last executing test programs: 7.230578279s ago: executing program 0 (id=167): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000140), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000004c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.928556099s ago: executing program 0 (id=186): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='personality\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x400) 3.867717808s ago: executing program 1 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 3.539229112s ago: executing program 0 (id=189): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, 0x0, r1}, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000140)="8265000000000000", 0x5ac) 3.437283084s ago: executing program 1 (id=191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r1, &(0x7f0000000340)={0x17f, 0x7d, 0xa, {{0x0, 0x163, 0x3, 0x4, {0x0, 0x1, 0x2}, 0x100000, 0x8, 0x7, 0x2, 0x1, '\x85', 0x1, ' ', 0x69, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\x83h\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0I\xff\x02):9\xe7\xa6\x9e~\x00\x00\x00\x00\x00\x00\x00\x05\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00', 0xc5, '\x00\xf1\xc8ib\x18\x19m\xb8\xe1\xc4\xcd\xd0w&\x9a\xb1VC.\xd7\x18t\xb7@\t0M\x06bjF\x12\xba8\xdd+:\xb1\xa8\xcbF\xb4Ot\xa6)D8x8y\x1b\xb2\xf7XHYS\x19\xa0\xdb\xee\xf7O\xa2\xfa\x8e@\xa3\x1a@\xe0\x14\xbe\xac\x9akte\x93R\xb3<\xa1B\xa0+\xf9y\x1fr\xfc\xda\x8f\xef-\x8d\xa1$\xe4\xb9|hXn\xcbi\x05\a\xba\xe9e\xe0\xc6\xbe\x83\x85\xc1\x90\xc0\xa8\x98JEU\xbb\x10V_{\x9ct\x9e]\xe4\x9f\n\xd1\"Y\xff\xd4\xda\x8d\xb7\xadEr:\x87\x86\x14\xc1\x8b\xed\x1b\x19H\x9e\xc0\xe4\xa0\xea\xac\xf2\x0fz\xb3\xc8\x92\x9ai\x7fm\xabb\xf9jG\xdc\v\xc4$\x82\x85/Q\xe0\xc6\xc33A\xbe\xc1\xadP'}, 0x7, '\x97\xfe\xef\x85z\x03\x86'}}, 0x17f) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 3.334771826s ago: executing program 0 (id=192): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 3.137909622s ago: executing program 0 (id=195): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x6b) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.080974652s ago: executing program 1 (id=196): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000ac0)={r2, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r3, 0x4, 0x3, 0x7, 0x7, 0x8000}, &(0x7f0000000080)=0x14) 2.915656344s ago: executing program 1 (id=197): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) recvmmsg(r3, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40008020, 0x0) 2.737663603s ago: executing program 0 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) 2.445183473s ago: executing program 32 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) 2.260423611s ago: executing program 3 (id=202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x1, 0x0, @ioapic={0x25000, 0x2, 0x81, 0xeffffdff, 0x0, [{0x6, 0x0, 0xfd, '\x00', 0xff}, {0x0, 0x8, 0x0, '\x00', 0x7c}, {0x7, 0x13, 0x4, '\x00', 0xbb}, {0x13, 0xb}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0xfe, 0x9, 0x6, '\x00', 0x2}, {0x8, 0x0, 0x6}, {0x6f, 0x0, 0x0, '\x00', 0x7}, {0x0, 0x8f, 0xf5, '\x00', 0x27}, {0xb8, 0x6, 0x0, '\x00', 0x1}, {0x7}, {0x1, 0x99, 0x81, '\x00', 0x1}, {0x0, 0x49, 0x2, '\x00', 0xf9}, {0xf8, 0x0, 0x3, '\x00', 0x2}, {0xc3, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x6d, 0x84, '\x00', 0xff}, {0x3, 0x0, 0xec}, {0x0, 0x6, 0x6, '\x00', 0x10}, {0xfe}, {0x0, 0x80, 0x0, '\x00', 0x1}, {0x4, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x4, '\x00', 0x5}, {0x0, 0x2, 0x8}, {0x4a, 0xff, 0x3}]}}) 2.219092163s ago: executing program 2 (id=203): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2.000093276s ago: executing program 3 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x5, 0xa85, &(0x7f0000000200)="f644cb525f3b290e7c45fbb4a92a00090be37e02d18ba8af1cf113d4ce98261062b41fe7e3cc762e9fd6906ec181ded64119", 0x0, 0x32}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2, 0x0, '\x00', 0x0, 0x6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xfb, 0xff, 0xd3, '\x00', 0x69}, {0x0, 0xfa, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0x10}, {0x7f, 0x5, 0x4a, '\x00', 0x6}, {0xd7, 0xd, 0xa5, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0xbe, '\x00', 0x9}, {0x31, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x4d, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.950620887s ago: executing program 2 (id=205): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x886b}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x4, 0x28, 0x64, 0x0, 0x5, 0x6, 0x0, @multicast1, @multicast2}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x81, 0x0, 0x6}}}}}}}, 0x3a) 1.762423595s ago: executing program 1 (id=206): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.61960872s ago: executing program 3 (id=207): r0 = socket$inet6(0xa, 0x2, 0x0) listen(r0, 0x6) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.336257321s ago: executing program 3 (id=208): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="7ee8472ceac34f54b86f2fb56faa92642db04a5720c68dad9dbce693372b112d0247f31eb9d1472e13e3379e663aa838f9d12b190244", 0x36}], 0x1}}], 0x1, 0x8014) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) 1.324191689s ago: executing program 2 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x5}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1b9d}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0xe3f8}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.231477403s ago: executing program 1 (id=210): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") 1.107648742s ago: executing program 3 (id=211): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="6736f30f09df77000f20d8663520000000f36d0f20d86635200000000f22d80f91e66764660f384112ba6100b002ee642e670f01c50f01d4", 0x38}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 902.534236ms ago: executing program 2 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000", @ANYBLOB], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 729.466776ms ago: executing program 2 (id=213): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011003f00303030303a30303a31302e3000000000080003f4ffffff0008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0800b1", 0x3}], 0x1}, 0x24008004) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 667.950736ms ago: executing program 3 (id=214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 2 (id=215): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x1, 0x0, 0x0, 0xfe, 0x5, 0x3600}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004000) ptrace(0x10, r0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4000) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 57.442427][ T5749] cgroup: Unknown subsys name 'net' [ 57.602118][ T5749] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.986366][ T5749] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.360560][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.375883][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.385965][ T5764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.405764][ T5767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.429453][ T5767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.446376][ T5767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.456777][ T5767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.461541][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.472105][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.476692][ T5767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.487025][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.497172][ T5767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.504929][ T5767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.506067][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.526045][ T5767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.537716][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.542551][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.545399][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.554405][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.559549][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.569619][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.590957][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.606375][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.616119][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.037439][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 61.073456][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 61.099424][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 61.153748][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 61.275463][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.283680][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.291082][ T5769] bridge_slave_0: entered allmulticast mode [ 61.298086][ T5769] bridge_slave_0: entered promiscuous mode [ 61.307117][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.314320][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.321852][ T5769] bridge_slave_1: entered allmulticast mode [ 61.328711][ T5769] bridge_slave_1: entered promiscuous mode [ 61.344143][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.351384][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.358789][ T5765] bridge_slave_0: entered allmulticast mode [ 61.365418][ T5765] bridge_slave_0: entered promiscuous mode [ 61.410643][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.417824][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.424987][ T5765] bridge_slave_1: entered allmulticast mode [ 61.431935][ T5765] bridge_slave_1: entered promiscuous mode [ 61.451665][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.470407][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.477678][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.484824][ T5773] bridge_slave_0: entered allmulticast mode [ 61.491926][ T5773] bridge_slave_0: entered promiscuous mode [ 61.510678][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.529077][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.536240][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.543396][ T5762] bridge_slave_0: entered