last executing test programs: 9.853270284s ago: executing program 2 (id=365): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff04010009050a3a00000000000905"], 0x0) 8.070582038s ago: executing program 4 (id=378): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private}, {}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.781382278s ago: executing program 2 (id=380): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.771090515s ago: executing program 4 (id=381): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20000010) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) close(0xffffffffffffffff) 6.562956505s ago: executing program 2 (id=383): write$eventfd(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) read$eventfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000de2cfd40e51301008805c601b51f09021200010100000009"], 0x0) 6.516144898s ago: executing program 4 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000180)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 5.466041949s ago: executing program 4 (id=385): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="aefc0000a578516ac9972000000000000000f6773219b51b0c8bcdb3090c010044223e41d400ada4699cd508dfe40010ff11"]) 4.287658696s ago: executing program 3 (id=389): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x52, 0x0, 0x34, 0x34, 0x6, [@var={0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x13}, @volatile={0x0, 0x0, 0x0, 0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x52}, 0x20) 4.242143464s ago: executing program 3 (id=391): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.206501715s ago: executing program 1 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x4}, &(0x7f0000000540)=[{}, {}, {}, {}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x354a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0x4, 0x0, 0x0, 0xec, &(0x7f0000000280)="ec5e444d178b9bccc55b468822becd79aa6d8f0e463be89923fab2d4daca51d6e55beb4ab3199ca22505bcaa2ef56c63f3154713eee6f209f4060f9c3c7b03d0ed5367872f0a1f05bd7d5d7b44cc6d49377128c5aa8ff3efa46d2b2957c56d60bebb21a1f61103497b7edb3c249fceaeea4618ef2180f5a37c6346d5d89be0cea92c26fffa911dfb33d6426b906452c4791037647287a18f8f57b4f41e97147b9b6b6436e4a94825205fe939ae8f4aad8ac3487359a3838f96e2b67a9e98254c96d4b4b4a16ebf7ee4040d316f600e4aae71e8ea2c300adab450c02723c62e31b2724f309708607c1ec10064", 0x40}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0xfffffffffffffcaa) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet(r3, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @multicast1, "a9598e73e3fb5f1f5ec74ce2d59477c9ecc1c22b"}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 3.980318764s ago: executing program 3 (id=393): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)='\xff\xff\xff\xff\xff\xff'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/52}, 0x55) 3.803709161s ago: executing program 3 (id=394): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20000010) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) close(0xffffffffffffffff) 3.65768137s ago: executing program 3 (id=395): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.145679426s ago: executing program 2 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000180)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 3.145178297s ago: executing program 0 (id=397): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') lseek(r0, 0x8000, 0x0) 3.144733405s ago: executing program 3 (id=398): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') 2.493283431s ago: executing program 2 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc010000000000000000000000000000000000000000000007001900000000000a00000000000000ff010000000000000000000000000001000000000200000000000000000000000000000000000000ce127ca3f8bf723570719e00f533"], 0xd8}}, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, &(0x7f0000000040)='))$/^\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmget$private(0x0, 0xb000, 0x54000090, &(0x7f000098c000/0xb000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0202f3021600000000000000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000020200000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d00000600000000000000000000000000000000000002001000"/48], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061c6549ef779fdecbe01000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa10000000000000701000078ffffffb702000004000000b703000000f5ffc8850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000008c0)='sys_enter\x00', r5}, 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x9, @vbi}}) 2.375655606s ago: executing program 1 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.375334809s ago: executing program 0 (id=401): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd7b}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x72) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 2.280033632s ago: executing program 0 (id=402): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 1.55887804s ago: executing program 4 (id=403): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.443244259s ago: executing program 0 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgid(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) getrlimit(0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'ip6gre0\x00', {}, 0x2}) 1.442651619s ago: executing program 1 (id=405): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000010) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) close(r0) 640.099885ms ago: executing program 2 (id=406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getpriority(0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 519.516294ms ago: executing program 1 (id=407): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d9005f7550d4846f67f1f450b6fd9f40d6e255108f31c71e082b4ff337073a0d56e72cf1"}}}}}}}, 0x0) 407.767116ms ago: executing program 0 (id=408): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setfsgid(0x0) 355.291654ms ago: executing program 4 (id=409): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', r1}, 0x18) 345.504909ms ago: executing program 1 (id=410): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000180000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 155.599184ms ago: executing program 0 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r3, 0x25, 0x2, @val=@tracing}, 0x40) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[], 0x0) 0s ago: executing program 1 (id=413): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="aefc0000a578516ac9972000000000000000f6773219b51b0c8bcdb3090c010044223e41d400ada4699cd508dfe40010ff11"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 55.665258][ T5084] cgroup: Unknown subsys name 'net' [ 55.834826][ T5084] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.192486][ T5084] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.748430][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.766713][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.775617][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.784241][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.791648][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.799845][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.808350][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.816840][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.825232][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.837592][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.857690][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.865565][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.874005][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.882461][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.889721][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.902304][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.911069][ T4496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.920981][ T4496] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.990278][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.998819][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.006614][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.047432][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.066678][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.074234][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.126368][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.135688][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.147404][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.164591][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.183061][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.195830][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.420915][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 58.549269][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 58.611951][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 58.652135][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.660309][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.667940][ T5096] bridge_slave_0: entered allmulticast mode [ 58.675647][ T5096] bridge_slave_0: entered promiscuous mode [ 58.684847][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.692568][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.699874][ T5096] bridge_slave_1: entered allmulticast mode [ 58.706545][ T5096] bridge_slave_1: entered promiscuous mode [ 58.768779][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.792992][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 58.808478][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.926678][ T5096] team0: Port device team_slave_0 added [ 58.934023][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.941663][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.949520][ T5101] bridge_slave_0: entered allmulticast mode [ 58.956250][ T5101] bridge_slave_0: entered promiscuous mode [ 58.988375][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.995513][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.003236][ T5093] bridge_slave_0: entered allmulticast mode [ 59.010345][ T5093] bridge_slave_0: entered promiscuous mode [ 59.018908][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.026038][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.033283][ T5093] bridge_slave_1: entered allmulticast mode [ 59.040623][ T5093] bridge_slave_1: entered promiscuous mode [ 59.048615][ T5096] team0: Port device team_slave_1 added [ 59.055081][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.062596][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.071060][ T5101] bridge_slave_1: entered allmulticast mode [ 59.078053][ T5101] bridge_slave_1: entered promiscuous mode [ 59.183280][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.190754][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.217201][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.232782][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.254580][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.264002][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 59.275584][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.283024][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.309493][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.323612][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.342382][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.349957][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.357255][ T5105] bridge_slave_0: entered allmulticast mode [ 59.363980][ T5105] bridge_slave_0: entered promiscuous mode [ 59.373116][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.405978][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.413624][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.421237][ T5105] bridge_slave_1: entered allmulticast mode [ 59.428428][ T5105] bridge_slave_1: entered promiscuous mode [ 59.469058][ T5101] team0: Port device team_slave_0 added [ 59.520281][ T5093] team0: Port device team_slave_0 added [ 59.528745][ T5101] team0: Port device team_slave_1 added [ 59.548252][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.560755][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.586106][ T5093] team0: Port device team_slave_1 added [ 59.595511][ T5096] hsr_slave_0: entered promiscuous mode [ 59.602534][ T5096] hsr_slave_1: entered promiscuous mode [ 59.649436][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.656397][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.683615][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.720361][ T5105] team0: Port device team_slave_0 added [ 59.731159][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.738514][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.764568][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.790610][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.797746][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.823685][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.836368][ T5105] team0: Port device team_slave_1 added [ 59.881211][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.888238][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.915197][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.938084][ T5100] Bluetooth: hci0: command tx timeout [ 59.947641][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.954985][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.962336][ T5108] bridge_slave_0: entered allmulticast mode [ 59.969583][ T5108] bridge_slave_0: entered promiscuous mode [ 59.993009][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.000069][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.026297][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.026358][ T5095] Bluetooth: hci1: command tx timeout [ 60.037278][ T5100] Bluetooth: hci2: command tx timeout [ 60.049933][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.056894][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.083620][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.104411][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.112075][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.119619][ T5108] bridge_slave_1: entered allmulticast mode [ 60.126331][ T5108] bridge_slave_1: entered promiscuous mode [ 60.158194][ T5101] hsr_slave_0: entered promiscuous mode [ 60.164503][ T5101] hsr_slave_1: entered promiscuous mode [ 60.171025][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.178831][ T5100] Bluetooth: hci3: command tx timeout [ 60.185516][ T5101] Cannot create hsr debugfs directory [ 60.233268][ T5093] hsr_slave_0: entered promiscuous mode [ 60.240847][ T5093] hsr_slave_1: entered promiscuous mode [ 60.246907][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.255047][ T5093] Cannot create hsr debugfs directory [ 60.260723][ T5100] Bluetooth: hci4: command tx timeout [ 60.315206][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.329130][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.342702][ T5105] hsr_slave_0: entered promiscuous mode [ 60.349791][ T5105] hsr_slave_1: entered promiscuous mode [ 60.356254][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.364110][ T5105] Cannot create hsr debugfs directory [ 60.493502][ T5108] team0: Port device team_slave_0 added [ 60.502232][ T5108] team0: Port device team_slave_1 added [ 60.632793][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.639953][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.666410][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.680332][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.687465][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.713425][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.884611][ T5108] hsr_slave_0: entered promiscuous mode [ 60.891903][ T5108] hsr_slave_1: entered promiscuous mode [ 60.901361][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.909142][ T5108] Cannot create hsr debugfs directory [ 60.917037][ T5096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.946164][ T5096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.957760][ T5096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.970633][ T5096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.053998][ T5101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.065987][ T5101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.076934][ T5101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.123133][ T5101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.196151][ T5093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.215003][ T5093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.225316][ T5093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.252601][ T5093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.345422][ T5105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.357009][ T5105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.372856][ T5105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.383742][ T5105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.510430][ T5108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.522572][ T5108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.533570][ T5108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.546068][ T5108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.562079][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.604635][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.650775][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.692178][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.745164][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.752543][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.764464][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.771591][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.791934][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.804238][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.811450][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.845164][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.852302][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.902020][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.923246][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.961661][ T5096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.977689][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.003750][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.011294][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.020156][ T5100] Bluetooth: hci0: command tx timeout [ 62.060104][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.067344][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.097806][ T5100] Bluetooth: hci2: command tx timeout [ 62.099019][ T5095] Bluetooth: hci1: command tx timeout [ 62.165537][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.200122][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.245174][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.252397][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.265077][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.272300][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.281675][ T5095] Bluetooth: hci3: command tx timeout [ 62.330777][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.348413][ T5095] Bluetooth: hci4: command tx timeout [ 62.392748][ T5093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.435430][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.442635][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.452191][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.459363][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.484670][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.508953][ T5105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.568705][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.783560][ T5096] veth0_vlan: entered promiscuous mode [ 62.860254][ T5101] veth0_vlan: entered promiscuous mode [ 62.918563][ T5101] veth1_vlan: entered promiscuous mode [ 62.941464][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.966474][ T5096] veth1_vlan: entered promiscuous mode [ 63.014286][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.064380][ T5096] veth0_macvtap: entered promiscuous mode [ 63.092017][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.114495][ T5096] veth1_macvtap: entered promiscuous mode [ 63.124893][ T5101] veth0_macvtap: entered promiscuous mode [ 63.150962][ T5093] veth0_vlan: entered promiscuous mode [ 63.186231][ T5101] veth1_macvtap: entered promiscuous mode [ 63.213942][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.232867][ T5093] veth1_vlan: entered promiscuous mode [ 63.249753][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.295223][ T5096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.306322][ T5096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.316925][ T5096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.326770][ T5096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.361756][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.377053][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.390259][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.406396][ T5093] veth0_macvtap: entered promiscuous mode [ 63.415726][ T5108] veth0_vlan: entered promiscuous mode [ 63.441235][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.453153][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.469861][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.483237][ T5101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.492516][ T5101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.501382][ T5101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.510165][ T5101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.571213][ T5093] veth1_macvtap: entered promiscuous mode [ 63.582807][ T5108] veth1_vlan: entered promiscuous mode [ 63.630404][ T5105] veth0_vlan: entered promiscuous mode [ 63.673432][ T5105] veth1_vlan: entered promiscuous mode [ 63.709813][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.723382][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.733259][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.743700][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.755091][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.766065][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.779392][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.789855][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.800664][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.811636][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.843669][ T5093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.856199][ T5093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.867759][ T5093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.876476][ T5093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.935533][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.951789][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.952880][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.974415][ T5105] veth0_macvtap: entered promiscuous mode [ 63.977769][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.006057][ T5108] veth0_macvtap: entered promiscuous mode [ 64.019050][ T5105] veth1_macvtap: entered promiscuous mode [ 64.028716][ T5108] veth1_macvtap: entered promiscuous mode [ 64.086062][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.099089][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.109648][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.113461][ T5095] Bluetooth: hci0: command tx timeout [ 64.120527][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.135682][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.146192][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.158064][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.169628][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.180329][ T5095] Bluetooth: hci1: command tx timeout [ 64.185932][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.196790][ T5095] Bluetooth: hci2: command tx timeout [ 64.203410][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.213926][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.224060][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.235822][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.247874][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.276657][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.287692][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.290852][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.305569][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.316017][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.326800][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.336870][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.353334][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.363517][ T5095] Bluetooth: hci3: command tx timeout [ 64.372311][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.383866][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.394975][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.409061][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.419807][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.430222][ T5095] Bluetooth: hci4: command tx timeout [ 64.431333][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.446664][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.457055][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.468359][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.478625][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.489266][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.501085][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.514584][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.526892][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.535959][ T5105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.545386][ T5105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.559653][ T5105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.569522][ T5105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.585089][ T5108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.594106][ T5108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.606629][ T5108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.616790][ T5108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.658975][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.666811][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.785999][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.795482][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.885433][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.911778][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.021747][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.063492][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.081015][ T2482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.094535][ T2482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.129432][ T5177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.129963][ T5179] loop1: detected capacity change from 0 to 256 [ 65.150026][ T5179] ======================================================= [ 65.150026][ T5179] WARNING: The mand mount option has been deprecated and [ 65.150026][ T5179] and is ignored by this kernel. Remove the mand [ 65.150026][ T5179] option from the mount to silence this