last executing test programs: 6.384976031s ago: executing program 4 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x135) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904000002ff0000000705010208"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000fc0)={{0x108, 0x0, 0x80, 0x235, 0x7a, 0x7, 0x17d, 0x7}}, 0x20) 4.709562011s ago: executing program 0 (id=291): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) 4.430101513s ago: executing program 4 (id=292): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x20) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 4.327193865s ago: executing program 0 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x5a}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 4.120205951s ago: executing program 0 (id=295): r0 = memfd_create(&(0x7f0000000580)='\xfd\x0fm3#/\t\x00\x00\x00\x00\x00\x00\x00\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xd7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaS\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hS\x81\x95\x8f\xe1J\xd3#-fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51$\xe7ZeBiu\nL\xb1N\xd5\xea2\x84\xd7\xf7\x9ff\x88\x0f\xc9\nV\x96\xf2I\xee\xa3g\x02czw[\xb7\x16\xa1\xe3\\K\xe6LC\xe3\"\xec\r\xd6\xd6\xb6\xf8Du\x84k\x8e\xe4\xdaO\xb30\xdd\xaf\x96\x18wIzO\bY\xcd\xea\x9b\xef\b\xacD\xf2k\xc6\x91\xc2\x8b\'\b\xb5\x10\xdd\x92\x9c6\xda\n\x9bN\xba\xc1\x86^\x98\xf1I%=lo\x8eY.\x10\x88\xb5\xa2pFh\xbf\xeb\x8c\x92sl\x87XhJ`\xda\xf9\xd7\x81f\xcf\x96%\x97ue.J\x06#\x0f\xa5\x05Y\x13\xbfL\xab\a\xe2\xfa\xe5\xa2s\x04h*s\xbe\x89\x9d\x1f\x98\x1do\x036\x1f\xdc\x85\x90\vW\x8e\xcc\x19\xe2VjJ\x10T\x88%p\x97\xb5\b\xb4}\x16\x8d\x94\xd9\xa9I>\f\xf7\x7f\xd5+\'\xc3l\x93\x97*^Th\xdd\x8fZ\xe2GXm\xe5(\xee\xbfE\xcb\x14\x10h\xc1\x16\xb5\xcf\x91\x9c\'\x8f\xba\x06>', 0x6) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x13, r0, 0x62f3d000) 4.015388234s ago: executing program 4 (id=296): setresgid(0xee00, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) 3.790805654s ago: executing program 4 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0xc080) 3.58022328s ago: executing program 0 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mq_open(0x0, 0x42, 0x14, 0x0) 3.579988141s ago: executing program 4 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) 3.234434377s ago: executing program 1 (id=305): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x22800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000003300)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 3.104092765s ago: executing program 1 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105b7, &(0x7f00000105c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) 3.103917195s ago: executing program 0 (id=309): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.103772245s ago: executing program 4 (id=310): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0x381, 0x0, 0x9, 0x8001, 0xfff}) 2.160245674s ago: executing program 2 (id=316): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) 1.880351955s ago: executing program 1 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 976.660255ms ago: executing program 2 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x146) write(r0, &(0x7f0000000300)='1', 0x1) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x3, 0x5}}, 0x30) 832.184367ms ago: executing program 3 (id=323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002640)="6f5a23ca9253adc27c386a1026d21bd821233caf4182af1eef6ccb1ea03f14ae8f4dac0cec6be952ff9ffa8f2a7685a3fc94b9428c92ae5dec204087cd6d5d613c52d6d5fbe0fe0bbc95cdd6c81d66626af764bb006deda64edd24739f960d615824034374cf5d4a0e1c3ea6532215807f05bb209e0c24e02f05055d3654279020921a0e1246e3905b3f5c071f28185ba3565abc014fa6561925d5744c00d19297183e7b990dbc24a50e5306d64d0e1e47434bb098dd1715e8a69d6ec972f85b7c9e22ecb81c9df69b86e88f3a1eb6295cd32187", 0xd4}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002bc0)="3562dbe57ffe110e218257b0f968530d0d52e222662e25d69ef919d31f7914573dc33990d01f64a3e2f80bf15a7d99c4ac36d1d7be0c8ac2e6a678f8a1e353177cb942b02c99677cfd389a24f68b7e57c12a09eeb3ac3bb8d3c27b80c2f10cf4756df527a69e95990af486bd74e076592e82cb984eee1f6f0cce2c4f01cd136677929f941e77f8ea73f9fe20bca5802a2e4c33319f12fbf12613abc52deb17e90469b24ffcf905f2df23ed", 0xab}], 0x1}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002d40)="4b5f0c572a972b67d868a8b826c237a1ebe0024e78220571378ecda54d4fe9287340005f374b992da13843ce9e0e45639d0181aedb7fad51f183e2c91bdc2a66763894e8675134a9c59d8e385b7f271d50b440edda57b921b11edc256e2cdafb52b64cd4246196ade6e64aba6b03d32e6fd02ad37bd7163a05c77f277173fd937a706efbf470928e26e826e6b6bfd1bb4d1ca06914974e074789c964baf3cbd9d6cad77934b251c0d19ecdbd656d11a18a5d91db913f3eaaf9b1186ac997592c3b583ac33df13f9fac119c98155594a58ec54048719fff3d7f5715e22eda87cb", 0xe0}, {&(0x7f0000002e80)="39b410b8a8386ec66d33c2472e7a64a32f5dd709e713d8d86009011bfad4df627705a55b545a4c65addc2bba1ef017e198f4bb499a16e3a276e682ace12f2526287161b898859ace70c25734902996659508ac4855350da032d127dea3075cd465a656b881a47e9ec7e933ea4010bd37", 0x70}, {&(0x7f0000002f00)="411efa271d61be30533280ca9b9f925ca0c815af4f3cf2c0b0e38a15137cc71903e2d98d0d088904f2e0607432cc84b5a12849d68049d96509c983874ef8fe4180ca4ea81cc36d13300c2e8fbad38534d9a9fd0111e367a69699d01c2f206fbd47e193dbfd3cae91e9fa6005b42bcd92969d4eb3f49eaaa4796d1b6fea8fe0c4316cb9faf0cfc072db20", 0x8a}, {&(0x7f0000002fc0)="ae7f2b05827f15", 0x7}, {&(0x7f0000003000)="be1105c83e34e39a13ca28f6227d7e134940416ba7e99f769260f944bd5ebf4d9f33a2aaa2d00cd6212a4516649978af32c10f1bd5af401d005dd180e7d370a58b86a0bbe02283be07986b442500e7c012faf130d4bbf7be9bcfb926cecf3a1421541de68549dc85a411ff1729db0c361df36bbd32b3dd075508024c97af2cab7ebcbc76381cef319412be0ec1b188191a1374628b0179b6c9ea172278ccac1c", 0xa0}], 0x5}}], 0x3, 0xc080) 787.673647ms ago: executing program 2 (id=324): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000100)=""/177, 0x39) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) 711.566043ms ago: executing program 3 (id=325): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @local}}, 0x8, 0x4, 0x1, 0x8001, 0xac5}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r1, 0x3}, &(0x7f0000000500)=0x8) 527.654174ms ago: executing program 3 (id=326): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 508.192528ms ago: executing program 1 (id=327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x804, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000000)={{}, {r1, r2/1000+10000}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x4}) 430.475556ms ago: executing program 2 (id=328): openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) 368.262779ms ago: executing program 3 (id=329): unshare(0x22020600) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, 0x0) 300.153785ms ago: executing program 2 (id=330): r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 295.438225ms ago: executing program 1 (id=331): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 220.216792ms ago: executing program 3 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027400000000000000c7f14000000110001"], 0xb4}}, 0x8044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000003"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 173.348033ms ago: executing program 2 (id=333): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) 155.118506ms ago: executing program 1 (id=334): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000010480)="703a732f70202e2f66696c65303a300c24fed0849287cddd1218bf84bfffd25dd05a7c036beac8bce2c54fc7c1618e9d8e21fa8d119612ee2c553a", 0x3b) 247.93µs ago: executing program 3 (id=335): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x4}, 0x38) 0s ago: executing program 0 (id=336): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") kernel console output (not intermixed with test programs): 72.760654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.771579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.792993][ T4286] device veth1_vlan entered promiscuous mode [ 72.850323][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.883130][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.904419][ T4286] device veth0_macvtap entered promiscuous mode [ 72.920598][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.936336][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.956085][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.975624][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.996183][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.040127][ T4286] device veth1_macvtap entered promiscuous mode [ 73.049644][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.059671][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.069110][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.081105][ T4276] device veth0_vlan entered promiscuous mode [ 73.094267][ T4272] device veth0_vlan entered promiscuous mode [ 73.117184][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.124778][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.134705][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.148901][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.160030][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.170663][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.180677][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.190192][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.198800][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.213819][ T4276] device veth1_vlan entered promiscuous mode [ 73.232923][ T4272] device veth1_vlan entered promiscuous mode [ 73.248722][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.270921][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.279156][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.289773][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.298777][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.330275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.338866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.348080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.356881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.365812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.373318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.382747][ T4272] device veth0_macvtap entered promiscuous mode [ 73.395736][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.412803][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.427941][ T4272] device veth1_macvtap entered promiscuous mode [ 73.436797][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.448043][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.457657][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.467076][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.498374][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.516294][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.524449][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.532808][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.559541][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.571929][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.583946][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.628989][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.639372][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.654990][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.667650][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.680440][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.691039][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.709599][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.722065][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.735073][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.743367][ T4276] device veth0_macvtap entered promiscuous mode [ 73.761781][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.775923][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.791493][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.801105][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.810776][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.819974][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.828983][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.845035][ T4276] device veth1_macvtap entered promiscuous mode [ 73.873437][ T4278] device veth0_vlan entered promiscuous mode [ 73.896597][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.915250][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.923992][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.933070][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.950650][ T4278] device veth1_vlan entered promiscuous mode [ 73.985634][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.996375][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.007247][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.021680][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.033033][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.064321][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.074028][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.082903][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.091751][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.101406][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.110668][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.119372][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.138057][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.149405][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.159437][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.169897][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.181072][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.205742][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 74.211894][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 74.221468][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.230836][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.240460][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.250395][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.260094][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.269280][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.286559][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 74.287723][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.292597][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 74.309015][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 74.312447][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.330150][ T4273] device veth0_vlan entered promiscuous mode [ 74.346514][ T4273] device veth1_vlan entered promiscuous mode [ 74.373281][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.381530][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.390351][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.399392][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.423878][ T4278] device veth0_macvtap entered promiscuous mode [ 74.437817][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.448146][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.458162][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.467853][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.497541][ T4278] device veth1_macvtap entered promiscuous mode [ 74.523855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.532247][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.542912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.543145][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.560828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.569537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.581703][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.591913][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.619585][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.638046][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.648612][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.661050][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.671221][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.681882][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.694780][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.705598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.714105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.723254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.732896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.741947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.756640][ T4273] device veth0_macvtap entered promiscuous mode [ 74.785068][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.805651][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.816033][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.826537][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.836454][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.848933][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.861459][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.876748][ T4273] device veth1_macvtap entered promiscuous mode [ 