last executing test programs: 6.261139085s ago: executing program 2 (id=463): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @string={0x4, 0x3, "a500"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @string={0x4, 0x3, "5414"}}, 0x0, 0x0, 0x0}, 0x0) 5.22103932s ago: executing program 0 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0xfc, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.762185123s ago: executing program 2 (id=474): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 3.599932915s ago: executing program 2 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3.485480617s ago: executing program 0 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.984483315s ago: executing program 2 (id=478): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 2.983566354s ago: executing program 0 (id=487): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 2.064139359s ago: executing program 2 (id=479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.833537972s ago: executing program 2 (id=480): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000010280)={0x1, 0x0, 0x3, 0x1, 0x5, "90897f000003000000000000001e277fffffeb"}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 868.013677ms ago: executing program 3 (id=481): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xd, 0x1, 0x0, {0x3, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x9, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x1008, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r1, {0x3, 0x4, 0x1, 0xd}}, 0x20) 864.202797ms ago: executing program 1 (id=494): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x49010) 782.720708ms ago: executing program 1 (id=482): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000200)=0x32) close(r1) 694.866439ms ago: executing program 3 (id=483): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @private0, 0x80000}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) 686.790399ms ago: executing program 1 (id=484): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x7048, 0x77218}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x400c110) 591.569761ms ago: executing program 3 (id=486): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 554.121871ms ago: executing program 1 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235000400000f3089550b2e0f01d10f35f30f09d8c767660f3807570066baf80cb898c3e887ef66bafc0c66ed66b86b008ec8c744240000080000c744240238dd0000c7442406000000000f011c24", 0x55}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 460.758743ms ago: executing program 3 (id=492): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 369.109294ms ago: executing program 0 (id=493): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0xffe, 0x40005cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 272.785136ms ago: executing program 3 (id=495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 238.353456ms ago: executing program 0 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$SIOCSIFHWADDR(r0, 0x4010744d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 185.591487ms ago: executing program 1 (id=497): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4, @void, @value}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x1c) 80.679719ms ago: executing program 1 (id=498): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shutdown(r1, 0x0) 78.787449ms ago: executing program 3 (id=499): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa", 0x29}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 0s ago: executing program 0 (id=500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 64.747895][ T5758] cgroup: Unknown subsys name 'net' [ 64.911315][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.269516][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.935434][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.953868][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.973839][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.982118][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.989943][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.997431][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.062949][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.064690][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.071348][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.085562][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.094861][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.094990][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.102533][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.117918][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.125208][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.131409][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.141189][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.148959][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.156814][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.178096][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.193696][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.205130][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.224309][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.232016][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.595759][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 68.675508][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 68.727343][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 68.789887][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.797320][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.805787][ T5767] bridge_slave_0: entered allmulticast mode [ 68.812572][ T5767] bridge_slave_0: entered promiscuous mode [ 68.871596][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.879362][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.886797][ T5767] bridge_slave_1: entered allmulticast mode [ 68.894423][ T5767] bridge_slave_1: entered promiscuous mode [ 68.934528][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.966017][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.973165][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.980928][ T5770] bridge_slave_0: entered allmulticast mode [ 68.988141][ T5770] bridge_slave_0: entered promiscuous mode [ 69.017495][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.024835][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.032032][ T5774] bridge_slave_0: entered allmulticast mode [ 69.039912][ T5774] bridge_slave_0: entered promiscuous mode [ 69.047304][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.054611][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.061820][ T5770] bridge_slave_1: entered allmulticast mode [ 69.069235][ T5770] bridge_slave_1: entered promiscuous mode [ 69.078681][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.089915][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.110736][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.118060][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.125550][ T5774] bridge_slave_1: entered allmulticast mode [ 69.132775][ T5774] bridge_slave_1: entered promiscuous mode [ 69.209611][ T5767] team0: Port device team_slave_0 added [ 69.232516][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.243323][ T5767] team0: Port device team_slave_1 added [ 69.271694][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.283274][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.315981][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.322974][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.349235][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.371037][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.402565][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.409798][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.436231][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.454225][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.461440][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.469018][ T5772] bridge_slave_0: entered allmulticast mode [ 69.475871][ T5772] bridge_slave_0: entered promiscuous mode [ 69.497657][ T5770] team0: Port device team_slave_0 added [ 69.506509][ T5770] team0: Port device team_slave_1 added [ 69.540489][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.547961][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.555520][ T5772] bridge_slave_1: entered allmulticast mode [ 69.562304][ T5772] bridge_slave_1: entered promiscuous mode [ 69.571548][ T5774] team0: Port device team_slave_0 added [ 69.590777][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.597887][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.624671][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.660893][ T5774] team0: Port device team_slave_1 added [ 69.680819][ T5767] hsr_slave_0: entered promiscuous mode [ 69.687322][ T5767] hsr_slave_1: entered promiscuous mode [ 