last executing test programs: 7.90949383s ago: executing program 2 (id=460): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000009200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) ioctl$I2C_TIMEOUT(r2, 0x40806685, 0x9) 5.995921034s ago: executing program 2 (id=472): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x4a, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 4.644974591s ago: executing program 2 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) write(r1, &(0x7f0000000250)='/dev/zram0,65536\x00', 0x11) r5 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x21, 0x7}, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xf, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x400]}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) ioctl$MEMERASE64(r5, 0x40104d14, &(0x7f0000000600)={0x0, 0x2000000}) 3.078900748s ago: executing program 1 (id=509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, 0x0}}], 0x0, 0x0, 0x0}) 2.901375747s ago: executing program 1 (id=512): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) 2.176920582s ago: executing program 4 (id=520): sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000098}, 0xd7983ab608da75d7) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x30, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8b, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x9, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.733664564s ago: executing program 0 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000a0900020073797a310000000008000a40fffffffc0c0009b90800014000000001080008400000000114"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.452393138s ago: executing program 0 (id=524): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000009200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) ioctl$I2C_TIMEOUT(r2, 0x702, 0x9) dup3(r2, r0, 0x80000) 1.393104921s ago: executing program 0 (id=526): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000000)='./file0\x00') 1.128065724s ago: executing program 0 (id=528): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15"], 0x125) 960.089322ms ago: executing program 0 (id=529): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 959.956373ms ago: executing program 3 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3a5140, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 847.323858ms ago: executing program 4 (id=531): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='smaps_rollup\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x1500, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x700, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x801}) 781.300061ms ago: executing program 1 (id=532): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 672.062776ms ago: executing program 3 (id=533): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x9, 0x0, 0x21}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 671.725516ms ago: executing program 4 (id=534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 636.840298ms ago: executing program 0 (id=535): write(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090589e702008000040905", @ANYBLOB="0237"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 555.830652ms ago: executing program 3 (id=536): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pipe(&(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r2], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 500.062955ms ago: executing program 1 (id=537): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6772e8", @ANYBLOB="671f29bd7000fedb"], 0x14}, 0x1, 0x0, 0x0, 0x46010}, 0x40000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 499.735645ms ago: executing program 2 (id=538): r0 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'dt2814\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0xfff, 0xc, 0x2, 0x4, 0x5, 0xffff, 0x6, 0x5, 0x7ff, 0x830, 0x8, 0x10000, 0x9, 0x800, 0x105, 0x2, 0x7fff, 0x207, 0x3, 0x4, 0x4, 0x70f]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x1, 0x2, 0x1, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x1, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9a, 0x101, 0x400, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0x81, 0x200000, 0xae, 0x100000, 0x9, 0x0, 0x8]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x7, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x40400, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8001}, 0x1c) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 465.928777ms ago: executing program 4 (id=539): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x1c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 343.581283ms ago: executing program 2 (id=540): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x104a8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x5c8, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0x80) 280.008166ms ago: executing program 3 (id=541): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb25210014001f000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 279.894166ms ago: executing program 4 (id=542): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101381) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 253.299768ms ago: executing program 1 (id=543): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 150.205862ms ago: executing program 3 (id=544): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000100)=[{r0, 0x604e}], 0x1, 0x9) 100.142904ms ago: executing program 2 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x0, 0x9, 0x40, 0x0, 0x7, 0x1, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 100.012064ms ago: executing program 4 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 98.246435ms ago: executing program 1 (id=547): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x14, 0x52, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x801) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) 0s ago: executing program 3 (id=548): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x20000, 0x800, 0x0, 0x5}, 0x20) kernel console output (not intermixed with test programs): ive [ 64.338861][ T4186] team0: Port device team_slave_1 added [ 64.346351][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.358109][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.379155][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.386751][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.432041][ T4197] team0: Port device team_slave_0 added [ 64.452805][ T4195] device hsr_slave_0 entered promiscuous mode [ 64.459645][ T4195] device hsr_slave_1 entered promiscuous mode [ 64.466678][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.474501][ T4195] Cannot create hsr debugfs directory [ 64.485531][ T4197] team0: Port device team_slave_1 added [ 64.492368][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.499352][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.525623][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.539669][ T4185] team0: Port device team_slave_0 added [ 64.565216][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.572461][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.598543][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.610698][ T4185] team0: Port device team_slave_1 added [ 64.648667][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.655827][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.681765][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.697392][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.705074][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.731260][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.749913][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.757032][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.783046][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.796296][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.803336][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.829404][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.913799][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.920538][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.927287][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.935028][ T4186] Cannot create hsr debugfs directory [ 64.972153][ T4197] device hsr_slave_0 entered promiscuous mode [ 64.979013][ T4197] device hsr_slave_1 entered promiscuous mode [ 64.985699][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.993349][ T4197] Cannot create hsr debugfs directory [ 65.003129][ T4185] device hsr_slave_0 entered promiscuous mode [ 65.009787][ T4185] device hsr_slave_1 entered promiscuous mode [ 65.016591][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.025244][ T4185] Cannot create hsr debugfs directory [ 65.025263][ T4187] Bluetooth: hci4: command 0x0409 tx timeout [ 65.040779][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 65.042066][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 65.061252][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 65.067346][ T4187] Bluetooth: hci0: command 0x0409 tx timeout [ 65.320295][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.331973][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.351822][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.361417][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.402602][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.417689][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.432982][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.446466][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.494548][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.522264][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.532331][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.552120][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.587580][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.614852][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.623959][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.642639][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.667023][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.682104][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.694493][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.707107][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.736351][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.746347][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.758491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.767687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.777136][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.784509][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.793432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.802322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.810856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.849880][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.859378][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.867940][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.875060][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.884689][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.893658][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.902676][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.911029][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.918389][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.926360][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.935144][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.943643][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.950698][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.959529][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.976701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.986961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.018133][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.030610][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.041074][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.049929][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.073726][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.080752][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.097174][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.106633][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.117310][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.126189][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.135233][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.144459][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.153962][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.172613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.181050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.195111][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.220765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.230228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.239158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.251883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.260068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.268566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.276768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.285387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.299458][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.309694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.318951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.330087][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.342695][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.364306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.373463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.382833][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.389919][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.398104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.407769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.416691][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.423821][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.435078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.473359][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.534667][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.545820][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.556958][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.566067][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.577705][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.586950][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.595726][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.604884][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.613702][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.625490][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.639061][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.653377][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.679954][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.702743][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.726704][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.747924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.773936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.792296][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.799402][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.826091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.835346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.845797][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.852920][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.907332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.916290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.925819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.936667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.945233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.953369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.960829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.980772][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.993539][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.007221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.016962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.027836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.037083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.063707][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.074036][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.091519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.099471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.108067][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 