridge_slave_1: entered allmulticast mode [ 84.466026][ T5769] bridge_slave_1: entered promiscuous mode [ 84.482978][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.490351][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.500558][ T5767] bridge_slave_0: entered allmulticast mode [ 84.507776][ T5767] bridge_slave_0: entered promiscuous mode [ 84.516978][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.524140][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.531754][ T5767] bridge_slave_1: entered allmulticast mode [ 84.539056][ T5767] bridge_slave_1: entered promiscuous mode [ 84.590198][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.598179][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.605723][ T5770] bridge_slave_0: entered allmulticast mode [ 84.612820][ T5770] bridge_slave_0: entered promiscuous mode [ 84.634141][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.648241][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.660955][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.673790][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.703232][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.711150][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.718490][ T5770] bridge_slave_1: entered allmulticast mode [ 84.726006][ T5770] bridge_slave_1: entered promiscuous mode [ 84.757336][ T5769] team0: Port device team_slave_0 added [ 84.778449][ T5769] team0: Port device team_slave_1 added [ 84.796471][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.809780][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.822065][ T5768] team0: Port device team_slave_0 added [ 84.832716][ T5768] team0: Port device team_slave_1 added [ 84.905666][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.918848][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.941039][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.948385][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.974935][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.987605][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.997162][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.023835][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.050506][ T5767] team0: Port device team_slave_0 added [ 85.071238][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.078831][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.105820][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.125369][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.132363][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.159023][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.194499][ T5770] team0: Port device team_slave_0 added [ 85.202785][ T5767] team0: Port device team_slave_1 added [ 85.217818][ T5770] team0: Port device team_slave_1 added [ 85.313248][ T5769] hsr_slave_0: entered promiscuous mode [ 85.320253][ T5769] hsr_slave_1: entered promiscuous mode [ 85.347380][ T5768] hsr_slave_0: entered promiscuous mode [ 85.353998][ T5768] hsr_slave_1: entered promiscuous mode [ 85.360436][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.369352][ T5768] Cannot create hsr debugfs directory [ 85.376029][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.383027][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.410071][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.433593][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.442105][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.468639][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.482260][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.489465][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.508576][ T5775] Bluetooth: hci0: command tx timeout [ 85.515762][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.522551][ T5778] Bluetooth: hci2: command tx timeout [ 85.532040][ T5781] Bluetooth: hci3: command tx timeout [ 85.538090][ T5778] Bluetooth: hci1: command tx timeout [ 85.551507][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.559210][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.585292][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.683102][ T5770] hsr_slave_0: entered promiscuous mode [ 85.689870][ T5770] hsr_slave_1: entered promiscuous mode [ 85.696381][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.703966][ T5770] Cannot create hsr debugfs directory [ 85.799622][ T5767] hsr_slave_0: entered promiscuous mode [ 85.806540][ T5767] hsr_slave_1: entered promiscuous mode [ 85.812846][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.820976][ T5767] Cannot create hsr debugfs directory [ 