69.696332][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.703307][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.729896][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.745054][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.757197][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.787471][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.794809][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.820971][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.838778][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.845992][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.871993][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.905212][ T5772] team0: Port device team_slave_0 added [ 69.945558][ T5772] team0: Port device team_slave_1 added [ 69.985256][ T5770] hsr_slave_0: entered promiscuous mode [ 69.991671][ T5770] hsr_slave_1: entered promiscuous mode [ 69.997925][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.006752][ T5770] Cannot create hsr debugfs directory [ 70.049478][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.056622][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.083154][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.099999][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.108083][ T5085] Bluetooth: hci0: command tx timeout [ 70.111448][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.141165][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.168375][ T5774] hsr_slave_0: entered promiscuous mode [ 70.175065][ T5774] hsr_slave_1: entered promiscuous mode [ 70.181344][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.189119][ T5774] Cannot create hsr debugfs directory [ 70.194430][ T5085] Bluetooth: hci1: command tx timeout [ 70.200125][ T5085] Bluetooth: hci3: command tx timeout [ 70.264393][ T5085] Bluetooth: hci2: command tx timeout [ 70.308800][ T5772] hsr_slave_0: entered promiscuous mode [ 70.315514][ T5772] hsr_slave_1: entered promiscuous mode [ 70.321598][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.330284][ T5772] Cannot create hsr debugfs directory [ 70.607431][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.619462][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.631592][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.643438][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.701960][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.715983][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.725774][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.739924][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.830826][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.841180][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.851980][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.879113][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.942713][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.952462][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.969275][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.983307][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.032470][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.095003][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.112375][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.135381][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.142721][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.176880][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.184042][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.208247][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.236539][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.243719][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.258516][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.265696][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.325486][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.351883][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.429257][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.463159][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.504457][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.511624][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.542159][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.551764][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.558981][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.619451][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.626769][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.640142][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.650294][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.668028][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.675218][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.711005][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.739774][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.822427][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.895452][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.030152][ T5767] veth0_vlan: entered promiscuous mode [ 72.058124][ T5774] veth0_vlan: entered promiscuous mode [ 72.100777][ T5767] veth1_vlan: entered promiscuous mode [ 72.132719][ T5774] veth1_vlan: entered promiscuous mode [ 72.187064][ T5085] Bluetooth: hci0: command tx timeout [ 72.190187][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.236424][ T5767] veth0_macvtap: entered promiscuous mode [ 72.262286][ T5774] veth0_macvtap: entered promiscuous mode [ 72.268293][ T5085] Bluetooth: hci1: command tx timeout [ 72.273587][ T5774] veth1_macvtap: entered promiscuous mode [ 72.274926][ T5085] Bluetooth: hci3: command tx timeout [ 72.301477][ T5767] veth1_macvtap: entered promiscuous mode [ 72.319354][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.337462][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.354186][ T5085] Bluetooth: hci2: command tx timeout [ 72.365095][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.396176][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.405675][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.414876][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.424785][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.445708][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.456570][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.467918][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.479315][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.490752][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.503638][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.536969][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.548034][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.556836][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.565587][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.577782][ T5770] veth0_vlan: entered promiscuous mode [ 72.620680][ T5770] veth1_vlan: entered promiscuous mode [ 72.715957][ T5772] veth0_vlan: entered promiscuous mode [ 72.766258][ T5772] veth1_vlan: entered promiscuous mode [ 72.775547][ T5770] veth0_macvtap: entered promiscuous mode [ 72.807758][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.821243][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.826329][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.845030][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.851507][ T5770] veth1_macvtap: entered promiscuous mode [ 72.892712][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.901762][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.929455][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.941014][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.951294][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.961999][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.974998][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.987410][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.998051][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.008150][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.018828][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.030451][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.056757][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.066653][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.078568][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.087359][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.140637][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.149163][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.152112][ T5772] veth0_macvtap: entered promiscuous mode [ 73.208390][ T5772] veth1_macvtap: entered promiscuous mode [ 