allmulticast mode [ 61.550443][ T5762] bridge_slave_0: entered promiscuous mode [ 61.557636][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.564833][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.573217][ T5773] bridge_slave_1: entered allmulticast mode [ 61.580093][ T5773] bridge_slave_1: entered promiscuous mode [ 61.609898][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.630805][ T5769] team0: Port device team_slave_0 added [ 61.637435][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.644555][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.653852][ T5762] bridge_slave_1: entered allmulticast mode [ 61.661209][ T5762] bridge_slave_1: entered promiscuous mode [ 61.698188][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.709395][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.720096][ T5769] team0: Port device team_slave_1 added [ 61.739416][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.752081][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.763490][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.831239][ T5762] team0: Port device team_slave_0 added [ 61.839842][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.848361][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.874641][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.901195][ T5765] team0: Port device team_slave_0 added [ 61.909513][ T5762] team0: Port device team_slave_1 added [ 61.917742][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.924691][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.951257][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.968349][ T5773] team0: Port device team_slave_0 added [ 61.976309][ T5765] team0: Port device team_slave_1 added [ 62.007491][ T5773] team0: Port device team_slave_1 added [ 62.043207][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.050350][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.076901][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.097756][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.104731][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.131513][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.152998][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.160120][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.186484][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.207256][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.214224][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.240272][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.271177][ T5769] hsr_slave_0: entered promiscuous mode [ 62.277611][ T5769] hsr_slave_1: entered promiscuous mode [ 62.284646][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.291862][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.318707][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.335959][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.342930][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.368990][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.476143][ T5773] hsr_slave_0: entered promiscuous mode [ 62.482656][ T5773] hsr_slave_1: entered promiscuous mode [ 62.491481][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.499398][ T5773] Cannot create hsr debugfs directory [ 62.523753][ T5765] hsr_slave_0: entered promiscuous mode [ 62.530434][ T5765] hsr_slave_1: entered promiscuous mode [ 62.538785][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.546627][ T5765] Cannot create hsr debugfs directory [ 62.568704][ T5762] hsr_slave_0: entered promiscuous mode [ 62.575135][ T5762] hsr_slave_1: entered promiscuous mode [ 62.581423][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.589588][ T5762] Cannot create hsr debugfs directory [ 62.636481][ T5770] Bluetooth: hci2: command tx timeout [ 62.636560][ T5082] Bluetooth: hci1: command tx timeout [ 62.642192][ T5770] Bluetooth: hci0: command tx timeout [ 62.715711][ T5082] Bluetooth: hci3: command tx timeout [ 62.964218][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.977391][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.988083][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.999991][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.056127][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.069292][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.092023][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.103154][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.155068][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.194049][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.204341][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.216929][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.269081][ T5762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.303296][ T5762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.332359][ T5762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.341611][ T5762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.408843][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.474639][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.490631][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.524091][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.531526][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.541610][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.549288][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.572300][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.592030][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.599209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.617630][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.624767][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.654617][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.709614][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.724013][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.773883][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.781032][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.792154][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.799287][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.839124][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.854365][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.861605][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.880471][ T4867] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.887662][ T4867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.009305][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.202904][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.297597][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.321016][ T5773] veth0_vlan: entered promiscuous mode [ 64.422036][ T5769] veth0_vlan: entered promiscuous mode [ 64.449916][ T5769] veth1_vlan: entered promiscuous mode [ 64.460451][ T5773] veth1_vlan: entered promiscuous mode [ 64.498308][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.522810][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.555000][ T5773] veth0_macvtap: entered promiscuous mode [ 64.581526][ T5773] veth1_macvtap: entered promiscuous mode [ 64.590571][ T5769] veth0_macvtap: entered promiscuous mode [ 64.603478][ T5769] veth1_macvtap: entered promiscuous mode [ 64.643071][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.660818][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.672409][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.685324][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.698246][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.716983][ T5082] Bluetooth: hci1: command tx timeout [ 64.717427][ T5770] Bluetooth: hci2: command tx timeout [ 64.722402][ T5772] Bluetooth: hci0: command tx timeout [ 64.754764][ T5765] veth0_vlan: entered promiscuous mode [ 64.764853][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.776623][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.785340][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.794144][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.803539][ T5772] Bluetooth: hci3: command tx timeout [ 64.811427][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.823281][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.834648][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.844788][ T5762] veth0_vlan: entered promiscuous mode [ 64.858435][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.868410][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.878112][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.889272][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.906588][ T5765] veth1_vlan: entered promiscuous mode [ 64.929703][ T5762] veth1_vlan: entered promiscuous mode [ 65.059800][ T4867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.068919][ T4867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.094767][ T5762] veth0_macvtap: entered promiscuous mode [ 65.113207][ T4867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.124131][ T5762] veth1_macvtap: entered promiscuous mode [ 65.133164][ T5765] veth0_macvtap: entered promiscuous mode [ 65.136305][ T4867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.146574][ T5765] veth1_macvtap: entered promiscuous mode [ 65.160243][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.171898][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.182580][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.193075][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.206280][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.236860][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.244816][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.267276][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.278601][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.290275][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.303246][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.314214][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.326748][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.337351][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.347621][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.364173][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.374081][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.384831][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.396384][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.422856][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.431783][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.443858][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.455464][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.482843][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.498343][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.510277][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.521105][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.531329][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.541782][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.552721][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.572394][ T5762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.592335][ T5762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.605739][ T5762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.614476][ T5762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639000][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.667599][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.912092][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.941211][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.972634][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.002260][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.096221][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.104087][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.269277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.311017][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.384240][ T5836] syz.0.1[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.427339][ T5836] loop0: detected capacity change from 0 to 64 [ 66.669968][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.796053][ T5772] Bluetooth: hci2: command tx timeout [ 66.802056][ T5082] Bluetooth: hci0: command tx timeout [ 66.802074][ T5770] Bluetooth: hci1: command tx timeout [ 66.877067][ T5770] Bluetooth: hci3: command tx timeout [ 67.406417][ T5770] block nbd2: Receive control failed (result -32) [ 67.430016][ T5849] block nbd2: shutting down sockets [ 67.518055][ T5855] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 67.578528][ T5855] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.630041][ T5857] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.266162][ T5823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.495611][ T5823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.511504][ T5823] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 68.530949][ T5823] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.542705][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.554242][ T5823] usb 4-1: Product: syz [ 68.564111][ T5823] usb 4-1: Manufacturer: syz [ 68.571889][ T5823] usb 4-1: SerialNumber: syz [ 68.608466][ T5879] loop2: detected capacity change from 0 to 32768 [ 68.656559][ T5879] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.24 (5879) [ 68.708834][ T5879] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 68.740776][ T5879] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 68.757136][ T5879] BTRFS info (device loop2): enabling ssd optimizations [ 68.775360][ T5879] BTRFS info (device loop2): not using ssd optimizations [ 68.787129][ T5879] BTRFS info (device loop2): turning off barriers [ 68.807038][ T5879] BTRFS info (device loop2): using free space tree [ 68.854953][ T5869] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.876041][ T5770] Bluetooth: hci2: command tx timeout [ 68.876058][ T5772] Bluetooth: hci0: command tx timeout [ 68.881751][ T5770] Bluetooth: hci1: command tx timeout [ 68.955724][ T5770] Bluetooth: hci3: command tx timeout [ 69.312953][ T5773] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 69.353448][ T5881] loop0: detected capacity change from 0 to 32768 [ 69.434958][ T5881] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.514197][ T5869] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.737775][ T5823] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 69.768640][ T5881] XFS (loop0): Ending clean mount [ 69.770809][ T5823] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 69.782946][ T5881] XFS (loop0): Quotacheck needed: Please wait. [ 69.812031][ T5823] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 69.861153][ T5881] XFS (loop0): Quotacheck: Done. [ 69.910584][ T5801] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.939684][ T5823] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 70.007280][ T5823] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 70.088026][ T5823] usb 4-1: USB disconnect, device number 2 [ 70.095165][ T5823] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 70.106742][ T5921] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET) [ 70.130721][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 70.179735][ T5801] usb 3-1: Using ep0 maxpacket: 16 [ 70.197364][ T5801] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 70.220536][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.231998][ T5801] usb 3-1: Product: syz [ 70.244749][ T5801] usb 3-1: Manufacturer: syz [ 70.266449][ T5801] usb 3-1: SerialNumber: syz [ 71.305684][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.397339][ T5947] loop0: detected capacity change from 0 to 8192 [ 71.416923][ T5947] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.431343][ T5947] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 71.462004][ T5947] REISERFS (device loop0): using ordered data mode [ 71.468870][ T5947] reiserfs: using flush barriers [ 71.484909][ T5947] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.502245][ T5947] REISERFS (device loop0): checking transaction log (loop0) [ 71.541046][ T5848] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.543575][ T5801] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 71.580003][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.589308][ T5801] usb 3-1: USB disconnect, device number 2 [ 71.604854][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.615578][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.630759][ T5848] usb 2-1: Product: syz [ 71.649550][ T5848] usb 2-1: Manufacturer: syz [ 71.654238][ T5848] usb 2-1: SerialNumber: syz [ 71.707478][ T5848] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 71.743785][ T788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 71.745430][ T5947] REISERFS (device loop0): Using tea hash to sort names [ 71.773390][ T5947] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 72.304213][ T5963] loop3: detected capacity change from 0 to 8 [ 72.399415][ T5963] SQUASHFS error: Unable to read inode 0xa7 [ 72.447775][ T5752] usb 2-1: USB disconnect, device number 2 [ 72.923404][ T5965] loop2: detected capacity change from 0 to 32768 [ 72.926585][ T5976] IPv4: Oversized IP packet from 127.202.26.0 [ 72.955249][ T5965] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 72.994269][ T5965] XFS (loop2): Ending clean mount [ 73.002576][ T5965] XFS (loop2): Quotacheck needed: Please wait. [ 73.039757][ T788] usb 2-1: Service connection timeout for: 256 [ 73.059707][ T5965] XFS (loop2): Quotacheck: Done. [ 73.086354][ T788] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 73.123344][ T788] ath9k_htc: Failed to initialize the device [ 73.160406][ T5752] usb 2-1: ath9k_htc: USB layer deinitialized [ 73.362923][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 74.215663][ T5801] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 74.433900][ T5801] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 74.436855][ T6016] loop0: detected capacity change from 0 to 128 [ 74.453646][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.470278][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.485593][ T5801] usb 3-1: Product: syz [ 74.500680][ T5801] usb 3-1: Manufacturer: syz [ 74.520291][ T5801] usb 3-1: SerialNumber: syz [ 74.544647][ T5801] usb 3-1: config 0 descriptor?? [ 74.665689][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 74.680764][ T788] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.699468][ T788] usb 4-1: config 179 has no interface number 0 [ 74.720600][ T788] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 74.755596][ T788] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 74.773012][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 74.787359][ T5801] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 74.790528][ T788] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.804354][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 74.815265][ T788] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 74.833871][ T788] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.850918][ T788] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.860190][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.894155][ T6012] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.055695][ T5960] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.195315][ T788] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 75.215702][ T968] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.235655][ T5960] usb 1-1: Using ep0 maxpacket: 8 [ 75.243455][ T5960] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 75.260705][ T5960] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.272525][ T5960] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.289842][ T5960] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.310272][ T5960] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.325156][ T5960] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.335823][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.395832][ T968] usb 2-1: Using ep0 maxpacket: 32 [ 75.419399][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.429065][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.437345][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.454486][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.465185][ T968] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 75.480566][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.502242][ T968] usb 2-1: config 0 descriptor?? [ 75.523631][ T968] hub 2-1:0.0: USB hub found [ 75.570595][ T5960] usb 1-1: GET_CAPABILITIES returned 0 [ 75.576507][ T5960] usbtmc 1-1:16.0: can't read capabilities [ 75.603252][ T5801] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 75.628632][ T5801] usb 3-1: USB disconnect, device number 3 [ 75.740600][ T968] hub 2-1:0.0: 1 port detected [ 75.741419][ T5960] usb 4-1: USB disconnect, device number 3 [ 75.745447][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 75.745544][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 75.908695][ T5848] usb 1-1: USB disconnect, device number 2 [ 75.920210][ T6024] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 76.208312][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 76.382876][ T6034] ======================================================= [ 76.382876][ T6034] WARNING: The mand mount option has been deprecated and [ 76.382876][ T6034] and is ignored by this kernel. Remove the mand [ 76.382876][ T6034] option from the mount to silence this warning. [ 76.382876][ T6034] ======================================================= [ 76.441257][ T968] hub 2-1:0.0: activate --> -90 [ 76.461689][ T6034] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.675965][ T5848] usb 2-1: USB disconnect, device number 3 [ 76.881134][ T6041] loop2: detected capacity change from 0 to 32768 [ 76.965687][ T6041] JBD2: Ignoring recovery information on journal [ 76.973767][ T6046] loop3: detected capacity change from 0 to 128 [ 76.988281][ T6046] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 77.000409][ T6046] hpfs: filesystem error: improperly stopped [ 77.006534][ T6046] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 77.045547][ T6041] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 77.077476][ T6046] hpfs: You really don't want any checks? You are crazy... [ 77.084749][ T6046] hpfs: Code page index out of array [ 77.119474][ T6046] hpfs: code page support is disabled [ 77.139631][ T6046] hpfs: hpfs_map_4sectors(): unaligned read [ 77.149896][ T6046] hpfs: hpfs_map_4sectors(): unaligned read [ 77.204564][ T6046] hpfs: filesystem error: unable to find root dir [ 77.222016][ T6041] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 77.245355][ T6041] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.255313][ T6041] OCFS2: File system is now read-only. [ 77.261020][ T6041] (syz.2.72,6041,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 77.269448][ T6041] (syz.2.72,6041,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 77.277601][ T6041] (syz.2.72,6041,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 77.286403][ T6041] (syz.2.72,6041,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 77.294866][ T6041] (syz.2.72,6041,0):ocfs2_write_cluster:1153 ERROR: status = -30 [ 77.302721][ T6041] (syz.2.72,6041,0):ocfs2_write_cluster_by_desc:1248 ERROR: status = -30 [ 77.311193][ T6041] (syz.2.72,6041,0):ocfs2_write_begin_nolock:1820 ERROR: status = -30 [ 77.320322][ T6041] (syz.2.72,6041,0):ocfs2_write_begin:1907 ERROR: status = -30 [ 77.691045][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 78.026463][ T968] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.245715][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 78.263873][ T968] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.275567][ T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.294814][ T6053] loop0: detected capacity change from 0 to 32768 [ 78.315664][ T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.325866][ T6053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.77 (6053) [ 78.339303][ T968] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.363485][ T6053] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.384267][ T968] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.394611][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.407891][ T6053] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 78.425744][ T6053] BTRFS info (device loop0): setting nodatacow, compression disabled [ 78.465780][ T6053] BTRFS info (device loop0): turning on flush-on-commit [ 78.472799][ T6053] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 78.535835][ T6053] BTRFS info (device loop0): use lzo compression, level 0 [ 78.543029][ T6053] BTRFS info (device loop0): setting nodatasum [ 78.572963][ T6053] BTRFS info (device loop0): use no compression [ 78.596532][ T6053] BTRFS info (device loop0): trying to use backup root at mount time [ 78.625690][ T6053] BTRFS info (device loop0): max_inline at 0 [ 78.628054][ T968] usb 4-1: GET_CAPABILITIES returned 0 [ 78.650271][ T6053] BTRFS info (device loop0): using free space tree [ 78.691192][ T968] usbtmc 4-1:16.0: can't read capabilities [ 78.841325][ T4867] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 78.854215][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.864179][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.873943][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.883072][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.892198][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.892600][ T6053] BTRFS warning (device loop0): couldn't read tree root [ 78.901284][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.903162][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.924711][ T6061] loop1: detected capacity change from 0 to 40427 [ 78.926859][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.942429][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.951527][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.963165][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.972678][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.981822][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.990943][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.996060][ T6053] BTRFS warning (device loop0): try to load backup roots slot 1 [ 79.000032][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.023026][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.058970][ T6061] F2FS-fs (loop1): invalid crc value [ 79.067931][ T1078] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 79.077113][ T968] usb 4-1: USB disconnect, device number 4 [ 79.104504][ T6053] BTRFS warning (device loop0): couldn't read tree root [ 79.105141][ T6061] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.149469][ T6053] BTRFS warning (device loop0): try to load backup roots slot 2 [ 79.196965][ T4867] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 79.210453][ T6061] F2FS-fs (loop1): Start checkpoint disabled! [ 79.224227][ T6053] BTRFS warning (device loop0): couldn't read tree root [ 79.235601][ T6053] BTRFS warning (device loop0): try to load backup roots slot 3 [ 79.252412][ T6061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 79.283781][ T6053] BTRFS info (device loop0): enabling ssd optimizations [ 79.292270][ T6053] BTRFS info (device loop0): auto enabling async discard [ 79.310462][ T6053] BTRFS info (device loop0): rebuilding free space tree [ 79.373389][ T6053] BTRFS info (device loop0): checking UUID tree [ 79.485658][ T5848] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.701693][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.735694][ T5848] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.785268][ T5848] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.829755][ T5848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.868839][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.896869][ T5848] usb 3-1: Product: syz [ 79.901133][ T5848] usb 3-1: Manufacturer: syz [ 79.906610][ T5848] usb 3-1: SerialNumber: syz [ 79.923086][ T5848] hub 3-1:1.0: bad descriptor, ignoring hub [ 79.931335][ T5848] hub: probe of 3-1:1.0 failed with error -5 [ 79.969883][ T5765] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.114699][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.114699][ T12] loop1: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 80.261797][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.261797][ T12] loop1: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 80.492830][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.492830][ T12] loop1: rw=1, sector=57344, nr_sectors = 8192 limit=40427 [ 80.533026][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.533026][ T12] loop1: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 80.570101][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.570101][ T12] loop1: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 80.591359][ T5848] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 80.596922][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.596922][ T12] loop1: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 80.618378][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.618378][ T12] loop1: rw=1, sector=69656, nr_sectors = 8 limit=40427 [ 80.662009][ T5848] usb 3-1: USB disconnect, device number 4 [ 80.678218][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.678218][ T12] loop1: rw=1, sector=69664, nr_sectors = 8 limit=40427 [ 80.694649][ T5848] usblp0: removed [ 80.715812][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.715812][ T12] loop1: rw=1, sector=69672, nr_sectors = 8 limit=40427 [ 80.732167][ T12] kworker/u4:1: attempt to access beyond end of device [ 80.732167][ T12] loop1: rw=1, sector=69680, nr_sectors = 8 limit=40427 [ 80.776453][ T5823] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 80.875807][ T6108] loop0: detected capacity change from 0 to 2048 [ 80.929462][ T6108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 80.935236][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 80.943727][ T6108] System zones: 0-4 [ 80.951626][ T6108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.975947][ T6108] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.979311][ T5823] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 80.996038][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.004057][ T5823] usb 4-1: Product: syz [ 81.008484][ T5823] usb 4-1: Manufacturer: syz [ 81.013102][ T5823] usb 4-1: SerialNumber: syz [ 81.020223][ T5823] usb 4-1: config 0 descriptor?? [ 81.038257][ T5823] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 81.116782][ T5848] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 81.310729][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.336139][ T5848] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 81.345833][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.363582][ T5848] usb 3-1: config 0 descriptor?? [ 81.377324][ T5848] pwc: Askey VC010 type 2 USB webcam detected. [ 81.417364][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.565236][ T6116] Bluetooth: MGMT ver 1.22 [ 81.748354][ T6120] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 81.797326][ T5848] pwc: recv_control_msg error -32 req 02 val 2b00 [ 81.822791][ T5848] pwc: recv_control_msg error -32 req 02 val 2700 [ 81.841467][ T5848] pwc: recv_control_msg error -32 req 02 val 2c00 [ 81.857597][ T27] cfg80211: failed to load regulatory.db [ 81.876162][ T5848] pwc: recv_control_msg error -32 req 04 val 1000 [ 81.964089][ T6126] Zero length message leads to an empty skb [ 82.098593][ T5848] pwc: recv_control_msg error -71 req 04 val 1400 [ 82.112817][ T5848] pwc: recv_control_msg error -71 req 02 val 2000 [ 82.120138][ T5848] pwc: recv_control_msg error -71 req 02 val 2100 [ 82.133072][ T5848] pwc: recv_control_msg error -71 req 04 val 1500 [ 82.141284][ T5848] pwc: recv_control_msg error -71 req 02 val 2500 [ 82.152026][ T5848] pwc: recv_control_msg error -71 req 02 val 2400 [ 82.170857][ T5848] pwc: recv_control_msg error -71 req 02 val 2600 [ 82.188225][ T5848] pwc: recv_control_msg error -71 req 02 val 2900 [ 82.197258][ T5848] pwc: recv_control_msg error -71 req 02 val 2800 [ 82.204915][ T5848] pwc: recv_control_msg error -71 req 04 val 1100 [ 82.212677][ T5848] pwc: recv_control_msg error -71 req 04 val 1200 [ 82.227122][ T5848] pwc: Registered as video103. [ 82.234406][ T5848] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 82.294152][ T5848] usb 3-1: USB disconnect, device number 5 [ 82.315760][ T5823] gspca_stk1135: reg_w 0xd err -71 [ 82.330095][ T5823] gspca_stk1135: serial bus timeout: status=0x00 [ 82.350619][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.355562][ T5823] gspca_stk1135: Sensor write failed [ 82.367886][ T5823] gspca_stk1135: serial bus timeout: status=0x00 [ 82.374284][ T5823] gspca_stk1135: Sensor write failed [ 82.405965][ T5823] gspca_stk1135: serial bus timeout: status=0x00 [ 82.412402][ T5823] gspca_stk1135: Sensor read failed [ 82.425618][ T5823] gspca_stk1135: serial bus timeout: status=0x00 [ 82.432112][ T5823] gspca_stk1135: Sensor read failed [ 82.467819][ T5823] gspca_stk1135: Detected sensor type unknown (0x0) [ 82.474505][ T5823] gspca_stk1135: serial bus timeout: status=0x00 [ 82.497419][ T5823] gspca_stk1135: Sensor read failed [ 82.504194][ T5823] gspca_stk1135: serial bus timeout: status=0x00 [ 82.511498][ T5823] gspca_stk1135: Sensor read failed [ 82.518746][ T5823] gspca_stk1135: serial bus timeout: status=0x00 [ 82.525171][ T5823] gspca_stk1135: Sensor write failed [ 82.533565][ T5823] gspca_stk1135: serial bus timeout: status=0x00 [ 82.544141][ T5823] gspca_stk1135: Sensor write failed [ 82.552611][ T5823] stk1135: probe of 4-1:0.0 failed with error -71 [ 82.555725][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 82.565974][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.578332][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.586263][ T5823] usb 4-1: USB disconnect, device number 5 [ 82.588291][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.604761][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.636109][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.645203][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.907019][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 82.913627][ T23] usbtmc 2-1:16.0: can't read capabilities [ 83.235926][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.245209][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.254281][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.263348][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.272523][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.281594][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.306019][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.315236][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.324346][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.335188][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.344314][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.353413][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.378286][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.387425][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.396497][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.405560][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.471245][ T8] usb 2-1: USB disconnect, device number 4 [ 84.135767][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 84.223720][ T6171] Set syz1 is full, maxelem 0 reached [ 84.345560][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 84.358058][ T8] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.375304][ T8] usb 3-1: config 179 has no interface number 0 [ 84.382711][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 84.394201][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 84.409644][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.421181][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 84.437279][ T8] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.452334][ T8] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.461867][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.499208][ T6164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.565734][ T968] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.755920][ T968] usb 2-1: Using ep0 maxpacket: 32 [ 84.786663][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.795871][ T6180] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 84.804364][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.818499][ T968] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.865731][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.914452][ T968] usb 2-1: config 0 descriptor?? [ 84.950716][ T968] hub 2-1:0.0: USB hub found [ 84.965750][ T5848] usb 3-1: USB disconnect, device number 6 [ 84.965854][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 84.982045][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 85.132807][ T968] hub 2-1:0.0: 1 port detected [ 85.255734][ T5960] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.415812][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.442380][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.453413][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.463356][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.477149][ T5960] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.486279][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.506661][ T5960] usb 4-1: config 0 descriptor?? [ 85.605665][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 85.613442][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 85.621964][ T8] usb 1-1: config 179 has no interface number 0 [ 85.628814][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 85.640144][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 85.651597][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 85.663226][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 85.674746][ T8] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 85.689087][ T8] usb 1-1: config 179 interface 65 has no altsetting 0 [ 85.696059][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 85.705114][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.741484][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 85.779346][ T968] hub 2-1:0.0: activate --> -90 [ 85.814173][ T5122] input input7: unable to receive magic message: -110 [ 85.824677][ T5122] input input7: unable to receive magic message: -32 [ 85.836427][ T5122] input input7: unable to receive magic message: -32 [ 85.844846][ T5122] input input7: unable to receive magic message: -32 [ 85.845647][ T5848] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 85.865177][ T5122] input input7: unable to receive magic message: -32 [ 85.949299][ T5960] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 85.980744][ T6189] input input7: unable to receive magic message: -32 [ 85.984224][ T5960] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 86.012781][ T5823] usb 1-1: USB disconnect, device number 3 [ 86.012848][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 86.035077][ T5823] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 86.047415][ T5848] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.058385][ T5848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.082890][ T5848] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.113154][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.122393][ T5848] usb 3-1: SerialNumber: syz [ 86.204890][ T8] usb 2-1: USB disconnect, device number 5 [ 86.322393][ C0] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (swapper/0) [ 86.367361][ T5848] usb 3-1: 0:2 : does not exist [ 86.384929][ T5848] usb 3-1: USB disconnect, device number 7 [ 86.435995][ T968] usb 2-1-port1: config error [ 86.538549][ T5823] usb 4-1: USB disconnect, device number 6 [ 87.496711][ T6204] loop0: detected capacity change from 0 to 32768 [ 87.521801][ T6214] loop3: detected capacity change from 0 to 2048 [ 87.557233][ T6204] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 87.575013][ T6202] loop1: detected capacity change from 0 to 40427 [ 87.606980][ T6202] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 87.615203][ T6202] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 87.635217][ T6214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.649915][ T6202] F2FS-fs (loop1): invalid crc value [ 87.740511][ T6204] XFS (loop0): Ending clean mount [ 87.789460][ T28] audit: type=1800 audit(1773085641.473:2): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 