warning. [ 65.150026][ T5179] ======================================================= [ 65.245548][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.256335][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.286506][ T5179] FAT-fs (loop1): Directory bread(block 64) failed [ 65.324020][ T5179] FAT-fs (loop1): Directory bread(block 65) failed [ 65.354760][ T5179] FAT-fs (loop1): Directory bread(block 66) failed [ 65.383318][ T5181] loop3: detected capacity change from 0 to 64 [ 65.385963][ T5179] FAT-fs (loop1): Directory bread(block 67) failed [ 65.397665][ T5143] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.403298][ T5179] FAT-fs (loop1): Directory bread(block 68) failed [ 65.412933][ T5179] FAT-fs (loop1): Directory bread(block 69) failed [ 65.427018][ T5179] FAT-fs (loop1): Directory bread(block 70) failed [ 65.434820][ T5179] FAT-fs (loop1): Directory bread(block 71) failed [ 65.526821][ T5179] FAT-fs (loop1): Directory bread(block 72) failed [ 65.577756][ T5179] FAT-fs (loop1): Directory bread(block 73) failed [ 65.627316][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 65.634208][ T5184] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6'. [ 65.666904][ T5143] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 65.685942][ T5143] usb 3-1: can't read configurations, error -61 [ 65.705933][ T5188] loop0: detected capacity change from 0 to 64 [ 65.708713][ T5187] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 65.877254][ T5143] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 65.903996][ T5191] loop1: detected capacity change from 0 to 8 [ 65.911080][ T5191] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 66.138630][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 66.169681][ T5143] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 66.195806][ T5143] usb 3-1: can't read configurations, error -61 [ 66.221914][ T5143] usb usb3-port1: attempt power cycle [ 66.260610][ T5095] Bluetooth: hci1: command tx timeout [ 66.260662][ T5100] Bluetooth: hci2: command tx timeout [ 66.376542][ T5181] loop3: detected capacity change from 0 to 32768 [ 66.392293][ T5181] btrfs: Deprecated parameter 'usebackuproot' [ 66.401392][ T5181] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 66.417990][ T5100] Bluetooth: hci3: command tx timeout [ 66.427864][ T5181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4 (5181) [ 66.497701][ T5100] Bluetooth: hci4: command tx timeout [ 66.554476][ T5181] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.566133][ T5181] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 66.576187][ T5181] BTRFS info (device loop3): using free-space-tree [ 66.627811][ T5196] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9'. [ 66.687930][ T5143] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 66.773812][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 66.795684][ T5143] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 66.822620][ T5193] loop4: detected capacity change from 0 to 32768 [ 66.852205][ T5193] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8 (5193) [ 66.886386][ T5143] usb 3-1: can't read configurations, error -61 [ 66.926123][ T5193] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 66.942645][ T53] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x12a9a9fe level 0 [ 66.973451][ T5193] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 67.028561][ T5181] BTRFS warning (device loop3): couldn't read tree root [ 67.035579][ T5181] BTRFS warning (device loop3): try to load backup roots slot 1 [ 67.056322][ T135] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 67.077665][ T5193] BTRFS info (device loop4): using free-space-tree [ 67.107280][ T5143] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 67.119710][ T5181] BTRFS warning (device loop3): couldn't read tree root [ 67.135086][ T5181] BTRFS warning (device loop3): try to load backup roots slot 2 [ 67.168546][ T135] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 67.189167][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 67.194379][ T5181] BTRFS warning (device loop3): couldn't read tree root [ 67.205790][ T5143] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 67.223962][ T5181] BTRFS warning (device loop3): try to load backup roots slot 3 [ 67.243679][ T5143] usb 3-1: can't read configurations, error -61 [ 67.251342][ T5143] usb usb3-port1: unable to enumerate USB device [ 67.290732][ T5181] BTRFS info (device loop3): rebuilding free space tree [ 67.400542][ T5181] BTRFS info (device loop3): checking UUID tree [ 67.446176][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.457908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.502535][ T5193] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.847474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.980879][ T5108] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 68.095674][ T5252] capability: warning: `syz.0.14' uses deprecated v2 capabilities in a way that may be insecure [ 68.106432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.250648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.260114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.282032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.418044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 68.457789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.528276][ T5250] loop1: detected capacity change from 0 to 8192 [ 68.548037][ T5258] loop0: detected capacity change from 0 to 2048 [ 68.569503][ T5142] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 68.587817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.627698][ T5250] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 68.635736][ T5258] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 68.797316][ T5142] usb 3-1: Using ep0 maxpacket: 32 [ 68.811055][ T5142] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.825421][ T5142] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 68.873811][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.928442][ T5142] usb 3-1: config 0 descriptor?? [ 68.981888][ T5142] usb 3-1: bad CDC descriptors [ 69.024282][ T5105] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.216759][ T5142] usb 3-1: USB disconnect, device number 6 [ 69.252777][ T5273] netlink: 108 bytes leftover after parsing attributes in process `syz.1.19'. [ 69.311235][ T5275] loop1: detected capacity change from 0 to 64 [ 69.801315][ T5282] loop0: detected capacity change from 0 to 8 [ 69.838325][ T5282] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 69.895564][ T5282] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.17'. [ 69.955647][ T5284] loop2: detected capacity change from 0 to 64 [ 70.410506][ T5290] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 70.686438][ T5280] loop3: detected capacity change from 0 to 32768 [ 70.692532][ T30] audit: type=1326 audit(1719974673.374:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.26" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aa5175b99 code=0x0 [ 70.708943][ T5280] jfs: Unrecognized mount option "inteority" or missing value [ 70.776352][ T30] audit: type=1326 audit(1719974673.374:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.26" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aa5175b99 code=0x0 [ 70.862757][ T30] audit: type=1326 audit(1719974673.424:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.26" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f9aa5175b99 code=0x0 [ 71.166037][ T5301] loop3: detected capacity change from 0 to 1024 [ 71.275951][ T5284] loop2: detected capacity change from 0 to 32768 [ 71.305687][ T5284] btrfs: Deprecated parameter 'usebackuproot' [ 71.335388][ T5284] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 71.372230][ T5284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.22 (5284) [ 71.446914][ T5284] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.487265][ T5284] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 71.496014][ T5284] BTRFS info (device loop2): using free-space-tree [ 71.649441][ T53] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x12a9a9fe level 0 [ 71.656842][ T5296] loop4: detected capacity change from 0 to 32768 [ 71.700312][ T5284] BTRFS warning (device loop2): couldn't read tree root [ 71.701649][ T5296] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.27 (5296) [ 71.727557][ T5284] BTRFS warning (device loop2): try to load backup roots slot 1 [ 71.735742][ T2482] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 71.775718][ T5284] BTRFS warning (device loop2): couldn't read tree root [ 71.784840][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.798174][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.819675][ T5284] BTRFS warning (device loop2): try to load backup roots slot 2 [ 71.862051][ T2482] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 71.885658][ T5296] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 71.933369][ T5284] BTRFS warning (device loop2): couldn't read tree root [ 71.942607][ T5296] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 71.957059][ T5284] BTRFS warning (device loop2): try to load backup roots slot 3 [ 71.983420][ T5296] BTRFS info (device loop4): using free-space-tree [ 72.021066][ T5284] BTRFS info (device loop2): rebuilding free space tree [ 72.086384][ T5284] BTRFS info (device loop2): checking UUID tree [ 72.254390][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 72.661678][ T5351] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.784469][ T5351] binder: 5346:5351 ioctl 4018620d 0 returned -22 [ 73.360115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.157797][ T5101] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.348963][ T932] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.527305][ T5370] loop1: detected capacity change from 0 to 256 [ 74.550149][ T5370] FAT-fs (loop1): Unrecognized mount option "0000000000000000000000000000000000000000000" or missing value [ 74.572202][ T932] usb 4-1: Using ep0 maxpacket: 32 [ 74.594635][ T932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.649008][ T932] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 74.682457][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.717730][ T5376] netlink: 108 bytes leftover after parsing attributes in process `syz.2.35'. [ 74.738490][ T932] usb 4-1: config 0 descriptor?? [ 74.771090][ T932] usb 4-1: bad CDC descriptors [ 74.771659][ T5376] loop2: detected capacity change from 0 to 64 [ 74.944477][ T5105] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 75.003187][ T5097] usb 4-1: USB disconnect, device number 2 [ 75.285762][ T5384] loop1: detected capacity change from 0 to 8192 [ 75.427395][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.574354][ T5394] loop1: detected capacity change from 0 to 8192 [ 75.601148][ T5396] netlink: 87 bytes leftover after parsing attributes in process `syz.2.42'. [ 75.601495][ T5394] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 75.633638][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.645941][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.657466][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.684443][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.697683][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.723979][ T5361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.857253][ T47] usb 5-1: device descriptor read/64, error -71 [ 75.976635][ T5401] loop1: detected capacity change from 0 to 128 [ 76.416883][ T5143] usb 1-1: USB disconnect, device number 2 [ 76.730882][ T30] audit: type=1804 audit(1719974679.434:5): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.44" name="/newroot/11/file2/bus" dev="loop1" ino=1048596 res=1 errno=0 [ 76.895929][ T30] audit: type=1804 audit(1719974679.494:6): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.44" name="/newroot/11/file2/bus" dev="loop1" ino=1048596 res=1 errno=0 [ 76.929936][ T5413] FAULT_INJECTION: forcing a failure. [ 76.929936][ T5413] name failslab, interval 1, probability 0, space 0, times 1 [ 76.932371][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.959063][ T929] cfg80211: failed to load regulatory.db [ 76.978576][ T5413] CPU: 1 UID: 0 PID: 5413 Comm: syz.2.46 Not tainted 6.10.0-rc6-next-20240702-syzkaller #0 [ 76.988614][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 76.998684][ T5413] Call Trace: [ 77.001961][ T5413] [ 77.004885][ T5413] dump_stack_lvl+0x241/0x360 [ 77.009567][ T5413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.014766][ T5413] ? __pfx__printk+0x10/0x10 [ 77.019354][ T5413] ? __pfx___might_resched+0x10/0x10 [ 77.024635][ T5413] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.030613][ T5413] should_fail_ex+0x3b0/0x4e0 [ 77.035300][ T5413] ? mas_alloc_nodes+0x26c/0x840 [ 77.040235][ T5413] should_failslab+0x9/0x20 [ 77.044741][ T5413] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 77.050118][ T5413] mas_alloc_nodes+0x26c/0x840 [ 77.054890][ T5413] mas_preallocate+0xfca/0x1730 [ 77.059751][ T5413] ? __pfx_mas_preallocate+0x10/0x10 [ 77.065036][ T5413] ? __raw_spin_lock_init+0x45/0x100 [ 77.070316][ T5413] ? __mas_set_range+0x133/0x3c0 [ 77.075259][ T5413] mmap_region+0x132c/0x2090 [ 77.079863][ T5413] ? __pfx_mmap_region+0x10/0x10 [ 77.084801][ T5413] ? cap_mmap_addr+0x163/0x2c0 [ 77.089564][ T5413] ? __get_unmapped_area+0x2f0/0x360 [ 77.094848][ T5413] do_mmap+0x8ad/0xfa0 [ 77.098921][ T5413] ? __pfx_do_mmap+0x10/0x10 [ 77.103505][ T5413] ? __pfx_ima_file_mmap+0x10/0x10 [ 77.108613][ T5413] vm_mmap_pgoff+0x1dd/0x3d0 [ 77.113206][ T5413] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 77.118313][ T5413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.124637][ T5413] ? do_syscall_64+0x100/0x230 [ 77.129399][ T5413] ? ksys_mmap_pgoff+0xdf/0x720 [ 77.134250][ T5413] ? __x64_sys_mmap+0x7f/0x140 [ 77.139020][ T5413] do_syscall_64+0xf3/0x230 [ 77.143521][ T5413] ? clear_bhb_loop+0x35/0x90 [ 77.148206][ T5413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.154128][ T5413] RIP: 0033:0x7f71e3175bd3 [ 77.158549][ T5413] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 77.178153][ T5413] RSP: 002b:00007f71e3fcae28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 77.186567][ T5413] RAX: ffffffffffffffda RBX: 000000000000cf18 RCX: 00007f71e3175bd3 [ 77.194536][ T5413] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 77.202946][ T5413] RBP: 000000002000d002 R08: 00000000ffffffff R09: 0000000000000000 [ 77.210909][ T5413] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 77.218873][ T5413] R13: 00007f71e3fcaf00 R14: 00007f71e3fcaec0 R15: 000000002000cfc0 [ 77.226853][ T5413] [ 77.404966][ T47] usb 5-1: device descriptor read/64, error -71 [ 77.453899][ T5401] tmpfs: Unknown parameter 'mpocp/l' [ 77.473639][ T5417] syz.1.44: attempt to access beyond end of device [ 77.473639][ T5417] loop1: rw=0, sector=97, nr_sectors = 944 limit=128 [ 77.527797][ T47] usb usb5-port1: attempt power cycle [ 77.546969][ T5412] syz.1.44: attempt to access beyond end of device [ 77.546969][ T5412] loop1: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 77.578511][ T5418] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 77.578511][ T5418] SÃȘØÈžZ§6ŸÂ' [ 77.738119][ T5143] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.848920][ T5426] loop1: detected capacity change from 0 to 64 [ 77.939871][ T5143] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.961285][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.962707][ T5143] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.021942][ T47] usb 5-1: device descriptor read/8, error -71 [ 78.037743][ T5143] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.046826][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.125498][ T5430] warning: `syz.3.