86.198485][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.211426][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.223057][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.235073][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.311876][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.335473][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.350654][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.363143][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.471024][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.491526][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.501909][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.565353][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.586125][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.597878][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.611542][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.640144][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.733230][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.783750][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.848585][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.856084][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.870423][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.877596][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.902938][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.989919][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.018470][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.025880][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.059112][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.070216][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.077488][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.098211][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.188066][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.208632][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.244049][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.251313][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.296989][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.304196][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.333881][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.352552][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.388412][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.395652][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.530106][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.537483][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.589481][ T5778] Bluetooth: hci1: command tx timeout [ 87.589505][ T5781] Bluetooth: hci3: command tx timeout [ 87.589621][ T5781] Bluetooth: hci0: command tx timeout [ 87.595390][ T5778] Bluetooth: hci2: command tx timeout [ 87.770716][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.942935][ T5769] veth0_vlan: entered promiscuous mode [ 88.002635][ T5769] veth1_vlan: entered promiscuous mode [ 88.140874][ T5769] veth0_macvtap: entered promiscuous mode [ 88.176361][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.198547][ T5769] veth1_macvtap: entered promiscuous mode [ 88.303253][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.368251][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.408139][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.442528][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.460540][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.471730][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.480968][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.491458][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.540141][ T5768] veth0_vlan: entered promiscuous mode [ 88.608023][ T5767] veth0_vlan: entered promiscuous mode [ 88.644468][ T5768] veth1_vlan: entered promiscuous mode [ 88.690411][ T5770] veth0_vlan: entered promiscuous mode [ 88.698699][ T5767] veth1_vlan: entered promiscuous mode [ 88.763290][ T5770] veth1_vlan: entered promiscuous mode [ 88.772811][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.793591][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.810807][ T5768] veth0_macvtap: entered promiscuous mode [ 88.830129][ T5768] veth1_macvtap: entered promiscuous mode [ 88.868749][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.881039][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.947277][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.964090][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.977639][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.988861][ T5767] veth0_macvtap: entered promiscuous mode [ 89.020430][ T5770] veth0_macvtap: entered promiscuous mode [ 89.030850][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.042685][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.055070][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.073393][ T5770] veth1_macvtap: entered promiscuous mode [ 89.116217][ T5767] veth1_macvtap: entered promiscuous mode [ 