73.272935][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.287574][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.299814][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.321044][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.331420][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.354475][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.371664][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.490182][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.509615][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.530224][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.551562][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.584301][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.613722][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.635788][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.678944][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.701197][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.716090][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.723487][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.732613][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.742724][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.820282][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.843357][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.004341][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.019807][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.134830][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.142708][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.270358][ T5085] Bluetooth: hci0: command tx timeout [ 74.302052][ T5852] syz.0.8[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.325743][ T5852] loop0: detected capacity change from 0 to 1024 [ 74.333984][ T5852] ======================================================= [ 74.333984][ T5852] WARNING: The mand mount option has been deprecated and [ 74.333984][ T5852] and is ignored by this kernel. Remove the mand [ 74.333984][ T5852] option from the mount to silence this warning. [ 74.333984][ T5852] ======================================================= [ 74.371073][ T5085] Bluetooth: hci1: command tx timeout [ 74.373349][ T5773] Bluetooth: hci3: command tx timeout [ 74.428167][ T5773] Bluetooth: hci2: command tx timeout [ 74.692076][ T5860] input: syz1 as /devices/virtual/input/input5 [ 74.756737][ T5861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.768794][ T5861] bridge0: port 3(bond1) entered blocking state [ 74.782104][ T5861] bridge0: port 3(bond1) entered disabled state [ 74.789219][ T5861] bond1: entered allmulticast mode [ 74.796378][ T5861] bond1: entered promiscuous mode [ 74.802217][ T5861] bridge0: port 3(bond1) entered blocking state [ 74.808825][ T5861] bridge0: port 3(bond1) entered forwarding state [ 74.870271][ T48] bridge0: port 3(bond1) entered disabled state [ 75.097580][ T5871] loop1: detected capacity change from 0 to 128 [ 75.098279][ T5869] loop0: detected capacity change from 0 to 2048 [ 75.157056][ T5869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.240333][ T5874] loop3: detected capacity change from 0 to 4096 [ 75.275221][ T5871] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.317819][ T5871] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.340967][ T5874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.429498][ T5871] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 18: comm syz.1.15: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 75.465917][ T5871] EXT4-fs (loop1): Remounting filesystem read-only [ 75.630079][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.720469][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.026818][ T5889] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.144676][ T966] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.344609][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 76.350165][ T5773] Bluetooth: hci0: command tx timeout [ 76.370701][ T966] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 76.393646][ T966] usb 1-1: config 0 has no interface number 0 [ 76.394591][ T5881] loop2: detected capacity change from 0 to 40427 [ 76.402915][ T966] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 76.417658][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.426617][ T5773] Bluetooth: hci3: command tx timeout [ 76.432403][ T966] usb 1-1: Product: syz [ 76.437016][ T5773] Bluetooth: hci1: command tx timeout [ 76.442726][ T966] usb 1-1: Manufacturer: syz [ 76.447471][ T966] usb 1-1: SerialNumber: syz [ 76.460387][ T966] usb 1-1: config 0 descriptor?? [ 76.462430][ T5881] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.478333][ T5881] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.504816][ T5773] Bluetooth: hci2: command tx timeout [ 76.618333][ T5881] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.765350][ T5881] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.802976][ T5881] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.820209][ T966] usb 1-1: USB disconnect, device number 2 [ 76.895984][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.129927][ T28] audit: type=1800 audit(1750251041.972:2): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 77.218646][ T5915] syz.1.30[5915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.218834][ T5915] syz.1.30[5915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.524797][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 77.587480][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 78.277480][ T5924] loop3: detected capacity change from 0 to 32768 [ 78.350094][ T5924] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.35 (5924) [ 78.458361][ T5924] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 78.497831][ T5924] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 78.526995][ T5924] BTRFS info (device loop3): use zlib compression, level 3 [ 78.533130][ T5936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.553760][ T5924] BTRFS info (device loop3): turning on sync discard [ 78.574866][ T5924] BTRFS info (device loop3): doing ref verification [ 78.581697][ T5924] BTRFS info (device loop3): disabling tree log [ 78.596602][ T5924] BTRFS info (device loop3): enabling tree log [ 78.623757][ T5924] BTRFS info (device loop3): enabling ssd optimizations [ 78.641107][ T5924] BTRFS info (device loop3): using spread ssd allocation scheme [ 78.671537][ T5924] BTRFS info (device loop3): not using ssd optimizations [ 78.701907][ T5924] BTRFS info (device loop3): not using spread ssd allocation scheme [ 78.732330][ T5924] BTRFS info (device loop3): using free space tree [ 78.972800][ T28] audit: type=1800 audit(1750251043.822:3): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 79.436075][ T5772] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.698258][ T5966] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 79.718204][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 80.323932][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.651210][ T5978] loop3: detected capacity change from 0 to 32768 [ 80.697881][ T5978] JBD2: Ignoring recovery information on journal [ 80.798146][ T5978] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 81.388153][ T5978] syz.3.49 (5978) used greatest stack depth: 19472 bytes left [ 81.616987][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 81.881426][ T8] cfg80211: failed to load regulatory.db [ 82.019441][ T6007] loop0: detected capacity change from 0 to 8192 [ 82.065974][ T6007] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.129317][ T6007] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 82.173785][ T6007] REISERFS (device loop0): using ordered data mode [ 82.194840][ T6007] reiserfs: using flush barriers [ 82.203125][ T6007] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.244487][ T6007] REISERFS (device loop0): checking transaction log (loop0) [ 82.289164][ T6007] REISERFS (device loop0): Using r5 hash to sort names [ 82.318476][ T6007] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 82.546700][ T5831] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.744502][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 82.756226][ T5831] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 82.766959][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.779235][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.793305][ T5831] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 82.809095][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.839845][ T5831] usb 3-1: config 0 descriptor?? [ 83.309483][ T5831] logitech 0003:046D:C29C.0001: unknown main item tag 0xe [ 83.349148][ T5831] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 83.853298][ T6018] loop3: detected capacity change from 0 to 40427 [ 83.916101][ T6018] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 83.941107][ T6018] F2FS-fs (loop3): Image doesn't support compression [ 83.983197][ T6018] F2FS-fs (loop3): Image doesn't support compression [ 84.027588][ T6018] F2FS-fs (loop3): invalid crc value [ 84.055787][ T6018] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.244230][ T6018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.339765][ T6043] Bluetooth: MGMT ver 1.22 [ 84.345316][ T6043] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 84.406977][ T6017] syz.3.65: attempt to access beyond end of device [ 84.406977][ T6017] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 84.470033][ T6018] syz.3.65: attempt to access beyond end of device [ 84.470033][ T6018] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 85.176753][ T5772] syz-executor: attempt to access beyond end of device [ 85.176753][ T5772] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 85.251282][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 