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.137657][ T5361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.156769][ T5431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.51'. [ 78.200888][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 78.224171][ T5433] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 78.264116][ T5420] loop2: detected capacity change from 0 to 32768 [ 78.292572][ T5420] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.48 (5420) [ 78.316084][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.342221][ T5143] usb 1-1: USB disconnect, device number 3 [ 78.393577][ T47] usb 5-1: device descriptor read/8, error -71 [ 78.402872][ T5420] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 78.454271][ T5420] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 78.501883][ T5420] BTRFS info (device loop2): using free-space-tree [ 78.506925][ T5437] netlink: 108 bytes leftover after parsing attributes in process `syz.1.52'. [ 78.532498][ T47] usb usb5-port1: unable to enumerate USB device [ 78.565761][ T5437] loop1: detected capacity change from 0 to 64 [ 78.728223][ T5107] udevd[5107]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.067256][ T47] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.952003][ T47] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 79.966273][ T47] usb 5-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 79.983490][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.998960][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.010249][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.020802][ T47] usb 5-1: SerialNumber: syz [ 80.311573][ T47] usb 5-1: bad CDC descriptors [ 80.598935][ T47] usb 5-1: USB disconnect, device number 6 [ 81.733003][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 81.853401][ T5101] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.913203][ T5508] loop0: detected capacity change from 0 to 512 [ 81.921970][ T5507] loop4: detected capacity change from 0 to 2048 [ 81.975172][ T929] IPVS: starting estimator thread 0... [ 82.007207][ T5507] EXT4-fs error (device loop4): __ext4_fill_super:5449: inode #2: comm syz.4.64: casefold flag without casefold feature [ 82.065483][ T5507] EXT4-fs (loop4): get root inode failed [ 82.088874][ T5514] IPVS: using max 19 ests per chain, 45600 per kthread [ 82.107971][ T5507] EXT4-fs (loop4): mount failed [ 82.445532][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 83.490359][ T5539] loop0: detected capacity change from 0 to 128 [ 83.544988][ T5539] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.613085][ T5539] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.437817][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.519722][ T5096] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.536091][ T5551] netlink: 4544 bytes leftover after parsing attributes in process `syz.2.77'. [ 84.557210][ T5551] netlink: 4544 bytes leftover after parsing attributes in process `syz.2.77'. [ 84.680316][ T9] usb 2-1: config 1 has an invalid interface descriptor of length 5, skipping [ 84.707443][ T9] usb 2-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 84.735527][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.768566][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.799876][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.032539][ T9] usb 2-1: SerialNumber: syz [ 85.055476][ T5551] loop2: detected capacity change from 0 to 16384 [ 85.123581][ T5551] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 85.542125][ T9] usb 2-1: bad CDC descriptors [ 85.676324][ T5551] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 85.803984][ T9] usb 2-1: USB disconnect, device number 2 [ 85.962396][ T5142] IPVS: starting estimator thread 0... [ 85.998783][ T5565] loop4: detected capacity change from 0 to 4096 [ 86.078212][ T5567] IPVS: using max 21 ests per chain, 50400 per kthread [ 86.137995][ T5574] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.241167][ T5553] loop0: detected capacity change from 0 to 32768 [ 86.399675][ T5565] 9pnet_fd: Insufficient options for proto=fd [ 86.504696][ T5553] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 87.659513][ T5593] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 87.668173][ T5593] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.209365][ T5553] XFS (loop0): Ending clean mount [ 88.302741][ T5096] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 88.367860][ T5097] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.469513][ T5598] loop2: detected capacity change from 0 to 64 [ 88.607297][ T5097] usb 2-1: device descriptor read/64, error -71 [ 88.674133][ T5605] loop4: detected capacity change from 0 to 1024 [ 88.897420][ T5097] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.177333][ T5097] usb 2-1: device descriptor read/64, error -71 [ 89.902379][ T12] hfsplus: b-tree write err: -5, ino 4 [ 90.001959][ T5097] usb usb2-port1: attempt power cycle [ 90.110935][ T5623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.95'. [ 90.155854][ T5623] loop1: detected capacity change from 0 to 8 [ 90.172786][ T5623] squashfs: Unknown parameter '€' [ 90.211696][ T5623] kAFS: No cell specified [ 90.268362][ T5142] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 90.397352][ T5137] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.418840][ T5634] loop1: detected capacity change from 0 to 4096 [ 90.468687][ T5635] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.479910][ T5143] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.487537][ T5142] usb 3-1: Using ep0 maxpacket: 32 [ 90.500292][ T5142] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.513446][ T5142] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.523710][ T5142] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 90.533291][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.560661][ T5142] hub 3-1:4.0: USB hub found [ 90.590005][ T5137] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 90.615540][ T5137] usb 4-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 90.639079][ T5137] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.654656][ T5636] 9pnet_fd: Insufficient options for proto=fd [ 90.675049][ T5137] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.686108][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.697519][ T5137] usb 4-1: SerialNumber: syz [ 90.702421][ T5143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.729340][ T5143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.743604][ T5143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.753151][ T5143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.766768][ T5143] usb 1-1: Product: syz [ 90.774589][ T5143] usb 1-1: Manufacturer: syz [ 90.783746][ T5143] usb 1-1: SerialNumber: syz [ 90.804960][ T5614] loop2: detected capacity change from 0 to 1024 [ 90.833656][ T5614] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.846682][ T5614] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 90.857564][ T5614] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.865640][ T5614] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 90.879574][ T5614] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 90.898040][ T5614] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 90.917262][ T5137] usb 4-1: bad CDC descriptors [ 90.935485][ T5614] EXT4-fs (loop2): 1 truncate cleaned up [ 90.943315][ T5614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.975730][ T5142] hub 3-1:4.0: 2 ports detected [ 91.002782][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.010530][ T5142] usb 3-1: selecting invalid altsetting 1 [ 91.016276][ T5142] hub 3-1:4.0: Using single TT (err -22) [ 91.180807][ T5142] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 91.189801][ T5142] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 91.221877][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.233358][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.244724][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.257437][ T5142] usb 3-1: USB disconnect, device number 7 [ 91.266783][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.286093][ T5622] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 91.455495][ T5143] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 91.463814][ T5143] cdc_ncm 1-1:1.0: bind() failure [ 91.475575][ T5143] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 91.486894][ T5143] cdc_ncm 1-1:1.1: bind() failure [ 91.499487][ T5143] usb 1-1: USB disconnect, device number 4 [ 91.568953][ T5142] usb 5-1: USB disconnect, device number 7 [ 91.806952][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.964305][ T5646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 92.124363][ T5653] loop1: detected capacity change from 0 to 4096 [ 92.171289][ T5653] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 92.312718][ T30] audit: type=1800 audit(1719974695.014:7): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 92.333763][ T5142] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.141084][ T47] usb 4-1: USB disconnect, device number 3 [ 93.167287][ T5653] loop1: detected capacity change from 4096 to 0 [ 93.177522][ T5661] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.226219][ T5653] syz.1.102: attempt to access beyond end of device [ 93.226219][ T5653] loop1: rw=0, sector=2816, nr_sectors = 8 limit=0 [ 94.285347][ T5666] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 94.558221][ T5653] syz.1.102 (5653) used greatest stack depth: 18936 bytes left [ 94.655559][ T5680] loop2: detected capacity change from 0 to 256 [ 94.665008][ T5680] FAT-fs (loop2): Unrecognized mount option "shortname=win95ocharset=macinuit" or missing value [ 94.684801][ T5680] loop2: detected capacity change from 0 to 256 [ 95.701176][ T5093] syz-executor: attempt to access beyond end of device [ 95.701176][ T5093] loop1: rw=0, sector=768, nr_sectors = 8 limit=0 [ 95.765225][ T5093] ntfs3: loop1: failed to read volume at offset 0x60000 [ 95.863536][ T5700] Zero length message leads to an empty skb [ 95.960580][ T53] kworker/u8:3: attempt to access beyond end of device [ 95.960580][ T53] loop1: rw=0, sector=768, nr_sectors = 8 limit=0 [ 95.987768][ T5137] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.117749][ T5704] loop2: detected capacity change from 0 to 1024 [ 96.178594][ T5704] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 96.229559][ T53] ntfs3: loop1: failed to read volume at offset 0x60000 [ 96.257455][ T5137] usb 1-1: Using ep0 maxpacket: 8 [ 96.312094][ T5704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 96.324485][ T5704] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 96.339248][ T5704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.572747][ T5137] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 96.587861][ T5379] syz.1.38: attempt to access beyond end of device [ 96.587861][ T5379] loop1: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 96.603137][ T5379] Buffer I/O error on dev loop1, logical block 32, lost sync page write [ 96.614245][ T5379] ntfs3: loop1: ino=3, ntfs_set_state failed, -5. [ 96.631827][ T5137] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 96.645361][ T5137] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 96.655715][ T5137] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 96.666011][ T5137] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.680256][ T5137] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.689613][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.704767][ T5137] usbtmc 1-1:16.0: bulk endpoints not found [ 96.753854][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.757161][ T5379] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 96.797257][ T5379] syz.1.38: attempt to access beyond end of device [ 96.797257][ T5379] loop1: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 96.842134][ T5379] Buffer I/O error on dev loop1, logical block 32, lost sync page write [ 96.879267][ T5379] ntfs3: loop1: ino=3, ntfs_set_state failed, -5. [ 96.890200][ T5379] syz.1.38: attempt to access beyond end of device [ 96.890200][ T5379] loop1: rw=0, sector=256, nr_sectors = 8 limit=0 [ 96.922034][ T2877] kworker/u8:12: attempt to access beyond end of device [ 96.922034][ T2877] loop1: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 96.953537][ T2877] Buffer I/O error on dev loop1, logical block 32, lost sync page write [ 96.963127][ T5719] sctp: [Deprecated]: syz.2.117 (pid 5719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.963127][ T5719] Use struct sctp_sack_info instead [ 96.969666][ T2877] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -5. [ 97.013413][ T5379] syz.1.38: attempt to access beyond end of device [ 97.013413][ T5379] loop1: rw=0, sector=256, nr_sectors = 8 limit=0 [ 97.036978][ T5379] syz.1.38: attempt to access beyond end of device [ 97.036978][ T5379] loop1: rw=0, sector=256, nr_sectors = 8 limit=0 [ 98.033039][ T2866] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.266790][ T2866] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.400945][ T5743] loop2: detected capacity change from 0 to 512 [ 98.443223][ T5743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.508612][ T2866] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.535428][ T5743] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e802c018, mo2=0002] [ 98.568575][ T5748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 98.578287][ T5743] System zones: 0-2, 18-18, 34-34 [ 98.597414][ T47] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.610171][ T5743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.631638][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.642051][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.656893][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.667682][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.675446][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.675974][ T2866] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.682890][ T5743] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.709491][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.769704][ T5743] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.127: corrupted xattr block 19: invalid ea_ino [ 98.800354][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.817575][ T47] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.834787][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.854605][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.881355][ T5710] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 98.926660][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.976458][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.988851][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.170708][ T5137] usb 5-1: USB disconnect, device number 9 [ 99.284139][ T2866] bridge_slave_1: left allmulticast mode [ 99.315037][ T2866] bridge_slave_1: left promiscuous mode [ 99.322661][ T2866] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.340044][ T47] usb 1-1: USB disconnect, device number 5 [ 99.364409][ T2866] bridge_slave_0: left allmulticast mode [ 99.373147][ T2866] bridge_slave_0: left promiscuous mode [ 99.529149][ T2866] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.071782][ T5759] loop2: detected capacity change from 0 to 1024 [ 100.080134][ T5759] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 100.119612][ T5759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 100.128292][ T5759] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 100.139846][ T5759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.453489][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.600486][ T5137] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 100.737288][ T5095] Bluetooth: hci0: command tx timeout [ 100.789339][ T5142] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.816498][ T5137] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.844606][ T5137] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.854614][ T5137] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.863787][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.883730][ T5710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.987553][ T5142] usb 4-1: Using ep0 maxpacket: 8 [ 100.997895][ T5142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.026556][ T5142] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 101.052763][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.105582][ T5142] usb 4-1: config 0 descriptor?? [ 101.126857][ T5142] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 101.262085][ T2866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.282729][ T2866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.304219][ T2866] bond0 (unregistering): Released all slaves [ 101.403067][ T5142] gspca_vc032x: reg_r err -32 [ 101.424661][ T5142] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 101.814237][ T47] usb 5-1: USB disconnect, device number 10 [ 102.024233][ T5750] chnl_net:caif_netlink_parms(): no params data found [ 102.140753][ T2866] hsr_slave_0: left promiscuous mode [ 102.178905][ T2866] hsr_slave_1: left promiscuous mode [ 102.197370][ T2866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.215403][ T2866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.231652][ T2866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.248283][ T5143] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.266444][ T2866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.348360][ T2866] veth1_macvtap: left promiscuous mode [ 102.363866][ T2866] veth0_macvtap: left promiscuous mode [ 102.370654][ T2866] veth1_vlan: left promiscuous mode [ 102.376864][ T2866] veth0_vlan: left promiscuous mode [ 102.467341][ T5143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.490530][ T5143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.518862][ T5143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.544572][ T5143] usb 1-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 102.580227][ T5143] usb 1-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 102.611095][ T5143] usb 1-1: config 1 interface 1 has no altsetting 1 [ 102.628482][ T5143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.652686][ T5143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.675442][ T5143] usb 1-1: Product: syz [ 102.688527][ T5143] usb 1-1: Manufacturer: syz [ 102.702590][ T5143] usb 1-1: SerialNumber: syz [ 102.731315][ T5143] usb 1-1: selecting invalid altsetting 1 [ 102.817385][ T5095] Bluetooth: hci0: command tx timeout [ 103.415019][ T2866] team0 (unregistering): Port device team_slave_1 removed [ 103.453545][ T5145] usb 4-1: USB disconnect, device number 4 [ 103.559653][ T2866] team0 (unregistering): Port device team_slave_0 removed [ 104.418784][ T5145] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.648626][ T5145] usb 3-1: Using ep0 maxpacket: 8 [ 104.665332][ T5145] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 104.684032][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.684091][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 104.721219][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 104.740910][ T5145] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 104.752942][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.772325][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 104.784984][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 104.818669][ T5145] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 104.843458][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.856362][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 104.856415][ T5145] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 104.861521][ T5145] usb 3-1: string descriptor 0 read error: -22 [ 104.861685][ T5145] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.861710][ T5145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.891352][ T5145] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 104.919565][ T5095] Bluetooth: hci0: command tx timeout [ 105.055878][ T5143] cdc_ncm 1-1:1.0: bind() failure [ 105.079653][ T5143] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 105.134215][ T5143] cdc_ncm 1-1:1.1: bind() failure [ 105.519705][ T5143] usb 1-1: USB disconnect, device number 6 [ 106.458851][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.466490][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.474886][ T5750] bridge_slave_0: entered allmulticast mode [ 107.326710][ T5095] Bluetooth: hci0: command tx timeout [ 107.579074][ T5750] bridge_slave_0: entered promiscuous mode [ 107.855933][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.889340][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.896698][ T5750] bridge_slave_1: entered allmulticast mode [ 107.919205][ T5750] bridge_slave_1: entered promiscuous mode [ 107.948796][ T5870] loop0: detected capacity change from 0 to 512 [ 107.965367][ T5870] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.982082][ T5870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.056621][ T5870] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2856: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 108.080864][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.101191][ T5870] EXT4-fs (loop0): 1 truncate cleaned up [ 108.128727][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.134221][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.268045][ T5870] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 108.312997][ T5750] team0: Port device team_slave_0 added [ 108.335365][ T5750] team0: Port device team_slave_1 added [ 108.385216][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.385276][ T2866] IPVS: stop unused estimator thread 0... [ 108.411666][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.466555][ T5096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.502007][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.544681][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.574289][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.873880][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.898321][ T47] usb 3-1: USB disconnect, device number 8 [ 109.379159][ T5145] libceph: connect (1)[c::]:6789 error -101 [ 109.386798][ T5145] libceph: mon0 (1)[c::]:6789 connect error [ 109.570629][ T5750] hsr_slave_0: entered promiscuous mode [ 109.580833][ T5901] ceph: No mds server is up or the cluster is laggy [ 109.623097][ T5750] hsr_slave_1: entered promiscuous mode [ 109.649509][ T5143] libceph: connect (1)[c::]:6789 error -101 [ 109.662554][ T5750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.677442][ T5143] libceph: mon0 (1)[c::]:6789 connect error [ 109.691590][ T5750] Cannot create hsr debugfs directory [ 109.919658][ T5899] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.925989][ T5899] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 110.127053][ T5899] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.172907][ T5899] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 110.328964][ T5899] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.362360][ T5899] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 110.511874][ T5899] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.553158][ T5899] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 113.572366][ T5899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.585727][ T5899] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 113.704772][ T5750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.739051][ T5750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.770502][ T5750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.808310][ T5750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.111802][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.185797][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.255914][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.263124][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.329004][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.336178][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.497758][ T5957] loop2: detected capacity change from 0 to 32768 [ 114.550935][ T5957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.171 (5957) [ 114.657618][ T5957] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.747472][ T5957] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 114.756178][ T5957] BTRFS info (device loop2): using free-space-tree [ 114.985870][ T5960] loop4: detected capacity change from 0 to 32768 [ 115.053949][ T5960] BTRFS: device /dev/loop4 (7:4) using temp-fsid 8254031f-87b2-4867-9010-0d2b471f0de4 [ 115.143955][ T5960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.172 (5960) [ 115.257581][ T5960] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.305543][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.319891][ T5960] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 115.355600][ T5960] BTRFS info (device loop4): using free-space-tree [ 115.905756][ T5105] BTRFS info (device loop4): last unmount of filesystem 8254031f-87b2-4867-9010-0d2b471f0de4 [ 115.939546][ T5750] veth0_vlan: entered promiscuous mode [ 116.023288][ T5101] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.025175][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 116.070351][ T5750] veth1_vlan: entered promiscuous mode [ 116.206758][ T5750] veth0_macvtap: entered promiscuous mode [ 116.226671][ T5750] veth1_macvtap: entered promiscuous mode [ 116.246879][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.298648][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.342324][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.374147][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.391892][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.460581][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.470641][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.481645][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.495310][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.535780][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.622582][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.633176][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.667532][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.101528][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.112964][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.297280][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.346797][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.436215][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.486124][ T5750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.553055][ T5750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.587708][ T5750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.596463][ T5750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.024318][ T5145] libceph: connect (1)[c::]:6789 error -101 [ 119.047695][ T5145] libceph: mon0 (1)[c::]:6789 connect error [ 119.316046][ T5145] libceph: connect (1)[c::]:6789 error -101 [ 119.338525][ T5145] libceph: mon0 (1)[c::]:6789 connect error [ 119.438569][ T6087] loop4: detected capacity change from 0 to 8 [ 119.473984][ T6087] squashfs: Unknown parameter 'subj_type' [ 119.592958][ T6061] ceph: No mds server is up or the cluster is laggy [ 120.507299][ T5145] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 120.724146][ T5145] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 120.744085][ T5145] usb 5-1: config 0 has no interface number 0 [ 120.770380][ T5145] usb 5-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.820190][ T5145] usb 5-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.860542][ T5145] usb 5-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 120.880453][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.897591][ T932] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.785876][ T5145] usb 5-1: Product: syz [ 121.797649][ T5145] usb 5-1: Manufacturer: syz [ 121.807257][ T5145] usb 5-1: SerialNumber: syz [ 121.821721][ T5145] usb 5-1: config 0 descriptor?? [ 121.826769][ T5145] usb 5-1: Interface #216 referenced by multiple IADs [ 121.861539][ T5145] snd-usb-audio 5-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 121.923861][ T5406] udevd[5406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.977265][ T932] usb 3-1: Using ep0 maxpacket: 16 [ 121.994621][ T932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 122.005547][ T932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 122.030635][ T932] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.060739][ T5145] usb 5-1: USB disconnect, device number 11 [ 122.087951][ T932] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 122.111064][ T932] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 122.125464][ T932] usb 3-1: Product: syz [ 122.133135][ T932] usb 3-1: Manufacturer: syz [ 122.139625][ T932] usb 3-1: SerialNumber: syz [ 122.155767][ T932] usb 3-1: config 0 descriptor?? [ 122.172787][ T932] usb 3-1: NFC: intf ffff88802caa9000 id ffffffff8ecbbc40 [ 122.291077][ T2504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.563840][ T25] usb 3-1: USB disconnect, device number 9 [ 122.858832][ T6130] loop4: detected capacity change from 0 to 512 [ 122.882377][ T2504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.938441][ T6130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.000335][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.015089][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.031729][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.044496][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.055953][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.064339][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.079725][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.103900][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.114369][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.127492][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.138429][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.149674][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.198070][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.244502][ T2504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.346441][ T6148] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.476279][ T2504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.538016][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.761588][ T25] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 123.771126][ T25] usb 4-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 123.785906][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.808459][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.837517][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.864309][ T25] usb 4-1: SerialNumber: syz [ 123.959013][ T2504] bridge_slave_1: left allmulticast mode [ 123.985132][ T2504] bridge_slave_1: left promiscuous mode [ 124.027462][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.071665][ T2504] bridge_slave_0: left allmulticast mode [ 124.087847][ T2504] bridge_slave_0: left promiscuous mode [ 124.093660][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.101065][ T25] usb 4-1: bad CDC descriptors [ 124.374928][ T5097] usb 4-1: USB disconnect, device number 5 [ 124.570407][ T6186] Bluetooth: MGMT ver 1.23 [ 125.040582][ T30] audit: type=1326 audit(1719974727.744:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 125.097793][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.124762][ T30] audit: type=1326 audit(1719974727.764:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 125.173812][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.193940][ T30] audit: type=1326 audit(1719974727.784:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 125.218552][ T5095] Bluetooth: hci0: command tx timeout [ 125.237006][ T6206] loop0: detected capacity change from 0 to 128 [ 125.251520][ T30] audit: type=1326 audit(1719974727.784:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 125.303361][ T2504] bond0 (unregistering): Released all slaves [ 125.346712][ T30] audit: type=1326 audit(1719974727.784:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 125.452498][ T6206] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.779609][ T6206] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.467061][ T6135] chnl_net:caif_netlink_parms(): no params data found [ 126.537890][ T5096] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.637463][ T2504] hsr_slave_0: left promiscuous mode [ 126.689258][ T2504] hsr_slave_1: left promiscuous mode [ 126.714423][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.747382][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.784505][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.807667][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.924980][ T2504] veth1_macvtap: left promiscuous mode [ 126.952545][ T2504] veth0_macvtap: left promiscuous mode [ 126.975421][ T2504] veth1_vlan: left promiscuous mode [ 126.983685][ T2504] veth0_vlan: left promiscuous mode [ 127.298299][ T5095] Bluetooth: hci0: command tx timeout [ 127.406728][ T6254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.553630][ T6263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.727597][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.941411][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 127.948817][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.974907][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.985221][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.011178][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.027318][ T25] usb 1-1: config 0 descriptor?? [ 128.044577][ T25] hub 1-1:0.0: USB hub found [ 128.063369][ T2504] team0 (unregistering): Port device team_slave_1 removed [ 128.106650][ T2504] team0 (unregistering): Port device team_slave_0 removed [ 128.256328][ T25] hub 1-1:0.0: 1 port detected [ 128.462321][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.476846][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.722927][ T25] usb 1-1: USB disconnect, device number 7 [ 128.743631][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.755116][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.786511][ T6135] bridge_slave_0: entered allmulticast mode [ 128.813941][ T6135] bridge_slave_0: entered promiscuous mode [ 128.850186][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.880634][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.917534][ T6135] bridge_slave_1: entered allmulticast mode [ 128.934364][ T6285] loop2: detected capacity change from 0 to 2048 [ 128.946288][ T6135] bridge_slave_1: entered promiscuous mode [ 129.025767][ T6285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.071768][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.076216][ T6281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.229: bg 0: block 234: padding at end of block bitmap is not set [ 129.090712][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.140951][ T6281] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 129.212052][ T6135] team0: Port device team_slave_0 added [ 129.232677][ T6135] team0: Port device team_slave_1 added [ 129.262079][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.363194][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.383592][ T5095] Bluetooth: hci0: command tx timeout [ 129.398497][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.512041][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.555025][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.576985][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.596884][ T6313] loop0: detected capacity change from 0 to 512 [ 129.653494][ T6313] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 129.660365][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.978060][ T6322] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.183694][ T6135] hsr_slave_0: entered promiscuous mode [ 130.234232][ T6135] hsr_slave_1: entered promiscuous mode [ 130.247243][ T6135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.265158][ T6135] Cannot create hsr debugfs directory [ 131.706355][ T5095] Bluetooth: hci0: command tx timeout [ 132.147064][ T6354] loop2: detected capacity change from 0 to 128 [ 132.195418][ T6354] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.243876][ T6354] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.306355][ T6324] loop0: detected capacity change from 0 to 32768 [ 132.330130][ T6324] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.237 (6324) [ 132.393984][ T6324] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.464687][ T6324] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 132.479279][ T5101] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.495417][ T6324] BTRFS info (device loop0): using free-space-tree [ 132.675410][ T6379] loop4: detected capacity change from 0 to 256 [ 132.756593][ T6324] BTRFS info (device loop0): rebuilding free space tree [ 132.785741][ T6379] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 132.857331][ T6379] FAT-fs (loop4): Filesystem has been set read-only [ 133.027616][ T5096] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.221148][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.228172][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346959][ T6135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.422543][ T6135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.487884][ T6135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.524219][ T6412] loop2: detected capacity change from 0 to 512 [ 133.552229][ T6135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.580510][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 133.610064][ T6412] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.254: casefold flag without casefold feature [ 133.635784][ T6412] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.254: couldn't read orphan inode 15 (err -117) [ 133.670677][ T6412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.701824][ T6415] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.772309][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.779279][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.812742][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.817453][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 133.845299][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 133.863868][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.871116][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.875820][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 133.909633][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.954129][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.961339][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.968528][ T9] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 134.001759][ T9] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 134.030728][ T9] usb 5-1: Product: syz [ 134.053285][ T9] usb 5-1: Manufacturer: syz [ 134.076097][ T9] usb 5-1: SerialNumber: syz [ 