89.150730][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.160878][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.170374][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180481][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.221285][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.236900][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.248764][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.259779][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.276928][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.310603][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.321910][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.341038][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.363251][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.375986][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.387921][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.400146][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.410545][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.421501][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.432903][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.443901][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.462124][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.503299][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.523985][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.545313][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.564401][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.619418][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.631397][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.642515][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.655755][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.667130][ T5778] Bluetooth: hci2: command tx timeout [ 89.673082][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.683763][ T5778] Bluetooth: hci0: command tx timeout [ 89.687288][ T5780] Bluetooth: hci3: command tx timeout [ 89.695023][ T5781] Bluetooth: hci1: command tx timeout [ 89.702488][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.716869][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.724398][ T5863] team_slave_0: entered promiscuous mode [ 89.730601][ T5863] team_slave_0: entered allmulticast mode [ 89.770042][ T5862] team_slave_0: left promiscuous mode [ 89.831874][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.851559][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.867426][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.877195][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.890580][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899710][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.061847][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.094858][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.149488][ T5868] syz.1.7[5868]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.167730][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.182573][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.196564][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.204831][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.207826][ T5868] loop1: detected capacity change from 0 to 128 [ 90.334020][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.354035][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.414063][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.452613][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.825137][ T5837] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.953936][ T5884] loop1: detected capacity change from 0 to 2048 [ 90.992056][ T5884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.016528][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 91.053828][ T5837] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.084073][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.113573][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.158976][ T5837] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.213911][ T5837] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.236861][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.541018][ T5837] usb 1-1: GET_CAPABILITIES returned 0 [ 91.581627][ T5837] usbtmc 1-1:16.0: can't read capabilities [ 91.693867][ T5896] loop3: detected capacity change from 0 to 1024 [ 91.709821][ T5896] ======================================================= [ 91.709821][ T5896] WARNING: The mand mount option has been deprecated and [ 91.709821][ T5896] and is ignored by this kernel. Remove the mand [ 91.709821][ T5896] option from the mount to silence this warning. [ 91.709821][ T5896] ======================================================= [ 91.755911][ T5781] Bluetooth: hci0: command tx timeout [ 91.761414][ T5781] Bluetooth: hci2: command tx timeout [ 91.767141][ T5780] Bluetooth: hci1: command tx timeout [ 91.767276][ T5778] Bluetooth: hci3: command tx timeout [ 91.781311][ T5896] EXT4-fs: Ignoring removed bh option [ 91.822025][ T5896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.892467][ T5815] usb 1-1: USB disconnect, device number 2 [ 91.917870][ T5896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.083811][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.102508][ T5910] syzkaller1: entered promiscuous mode [ 92.111400][ T5910] syzkaller1: entered allmulticast mode [ 92.118772][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.228668][ T1189] cfg80211: failed to load regulatory.db [ 92.314869][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 92.338712][ T787] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.366097][ T787] usb 2-1: config 0 has no interface number 0 [ 92.372285][ T787] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.389547][ T787] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.400415][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.420919][ T787] usb 2-1: config 0 descriptor?? [ 92.443766][ T787] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 92.456496][ T5916] input: syz1 as /devices/virtual/input/input5 [ 93.034539][ T27] usb 2-1: USB disconnect, device number 2 [ 93.225006][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 93.819034][ T5953] syz.3.41 uses obsolete (PF_INET,SOCK_PACKET) [ 94.172566][ T5950] loop0: detected capacity change from 0 to 32768 [ 94.197342][ T5950] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.248849][ T5950] XFS (loop0): Ending clean mount [ 94.264741][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.345348][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.377568][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.467744][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 94.485156][ T23] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.493700][ T23] usb 3-1: config 0 has no interface number 0 [ 94.500929][ T23] usb 3-1: config 0 interface 184 has no altsetting 0 [ 94.511867][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 94.521983][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.531075][ T23] usb 3-1: Product: syz [ 94.546470][ T23] usb 3-1: Manufacturer: syz [ 94.554375][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 94.565948][ T23] usb 3-1: SerialNumber: syz [ 94.587395][ T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 94.602773][ T23] usb 3-1: config 0 descriptor?? [ 94.608032][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.621546][ T23] smsc75xx v1.0.0 [ 94.635335][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.645883][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.658162][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.677118][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.692810][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.943003][ T27] usb 4-1: usb_control_msg returned -32 [ 94.951552][ T27] usbtmc 4-1:16.0: can't read capabilities [ 95.280954][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 95.306476][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 95.417469][ T5987] netlink: 'syz.0.52': attribute type 2 has an invalid length. [ 95.525143][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 95.559166][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 95.591793][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 95.603619][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 95.619587][ T23] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 95.647100][ T23] usb 3-1: USB disconnect, device number 2 [ 96.472893][ T6009] input: syz1 as /devices/virtual/input/input6 [ 97.009801][ T6027] Bluetooth: MGMT ver 1.22 [ 97.125978][ T5858] usb 4-1: USB disconnect, device number 2 [ 97.231514][ T6033] loop1: detected capacity change from 0 to 1024 [ 97.267757][ T6033] EXT4-fs: Ignoring removed bh option [ 97.293346][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.76'. [ 97.357330][ T6033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.466367][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.676740][ T6033] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4047: comm syz.1.74: Allocating blocks 385-513 which overlap fs metadata [ 97.792105][ T6056] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 97.792105][ T6056] The task syz.3.82 (6056) triggered the difference, watch for misbehavior. [ 97.913358][ T6032] EXT4-fs (loop1): pa ffff88807966c1d0: logic 16, phys. 129, len 24 [ 97.921928][ T6032] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 8 [ 98.001964][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.006036][ T1189] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.209667][ T1189] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 98.224382][ T1189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.243070][ T1189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.258670][ T1189] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.271756][ T6064] capability: warning: `syz.0.86' uses deprecated v2 capabilities in a way that may be insecure [ 98.288440][ T1189] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.297931][ T1189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.320255][ T1189] usb 3-1: config 0 descriptor?? [ 98.662046][ T6074] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 98.685146][ C1] Illegal XDP return value 16128 on prog (id 16) dev bond0, expect packet loss! [ 98.724979][ T6070] loop0: detected capacity change from 0 to 8192 [ 98.752929][ T6070] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.787674][ T1189] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 98.809502][ T1189] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 98.885992][ T1189] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 99.102276][ T6081] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.211300][ T1189] usb 3-1: USB disconnect, device number 3 [ 99.241499][ T6077] fido_id[6077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 