85.337272][ T5831] logitech 0003:046D:C29C.0001: no inputs found [ 85.377921][ T5831] usb 3-1: USB disconnect, device number 2 [ 85.511962][ T23] Process accounting resumed [ 85.933153][ T6076] loop1: detected capacity change from 0 to 256 [ 86.037042][ T6076] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d) [ 86.051827][ T6076] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 86.187520][ T28] audit: type=1800 audit(1750251051.032:4): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.87" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 86.260165][ T6076] syz.1.87: attempt to access beyond end of device [ 86.260165][ T6076] loop1: rw=0, sector=184, nr_sectors = 2815 limit=256 [ 86.310428][ T6076] syz.1.87: attempt to access beyond end of device [ 86.310428][ T6076] loop1: rw=0, sector=2999, nr_sectors = 3456 limit=256 [ 86.509052][ T6076] syz.1.87: attempt to access beyond end of device [ 86.509052][ T6076] loop1: rw=0, sector=6455, nr_sectors = 9400 limit=256 [ 86.688957][ T6076] syz.1.87: attempt to access beyond end of device [ 86.688957][ T6076] loop1: rw=0, sector=15855, nr_sectors = 9072 limit=256 [ 86.885312][ T6076] syz.1.87: attempt to access beyond end of device [ 86.885312][ T6076] loop1: rw=0, sector=24927, nr_sectors = 8016 limit=256 [ 87.174343][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 87.426563][ T6109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 87.435374][ T6105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290638775 (549201763200 ns) > initial count (439443453440 ns). Using initial count to start timer. [ 87.532780][ T6114] capability: warning: `syz.1.102' uses 32-bit capabilities (legacy support in use) [ 87.643235][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 88.055890][ T6128] loop0: detected capacity change from 0 to 1024 [ 88.110335][ T5780] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.275953][ T6134] loop3: detected capacity change from 0 to 1024 [ 88.329716][ T6134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.463855][ T786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.582639][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.696532][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 88.714197][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.729820][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.759243][ T786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.789093][ T786] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 88.813254][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.865165][ T786] hub 2-1:1.0: bad descriptor, ignoring hub [ 88.893577][ T786] hub: probe of 2-1:1.0 failed with error -5 [ 88.920023][ T786] cdc_wdm 2-1:1.0: skipping garbage [ 88.933762][ T786] cdc_wdm 2-1:1.0: skipping garbage [ 88.941761][ T786] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 89.214006][ T786] usb 2-1: USB disconnect, device number 2 [ 89.539976][ T6158] loop2: detected capacity change from 0 to 64 [ 89.769936][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 90.046237][ T6176] loop2: detected capacity change from 0 to 256 [ 90.107325][ T6176] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 90.203181][ T6155] loop3: detected capacity change from 0 to 40427 [ 90.240994][ T6155] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 90.268915][ T6155] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.318515][ T6155] F2FS-fs (loop3): invalid crc value [ 90.346541][ T6155] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.478455][ T6155] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.493918][ T6155] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.602046][ T6155] syz.3.121: attempt to access beyond end of device [ 90.602046][ T6155] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 90.673991][ T1077] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 90.701230][ T1077] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 90.715246][ T6186] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 90.779752][ T6172] loop0: detected capacity change from 0 to 32768 [ 90.799351][ T6188] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 90.811957][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 90.821742][ T6172] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.128 (6172) [ 90.884590][ T6172] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 90.963170][ T6172] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 90.982380][ T6172] BTRFS info (device loop0): using free space tree [ 91.048381][ T6172] BTRFS info (device loop0): enabling ssd optimizations [ 91.071417][ T6172] BTRFS info (device loop0): auto enabling async discard [ 91.721486][ T6218] loop1: detected capacity change from 0 to 1024 [ 91.737778][ T5770] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 91.809782][ T6218] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 91.823903][ T6218] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 91.865928][ T6218] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.139: Failed to acquire dquot type 0 [ 91.967484][ T6218] EXT4-fs error (device loop1): mb_free_blocks:1943: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 92.057970][ T6218] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.139: corrupted inode contents [ 92.120858][ T6218] EXT4-fs error (device loop1): ext4_dirty_inode:6100: inode #13: comm syz.1.139: mark_inode_dirty error [ 92.159291][ T6218] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.139: corrupted inode contents [ 92.188720][ T6218] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.139: mark_inode_dirty error [ 92.236496][ T6218] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.139: corrupted inode contents [ 92.270615][ T6218] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 92.281320][ T6218] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.139: corrupted inode contents [ 92.334141][ T6218] EXT4-fs error (device loop1): ext4_truncate:4283: inode #13: comm syz.1.139: mark_inode_dirty error [ 92.345996][ T6218] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 92.378238][ T6218] EXT4-fs (loop1): 1 truncate cleaned up [ 92.395287][ T6218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.410872][ T6211] loop2: detected capacity change from 0 to 32768 [ 92.482629][ T6211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.137 (6211) [ 92.537601][ T6211] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.554790][ T6211] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.572508][ T6211] BTRFS info (device loop2): enabling auto defrag [ 92.579663][ T6211] BTRFS info (device loop2): doing ref verification [ 92.587129][ T6211] BTRFS info (device loop2): use no compression [ 92.593808][ T6211] BTRFS info (device loop2): force clearing of disk cache [ 92.601593][ T6211] BTRFS info (device loop2): setting nodatacow, compression disabled [ 92.611203][ T6211] BTRFS info (device loop2): disabling free space tree [ 92.655433][ T6218] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.702333][ T6228] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 92.741131][ T6228] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 92.794906][ T6228] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 92.849941][ T6228] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.139: Failed to acquire dquot type 0 [ 92.861165][ T6211] BTRFS info (device loop2): enabling ssd optimizations [ 92.861215][ T6211] BTRFS info (device loop2): auto enabling async discard [ 92.879030][ T6211] BTRFS info (device loop2): rebuilding free space tree [ 92.883123][ T6228] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 92.998977][ T6211] BTRFS info (device loop2): disabling free space tree [ 93.014585][ T6211] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.026233][ T6211] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.048275][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.337869][ T6225] loop3: detected capacity change from 0 to 32768 [ 93.362275][ T6225] XFS: ikeep mount option is deprecated. [ 93.395392][ T5767] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.450841][ T6225] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.693972][ T6261] syz.1.148 uses obsolete (PF_INET,SOCK_PACKET) [ 93.748161][ T6225] XFS (loop3): Ending clean mount [ 93.808044][ T6225] XFS (loop3): Quotacheck needed: Please wait. [ 93.943796][ T6225] XFS (loop3): Quotacheck: Done. [ 94.390847][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.713939][ T6267] loop2: detected capacity change from 0 to 40427 [ 94.776162][ T6267] F2FS-fs (loop2): invalid crc value [ 94.826564][ T6267] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.008456][ T6267] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 95.188271][ T6267] syz.2.150: attempt to access beyond end of device [ 95.188271][ T6267] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.217229][ T6267] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 95.296596][ T6296] loop1: detected capacity change from 0 to 64 [ 95.438460][ T6280] loop0: detected capacity change from 0 to 40427 [ 95.473279][ T6280] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 95.493389][ T6280] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 95.508854][ T6280] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 95.523751][ T6280] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 95.579935][ T6280] F2FS-fs (loop0): invalid crc value [ 95.633091][ T6280] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.812305][ T6280] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.836735][ T6280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.932360][ T6280] syz.0.156: attempt to access beyond end of device [ 95.932360][ T6280] loop0: rw=2049, sector=45096, nr_sectors = 136 limit=40427 [ 96.009005][ T6280] syz.0.156: attempt to access beyond end of device [ 96.009005][ T6280] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 96.154333][ T5770] syz-executor: attempt to access beyond end of device [ 96.154333][ T5770] loop0: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 96.192257][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 96.533471][ T6323] loop2: detected capacity change from 0 to 2048 [ 96.657993][ T6323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.869834][ T6323] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.975055][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.110939][ T6344] syz.2.175[6344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.111150][ T6344] syz.2.175[6344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.132645][ T6345] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.327640][ T6376] loop0: detected capacity change from 0 to 256 [ 98.864753][ T6396] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 98.998356][ T6400] hub 2-0:1.0: USB hub found [ 99.004480][ T6400] hub 2-0:1.0: 1 port detected [ 99.264778][ T6409] process 'syz.1.203' launched '/dev/fd/6' with NULL argv: empty string added [ 99.337992][ T6411] loop1: detected capacity change from 0 to 512 [ 99.358065][ T6411] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 99.367625][ T6411] EXT4-fs (loop1): mount failed [ 100.427667][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.526588][ T6451] netlink: 'syz.3.221': attribute type 4 has an invalid length. [ 100.633924][ T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 100.657727][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.671184][ T8] usb 2-1: Product: syz [ 100.680322][ T8] usb 2-1: Manufacturer: syz [ 100.694340][ T8] usb 2-1: SerialNumber: syz [ 100.721960][ T6457] warning: `syz.3.225' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.735009][ T8] usb 2-1: config 0 descriptor?? [ 101.072487][ T6455] loop0: detected capacity change from 0 to 32768 [ 101.102229][ T6455] XFS: ikeep mount option is deprecated. [ 101.118915][ T6455] XFS: ikeep mount option is deprecated. [ 101.125977][ T6455] XFS: noikeep mount option is deprecated. [ 101.173285][ T8] usb 2-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 101.199279][ T6455] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.371954][ T6459] loop2: detected capacity change from 0 to 32768 [ 101.374976][ T6455] XFS (loop0): Ending clean mount [ 101.394977][ T8] usb 2-1: no permanent extended address found, random address set [ 101.422105][ T8] usb 2-1: atusb_probe: initialization failed, error = -524 [ 101.440650][ T8] atusb: probe of 2-1:0.0 failed with error -524 [ 101.490278][ T6459] JBD2: Ignoring recovery information on journal [ 101.654844][ T6459] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.667434][ T8] usb 2-1: USB disconnect, device number 3 [ 101.686219][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.963237][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 102.740478][ T6496] Zero length message leads to an empty skb [ 102.834254][ T6498] binder: 6497:6498 ioctl c0306201 0 returned -14 [ 103.044234][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.233794][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 103.250470][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.261612][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.272701][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 103.279785][ T6500] loop3: detected capacity change from 0 to 32768 [ 103.301103][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.324642][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.334191][ T8] usb 3-1: SerialNumber: syz [ 103.367312][ T8] hub 3-1:1.0: bad descriptor, ignoring hub [ 103.373298][ T8] hub: probe of 3-1:1.0 failed with error -5 [ 103.413325][ T8] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 103.723897][ T8] usb 3-1: USB disconnect, device number 3 [ 103.971713][ T6514] Bluetooth: hci0: invalid len left 7, exp >= 13 [ 104.158349][ T6516] ptrace attach of "./syz-executor exec"[6517] was attempted by "./syz-executor exec"[6516] [ 104.789896][ T6535] loop2: detected capacity change from 0 to 1024 [ 104.819130][ T6535] EXT4-fs: Ignoring removed nobh option [ 104.825496][ T6535] EXT4-fs: Ignoring removed bh option [ 104.838281][ T6537] loop3: detected capacity change from 0 to 256 [ 104.859132][ T6537] FAT-fs (loop3): Directory bread(block 1285) failed [ 104.868476][ T6535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.921435][ T6522] loop1: detected capacity change from 0 to 32768 [ 104.964199][ T6537] FAT-fs (loop3): Directory bread(block 1285) failed [ 104.971473][ T28] audit: type=1326 audit(1750251069.822:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12238e929 code=0x0 [ 104.972765][ T6535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.083278][ T6522] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.202117][ T6553] loop3: detected capacity change from 0 to 128 [ 105.215829][ T6553] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.268532][ T6522] XFS (loop1): Ending clean mount [ 105.297480][ T6522] XFS (loop1): Quotacheck needed: Please wait. [ 105.297726][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.407797][ T1077] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2443 dinode [ 105.435621][ T1077] XFS (loop1): Unmount and run xfs_repair [ 105.442065][ T1077] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 105.457844][ T1077] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 105.468276][ T1077] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.498082][ T1077] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 105.531053][ T1077] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 105.563802][ T1077] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.563895][ T1077] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 105.563909][ T1077] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 105.563920][ T1077] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 105.630206][ T6522] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 105.944900][ T6563] tls_set_device_offload: netdev not found [ 105.946749][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.219271][ T6573] netlink: 104 bytes leftover after parsing attributes in process `syz.0.264'. [ 106.240337][ T6573] netlink: 104 bytes leftover after parsing attributes in process `syz.0.264'. [ 106.808918][ T6582] loop3: detected capacity change from 0 to 32768 [ 106.869758][ T6582] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 106.947309][ T6582] XFS (loop3): Ending clean mount [ 107.402132][ T6582] syz.3.268 (6582): drop_caches: 2 [ 107.617909][ T5772] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 108.084874][ T6618] loop3: detected capacity change from 0 to 1024 [ 108.102950][ T28] audit: type=1326 audit(1750251072.952:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.0.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12238e929 code=0x0 [ 108.208441][ T6618] mmap: syz.3.276 (6618) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.409346][ T6625] loop3: detected capacity change from 0 to 131072 [ 109.451472][ T6625] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.508483][ T6625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.590296][ T6625] F2FS-fs (loop3): lookup inode (7) has corrupted xattr [ 109.622778][ T28] audit: type=1800 audit(1750251074.472:7): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.281" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 110.253749][ T6650] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 110.266628][ T6650] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 110.589758][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 110.742420][ T6660] ipvlan2: entered promiscuous mode [ 110.773687][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.955950][ T6666] loop3: detected capacity change from 0 to 64 [ 110.966861][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 111.002989][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.023210][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.034677][ T27] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 111.056209][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.080504][ T27] usb 3-1: config 0 descriptor?? [ 111.092494][ T6666] minix_free_block (loop3:1): bit already cleared [ 111.119436][ T6666] minix_free_block (loop3:4): bit