134.096116][ T9] usb 5-1: config 0 descriptor?? [ 134.135132][ T9] usb 5-1: NFC: intf ffff8880696f6000 id ffffffff8ecbbc40 [ 134.365745][ T5145] usb 5-1: USB disconnect, device number 12 [ 134.545819][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.652802][ T6135] veth0_vlan: entered promiscuous mode [ 134.701879][ T6135] veth1_vlan: entered promiscuous mode [ 134.811184][ T6135] veth0_macvtap: entered promiscuous mode [ 134.849968][ T6135] veth1_macvtap: entered promiscuous mode [ 134.918602][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.959928][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.000550][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.034684][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.068162][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.099080][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.154734][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.213197][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.268576][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.320738][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.372830][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.416017][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.448992][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.465189][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.484108][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.494635][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.522904][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.546834][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.578349][ T6135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.590240][ T6135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.600017][ T6135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.609324][ T6135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.774852][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.783102][ T5145] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 135.810283][ T6449] loop2: detected capacity change from 0 to 32768 [ 135.816030][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.822095][ T6449] XFS: ikeep mount option is deprecated. [ 135.881984][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.886663][ T6449] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.890907][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.005590][ T5145] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.021729][ T6449] XFS (loop2): Ending clean mount [ 136.023464][ T5145] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.051340][ T5145] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.066565][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.076684][ T5145] usb 5-1: SerialNumber: syz [ 136.099060][ T6449] XFS (loop2): Quotacheck needed: Please wait. [ 136.248406][ T6449] XFS (loop2): Quotacheck: Done. [ 136.408990][ T5145] usb 5-1: 0:2 : does not exist [ 136.424964][ T5145] usb 5-1: unit 5 not found! [ 136.475930][ T5145] usb 5-1: USB disconnect, device number 13 [ 136.773733][ T5101] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.807716][ T5406] udevd[5406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.013694][ T6488] loop1: detected capacity change from 0 to 1024 [ 137.195444][ T6488] EXT4-fs: Ignoring removed orlov option [ 137.217849][ T6488] EXT4-fs (loop1): Test dummy encryption mode enabled [ 137.230761][ T6496] Bluetooth: MGMT ver 1.23 [ 137.239107][ T6488] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 137.286420][ T6488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.501142][ T6488] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 137.573910][ T6488] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.275: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 137.676750][ T6135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.709519][ T5142] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.917274][ T5142] usb 3-1: Using ep0 maxpacket: 16 [ 138.949376][ T5142] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA5 has invalid maxpacket 104 [ 139.007230][ T5142] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 139.016316][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.037707][ T5142] usb 3-1: Product: syz [ 139.047190][ T5142] usb 3-1: Manufacturer: syz [ 139.051926][ T5142] usb 3-1: SerialNumber: syz [ 139.073646][ T5142] usb 3-1: config 0 descriptor?? [ 139.132086][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.147795][ T6546] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.222420][ T5142] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 139.307864][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 139.375491][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 139.552367][ T5142] usb 3-1: USB disconnect, device number 10 [ 140.585209][ T6590] bridge0: port 3(gretap0) entered blocking state [ 140.622963][ T6590] bridge0: port 3(gretap0) entered disabled state [ 140.662224][ T6590] gretap0: entered allmulticast mode [ 140.734207][ T6590] gretap0: entered promiscuous mode [ 140.768368][ T6590] bridge0: port 3(gretap0) entered blocking state [ 140.775408][ T6590] bridge0: port 3(gretap0) entered forwarding state [ 140.817846][ T6597] gretap0: left allmulticast mode [ 140.827626][ T6597] gretap0: left promiscuous mode [ 140.864940][ T6597] bridge0: port 3(gretap0) entered disabled state [ 141.325105][ T6618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.410701][ T6621] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.478478][ T6628] loop0: detected capacity change from 0 to 1024 [ 141.486867][ T6628] hfsplus: session requires an argument [ 141.522075][ T6628] hfsplus: unable to parse mount options [ 142.085431][ T6650] syz.3.328[6650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.086159][ T6650] syz.3.328[6650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.137488][ T929] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.300861][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.419517][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.536917][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.597709][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 142.667236][ T5142] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.719052][ T929] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.741197][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 142.756327][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.764742][ T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 142.776004][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.788772][ T929] usb 5-1: config 0 descriptor?? [ 142.802735][ T47] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 142.812248][ T47] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 142.827351][ T5142] usb 3-1: device descriptor read/64, error -71 [ 142.827424][ T47] usb 2-1: Product: syz [ 142.847226][ T47] usb 2-1: Manufacturer: syz [ 142.857182][ T47] usb 2-1: SerialNumber: syz [ 142.865401][ T47] usb 2-1: config 0 descriptor?? [ 142.877203][ T30] audit: type=1326 audit(1719975001.575:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1155f75b99 code=0x7ffc0000 [ 142.913979][ T47] usb 2-1: NFC: intf ffff88806af7b000 id ffffffff8ecbbc40 [ 142.921637][ T30] audit: type=1326 audit(1719975001.575:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1155f75b99 code=0x7ffc0000 [ 142.947856][ T30] audit: type=1326 audit(1719975001.575:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1155f745d0 code=0x7ffc0000 [ 142.975750][ T30] audit: type=1326 audit(1719975001.575:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1155f7579b code=0x7ffc0000 [ 143.010635][ T30] audit: type=1326 audit(1719975001.575:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1155f7579b code=0x7ffc0000 [ 143.047302][ T30] audit: type=1326 audit(1719975001.585:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1155f7579b code=0x7ffc0000 [ 143.070406][ T30] audit: type=1326 audit(1719975001.585:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1155f7579b code=0x7ffc0000 [ 143.096497][ T30] audit: type=1326 audit(1719975001.715:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1155f7579b code=0x7ffc0000 [ 143.117325][ T5142] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.132653][ T25] usb 2-1: USB disconnect, device number 6 [ 143.140067][ T30] audit: type=1326 audit(1719975001.795:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1155f7579b code=0x7ffc0000 [ 143.159124][ T932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.179906][ T30] audit: type=1326 audit(1719975001.885:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1155f7579b code=0x7ffc0000 [ 143.244594][ T929] hid (null): bogus close delimiter [ 143.256484][ T6660] loop0: detected capacity change from 0 to 256 [ 143.291526][ T5142] usb 3-1: device descriptor read/64, error -71 [ 143.360774][ T932] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 143.370461][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.383283][ T932] usb 4-1: config 0 descriptor?? [ 143.393924][ T932] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 143.419086][ T5142] usb usb3-port1: attempt power cycle [ 143.657727][ T929] usb 5-1: string descriptor 0 read error: -71 [ 143.678317][ T929] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 143.694648][ T929] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 143.733261][ T929] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 143.750236][ T929] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 143.762639][ T929] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 143.767929][ T6660] loop0: detected capacity change from 0 to 40427 [ 143.781856][ T929] usb 5-1: USB disconnect, device number 14 [ 143.809728][ T6662] ªªªªªª: renamed from vlan0 (while UP) [ 143.822625][ T6660] F2FS-fs (loop0): invalid crc value [ 143.847316][ T5142] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 143.858760][ T6660] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.902781][ T5142] usb 3-1: device descriptor read/8, error -71 [ 143.957741][ T6660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 143.988176][ T6666] loop1: detected capacity change from 0 to 2048 [ 144.101281][ T6666] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.336: bad orphan inode 8192 [ 144.115509][ T6666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.197471][ T5142] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 144.256511][ T5142] usb 3-1: device descriptor read/8, error -71 [ 144.408813][ T5142] usb usb3-port1: unable to enumerate USB device [ 144.952994][ T5096] syz-executor: attempt to access beyond end of device [ 144.952994][ T5096] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.040829][ T5096] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 145.249491][ T932] gspca_stv06xx: I2C: Read error writing address: -71 [ 145.270087][ T6135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.302262][ T932] usb 4-1: USB disconnect, device number 6 [ 145.551846][ T929] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 145.684819][ T6689] loop1: detected capacity change from 0 to 512 [ 145.730601][ T6692] loop4: detected capacity change from 0 to 256 [ 145.749997][ T929] usb 3-1: Using ep0 maxpacket: 32 [ 145.861884][ T6689] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 145.882262][ T6689] EXT4-fs (loop1): Remounting filesystem read-only [ 145.889986][ T6689] EXT4-fs (loop1): 1 truncate cleaned up [ 145.898117][ T6689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.995634][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 146.008309][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 146.043330][ T929] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 146.057350][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.128327][ T6696] syz.4.342[6696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.129050][ T6696] syz.4.342[6696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.806458][ T929] usb 3-1: config 0 descriptor?? [ 146.845296][ T6135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.945188][ T6685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.989145][ T929] hub 3-1:0.0: USB hub found [ 147.199459][ T929] hub 3-1:0.0: 2 ports detected [ 147.237282][ T932] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.470097][ T6715] loop4: detected capacity change from 0 to 256 [ 148.169256][ T6716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.845566][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 148.927135][ C0] sched: RT throttling activated [ 148.928736][ T932] usb 1-1: Using ep0 maxpacket: 16 [ 148.949093][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 148.962108][ T932] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 149.272780][ T932] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.283855][ T5145] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.306092][ T932] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 149.322567][ T932] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 149.333985][ T932] usb 1-1: Product: syz [ 149.343976][ T932] usb 1-1: Manufacturer: syz [ 149.367228][ T932] usb 1-1: SerialNumber: syz [ 149.958883][ T932] usb 1-1: config 0 descriptor?? [ 149.980722][ T932] usb 1-1: can't set config #0, error -71 [ 149.988255][ T932] usb 1-1: USB disconnect, device number 8 [ 150.047229][ T5145] usb 2-1: Using ep0 maxpacket: 16 [ 150.063478][ T5145] usb 2-1: device descriptor read/all, error -71 [ 150.487623][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.358'. [ 150.793725][ T6744] loop0: detected capacity change from 0 to 256 [ 150.969850][ T6748] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 151.029077][ T6753] kvm: emulating