99.866734][ T6090] loop0: detected capacity change from 0 to 4096 [ 99.895022][ T6090] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.976170][ T6084] loop3: detected capacity change from 0 to 32768 [ 100.050601][ T6076] loop1: detected capacity change from 0 to 40427 [ 100.080302][ T6076] F2FS-fs (loop1): invalid crc value [ 100.091675][ T6084] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.167063][ T6076] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.270833][ T6090] EXT4-fs (loop0): Test dummy encryption mode enabled [ 100.336757][ T6084] XFS (loop3): Ending clean mount [ 100.366063][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.401650][ T6076] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.421192][ T6084] XFS (loop3): Quotacheck needed: Please wait. [ 100.561001][ T6076] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 100.587361][ T6084] XFS (loop3): Quotacheck: Done. [ 100.593635][ T6076] CPU: 1 PID: 6076 Comm: syz.1.92 Not tainted syzkaller #0 [ 100.600930][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.611061][ T6076] Call Trace: [ 100.614402][ T6076] [ 100.617390][ T6076] dump_stack_lvl+0x18c/0x250 [ 100.622157][ T6076] ? show_regs_print_info+0x20/0x20 [ 100.627433][ T6076] ? __asan_memset+0x22/0x40 [ 100.632151][ T6076] ? f2fs_get_next_page_offset+0x690/0x690 [ 100.638017][ T6076] ? f2fs_lookup_read_extent_cache_block+0x25b/0x460 [ 100.644794][ T6076] ? __lookup_extent_tree+0xba0/0xba0 [ 100.650268][ T6076] f2fs_is_valid_blkaddr+0xe39/0x1580 [ 100.655758][ T6076] f2fs_get_read_data_page+0x3bb/0x5d0 [ 100.661305][ T6076] ? f2fs_reserve_block+0x240/0x240 [ 100.666628][ T6076] f2fs_find_data_page+0x9f/0x390 [ 100.671779][ T6076] f2fs_readdir+0x4c3/0x970 [ 100.676366][ T6076] ? f2fs_fill_dentries+0xc00/0xc00 [ 100.681636][ T6076] ? read_lock_is_recursive+0x20/0x20 [ 100.687080][ T6076] ? lockdep_hardirqs_on+0x98/0x150 [ 100.692349][ T6076] ? mutex_lock_nested+0x20/0x20 [ 100.697364][ T6076] ? end_current_label_crit_section+0x149/0x170 [ 100.703771][ T6076] ? down_read_killable+0x1d0/0x340 [ 100.709043][ T6076] ? fsnotify_perm+0x271/0x5e0 [ 100.713883][ T6076] iterate_dir+0x1c2/0x580 [ 100.718381][ T6076] ? 0xffffffff81000000 [ 100.722617][ T6076] __se_sys_getdents+0xf6/0x260 [ 100.727556][ T6076] ? __x64_sys_getdents+0x80/0x80 [ 100.732646][ T6076] ? fillonedir+0x430/0x430 [ 100.737220][ T6076] ? 0xffffffff81000000 [ 100.741434][ T6076] ? lockdep_hardirqs_on+0x98/0x150 [ 100.746746][ T6076] do_syscall_64+0x55/0xa0 [ 100.751233][ T6076] ? clear_bhb_loop+0x40/0x90 [ 100.755988][ T6076] ? clear_bhb_loop+0x40/0x90 [ 100.760748][ T6076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.766710][ T6076] RIP: 0033:0x7f3f55d9aeb9 [ 100.771208][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.790880][ T6076] RSP: 002b:00007f3f56bb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 100.799359][ T6076] RAX: ffffffffffffffda RBX: 00007f3f56015fa0 RCX: 00007f3f55d9aeb9 [ 100.807397][ T6076] RDX: 0000000000000058 RSI: ffffffff81000000 RDI: 0000000000000005 [ 100.815430][ T6076] RBP: 00007f3f55e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 100.823457][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.831503][ T6076] R13: 00007f3f56016038 R14: 00007f3f56015fa0 R15: 00007ffe3e01ebc8 [ 100.840075][ T6076] ? 0xffffffff81000000 [ 100.844308][ T6076] [ 101.028093][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.101632][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.844750][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.921859][ T6129] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.024772][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 102.048947][ T27] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.063874][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.077260][ T27] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 102.089281][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.118630][ T27] usb 1-1: config 0 descriptor?? [ 102.423823][ T6125] loop3: detected capacity change from 0 to 32768 [ 102.520147][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 102.544110][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 102.570942][ T27] usb 1-1: USB disconnect, device number 3 [ 102.656805][ T6125] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.690863][ T6144] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 102.767262][ T1307] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.779373][ T2989] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.817895][ T2989] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 102.930519][ T6147] loop1: detected capacity change from 0 to 128 [ 102.958083][ T6147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 102.982938][ T6147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.133943][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 103.394729][ T5822] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 103.597123][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.612678][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.626540][ T5822] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 