already cleared [ 111.132042][ T6666] minix_free_block (loop3:3): bit already cleared [ 111.178109][ T6666] minix_free_block (loop3:2): bit already cleared [ 111.196097][ T6666] minix_free_block (loop3:1): bit already cleared [ 111.386081][ T6675] loop3: detected capacity change from 0 to 1024 [ 111.402960][ T6675] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 111.416107][ T6675] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 111.434539][ T6675] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 111.475150][ T6675] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.299: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 111.561436][ T6675] EXT4-fs (loop3): no journal found [ 111.567263][ T6675] EXT4-fs (loop3): can't get journal size [ 111.583158][ T6675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.919050][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.141246][ T27] letsketch 0003:6161:4D15.0002: Device info: ᑔ [ 112.385660][ T27] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 112.403841][ T27] letsketch: probe of 0003:6161:4D15.0002 failed with error -71 [ 112.437569][ T27] usb 3-1: USB disconnect, device number 4 [ 113.144910][ T6690] loop0: detected capacity change from 0 to 32768 [ 113.179063][ T6690] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.305 (6690) [ 113.250498][ T6690] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.289840][ T6690] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 113.303105][ T6690] BTRFS info (device loop0): using free space tree [ 113.507907][ T6690] BTRFS info (device loop0): enabling ssd optimizations [ 113.515249][ T6698] loop3: detected capacity change from 0 to 32768 [ 113.524991][ T6695] loop1: detected capacity change from 0 to 32768 [ 113.531730][ T6690] BTRFS info (device loop0): auto enabling async discard [ 113.559549][ T6698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.311 (6698) [ 113.580996][ T6695] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.622665][ T6698] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.634108][ T6698] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 113.642858][ T6698] BTRFS info (device loop3): force clearing of disk cache [ 113.650557][ T6698] BTRFS info (device loop3): enabling auto defrag [ 113.658032][ T6698] BTRFS info (device loop3): max_inline at 0 [ 113.667751][ T6698] BTRFS info (device loop3): enabling disk space caching [ 113.677277][ T6698] BTRFS info (device loop3): disk space caching is enabled [ 113.816350][ T6698] BTRFS info (device loop3): enabling ssd optimizations [ 113.849346][ T6698] BTRFS info (device loop3): rebuilding free space tree [ 113.858587][ T6695] XFS (loop1): Ending clean mount [ 113.892933][ T6698] BTRFS info (device loop3): disabling free space tree [ 113.905045][ T6695] XFS (loop1): Quotacheck needed: Please wait. [ 113.916787][ T6698] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.945803][ T6698] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.968575][ T5770] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.064962][ T6695] XFS (loop1): Quotacheck: Done. [ 114.457154][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.567622][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.322188][ T6754] loop1: detected capacity change from 0 to 1024 [ 115.454076][ T6754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.467268][ T6754] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.544512][ T23] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 115.614490][ T42] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:2: bg 0: block 393: padding at end of block bitmap is not set [ 115.671175][ T42] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 115.711847][ T42] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.711847][ T42] [ 115.733594][ T42] EXT4-fs (loop1): Total free blocks count 0 [ 115.740352][ T42] EXT4-fs (loop1): Free/Dirty block details [ 115.756127][ T42] EXT4-fs (loop1): free_blocks=0 [ 115.762132][ T42] EXT4-fs (loop1): dirty_blocks=16 [ 115.769629][ T23] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 115.781355][ T42] EXT4-fs (loop1): Block reservation details [ 115.787584][ T23] usb 4-1: config 0 has no interface number 0 [ 115.798877][ T42] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 115.809606][ T23] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 115.831248][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.846912][ T23] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 115.860646][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.915595][ T23] usb 4-1: Product: syz [ 115.919816][ T23] usb 4-1: Manufacturer: syz [ 115.964080][ T23] usb 4-1: SerialNumber: syz [ 116.009920][ T23] usb 4-1: config 0 descriptor?? [ 116.450628][ T23] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 116.483824][ T23] usb 4-1: USB disconnect, device number 2 [ 117.007206][ T6765] loop0: detected capacity change from 0 to 32768 [ 117.074626][ T6765] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 117.183449][ T6765] XFS (loop0): Ending clean mount [ 117.484225][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 117.591626][ T6786] loop3: detected capacity change from 0 to 4096 [ 117.597666][ T6785] loop8: detected capacity change from 0 to 7 [ 117.663161][ T6785] Dev loop8: unable to read RDB block 7 [ 117.693391][ T6785] loop8: AHDI p1 p3 p4 [ 117.698812][ T6785] loop8: partition table partially beyond EOD, truncated [ 117.713045][ T6788] loop1: detected capacity change from 0 to 2048 [ 117.722426][ T6785] loop8: p1 start 975770946 is beyond EOD, truncated [ 117.739565][ T6785] loop8: p3 start 6514546 is beyond EOD, truncated [ 117.772462][ T6788] loop1: p1 < > p4 [ 117.809362][ T6788] loop1: p4 size 8388608 extends beyond EOD, truncated [ 118.045321][ T6790] loop0: detected capacity change from 0 to 1024 [ 118.062623][ T6790] EXT4-fs: Ignoring removed nobh option [ 118.092284][ T6790] EXT4-fs: Ignoring removed bh option [ 118.102891][ T6790] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.139879][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.172987][ T6790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.250455][ T5781] udevd[5781]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.332399][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 118.430268][ T6801] loop1: detected capacity change from 0 to 2048 [ 118.491969][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.506326][ T6801] loop1: p1 < > p3 [ 118.538400][ T6801] loop1: p3 size 134217728 extends beyond EOD, truncated [ 118.738973][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.739133][ T5781] udevd[5781]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 118.749121][ T966] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 118.978314][ T966] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 119.065333][ T966] usb 3-1: config 0 has no interface number 0 [ 119.128961][ T966] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.165658][ T966] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 119.192148][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.252880][ T966] usb 3-1: Product: syz [ 119.268343][ T966] usb 3-1: Manufacturer: syz [ 119.280997][ T966] usb 3-1: SerialNumber: syz [ 119.301772][ T966] usb 3-1: config 0 descriptor?? [ 119.558512][ T6809] loop3: detected capacity change from 0 to 32768 [ 119.680516][ T6809] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.759140][ T6809] XFS (loop3): Ending clean mount [ 119.773400][ T966] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 119.791738][ T966] usb 3-1: USB disconnect, device number 5 [ 120.039490][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.701236][ T6827] loop1: detected capacity change from 0 to 32768 [ 122.293989][ T6846] loop3: detected capacity change from 0 to 32768 [ 122.305420][ T6846] XFS: ikeep mount option is deprecated. [ 122.323650][ T6846] XFS: ikeep mount option is deprecated. [ 122.329354][ T6846] XFS: noikeep mount option is deprecated. [ 122.385816][ T6846] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.388229][ T6848] loop0: detected capacity change from 0 to 32768 [ 122.482352][ T6848] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.659622][ T6846] XFS (loop3): Ending clean mount [ 122.705440][ T6848] XFS (loop0): Ending clean mount [ 122.721603][ T6848] XFS (loop0): Quotacheck needed: Please wait. [ 122.739690][ T12] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2443 dinode [ 122.772198][ T6857] loop1: detected capacity change from 0 to 32768 [ 122.787699][ T12] XFS (loop0): Unmount and run xfs_repair [ 122.800301][ T12] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 122.811917][ T6857] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.348 (6857) [ 122.842993][ T12] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 122.863249][ T12] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.885074][ T12] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 122.902927][ T6857] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.926059][ T12] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 122.935214][ T6857] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.944703][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.965027][ T12] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.978182][ T6857] BTRFS info (device loop1): using free space tree [ 122.996354][ T12] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 123.018389][ T12] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 123.038324][ T12] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 123.134630][ T6848] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 123.233894][ T6857] BTRFS info (device loop1): enabling ssd optimizations [ 123.240986][ T6857] BTRFS info (device loop1): auto enabling async discard [ 123.585201][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.652203][ T6900] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 123.792926][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.859701][ T6915] loop1: detected capacity change from 0 to 1024 [ 124.999449][ T6903] loop3: detected capacity change from 0 to 40427 [ 125.075198][ T6903] F2FS-fs (loop3): invalid crc value [ 125.095641][ T6903] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.249041][ T6903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 125.407047][ T6903] syz.3.364: attempt to access beyond end of device [ 125.407047][ T6903] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 125.541110][ T6903] syz.3.364: attempt to access beyond end of device [ 125.541110][ T6903] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 125.752639][ T5772] syz-executor: attempt to access beyond end of device [ 125.752639][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.787252][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 126.096771][ T6932] loop2: detected capacity change from 0 to 32768 [ 126.105274][ T6932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.365 (6932) [ 126.168538][ T6932] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.199193][ T6932] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 126.213972][ T6932] BTRFS info (device loop2): using free space tree [ 126.321871][ T6932] BTRFS info (device loop2): enabling ssd optimizations [ 126.349677][ T6932] BTRFS info (device loop2): auto enabling async discard [ 126.555081][ T5767] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.257214][ T6991] tipc: Started in network mode [ 128.286291][ T6991] tipc: Node identity 7f000001, cluster identity 4711 [ 128.300149][ T6991] tipc: Enabled bearer , priority 10 [ 128.741907][ T6999] loop3: detected capacity change from 0 to 64 [ 128.788618][ T7001] input: syz1 as /devices/virtual/input/input9 [ 129.316560][ T966] tipc: Node number set to 2130706433 [ 129.693136][ T7015] tipc: Started in network mode [ 129.702670][ T7015] tipc: Node identity 7f000001, cluster identity 4711 [ 129.714554][ T7015] tipc: Enabled bearer , priority 10 [ 129.873824][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.921619][ T7009] loop3: detected capacity change from 0 to 40427 [ 129.935728][ T7009] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.959454][ T7009] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.010668][ T7009] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.074814][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 130.083102][ T8] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 130.084217][ T7009] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.101960][ T8] usb 3-1: config 0 has no interface number 0 [ 130.107631][ T7009] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.118715][ T8] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 130.149557][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.169485][ T8] usb 3-1: Product: syz [ 130.177644][ T8] usb 3-1: Manufacturer: syz [ 130.191650][ T8] usb 3-1: SerialNumber: syz [ 130.196684][ T28] audit: type=1800 audit(1750251095.042:8): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.387" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 130.226258][ T8] usb 3-1: config 0 descriptor?? [ 130.252747][ T7009] syz.3.387: attempt to access beyond end of device [ 130.252747][ T7009] loop3: rw=2049, sector=45096, nr_sectors = 104 limit=40427 [ 130.339385][ T3473] kworker/u4:10: attempt to access beyond end of device [ 130.339385][ T3473] loop3: rw=1, sector=45200, nr_sectors = 8 limit=40427 [ 130.424208][ T786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.523271][ T8] usb 3-1: USB disconnect, device number 6 [ 130.562151][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.634912][ T786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.648591][ T786] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.657836][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.665943][ T786] usb 2-1: Product: syz [ 130.670097][ T786] usb 2-1: Manufacturer: syz [ 130.674725][ T786] usb 2-1: SerialNumber: syz [ 130.846530][ T27] tipc: Node number set to 2130706433 [ 131.722770][ T786] cdc_ncm 2-1:1.0: failed to get mac address [ 131.738434][ T786] cdc_ncm 2-1:1.0: bind() failure [ 131.759166][ T786] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 131.774275][ T786] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 131.787891][ T786] usbtest: probe of 2-1:1.1 failed with error -71 [ 131.821503][ T786] usb 2-1: USB disconnect, device number 4 [ 133.070241][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.076937][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.743817][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.965676][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.983592][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 135.998991][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.028315][ T23] usb 3-1: config 0 descriptor?? [ 136.504408][ T23] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 136.562785][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input10 [ 136.736886][ T23] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 137.066862][ T23] usb 3-1: USB disconnect, device number 7 [ 139.563933][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.665612][ T7145] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 139.763678][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 139.775881][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.799140][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.827773][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.836936][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.854194][ T27] usb 3-1: config 0 descriptor?? [ 140.279681][ T27] HID 045e:07da: Invalid code 65791 type 1 [ 140.311308][ T27] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input12 [ 140.378726][ T27] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 141.242035][ T786] usb 3-1: USB disconnect, device number 8 [ 142.942622][ T27] Process accounting resumed [ 143.363700][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.553640][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 143.565060][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.588431][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.613647][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 143.648404][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.675954][ T9] usb 3-1: config 0 descriptor?? [ 144.113767][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.303576][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 144.311253][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.322501][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.335670][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.345364][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.356113][ T8] usb 4-1: config 0 descriptor?? [ 144.497040][ T9] letsketch 0003:6161:4D15.0005: Device info: ¥ [ 144.503742][ T5831] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.698560][ T5831] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.712068][ T9] letsketch 0003:6161:4D15.0005: Device info: ᑔ [ 144.721683][ T5831] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.737248][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.745525][ T5831] usb 1-1: SerialNumber: syz [ 144.785919][ T8] HID 045e:07da: Invalid code 65791 type 1 [ 144.804637][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input13 [ 144.845615][ T8] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 144.936591][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 144.963305][ T9] letsketch: probe of 0003:6161:4D15.0005 failed with error -71 [ 145.013949][ T9] usb 3-1: USB disconnect, device number 9 [ 145.020637][ T5831] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 145.085341][ T5831] usb 1-1: USB disconnect, device number 3 [ 145.189949][ T7222] capability: warning: `syz.1.469' uses deprecated v2 capabilities in a way that may be insecure [ 145.576385][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 145.604084][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 145.624235][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 145.634251][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 145.728521][ T23] usb 4-1: USB disconnect, device number 3 [ 