67.120685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.122416][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 67.136418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.144459][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 67.144628][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 67.157125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.172217][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 67.174085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.187525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.202678][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.233549][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.243202][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.251657][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.259524][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.268835][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.317725][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.329619][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.340774][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.350095][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.359336][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.369157][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.378298][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.385425][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.397128][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.418874][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.429209][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.436344][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.453239][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.477112][ T4186] device veth0_vlan entered promiscuous mode [ 67.493234][ T4184] device veth0_vlan entered promiscuous mode [ 67.513530][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.527806][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.553165][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.569573][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.578768][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.589878][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.605436][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.616407][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.625233][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.635930][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.644579][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.652671][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.660393][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.670475][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.679689][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.695540][ T4186] device veth1_vlan entered promiscuous mode [ 67.715371][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.727212][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.735734][ T4184] device veth1_vlan entered promiscuous mode [ 67.761559][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.769936][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.793313][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.824168][ T4184] device veth0_macvtap entered promiscuous mode [ 67.842052][ T4186] device veth0_macvtap entered promiscuous mode [ 67.854859][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.865374][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.875655][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.887763][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.899479][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.908812][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.917717][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.926033][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.937372][ T4184] device veth1_macvtap entered promiscuous mode [ 67.952710][ T4186] device veth1_macvtap entered promiscuous mode [ 67.978840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.988102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.998544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.007748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.028844][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.062107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.083275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.092384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.102013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.110901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.122676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.134453][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.144690][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.156060][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.167464][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.179376][ T4197] device veth0_vlan entered promiscuous mode [ 68.188484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.196955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.205526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.214582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.225782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.235158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.244407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.253388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.262214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.270033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.280894][ T4195] device veth0_vlan entered promiscuous mode [ 68.292640][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.305570][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.316984][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.329040][ T4197] device veth1_vlan entered promiscuous mode [ 68.340618][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.349726][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.359063][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.368268][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.384074][ T4195] device veth1_vlan entered promiscuous mode [ 68.393141][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.403447][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.414872][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.424446][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.433568][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.441039][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.452627][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.461746][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.470484][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.479684][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.515957][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.532861][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.540894][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.570304][ T4197] device veth0_macvtap entered promiscuous mode [ 68.603458][ T4195] device veth0_macvtap entered promiscuous mode [ 68.611510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.619954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.628733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.638703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.658458][ T4197] device veth1_macvtap entered promiscuous mode [ 68.681949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.690069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.699053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.710280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.719435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.755161][ T4195] device veth1_macvtap entered promiscuous mode [ 68.777368][ T4185] device veth0_vlan entered promiscuous mode [ 68.790059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.803863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.812550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.820899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.828703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.870309][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.880935][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.891630][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.903032][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.914922][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.925514][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.936355][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.946420][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.957807][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.969250][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.983272][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.992692][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.001819][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.010567][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.026792][ T4185] device veth1_vlan entered promiscuous mode [ 69.035246][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.039717][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.051277][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.053216][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.070184][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.079355][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.088657][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.097659][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.108364][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.120988][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.131527][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.142247][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.152405][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.163860][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.175482][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.183187][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 69.200439][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 69.206831][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 69.214406][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 69.220503][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 69.226887][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.236311][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.265279][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.276579][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.287014][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.297801][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.307981][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.318944][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.330635][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.340543][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.347863][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.358183][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.367336][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.370802][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.379602][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.425223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.434126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.443969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.453213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.494512][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.510032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.519481][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.528696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.538805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.547697][ T4185] device veth0_macvtap entered promiscuous mode [ 69.606027][ T4185] device veth1_macvtap entered promiscuous mode [ 