103.640337][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.648870][ T5822] usb 2-1: SerialNumber: syz [ 103.661786][ T5822] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 103.692820][ T5822] usb-storage 2-1:1.0: USB Mass Storage device detected [ 103.708506][ T5822] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 103.739540][ T5822] scsi host1: usb-storage 2-1:1.0 [ 103.764740][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.836166][ T6153] loop0: detected capacity change from 0 to 40427 [ 103.862011][ T6153] F2FS-fs (loop0): invalid crc value [ 103.879307][ T6153] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.941666][ T6153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.956961][ T27] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 103.974744][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.996588][ T27] usb 4-1: config 0 descriptor?? [ 104.279670][ T5768] syz-executor: attempt to access beyond end of device [ 104.279670][ T5768] loop0: rw=2051, sector=77824, nr_sectors = 4096 limit=40427 [ 104.297257][ T5768] F2FS-fs (loop0): Issue discard(9728, 9728, 512) failed, ret: -5 [ 104.796529][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.036921][ T27] pegasus: probe of 4-1:0.0 failed with error -71 [ 105.061995][ T27] usb 4-1: USB disconnect, device number 3 [ 105.093150][ T5905] usb 2-1: USB disconnect, device number 3 [ 105.782179][ T6174] loop2: detected capacity change from 0 to 32768 [ 105.827788][ T6174] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.942114][ T6174] XFS (loop2): Ending clean mount [ 106.167284][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.507576][ T6196] loop2: detected capacity change from 0 to 2048 [ 106.553683][ T6196] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 106.596239][ T6196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.818125][ T6201] netlink: 104 bytes leftover after parsing attributes in process `syz.1.130'. [ 107.634095][ T6224] loop3: detected capacity change from 0 to 512 [ 107.725639][ T6224] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.141: iget: bad i_size value: 38620345925642 [ 107.740371][ T6224] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.141: couldn't read orphan inode 15 (err -117) [ 107.756066][ T6224] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.788663][ T6224] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.141: bg 0: block 5: invalid block bitmap [ 107.804252][ T6224] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 107.817666][ T6224] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.817666][ T6224] [ 107.827467][ T6224] EXT4-fs (loop3): Total free blocks count 0 [ 107.833592][ T6224] EXT4-fs (loop3): Free/Dirty block details [ 107.843909][ T6224] EXT4-fs (loop3): free_blocks=0 [ 107.854073][ T6224] EXT4-fs (loop3): dirty_blocks=5 [ 107.859513][ T6224] EXT4-fs (loop3): Block reservation details [ 107.878781][ T6224] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 108.018803][ T59] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 108.243348][ T6233] loop2: detected capacity change from 0 to 2048 [ 108.333509][ T6233] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.395338][ T6239] loop1: detected capacity change from 0 to 512 [ 108.443389][ T6239] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.483620][ T6239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.510194][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 108.553934][ T6239] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.584727][ T6239] EXT4-fs (loop1): 1 truncate cleaned up [ 108.591838][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.798523][ T28] audit: type=1800 audit(2000000001.270:2): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 108.870572][ T28] audit: type=1800 audit(2000000001.310:3): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 108.934477][ T28] audit: type=1800 audit(2000000001.320:4): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 108.973417][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.158712][ T6253] warning: `syz.0.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.193370][ T6250] loop3: detected capacity change from 0 to 2048 [ 109.298621][ T6250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.423756][ T6250] UDF-fs: warning (device loop3): udf_rmdir: empty directory has nlink != 2 (0) [ 109.683777][ T6268] [ 109.686231][ T6268] ====================================================== [ 109.693289][ T6268] WARNING: possible circular locking dependency detected [ 109.700369][ T6268] syzkaller #0 Not tainted [ 109.704834][ T6268] ------------------------------------------------------ [ 109.711899][ T6268] syz.1.157/6268 is trying to acquire lock: [ 109.717831][ T6268] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1c0/0x490 [ 109.726961][ T6268] [ 109.726961][ T6268] but task is already holding lock: [ 109.734372][ T6268] ffff888020256540 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 109.744463][ T6268] [ 109.744463][ T6268] which lock already depends on the new lock. [ 109.744463][ T6268] [ 109.754921][ T6268] [ 109.754921][ T6268] the existing dependency chain (in reverse order) is: [ 109.763982][ T6268] [ 109.763982][ T6268] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 109.772386][ T6268] down_write+0x97/0x200 [ 109.777238][ T6268] set_blocksize+0x247/0x4b0 [ 109.782404][ T6268] sb_min_blocksize+0xbe/0x190 [ 109.787748][ T6268] ext4_fill_super+0x6f0/0x6790 [ 109.793257][ T6268] get_tree_bdev+0x3f3/0x520 [ 109.798426][ T6268] vfs_get_tree+0x8c/0x280 [ 109.803404][ T6268] do_new_mount+0x24b/0xa40 [ 109.808471][ T6268] init_mount+0xde/0x130 [ 109.813277][ T6268] do_mount_root+0x97/0x230 [ 109.818347][ T6268] mount_root_generic+0x1a6/0x3e0 [ 109.823943][ T6268] prepare_namespace+0xc2/0x100 [ 109.829370][ T6268] kernel_init_freeable+0x42e/0x580 [ 109.835145][ T6268] kernel_init+0x1d/0x1c0 [ 109.840036][ T6268] ret_from_fork+0x48/0x80 [ 109.845111][ T6268] ret_from_fork_asm+0x11/0x20 [ 109.850479][ T6268] [ 109.850479][ T6268] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 109.859327][ T6268] down_write+0x97/0x200 [ 109.864149][ T6268] set_blocksize+0x1ff/0x4b0 [ 109.869324][ T6268] sb_set_blocksize+0x4a/0x100 [ 109.874753][ T6268] udf_load_vrs+0xe3/0xf20 [ 109.879738][ T6268] udf_fill_super+0x69b/0x1790 [ 109.885074][ T6268] mount_bdev+0x221/0x2d0 [ 109.889975][ T6268] legacy_get_tree+0xea/0x180 [ 109.895230][ T6268] vfs_get_tree+0x8c/0x280 [ 109.900221][ T6268] do_new_mount+0x24b/0xa40 [ 109.905288][ T6268] __se_sys_mount+0x2e7/0x3d0 [ 109.910540][ T6268] do_syscall_64+0x55/0xa0 [ 109.915995][ T6268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.922469][ T6268] [ 109.922469][ T6268] -> #2 (&type->s_umount_key#55){++++}-{3:3}: [ 109.930965][ T6268] down_read+0x46/0x2e0 [ 109.935705][ T6268] super_lock+0x17f/0x3a0 [ 109.940601][ T6268] fs_bdev_sync+0xa4/0x170 [ 109.945847][ T6268] blkdev_common_ioctl+0x8a6/0x2570 [ 109.951629][ T6268] blkdev_ioctl+0x512/0x730 [ 109.956710][ T6268] __se_sys_ioctl+0xfd/0x170 [ 109.961888][ T6268] do_syscall_64+0x55/0xa0 [ 109.966894][ T6268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.973437][ T6268] [ 109.973437][ T6268] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 109.981654][ T6268] __mutex_lock+0x136/0xcc0 [ 109.986736][ T6268] bd_finish_claiming+0x22f/0x3f0 [ 109.992333][ T6268] blkdev_get_by_dev+0x45c/0x600 [ 109.997860][ T6268] bdev_open_by_dev+0x77/0x100 [ 110.003192][ T6268] setup_bdev_super+0x59/0x660 [ 110.008523][ T6268] mount_bdev+0x1d3/0x2d0 [ 110.013419][ T6268] legacy_get_tree+0xea/0x180 [ 110.018675][ T6268] vfs_get_tree+0x8c/0x280 [ 110.023734][ T6268] do_new_mount+0x24b/0xa40 [ 110.028796][ T6268] init_mount+0xde/0x130 [ 110.033613][ T6268] do_mount_root+0x97/0x230 [ 110.038695][ T6268] mount_root_generic+0x1a6/0x3e0 [ 110.044295][ T6268] prepare_namespace+0xc2/0x100 [ 110.049716][ T6268] kernel_init_freeable+0x42e/0x580 [ 110.055488][ T6268] kernel_init+0x1d/0x1c0 [ 110.060385][ T6268] ret_from_fork+0x48/0x80 [ 110.065387][ T6268] ret_from_fork_asm+0x11/0x20 [ 110.070918][ T6268] [ 110.070918][ T6268] -> #0 (bdev_lock){+.+.}-{3:3}: [ 110.078384][ T6268] __lock_acquire+0x2df1/0x7d40 [ 110.083828][ T6268] lock_acquire+0x19e/0x420 [ 110.088905][ T6268] __mutex_lock+0x136/0xcc0 [ 110.093991][ T6268] bd_prepare_to_claim+0x1c0/0x490 [ 110.100024][ T6268] truncate_bdev_range+0x4e/0x260 [ 110.105630][ T6268] blkdev_fallocate+0x428/0x6a0 [ 110.111059][ T6268] vfs_fallocate+0x58e/0x700 [ 110.116223][ T6268] do_madvise+0x166b/0x3750 [ 110.121299][ T6268] __x64_sys_madvise+0xa6/0xc0 [ 110.126636][ T6268] do_syscall_64+0x55/0xa0 [ 110.131648][ T6268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.138105][ T6268] [ 110.138105][ T6268] other info that might help us debug this: [ 110.138105][ T6268] [ 110.148372][ T6268] Chain exists of: [ 110.148372][ T6268] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 110.148372][ T6268] [ 110.162616][ T6268] Possible unsafe locking scenario: [ 110.162616][ T6268] [ 110.170108][ T6268] CPU0 CPU1 [ 110.175520][ T6268] ---- ---- [ 110.180912][ T6268] lock(mapping.invalidate_lock); [ 110.186076][ T6268] lock(&sb->s_type->i_mutex_key#8); [ 110.194032][ T6268] lock(mapping.invalidate_lock); [ 110.201885][ T6268] lock(bdev_lock); [ 110.205832][ T6268] [ 110.205832][ T6268] *** DEADLOCK *** [ 110.205832][ T6268] [ 110.214056][ T6268] 2 locks held by syz.1.157/6268: [ 110.219230][ T6268] #0: ffff8880202563b0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_fallocate+0x205/0x6a0 [ 110.230036][ T6268] #1: ffff888020256540 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 110.240745][ T6268] [ 110.240745][ T6268] stack backtrace: [ 110.246678][ T6268] CPU: 0 PID: 6268 Comm: syz.1.157 Not tainted syzkaller #0 [ 110.254006][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.264114][ T6268] Call Trace: [ 110.267440][ T6268] [ 110.270415][ T6268] dump_stack_lvl+0x18c/0x250 [ 110.275167][ T6268] ? load_image+0x400/0x400 [ 110.279712][ T6268] ? show_regs_print_info+0x20/0x20 [ 110.284963][ T6268] ? print_circular_bug+0x12b/0x1a0 [ 110.290216][ T6268] check_noncircular+0x2fc/0x400 [ 110.295221][ T6268] ? print_deadlock_bug+0x5d0/0x5d0 [ 