74.900971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.911063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.919545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.929597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.946010][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.954757][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.965562][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.974281][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.993567][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.008238][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.031861][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.047700][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.066737][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.112093][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.137480][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.155046][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.173571][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.184487][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.201250][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.211983][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.229148][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.242325][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.261385][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.294212][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.308753][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.322927][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.344973][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.364429][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.376045][ T4322] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.376160][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.394513][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.410281][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.420993][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.433951][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.449103][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.479537][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.491497][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.504678][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.514464][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.524069][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.532898][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.569990][ T4322] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.571196][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.583747][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.594228][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.608493][ T4322] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.618804][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.626947][ T4322] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.654313][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.655866][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.672494][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.681614][ T4354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.738076][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.759324][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.801352][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.854620][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.856671][ T4363] cgroup: fork rejected by pids controller in [ 75.868863][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.906153][ T4363] /syz0 [ 75.924528][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.941707][ T4322] usb 4-1: USB disconnect, device number 2 [ 75.992490][ T4368] udevd[4368]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.020788][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.073282][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.109692][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.195788][ T4316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.285274][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 76.286030][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 76.365716][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 76.372246][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 76.416041][ T3599] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.426405][ T4316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.437836][ T4316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.450432][ T4316] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.461566][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.469697][ T4316] usb 2-1: SerialNumber: syz [ 76.638009][ T3599] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.649479][ T3599] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.659481][ T3599] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.675401][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.697861][ T4316] usb 2-1: 0:2 : does not exist [ 76.718624][ T4372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.775743][ T4316] usb 2-1: USB disconnect, device number 2 [ 76.971592][ T127] usb 3-1: USB disconnect, device number 2 [ 77.044339][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.089593][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.137566][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.260539][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.409114][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.822516][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.832086][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.842877][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.859129][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.868922][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.876420][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.900739][ T4409] loop1: detected capacity change from 0 to 256 [ 77.976095][ T4409] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 78.273167][ T4424] netlink: 83 bytes leftover after parsing attributes in process `syz.1.21'. [ 78.436116][ T4406] chnl_net:caif_netlink_parms(): no params data found [ 78.710781][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.742011][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.763901][ T4406] device bridge_slave_0 entered promiscuous mode [ 78.888289][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.973636][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.001094][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.026500][ T4406] device bridge_slave_1 entered promiscuous mode [ 79.092297][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 79.102270][ T14] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.123898][ T4406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.147869][ T14] usb 2-1: config 0 has no interface number 0 [ 79.169694][ T14] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.188837][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.205288][ T14] usb 2-1: Product: syz [ 79.215610][ T14] usb 2-1: Manufacturer: syz [ 79.225544][ T14] usb 2-1: SerialNumber: syz [ 79.247296][ T14] usb 2-1: config 0 descriptor?? [ 79.269916][ T4456] loop2: detected capacity change from 0 to 4096 [ 79.277965][ T14] smsc95xx v2.0.0 [ 79.313338][ T4456] ======================================================= [ 79.313338][ T4456] WARNING: The mand mount option has been deprecated and [ 79.313338][ T4456] and is ignored by this kernel. Remove the mand [ 79.313338][ T4456] option from the mount to silence this warning. [ 79.313338][ T4456] ======================================================= [ 79.351865][ T4406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.434226][ T52] device hsr_slave_0 left promiscuous mode [ 79.445482][ T52] device hsr_slave_1 left promiscuous mode [ 79.452313][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.490693][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.532196][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.555281][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.578742][ T52] device bridge_slave_1 left promiscuous mode [ 79.615576][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.661916][ T52] device bridge_slave_0 left promiscuous mode [ 79.682622][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.761256][ T52] device veth1_macvtap left promiscuous mode [ 79.779900][ T4466] loop3: detected capacity change from 0 to 2048 [ 79.787360][ T52] device veth0_macvtap left promiscuous mode [ 79.793653][ T52] device veth1_vlan left promiscuous mode [ 79.816046][ T52] device veth0_vlan left promiscuous mode [ 79.923729][ T4466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.960770][ T4466] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #12: comm syz.3.36: corrupted in-inode xattr [ 79.983781][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 80.043342][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 80.050237][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.258281][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 80.276685][ T4318] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 80.285041][ T4318] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 80.298294][ T4318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.308570][ T4318] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 80.317593][ T14] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 80.320624][ T4318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 80.346770][ T4318] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.352859][ T14] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.360359][ T4318] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.376863][ T14] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 80.378722][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.403893][ T14] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 80.428408][ T14] usb 2-1: USB disconnect, device number 3 [ 80.441475][ T3599] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.623236][ T4318] usb 5-1: GET_CAPABILITIES returned 0 [ 80.629345][ T4318] usbtmc 5-1:16.0: can't read capabilities [ 80.643697][ T3599] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.653183][ T3599] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 80.663552][ T3599] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.673757][ T3599] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 80.691579][ T3599] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 80.705259][ T3599] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.714364][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.729588][ T3599] usb 4-1: Product: syz [ 80.733813][ T3599] usb 4-1: Manufacturer: syz [ 80.739797][ T52] team0 (unregistering): Port device team_slave_1 removed [ 80.744731][ T3599] cdc_wdm 4-1:1.0: skipping garbage [ 80.752398][ T3599] cdc_wdm 4-1:1.0: skipping garbage [ 80.772957][ T3599] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 80.779048][ T3599] cdc_wdm 4-1:1.0: Unknown control protocol [ 80.805633][ T52] team0 (unregistering): Port device team_slave_0 removed [ 80.863395][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.921677][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.946643][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.965297][ T4468] usbtmc 5-1:16.0: Unable to send data, error -71 [ 80.984489][ T14] usb 5-1: USB disconnect, device number 2 [ 81.205017][ T52] bond0 (unregistering): Released all slaves [ 81.236837][ T3599] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.314740][ T4406] team0: Port device team_slave_0 added [ 81.344331][ T4406] team0: Port device team_slave_1 added [ 81.404652][ T4406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.419424][ T4406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.456546][ T4406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.472827][ T3599] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 81.486864][ T4406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.493948][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.505400][ T4406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.536358][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.553762][ T3599] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.574233][ T4406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.599599][ T3599] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 81.619205][ T3599] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 81.636462][ T3599] usb 2-1: Manufacturer: syz [ 81.650612][ T3599] usb 2-1: config 0 descriptor?? [ 81.679356][ T4406] device hsr_slave_0 entered promiscuous mode [ 81.697779][ T4406] device hsr_slave_1 entered promiscuous mode [ 81.714252][ T4406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.726184][ T4406] Cannot create hsr debugfs directory [ 82.055385][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 82.076845][ T3599] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 82.088116][ T3599] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 82.106259][ T3599] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 82.396369][ T4381] usb 2-1: USB disconnect, device number 4 [ 82.797964][ T4503] loop4: detected capacity change from 0 to 512 [ 82.864147][ T4503] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.43: bg 0: block 5: invalid block bitmap [ 82.881416][ T4406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.893216][ T4406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.905331][ T4406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.917593][ T4503] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 82.932494][ T4406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.956822][ T4503] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.43: invalid indirect mapped block 3 (level 2) [ 83.011353][ T4503] EXT4-fs (loop4): 1 orphan inode deleted [ 83.025070][ T4503] EXT4-fs (loop4): 1 truncate cleaned up [ 83.040593][ T4503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.070234][ T26] audit: type=1800 audit(1790970004.055:2): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.43" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 83.173710][ T4406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.184971][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 83.250410][ T3599] usb 4-1: USB disconnect, device number 3 [ 83.269120][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.318064][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.347907][ T4518] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.350343][ T4406] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.405763][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.424875][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.467429][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.474611][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.508445][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.548005][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.577014][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.604513][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.611718][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.669014][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.688335][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.727254][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.760275][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.786597][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.825920][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.842529][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.880287][ T4406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.913683][ T4406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.955274][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.981173][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.012546][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.040429][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.074940][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.129138][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 84.168343][ T4531] cgroup: fork rejected by pids controller in /syz4 [ 84.362666][ T4529] loop3: detected capacity change from 0 to 32768 [ 84.575328][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.761460][ T4549] loop3: detected capacity change from 0 to 256 [ 84.781023][ T4316] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.801120][ T4316] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.825556][ T4549] exfat: Deprecated parameter 'utf8' [ 84.830929][ T4549] exfat: Deprecated parameter 'namecase' [ 84.846977][ T4316] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.863225][ T4549] exfat: Deprecated parameter 'namecase' [ 84.870120][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.881069][ T4549] exfat: Deprecated parameter 'utf8' [ 84.906385][ T4539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.934067][ T4549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 85.133773][ T4406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.161492][ T3599] usb 2-1: USB disconnect, device number 5 [ 