87.852417][ T6202] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 87.879462][ T6202] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.912141][ T28] audit: type=1800 audit(1773085641.593:3): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 88.006671][ T28] audit: type=1800 audit(1773085641.693:4): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 88.027026][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.137960][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 88.162117][ T6233] syzkaller1: entered promiscuous mode [ 88.169443][ T6202] bio_check_eod: 890 callbacks suppressed [ 88.169458][ T6202] syz.1.128: attempt to access beyond end of device [ 88.169458][ T6202] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 88.201800][ T6233] syzkaller1: entered allmulticast mode [ 88.266672][ T5762] syz-executor: attempt to access beyond end of device [ 88.266672][ T5762] loop1: rw=2049, sector=45112, nr_sectors = 16 limit=40427 [ 88.357242][ T5762] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 88.364263][ T5762] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 88.839389][ T6247] Set syz1 is full, maxelem 0 reached [ 88.976741][ T6250] loop0: detected capacity change from 0 to 512 [ 89.011768][ T6250] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.142: inode has both inline data and extents flags [ 89.034434][ T6250] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.142: couldn't read orphan inode 15 (err -117) [ 89.050371][ T6250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.102411][ T6250] process 'syz.0.142' launched './file0' with NULL argv: empty string added [ 89.112473][ T6250] Invalid argument reading file caps for ./file0 [ 89.192653][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.413699][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.456722][ T6264] input: syz0 as /devices/virtual/input/input8 [ 89.632319][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.664257][ T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.701357][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.729110][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.751128][ T6257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.773814][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 89.790520][ T6272] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 90.088314][ T8] usb 2-1: USB disconnect, device number 6 [ 90.092874][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 90.135486][ T6281] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.145382][ T6281] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.154442][ T6281] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.167390][ T6281] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.199431][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 90.588134][ T5960] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 90.598102][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.779611][ T5960] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 90.796111][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.797394][ T5823] usb 1-1: Using ep0 maxpacket: 8 [ 90.805245][ T5960] usb 4-1: Product: syz [ 90.819082][ T5823] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 90.822763][ T5960] usb 4-1: Manufacturer: syz [ 90.829252][ T5823] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 90.834473][ T5960] usb 4-1: SerialNumber: syz [ 90.847625][ T5823] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.884353][ T5960] usb 4-1: config 0 descriptor?? [ 90.891988][ T5823] usb 1-1: config 1 interface 0 has no altsetting 0 [ 90.947562][ T5823] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.982460][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.993639][ T5823] usb 1-1: SerialNumber: syz [ 91.004414][ T6286] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.008095][ T6290] loop1: detected capacity change from 0 to 128 [ 91.016075][ T6286] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.245263][ T6286] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.255462][ T6286] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.699038][ T5823] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 92.165784][ T5823] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 92.178386][ T6305] loop2: detected capacity change from 0 to 40427 [ 92.193912][ T6305] F2FS-fs (loop2): invalid crc value [ 92.201826][ T6305] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.259066][ T6305] F2FS-fs (loop2): Start checkpoint disabled! [ 92.268969][ T6305] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 92.345594][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 92.357006][ T5823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.369545][ T5960] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 92.371694][ T5823] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.386652][ T5960] usb 4-1: USB disconnect, device number 7 [ 92.403372][ T5960] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 92.405846][ T5823] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.427936][ T5432] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 92.437000][ T5823] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.451705][ T5823] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.461125][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.465173][ T5960] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 92.653316][ T145] kworker/u4:5: attempt to access beyond end of device [ 92.653316][ T145] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 92.671341][ T145] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 92.686088][ T5823] usb 2-1: GET_CAPABILITIES returned 0 [ 92.691664][ T5823] usbtmc 2-1:16.0: can't read capabilities [ 92.700208][ T145] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 92.962146][ T5823] usb 2-1: USB disconnect, device number 7 [ 93.238801][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 7c! [ 93.250966][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 0f! [ 93.259104][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification ab! [ 93.266958][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 0e! [ 93.274417][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification d2! [ 93.282061][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 01! [ 93.289607][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification a3! [ 93.300645][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification f3! [ 93.308271][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 6e! [ 93.315829][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification e0! [ 93.331855][ T6327] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 93.390994][ T968] usb 1-1: USB disconnect, device number 4 [ 93.426803][ T968] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 93.714882][ T6324] loop2: detected capacity change from 0 to 32768 [ 93.730955][ T6324] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.165 (6324) [ 93.798066][ T6324] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.835182][ T6324] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 93.851846][ T6324] BTRFS info (device loop2): using free space tree [ 94.008157][ T6324] BTRFS info (device loop2): enabling ssd optimizations [ 94.025569][ T6324] BTRFS info (device loop2): auto enabling async discard [ 94.051812][ T968] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.265921][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 94.289164][ T968] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 94.310597][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.339521][ T968] usb 1-1: Product: syz [ 94.349628][ T968] usb 1-1: Manufacturer: syz [ 94.363383][ T968] usb 1-1: SerialNumber: syz [ 94.412834][ T968] usb 1-1: config 0 descriptor?? [ 94.734567][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 94.808925][ T6343] loop1: detected capacity change from 0 to 32768 [ 94.854952][ T5773] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.901971][ T968] airspy 1-1:0.0: Board ID: 00 [ 94.921156][ T6343] JBD2: Ignoring recovery information on journal [ 94.934704][ T968] airspy 1-1:0.0: Firmware version: [ 95.029851][ T6343] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.443025][ T6343] (syz.1.170,6343,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 95.652539][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 95.929666][ T968] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 95.967298][ T968] airspy 1-1:0.0: Registered as swradio24 [ 95.973075][ T968] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 96.009109][ T968] usb 1-1: USB disconnect, device number 5 [ 96.639319][ T6427] loop3: detected capacity change from 0 to 128 [ 96.826470][ T6435] capability: warning: `syz.0.186' uses deprecated v2 capabilities in a way that may be insecure [ 97.980011][ T1078] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.016025][ T1078] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.131823][ T1078] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.149928][ T1078] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.221912][ T1078] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.232627][ T1078] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.354474][ T1078] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.390919][ T1078] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.797116][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.815107][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.831490][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.851728][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.873876][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.888305][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.560152][ T6515] loop1: detected capacity change from 0 to 512 [ 99.594284][ T6515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.683899][ T6515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.210: iget: bad extra_isize 90 (inode size 256) [ 99.708016][ T6515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.210: error while reading EA inode 