110.300486][ T6268] ? lockdep_lock+0xf5/0x230 [ 110.305140][ T6268] ? mark_lock+0x94/0x320 [ 110.309522][ T6268] ? _find_first_zero_bit+0xd3/0x100 [ 110.314859][ T6268] __lock_acquire+0x2df1/0x7d40 [ 110.319764][ T6268] ? verify_lock_unused+0x140/0x140 [ 110.325016][ T6268] ? finish_task_switch+0x265/0x8f0 [ 110.330262][ T6268] ? verify_lock_unused+0x140/0x140 [ 110.335515][ T6268] ? finish_task_switch+0x265/0x8f0 [ 110.340768][ T6268] ? __schedule+0x155b/0x45a0 [ 110.345508][ T6268] lock_acquire+0x19e/0x420 [ 110.350062][ T6268] ? bd_prepare_to_claim+0x1c0/0x490 [ 110.355596][ T6268] ? __might_sleep+0xe0/0xe0 [ 110.360262][ T6268] ? mark_lock+0x94/0x320 [ 110.364637][ T6268] ? read_lock_is_recursive+0x20/0x20 [ 110.370058][ T6268] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 110.376096][ T6268] ? lock_chain_count+0x20/0x20 [ 110.380983][ T6268] ? _raw_spin_lock_irq+0xbb/0xf0 [ 110.386057][ T6268] __mutex_lock+0x136/0xcc0 [ 110.390654][ T6268] ? bd_prepare_to_claim+0x1c0/0x490 [ 110.396077][ T6268] ? rcu_is_watching+0x15/0xb0 [ 110.400898][ T6268] ? trace_contention_end+0x3b/0x110 [ 110.406227][ T6268] ? rwsem_down_write_slowpath+0xddd/0xff0 [ 110.412086][ T6268] ? bd_prepare_to_claim+0x1c0/0x490 [ 110.417421][ T6268] ? mutex_lock_nested+0x20/0x20 [ 110.422418][ T6268] ? rwsem_down_read_slowpath+0x880/0x880 [ 110.428203][ T6268] bd_prepare_to_claim+0x1c0/0x490 [ 110.433374][ T6268] ? invalidate_bdev+0xc0/0xc0 [ 110.438200][ T6268] ? truncate_bdev_range+0x260/0x260 [ 110.443623][ T6268] ? mas_prev_slot+0x840/0x8b0 [ 110.448443][ T6268] ? down_write+0x16e/0x200 [ 110.453001][ T6268] ? down_read_killable+0x340/0x340 [ 110.458274][ T6268] truncate_bdev_range+0x4e/0x260 [ 110.463370][ T6268] blkdev_fallocate+0x428/0x6a0 [ 110.468277][ T6268] vfs_fallocate+0x58e/0x700 [ 110.472912][ T6268] do_madvise+0x166b/0x3750 [ 110.477473][ T6268] ? __lock_acquire+0x1347/0x7d40 [ 110.482552][ T6268] ? madvise_set_anon_name+0x440/0x440 [ 110.488085][ T6268] ? __lock_acquire+0x7d40/0x7d40 [ 110.493165][ T6268] ? slab_free_freelist_hook+0x130/0x1a0 [ 110.498857][ T6268] ? verify_lock_unused+0x140/0x140 [ 110.504110][ T6268] ? tomoyo_path_number_perm+0x500/0x620 [ 110.509899][ T6268] ? __kmem_cache_free+0xba/0x1e0 [ 110.514980][ T6268] ? tomoyo_path_number_perm+0x5b4/0x620 [ 110.520676][ T6268] ? tomoyo_path_number_perm+0x217/0x620 [ 110.526390][ T6268] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 110.531920][ T6268] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 110.537959][ T6268] ? lock_chain_count+0x20/0x20 [ 110.542871][ T6268] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 110.548826][ T6268] ? lockdep_hardirqs_on+0x98/0x150 [ 110.554175][ T6268] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 110.560159][ T6268] ? lock_chain_count+0x20/0x20 [ 110.565078][ T6268] __x64_sys_madvise+0xa6/0xc0 [ 110.569889][ T6268] do_syscall_64+0x55/0xa0 [ 110.574364][ T6268] ? clear_bhb_loop+0x40/0x90 [ 110.579177][ T6268] ? clear_bhb_loop+0x40/0x90 [ 110.583897][ T6268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.589842][ T6268] RIP: 0033:0x7f3f55d9aeb9 [ 110.594297][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.613958][ T6268] RSP: 002b:00007f3f56b8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 110.622599][ T6268] RAX: ffffffffffffffda RBX: 00007f3f56016090 RCX: 00007f3f55d9aeb9 [ 110.630621][ T6268] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 110.638730][ T6268] RBP: 00007f3f55e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 110.646749][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.654764][ T6268] R13: 00007f3f56016128 R14: 00007f3f56016090 R15: 00007ffe3e01ebc8 [ 110.662800][ T6268] [ 110.882263][ T6267] loop3: detected capacity change from 0 to 40427 [ 110.903540][ T6267] F2FS-fs (loop3): invalid crc value [ 110.913764][ T6267] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.983926][ T6267] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.034962][ T5858] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.073803][ T5767] syz-executor: attempt to access beyond end of device [ 111.073803][ T5767] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 111.088329][ T5767] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 111.096221][ T5767] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 111.224732][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 111.237937][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.254567][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.277959][ T5858] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 111.292854][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.309421][ T5858] usb 1-1: config 0 descriptor?? [ 111.327368][ T5858] hub 1-1:0.0: USB hub found [ 111.533205][ T5858] hub 1-1:0.0: 2 ports detected [ 111.734997][ T5858] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 111.747264][ T5858] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 111.758811][ T5858] usbhid 1-1:0.0: can't add hid device: -71 [ 111.766555][ T5858] usbhid: probe of 1-1:0.0 failed with error -71 [ 111.805656][ T5858] usb 1-1: USB disconnect, device number 4