85.180705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.195057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.319068][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.344235][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.501091][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.540346][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.596576][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.614825][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.634832][ T4406] device veth0_vlan entered promiscuous mode [ 85.686780][ T4406] device veth1_vlan entered promiscuous mode [ 85.826561][ T76] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.873599][ T4570] loop2: detected capacity change from 0 to 1024 [ 85.885849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.931200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.934964][ T4570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.970994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.006043][ T4570] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.008773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.075002][ T4406] device veth0_macvtap entered promiscuous mode [ 86.092262][ T4572] loop3: detected capacity change from 0 to 4096 [ 86.097259][ T4570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.144854][ T76] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.167070][ T26] audit: type=1800 audit(1790970007.155:3): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.68" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 86.203271][ T4406] device veth1_macvtap entered promiscuous mode [ 86.210042][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 86.232793][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.252980][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.271525][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 86.335359][ T4317] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.346881][ T76] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.409904][ T4406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.432656][ T4580] loop2: detected capacity change from 0 to 64 [ 86.462080][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.472417][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.480652][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.494127][ T4406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.514862][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.525565][ T4406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.536358][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.544953][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.574869][ T4406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.592610][ T4317] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.601535][ T4317] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 86.612454][ T4317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.616760][ T4406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.621888][ T4317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 86.643703][ T4317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 86.657631][ T4317] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.667301][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.675504][ T4317] usb 2-1: Product: syz [ 86.679815][ T4317] usb 2-1: Manufacturer: syz [ 86.690274][ T955] cfg80211: failed to load regulatory.db [ 86.698983][ T4406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.713301][ T4317] cdc_wdm 2-1:1.0: skipping garbage [ 86.719117][ T4317] cdc_wdm 2-1:1.0: skipping garbage [ 86.725308][ T4406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.740443][ T4317] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 86.747980][ T4317] cdc_wdm 2-1:1.0: Unknown control protocol [ 86.749827][ T4406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.769901][ T4406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.841050][ T76] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.903595][ T4406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.945259][ T4406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.979754][ T4406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.004701][ T4406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.015062][ T4406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.025850][ T4406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.045218][ T4406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.064414][ T4406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.083294][ T4406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.091810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.102423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.117952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.131573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.169876][ T4406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.195219][ T4406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.203971][ T4406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.243283][ T4406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.428350][ T4318] usb 2-1: USB disconnect, device number 6 [ 87.541979][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.568522][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.596621][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.732557][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.742962][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.761392][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.936862][ T4578] chnl_net:caif_netlink_parms(): no params data found [ 88.434741][ T4619] cgroup: fork rejected by pids controller in /syz2 [ 88.464561][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.506874][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.517116][ T4578] device bridge_slave_0 entered promiscuous mode [ 88.527077][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.534386][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.542816][ T4578] device bridge_slave_1 entered promiscuous mode [ 88.600919][ T4634] loop3: detected capacity change from 0 to 512 [ 88.609050][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 88.646875][ T4634] EXT4-fs: Ignoring removed nobh option [ 88.701503][ T4634] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.756931][ T4634] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.861481][ T4634] EXT4-fs (loop3): 1 truncate cleaned up [ 88.875363][ T4634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.938767][ T4634] fscrypt (loop3, inode 18): Can't use IV_INO_LBLK_32 policy on filesystem 'loop3' because it doesn't have stable inode numbers [ 88.960058][ T4578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.037359][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 89.153478][ T4578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.288427][ T4578] team0: Port device team_slave_0 added [ 89.520391][ T4578] team0: Port device team_slave_1 added [ 89.571353][ T4578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.595273][ T4578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.653874][ T4578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.699400][ T4578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.742772][ T4578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.744982][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 89.789032][ T4578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.051733][ T4665] batman_adv: batadv0: Adding interface: wlan1 [ 90.063345][ T4665] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.115504][ T4665] batman_adv: batadv0: Interface activated: wlan1 [ 90.158176][ T76] device hsr_slave_0 left promiscuous mode [ 90.175551][ T76] device hsr_slave_1 left promiscuous mode [ 90.202302][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.222153][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.263324][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.285705][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.288602][ T4318] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.301652][ T76] device bridge_slave_1 left promiscuous mode [ 90.325319][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.334354][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.348982][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.357179][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.365283][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.372930][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.380390][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.380775][ T76] device bridge_slave_0 left promiscuous mode [ 90.430783][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.477538][ T76] device veth1_macvtap left promiscuous mode [ 90.483631][ T76] device veth0_macvtap left promiscuous mode [ 90.489830][ T76] device veth1_vlan left promiscuous mode [ 90.496009][ T76] device veth0_vlan left promiscuous mode [ 90.526169][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 90.533651][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.565542][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.590680][ T4318] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 90.627896][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.668803][ T4318] usb 4-1: config 0 descriptor?? [ 90.708210][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 91.053831][ T4669] loop0: detected capacity change from 0 to 32768 [ 91.128972][ T4669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.76 (4669) [ 91.148583][ T4318] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 91.368915][ T4318] usb 4-1: USB disconnect, device number 4 [ 91.485553][ T4682] loop1: detected capacity change from 0 to 131072 [ 91.511827][ T4682] F2FS-fs (loop1): invalid crc value [ 91.533099][ T4682] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.572608][ T4669] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.591442][ T4682] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 91.595956][ T4684] fido_id[4684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 91.625612][ T4682] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 91.656250][ T4669] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 91.685378][ T4669] BTRFS info (device loop0): setting nodatasum [ 91.691737][ T4669] BTRFS info (device loop0): enabling auto defrag [ 91.718261][ T4669] BTRFS info (device loop0): disabling tree log [ 91.724572][ T4669] BTRFS info (device loop0): using free space tree [ 91.981767][ T4669] BTRFS info (device loop0): enabling ssd optimizations [ 91.993597][ T4710] loop3: detected capacity change from 0 to 16 [ 92.043791][ T4710] erofs: (device loop3): mounted with root inode @ nid 36. [ 92.387217][ T4406] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.445299][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 92.765558][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 92.788589][ T76] team0 (unregistering): Port device team_slave_1 removed [ 92.838187][ T76] team0 (unregistering): Port device team_slave_0 removed [ 92.942744][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.954029][ T4712] loop3: detected capacity change from 0 to 40427 [ 92.970120][ T4712] F2FS-fs (loop3): invalid crc value [ 93.007125][ T4712] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.060585][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.103723][ T4712] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 93.162757][ T4712] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 93.305871][ T4286] syz-executor: attempt to access beyond end of device [ 93.305871][ T4286] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.511364][ T76] bond0 (unregistering): Released all slaves [ 93.595413][ T4713] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.721998][ T4578] device hsr_slave_0 entered promiscuous mode [ 93.741172][ T4578] device hsr_slave_1 entered promiscuous mode [ 93.749137][ T4578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.762851][ T4578] Cannot create hsr debugfs directory [ 93.798739][ T4713] usb 1-1: Using ep0 maxpacket: 8 [ 93.823669][ T4713] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 93.836848][ T4713] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.847289][ T4713] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.857493][ T4713] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.889314][ T4713] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.916619][ T4713] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.935247][ T4713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.161706][ T4713] usb 1-1: usb_control_msg returned -32 [ 94.177725][ T4713] usbtmc 1-1:16.0: can't read capabilities [ 94.244210][ T4713] usb 1-1: USB disconnect, device number 2 [ 94.441031][ T4675] chnl_net:caif_netlink_parms(): no params data found [ 94.525461][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 94.667619][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.771224][ T4276] cgroup: fork rejected by pids controller in /syz1 [ 94.830043][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.845389][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 94.872459][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.880179][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.894097][ T4675] device bridge_slave_0 entered promiscuous mode [ 94.941200][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.968736][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.976709][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.985082][ T4675] device bridge_slave_1 entered promiscuous mode [ 95.064093][ T4675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.118500][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.172666][ T4675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.297091][ T4578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.348224][ T4675] team0: Port device team_slave_0 added [ 95.354739][ T4578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.381097][ T4578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.425360][ T4675] team0: Port device team_slave_1 added [ 95.468806][ T4578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.497596][ T4675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.504573][ T4675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.572000][ T4675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.623380][ T4675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.640039][ T4675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.715247][ T4675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.022763][ T4675] device hsr_slave_0 entered promiscuous mode [ 96.036570][ T4675] device hsr_slave_1 entered promiscuous mode [ 96.063338][ T4675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.115387][ T4675] Cannot create hsr debugfs directory [ 96.202277][ T4578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.351869][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.362103][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.371253][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.379755][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.389680][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.400620][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.408365][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.413524][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.483101][ T4578] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.545069][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.553856][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.562794][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.570010][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.577699][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.605329][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 96.611469][ T4713] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.648634][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.658511][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.667996][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.675196][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.720310][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.797701][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.811913][ T4713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.841104][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 96.854594][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.868852][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.873182][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 96.913584][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 96.923719][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 96.941288][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 96.966463][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 96.976405][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 96.986460][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 97.000005][ T4713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.011495][ T4713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.027854][ T4713] usb 4-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 97.084001][ T4713] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 97.121082][ T4713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.134435][ T4713] usb 4-1: Product: syz [ 97.144981][ T4713] usb 4-1: Manufacturer: syz [ 97.150057][ T4713] usb 4-1: SerialNumber: syz [ 97.171680][ T4783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.188207][ T4783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.189403][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.201164][ T4783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.212441][ T4783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.258624][ T4783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.272484][ T4783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.298918][ T4783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.314098][ T4783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.338962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.348892][ T4713] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 97.364213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.373729][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 97.403364][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 97.429901][ T4713] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 97.449788][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 97.467199][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 97.474855][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 97.506432][ T4713] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 97.589384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.601151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.609701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.619336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.631396][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.698478][ T4780] chnl_net:caif_netlink_parms(): no params data found [ 97.853407][ T7] usb 4-1: USB disconnect, device number 5 [ 97.879175][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 97.950908][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 97.971426][ T7] keyspan 4-1:1.0: device disconnected [ 98.109588][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.117681][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.126378][ T4780] device bridge_slave_0 entered promiscuous mode [ 98.137840][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.145035][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.155207][ T4780] device bridge_slave_1 entered promiscuous mode [ 98.196474][ T76] device hsr_slave_0 left promiscuous mode [ 98.208058][ T76] device hsr_slave_1 left promiscuous mode [ 98.225043][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.253108][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.268600][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.280058][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.291917][ T76] device bridge_slave_1 left promiscuous mode [ 98.302420][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.320747][ T76] device bridge_slave_0 left promiscuous mode [ 98.330242][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.373293][ T76] device veth1_macvtap left promiscuous mode [ 98.383658][ T76] device veth0_macvtap left promiscuous mode [ 98.393958][ T76] device veth1_vlan left promiscuous mode [ 98.404028][ T76] device veth0_vlan left promiscuous mode [ 98.460119][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 98.685555][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 98.918853][ T76] team0 (unregistering): Port device team_slave_1 removed [ 98.954815][ T76] team0 (unregistering): Port device team_slave_0 removed [ 98.988387][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.032352][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.269898][ T76] bond0 (unregistering): Released all slaves [ 99.375895][ T4780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.391766][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.400074][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.407908][ T4675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.422121][ T4675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.432151][ T4578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.441711][ T4780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.470321][ T4675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.489268][ T4675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.532503][ T4780] team0: Port device team_slave_0 added [ 99.576690][ T4780] team0: Port device team_slave_1 added [ 99.648263][ T4780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.663094][ T4780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.698661][ T4780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.734586][ T4675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.742949][ T4780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.757274][ T4780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.785903][ T4780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.826702][ T4780] device hsr_slave_0 entered promiscuous mode [ 99.841952][ T4780] device hsr_slave_1 entered promiscuous mode [ 99.849275][ T4780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.863211][ T4780] Cannot create hsr debugfs directory [ 99.874761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.890654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.916634][ T4675] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.946021][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.956163][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.964700][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.971934][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.980871][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.989635][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.998280][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.005427][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.013114][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.028895][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.037188][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.047016][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.058408][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.088007][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.096551][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.105447][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.132163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.143630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.163587][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.173528][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.189462][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.198582][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.208088][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.216754][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.225079][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.233544][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.261176][ T4578] device veth0_vlan entered promiscuous mode [ 100.270876][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.326670][ T4578] device veth1_vlan entered promiscuous mode [ 100.391888][ T4780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.440350][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.449373][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.458472][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.469272][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.493530][ T4780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.510937][ T4578] device veth0_macvtap entered promiscuous mode [ 100.531362][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 100.541176][ T4578] device veth1_macvtap entered promiscuous mode [ 100.591562][ T4780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.621537][ T4578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.638682][ T4578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.649703][ T4578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.660361][ T4578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.670358][ T4578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.681172][ T4578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.694374][ T4578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.737724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.746970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.755945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.778697][ T4780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.810748][ T4578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.821360][ T4578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.831582][ T4578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.842129][ T4578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.852482][ T4578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.862989][ T4578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.874496][ T4578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.886190][ T4578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.900083][ T4578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.909101][ T4578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.918292][ T4578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.934258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.945333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.954944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.965950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.056561][ T4675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.086257][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.095493][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.108767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.118439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.127254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.163740][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.173002][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.187487][ T4578] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 101.198465][ T4578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.218864][ T4675] device veth0_vlan entered promiscuous mode [ 101.226076][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.234417][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.269670][ T4675] device veth1_vlan entered promiscuous mode [ 101.276218][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.284148][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.323635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.336246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.344427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.359333][ T4675] device veth0_macvtap entered promiscuous mode [ 101.373115][ T4780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.383626][ T4780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.396061][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.404877][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.416739][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.447551][ T4780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.458988][ T4780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.473960][ T4675] device veth1_macvtap entered promiscuous mode [ 101.519024][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.529800][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.541068][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.552434][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.562709][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.573440][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.583392][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.594044][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.607092][ T4675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.640412][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.649800][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.661874][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.673044][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.682953][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.694362][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.704515][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.715779][ T4713] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.723842][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.734450][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.745740][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.757004][ T4675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.774990][ T4675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.783901][ T4675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.793056][ T4675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.802470][ T4675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.818204][ T76] batman_adv: batadv0: Interface deactivated: wlan1 [ 101.853524][ T76] batman_adv: batadv0: Removing interface: wlan1 [ 101.862356][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.871412][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.925391][ T4713] usb 5-1: Using ep0 maxpacket: 8 [ 101.928501][ T4780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.933357][ T4713] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.947730][ T4713] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.958015][ T4713] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.968276][ T4713] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.984126][ T4713] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.993476][ T4713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.087353][ T76] device hsr_slave_0 left promiscuous mode [ 102.093711][ T76] device hsr_slave_1 left promiscuous mode [ 102.100997][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.113881][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.123131][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.131142][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.139214][ T76] device bridge_slave_1 left promiscuous mode [ 102.145756][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.155088][ T76] device bridge_slave_0 left promiscuous mode [ 102.161787][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.185509][ T76] device veth1_macvtap left promiscuous mode [ 102.191749][ T76] device veth0_macvtap left promiscuous mode [ 102.198408][ T76] device veth1_vlan left promiscuous mode [ 102.204326][ T76] device veth0_vlan left promiscuous mode [ 102.222637][ T4713] usb 5-1: GET_CAPABILITIES returned 0 [ 102.230854][ T4713] usbtmc 5-1:16.0: can't read capabilities [ 102.454110][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.482086][ T127] usb 5-1: USB disconnect, device number 3 [ 102.608243][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 102.703581][ T76] team0 (unregistering): Port device team_slave_1 removed [ 102.742053][ T76] team0 (unregistering): Port device team_slave_0 removed [ 102.776199][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.814263][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.138179][ T76] bond0 (unregistering): Released all slaves [ 103.277390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.289605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.334450][ T4780] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.342068][ T4847] FAULT_INJECTION: forcing a failure. [ 103.342068][ T4847] name failslab, interval 1, probability 0, space 0, times 1 [ 103.388323][ T4847] CPU: 0 PID: 4847 Comm: syz.3.99 Not tainted syzkaller #0 [ 103.395634][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.395669][ T4847] Call Trace: [ 103.395676][ T4847] [ 103.395684][ T4847] dump_stack_lvl+0x188/0x24e [ 103.395718][ T4847] ? show_regs_print_info+0x12/0x12 [ 103.395735][ T4847] ? load_image+0x410/0x410 [ 103.395767][ T4847] ? __might_sleep+0xd0/0xd0 [ 103.395784][ T4847] ? __lock_acquire+0x7c40/0x7c40 [ 103.395813][ T4847] should_fail_ex+0x390/0x4c0 [ 103.395840][ T4847] should_failslab+0x5/0x20 [ 103.395856][ T4847] slab_pre_alloc_hook+0x59/0x300 [ 103.395874][ T4847] ? __lock_acquire+0x138a/0x7c40 [ 103.395897][ T4847] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 103.395920][ T4847] __kmem_cache_alloc_node+0x4f/0x270 [ 103.395943][ T4847] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 103.395963][ T4847] __kmalloc+0xa3/0x240 [ 103.395989][ T4847] tomoyo_realpath_from_path+0xe2/0x5c0 [ 103.396012][ T4847] ? tomoyo_domain+0xd2/0x120 [ 103.396034][ T4847] ? tomoyo_path_number_perm+0x205/0x650 [ 103.493125][ T4847] tomoyo_path_number_perm+0x22f/0x650 [ 103.498626][ T4847] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.504291][ T4847] ? __fget_files+0x28/0x460 [ 103.508892][ T4847] security_file_ioctl+0x6c/0xa0 [ 103.513827][ T4847] __se_sys_ioctl+0x48/0x170 [ 103.518419][ T4847] do_syscall_64+0x4c/0xa0 [ 103.522829][ T4847] ? clear_bhb_loop+0x60/0xb0 [ 103.527497][ T4847] ? clear_bhb_loop+0x60/0xb0 [ 103.532171][ T4847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.538064][ T4847] RIP: 0033:0x7ff45e39e159 [ 103.542500][ T4847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.562215][ T4847] RSP: 002b:00007ff45f221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.570635][ T4847] RAX: ffffffffffffffda RBX: 00007ff45e625fa0 RCX: 00007ff45e39e159 [ 103.578643][ T4847] RDX: 0000000000000000 RSI: 00000000c0184800 RDI: 0000000000000003 [ 103.586783][ T4847] RBP: 00007ff45e43506b R08: 0000000000000000 R09: 0000000000000000 [ 103.594746][ T4847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.602707][ T4847] R13: 00007ff45e626038 R14: 00007ff45e625fa0 R15: 00007fffb4f15968 [ 103.610776][ T4847] [ 103.628958][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.636941][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.644520][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.661125][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.682240][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.692990][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.713780][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.740325][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.747495][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.760816][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.771598][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.780556][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.787711][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.796019][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.806384][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.814373][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.823228][ T4847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.831111][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.847363][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.863793][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.919211][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.946183][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.984328][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.022259][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.056324][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.085905][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.115803][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.147783][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.686358][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 104.767385][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.774909][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.789476][ T4876] loop2: detected capacity change from 0 to 1764 [ 104.813420][ T4780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.872348][ T4369] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.936473][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.955542][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.998569][ T4780] device veth0_vlan entered promiscuous mode [ 105.026350][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.040389][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.063010][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.071671][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.139396][ T4780] device veth1_vlan entered promiscuous mode [ 105.262007][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.286052][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.335026][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.347539][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.378306][ T4780] device veth0_macvtap entered promiscuous mode [ 105.389718][ T4864] loop0: detected capacity change from 0 to 40427 [ 105.427780][ T4780] device veth1_macvtap entered promiscuous mode [ 105.440623][ T4864] F2FS-fs (loop0): invalid crc value [ 105.507446][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.537899][ T4864] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.548653][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.575525][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.619872][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.654881][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.684402][ T4864] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 105.695312][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.735484][ T4864] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.754176][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.761010][ T26] audit: type=1800 audit(1790970026.735:4): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.103" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 105.783784][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.867459][ T4780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.899249][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.915112][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.926718][ T4406] syz-executor: attempt to access beyond end of device [ 105.926718][ T4406] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.946692][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.975346][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.986115][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.014948][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.035199][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.053429][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.071936][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.077146][ T4713] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.083414][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.102750][ T4780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.118691][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.133479][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.153245][ T4780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.181826][ T4780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.203145][ T4780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.222505][ T4780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.262598][ T4901] loop4: detected capacity change from 0 to 128 [ 106.288608][ T4713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.317886][ T4713] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 106.349683][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.371083][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.392201][ T4713] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 106.414867][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.423217][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 106.433324][ T4901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.444151][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 106.452527][ T4901] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.466135][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 106.473997][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 106.482534][ T4713] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 106.491873][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 106.499816][ T4713] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 106.508788][ T4713] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 106.518437][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.614905][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.626825][ T4578] EXT4-fs (loop4): unmounting filesystem. [ 106.628966][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.657425][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.848700][ T4713] usb 4-1: USB disconnect, device number 6 [ 106.878059][ T4713] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 106.899881][ T4713] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 106.917427][ T4713] keyspan 4-1:1.0: device disconnected [ 106.947815][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.135331][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 107.145680][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.176308][ T7] usb 1-1: config 0 has no interface number 0 [ 107.182453][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.234217][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.250151][ T7] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 107.267986][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.276420][ T4922] loop4: detected capacity change from 0 to 256 [ 107.308562][ T7] usb 1-1: config 0 descriptor?? [ 107.321549][ T4922] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 107.438011][ T26] audit: type=1800 audit(1790970028.425:5): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.121" name="file1" dev="loop4" ino=1048612 res=0 errno=0 [ 107.581198][ T4930] loop3: detected capacity change from 0 to 512 [ 107.619722][ T4930] EXT4-fs: Ignoring removed nobh option [ 107.641365][ T4930] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.723757][ T4930] EXT4-fs (loop3): 1 truncate cleaned up [ 107.735520][ T4930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.749677][ T26] audit: type=1800 audit(1790970028.735:6): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.124" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 107.752404][ T4930] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.775946][ T7] hid (null): nested delimiters [ 107.835420][ T7] hid (null): report_id 24797 is invalid [ 107.917458][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 107.993743][ T127] usb 1-1: USB disconnect, device number 3 [ 108.595876][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 108.703143][ T4945] team0: Port device team_slave_1 removed [ 108.769368][ T4944] device netdevsim0 entered promiscuous mode [ 108.788363][ T4944] device netdevsim0 left promiscuous mode [ 109.553190][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 109.584515][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 109.640374][ T4962] syz.4.139 uses obsolete (PF_INET,SOCK_PACKET) [ 110.175232][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.366116][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 110.373229][ T7] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 110.391380][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.421194][ T4973] loop1: detected capacity change from 0 to 40427 [ 110.427892][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.452458][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.463835][ T4973] F2FS-fs (loop1): invalid crc value [ 110.478857][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.506758][ T4973] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 110.525251][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.554739][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.657675][ T4973] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 110.688732][ T4973] F2FS-fs (loop1): Start checkpoint disabled! [ 110.745944][ T4973] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 110.773614][ T4996] loop3: detected capacity change from 0 to 1024 [ 110.808271][ T7] usb 5-1: usb_control_msg returned -32 [ 110.820163][ T7] usbtmc 5-1:16.0: can't read capabilities [ 110.942480][ T76] kworker/u4:4: attempt to access beyond end of device [ 110.942480][ T76] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.178925][ T4997] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 111.272949][ T4999] netlink: 104 bytes leftover after parsing attributes in process `syz.3.150'. [ 111.380042][ T7] usb 5-1: USB disconnect, device number 4 [ 111.443231][ T5003] loop3: detected capacity change from 0 to 256 [ 111.813857][ T5017] loop1: detected capacity change from 0 to 512 [ 111.839687][ T5017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.905202][ T4714] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.969540][ T5017] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.019564][ T5017] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.105387][ T4714] usb 3-1: Using ep0 maxpacket: 16 [ 112.112505][ T5017] EXT4-fs error (device loop1): ext4_get_first_dir_block:3593: inode #12: block 32: comm syz.1.158: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 112.135100][ T4714] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 112.154537][ T4714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.174025][ T4714] usb 3-1: Product: syz [ 112.178629][ T4714] usb 3-1: Manufacturer: syz [ 112.183347][ T4714] usb 3-1: SerialNumber: syz [ 112.188328][ T5017] EXT4-fs (loop1): Remounting filesystem read-only [ 112.195036][ T5017] EXT4-fs error (device loop1): ext4_get_first_dir_block:3596: inode #12: comm syz.1.158: directory missing '.' [ 112.229413][ T4714] usb 3-1: config 0 descriptor?? [ 112.239110][ T5017] EXT4-fs (loop1): Remounting filesystem read-only [ 112.292662][ T5033] loop3: detected capacity change from 0 to 8 [ 112.334688][ T4780] EXT4-fs (loop1): unmounting filesystem. [ 112.390983][ T5033] SQUASHFS error: Unable to read inode 0x11f [ 112.454451][ T5033] loop3: detected capacity change from 0 to 512 [ 112.477418][ T5033] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.521226][ T5033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 112.542738][ T5033] System zones: 1-12 [ 112.577629][ T5033] EXT4-fs (loop3): 1 truncate cleaned up [ 112.598971][ T5033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.616030][ T5038] gadgetfs: bound to dummy_udc driver [ 112.652487][ T4714] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 112.663851][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 112.695481][ T4714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.726624][ T4714] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 112.756088][ T4714] usb 3-1: media controller created [ 112.763981][ T5041] FAULT_INJECTION: forcing a failure. [ 112.763981][ T5041] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.784483][ T5041] CPU: 0 PID: 5041 Comm: syz.3.166 Not tainted syzkaller #0 [ 112.791813][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.801303][ T4714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.801874][ T5041] Call Trace: [ 112.801882][ T5041] [ 112.801891][ T5041] dump_stack_lvl+0x188/0x24e [ 112.821248][ T5041] ? show_regs_print_info+0x12/0x12 [ 112.826511][ T5041] ? load_image+0x410/0x410 [ 112.831064][ T5041] ? __lock_acquire+0x7c40/0x7c40 [ 112.836126][ T5041] should_fail_ex+0x390/0x4c0 [ 112.840828][ T5041] _copy_from_iter+0x1c0/0x1130 [ 112.845781][ T5041] ? rcu_is_watching+0x11/0xa0 [ 112.850636][ T5041] ? __alloc_pages+0x290/0x4f0 [ 112.855488][ T5041] ? copyout_mc+0x110/0x110 [ 112.860013][ T5041] ? page_copy_sane+0x4e/0x390 [ 112.864802][ T5041] copy_page_from_iter+0x77/0x100 [ 112.870015][ T5041] tun_get_user+0x1b2d/0x3be0 [ 112.874697][ T5041] ? tun_get_user+0x66f/0x3be0 [ 112.879476][ T5041] ? rcu_read_unlock+0xa0/0xa0 [ 112.884302][ T5041] ? tun_get+0x1c/0x2e0 [ 112.888591][ T5041] ? __lock_acquire+0x7c40/0x7c40 [ 112.893620][ T5041] ? tun_get+0x1c/0x2e0 [ 112.897787][ T5041] tun_chr_write_iter+0x112/0x1f0 [ 112.902813][ T5041] vfs_write+0x482/0x9a0 [ 112.907151][ T5041] ? file_end_write+0x250/0x250 [ 112.912006][ T5041] ? __fget_files+0x3fc/0x460 [ 112.916801][ T5041] ? __fdget_pos+0x1d4/0x360 [ 112.921406][ T5041] ? ksys_write+0x70/0x260 [ 112.925825][ T5041] ksys_write+0x14d/0x260 [ 112.930247][ T5041] ? __ia32_sys_read+0x80/0x80 [ 112.935013][ T5041] ? lockdep_hardirqs_on+0x94/0x140 [ 112.940208][ T5041] do_syscall_64+0x4c/0xa0 [ 112.944616][ T5041] ? clear_bhb_loop+0x60/0xb0 [ 112.949288][ T5041] ? clear_bhb_loop+0x60/0xb0 [ 112.953962][ T5041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.960128][ T5041] RIP: 0033:0x7ff45e35e98e [ 112.964540][ T5041] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.984232][ T5041] RSP: 002b:00007ff45f220fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.992639][ T5041] RAX: ffffffffffffffda RBX: 00007ff45f2216c0 RCX: 00007ff45e35e98e [ 113.000627][ T5041] RDX: 000000000000004a RSI: 0000200000000700 RDI: 00000000000000c8 [ 113.008587][ T5041] RBP: 00007ff45e43506b R08: 0000000000000000 R09: 0000000000000000 [ 113.016636][ T5041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.024598][ T5041] R13: 00007ff45e626038 R14: 00007ff45e625fa0 R15: 00007fffb4f15968 [ 113.032572][ T5041] [ 113.125235][ T4714] zl10353_read_register: readreg error (reg=127, ret==0) [ 113.165250][ T4714] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 113.183106][ T4714] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 113.260403][ T4714] usb 3-1: USB disconnect, device number 3 [ 113.371719][ T4714] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 113.646810][ T5062] loop1: detected capacity change from 0 to 8 [ 113.975364][ T4317] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.045294][ T4361] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.166684][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.182226][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.197415][ T4317] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.230104][ T4317] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.250220][ T4361] usb 4-1: Using ep0 maxpacket: 32 [ 114.256406][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.268132][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.287300][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.302217][ T4317] usb 3-1: config 0 descriptor?? [ 114.312178][ T4361] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 