69.625266][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.639462][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.656671][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.665997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.690119][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.713593][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.725541][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.736299][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.748383][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.758609][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.770129][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.782708][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.793316][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.804536][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.818300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.828136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.836878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.865399][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.879333][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.888820][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.899955][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.930047][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.940971][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.952082][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.963128][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.973268][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.990060][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.008173][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.029804][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.055767][ T4264] loop2: detected capacity change from 0 to 4096 [ 70.065110][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.074943][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.087459][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.096805][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.105851][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.116044][ T4264] ======================================================= [ 70.116044][ T4264] WARNING: The mand mount option has been deprecated and [ 70.116044][ T4264] and is ignored by this kernel. Remove the mand [ 70.116044][ T4264] option from the mount to silence this warning. [ 70.116044][ T4264] ======================================================= [ 70.119109][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.229754][ T4264] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 70.248697][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.261404][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.271350][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.282950][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.307359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.376531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.407322][ T4264] ntfs3: loop2: Failed to load $Extend. [ 70.416779][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.455583][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.505593][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.592575][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.656789][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.675693][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.722488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.911810][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.322727][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329631][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.594473][ T4187] Bluetooth: hci0: command 0x0419 tx timeout [ 71.600581][ T4187] Bluetooth: hci2: command 0x0419 tx timeout [ 71.606726][ T4187] Bluetooth: hci1: command 0x0419 tx timeout [ 71.633821][ T4187] Bluetooth: hci3: command 0x0419 tx timeout [ 71.761264][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 71.929522][ T23] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 73.561142][ T4187] Bluetooth: hci4: command 0x0419 tx timeout [ 74.066629][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.152907][ T23] usb 5-1: string descriptor 0 read error: -71 [ 74.259469][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 74.268926][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.311837][ T23] usb 5-1: can't set config #1, error -71 [ 74.336943][ T23] usb 5-1: USB disconnect, device number 2 [ 74.376981][ T4290] loop2: detected capacity change from 0 to 8192 [ 74.420985][ T4304] loop1: detected capacity change from 0 to 1024 [ 74.509061][ T4290] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 74.519514][ T4290] REISERFS (device loop2): using ordered data mode [ 74.526469][ T4290] reiserfs: using flush barriers [ 74.541183][ T4290] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.563248][ T4290] REISERFS (device loop2): checking transaction log (loop2) [ 74.573154][ T4299] loop4: detected capacity change from 0 to 8192 [ 74.576561][ T4290] REISERFS (device loop2): Using r5 hash to sort names [ 74.639774][ T4308] loop0: detected capacity change from 0 to 8192 [ 74.658650][ T4290] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 74.672485][ T4299] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 74.683730][ T4310] loop3: detected capacity change from 0 to 8192 [ 74.761721][ T4299] REISERFS (device loop4): using ordered data mode [ 74.777532][ T4310] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 74.832381][ T4308] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 74.871635][ T4310] REISERFS (device loop3): using ordered data mode [ 74.905463][ T4299] reiserfs: using flush barriers [ 74.981264][ T4308] REISERFS (device loop0): using ordered data mode [ 75.004368][ T4310] reiserfs: using flush barriers [ 75.016466][ T4299] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.105436][ T4308] reiserfs: using flush barriers [ 75.111715][ T4310] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.204138][ T4308] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.241291][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.271625][ T4299] REISERFS (device loop4): checking transaction log (loop4) [ 75.316263][ T4310] REISERFS (device loop3): checking transaction log (loop3) [ 75.339116][ T4308] REISERFS (device loop0): checking transaction log (loop0) [ 75.364487][ T4310] REISERFS (device loop3): Using r5 hash to sort names [ 75.393563][ T4299] REISERFS (device loop4): Using r5 hash to sort names [ 75.400799][ T4299] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 75.422212][ T4308] REISERFS (device loop0): Using r5 hash to sort names [ 75.429531][ T4308] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 75.475807][ T4310] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 75.485593][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 75.577640][ T4304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.793569][ T4320] Zero length message leads to an empty skb [ 75.808372][ T4318] loop2: detected capacity change from 0 to 8 [ 75.848697][ T4318] unable to read fragment index table [ 76.175455][ T4324] loop0: detected capacity change from 0 to 4096 [ 76.276528][ T4324] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 76.413110][ T4324] ntfs3: loop0: Failed to load $Extend. [ 76.735688][ T4334] loop2: detected capacity change from 0 to 1024 [ 76.927877][ T4336] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 76.951624][ T4334] EXT4-fs (loop2): Ignoring removed bh option [ 77.169763][ T4334] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 77.172224][ T4331] loop4: detected capacity change from 0 to 131072 [ 77.329622][ T4331] F2FS-fs (loop4): invalid crc value [ 77.358324][ T4331] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.551450][ T4331] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 77.606875][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.551311][ T13] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 78.559021][ T13] usb 2-1: can't read configurations, error -71 [ 79.147650][ T4361] loop3: detected capacity change from 0 to 8192 [ 79.298547][ T4361] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 79.324818][ T4361] REISERFS (device loop3): using ordered data mode [ 79.357387][ T4361] reiserfs: using flush barriers [ 79.431179][ T4361] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.474842][ T4361] REISERFS (device loop3): checking transaction log (loop3) [ 79.532022][ T4366] sctp: [Deprecated]: syz.4.25 (pid 4366) Use of int in max_burst socket option. [ 79.532022][ T4366] Use struct sctp_assoc_value instead [ 80.221131][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 81.006720][ T4361] REISERFS (device loop3): Using r5 hash to sort names [ 81.049469][ T4361] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 81.061924][ T4367] loop1: detected capacity change from 0 to 8192 [ 81.104322][ T4367] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 81.131239][ T4367] REISERFS (device loop1): using ordered data mode [ 81.137910][ T4367] reiserfs: using flush barriers [ 81.236311][ T4367] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.319274][ T4367] REISERFS (device loop1): checking transaction log (loop1) [ 81.669876][ T4385] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 81.778677][ T4367] REISERFS (device loop1): Using tea hash to sort names [ 81.779848][ T4386] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.797384][ T4390] loop0: detected capacity change from 0 to 8 [ 81.831722][ T4367] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 81.851296][ T4386] kvm: pic: level sensitive irq not supported [ 81.852212][ T4386] kvm: pic: non byte read [ 81.853151][ T4379] loop3: detected capacity change from 0 to 4096 [ 81.890099][ T4386] kvm: pic: level sensitive irq not supported [ 81.890422][ T4386] kvm: pic: non byte read [ 81.913818][ T4390] unable to read fragment index table [ 81.955864][ T4379] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 81.975917][ T4386] kvm: pic: level sensitive irq not supported [ 81.976643][ T4386] kvm: pic: non byte read [ 82.099582][ T4386] kvm: pic: level sensitive irq not supported [ 82.099649][ T4386] kvm: pic: non byte read [ 82.174080][ T4386] kvm: pic: level sensitive irq not supported [ 82.177275][ T4386] kvm: pic: non byte read [ 82.355622][ T4379] ntfs3: loop3: Failed to load $Extend. [ 83.410095][ T4410] loop0: detected capacity change from 0 to 1024 [ 83.807603][ T4414] sctp: [Deprecated]: syz.4.40 (pid 4414) Use of int in max_burst socket option. [ 83.807603][ T4414] Use struct sctp_assoc_value instead [ 84.047999][ T4410] EXT4-fs (loop0): Ignoring removed bh option [ 84.061111][ T4418] loop3: detected capacity change from 0 to 8 [ 84.076703][ T4416] loop2: detected capacity change from 0 to 8192 [ 84.157686][ T4410] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 84.198769][ T4416] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 84.239366][ T4416] REISERFS (device loop2): using ordered data mode [ 84.278049][ T4418] unable to read fragment index table [ 84.305362][ T4416] reiserfs: using flush barriers [ 84.353492][ T4416] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.499250][ T4416] REISERFS (device loop2): checking transaction log (loop2) [ 84.564463][ T4416] REISERFS (device loop2): Using r5 hash to sort names [ 84.678164][ T4416] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 85.150846][ T4439] loop1: detected capacity change from 0 to 4096 [ 85.577236][ T4452] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.718600][ T26] audit: type=1800 audit(1789268451.599:2): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.48" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 86.013039][ T4451] loop3: detected capacity change from 0 to 1024 [ 86.487034][ T4439] syz.1.48 (4439) used greatest stack depth: 20112 bytes left [ 86.657114][ T4451] EXT4-fs (loop3): Ignoring removed bh option [ 86.730716][ T1108] cfg80211: failed to load regulatory.db [ 86.822029][ T4451] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 87.163681][ T4478] sctp: [Deprecated]: syz.2.55 (pid 4478) Use of int in max_burst socket option. [ 87.163681][ T4478] Use struct sctp_assoc_value instead [ 88.017792][ T4485] loop4: detected capacity change from 0 to 8192 [ 88.044361][ T4485] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 88.154846][ T4485] REISERFS (device loop4): using ordered data mode [ 88.164534][ T4483] loop1: detected capacity change from 0 to 4096 [ 88.187961][ T4485] reiserfs: using flush barriers [ 88.196808][ T4485] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.215359][ T4483] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 88.224873][ T4485] REISERFS (device loop4): checking transaction log (loop4) [ 88.255976][ T4485] REISERFS (device loop4): Using r5 hash to sort names [ 88.274217][ T4485] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 88.522415][ T4483] ntfs3: loop1: Failed to load $Extend. [ 90.364237][ T4512] loop1: detected capacity change from 0 to 2048 [ 90.620618][ T4512] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 90.755601][ T4512] gadgetfs: bound to dummy_udc driver [ 90.831047][ T4512] process 'syz.1.62' launched './file0' with NULL argv: empty string added [ 90.879082][ T4512] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 91.051266][ T4227] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.081214][ C0] gadgetfs: connected [ 91.086122][ T4227] gadgetfs: disconnected [ 91.494944][ T4537] sctp: [Deprecated]: syz.4.68 (pid 4537) Use of int in max_burst socket option. [ 91.494944][ T4537] Use struct sctp_assoc_value instead [ 92.340488][ T4546] loop2: detected capacity change from 0 to 4096 [ 92.394888][ T4546] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 92.707861][ T4542] loop0: detected capacity change from 0 to 32768 [ 92.984638][ T4542] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.017394][ T4559] loop3: detected capacity change from 0 to 8 [ 93.111892][ T4562] tipc: Started in network mode [ 93.127240][ T4562] tipc: Node identity 1000001, cluster identity 4711 [ 93.154349][ T4562] tipc: Node number set to 16777217 [ 93.694706][ T4572] sched: RT throttling activated [ 93.853873][ T4546] ntfs3: loop2: Failed to load $Extend. [ 94.407241][ T4559] unable to read fragment index table [ 94.616588][ T4580] loop1: detected capacity change from 0 to 8192 [ 95.223800][ T4580] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 95.238300][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 95.259159][ T4580] REISERFS (device loop1): using ordered data mode [ 95.284314][ T4587] loop2: detected capacity change from 0 to 2048 [ 95.296113][ T4580] reiserfs: using flush barriers [ 95.325843][ T4580] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.375344][ T4580] REISERFS (device loop1): checking transaction log (loop1) [ 95.446500][ T4580] REISERFS (device loop1): Using r5 hash to sort names [ 95.454548][ T4580] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 95.498063][ T4587] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 96.764450][ T4587] gadgetfs: bound to dummy_udc driver [ 96.802959][ T4607] sctp: [Deprecated]: syz.4.86 (pid 4607) Use of int in max_burst socket option. [ 96.802959][ T4607] Use struct sctp_assoc_value instead [ 97.094721][ T4587] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 97.281315][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.389918][ T4614] loop4: detected capacity change from 0 to 4096 [ 97.456477][ T4614] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 97.539811][ T4614] ntfs3: loop4: Failed to load $Extend. [ 97.545772][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 97.722307][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.754395][ T4230] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 97.924745][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.234906][ T4230] usb 4-1: config 0 descriptor?? [ 98.671414][ T4640] loop4: detected capacity change from 0 to 8 [ 98.769191][ T4640] unable to read fragment index table [ 98.987574][ T4227] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 99.303825][ T4649] loop4: detected capacity change from 0 to 1024 [ 99.578487][ T4649] EXT4-fs (loop4): Ignoring removed bh option [ 99.712118][ T4649] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 99.981841][ T4657] netlink: 'syz.3.88': attribute type 2 has an invalid length. [ 100.028244][ T4653] loop1: detected capacity change from 0 to 8192 [ 100.061048][ T4657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.88'. [ 100.570279][ T4230] cmedia_hs100b 0003:0D8C:0014.0001: unknown main item tag 0x1 [ 100.578842][ T4230] cmedia_hs100b 0003:0D8C:0014.0001: unknown main item tag 0x4 [ 100.591333][ T4230] cmedia_hs100b 0003:0D8C:0014.0001: ignoring exceeding usage max [ 100.607076][ T4230] cmedia_hs100b 0003:0D8C:0014.0001: hidraw0: USB HID v0.81 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 100.641113][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 100.661119][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 100.778281][ T4227] usb 1-1: device descriptor read/all, error -71 [ 100.844855][ T4653] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 100.945121][ T4653] REISERFS (device loop1): using ordered data mode [ 101.081735][ T4653] reiserfs: using flush barriers [ 101.212443][ T4653] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.538876][ T4653] REISERFS (device loop1): checking transaction log (loop1) [ 101.631321][ T4653] REISERFS (device loop1): Using r5 hash to sort names [ 101.742909][ T4653] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 101.954019][ T4227] usb 4-1: USB disconnect, device number 2 [ 102.186751][ T4661] sctp: [Deprecated]: syz.2.100 (pid 4661) Use of int in max_burst socket option. [ 102.186751][ T4661] Use struct sctp_assoc_value instead [ 102.191167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 102.411905][ T4666] loop4: detected capacity change from 0 to 32768 [ 102.581093][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 102.701105][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 103.641116][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 103.651138][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 103.661100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 103.671108][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 103.752025][ T4666] JBD2: Ignoring recovery information on journal [ 103.835825][ T4666] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 103.856456][ T4279] (kworker/u4:8,4279,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 103.922505][ T4666] (syz.4.101,4666,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 103.938997][ T4666] (syz.4.101,4666,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 103.947653][ T4666] (syz.4.101,4666,1):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2 [ 103.956086][ T4666] (syz.4.101,4666,1):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2 [ 103.964324][ T4666] (syz.4.101,4666,1):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2 [ 103.972892][ T4666] (syz.4.101,4666,1):ocfs2_unlink:964 ERROR: status = -2 [ 103.985280][ T4678] loop1: detected capacity change from 0 to 512 [ 104.018525][ T4683] loop3: detected capacity change from 0 to 4096 [ 104.075263][ T4683] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 104.088041][ T4678] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.148147][ T4678] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.166509][ T4683] ntfs3: loop3: Failed to load $Extend. [ 104.378347][ T4678] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 104.446086][ T4678] EXT4-fs (loop1): 1 truncate cleaned up [ 104.466128][ T4678] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,discard,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 104.500008][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 104.682233][ T4704] loop3: detected capacity change from 0 to 8 [ 104.730146][ T4706] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 104.788452][ T4704] unable to read fragment index table [ 105.086346][ T4709] loop4: detected capacity change from 0 to 40427 [ 105.376388][ T4709] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 105.384395][ T4709] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 105.396937][ T4709] F2FS-fs (loop4): invalid crc value [ 105.451808][ T4185] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 105.533745][ T4709] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.622620][ T4718] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20002 [ 105.666261][ T4709] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 105.673561][ T4709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.731632][ T4709] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 105.739708][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 105.870093][ T4721] loop2: detected capacity change from 0 to 8192 [ 105.978592][ T4721] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 106.107480][ T4721] REISERFS (device loop2): using ordered data mode [ 106.303632][ T4721] reiserfs: using flush barriers [ 106.325672][ T4721] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.383001][ T4721] REISERFS (device loop2): checking transaction log (loop2) [ 106.396007][ T4733] loop1: detected capacity change from 0 to 512 [ 106.447143][ T4721] REISERFS (device loop2): Using r5 hash to sort names [ 106.460722][ T4721] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 106.604458][ T4733] EXT4-fs (loop1): Ignoring removed bh option [ 106.711370][ T4733] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 106.771327][ T4733] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 106.790157][ T4733] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.113: Corrupt directory, running e2fsck is recommended [ 106.872427][ T4733] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 106.967267][ T4733] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.113: corrupted in-inode xattr [ 107.043252][ T4742] loop3: detected capacity change from 0 to 4096 [ 107.053680][ T4733] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.113: couldn't read orphan inode 15 (err -117) [ 107.104751][ T4733] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 107.171432][ T4733] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 107.194905][ T4750] loop2: detected capacity change from 0 to 16 [ 107.221295][ T4733] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 107.257847][ T4751] sctp: [Deprecated]: syz.4.118 (pid 4751) Use of int in max_burst socket option. [ 107.257847][ T4751] Use struct sctp_assoc_value instead [ 107.326175][ T4742] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 107.395165][ T4733] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.113: Corrupt directory, running e2fsck is recommended [ 107.552225][ T4750] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.914161][ T4742] ntfs3: loop3: Failed to load $Extend. [ 107.987048][ T4736] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.059350][ T4736] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 108.070226][ T4736] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.113: Corrupt directory, running e2fsck is recommended [ 108.101326][ T4750] erofs: (device loop2): find_target_block_classic: corrupted dir block 67108936 @ nid 36 [ 108.211574][ T4733] device bond1 entered promiscuous mode [ 108.221460][ T4733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.626252][ T4763] loop2: detected capacity change from 0 to 2048 [ 108.819370][ T4763] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 108.946933][ T4763] gadgetfs: bound to dummy_udc driver [ 108.973784][ T4763] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 109.545961][ T4791] loop2: detected capacity change from 0 to 1024 [ 109.675724][ T4791] EXT4-fs (loop2): Ignoring removed bh option [ 109.822240][ T4791] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 110.269728][ T4795] loop0: detected capacity change from 0 to 8192 [ 110.332788][ T4795] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 110.355804][ T4775] loop4: detected capacity change from 0 to 32768 [ 110.362899][ T4795] REISERFS (device loop0): using ordered data mode [ 110.369462][ T4795] reiserfs: using flush barriers [ 110.442696][ T4795] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.473422][ T4805] sctp: [Deprecated]: syz.1.133 (pid 4805) Use of int in max_burst socket option. [ 110.473422][ T4805] Use struct sctp_assoc_value instead [ 110.752491][ T4795] REISERFS (device loop0): checking transaction log (loop0) [ 110.913494][ T4795] REISERFS (device loop0): Using r5 hash to sort names [ 110.926255][ T4777] capability: warning: `syz.4.126' uses 32-bit capabilities (legacy support in use) [ 111.040650][ T4795] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 111.392088][ T26] audit: type=1800 audit(1789268477.369:3): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.135" name="manufacturer" dev="configfs" ino=35242 res=0 errno=0 [ 111.777396][ T4814] loop1: detected capacity change from 0 to 4096 [ 111.797795][ T4821] loop0: detected capacity change from 0 to 256 [ 111.884692][ T4814] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 111.954197][ T4814] ntfs3: loop1: Failed to load $Extend. [ 112.026751][ T4827] loop3: detected capacity change from 0 to 2048 [ 112.833738][ T4827] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 113.199158][ T4846] loop0: detected capacity change from 0 to 1024 [ 114.007457][ T4827] gadgetfs: bound to dummy_udc driver [ 114.067578][ T4846] EXT4-fs (loop0): Ignoring removed bh option [ 114.076960][ T4827] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 114.134657][ T4846] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 114.286261][ T4827] gadgetfs: suspended from state 2 [ 114.390015][ T4301] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 114.522695][ T4859] sctp: [Deprecated]: syz.1.147 (pid 4859) Use of int in max_burst socket option. [ 114.522695][ T4859] Use struct sctp_assoc_value instead [ 115.290034][ T4863] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.567089][ T4870] loop0: detected capacity change from 0 to 4096 [ 115.586566][ T4870] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 115.664835][ T4870] ntfs3: loop0: Failed to load $Extend. [ 115.756962][ T4868] loop3: detected capacity change from 0 to 8192 [ 115.906841][ T4868] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 115.918725][ T4868] REISERFS (device loop3): using ordered data mode [ 115.926019][ T4868] reiserfs: using flush barriers [ 115.932635][ T4868] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.948840][ T4232] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 115.973998][ T4888] loop4: detected capacity change from 0 to 256 [ 115.982201][ T4868] REISERFS (device loop3): checking transaction log (loop3) [ 116.001125][ T4868] REISERFS (device loop3): Using r5 hash to sort names [ 116.008303][ T4868] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 116.301590][ T4232] usb 3-1: config index 0 descriptor too short (expected 36, got 10) [ 116.331147][ T4232] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 116.404276][ T4897] loop0: detected capacity change from 0 to 1024 [ 116.469796][ T4232] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.505601][ T4897] EXT4-fs (loop0): Ignoring removed bh option [ 116.622606][ T4897] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 116.806287][ T4232] usb 3-1: New USB device found, idVendor=1477, idProduct=1026, bcdDevice= 0.00 [ 116.931943][ T4893] loop4: detected capacity change from 0 to 2048 [ 117.175779][ T4907] sctp: [Deprecated]: syz.3.162 (pid 4907) Use of int in max_burst socket option. [ 117.175779][ T4907] Use struct sctp_assoc_value instead [ 117.242293][ T4893] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 117.495387][ T4893] gadgetfs: bound to dummy_udc driver [ 117.549921][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.573461][ T4232] usb 3-1: config 0 descriptor?? [ 117.607407][ T4893] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 117.791440][ T4227] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 117.831143][ C0] gadgetfs: connected [ 117.841653][ T4227] gadgetfs: disconnected [ 117.938808][ T4187] usb 3-1: USB disconnect, device number 2 [ 118.151930][ T4921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'. [ 118.317350][ T4919] loop3: detected capacity change from 0 to 4096 [ 118.357434][ T4919] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 118.461658][ T4919] ntfs3: loop3: Failed to load $Extend. [ 118.587964][ T4928] loop0: detected capacity change from 0 to 8192 [ 118.719477][ T4928] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 118.748362][ T4928] REISERFS (device loop0): using ordered data mode [ 118.766626][ T4940] loop3: detected capacity change from 0 to 8 [ 118.777365][ T4928] reiserfs: using flush barriers [ 118.802860][ T4928] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.836904][ T4928] REISERFS (device loop0): checking transaction log (loop0) [ 118.857227][ T4928] REISERFS (device loop0): Using r5 hash to sort names [ 118.869595][ T4940] unable to read fragment index table [ 118.875665][ T4928] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 119.076810][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.232121][ T4947] loop3: detected capacity change from 0 to 1024 [ 119.966417][ T4947] EXT4-fs (loop3): Ignoring removed bh option [ 120.114660][ T4948] sctp: [Deprecated]: syz.0.176 (pid 4948) Use of int in max_burst socket option. [ 120.114660][ T4948] Use