11 err=-117 [ 99.783664][ T6515] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.812690][ T6515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.210: iget: bad extra_isize 90 (inode size 256) [ 99.835078][ T6515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.210: error while reading EA inode 11 err=-117 [ 99.935662][ T6515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.210: iget: bad extra_isize 90 (inode size 256) [ 99.957722][ T6515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.210: error while reading EA inode 18 err=-117 [ 99.996344][ T6515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.210: iget: bad extra_isize 90 (inode size 256) [ 100.040180][ T6529] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.048349][ T6515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.210: error while reading EA inode 18 err=-117 [ 100.077134][ T6515] EXT4-fs (loop1): 1 orphan inode deleted [ 100.133327][ T6515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.605948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 131.756204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.165771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 134.316167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 134.325652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 134.725827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 136.876241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 137.285774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 139.436195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 139.845783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 205.735563][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 205.742627][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5773/1:b..l P6536/1:b..l P1078/1:b..l [ 205.753354][ C0] rcu: (detected by 0, t=10502 jiffies, g=14313, q=521 ncpus=2) [ 205.761097][ C0] task:kworker/u4:6 state:R running task stack:24080 pid:1078 ppid:2 flags:0x00004000 [ 205.773101][ C0] Workqueue: netns cleanup_net [ 205.777924][ C0] Call Trace: [ 205.781220][ C0] [ 205.784171][ C0] __schedule+0x1553/0x45a0 [ 205.788755][ C0] ? mark_lock+0x91/0x320 [ 205.793119][ C0] ? asan.module_dtor+0x20/0x20 [ 205.797998][ C0] ? mark_lock+0x94/0x320 [ 205.802405][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 205.808428][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 205.813749][ C0] preempt_schedule_irq+0xbf/0x150 [ 205.818897][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 205.824663][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 205.830486][ C0] irqentry_exit+0x67/0x70 [ 205.834947][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.840942][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 205.846363][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 205.865990][ C0] RSP: 0018:ffffc9000468f080 EFLAGS: 00000206 [ 205.872080][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 6616ce2c96760000 [ 205.880062][ C0] RDX: 0000000000000000 RSI: ffffffff8acadae0 RDI: ffffffff8b1c85a0 [ 205.888058][ C0] RBP: ffffc9000468f188 R08: dffffc0000000000 R09: 1ffffffff22382a0 [ 205.896058][ C0] R10: dffffc0000000000 R11: fffffbfff22382a1 R12: 1ffff920008d1e1c [ 205.904048][ C0] R13: ffffffff8d7d8740 R14: 0000000000000246 R15: dffffc0000000000 [ 205.912076][ C0] ? kasan_set_track+0x5f/0x70 [ 205.916873][ C0] ? kasan_set_track+0x4e/0x70 [ 205.921670][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 205.926450][ C0] ? read_lock_is_recursive+0x20/0x20 [ 205.931853][ C0] ? sctp_inet6addr_event+0x598/0x730 [ 205.937262][ C0] ? atomic_notifier_call_chain+0xda/0x180 [ 205.943105][ C0] ? addrconf_ifdown+0xe85/0x18c0 [ 205.948148][ C0] ? addrconf_notify+0x6c6/0x1010 [ 205.953193][ C0] ? dev_close_many+0x2a9/0x410 [ 205.958057][ C0] ? unregister_netdevice_many_notify+0x4c4/0x1900 [ 205.964582][ C0] ? ip_tunnel_delete_nets+0x324/0x370 [ 205.970072][ C0] ? process_scheduled_works+0xa5d/0x15d0 [ 205.975833][ C0] ? worker_thread+0xa55/0xfc0 [ 205.980612][ C0] ? kthread+0x2fa/0x390 [ 205.984873][ C0] ? debug_objects_fill_pool+0x8b/0x730 [ 205.990439][ C0] debug_objects_fill_pool+0xab/0x730 [ 205.995832][ C0] ? debug_objects_fill_pool+0x8b/0x730 [ 206.001417][ C0] ? debug_object_activate+0x4f0/0x4f0 [ 206.006918][ C0] ? mark_lock+0x94/0x320 [ 206.011273][ C0] debug_object_activate+0x36/0x4f0 [ 206.016492][ C0] ? lock_chain_count+0x20/0x20 [ 206.021362][ C0] kvfree_call_rcu+0x99/0x790 [ 206.026092][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 206.031395][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 206.036777][ C0] ? call_rcu+0x950/0x950 [ 206.041127][ C0] sctp_inet6addr_event+0x697/0x730 [ 206.046359][ C0] notifier_call_chain+0x197/0x380 [ 206.051494][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 206.057334][ C0] atomic_notifier_call_chain+0xda/0x180 [ 206.062991][ C0] addrconf_ifdown+0xe85/0x18c0 [ 206.067876][ C0] ? tls_dev_event+0x74d/0xf40 [ 206.072656][ C0] ? addrconf_cleanup+0x1e0/0x1e0 [ 206.077708][ C0] addrconf_notify+0x6c6/0x1010 [ 206.082585][ C0] notifier_call_chain+0x197/0x380 [ 206.087719][ C0] dev_close_many+0x2a9/0x410 [ 206.092416][ C0] ? __dev_open+0x430/0x430 [ 206.096929][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 206.101972][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 206.107026][ C0] unregister_netdevice_many_notify+0x4c4/0x1900 [ 206.113386][ C0] ? unregister_netdevice_many+0x20/0x20 [ 206.119040][ C0] ? unregister_netdevice_queue+0x1ae/0x370 [ 206.124952][ C0] ? list_netdevice+0x730/0x730 [ 206.129830][ C0] ? net_generic+0x1e/0x240 [ 206.134359][ C0] ip_tunnel_delete_nets+0x324/0x370 [ 206.139669][ C0] ? ip_tunnel_bind_dev+0x830/0x830 [ 206.144896][ C0] ? cleanup_net+0x70a/0xbb0 [ 206.149512][ C0] ? __kmem_cache_free+0xba/0x1e0 [ 206.154564][ C0] ? ipgre_init_net+0x30/0x30 [ 206.159258][ C0] cleanup_net+0x795/0xbb0 [ 206.163693][ C0] ? ops_free_list+0x3b0/0x3b0 [ 206.168483][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.173692][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 206.179425][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 206.185156][ C0] process_scheduled_works+0xa5d/0x15d0 [ 206.190740][ C0] ? worker_attach_to_pool+0x380/0x380 [ 206.196222][ C0] ? assign_work+0x3d2/0x5d0 [ 206.200836][ C0] worker_thread+0xa55/0xfc0 [ 206.205467][ C0] kthread+0x2fa/0x390 [ 206.209560][ C0] ? pr_cont_work+0x560/0x560 [ 206.214259][ C0] ? kthread_blkcg+0xd0/0xd0 [ 206.218866][ C0] ret_from_fork+0x48/0x80 [ 206.223296][ C0] ? kthread_blkcg+0xd0/0xd0 [ 206.227896][ C0] ret_from_fork_asm+0x11/0x20 [ 206.232691][ C0] [ 206.235735][ C0] task:modprobe state:R running task stack:23208 pid:6536 ppid:4856 flags:0x00004000 [ 206.246530][ C0] Call Trace: [ 206.249824][ C0] [ 206.252765][ C0] __schedule+0x1553/0x45a0 [ 206.257310][ C0] ? asan.module_dtor+0x20/0x20 [ 206.262186][ C0] ? mark_lock+0x94/0x320 [ 206.266533][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 206.272546][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 206.277852][ C0] preempt_schedule_irq+0xbf/0x150 [ 206.282980][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 206.288980][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 206.294800][ C0] irqentry_exit+0x67/0x70 [ 206.299233][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 206.304707][ C0] RIP: 0010:mt_validate+0x3f0/0x4400 [ 206.310011][ C0] Code: 00 fc ff df 4c 89 64 24 20 4d 8d a4 24 00 94 e9 8b 4c 89 e0 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 b5 35 00 00 41 0f b6 04 24 <48> 89 44 24 28 44 8d 68 ff 41 0f b6 c5 48 8b 4c 24 08 4c 8d 24 c1 [ 206.329632][ C0] RSP: 0018:ffffc90003667780 EFLAGS: 00000293 [ 206.335711][ C0] RAX: 000000000000000f RBX: ffff88807ee18400 RCX: 000000008be99401 [ 206.343690][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 206.351671][ C0] RBP: ffffc90003667930 R08: ffff88802d568000 R09: 0000000000000003 [ 206.359673][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff8be99401 [ 206.367649][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 206.375649][ C0] ? perf_event_mmap+0x26e/0x16b0 [ 206.380687][ C0] ? mt_validate+0x114/0x4400 [ 206.385383][ C0] ? mt_cache_shrink+0x20/0x20 [ 206.390175][ C0] ? perf_event_namespaces_output+0x650/0x650 [ 206.396265][ C0] validate_mm+0xc6/0x450 [ 206.400628][ C0] ? mas_nomem+0x1e0/0x1e0 [ 206.405057][ C0] ? down_write+0x16e/0x200 [ 206.409570][ C0] ? vm_stat_account+0x120/0x120 [ 206.414540][ C0] ? vma_set_page_prot+0x12e/0x3e0 [ 206.419671][ C0] mmap_region+0xe8d/0x2000 [ 206.424211][ C0] ? file_mmap_ok+0x170/0x170 [ 206.428906][ C0] ? cap_mmap_addr+0x169/0x2d0 [ 206.433693][ C0] ? file_mmap_ok+0x11c/0x170 [ 206.438388][ C0] do_mmap+0x92c/0x10a0 [ 206.442574][ C0] ? mlock_future_ok+0xf0/0xf0 [ 206.447389][ C0] ? down_write+0x200/0x200 [ 206.451908][ C0] vm_mmap_pgoff+0x1c4/0x3f0 [ 206.456521][ C0] ? account_locked_vm+0x210/0x210 [ 206.461651][ C0] ? __fget_files+0x28/0x4b0 [ 206.466267][ C0] ksys_mmap_pgoff+0x520/0x700 [ 206.471070][ C0] ? __x64_sys_mmap+0x7a/0x130 [ 206.475843][ C0] do_syscall_64+0x55/0xa0 [ 206.480287][ C0] ? clear_bhb_loop+0x40/0x90 [ 206.484974][ C0] ? clear_bhb_loop+0x40/0x90 [ 206.489672][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.495665][ C0] RIP: 0033:0x7f7e03e32242 [ 206.500101][ C0] RSP: 002b:00007fffa1880f78 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 206.508535][ C0] RAX: ffffffffffffffda RBX: 00007f7e03b50000 RCX: 00007f7e03e32242 [ 206.516522][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f7e03b50000 [ 206.524499][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 000000000000d000 [ 206.532484][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fffa1881038 [ 206.540464][ C0] R13: 00007f7e03e0f580 R14: 00007fffa18813f0 R15: 00000ffff43101f2 [ 206.548460][ C0] [ 206.551491][ C0] task:syz-executor state:R running task stack:20904 pid:5773 ppid:5760 flags:0x00004000 [ 206.562291][ C0] Call Trace: [ 206.565574][ C0] [ 206.568522][ C0] __schedule+0x1553/0x45a0 [ 206.573059][ C0] ? mark_lock+0x91/0x320 [ 206.577405][ C0] ? asan.module_dtor+0x20/0x20 [ 206.582265][ C0] ? mark_lock+0x94/0x320 [ 206.586607][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 