114.332959][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.360437][ T4361] usb 4-1: config 0 descriptor?? [ 114.738029][ T4317] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 114.760906][ T4317] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 114.792139][ T4361] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 114.812737][ T4361] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 114.824129][ T4317] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.844734][ T4361] ft260 0003:0403:6030.0005: hidraw1: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 115.002899][ T4361] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 115.018171][ T4713] usb 3-1: USB disconnect, device number 4 [ 115.139250][ T5089] loop1: detected capacity change from 0 to 512 [ 115.401694][ T5094] fido_id[5094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 115.426926][ T4361] usb 4-1: USB disconnect, device number 7 [ 115.483050][ T5095] fido_id[5095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 115.741196][ T5104] loop2: detected capacity change from 0 to 256 [ 115.779572][ T5104] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 115.842818][ T5104] syz.2.190: attempt to access beyond end of device [ 115.842818][ T5104] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 115.859688][ T5104] syz.2.190: attempt to access beyond end of device [ 115.859688][ T5104] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 115.881962][ T5104] syz.2.190: attempt to access beyond end of device [ 115.881962][ T5104] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 115.897933][ T26] audit: type=1800 audit(1790970036.885:7): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.190" name="file1" dev="loop2" ino=1048618 res=0 errno=0 [ 115.989731][ T955] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 116.157391][ T5117] loop2: detected capacity change from 0 to 8192 [ 116.186899][ T955] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 116.200393][ T955] usb 5-1: config 0 has no interface number 0 [ 116.224431][ T955] usb 5-1: config 0 interface 41 has no altsetting 0 [ 116.244005][ T955] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 116.274881][ T955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.292188][ T955] usb 5-1: Product: syz [ 116.301119][ T955] usb 5-1: Manufacturer: syz [ 116.313301][ T955] usb 5-1: SerialNumber: syz [ 116.331043][ T955] usb 5-1: config 0 descriptor?? [ 117.325478][ T4714] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.361984][ T955] CoreChips: probe of 5-1:0.41 failed with error -71 [ 117.386901][ T955] usb 5-1: USB disconnect, device number 5 [ 117.395631][ T4317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.518783][ T4714] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 117.534864][ T4714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.552679][ T4714] usb 2-1: Product: syz [ 117.558329][ T4714] usb 2-1: Manufacturer: syz [ 117.563025][ T4714] usb 2-1: SerialNumber: syz [ 117.570743][ T4714] usb 2-1: config 0 descriptor?? [ 117.578528][ T4714] hub 2-1:0.0: bad descriptor, ignoring hub [ 117.588345][ T4714] hub: probe of 2-1:0.0 failed with error -5 [ 117.591938][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 117.612151][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.633410][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.661315][ T4317] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 117.676014][ T4317] usb 1-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 117.684405][ T4317] usb 1-1: Manufacturer: syz [ 117.699185][ T4317] usb 1-1: config 0 descriptor?? [ 117.782168][ T4714] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 117.798847][ T4714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.823231][ T4714] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 117.842341][ T4714] usb 2-1: media controller created [ 117.877472][ T4714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.991335][ T5138] dib0700: tx buffer length is larger than 4. Not supported. [ 118.104880][ T5161] kvm [5160]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 118.117129][ T4714] DVB: Unable to find symbol dib7000p_attach() [ 118.135049][ T4714] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 118.275422][ T4714] rc_core: IR keymap rc-dib0700-rc5 not found [ 118.281595][ T4714] Registered IR keymap rc-empty [ 118.297746][ T4714] dvb-usb: could not initialize remote control. [ 118.319912][ T4714] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 118.333968][ T4317] letsketch 0003:6161:4D15.0006: Device info: а [ 118.382154][ T4714] usb 2-1: USB disconnect, device number 7 [ 118.461611][ T4714] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 118.534566][ T4317] letsketch 0003:6161:4D15.0006: Device info:  [ 118.657758][ T5176] overlayfs: failed to set xattr on upper [ 118.664781][ T5176] overlayfs: ...falling back to index=off,metacopy=off. [ 118.779599][ T4317] usb 1-1: Max retries (5) exceeded reading string descriptor 202 [ 118.798345][ T4317] letsketch: probe of 0003:6161:4D15.0006 failed with error -71 [ 118.823277][ T4317] usb 1-1: USB disconnect, device number 4 [ 118.871968][ T5181] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.221'. [ 118.900095][ T5183] loop2: detected capacity change from 0 to 64 [ 119.215244][ T4361] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.410199][ T4361] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 119.432403][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.464660][ T4361] usb 2-1: Product: syz [ 119.478237][ T4361] usb 2-1: Manufacturer: syz [ 119.491008][ T4361] usb 2-1: SerialNumber: syz [ 119.510422][ T4361] usb 2-1: config 0 descriptor?? [ 119.534674][ T4361] hub 2-1:0.0: bad descriptor, ignoring hub [ 119.539292][ T5196] loop0: detected capacity change from 0 to 4096 [ 119.554415][ T4361] hub: probe of 2-1:0.0 failed with error -5 [ 119.619897][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 119.738257][ T4361] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 119.763441][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.784547][ T5196] EXT4-fs: Ignoring removed orlov option [ 119.798865][ T4361] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 119.819866][ T5196] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.822981][ T4361] usb 2-1: media controller created [ 119.880591][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.891875][ T5196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.019293][ T4361] DVB: Unable to find symbol dib7000p_attach() [ 120.025323][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.028814][ T4361] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 120.119939][ T5219] loop4: detected capacity change from 0 to 2048 [ 120.164462][ T5196] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 120.206632][ T5219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.223093][ T5196] EXT4-fs error (device loop0): __ext4_remount:6650: comm syz.0.228: Abort forced by user [ 120.225299][ T4361] rc_core: IR keymap rc-dib0700-rc5 not found [ 120.235348][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 120.259907][ T5196] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 120.266995][ T4361] Registered IR keymap rc-empty [ 120.267000][ T4318] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 120.289849][ T4318] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 120.292513][ T4361] dvb-usb: could not initialize remote control. [ 120.309002][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.337810][ T4361] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 120.339041][ T4318] usb 3-1: probing VID:PID(0424:012C) [ 120.364189][ T4318] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 120.371792][ T4318] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 120.388523][ T4318] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 120.397188][ T4361] usb 2-1: USB disconnect, device number 8 [ 120.411380][ T4318] usb 3-1: vub300 testing BULK IN EndPoint(3) 85 [ 120.422531][ T4318] usb 3-1: ignoring unexpected bulk_in endpoint [ 120.429229][ T4318] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 120.460479][ T4318] vub300: probe of 3-1:1.0 failed with error -22 [ 120.489168][ T4406] EXT4-fs (loop0): unmounting filesystem. [ 120.506516][ T4361] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 120.557535][ T5225] loop4: detected capacity change from 0 to 512 [ 120.570050][ T5225] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.590481][ T4714] usb 3-1: USB disconnect, device number 5 [ 120.618669][ T5225] EXT4-fs (loop4): 1 truncate cleaned up [ 120.624814][ T5225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.673785][ T4683] bond0: (slave bond_slave_0): interface is now down [ 120.701134][ T4683] bond0: (slave bond_slave_1): interface is now down [ 120.705230][ T4317] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 120.713147][ T4683] bond0: now running without any active interface! [ 120.753752][ T4578] EXT4-fs (loop4): unmounting filesystem. [ 120.907029][ T4317] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.925844][ T4317] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.944880][ T4317] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.964420][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.973585][ T4317] usb 4-1: Product: syz [ 120.978028][ T4317] usb 4-1: Manufacturer: syz [ 120.982655][ T4317] usb 4-1: SerialNumber: syz [ 121.034212][ T4317] cdc_mbim 4-1:1.0: skipping garbage [ 121.165268][ T4361] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.230174][ T5223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.366882][ T4361] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.390966][ T4361] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.431484][ T4361] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.443532][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.472304][ T5233] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 121.719732][ T4361] usb 1-1: USB disconnect, device number 5 [ 121.842661][ T5223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.850760][ T4317] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 121.863333][ T4317] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 121.902516][ T26] audit: type=1326 audit(1790970042.885:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.2.253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d1599e159 code=0x0 [ 121.911677][ T4317] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, aa:b0:d0:1a:1c:89 [ 122.064019][ T4714] usb 4-1: USB disconnect, device number 8 [ 122.072738][ T4714] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 122.204031][ T5272] loop4: detected capacity change from 0 to 2048 [ 122.247793][ T5272] loop4: p1 p3 [ 122.247793][ T5272] p1: [ 122.260005][ T5272] loop4: p1 size 16777216 extends beyond EOD, truncated [ 122.272410][ T5272] loop4: p3 start 3036741376 is beyond EOD, truncated [ 123.229849][ T5313] input: syz1 as /devices/virtual/input/input8 [ 123.337882][ T5315] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.620219][ T4361] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.815420][ T4361] usb 3-1: Using ep0 maxpacket: 8 [ 123.822943][ T4361] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.890256][ T4361] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.927460][ T4361] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 123.957748][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.993061][ T4361] usb 3-1: Product: syz [ 124.006194][ T4361] usb 3-1: Manufacturer: syz [ 124.024396][ T4361] usb 3-1: SerialNumber: syz [ 124.038078][ T5341] loop0: detected capacity change from 0 to 128 [ 124.094760][ T5341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.110858][ T5341] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.279927][ T4361] usb 3-1: unit 6 not found! [ 124.319770][ T4361] usb 3-1: USB disconnect, device number 6 [ 124.325639][ T4318] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.410187][ T4406] EXT4-fs (loop0): unmounting filesystem. [ 124.537969][ T4318] usb 5-1: config index 0 descriptor too short (expected 50, got 32) [ 124.565326][ T4318] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.598410][ T4318] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 124.609954][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.646237][ T4318] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.702348][ T4318] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 124.731964][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.757412][ T4318] usb 5-1: Product: syz [ 124.761627][ T4318] usb 5-1: Manufacturer: syz [ 124.776555][ T4318] usb 5-1: SerialNumber: syz [ 124.816397][ T5343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.836836][ T4318] usb_debug 5-1:1.0: debug converter detected [ 124.850069][ T4318] usb 5-1: debug converter now attached to ttyUSB0 [ 125.051698][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 125.061079][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 125.071233][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 125.080556][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 125.100895][ T955] usb 5-1: USB disconnect, device number 6 [ 125.110992][ T955] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 125.148828][ T955] usb_debug 5-1:1.0: device disconnected [ 125.410779][ T5377] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.460877][ T5377] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 125.641805][ T5384] FAULT_INJECTION: forcing a failure. [ 125.641805][ T5384] name failslab, interval 1, probability 0, space 0, times 0 [ 125.661656][ T5384] CPU: 0 PID: 5384 Comm: syz.2.290 Not tainted syzkaller #0 [ 125.669010][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.679178][ T5384] Call Trace: [ 125.682481][ T5384] [ 125.685438][ T5384] dump_stack_lvl+0x188/0x24e [ 125.690151][ T5384] ? show_regs_print_info+0x12/0x12 [ 125.695376][ T5384] ? load_image+0x410/0x410 [ 125.699910][ T5384] ? __might_sleep+0xd0/0xd0 [ 125.704521][ T5384] ? __lock_acquire+0x7c40/0x7c40 [ 125.709580][ T5384] should_fail_ex+0x390/0x4c0 [ 125.714293][ T5384] should_failslab+0x5/0x20 [ 125.718823][ T5384] slab_pre_alloc_hook+0x59/0x300 [ 125.723882][ T5384] ? __lock_acquire+0x7c40/0x7c40 [ 125.728943][ T5384] ? security_prepare_creds+0x47/0x130 [ 125.734433][ T5384] __kmem_cache_alloc_node+0x4f/0x270 [ 125.735624][ T5386] device batadv_slave_0 entered promiscuous mode [ 125.739829][ T5384] ? security_prepare_creds+0x47/0x130 [ 125.751637][ T5384] __kmalloc+0xa3/0x240 [ 125.755830][ T5384] security_prepare_creds+0x47/0x130 [ 125.761160][ T5384] prepare_creds+0x450/0x610 [ 125.765784][ T5384] lookup_user_key+0x2b4/0x1110 [ 125.770775][ T5384] ? lookup_user_key_possessed+0x40/0x40 [ 125.776709][ T5384] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 125.782735][ T5384] ? _copy_from_user+0x10b/0x170 [ 125.787711][ T5384] __se_sys_add_key+0x311/0x410 [ 125.792602][ T5384] ? __x64_sys_add_key+0xc0/0xc0 [ 125.797582][ T5384] ? lockdep_hardirqs_on+0x94/0x140 [ 125.802808][ T5384] ? __x64_sys_add_key+0x1c/0xc0 [ 125.807873][ T5384] do_syscall_64+0x4c/0xa0 [ 125.812341][ T5384] ? clear_bhb_loop+0x60/0xb0 [ 125.817049][ T5384] ? clear_bhb_loop+0x60/0xb0 [ 125.821769][ T5384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.827793][ T5384] RIP: 0033:0x7f5d1599e159 [ 125.832445][ T5384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.835538][ T5385] device batadv_slave_0 left promiscuous mode [ 125.852150][ T5384] RSP: 002b:00007f5d1685e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 125.852177][ T5384] RAX: ffffffffffffffda RBX: 00007f5d15c25fa0 RCX: 00007f5d1599e159 [ 125.852191][ T5384] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000100 [ 125.852203][ T5384] RBP: 00007f5d15a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 125.852220][ T5384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.852231][ T5384] R13: 00007f5d15c26038 R14: 00007f5d15c25fa0 R15: 00007ffe5fe9a2b8 [ 125.852255][ T5384] [ 126.758755][ T5420] FAULT_INJECTION: forcing a failure. [ 126.758755][ T5420] name failslab, interval 1, probability 0, space 0, times 0 [ 126.849833][ T5420] CPU: 0 PID: 5420 Comm: syz.0.302 Not tainted syzkaller #0 [ 126.857174][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.867262][ T5420] Call Trace: [ 126.870564][ T5420] [ 126.873525][ T5420] dump_stack_lvl+0x188/0x24e [ 126.878243][ T5420] ? show_regs_print_info+0x12/0x12 [ 126.883474][ T5420] ? load_image+0x410/0x410 [ 126.888009][ T5420] ? __might_sleep+0xd0/0xd0 [ 126.892623][ T5420] ? __lock_acquire+0x7c40/0x7c40 [ 126.897686][ T5420] should_fail_ex+0x390/0x4c0 [ 126.902407][ T5420] should_failslab+0x5/0x20 [ 126.906943][ T5420] slab_pre_alloc_hook+0x59/0x300 [ 126.912129][ T5420] kmem_cache_alloc+0x56/0x2f0 [ 126.916923][ T5420] ? getname_flags+0xb7/0x500 [ 126.921722][ T5420] getname_flags+0xb7/0x500 [ 126.926252][ T5420] do_mq_open+0x19e/0x750 [ 126.930798][ T5420] ? mq_put_mnt+0x40/0x40 [ 126.935258][ T5420] __x64_sys_mq_open+0x182/0x1e0 [ 126.940233][ T5420] ? proc_ipc_sem_dointvec+0x170/0x170 [ 126.945738][ T5420] ? lockdep_hardirqs_on+0x94/0x140 [ 126.950974][ T5420] do_syscall_64+0x4c/0xa0 [ 126.955415][ T5420] ? clear_bhb_loop+0x60/0xb0 [ 126.960116][ T5420] ? clear_bhb_loop+0x60/0xb0 [ 126.964820][ T5420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.970746][ T5420] RIP: 0033:0x7f320099e159 [ 126.975199][ T5420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.994840][ T5420] RSP: 002b:00007f3201782028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 127.003288][ T5420] RAX: ffffffffffffffda RBX: 00007f3200c25fa0 RCX: 00007f320099e159 [ 127.011289][ T5420] RDX: 0000000000000014 RSI: 0000000000000042 RDI: 0000000000000000 [ 127.019282][ T5420] RBP: 00007f3200a3506b R08: 0000000000000000 R09: 0000000000000000 [ 127.027364][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.035359][ T5420] R13: 00007f3200c26038 R14: 00007f3200c25fa0 R15: 00007ffec9ead708 [ 127.043411][ T5420] [ 127.236982][ T5440] Format for deleting device is "id" (uint). [ 127.545461][ T955] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.742251][ T955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.784140][ T955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.824920][ T955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.891800][ T955] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.938447][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.989580][ T955] usb 5-1: config 0 descriptor?? [ 128.074599][ T5445] loop1: detected capacity change from 0 to 131072 [ 128.148914][ T5445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.191348][ T5467] loop3: detected capacity change from 0 to 512 [ 128.206422][ T5467] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.236138][ T5445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.265307][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.281204][ T5445] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=6 iblocks=0, run fsck to fix. [ 128.407364][ T955] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 128.442849][ T955] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 128.497168][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 128.555209][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 128.604371][ T14] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 128.645213][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.676477][ T14] usb 1-1: probing VID:PID(0424:012C) [ 128.715871][ T14] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 128.741816][ T14] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 128.780049][ T14] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 128.800143][ T14] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 128.814159][ T14] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 129.083641][ T14] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 129.279569][ T5490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.321'. [ 129.284480][ T14] usb 1-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 129.700199][ T5504] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 129.734226][ C1] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 129.751079][ T955] usb 5-1: USB disconnect, device number 7 [ 129.902654][ T5515] binder: 5513:5515 ioctl c018620c 200000000000 returned -22 [ 130.090055][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 130.120612][ T14] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 130.173263][ T14] usb 1-1: USB disconnect, device number 6 [ 130.220167][ T14] USB vub300 remote SDIO host controller[0] now disconnected [ 130.285692][ C0] [ 130.295466][ C0] ================================ [ 130.300582][ C0] WARNING: inconsistent lock state [ 130.305717][ C0] syzkaller #0 Not tainted [ 130.310146][ C0] -------------------------------- [ 130.315264][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 130.322220][ C0] syz.1.334/5533 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 130.328588][ C0] ffff888024238648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 130.339954][ C0] {SOFTIRQ-ON-W} state was registered at: [ 130.345757][ C0] lock_acquire+0x1bb/0x4a0 [ 130.350402][ C0] __flush_work+0x122/0xac0 [ 130.354989][ C0] __cancel_work_timer+0x3f4/0x560 [ 130.360526][ C0] mmc_free_host+0x15/0x30 [ 130.365025][ C0] vub300_probe+0x1873/0x2e20 [ 130.370043][ C0] usb_probe_interface+0x6e7/0xcf0 [ 130.375236][ C0] really_probe+0x24a/0xb40 [ 130.379821][ C0] __driver_probe_device+0x1f5/0x390 [ 130.385211][ C0] driver_probe_device+0x4f/0x420 [ 130.390330][ C0] __device_attach_driver+0x2c6/0x510 [ 130.395969][ C0] bus_for_each_drv+0x184/0x210 [ 130.400905][ C0] __device_attach+0x2a7/0x480 [ 130.405760][ C0] bus_probe_device+0xba/0x1d0 [ 130.410600][ C0] device_add+0xbcf/0x1050 [ 130.415096][ C0] usb_set_configuration+0x19d5/0x2030 [ 130.420640][ C0] usb_generic_driver_probe+0x89/0x150 [ 130.426270][ C0] usb_probe_device+0x126/0x250 [ 130.431223][ C0] really_probe+0x24a/0xb40 [ 130.435807][ C0] __driver_probe_device+0x1f5/0x390 [ 130.441167][ C0] driver_probe_device+0x4f/0x420 [ 130.446442][ C0] __device_attach_driver+0x2c6/0x510 [ 130.451892][ C0] bus_for_each_drv+0x184/0x210 [ 130.456907][ C0] __device_attach+0x2a7/0x480 [ 130.461762][ C0] bus_probe_device+0xba/0x1d0 [ 130.466649][ C0] device_add+0xbcf/0x1050 [ 130.471235][ C0] usb_new_device+0xa01/0x15e0 [ 130.476387][ C0] hub_event+0x2b2f/0x5200 [ 130.480984][ C0] process_one_work+0x8ab/0x1160 [ 130.486003][ C0] worker_thread+0xaf5/0x12a0 [ 130.490755][ C0] kthread+0x29d/0x330 [ 130.494914][ C0] ret_from_fork+0x1f/0x30 [ 130.499431][ C0] irq event stamp: 1326 [ 130.503568][ C0] hardirqs last enabled at (1326): [] __cancel_work_timer+0x36a/0x560 [ 130.513389][ C0] hardirqs last disabled at (1325): [] try_to_grab_pending+0xfa/0x890 [ 130.523097][ C0] softirqs last enabled at (0): [] copy_process+0x974/0x4070 [ 130.532204][ C0] softirqs last disabled at (1255): [] __irq_exit_rcu+0x13b/0x230 [ 130.541651][ C0] [ 130.541651][ C0] other info that might help us debug this: [ 130.549733][ C0] Possible unsafe locking scenario: [ 130.549733][ C0] [ 130.557225][ C0] CPU0 [ 130.560512][ C0] ---- [ 130.563776][ C0] lock((work_completion)(&(&host->detect)->work)); [ 130.570446][ C0] [ 130.573900][ C0] lock((work_completion)(&(&host->detect)->work)); [ 130.580756][ C0] [ 130.580756][ C0] *** DEADLOCK *** [ 130.580756][ C0] [ 130.588895][ C0] 4 locks held by syz.1.334/5533: [ 130.593905][ C0] #0: ffff88802f86f958 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x177/0x970 [ 130.603066][ C0] #1: ffff888028ef52b8 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: unmap_page_range+0x99a/0x25b0 [ 130.613544][ C0] #2: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: page_ext_get+0x1e/0x2a0 [ 130.622850][ C0] #3: ffffc90000007bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 130.633284][ C0] [ 130.633284][ C0] stack backtrace: [ 130.639163][ C0] CPU: 0 PID: 5533 Comm: syz.1.334 Not tainted syzkaller #0 [ 130.646434][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.656478][ C0] Call Trace: [ 130.659748][ C0] [ 130.662584][ C0] dump_stack_lvl+0x188/0x24e [ 130.667265][ C0] ? show_regs_print_info+0x12/0x12 [ 130.672482][ C0] ? unwind_get_return_address+0x49/0x80 [ 130.678129][ C0] valid_state+0x13b/0x1d0 [ 130.682555][ C0] mark_lock_irq+0xa9/0x900 [ 130.687069][ C0] ? stack_trace_save+0xa6/0xf0 [ 130.691936][ C0] ? save_trace+0xbb0/0xbb0 [ 130.696438][ C0] ? save_trace+0x5a/0xbb0 [ 130.700850][ C0] mark_lock+0x208/0x320 [ 130.705110][ C0] __lock_acquire+0xce0/0x7c40 [ 130.709876][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 130.714898][ C0] ? verify_lock_unused+0x140/0x140 [ 130.720088][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 130.725127][ C0] ? debug_object_assert_init+0x1ed/0x300 [ 130.730852][ C0] lock_acquire+0x1bb/0x4a0 [ 130.735371][ C0] ? __flush_work+0x109/0xac0 [ 130.740044][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 130.745256][ C0] ? read_lock_is_recursive+0x10/0x10 [ 130.750650][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 130.756560][ C0] ? _raw_spin_unlock+0x40/0x40 [ 130.761403][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 130.767066][ C0] ? kobject_put+0x25c/0x450 [ 130.771652][ C0] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 130.777981][ C0] ? call_timer_fn+0x1ac/0x670 [ 130.782862][ C0] ? __flush_work+0x109/0xac0 [ 130.787525][ C0] __flush_work+0x122/0xac0 [ 130.792027][ C0] ? __flush_work+0x109/0xac0 [ 130.796696][ C0] ? flush_work+0x20/0x20 [ 130.801048][ C0] ? __timer_delete+0x6c/0x220 [ 130.805803][ C0] ? mark_lock+0x94/0x320 [ 130.810131][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.816112][ C0] ? mod_delayed_work_on+0x1b0/0x1b0 [ 130.821409][ C0] ? lock_chain_count+0x20/0x20 [ 130.826284][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 130.831574][ C0] ? __cancel_work_timer+0x36a/0x560 [ 130.836859][ C0] __cancel_work_timer+0x3f4/0x560 [ 130.842053][ C0] ? cancel_work_sync+0x20/0x20 [ 130.846902][ C0] ? kobject_put+0x25c/0x450 [ 130.851511][ C0] ? __kmem_cache_free+0xb6/0x200 [ 130.856529][ C0] ? kobject_put+0x41d/0x450 [ 130.861120][ C0] mmc_free_host+0x15/0x30 [ 130.865533][ C0] call_timer_fn+0x1ac/0x670 [ 130.870109][ C0] ? kref_get+0x70/0x70 [ 130.874254][ C0] ? call_timer_fn+0xcf/0x670 [ 130.878917][ C0] ? __run_timers+0x810/0x810 [ 130.883587][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 130.888794][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 130.893986][ C0] ? kref_get+0x70/0x70 [ 130.898139][ C0] __run_timers+0x56c/0x810 [ 130.902644][ C0] ? detach_timer+0x350/0x350 [ 130.907313][ C0] ? lock_chain_count+0x20/0x20 [ 130.912165][ C0] run_timer_softirq+0x63/0xf0 [ 130.917007][ C0] handle_softirqs+0x291/0x910 [ 130.921764][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 130.926615][ C0] ? do_softirq+0x210/0x210 [ 130.931104][ C0] ? hrtimer_interrupt+0x775/0x980 [ 130.936205][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 130.941391][ C0] __irq_exit_rcu+0x13b/0x230 [ 130.946144][ C0] ? irq_exit_rcu+0x20/0x20 [ 130.950753][ C0] irq_exit_rcu+0x5/0x20 [ 130.955067][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 130.960734][ C0] [ 130.963652][ C0] [ 130.966579][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.972547][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 130.977857][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 130.997459][ C0] RSP: 0018:ffffc90005e8f2c0 EFLAGS: 00000206 [ 131.003528][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8f2b239eefb46e00 [ 131.011573][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 131.019640][ C0] RBP: ffffc90005e8f3e0 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 131.027610][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 0000000000000000 [ 131.035942][ C0] R13: 1ffff92000bd1e64 R14: 0000000000000246 R15: dffffc0000000000 [ 131.043922][ C0] ? pfn_valid+0xcd/0x420 [ 131.048279][ C0] ? read_lock_is_recursive+0x10/0x10 [ 131.053668][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 131.058685][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 131.063911][ C0] ? pfn_valid+0xcd/0x420 [ 131.068246][ C0] ? page_ext_get+0x1e/0x2a0 [ 131.072826][ C0] page_ext_get+0x3a/0x2a0 [ 131.077322][ C0] ? page_ext_get+0x1e/0x2a0 [ 131.081912][ C0] page_table_check_clear+0x4a/0x6b0 [ 131.087188][ C0] ? __page_table_check_pte_clear+0x3f/0x70 [ 131.093114][ C0] unmap_page_range+0x1905/0x25b0 [ 131.098196][ C0] unmap_vmas+0x260/0x390 [ 131.102630][ C0] ? unmap_vmas+0x1bd/0x390 [ 131.107125][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 131.112316][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 131.117430][ C0] exit_mmap+0x20d/0x970 [ 131.121672][ C0] ? vm_brk+0x20/0x20 [ 131.125655][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 131.131646][ C0] ? exit_mm+0x23d/0x350 [ 131.135893][ C0] ? uprobe_clear_state+0x274/0x290 [ 131.141095][ C0] __mmput+0x118/0x3a0 [ 131.145426][ C0] exit_mm+0x24d/0x350 [ 131.149578][ C0] ? sysctl_delayacct+0x220/0x220 [ 131.154722][ C0] ? do_exit+0x2570/0x2570 [ 131.159137][ C0] ? tty_audit_exit+0x149/0x1f0 [ 131.163986][ C0] do_exit+0x958/0x2570 [ 131.168154][ C0] ? put_task_struct+0x80/0x80 [ 131.172908][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.178898][ C0] ? lock_chain_count+0x20/0x20 [ 131.183736][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 131.188753][ C0] do_group_exit+0x229/0x2e0 [ 131.193433][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 131.198630][ C0] get_signal+0x1259/0x1340 [ 131.203134][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 131.208759][ C0] ? file_end_write+0x156/0x250 [ 131.213717][ C0] ? vfs_write+0x777/0x9a0 [ 131.218132][ C0] ? do_futex+0x310/0x320 [ 131.222452][ C0] ? get_sigframe_size+0x10/0x10 [ 131.227383][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 131.233293][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 131.238751][ C0] exit_to_user_mode_loop+0x70/0x110 [ 131.244030][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 131.249699][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 131.255183][ C0] do_syscall_64+0x58/0xa0 [ 131.259603][ C0] ? clear_bhb_loop+0x60/0xb0 [ 131.264284][ C0] ? clear_bhb_loop+0x60/0xb0 [ 131.268953][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.274844][ C0] RIP: 0033:0x7f087cf9e159 [ 131.279247][ C0] Code: Unable to access opcode bytes at 0x7f087cf9e12f. [ 131.286250][ C0] RSP: 002b:00007f087df0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.294659][ C0] RAX: fffffffffffffe00 RBX: 00007f087d225fa8 RCX: 00007f087cf9e159 [ 131.302702][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f087d225fa8 [ 131.310668][ C0] RBP: 00007f087d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 131.318631][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.326585][ C0] R13: 00007f087d226038 R14: 00007ffe4fcd13e0 R15: 00007ffe4fcd14c8 [ 131.334634][ C0] [ 131.337874][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 131.346934][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5533, name: syz.1.334 [ 131.355912][ C0] preempt_count: 101, expected: 0 [ 131.360931][ C0] RCU nest depth: 1, expected: 0 [ 131.365882][ C0] INFO: lockdep is turned off. [ 131.370635][ C0] Preemption disabled at: [ 131.370643][ C0] [<0000000000000000>] 0x0 [ 131.379489][ C0] CPU: 0 PID: 5533 Comm: syz.1.334 Not tainted syzkaller #0 [ 131.386860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.396998][ C0] Call Trace: [ 131.400277][ C0] [ 131.403113][ C0] dump_stack_lvl+0x188/0x24e [ 131.407800][ C0] ? show_regs_print_info+0x12/0x12 [ 131.413004][ C0] ? load_image+0x410/0x410 [ 131.417787][ C0] __might_resched+0x489/0x5f0 [ 131.422646][ C0] ? __might_sleep+0xd0/0xd0 [ 131.427236][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 131.432354][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 131.438267][ C0] ? _raw_spin_unlock+0x40/0x40 [ 131.443196][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 131.448877][ C0] ? kobject_put+0x25c/0x450 [ 131.453487][ C0] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 131.459841][ C0] ? call_timer_fn+0x1ac/0x670 [ 131.464627][ C0] ? __flush_work+0x109/0xac0 [ 131.469339][ C0] __flush_work+0x142/0xac0 [ 131.473911][ C0] ? flush_work+0x20/0x20 [ 131.478258][ C0] ? __timer_delete+0x6c/0x220 [ 131.483040][ C0] ? mark_lock+0x94/0x320 [ 131.487402][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.493435][ C0] ? mod_delayed_work_on+0x1b0/0x1b0 [ 131.498754][ C0] ? lock_chain_count+0x20/0x20 [ 131.503720][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 131.509045][ C0] ? __cancel_work_timer+0x36a/0x560 [ 131.514378][ C0] __cancel_work_timer+0x3f4/0x560 [ 131.519517][ C0] ? cancel_work_sync+0x20/0x20 [ 131.524395][ C0] ? kobject_put+0x25c/0x450 [ 131.529017][ C0] ? __kmem_cache_free+0xb6/0x200 [ 131.534050][ C0] ? kobject_put+0x41d/0x450 [ 131.538648][ C0] mmc_free_host+0x15/0x30 [ 131.543064][ C0] call_timer_fn+0x1ac/0x670 [ 131.547662][ C0] ? kref_get+0x70/0x70 [ 131.551835][ C0] ? call_timer_fn+0xcf/0x670 [ 131.556518][ C0] ? __run_timers+0x810/0x810 [ 131.561227][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.566441][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 131.571634][ C0] ? kref_get+0x70/0x70 [ 131.575803][ C0] __run_timers+0x56c/0x810 [ 131.580315][ C0] ? detach_timer+0x350/0x350 [ 131.584986][ C0] ? lock_chain_count+0x20/0x20 [ 131.589838][ C0] run_timer_softirq+0x63/0xf0 [ 131.594768][ C0] handle_softirqs+0x291/0x910 [ 131.599529][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 131.604378][ C0] ? do_softirq+0x210/0x210 [ 131.608868][ C0] ? hrtimer_interrupt+0x775/0x980 [ 131.613971][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 131.619164][ C0] __irq_exit_rcu+0x13b/0x230 [ 131.623927][ C0] ? irq_exit_rcu+0x20/0x20 [ 131.628428][ C0] irq_exit_rcu+0x5/0x20 [ 131.632676][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 131.638329][ C0] [ 131.641258][ C0] [ 131.644179][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.650162][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 131.655468][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 131.675074][ C0] RSP: 0018:ffffc90005e8f2c0 EFLAGS: 00000206 [ 131.681159][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8f2b239eefb46e00 [ 131.689119][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 131.697196][ C0] RBP: ffffc90005e8f3e0 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 131.705175][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 0000000000000000 [ 131.713317][ C0] R13: 1ffff92000bd1e64 R14: 0000000000000246 R15: dffffc0000000000 [ 131.721293][ C0] ? pfn_valid+0xcd/0x420 [ 131.725626][ C0] ? read_lock_is_recursive+0x10/0x10 [ 131.731086][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 131.736190][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 131.741210][ C0] ? pfn_valid+0xcd/0x420 [ 131.745649][ C0] ? page_ext_get+0x1e/0x2a0 [ 131.750265][ C0] page_ext_get+0x3a/0x2a0 [ 131.754686][ C0] ? page_ext_get+0x1e/0x2a0 [ 131.759370][ C0] page_table_check_clear+0x4a/0x6b0 [ 131.764670][ C0] ? __page_table_check_pte_clear+0x3f/0x70 [ 131.770589][ C0] unmap_page_range+0x1905/0x25b0 [ 131.775634][ C0] unmap_vmas+0x260/0x390 [ 131.779962][ C0] ? unmap_vmas+0x1bd/0x390 [ 131.784461][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 131.789655][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 131.794732][ C0] exit_mmap+0x20d/0x970 [ 131.798978][ C0] ? vm_brk+0x20/0x20 [ 131.802955][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 131.808585][ C0] ? exit_mm+0x23d/0x350 [ 131.812829][ C0] ? uprobe_clear_state+0x274/0x290 [ 131.818027][ C0] __mmput+0x118/0x3a0 [ 131.822089][ C0] exit_mm+0x24d/0x350 [ 131.826173][ C0] ? sysctl_delayacct+0x220/0x220 [ 131.831217][ C0] ? do_exit+0x2570/0x2570 [ 131.835636][ C0] ? tty_audit_exit+0x149/0x1f0 [ 131.840486][ C0] do_exit+0x958/0x2570 [ 131.844643][ C0] ? put_task_struct+0x80/0x80 [ 131.849415][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.855396][ C0] ? lock_chain_count+0x20/0x20 [ 131.860242][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 131.865265][ C0] do_group_exit+0x229/0x2e0 [ 131.869852][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 131.875068][ C0] get_signal+0x1259/0x1340 [ 131.879574][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 131.885206][ C0] ? file_end_write+0x156/0x250 [ 131.890053][ C0] ? vfs_write+0x777/0x9a0 [ 131.894459][ C0] ? do_futex+0x310/0x320 [ 131.898794][ C0] ? get_sigframe_size+0x10/0x10 [ 131.903735][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 131.909624][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 131.915080][ C0] exit_to_user_mode_loop+0x70/0x110 [ 131.920362][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 131.925995][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 131.931450][ C0] do_syscall_64+0x58/0xa0 [ 131.935856][ C0] ? clear_bhb_loop+0x60/0xb0 [ 131.940524][ C0] ? clear_bhb_loop+0x60/0xb0 [ 131.945231][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.951125][ C0] RIP: 0033:0x7f087cf9e159 [ 131.955531][ C0] Code: Unable to access opcode bytes at 0x7f087cf9e12f. [ 131.962537][ C0] RSP: 002b:00007f087df0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.970948][ C0] RAX: fffffffffffffe00 RBX: 00007f087d225fa8 RCX: 00007f087cf9e159 [ 131.978934][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f087d225fa8 [ 131.986898][ C0] RBP: 00007f087d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 131.994856][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.002817][ C0] R13: 00007f087d226038 R14: 00007ffe4fcd13e0 R15: 00007ffe4fcd14c8 [ 132.010873][ C0] [ 132.013965][ C0] ODEBUG: object ffffc900000079a0 is NOT on stack ffffc90005e88000, but annotated. [ 132.023642][ C0] ------------[ cut here ]------------ [ 132.029130][ C0] WARNING: CPU: 0 PID: 5533 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 132.038709][ C0] Modules linked in: [ 132.042600][ C0] CPU: 0 PID: 5533 Comm: syz.1.334 Tainted: G W syzkaller #0 [ 132.051697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.061844][ C0] RIP: 0010:__debug_object_init+0x18e/0x440 [ 132.067752][ C0] Code: 24 04 74 2f 41 ff c6 44 89 35 7e 6a dd 12 48 c7 c1 40 71 df 8a 48 c7 c7 a0 71 df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 b9 0c 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 132.087439][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046 [ 132.093586][ C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: 8f2b239eefb46e00 [ 132.101552][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 132.109526][ C0] RBP: dffffc0000000000 R08: ffffc90000007587 R09: 1ffff92000000eb0 [ 132.117490][ C0] R10: dffffc0000000000 R11: fffff52000000eb1 R12: ffff888061455a20 [ 132.125454][ C0] R13: ffff88805c605b98 R14: 0000000000000001 R15: ffffffff8a8d3120 [ 132.133416][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 132.142336][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.149081][ C0] CR2: 00007f32017556c8 CR3: 000000006159d000 CR4: 00000000003506f0 [ 132.157045][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.165027][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.172995][ C0] Call Trace: [ 132.176314][ C0] [ 132.179161][ C0] __synchronize_srcu+0x227/0x350 [ 132.184186][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 132.189900][ C0] ? _raw_spin_unlock+0x40/0x40 [ 132.194744][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 132.200288][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 132.205314][ C0] wakeup_source_unregister+0x112/0x190 [ 132.210856][ C0] mmc_host_classdev_release+0x43/0xf0 [ 132.216316][ C0] ? mmc_free_host+0x30/0x30 [ 132.220899][ C0] device_release+0x92/0x1c0 [ 132.225478][ C0] kobject_put+0x217/0x450 [ 132.229888][ C0] call_timer_fn+0x1ac/0x670 [ 132.234645][ C0] ? kref_get+0x70/0x70 [ 132.238798][ C0] ? call_timer_fn+0xcf/0x670 [ 132.243926][ C0] ? __run_timers+0x810/0x810 [ 132.249052][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 132.254271][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 132.259466][ C0] ? kref_get+0x70/0x70 [ 132.263621][ C0] __run_timers+0x56c/0x810 [ 132.268126][ C0] ? detach_timer+0x350/0x350 [ 132.272815][ C0] ? lock_chain_count+0x20/0x20 [ 132.277666][ C0] run_timer_softirq+0x63/0xf0 [ 132.282520][ C0] handle_softirqs+0x291/0x910 [ 132.287316][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 132.292156][ C0] ? do_softirq+0x210/0x210 [ 132.296649][ C0] ? hrtimer_interrupt+0x775/0x980 [ 132.301757][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 132.306950][ C0] __irq_exit_rcu+0x13b/0x230 [ 132.311619][ C0] ? irq_exit_rcu+0x20/0x20 [ 132.316120][ C0] irq_exit_rcu+0x5/0x20 [ 132.320350][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 132.325980][ C0] [ 132.328902][ C0] [ 132.331830][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.337808][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 132.343095][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 132.362709][ C0] RSP: 0018:ffffc90005e8f2c0 EFLAGS: 00000206 [ 132.368797][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8f2b239eefb46e00 [ 132.376763][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 132.384728][ C0] RBP: ffffc90005e8f3e0 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 132.392776][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 0000000000000000 [ 132.400739][ C0] R13: 1ffff92000bd1e64 R14: 0000000000000246 R15: dffffc0000000000 [ 132.408729][ C0] ? pfn_valid+0xcd/0x420 [ 132.413075][ C0] ? read_lock_is_recursive+0x10/0x10 [ 132.418476][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 132.423493][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 132.428514][ C0] ? pfn_valid+0xcd/0x420 [ 132.432875][ C0] ? page_ext_get+0x1e/0x2a0 [ 132.437461][ C0] page_ext_get+0x3a/0x2a0 [ 132.441876][ C0] ? page_ext_get+0x1e/0x2a0 [ 132.446499][ C0] page_table_check_clear+0x4a/0x6b0 [ 132.451809][ C0] ? __page_table_check_pte_clear+0x3f/0x70 [ 132.457786][ C0] unmap_page_range+0x1905/0x25b0 [ 132.462902][ C0] unmap_vmas+0x260/0x390 [ 132.467225][ C0] ? unmap_vmas+0x1bd/0x390 [ 132.471738][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 132.476967][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 132.481993][ C0] exit_mmap+0x20d/0x970 [ 132.486253][ C0] ? vm_brk+0x20/0x20 [ 132.490230][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 132.495867][ C0] ? exit_mm+0x23d/0x350 [ 132.500108][ C0] ? uprobe_clear_state+0x274/0x290 [ 132.505303][ C0] __mmput+0x118/0x3a0 [ 132.509384][ C0] exit_mm+0x24d/0x350 [ 132.513447][ C0] ? sysctl_delayacct+0x220/0x220 [ 132.518470][ C0] ? do_exit+0x2570/0x2570 [ 132.522967][ C0] ? tty_audit_exit+0x149/0x1f0 [ 132.527832][ C0] do_exit+0x958/0x2570 [ 132.531999][ C0] ? put_task_struct+0x80/0x80 [ 132.536778][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.542754][ C0] ? lock_chain_count+0x20/0x20 [ 132.547598][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 132.552622][ C0] do_group_exit+0x229/0x2e0 [ 132.557307][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 132.562523][ C0] get_signal+0x1259/0x1340 [ 132.567114][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 132.572756][ C0] ? file_end_write+0x156/0x250 [ 132.577618][ C0] ? vfs_write+0x777/0x9a0 [ 132.582142][ C0] ? do_futex+0x310/0x320 [ 132.586460][ C0] ? get_sigframe_size+0x10/0x10 [ 132.591387][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 132.597309][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 132.602852][ C0] exit_to_user_mode_loop+0x70/0x110 [ 132.608132][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 132.613674][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 132.619147][ C0] do_syscall_64+0x58/0xa0 [ 132.623571][ C0] ? clear_bhb_loop+0x60/0xb0 [ 132.628242][ C0] ? clear_bhb_loop+0x60/0xb0 [ 132.632917][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.638808][ C0] RIP: 0033:0x7f087cf9e159 [ 132.643212][ C0] Code: Unable to access opcode bytes at 0x7f087cf9e12f. [ 132.650216][ C0] RSP: 002b:00007f087df0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.658640][ C0] RAX: fffffffffffffe00 RBX: 00007f087d225fa8 RCX: 00007f087cf9e159 [ 132.666699][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f087d225fa8 [ 132.674662][ C0] RBP: 00007f087d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 132.682711][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.690671][ C0] R13: 00007f087d226038 R14: 00007ffe4fcd13e0 R15: 00007ffe4fcd14c8 [ 132.698642][ C0] [ 132.701668][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.708933][ C0] CPU: 0 PID: 5533 Comm: syz.1.334 Tainted: G W syzkaller #0 [ 132.717716][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.727979][ C0] Call Trace: [ 132.731253][ C0] [ 132.734088][ C0] dump_stack_lvl+0x188/0x24e [ 132.738765][ C0] ? memcpy+0x3c/0x60 [ 132.742737][ C0] ? show_regs_print_info+0x12/0x12 [ 132.747948][ C0] ? load_image+0x410/0x410 [ 132.752469][ C0] panic+0x2d3/0x710 [ 132.756367][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 132.760867][ C0] __warn+0x2f8/0x4f0 [ 132.764841][ C0] ? __debug_object_init+0x18e/0x440 [ 132.770134][ C0] ? __debug_object_init+0x18e/0x440 [ 132.775585][ C0] report_bug+0x2ba/0x4f0 [ 132.779909][ C0] ? __debug_object_init+0x18e/0x440 [ 132.785194][ C0] handle_bug+0x3a/0x70 [ 132.789341][ C0] exc_invalid_op+0x16/0x40 [ 132.793833][ C0] asm_exc_invalid_op+0x16/0x20 [ 132.798675][ C0] RIP: 0010:__debug_object_init+0x18e/0x440 [ 132.804559][ C0] Code: 24 04 74 2f 41 ff c6 44 89 35 7e 6a dd 12 48 c7 c1 40 71 df 8a 48 c7 c7 a0 71 df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 b9 0c 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 132.824333][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046 [ 132.830425][ C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: 8f2b239eefb46e00 [ 132.838400][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 132.846541][ C0] RBP: dffffc0000000000 R08: ffffc90000007587 R09: 1ffff92000000eb0 [ 132.854590][ C0] R10: dffffc0000000000 R11: fffff52000000eb1 R12: ffff888061455a20 [ 132.862633][ C0] R13: ffff88805c605b98 R14: 0000000000000001 R15: ffffffff8a8d3120 [ 132.870603][ C0] ? __debug_object_init+0x18e/0x440 [ 132.875883][ C0] __synchronize_srcu+0x227/0x350 [ 132.880995][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 132.886715][ C0] ? _raw_spin_unlock+0x40/0x40 [ 132.891560][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 132.897275][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 132.902467][ C0] wakeup_source_unregister+0x112/0x190 [ 132.908026][ C0] mmc_host_classdev_release+0x43/0xf0 [ 132.913477][ C0] ? mmc_free_host+0x30/0x30 [ 132.918057][ C0] device_release+0x92/0x1c0 [ 132.922657][ C0] kobject_put+0x217/0x450 [ 132.927150][ C0] call_timer_fn+0x1ac/0x670 [ 132.931731][ C0] ? kref_get+0x70/0x70 [ 132.935881][ C0] ? call_timer_fn+0xcf/0x670 [ 132.940558][ C0] ? __run_timers+0x810/0x810 [ 132.945317][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 132.950509][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 132.955697][ C0] ? kref_get+0x70/0x70 [ 132.959845][ C0] __run_timers+0x56c/0x810 [ 132.964339][ C0] ? detach_timer+0x350/0x350 [ 132.969007][ C0] ? lock_chain_count+0x20/0x20 [ 132.973852][ C0] run_timer_softirq+0x63/0xf0 [ 132.978641][ C0] handle_softirqs+0x291/0x910 [ 132.983398][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 132.988240][ C0] ? do_softirq+0x210/0x210 [ 132.992734][ C0] ? hrtimer_interrupt+0x775/0x980 [ 132.997845][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 133.003031][ C0] __irq_exit_rcu+0x13b/0x230 [ 133.007697][ C0] ? irq_exit_rcu+0x20/0x20 [ 133.012196][ C0] irq_exit_rcu+0x5/0x20 [ 133.016515][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 133.022178][ C0] [ 133.025098][ C0] [ 133.028023][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 133.033995][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 133.039274][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 133.058959][ C0] RSP: 0018:ffffc90005e8f2c0 EFLAGS: 00000206 [ 133.065035][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8f2b239eefb46e00 [ 133.073002][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 133.080969][ C0] RBP: ffffc90005e8f3e0 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 133.088960][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 0000000000000000 [ 133.097024][ C0] R13: 1ffff92000bd1e64 R14: 0000000000000246 R15: dffffc0000000000 [ 133.105163][ C0] ? pfn_valid+0xcd/0x420 [ 133.109489][ C0] ? read_lock_is_recursive+0x10/0x10 [ 133.114852][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 133.119877][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 133.124906][ C0] ? pfn_valid+0xcd/0x420 [ 133.129228][ C0] ? page_ext_get+0x1e/0x2a0 [ 133.133905][ C0] page_ext_get+0x3a/0x2a0 [ 133.138312][ C0] ? page_ext_get+0x1e/0x2a0 [ 133.142994][ C0] page_table_check_clear+0x4a/0x6b0 [ 133.148271][ C0] ? __page_table_check_pte_clear+0x3f/0x70 [ 133.154159][ C0] unmap_page_range+0x1905/0x25b0 [ 133.159255][ C0] unmap_vmas+0x260/0x390 [ 133.163732][ C0] ? unmap_vmas+0x1bd/0x390 [ 133.168232][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 133.173426][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 133.178449][ C0] exit_mmap+0x20d/0x970 [ 133.182690][ C0] ? vm_brk+0x20/0x20 [ 133.186782][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 133.192514][ C0] ? exit_mm+0x23d/0x350 [ 133.196765][ C0] ? uprobe_clear_state+0x274/0x290 [ 133.201968][ C0] __mmput+0x118/0x3a0 [ 133.206031][ C0] exit_mm+0x24d/0x350 [ 133.210190][ C0] ? sysctl_delayacct+0x220/0x220 [ 133.215211][ C0] ? do_exit+0x2570/0x2570 [ 133.219622][ C0] ? tty_audit_exit+0x149/0x1f0 [ 133.224464][ C0] do_exit+0x958/0x2570 [ 133.228741][ C0] ? put_task_struct+0x80/0x80 [ 133.233511][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 133.239488][ C0] ? lock_chain_count+0x20/0x20 [ 133.244431][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 133.249450][ C0] do_group_exit+0x229/0x2e0 [ 133.254036][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 133.259229][ C0] get_signal+0x1259/0x1340 [ 133.263738][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 133.269376][ C0] ? file_end_write+0x156/0x250 [ 133.274221][ C0] ? vfs_write+0x777/0x9a0 [ 133.278628][ C0] ? do_futex+0x310/0x320 [ 133.283120][ C0] ? get_sigframe_size+0x10/0x10 [ 133.288064][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 133.293951][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 133.299406][ C0] exit_to_user_mode_loop+0x70/0x110 [ 133.304908][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 133.310469][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 133.315951][ C0] do_syscall_64+0x58/0xa0 [ 133.320530][ C0] ? clear_bhb_loop+0x60/0xb0 [ 133.325197][ C0] ? clear_bhb_loop+0x60/0xb0 [ 133.329863][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.335841][ C0] RIP: 0033:0x7f087cf9e159 [ 133.340253][ C0] Code: Unable to access opcode bytes at 0x7f087cf9e12f. [ 133.347299][ C0] RSP: 002b:00007f087df0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.355808][ C0] RAX: fffffffffffffe00 RBX: 00007f087d225fa8 RCX: 00007f087cf9e159 [ 133.363790][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f087d225fa8 [ 133.371852][ C0] RBP: 00007f087d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 133.379907][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.387978][ C0] R13: 00007f087d226038 R14: 00007ffe4fcd13e0 R15: 00007ffe4fcd14c8 [ 133.395952][ C0] [ 133.399216][ C0] Kernel Offset: disabled [ 133.403546][ C0] Rebooting in 86400 seconds..