exchange as write [ 151.202438][ T47] usb 3-1: USB disconnect, device number 15 [ 152.026929][ T6763] loop4: detected capacity change from 0 to 256 [ 152.410226][ T6774] syz.4.367[6774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.411022][ T6774] syz.4.367[6774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.542231][ T47] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 153.207953][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 153.230421][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 153.261014][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 153.274510][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.317893][ T47] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 153.332338][ T47] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 153.358798][ T47] usb 3-1: Product: syz [ 153.363172][ T47] usb 3-1: Manufacturer: syz [ 153.374954][ T47] usb 3-1: SerialNumber: syz [ 153.387660][ T47] usb 3-1: config 0 descriptor?? [ 153.397067][ T47] usb 3-1: NFC: intf ffff888068db1000 id ffffffff8ecbbc40 [ 153.457048][ T6781] syz.1.373[6781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.457347][ T6781] syz.1.373[6781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.622196][ T932] usb 3-1: USB disconnect, device number 16 [ 153.742104][ T6791] loop1: detected capacity change from 0 to 1024 [ 153.773953][ T6791] EXT4-fs: Ignoring removed nobh option [ 153.878573][ T6791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.830044][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 154.846214][ T6802] EXT4-fs error (device loop1): ext4_lookup:1810: inode #12: comm syz.1.377: iget: bad extended attribute block 768799145984 [ 154.869284][ T6802] EXT4-fs error (device loop1): ext4_lookup:1810: inode #12: comm syz.1.377: iget: bad extended attribute block 768799145984 [ 154.945941][ T47] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.072796][ T6135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.160340][ T47] usb 4-1: too many configurations: 31, using maximum allowed: 8 [ 155.216293][ T47] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 5.88 [ 155.235157][ T6813] loop1: detected capacity change from 0 to 512 [ 155.243445][ T47] usb 4-1: New USB device strings: Mfr=198, Product=1, SerialNumber=181 [ 155.247917][ T6813] EXT4-fs: Ignoring removed i_version option [ 155.257258][ T47] usb 4-1: Product: syz [ 155.277212][ T47] usb 4-1: Manufacturer: syz [ 155.281805][ T6813] EXT4-fs: Ignoring removed bh option [ 155.287391][ T47] usb 4-1: SerialNumber: syz [ 155.298141][ T6813] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 155.811393][ T6813] loop1: detected capacity change from 0 to 256 [ 156.239392][ T47] usb 4-1: USB disconnect, device number 7 [ 156.307527][ T6651] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 156.343539][ T6820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 156.353734][ T6820] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 156.521834][ T5406] udevd[5406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.548028][ T6651] usb 3-1: too many configurations: 31, using maximum allowed: 8 [ 156.564236][ T6651] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.567256][ T932] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.580847][ T6651] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.581717][ T6651] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.670287][ T6651] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.701261][ T6651] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.762844][ T6651] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.842877][ T6651] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.919929][ T6651] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 157.001136][ T6651] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 5.88 [ 157.080590][ T6651] usb 3-1: New USB device strings: Mfr=198, Product=1, SerialNumber=181 [ 157.171669][ T6651] usb 3-1: Product: syz [ 157.239937][ T6651] usb 3-1: Manufacturer: syz [ 157.308823][ T6651] usb 3-1: SerialNumber: syz [ 157.497279][ T932] usb 5-1: Using ep0 maxpacket: 16 [ 157.516482][ T932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.549579][ T932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.551799][ T47] usb 3-1: USB disconnect, device number 17 [ 157.566943][ T932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.579721][ T932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 157.607947][ T932] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.646977][ T932] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.682711][ T932] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.694885][ T932] usb 5-1: Manufacturer: syz [ 157.731060][ T932] usb 5-1: config 0 descriptor?? [ 158.078139][ T932] rc_core: IR keymap rc-hauppauge not found [ 158.108605][ T932] Registered IR keymap rc-empty [ 158.116628][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.148374][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.202712][ T932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 158.252318][ T932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 158.306862][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.192938][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.257317][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.306167][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.357369][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.418155][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.513913][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.677617][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.897800][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.117572][ T932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.279281][ T932] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 160.319308][ T932] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 160.373553][ T932] usb 5-1: USB disconnect, device number 15 [ 161.269893][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 161.269910][ T30] audit: type=1326 audit(1719975019.975:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.381040][ T30] audit: type=1326 audit(1719975020.005:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.497604][ T30] audit: type=1326 audit(1719975020.005:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.597362][ T30] audit: type=1326 audit(1719975020.005:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.684272][ T6899] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 161.684301][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz.0.411 Not tainted 6.10.0-rc6-next-20240702-syzkaller #0 [ 161.684322][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 161.684332][ T6899] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 161.684363][ T6899] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 65 36 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 161.684376][ T6899] RSP: 0018:ffffc90009c77098 EFLAGS: 00010202 [ 161.684394][ T6899] RAX: 1ffff11004189e40 RBX: 0000000000000000 RCX: 0000000000040000 [ 161.684407][ T6899] RDX: ffffc90009301000 RSI: 0000000000000a23 RDI: 0000000000000a24 [ 161.684418][ T6899] RBP: 0000000000000007 R08: ffffffff895fea10 R09: 1ffff110052e255c [ 161.684430][ T6899] R10: dffffc0000000000 R11: ffffed10052e255d R12: 0000000000000038 [ 161.684444][ T6899] R13: dffffc0000000000 R14: 1ffff9200138ee55 R15: 0000000000000000 [ 161.684456][ T6899] FS: 00007f3f6b61c6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 161.684472][ T6899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.684484][ T6899] CR2: 000000110c2591a2 CR3: 00000000712a2000 CR4: 00000000003506f0 [ 161.684501][ T6899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.684512][ T6899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.684523][ T6899] Call Trace: [ 161.684529][ T6899] [ 161.684536][ T6899] ? __die_body+0x88/0xe0 [ 161.684567][ T6899] ? die+0xcf/0x110 [ 161.684590][ T6899] ? do_trap+0x15a/0x3a0 [ 161.684613][ T6899] ? do_error_trap+0x1dc/0x2c0 [ 161.684636][ T6899] ? __pfx_do_error_trap+0x10/0x10 [ 161.684659][ T6899] ? rcu_is_watching+0x15/0xb0 [ 161.684683][ T6899] ? exc_stack_segment+0x38/0x50 [ 161.684702][ T6899] ? asm_exc_stack_segment+0x26/0x30 [ 161.684723][ T6899] ? bpf_prog_run_generic_xdp+0x5f0/0x14c0 [ 161.684745][ T6899] ? bpf_xdp_redirect+0x59/0x1a0 [ 161.684767][ T6899] ? bpf_xdp_redirect+0x25/0x1a0 [ 161.684792][ T6899] bpf_prog_bd73926c2776e1d5+0x1a/0x1c [ 161.684815][ T6899] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 161.684850][ T6899] do_xdp_generic+0x673/0xb90 [ 161.684869][ T6899] ? __pfx_validate_chain+0x10/0x10 [ 161.684896][ T6899] ? __pfx_do_xdp_generic+0x10/0x10 [ 161.684924][ T6899] __netif_receive_skb_core+0x1be6/0x4570 [ 161.684947][ T6899] ? mark_lock+0x9a/0x360 [ 161.684975][ T6899] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 161.684996][ T6899] ? mark_lock+0x9a/0x360 [ 161.685018][ T6899] ? __lock_acquire+0x1359/0x2000 [ 161.685048][ T6899] __netif_receive_skb+0x12f/0x650 [ 161.685071][ T6899] ? __pfx_lock_acquire+0x10/0x10 [ 161.685090][ T6899] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 161.685110][ T6899] ? __pfx___netif_receive_skb+0x10/0x10 [ 161.685129][ T6899] ? __kasan_slab_alloc+0x66/0x80 [ 161.685149][ T6899] ? read_tsc+0x9/0x20 [ 161.685168][ T6899] ? timekeeping_get_ns+0x2c0/0x420 [ 161.685192][ T6899] ? netif_receive_skb+0x131/0x890 [ 161.685213][ T6899] ? netif_receive_skb+0x131/0x890 [ 161.685234][ T6899] netif_receive_skb+0x1e8/0x890 [ 161.685255][ T6899] ? tun_rx_batched+0x160/0x8f0 [ 161.685272][ T6899] ? __pfx_netif_receive_skb+0x10/0x10 [ 161.685298][ T6899] ? tun_rx_batched+0x160/0x8f0 [ 161.685314][ T6899] tun_rx_batched+0x1b7/0x8f0 [ 161.685360][ T6899] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.685386][ T6899] ? __pfx_lock_acquire+0x10/0x10 [ 161.685405][ T6899] ? __pfx_tun_rx_batched+0x10/0x10 [ 161.685432][ T6899] tun_get_user+0x2f3b/0x4560 [ 161.685449][ T6899] ? tun_get_user+0x2a35/0x4560 [ 161.685471][ T6899] ? __pfx_tun_get_user+0x10/0x10 [ 161.685490][ T6899] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 161.685515][ T6899] ? tun_get+0x1e/0x2f0 [ 161.685536][ T6899] ? tun_get+0x1e/0x2f0 [ 161.685556][ T6899] ? tun_get+0x27d/0x2f0 [ 161.685573][ T6899] tun_chr_write_iter+0x113/0x1f0 [ 161.685597][ T6899] vfs_write+0xa72/0xc90 [ 161.685614][ T6899] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 161.685638][ T6899] ? __pfx_vfs_write+0x10/0x10 [ 161.685651][ T6899] ? do_futex+0x392/0x560 [ 161.685677][ T6899] ksys_write+0x1a0/0x2c0 [ 161.685696][ T6899] ? __pfx_ksys_write+0x10/0x10 [ 161.685710][ T6899] ? do_syscall_64+0x100/0x230 [ 161.685733][ T6899] ? do_syscall_64+0xb6/0x230 [ 161.685755][ T6899] do_syscall_64+0xf3/0x230 [ 161.685775][ T6899] ? clear_bhb_loop+0x35/0x90 [ 161.685794][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.685812][ T6899] RIP: 0033:0x7f3f6a77471f [ 161.685828][ T6899] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 161.685842][ T6899] RSP: 002b:00007f3f6b61c010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 161.685860][ T6899] RAX: ffffffffffffffda RBX: 00007f3f6a903f60 RCX: 00007f3f6a77471f [ 161.685872][ T6899] RDX: 0000000000000046 RSI: 00000000200004c0 RDI: 00000000000000c8 [ 161.685883][ T6899] RBP: 00007f3f6a7e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 161.685895][ T6899] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 161.685905][ T6899] R13: 000000000000000b R14: 00007f3f6a903f60 R15: 00007ffcbbefdf68 [ 161.685922][ T6899] [ 161.685927][ T6899] Modules linked in: [ 161.685946][ T6899] ---[ end trace 0000000000000000 ]--- [ 161.708766][ T30] audit: type=1326 audit(1719975020.045:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.713184][ T6899] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 161.767246][ T30] audit: type=1326 audit(1719975020.045:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.769131][ T6899] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 65 36 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 161.791361][ T30] audit: type=1326 audit(1719975020.045:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.794210][ T6899] RSP: 0018:ffffc90009c77098 EFLAGS: 00010202 [ 161.817334][ T30] audit: type=1326 audit(1719975020.045:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.825014][ T6899] [ 161.850546][ T30] audit: type=1326 audit(1719975020.045:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.853485][ T6899] RAX: 1ffff11004189e40 RBX: 0000000000000000 RCX: 0000000000040000 [ 161.853503][ T6899] RDX: ffffc90009301000 RSI: 0000000000000a23 RDI: 0000000000000a24 [ 161.879959][ T30] audit: type=1326 audit(1719975020.045:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3175b99 code=0x7ffc0000 [ 161.884184][ T6899] RBP: 0000000000000007 R08: ffffffff895fea10 R09: 1ffff110052e255c [ 161.884202][ T6899] R10: dffffc0000000000 R11: ffffed10052e255d R12: 0000000000000038 [ 161.884215][ T6899] R13: dffffc0000000000 R14: 1ffff9200138ee55 R15: 0000000000000000 [ 161.884228][ T6899] FS: 00007f3f6b61c6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 162.047187][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.048175][ T6899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.075893][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.076140][ T6899] CR2: 000000110c2591a2 CR3: 00000000712a2000 CR4: 00000000003506f0 [ 162.081813][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.084813][ T6899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.084829][ T6899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.084844][ T6899] Kernel panic - not syncing: Fatal exception in interrupt [ 162.089781][ T6899] Kernel Offset: disabled