struct sctp_assoc_value instead [ 120.339250][ T4947] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 120.494335][ T4232] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 120.503697][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 120.511930][ T4232] usb 3-1: Product: syz [ 120.516787][ T4232] usb 3-1: Manufacturer: syz [ 121.277159][ T4232] ums-alauda 3-1:1.0: USB Mass Storage device detected [ 121.376292][ T4232] ums-alauda 3-1:1.0: This device (0584,0008,0102 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 121.376292][ T4232] Please send a copy of this message to and [ 121.408740][ T4935] loop2: detected capacity change from 0 to 4096 [ 121.463201][ T4935] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 121.492925][ T4967] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(5) [ 121.510287][ T4952] loop4: detected capacity change from 0 to 8192 [ 121.570316][ T4965] loop3: detected capacity change from 0 to 2048 [ 121.596637][ T4935] ntfs: volume version 3.1. [ 121.640336][ T4952] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 121.703649][ T4952] REISERFS (device loop4): using ordered data mode [ 121.717346][ T4952] reiserfs: using flush barriers [ 121.723697][ T4952] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.741954][ T4952] REISERFS (device loop4): checking transaction log (loop4) [ 121.770069][ T4952] REISERFS (device loop4): Using r5 hash to sort names [ 121.784574][ T4965] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 121.793028][ T4952] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 121.937688][ T4973] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 121.956238][ T4965] gadgetfs: bound to dummy_udc driver [ 122.006632][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 122.016924][ T4230] usb 3-1: USB disconnect, device number 3 [ 122.101316][ T4965] FAULT_INJECTION: forcing a failure. [ 122.101316][ T4965] name failslab, interval 1, probability 0, space 0, times 1 [ 122.197506][ T4965] CPU: 1 PID: 4965 Comm: syz.3.179 Not tainted syzkaller #0 [ 122.204873][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.214982][ T4965] Call Trace: [ 122.218292][ T4965] [ 122.221250][ T4965] dump_stack_lvl+0x188/0x250 [ 122.225997][ T4965] ? show_regs_print_info+0x20/0x20 [ 122.231231][ T4965] ? load_image+0x410/0x410 [ 122.235795][ T4965] ? __lock_acquire+0x7b50/0x7b50 [ 122.240859][ T4965] ? __getblk_gfp+0x51/0xb20 [ 122.245495][ T4965] should_fail+0x383/0x4b0 [ 122.249961][ T4965] should_failslab+0x5/0x20 [ 122.254514][ T4965] slab_pre_alloc_hook+0x51/0xc0 [ 122.259485][ T4965] __kmalloc+0x6b/0x340 [ 122.263668][ T4965] ? ext4_convert_inline_data_nolock+0x124/0xcd0 [ 122.270036][ T4965] ext4_convert_inline_data_nolock+0x124/0xcd0 [ 122.276236][ T4965] ? rwsem_write_trylock+0x135/0x1c0 [ 122.281569][ T4965] ? ext4_add_dirent_to_inline+0x4d0/0x4d0 [ 122.287418][ T4965] ? __ext4_journal_start_sb+0x1bd/0x360 [ 122.293092][ T4965] ext4_convert_inline_data+0x470/0x5b0 [ 122.298683][ T4965] ? ext4_inline_data_truncate+0xc40/0xc40 [ 122.304534][ T4965] ext4_fallocate+0xf3/0x1e50 [ 122.309263][ T4965] vfs_fallocate+0x57e/0x6f0 [ 122.313917][ T4965] __x64_sys_fallocate+0xbd/0x100 [ 122.318987][ T4965] do_syscall_64+0x4c/0xa0 [ 122.323441][ T4965] ? clear_bhb_loop+0x30/0x80 [ 122.328163][ T4965] ? clear_bhb_loop+0x30/0x80 [ 122.332880][ T4965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.338825][ T4965] RIP: 0033:0x7f7123585159 [ 122.343285][ T4965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.344801][ T13] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 122.362923][ T4965] RSP: 002b:00007f71217dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 122.378891][ T4965] RAX: ffffffffffffffda RBX: 00007f712380cfa0 RCX: 00007f7123585159 [ 122.386936][ T4965] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 122.394950][ T4965] RBP: 00007f712361c03b R08: 0000000000000000 R09: 0000000000000000 [ 122.402948][ T4965] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 122.410948][ T4965] R13: 00007f712380d038 R14: 00007f712380cfa0 R15: 00007fffb41490b8 [ 122.418972][ T4965] [ 122.466991][ T4980] binder: 4978:4980 ioctl c0306201 0 returned -14 [ 122.481097][ C0] gadgetfs: connected [ 122.485568][ T13] gadgetfs: disconnected [ 122.517139][ T4980] binder: 4978:4980 ioctl 4018620d 0 returned -22 [ 122.532893][ T4981] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 122.560711][ T4980] binder: 4978:4980 ioctl c0306201 0 returned -14 [ 122.589255][ T4965] gadgetfs: suspended from state 2 [ 122.634223][ T4197] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 122.783986][ T4986] netlink: 144 bytes leftover after parsing attributes in process `syz.4.190'. [ 122.863788][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 122.891156][ T13] usb 1-1: device not accepting address 8, error -71 [ 123.281139][ T13] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 123.497164][ T5016] syz.2.200 uses obsolete (PF_INET,SOCK_PACKET) [ 123.662201][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.692898][ T13] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.927075][ T13] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 123.971579][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.979676][ T13] usb 1-1: Product: syz [ 124.038847][ T13] usb 1-1: Manufacturer: syz [ 124.045054][ T13] usb 1-1: SerialNumber: syz [ 124.076913][ T13] usb 1-1: config 0 descriptor?? [ 124.214731][ T5047] 9pnet_virtio: no channels available for device syz [ 124.374003][ T21] usb 1-1: USB disconnect, device number 9 [ 124.594428][ T5060] device syzkaller0 entered promiscuous mode [ 125.091167][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.351574][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 125.425579][ T5113] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 125.483366][ T21] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 125.502656][ T21] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 125.523830][ T21] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 125.712897][ T21] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 125.745091][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.756766][ T21] usb 4-1: Product: syz [ 125.768745][ T21] usb 4-1: Manufacturer: syz [ 125.785872][ T21] usb 4-1: SerialNumber: syz [ 125.804765][ T5129] netlink: 44 bytes leftover after parsing attributes in process `syz.1.237'. [ 125.860713][ T21] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 125.880037][ T21] imon 4-1:155.0: unable to initialize intf0, err -19 [ 125.910299][ T21] imon:imon_probe: failed to initialize context! [ 125.924429][ T21] imon 4-1:155.0: unable to register, err -19 [ 126.501302][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.684765][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.871326][ T21] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 126.897279][ T21] usb 1-1: config 1 has no interface number 0 [ 126.961403][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 127.071398][ T21] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 127.080795][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.089703][ T21] usb 1-1: Product: syz [ 127.096237][ T21] usb 1-1: Manufacturer: syz [ 127.101003][ T21] usb 1-1: SerialNumber: syz [ 127.172044][ T13] usb 3-1: config 5 has an invalid interface number: 73 but max is 1 [ 127.188816][ T13] usb 3-1: config 5 has an invalid interface number: 247 but max is 1 [ 127.209004][ T13] usb 3-1: config 5 has no interface number 0 [ 127.216284][ T13] usb 3-1: config 5 has no interface number 1 [ 127.229909][ T13] usb 3-1: config 5 interface 73 has no altsetting 0 [ 127.240751][ T13] usb 3-1: config 5 interface 247 has no altsetting 0 [ 127.286634][ T4301] usb 4-1: USB disconnect, device number 3 [ 127.414224][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 127.421945][ T21] usb 1-1: 3:1 : does not exist [ 127.436721][ T21] usb 1-1: 3:2 : does not exist [ 127.451480][ T13] usb 3-1: New USB device found, idVendor=6189, idProduct=2068, bcdDevice=ae.40 [ 127.481851][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.501206][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.515055][ T21] usb 1-1: USB disconnect, device number 10 [ 127.527010][ T13] usb 3-1: Product: syz [ 127.541848][ T13] usb 3-1: Manufacturer: syz [ 127.550623][ T5180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.576194][ T13] usb 3-1: SerialNumber: syz [ 127.747608][ T5186] FAULT_INJECTION: forcing a failure. [ 127.747608][ T5186] name failslab, interval 1, probability 0, space 0, times 0 [ 127.760705][ T5186] CPU: 1 PID: 5186 Comm: syz.3.260 Not tainted syzkaller #0 [ 127.768027][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.778113][ T5186] Call Trace: [ 127.781417][ T5186] [ 127.784392][ T5186] dump_stack_lvl+0x188/0x250 [ 127.789106][ T5186] ? show_regs_print_info+0x20/0x20 [ 127.794343][ T5186] ? load_image+0x410/0x410 [ 127.798883][ T5186] ? __might_sleep+0xf0/0xf0 [ 127.803535][ T5186] ? __lock_acquire+0x7b50/0x7b50 [ 127.808606][ T5186] should_fail+0x383/0x4b0 [ 127.813067][ T5186] should_failslab+0x5/0x20 [ 127.817605][ T5186] slab_pre_alloc_hook+0x51/0xc0 [ 127.822573][ T5186] __kmalloc_node+0x6d/0x3a0 [ 127.827193][ T5186] ? kvmalloc_node+0x84/0x130 [ 127.831900][ T5186] kvmalloc_node+0x84/0x130 [ 127.836443][ T5186] bpf_int_jit_compile+0x3df/0xc4d0 [ 127.841666][ T5186] ? bpf_convert_filter+0x5048/0x51e0 [ 127.847075][ T5186] ? kfree+0xef/0x2a0 [ 127.851091][ T5186] ? bpf_convert_filter+0x507b/0x51e0 [ 127.856512][ T5186] ? stack_trace_snprint+0xe0/0xe0 [ 127.861688][ T5186] ? emit_bpf_dispatcher+0x1050/0x1050 [ 127.866938][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 127.867178][ T5186] ? sk_filter_release_rcu+0x110/0x110 [ 127.877820][ T5186] bpf_prog_select_runtime+0x46f/0x7b0 [ 127.883322][ T5186] ? bpf_prog_realloc+0x142/0x1c0 [ 127.888383][ T5186] bpf_prepare_filter+0x100e/0x11b0 [ 127.893653][ T5186] ? bpf_prog_create+0x1f0/0x1f0 [ 127.898633][ T5186] ? kmemdup+0x3d/0x50 [ 127.902735][ T5186] ? __get_filter+0x2db/0x400 [ 127.907454][ T5186] sk_attach_filter+0x20/0x140 [ 127.912338][ T5186] sock_setsockopt+0x18c7/0x2480 [ 127.917330][ T5186] ? __sock_set_mark+0x150/0x150 [ 127.922299][ T5186] ? __lock_acquire+0x7b50/0x7b50 [ 127.927389][ T5186] ? aa_sk_perm+0x7dc/0x910 [ 127.931922][ T5186] ? aa_af_perm+0x340/0x340 [ 127.936457][ T5186] ? __fget_files+0x402/0x470 [ 127.941172][ T5186] ? aa_sock_opt_perm+0x74/0x100 [ 127.946149][ T5186] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 127.951816][ T5186] ? security_socket_setsockopt+0x7a/0xa0 [ 127.957605][ T5186] __sys_setsockopt+0x2f6/0x3d0 [ 127.962500][ T5186] __x64_sys_setsockopt+0xb1/0xc0 [ 127.967572][ T5186] do_syscall_64+0x4c/0xa0 [ 127.972023][ T5186] ? clear_bhb_loop+0x30/0x80 [ 127.976730][ T5186] ? clear_bhb_loop+0x30/0x80 [ 127.981445][ T5186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.987378][ T5186] RIP: 0033:0x7f7123585159 [ 127.991828][ T5186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.011464][ T5186] RSP: 002b:00007f71217dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.019965][ T5186] RAX: ffffffffffffffda RBX: 00007f712380cfa0 RCX: 00007f7123585159 [ 128.027958][ T5186] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 128.035946][ T5186] RBP: 00007f712361c03b R08: 0000000000000010 R09: 0000000000000000 [ 128.043930][ T5186] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.051921][ T5186] R13: 00007f712380d038 R14: 00007f712380cfa0 R15: 00007fffb41490b8 [ 128.059925][ T5186] [ 128.063056][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.069597][ T13] pl2303 3-1:5.73: required endpoints missing [ 128.121540][ T4230] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 128.133271][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.150242][ T13] pl2303 3-1:5.247: required endpoints missing [ 128.191738][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.208901][ T13] usb 3-1: USB disconnect, device number 4 [ 128.239588][ T4230] usb 5-1: config 0 descriptor?? [ 128.262097][ T5196] device syzkaller0 entered promiscuous mode [ 128.309954][ T4230] as10x_usb: device has been detected [ 128.329718][ T4230] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 128.363623][ T4230] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 128.472739][ T4230] as10x_usb: error during firmware upload part1 [ 128.479400][ T4230] Registered device nBox DVB-T Dongle [ 128.518097][ T4230] usb 5-1: USB disconnect, device number 3 [ 128.531335][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 128.586516][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 128.746463][ T4230] Unregistered device nBox DVB-T Dongle [ 128.763106][ T4230] as10x_usb: device has been disconnected [ 128.901515][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.071522][ T21] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 129.080652][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.093918][ T21] usb 1-1: Product: syz [ 129.098140][ T21] usb 1-1: Manufacturer: syz [ 129.103643][ T21] usb 1-1: SerialNumber: syz [ 129.121312][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.173439][ T21] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 129.195801][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 87 [ 129.219329][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 129.238028][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 129.250895][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 129.264956][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 129.273832][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 129.282921][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 85 [ 129.296515][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 5 [ 129.318878][ T21] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 129.344465][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83 [ 129.352485][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 129.360216][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 129.371019][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 129.406124][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 4 [ 129.418673][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 86 [ 129.438398][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 129.458439][ T21] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 129.511349][ T4232] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 129.530853][ T5245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 129.551595][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.579540][ T4232] usb 4-1: config 0 descriptor?? [ 129.598399][ T5245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.286'. [ 129.641548][ T4232] as10x_usb: device has been detected [ 129.660792][ T4232] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 129.695926][ T13] usb 1-1: USB disconnect, device number 11 [ 129.718966][ T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 129.720831][ T4232] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 129.751718][ T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 129.779575][ T4232] as10x_usb: error during firmware upload part1 [ 129.788516][ T13] keyspan 1-1:1.0: device disconnected [ 129.795335][ T4232] Registered device nBox DVB-T Dongle [ 129.869517][ T4228] usb 4-1: USB disconnect, device number 4 [ 129.909130][ T4228] Unregistered device nBox DVB-T Dongle [ 129.929920][ T4228] as10x_usb: device has been disconnected [ 129.971625][ T5255] FAULT_INJECTION: forcing a failure. [ 129.971625][ T5255] name failslab, interval 1, probability 0, space 0, times 0 [ 129.993200][ T5257] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 130.014565][ T5255] CPU: 1 PID: 5255 Comm: syz.1.291 Not tainted syzkaller #0 [ 130.021925][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.032012][ T5255] Call Trace: [ 130.035493][ T5255] [ 130.038454][ T5255] dump_stack_lvl+0x188/0x250 [ 130.043175][ T5255] ? show_regs_print_info+0x20/0x20 [ 130.048420][ T5255] ? load_image+0x410/0x410 [ 130.052981][ T5255] ? __might_sleep+0xf0/0xf0 [ 130.057612][ T5255] ? __lock_acquire+0x7b50/0x7b50 [ 130.062684][ T5255] should_fail+0x383/0x4b0 [ 130.067145][ T5255] should_failslab+0x5/0x20 [ 130.071722][ T5255] slab_pre_alloc_hook+0x51/0xc0 [ 130.076702][ T5255] __kmalloc_node+0x6d/0x3a0 [ 130.081326][ T5255] ? kvmalloc_node+0x84/0x130 [ 130.086031][ T5255] ? rcu_is_watching+0x11/0xa0 [ 130.090836][ T5255] kvmalloc_node+0x84/0x130 [ 130.095375][ T5255] ceph_msg_new2+0x162/0x4a0 [ 130.100012][ T5255] ceph_monc_init+0x5e0/0xa00 [ 130.104735][ T5255] ceph_create_client+0x221/0x300 [ 130.109797][ T5255] ceph_get_tree+0xf6/0x1290 [ 130.114430][ T5255] ? bpf_lsm_capable+0x5/0x10 [ 130.119138][ T5255] ? security_capable+0x85/0xb0 [ 130.124193][ T5255] vfs_get_tree+0x88/0x270 [ 130.128650][ T5255] vfs_fsconfig_locked+0x22f/0x400 [ 130.133797][ T5255] __se_sys_fsconfig+0x69e/0x7e0 [ 130.138785][ T5255] ? __x64_sys_fsconfig+0xc0/0xc0 [ 130.143877][ T5255] ? lockdep_hardirqs_on+0x94/0x140 [ 130.149136][ T5255] ? __x64_sys_fsconfig+0x1c/0xc0 [ 130.154208][ T5255] do_syscall_64+0x4c/0xa0 [ 130.158663][ T5255] ? clear_bhb_loop+0x30/0x80 [ 130.163387][ T5255] ? clear_bhb_loop+0x30/0x80 [ 130.168108][ T5255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.174054][ T5255] RIP: 0033:0x7f2a065e8159 [ 130.178675][ T5255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.198315][ T5255] RSP: 002b:00007f2a04840028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 130.206788][ T5255] RAX: ffffffffffffffda RBX: 00007f2a0686ffa0 RCX: 00007f2a065e8159 [ 130.214803][ T5255] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 130.222813][ T5255] RBP: 00007f2a0667f03b R08: 0000000000000000 R09: 0000000000000000 [ 130.231086][ T5255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.239087][ T5255] R13: 00007f2a06870038 R14: 00007f2a0686ffa0 R15: 00007fff1f334668 [ 130.247100][ T5255] [ 130.250260][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.608935][ T26] audit: type=1400 audit(1789268496.579:4): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5277 comm="syz.0.299" [ 130.793122][ T5284] FAULT_INJECTION: forcing a failure. [ 130.793122][ T5284] name failslab, interval 1, probability 0, space 0, times 0 [ 130.806454][ T5284] CPU: 1 PID: 5284 Comm: syz.1.301 Not tainted syzkaller #0 [ 130.813786][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.823883][ T5284] Call Trace: [ 130.827207][ T5284] [ 130.830224][ T5284] dump_stack_lvl+0x188/0x250 [ 130.834955][ T5284] ? show_regs_print_info+0x20/0x20 [ 130.840193][ T5284] ? load_image+0x410/0x410 [ 130.844760][ T5284] should_fail+0x383/0x4b0 [ 130.849236][ T5284] should_failslab+0x5/0x20 [ 130.853770][ T5284] slab_pre_alloc_hook+0x51/0xc0 [ 130.858740][ T5284] kmem_cache_alloc_trace+0x47/0x290 [ 130.864053][ T5284] ? l2cap_chan_create+0x4c/0x730 [ 130.869121][ T5284] l2cap_chan_create+0x4c/0x730 [ 130.874010][ T5284] l2cap_sock_create+0x185/0x2a0 [ 130.878988][ T5284] bt_sock_create+0x155/0x220 [ 130.883705][ T5284] __sock_create+0x473/0x910 [ 130.888340][ T5284] __sys_socket+0xe2/0x170 [ 130.892823][ T5284] __x64_sys_socket+0x76/0x80 [ 130.897537][ T5284] do_syscall_64+0x4c/0xa0 [ 130.901977][ T5284] ? clear_bhb_loop+0x30/0x80 [ 130.906689][ T5284] ? clear_bhb_loop+0x30/0x80 [ 130.911401][ T5284] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.917329][ T5284] RIP: 0033:0x7f2a065e8159 [ 130.921792][ T5284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.941455][ T5284] RSP: 002b:00007f2a0483ffc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 130.949917][ T5284] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2a065e8159 [ 130.957925][ T5284] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001f [ 130.965996][ T5284] RBP: 00007f2a0667f03b R08: 0000000000000000 R09: 0000000000000000 [ 130.974006][ T5284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.982011][ T5284] R13: 00007f2a06870038 R14: 00007f2a0686ffa0 R15: 00007fff1f334668 [ 130.990076][ T5284] [ 130.993136][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.053763][ T5290] comedi comedi3: board detection failed [ 131.860398][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.900204][ T5341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.081252][ T1324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.446497][ T1324] usb 5-1: config 0 has no interfaces? [ 132.617134][ T1324] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.627987][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 132.645063][ T1324] usb 5-1: Product: syz [ 132.649311][ T1324] usb 5-1: Manufacturer: syz [ 132.666424][ T1324] usb 5-1: SerialNumber: syz [ 132.704215][ T1324] usb 5-1: config 0 descriptor?? [ 132.714043][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.720373][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.946650][ T4232] usb 5-1: USB disconnect, device number 4 [ 132.964391][ T5364] kvm: MONITOR instruction emulated as NOP! [ 133.605758][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.614514][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.771435][ T4187] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.928965][ T5394] netlink: 52 bytes leftover after parsing attributes in process `syz.4.348'. [ 134.187218][ T4187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.199956][ T4187] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.381386][ T4187] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.03 [ 134.390997][ T4187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.419979][ T4187] usb 3-1: Product: syz [ 134.431159][ T4187] usb 3-1: Manufacturer: syz [ 134.435847][ T4187] usb 3-1: SerialNumber: syz [ 134.444335][ T5367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.509031][ T5367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.647520][ T4196] Bluetooth: Wrong link type (-22) [ 134.716571][ T4187] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 134.987841][ T4187] usb 3-1: USB disconnect, device number 5 [ 134.996849][ T4187] usblp0: removed [ 135.244520][ T5367] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.253706][ T5367] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.270639][ T5367] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.283520][ T5367] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.748898][ T23] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.760619][ T5448] device syzkaller1 entered promiscuous mode [ 135.861425][ T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 135.883935][ T5456] ip_tables: iptables: counters copy to user failed while replacing table [ 136.070749][ T5461] zram0: detected capacity change from 0 to 65536 [ 136.261506][ T13] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.272540][ T13] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.319036][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.348825][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 136.380310][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 136.423794][ T5461] ftl_cs: FTL header not found. [ 136.543436][ T13] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.554233][ T5461] block2mtd: mtd1: [/dev/zram0] erase_size = 64KiB [65536] [ 136.565865][ T13] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.608638][ T13] usb 1-1: Product: syz [ 136.613269][ T13] usb 1-1: Manufacturer: syz [ 136.662386][ T13] cdc_wdm 1-1:1.0: skipping garbage [ 136.667650][ T13] cdc_wdm 1-1:1.0: skipping garbage [ 136.719121][ T13] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 136.729908][ T13] cdc_wdm 1-1:1.0: Unknown control protocol [ 136.945811][ T13] usb 1-1: USB disconnect, device number 12 [ 137.214721][ T5496] netlink: 165 bytes leftover after parsing attributes in process `syz.3.391'. [ 137.411324][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.535434][ T5504] Bluetooth: hci0: service_discovery: too big uuid_count value 10000 [ 137.754156][ T5510] comedi: valid board names for 8255 driver are: [ 137.760798][ T5510] 8255 [ 137.768817][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.778058][ T23] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.782245][ T5510] comedi: valid board names for vmk80xx driver are: [ 137.798179][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.810142][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.813869][ T5510] vmk80xx [ 137.827697][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.838922][ T5510] comedi: valid board names for usbduxsigma driver are: [ 137.857043][ T5510] usbduxsigma [ 137.860435][ T5510] comedi: valid board names for usbduxfast driver are: [ 137.879328][ T5510] usbduxfast [ 137.883197][ T5510] comedi: valid board names for usbdux driver are: [ 137.895395][ T5510] usbdux [ 137.899439][ T5510] comedi: valid board names for ni6501 driver are: [ 137.906307][ T5510] ni6501 [ 137.909395][ T5510] comedi: valid board names for dt9812 driver are: [ 137.922732][ T5510] dt9812 [ 137.925741][ T5510] comedi: valid board names for ni_labpc_cs driver are: [ 137.937567][ T5510] ni_labpc_cs [ 137.941000][ T5510] comedi: valid board names for ni_daq_700 driver are: [ 137.949543][ T5510] ni_daq_700 [ 137.958563][ T5510] comedi: valid board names for labpc_pci driver are: [ 137.966867][ T23] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.983499][ T5510] labpc_pci [ 137.986745][ T5510] comedi: valid board names for adl_pci9118 driver are: [ 137.997617][ T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.008470][ T23] usb 5-1: Product: syz [ 138.016422][ T5510] pci9118dg [ 138.019657][ T5510] pci9118hg [ 138.026197][ T23] usb 5-1: Manufacturer: syz [ 138.030906][ T5510] pci9118hr [ 138.038595][ T5510] comedi: valid board names for 8255_pci driver are: [ 138.047894][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 138.051290][ T5510] 8255_pci [ 138.056318][ T5510] comedi: valid board names for s526 driver are: [ 138.069586][ T5510] s526 [ 138.074792][ T5510] comedi: valid board names for multiq3 driver are: [ 138.089633][ T5510] multiq3 [ 138.093554][ T5510] comedi: valid board names for pcmuio driver are: [ 138.100247][ T5510] pcmuio48 [ 138.104380][ T5510] pcmuio96 [ 138.107647][ T5510] comedi: valid board names for pcmmio driver are: [ 138.114701][ T5510] pcmmio [ 138.117766][ T5510] comedi: valid board names for pcmda12 driver are: [ 138.124392][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 138.124444][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 138.131632][ T5510] pcmda12 [ 138.138030][ T5510] comedi: valid board names for pcmad driver are: [ 138.155005][ T5510] pcmad12 [ 138.159313][ T5510] pcmad16 [ 138.163863][ T5510] comedi: valid board names for ni_labpc driver are: [ 138.169932][ T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 138.174208][ T5510] lab-pc-1200 [ 138.180789][ T5510] lab-pc-1200ai [ 138.189847][ T5510] lab-pc+ [ 138.192310][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.194077][ T5510] comedi: valid board names for atmio16 driver are: [ 138.210911][ T5510] atmio16 [ 138.214219][ T23] cdc_wdm 5-1:1.0: Unknown control protocol [ 138.217748][ T5510] atmio16d [ 138.228503][ T4232] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.242057][ T5510] comedi: valid board names for ni_at_ao driver are: [ 138.265987][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.275933][ T5510] at-ao-6 [ 138.289469][ T5510] at-ao-10 [ 138.299334][ T4232] usb 2-1: config 0 descriptor?? [ 138.304247][ T5510] comedi: valid board names for ni_at_a2150 driver are: [ 138.321422][ T5510] ni_at_a2150 [ 138.341295][ T5510] comedi: valid board names for adq12b driver are: [ 138.356381][ T5510] adq12b [ 138.369858][ T5510] comedi: valid board names for mpc624 driver are: [ 138.389578][ T5510] mpc624 [ 138.394291][ T5510] comedi: valid board names for c6xdigio driver are: [ 138.401690][ T5510] c6xdigio [ 138.405118][ T5510] comedi: valid board names for aio_iiro_16 driver are: [ 138.420557][ T5510] aio_iiro_16 [ 138.428253][ T5510] comedi: valid board names for aio_aio12_8 driver are: [ 138.439926][ T5510] aio_aio12_8 [ 138.446777][ T5510] aio_ai12_8 [ 138.452472][ T5510] aio_ao12_4 [ 138.457002][ T5510] comedi: valid board names for fl512 driver are: [ 138.483218][ T5510] fl512 [ 138.493113][ T5510] comedi: valid board names for dmm32at driver are: [ 138.506764][ T5510] dmm32at [ 138.513644][ T5510] comedi: valid board names for dt282x driver are: [ 138.537853][ T5510] dt2821 [ 138.540916][ T5510] dt2821-f [ 138.555522][ T5510] dt2821-g [ 138.558784][ T5510] dt2823 [ 138.562881][ T4232] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 138.563589][ T4228] usb 5-1: USB disconnect, device number 5 [ 138.586066][ T5510] dt2824-pgh [ 138.590134][ T5510] dt2824-pgl [ 138.616686][ T5510] dt2825 [ 138.619675][ T5510] dt2827 [ 138.637380][ T5510] dt2828 [ 138.640403][ T5510] dt2829 [ 138.656508][ T5510] dt21-ez [ 138.659601][ T5510] dt23-ez [ 138.673216][ T5510] dt24-ez [ 138.676379][ T5510] dt24-ez-pgl [ 138.690034][ T5510] comedi: valid board names for dt2817 driver are: [ 138.710672][ T5510] dt2817 [ 138.714181][ T5510] comedi: valid board names for dt2815 driver are: [ 138.720947][ T5510] dt2815 [ 138.724632][ T5510] comedi: valid board names for dt2814 driver are: [ 138.743142][ T5510] dt2814 [ 138.746392][ T5510] comedi: valid board names for dt2811 driver are: [ 138.753911][ T5510] dt2811-pgh [ 138.757288][ T5510] dt2811-pgl [ 138.760645][ T5510] comedi: valid board names for dt2801 driver are: [ 138.768050][ T5510] dt2801 [ 138.771386][ T5510] comedi: valid board names for das6402 driver are: [ 138.778198][ T5510] das6402-12 [ 138.781987][ T5510] das6402-16 [ 138.785365][ T5510] comedi: valid board names for das1800 driver are: [ 138.792509][ T5510] das-1701st [ 138.796149][ T5510] das-1701st-da [ 138.799792][ T5510] das-1702st [ 138.803723][ T5510] das-1702st-da [ 138.807379][ T5510] das-1702hr [ 138.823836][ T5510] das-1702hr-da [ 138.833110][ T5510] das-1701ao [ 138.842606][ T5510] das-1702ao [ 138.849336][ T5510] das-1801st [ 138.861232][ T5510] das-1801st-da [ 138.868864][ T5510] das-1802st [ 138.883383][ T5510] das-1802st-da [ 138.886979][ T5510] das-1802hr [ 138.890308][ T5510] das-1802hr-da [ 138.901276][ T5510] das-1801hc [ 138.904797][ T5510] das-1802hc [ 138.908177][ T5510] das-1801ao [ 138.911983][ T5510] das-1802ao [ 138.915498][ T5510] comedi: valid board names for das800 driver are: [ 138.922461][ T5510] das-800 [ 138.925696][ T5510] cio-das800 [ 138.929093][ T5510] das-801 [ 138.932855][ T5510] cio-das801 [ 138.936345][ T5510] das-802 [ 138.939444][ T5510] cio-das802 [ 138.943397][ T5510] cio-das802/16 [ 138.955988][ T5510] comedi: valid board names for isa-das08 driver are: [ 138.976830][ T5510] isa-das08 [ 138.989021][ T5510] das08-pgm [ 138.994595][ T5510] das08-pgh [ 139.001893][ T5510] das08-pgl [ 139.008608][ T5510] das08-aoh [ 139.015757][ T5510] das08-aol [ 139.025887][ T5510] das08-aom [ 139.029192][ T5510] das08/jr-ao [ 139.033648][ T5510] das08jr-16-ao [ 139.037275][ T5510] pc104-das08 [ 139.040741][ T5510] das08jr/16 [ 139.044168][ T5510] comedi: valid board names for das16m1 driver are: [ 139.061455][ T5510] das16m1 [ 139.064516][ T5510] comedi: valid board names for dac02 driver are: [ 139.070940][ T5510] dac02 [ 139.101693][ T5510] comedi: valid board names for rti802 driver are: [ 139.108325][ T5510] rti802 [ 139.129511][ T5510] comedi: valid board names for rti800 driver are: [ 139.139431][ T5527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.403'. [ 139.150235][ T5510] rti800 [ 139.154088][ T5510] rti815 [ 139.157051][ T5510] comedi: valid board names for pcm3724 driver are: [ 139.174021][ T5510] pcm3724 [ 139.177088][ T5510] comedi: valid board names for pcl818 driver are: [ 139.211872][ T5510] pcl818l [ 139.214986][ T5510] pcl818h [ 139.227933][ T5510] pcl818hd [ 139.241666][ T5510] pcl818hg [ 139.244854][ T5510] pcl818 [ 139.247809][ T5510] pcl718 [ 139.250760][ T5510] pcm3718 [ 139.277744][ T5510] comedi: valid board names for pcl816 driver are: [ 139.285952][ T5510] pcl816 [ 139.289011][ T5510] pcl814b [ 139.319834][ T5510] comedi: valid board names for pcl812 driver are: [ 139.345230][ T5510] pcl812 [ 139.348226][ T5510] pcl812pg [ 139.360593][ T5510] acl8112pg [ 139.366447][ T5510] acl8112dg [ 139.369677][ T5510] acl8112hg [ 139.376310][ T5510] a821pgl [ 139.379451][ T5510] a821pglnda [ 139.386459][ T5510] a821pgh [ 139.389515][ T5510] a822pgl [ 139.394603][ T5533] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 139.397140][ T5510] a822pgh [ 139.406218][ T5510] a823pgl [ 139.410470][ T5510] a823pgh [ 139.421680][ T5510] pcl813 [ 139.425600][ T5510] pcl813b [ 139.428786][ T5510] acl8113 [ 139.434434][ T5533] kvm: pic: non byte read [ 139.439198][ T5533] kvm: pic: level sensitive irq not supported [ 139.439310][ T5533] kvm: pic: non byte read [ 139.457034][ T5510] iso813 [ 139.460132][ T5510] acl8216 [ 139.463566][ T5510] a826pg [ 139.466658][ T5510] comedi: valid board names for pcl730 driver are: [ 139.480303][ T5533] kvm: pic: level sensitive irq not supported [ 139.480367][ T5533] kvm: pic: non byte read [ 139.497722][ T5510] pcl730 [ 139.500823][ T5510] iso730 [ 139.503900][ T5510] acl7130 [ 139.511792][ T5510] pcm3730 [ 139.515013][ T5510] pcl725 [ 139.518046][ T5510] p8r8dio [ 139.531135][ T5510] acl7225b [ 139.534414][ T5510] p16r16dio [ 139.537779][ T5510] pcl733 [ 139.540838][ T5510] pcl734 [ 139.561118][ T5510] opmm-1616-xt [ 139.564673][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.581241][ T5510] pearl-mm-p [ 139.584743][ T5510] ir104-pbf [ 139.588101][ T5510] comedi: valid board names for pcl726 driver are: [ 139.611965][ T5510] pcl726 [ 139.616210][ T5510] pcl727 [ 139.619343][ T5510] pcl728 [ 139.622471][ T5510] acl6126 [ 139.625872][ T5510] acl6128 [ 139.629098][ T5510] comedi: valid board names for pcl724 driver are: [ 139.637851][ T5510] pcl724 [ 139.641004][ T5510] pcl722 [ 139.644263][ T5510] pcl731 [ 139.647390][ T5510] acl7122 [ 139.650617][ T5510] acl7124 [ 139.654862][ T5510] pet48dio [ 139.658128][ T5510] pcmio48 [ 139.677193][ T5510] onyx-mm-dio [ 139.680611][ T5510] comedi: valid board names for pcl711 driver are: [ 139.711399][ T5510] pcl711 [ 139.714389][ T5510] pcl711b [ 139.724384][ T5510] acl8112hg [ 139.727654][ T5510] acl8112dg [ 139.730900][ T5510] comedi: valid board names for amplc_pc263 driver are: [ 139.748651][ T5510] pc263 [ 139.773443][ T5510] comedi: valid board names for amplc_pc236 driver are: [ 139.801183][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 139.806669][ T5510] pc36at [ 139.809644][ T5510] comedi: valid board names for amplc_dio200 driver are: [ 139.817357][ T5510] pc212e [ 139.821339][ T5510] pc214e [ 139.824304][ T5510] pc215e [ 139.827332][ T5510] pc218e [ 139.830398][ T5510] pc272e [ 139.834267][ T5510] comedi: valid board names for comedi_parport driver are: [ 139.841947][ T5510] comedi_parport [ 139.845669][ T5510] comedi: valid board names for comedi_test driver are: [ 139.854499][ T5510] comedi_test [ 139.857954][ T5510] comedi: valid board names for comedi_bond driver are: [ 139.865712][ T5510] comedi_bond [ 139.936561][ T23] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 139.955012][ T23] usb 4-1: config 0 has no interface number 0 [ 139.971160][ T23] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 140.001171][ T23] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 140.019409][ T23] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.051281][ T23] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 140.070629][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.116335][ T23] usb 4-1: config 0 descriptor?? [ 140.173047][ T23] ldusb 4-1:0.55: Interrupt in endpoint not found [ 140.377768][ T23] usb 4-1: USB disconnect, device number 5 [ 140.493422][ T5555] device syzkaller0 entered promiscuous mode [ 140.588790][ T21] usb 2-1: USB disconnect, device number 4 [ 140.966650][ T5579] FAULT_INJECTION: forcing a failure. [ 140.966650][ T5579] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 140.981388][ T5579] CPU: 1 PID: 5579 Comm: syz.3.421 Not tainted syzkaller #0 [ 140.988711][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.998818][ T5579] Call Trace: [ 141.002124][ T5579] [ 141.005073][ T5579] dump_stack_lvl+0x188/0x250 [ 141.009782][ T5579] ? show_regs_print_info+0x20/0x20 [ 141.015031][ T5579] ? load_image+0x410/0x410 [ 141.019585][ T5579] should_fail+0x383/0x4b0 [ 141.024065][ T5579] prepare_alloc_pages+0x1e3/0x5b0 [ 141.029216][ T5579] __alloc_pages+0x11b/0x480 [ 141.033835][ T5579] ? zone_statistics+0x170/0x170 [ 141.038807][ T5579] ? rcu_lock_acquire+0x30/0x30 [ 141.041280][ T4228] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.043687][ T5579] ? alloc_pages+0x452/0x560 [ 141.055754][ T5579] __get_free_pages+0x8/0x30 [ 141.060383][ T5579] __tlb_remove_page_size+0x1f2/0x3f0 [ 141.065794][ T5579] unmap_page_range+0xfcf/0x2410 [ 141.070936][ T5579] unmap_vmas+0x131/0x250 [ 141.075282][ T5579] ? unmap_page_range+0x2410/0x2410 [ 141.080520][ T5579] ? __mutex_lock_common+0x435/0x2400 [ 141.085921][ T5579] ? exit_mm_release+0x16/0x30 [ 141.090719][ T5579] exit_mmap+0x3b9/0x640 [ 141.094989][ T5579] ? vm_brk+0x20/0x20 [ 141.099015][ T5579] ? uprobe_clear_state+0x2f6/0x460 [ 141.104236][ T5579] __mmput+0x115/0x390 [ 141.108321][ T5579] exit_mm+0x632/0x7b0 [ 141.112414][ T5579] ? perf_pmu_migrate_context+0xb70/0xb70 [ 141.118157][ T5579] ? do_exit+0x2110/0x2110 [ 141.122590][ T5579] ? __ia32_sys_timer_delete+0x40/0x40 [ 141.128058][ T5579] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 141.133545][ T5579] ? tty_audit_exit+0x149/0x1f0 [ 141.138429][ T5579] do_exit+0x5b8/0x2110 [ 141.142619][ T5579] ? put_task_struct+0x80/0x80 [ 141.147404][ T5579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 141.153423][ T5579] ? _raw_spin_lock_irq+0xb7/0xf0 [ 141.158481][ T5579] do_group_exit+0x12c/0x2f0 [ 141.163090][ T5579] ? lockdep_hardirqs_on+0x94/0x140 [ 141.168464][ T5579] get_signal+0x7eb/0x12e0 [ 141.172910][ T5579] arch_do_signal_or_restart+0xe6/0x12a0 [ 141.178571][ T5579] ? aa_af_perm+0x340/0x340 [ 141.183117][ T5579] ? futex_exit_release+0x1c0/0x1c0 [ 141.188351][ T5579] ? get_sigframe_size+0x10/0x10 [ 141.193320][ T5579] ? __context_tracking_exit+0x4c/0x80 [ 141.198823][ T5579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 141.204823][ T5579] ? exit_to_user_mode_loop+0x3b/0x130 [ 141.210298][ T5579] exit_to_user_mode_loop+0x9e/0x130 [ 141.215631][ T5579] exit_to_user_mode_prepare+0xee/0x180 [ 141.221205][ T5579] syscall_exit_to_user_mode+0x16/0x40 [ 141.226706][ T5579] do_syscall_64+0x58/0xa0 [ 141.231148][ T5579] ? clear_bhb_loop+0x30/0x80 [ 141.235855][ T5579] ? clear_bhb_loop+0x30/0x80 [ 141.240651][ T5579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.246572][ T5579] RIP: 0033:0x7f7123585159 [ 141.251009][ T5579] Code: Unable to access opcode bytes at RIP 0x7f712358512f. [ 141.258393][ T5579] RSP: 002b:00007f71217dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 141.266833][ T5579] RAX: 0000000000000001 RBX: 00007f712380cfa8 RCX: 00007f7123585159 [ 141.274834][ T5579] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f712380cfac [ 141.282827][ T5579] RBP: 00007f712380cfa0 R08: 0035b9a6f121add6 R09: 0000000000000000 [ 141.290823][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.298825][ T5579] R13: 00007f712380d038 R14: 00007fffb4148fd0 R15: 00007fffb41490b8 [ 141.306839][ T5579] [ 141.309933][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.518910][ T4228] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 141.528917][ T4228] usb 5-1: config 1 has no interface number 0 [ 141.711416][ T4228] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 141.727300][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.741255][ T4228] usb 5-1: Product: syz [ 141.748202][ T4228] usb 5-1: Manufacturer: syz [ 141.755927][ T4228] usb 5-1: SerialNumber: syz [ 142.121464][ T4228] usb 5-1: 3:1 : does not exist [ 142.126398][ T4228] usb 5-1: 3:2 : does not exist [ 142.181282][ T4228] usb 5-1: USB disconnect, device number 6 [ 142.203772][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.137651][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 143.403047][ T5616] tc action pedit offset 536872960 out of bounds [ 143.680784][ T5565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.215812][ T5646] binder: 5645:5646 ioctl c00c620f 200000000080 returned -22 [ 144.259582][ T5648] xt_hashlimit: size too large, truncated to 1048576 [ 144.327371][ T5653] comedi comedi0: Cannot bond this driver to itself! [ 144.493620][ T5658] FAULT_INJECTION: forcing a failure. [ 144.493620][ T5658] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.590491][ T5658] CPU: 1 PID: 5658 Comm: syz.2.453 Not tainted syzkaller #0 [ 144.597842][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.607930][ T5658] Call Trace: [ 144.611233][ T5658] [ 144.614182][ T5658] dump_stack_lvl+0x188/0x250 [ 144.618889][ T5658] ? show_regs_print_info+0x20/0x20 [ 144.624136][ T5658] ? load_image+0x410/0x410 [ 144.628676][ T5658] ? __lock_acquire+0x7b50/0x7b50 [ 144.633732][ T5658] should_fail+0x383/0x4b0 [ 144.638193][ T5658] _copy_to_user+0x2e/0x130 [ 144.642758][ T5658] do_pipe2+0xd1/0x190 [ 144.646862][ T5658] ? pipe_fcntl+0x530/0x530 [ 144.651415][ T5658] ? lock_chain_count+0x20/0x20 [ 144.656298][ T5658] ? syscall_enter_from_user_mode+0x21/0x70 [ 144.662237][ T5658] __x64_sys_pipe+0x36/0x40 [ 144.666788][ T5658] do_syscall_64+0x4c/0xa0 [ 144.671229][ T5658] ? clear_bhb_loop+0x30/0x80 [ 144.675934][ T5658] ? clear_bhb_loop+0x30/0x80 [ 144.680649][ T5658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.686581][ T5658] RIP: 0033:0x7f6690e6c159 [ 144.691026][ T5658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.710658][ T5658] RSP: 002b:00007f668f0c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 144.719114][ T5658] RAX: ffffffffffffffda RBX: 00007f66910f3fa0 RCX: 00007f6690e6c159 [ 144.727116][ T5658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.735112][ T5658] RBP: 00007f6690f0303b R08: 0000000000000000 R09: 0000000000000000 [ 144.743124][ T5658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.751118][ T5658] R13: 00007f66910f4038 R14: 00007f66910f3fa0 R15: 00007ffd7dd7e5c8 [ 144.759125][ T5658] [ 144.762280][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.776611][ T5661] FAULT_INJECTION: forcing a failure. [ 144.776611][ T5661] name failslab, interval 1, probability 0, space 0, times 0 [ 144.790723][ T5661] CPU: 0 PID: 5661 Comm: syz.4.454 Not tainted syzkaller #0 [ 144.798057][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.808140][ T5661] Call Trace: [ 144.811448][ T5661] [ 144.814411][ T5661] dump_stack_lvl+0x188/0x250 [ 144.819130][ T5661] ? show_regs_print_info+0x20/0x20 [ 144.824368][ T5661] ? load_image+0x410/0x410 [ 144.828919][ T5661] should_fail+0x383/0x4b0 [ 144.833381][ T5661] should_failslab+0x5/0x20 [ 144.837928][ T5661] slab_pre_alloc_hook+0x51/0xc0 [ 144.842904][ T5661] ? xas_create+0x1047/0x15a0 [ 144.847617][ T5661] kmem_cache_alloc+0x3d/0x280 [ 144.852421][ T5661] ? xas_descend+0x210/0x3b0 [ 144.857051][ T5661] xas_create+0x1047/0x15a0 [ 144.861590][ T5661] ? __kasan_kmalloc+0xaf/0xe0 [ 144.866436][ T5661] xas_store+0x9f/0x1a00 [ 144.870733][ T5661] __xa_store+0xe6/0x210 [ 144.875027][ T5661] xa_store+0x2f/0x50 [ 144.879063][ T5661] __io_uring_add_tctx_node+0x1ce/0x500 [ 144.884672][ T5661] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 144.890622][ T5661] ? _raw_spin_unlock+0x24/0x40 [ 144.895502][ T5661] ? alloc_fd+0x59e/0x650 [ 144.899869][ T5661] io_uring_install_fd+0xc0/0xf0 [ 144.904848][ T5661] __se_sys_io_uring_setup+0x2303/0x2900 [ 144.910533][ T5661] ? __x64_sys_io_uring_setup+0x60/0x60 [ 144.916139][ T5661] ? lockdep_hardirqs_on+0x94/0x140 [ 144.921384][ T5661] do_syscall_64+0x4c/0xa0 [ 144.925834][ T5661] ? clear_bhb_loop+0x30/0x80 [ 144.930543][ T5661] ? clear_bhb_loop+0x30/0x80 [ 144.935255][ T5661] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.941285][ T5661] RIP: 0033:0x7fb92711e159 [ 144.945747][ T5661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.965383][ T5661] RSP: 002b:00007fb925376028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 144.973837][ T5661] RAX: ffffffffffffffda RBX: 00007fb9273a5fa0 RCX: 00007fb92711e159 [ 144.981838][ T5661] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000007a76 [ 144.989848][ T5661] RBP: 00007fb9271b503b R08: 0000000000000000 R09: 0000000000000000 [ 144.997852][ T5661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.005857][ T5661] R13: 00007fb9273a6038 R14: 00007fb9273a5fa0 R15: 00007ffc2e3e46e8 [ 145.013882][ T5661] [ 145.251137][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 145.611347][ T21] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.627926][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.649004][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.672079][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.771388][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.790632][ T21] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.813646][ T21] usb 1-1: Manufacturer: syz [ 145.835538][ T21] usb 1-1: config 0 descriptor?? [ 146.314367][ T21] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 146.329267][ T21] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 146.400053][ T21] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 146.657402][ T5703] comedi comedi3: dmm32at: I/O port conflict (0x6,16) [ 147.484112][ T5726] kvm [5725]: vcpu1, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xa5ef, nop [ 147.533881][ T5726] kvm [5725]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0xb318 [ 147.558475][ T5726] kvm [5725]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0xb3b9 [ 148.277485][ T5757] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 148.469687][ T4227] usb 1-1: USB disconnect, device number 13 [ 148.681131][ T4301] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 148.845885][ T5781] zram: Cannot change disksize for initialized device [ 148.982265][ T1324] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.211506][ T4301] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 149.220623][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 149.237251][ T4301] usb 4-1: Product: syz [ 149.244090][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 149.249443][ T4301] usb 4-1: Manufacturer: syz [ 149.256674][ T4301] usb 4-1: SerialNumber: syz [ 149.290672][ T4301] usb 4-1: config 0 descriptor?? [ 149.350003][ T5795] comedi comedi2: No hardware detected at I/O base 0x100 [ 149.361402][ T1324] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 149.369770][ T1324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.425790][ T1324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.446845][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.477498][ T1324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.505550][ T1324] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.525067][ T5799] netlink: 'syz.0.498': attribute type 25 has an invalid length. [ 149.533559][ T5797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.570424][ T1324] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.598452][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.614371][ T4301] usb 4-1: USB disconnect, device number 6 [ 149.736587][ T5804] 9pnet_virtio: no channels available for device syz [ 149.881305][ T1324] usb 5-1: usb_control_msg returned -32 [ 149.887112][ T1324] usbtmc 5-1:16.0: can't read capabilities [ 150.301385][ T5817] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 150.324974][ T1324] usb 5-1: USB disconnect, device number 7 [ 150.434869][ T5828] binder: BINDER_SET_CONTEXT_MGR already set [ 150.466823][ T5828] binder: 5826:5828 ioctl 4018620d 200000001000 returned -16 [ 150.713051][ T5836] autofs4:pid:5836:autofs_fill_super: called with bogus options [ 150.873212][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.885701][ T26] audit: type=1326 audit(1789268516.859:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.0.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c5d7f159 code=0x0 [ 150.919367][ T5841] 9pnet_virtio: no channels available for device syz [ 151.024827][ T5845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.517'. [ 151.040667][ T5845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.517'. [ 151.279067][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.305558][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.336040][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.369707][ T4228] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.383233][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.401763][ T4228] usb 2-1: config 0 descriptor?? [ 151.893245][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 151.920354][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 151.949647][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 151.980063][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.020095][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.040380][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.070738][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.081186][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.088626][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.145528][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.173745][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.201122][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.229249][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.258064][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.287501][ T4228] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 152.317897][ T4228] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 152.367296][ T4228] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 152.429599][ T5781] block2mtd: error: cannot open device /dev/zram0 [ 152.452536][ T4228] usb 2-1: USB disconnect, device number 5 [ 152.599790][ T5873] fido_id[5873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 153.121263][ T4301] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 153.189206][ T5904] netlink: 'syz.3.541': attribute type 3 has an invalid length. [ 153.361138][ T4301] usb 1-1: Using ep0 maxpacket: 32 [ 153.460109][ T5919] [ 153.462577][ T5919] ====================================================== [ 153.469619][ T5919] WARNING: possible circular locking dependency detected [ 153.476666][ T5919] syzkaller #0 Not tainted [ 153.481082][ T5919] ------------------------------------------------------ [ 153.488106][ T5919] syz.1.547/5919 is trying to acquire lock: [ 153.494002][ T5919] ffff88801cd29590 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 153.505498][ T5919] [ 153.505498][ T5919] but task is already holding lock: [ 153.512868][ T5919] ffff888061a1d920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 153.521935][ T5919] [ 153.521935][ T5919] which lock already depends on the new lock. [ 153.521935][ T5919] [ 153.532348][ T5919] [ 153.532348][ T5919] the existing dependency chain (in reverse order) is: [ 153.541387][ T5919] [ 153.541387][ T5919] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 153.549045][ T5919] __mutex_lock_common+0x1e5/0x2400 [ 153.554777][ T5919] mutex_lock_nested+0x17/0x20 [ 153.560074][ T5919] tcm_set_name+0x26/0x90 [ 153.564936][ T5919] function_make+0x195/0x350 [ 153.570055][ T5919] configfs_mkdir+0x511/0x9e0 [ 153.575255][ T5919] vfs_mkdir+0x386/0x570 [ 153.580030][ T5919] do_mkdirat+0x1dd/0x5c0 [ 153.584897][ T5919] __x64_sys_mkdir+0x6a/0x80 [ 153.590022][ T5919] do_syscall_64+0x4c/0xa0 [ 153.594966][ T5919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.601408][ T5919] [ 153.601408][ T5919] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 153.609683][ T5919] __mutex_lock_common+0x1e5/0x2400 [ 153.615418][ T5919] mutex_lock_nested+0x17/0x20 [ 153.620711][ T5919] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 153.627478][ T5919] configfs_symlink+0x5a4/0x13b0 [ 153.632945][ T5919] vfs_symlink+0x245/0x3d0 [ 153.637989][ T5919] do_symlinkat+0x1ab/0x6b0 [ 153.643012][ T5919] __x64_sys_symlink+0x7a/0x90 [ 153.648304][ T5919] do_syscall_64+0x4c/0xa0 [ 153.653243][ T5919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.659669][ T5919] [ 153.659669][ T5919] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}: [ 153.668358][ T5919] __lock_acquire+0x2c66/0x7b50 [ 153.673743][ T5919] lock_acquire+0x19e/0x400 [ 153.678775][ T5919] down_write+0x38/0x60 [ 153.683458][ T5919] configfs_depend_item_unlocked+0x14f/0x430 [ 153.689982][ T5919] usbg_make_tpg+0x1f3/0x580 [ 153.695226][ T5919] target_fabric_make_tpg+0xa0/0x6d0 [ 153.701045][ T5919] configfs_mkdir+0x511/0x9e0 [ 153.706253][ T5919] vfs_mkdir+0x386/0x570 [ 153.711023][ T5919] do_mkdirat+0x1dd/0x5c0 [ 153.715883][ T5919] __x64_sys_mkdir+0x6a/0x80 [ 153.721036][ T5919] do_syscall_64+0x4c/0xa0 [ 153.725979][ T5919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.732407][ T5919] [ 153.732407][ T5919] other info that might help us debug this: [ 153.732407][ T5919] [ 153.742638][ T5919] Chain exists of: [ 153.742638][ T5919] &sb->s_type->i_mutex_key#25 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 153.742638][ T5919] [ 153.757335][ T5919] Possible unsafe locking scenario: [ 153.757335][ T5919] [ 153.764783][ T5919] CPU0 CPU1 [ 153.770152][ T5919] ---- ---- [ 153.775519][ T5919] lock(&opts->dep_lock); [ 153.779933][ T5919] lock(gadget_subsys.su_mutex); [ 153.787485][ T5919] lock(&opts->dep_lock); [ 153.794524][ T5919] lock(&sb->s_type->i_mutex_key#25); [ 153.799987][ T5919] [ 153.799987][ T5919] *** DEADLOCK *** [ 153.799987][ T5919] [ 153.808136][ T5919] 5 locks held by syz.1.547/5919: [ 153.813160][ T5919] #0: ffff88801dadc460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 153.822409][ T5919] #1: ffff888071ed8b70 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 153.833217][ T5919] #2: ffffffff8cc242b0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 153.842975][ T5919] #3: ffffffff8cf20b08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 153.852644][ T5919] #4: ffff888061a1d920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 153.862152][ T5919] [ 153.862152][ T5919] stack backtrace: [ 153.868035][ T5919] CPU: 0 PID: 5919 Comm: syz.1.547 Not tainted syzkaller #0 [ 153.875320][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.885474][ T5919] Call Trace: [ 153.888759][ T5919] [ 153.891691][ T5919] dump_stack_lvl+0x188/0x250 [ 153.896375][ T5919] ? load_image+0x410/0x410 [ 153.900881][ T5919] ? show_regs_print_info+0x20/0x20 [ 153.906133][ T5919] ? print_circular_bug+0x12b/0x1a0 [ 153.911348][ T5919] check_noncircular+0x296/0x330 [ 153.916306][ T5919] ? look_up_lock_class+0x71/0x110 [ 153.921423][ T5919] ? add_chain_block+0x9b0/0x9b0 [ 153.926357][ T5919] ? lockdep_lock+0xf1/0x1f0 [ 153.931028][ T5919] ? mark_lock+0x94/0x320 [ 153.935371][ T5919] ? mark_lock+0x94/0x320 [ 153.939709][ T5919] ? _find_first_zero_bit+0xd1/0xf0 [ 153.944915][ T5919] __lock_acquire+0x2c66/0x7b50 [ 153.949791][ T5919] ? verify_lock_unused+0x140/0x140 [ 153.954996][ T5919] ? __mutex_trylock_common+0x15c/0x260 [ 153.960545][ T5919] ? rcu_lock_release+0x20/0x20 [ 153.965607][ T5919] lock_acquire+0x19e/0x400 [ 153.970130][ T5919] ? configfs_depend_item_unlocked+0x14f/0x430 [ 153.976381][ T5919] ? __might_sleep+0xf0/0xf0 [ 153.980975][ T5919] ? __kasan_kmalloc+0xc6/0xe0 [ 153.985753][ T5919] ? read_lock_is_recursive+0x10/0x10 [ 153.991164][ T5919] ? mutex_lock_io_nested+0x60/0x60 [ 153.996376][ T5919] down_write+0x38/0x60 [ 154.000555][ T5919] ? configfs_depend_item_unlocked+0x14f/0x430 [ 154.006718][ T5919] configfs_depend_item_unlocked+0x14f/0x430 [ 154.012719][ T5919] usbg_make_tpg+0x1f3/0x580 [ 154.017326][ T5919] ? mutex_lock_io_nested+0x60/0x60 [ 154.022537][ T5919] ? usbg_drop_tport+0x20/0x20 [ 154.027310][ T5919] ? vscnprintf+0x80/0x80 [ 154.031642][ T5919] target_fabric_make_tpg+0xa0/0x6d0 [ 154.036936][ T5919] ? target_fabric_release_wwn+0xa0/0xa0 [ 154.042607][ T5919] configfs_mkdir+0x511/0x9e0 [ 154.047407][ T5919] vfs_mkdir+0x386/0x570 [ 154.051665][ T5919] do_mkdirat+0x1dd/0x5c0 [ 154.056008][ T5919] ? vfs_mkdir+0x570/0x570 [ 154.060458][ T5919] ? getname_flags+0x1f9/0x4f0 [ 154.065236][ T5919] __x64_sys_mkdir+0x6a/0x80 [ 154.069842][ T5919] do_syscall_64+0x4c/0xa0 [ 154.074270][ T5919] ? clear_bhb_loop+0x30/0x80 [ 154.078954][ T5919] ? clear_bhb_loop+0x30/0x80 [ 154.083746][ T5919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.089733][ T5919] RIP: 0033:0x7f2a065e8159 [ 154.094151][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.113764][ T5919] RSP: 002b:00007f2a04840028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 154.122195][ T5919] RAX: ffffffffffffffda RBX: 00007f2a0686ffa0 RCX: 00007f2a065e8159 [ 154.130178][ T5919] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 154.138157][ T5919] RBP: 00007f2a0667f03b R08: 0000000000000000 R09: 0000000000000000 [ 154.146253][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.154272][ T5919] R13: 00007f2a06870038 R14: 00007f2a0686ffa0 R15: 00007fff1f334668 [ 154.162281][ T5919] [ 154.165478][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 154.197553][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 154.229061][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.401400][ T4301] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 154.414995][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.431096][ T4301] usb 1-1: Product: syz [ 154.439813][ T4301] usb 1-1: Manufacturer: syz [ 154.449398][ T4301] usb 1-1: SerialNumber: syz [ 154.455459][ T4301] usb 1-1: config 0 descriptor?? [ 154.494054][ T4301] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 154.507677][ T3542] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 154.534898][ T3542] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 154.581400][ T4178] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 154.611269][ T3542] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 154.643631][ T3542] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 154.663366][ T3542] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 154.697629][ T3542] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 154.711257][ T5888] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 154.743035][ T21] usb 1-1: USB disconnect, device number 14