206.592604][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 206.597912][ C0] preempt_schedule_irq+0xbf/0x150 [ 206.603039][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 206.608874][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 206.614697][ C0] irqentry_exit+0x67/0x70 [ 206.619128][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.625127][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 206.630434][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 206.650054][ C0] RSP: 0018:ffffc900046cf6c0 EFLAGS: 00000206 [ 206.656132][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4e99fee24da22800 [ 206.664120][ C0] RDX: 0000000000000000 RSI: ffffffff8acadae0 RDI: ffffffff8b1c85a0 [ 206.672100][ C0] RBP: ffffc900046cf7c8 R08: dffffc0000000000 R09: 1ffffffff22382a0 [ 206.680080][ C0] R10: dffffc0000000000 R11: fffffbfff22382a1 R12: 1ffff920008d9ee4 [ 206.688064][ C0] R13: ffffffff8d132060 R14: 0000000000000246 R15: dffffc0000000000 [ 206.696075][ C0] ? free_vmap_area_noflush+0x56d/0xa80 [ 206.701642][ C0] ? read_lock_is_recursive+0x20/0x20 [ 206.707026][ C0] ? __rwlock_init+0x150/0x150 [ 206.711804][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 206.717721][ C0] mod_memcg_page_state+0xb1/0x930 [ 206.722848][ C0] ? mod_memcg_page_state+0x90/0x930 [ 206.728147][ C0] ? free_vmap_area_noflush+0x601/0xa80 [ 206.733749][ C0] ? mod_memcg_page_state+0x90/0x930 [ 206.739072][ C0] ? vm_reset_perms+0x480/0x480 [ 206.743962][ C0] vfree+0x195/0x320 [ 206.747904][ C0] do_ip6t_get_ctl+0xf21/0x1210 [ 206.752797][ C0] ? do_ip6t_set_ctl+0xe10/0xe10 [ 206.757779][ C0] ? nf_getsockopt+0x21f/0x280 [ 206.762574][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 206.767619][ C0] ? rcu_is_watching+0x15/0xb0 [ 206.772416][ C0] ? trace_contention_end+0x39/0xe0 [ 206.777632][ C0] ? __mutex_lock+0x315/0xcc0 [ 206.782350][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 206.788012][ C0] ? mutex_unlock+0x10/0x10 [ 206.792542][ C0] ? __might_fault+0xaa/0x120 [ 206.797243][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 206.802301][ C0] nf_getsockopt+0x262/0x280 [ 206.806917][ C0] ipv6_getsockopt+0x226/0x2e0 [ 206.811696][ C0] ? __mutex_unlock_slowpath+0xe0/0x6c0 [ 206.817265][ C0] ? ipv6_getsockopt_sticky+0x190/0x190 [ 206.822825][ C0] ? __might_fault+0xaa/0x120 [ 206.827515][ C0] ? __might_fault+0xc6/0x120 [ 206.832201][ C0] ? __might_fault+0xaa/0x120 [ 206.836890][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 206.842288][ C0] ? sock_recv_errqueue+0x590/0x590 [ 206.847511][ C0] do_sock_getsockopt+0x379/0x450 [ 206.852552][ C0] ? __ia32_sys_setsockopt+0x200/0x200 [ 206.858197][ C0] ? lockdep_hardirqs_on+0x90/0x150 [ 206.863410][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 206.869411][ C0] __x64_sys_getsockopt+0x1d6/0x280 [ 206.874618][ C0] ? lockdep_hardirqs_on+0x90/0x150 [ 206.879833][ C0] ? lockdep_hardirqs_on+0x90/0x150 [ 206.885045][ C0] do_syscall_64+0x55/0xa0 [ 206.889499][ C0] ? clear_bhb_loop+0x40/0x90 [ 206.894212][ C0] ? clear_bhb_loop+0x40/0x90 [ 206.898918][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.904864][ C0] RIP: 0033:0x7f1735f9df6a [ 206.909297][ C0] RSP: 002b:00007fff3f1121c8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 206.917818][ C0] RAX: ffffffffffffffda RBX: 00007fff3f112250 RCX: 00007f1735f9df6a [ 206.925805][ C0] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 206.933789][ C0] RBP: 0000000000000003 R08: 00007fff3f1121ec R09: 0000000000000000 [ 206.941770][ C0] R10: 00007fff3f112250 R11: 0000000000000212 R12: 00007f17361e7b80 [ 206.949760][ C0] R13: 00007fff3f1121ec R14: 0000000000000000 R15: 00007f17361e8fc0 [ 206.957772][ C0] [ 206.960807][ C0] rcu: rcu_preempt kthread starved for 10409 jiffies! g14313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 206.972042][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 206.982019][ C0] rcu: RCU grace-period kthread stack dump: [ 206.987916][ C0] task:rcu_preempt state:R running task stack:26568 pid:17 ppid:2 flags:0x00004000 [ 206.998718][ C0] Call Trace: [ 207.002007][ C0] [ 207.004949][ C0] __schedule+0x1553/0x45a0 [ 207.009495][ C0] ? asan.module_dtor+0x20/0x20 [ 207.014369][ C0] ? enqueue_timer+0x23d/0x550 [ 207.019150][ C0] ? __mod_timer+0x984/0xdb0 [ 207.023772][ C0] schedule+0xbd/0x170 [ 207.027867][ C0] schedule_timeout+0x188/0x2d0 [ 207.032729][ C0] ? console_conditional_schedule+0x40/0x40 [ 207.038633][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 207.044545][ C0] ? update_process_times+0x1b0/0x1b0 [ 207.049935][ C0] ? prepare_to_swait_event+0x339/0x360 [ 207.055501][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 207.060381][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 207.066547][ C0] ? rcu_gp_init+0x1560/0x1560 [ 207.071322][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 207.076187][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.081405][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 207.086615][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 207.091221][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 207.096343][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 207.101293][ C0] ? __kthread_parkme+0x162/0x1c0 [ 207.106335][ C0] kthread+0x2fa/0x390 [ 207.110412][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 207.115534][ C0] ? kthread_blkcg+0xd0/0xd0 [ 207.120130][ C0] ret_from_fork+0x48/0x80 [ 207.124561][ C0] ? kthread_blkcg+0xd0/0xd0 [ 207.129164][ C0] ret_from_fork_asm+0x11/0x20 [ 207.133961][ C0] [ 207.137004][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 207.143341][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 207.150368][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.160429][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 207.166078][ C0] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 207.185694][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 207.191769][ C0] RAX: bcd3d8f3c0915600 RBX: ffffffff8162ac40 RCX: bcd3d8f3c0915600 [ 207.199755][ C0] RDX: 0000000000000001 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 207.207735][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 207.215711][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19d2688 [ 207.223692][ C0] R13: 1ffffffff19c0fbc R14: 0000000000000000 R15: dffffc0000000000 [ 207.231685][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 207.240646][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.247247][ C0] CR2: 00007f94cc2570a5 CR3: 0000000030979000 CR4: 00000000003506f0 [ 207.255325][ C0] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.263308][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 207.271293][ C0] Call Trace: [ 207.274580][ C0] [ 207.277516][ C0] default_idle+0x13/0x20 [ 207.281862][ C0] default_idle_call+0x6c/0xa0 [ 207.286638][ C0] do_idle+0x1f0/0x4e0 [ 207.290722][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.296896][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 207.302118][ C0] ? do_idle+0x11/0x4e0 [ 207.306302][ C0] cpu_startup_entry+0x43/0x60 [ 207.311080][ C0] rest_init+0x2e2/0x300 [ 207.315335][ C0] ? time_init+0x40/0x40 [ 207.319590][ C0] arch_call_rest_init+0xe/0x10 [ 207.324457][ C0] start_kernel+0x459/0x4e0 [ 207.328991][ C0] x86_64_start_reservations+0x2a/0x30 [ 207.334477][ C0] x86_64_start_kernel+0x60/0x60 [ 207.339431][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 207.345530][ C0] [ 208.394888][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.401350][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.410517][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.416852][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.425492][ T5772] Bluetooth: hci1: command tx timeout [ 208.916732][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. SYZFAIL: failed to send rpc fd=3 want=320 sent=0 n=-1 (errno 32: Broken pipe) [ 210.479049][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 210.481716][ T5082] Bluetooth: hci2: command 0x0406 tx timeout [ 210.800263][ T1078] hsr_slave_0: left promiscuous mode [ 210.810326][ T1078] hsr_slave_1: left promiscuous mode [ 210.819519][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.827263][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.836183][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.843620][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.853227][ T1078] bridge_slave_1: left allmulticast mode [ 210.859234][ T1078] bridge_slave_1: left promiscuous mode [ 210.867641][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.882295][ T1078] bridge_slave_0: left allmulticast mode [ 210.890563][ T1078] bridge_slave_0: left promiscuous mode [ 210.897330][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.931511][ T1078] veth1_macvtap: left promiscuous mode [ 210.938274][ T1078] veth0_macvtap: left promiscuous mode [ 210.943864][ T1078] veth1_vlan: left promiscuous mode [ 210.949737][ T1078] veth0_vlan: left promiscuous mode [ 211.514708][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 211.560349][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 211.602822][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.649018][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.959730][ T1078] bond0 (unregistering): Released all slaves [ 212.507972][ T1078] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.609270][ T1078] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.684960][ T1078] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.744509][ T1078] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.973305][ T1078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.073580][ T1078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.152581][ T1078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.217924][ T1078] bond0: (slave netdevsim0): Releasing backup interface [ 213.230477][ T1078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.427475][ T1078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.532994][ T1078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.610073][ T1078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.690795][ T1078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0