146.603718][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.623692][ T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.783842][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 146.791182][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.802132][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.815021][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 146.821057][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.830244][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.841560][ T23] usb 1-1: config 0 descriptor?? [ 146.846739][ T786] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 146.857205][ T786] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.871624][ T786] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.881509][ T786] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 146.894371][ T786] usb 4-1: config 7 interface 0 has no altsetting 0 [ 146.901012][ T786] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 146.910107][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.288904][ T23] HID 045e:07da: Invalid code 65791 type 1 [ 147.320893][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input14 [ 147.363039][ T23] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 147.428289][ T786] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0008/input/input15 [ 147.535733][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.549181][ T786] kye 0003:0458:5010.0008: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 147.627190][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.750367][ T786] usb 4-1: USB disconnect, device number 4 [ 148.293904][ T786] usb 1-1: USB disconnect, device number 4 [ 150.202199][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.299051][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.427828][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.482023][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.503736][ C1] ------------[ cut here ]------------ [ 150.509711][ C1] refcount_t: addition on 0; use-after-free. [ 150.515942][ C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0xf3/0x1b0 [ 150.525009][ C1] Modules linked in: [ 150.528901][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.93-syzkaller #0 [ 150.536545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.546635][ C1] RIP: 0010:refcount_warn_saturate+0xf3/0x1b0 [ 150.552696][ C1] Code: 15 0a 01 0f 85 98 00 00 00 e8 39 41 66 fd 5b 41 5e c3 e8 30 41 66 fd c6 05 e1 00 15 0a 01 48 c7 c7 40 0f fc 8a e8 0d a5 30 fd <0f> 0b eb e0 e8 14 41 66 fd c6 05 c6 00 15 0a 01 48 c7 c7 a0 0f fc [ 150.572357][ C1] RSP: 0018:ffffc900001f0848 EFLAGS: 00010246 [ 150.578494][ C1] RAX: 6b15bfe17336f000 RBX: 0000000000000002 RCX: ffff88801ba6bc00 [ 150.586531][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 150.594554][ C1] RBP: ffffc900001f09d0 R08: ffffc900001f0447 R09: 1ffff9200003e088 [ 150.602568][ C1] R10: dffffc0000000000 R11: fffff5200003e089 R12: ffff88802e609d40 [ 150.610622][ C1] R13: dffffc0000000000 R14: ffff88802e609e94 R15: ffff88805e994c00 [ 150.618690][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 150.627705][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.634340][ C1] CR2: 00007fd4368e7d60 CR3: 0000000031bb0000 CR4: 00000000003506e0 [ 150.642304][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.650303][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.658300][ C1] Call Trace: [ 150.661575][ C1] [ 150.664440][ C1] tipc_crypto_xmit+0x17cf/0x2250 [ 150.669462][ C1] ? tipc_crypto_do_cmd+0xd40/0xd40 [ 150.674689][ C1] tipc_bearer_xmit_skb+0x246/0x3f0 [ 150.679902][ C1] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 150.685197][ C1] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 150.690476][ C1] tipc_disc_timeout+0x581/0x6d0 [ 150.695513][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 150.700702][ C1] call_timer_fn+0x16e/0x530 [ 150.705308][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 150.710499][ C1] ? call_timer_fn+0xbf/0x530 [ 150.715175][ C1] ? __run_timers+0x7d0/0x7d0 [ 150.719847][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.725085][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 150.730389][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 150.735634][ C1] __run_timers+0x52d/0x7d0 [ 150.740138][ C1] ? detach_timer+0x2b0/0x2b0 [ 150.744842][ C1] ? lock_chain_count+0x20/0x20 [ 150.749685][ C1] run_timer_softirq+0x67/0xf0 [ 150.754479][ C1] handle_softirqs+0x280/0x820 [ 150.759304][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 150.764120][ C1] ? do_softirq+0x180/0x180 [ 150.768623][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 150.773838][ C1] __irq_exit_rcu+0xc7/0x190 [ 150.778537][ C1] ? irq_exit_rcu+0x20/0x20 [ 150.783032][ C1] irq_exit_rcu+0x9/0x20 [ 150.787297][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 150.792923][ C1] [ 150.795870][ C1] [ 150.798783][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 150.804771][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 150.810478][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 10 42 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 150.830108][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 150.836184][ C1] RAX: 6b15bfe17336f000 RBX: ffffffff81618a7b RCX: 6b15bfe17336f000 [ 150.844162][ C1] RDX: 0000000000000001 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6780 [ 150.852122][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 150.860115][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e49a768 [ 150.868145][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100374d780 [ 150.876163][ C1] ? do_idle+0x1eb/0x510 [ 150.880416][ C1] default_idle+0x13/0x20 [ 150.884783][ C1] default_idle_call+0x6c/0xa0 [ 150.889725][ C1] do_idle+0x1eb/0x510 [ 150.893862][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 150.899055][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 150.904275][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 150.910425][ C1] cpu_startup_entry+0x43/0x60 [ 150.915200][ C1] start_secondary+0xee/0xf0 [ 150.919773][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 150.925941][ C1] [ 150.928957][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 150.936233][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.93-syzkaller #0 [ 150.943892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.953948][ C1] Call Trace: [ 150.957266][ C1] [ 150.960133][ C1] dump_stack_lvl+0x16c/0x230 [ 150.964815][ C1] ? show_regs_print_info+0x20/0x20 [ 150.970034][ C1] ? load_image+0x3b0/0x3b0 [ 150.974562][ C1] panic+0x2c0/0x710 [ 150.978471][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 150.983017][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 150.989274][ C1] __warn+0x2e0/0x470 [ 150.993258][ C1] ? refcount_warn_saturate+0xf3/0x1b0 [ 150.998722][ C1] ? refcount_warn_saturate+0xf3/0x1b0 [ 151.004185][ C1] report_bug+0x2be/0x4f0 [ 151.008536][ C1] ? refcount_warn_saturate+0xf3/0x1b0 [ 151.014095][ C1] ? refcount_warn_saturate+0xf3/0x1b0 [ 151.019604][ C1] ? refcount_warn_saturate+0xf5/0x1b0 [ 151.025059][ C1] handle_bug+0xcf/0x120 [ 151.029300][ C1] exc_invalid_op+0x1a/0x50 [ 151.033794][ C1] asm_exc_invalid_op+0x1a/0x20 [ 151.038639][ C1] RIP: 0010:refcount_warn_saturate+0xf3/0x1b0 [ 151.044712][ C1] Code: 15 0a 01 0f 85 98 00 00 00 e8 39 41 66 fd 5b 41 5e c3 e8 30 41 66 fd c6 05 e1 00 15 0a 01 48 c7 c7 40 0f fc 8a e8 0d a5 30 fd <0f> 0b eb e0 e8 14 41 66 fd c6 05 c6 00 15 0a 01 48 c7 c7 a0 0f fc [ 151.064319][ C1] RSP: 0018:ffffc900001f0848 EFLAGS: 00010246 [ 151.070422][ C1] RAX: 6b15bfe17336f000 RBX: 0000000000000002 RCX: ffff88801ba6bc00 [ 151.078492][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 151.083702][ C0] ------------[ cut here ]------------ [ 151.083710][ C0] refcount_t: underflow; use-after-free. [ 151.084139][ C0] WARNING: CPU: 0 PID: 1077 at lib/refcount.c:28 refcount_warn_saturate+0x10f/0x1b0 [ 151.084177][ C0] Modules linked in: [ 151.084187][ C0] CPU: 0 PID: 1077 Comm: kworker/u4:6 Not tainted 6.6.93-syzkaller #0 [ 151.084205][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.084216][ C0] Workqueue: events_unbound toggle_allocation_gate [ 151.084234][ C0] RIP: 0010:refcount_warn_saturate+0x10f/0x1b0 [ 151.084258][ C0] Code: 0a 01 48 c7 c7 40 0f fc 8a e8 0d a5 30 fd 0f 0b eb e0 e8 14 41 66 fd c6 05 c6 00 15 0a 01 48 c7 c7 a0 0f fc 8a e8 f1 a4 30 fd <0f> 0b eb c4 e8 f8 40 66 fd c6 05 a7 00 15 0a 01 48 c7 c7 e0 0e fc [ 151.084273][ C0] RSP: 0018:ffffc90000007848 EFLAGS: 00010246 [ 151.084287][ C0] RAX: 6d17c71721f2f300 RBX: 0000000000000003 RCX: ffff8880235ebc00 [ 151.084299][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 151.084310][ C0] RBP: ffffc900000079d0 R08: 0000000000000003 R09: 0000000000000004 [ 151.084320][ C0] R10: dffffc0000000000 R11: fffffbfff1979228 R12: 00000000c0000000 [ 151.084333][ C0] R13: dffffc0000000000 R14: ffff88802e608154 R15: ffff88802e608000 [ 151.084347][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 151.084361][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.084374][ C0] CR2: 0000557173ecc000 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 151.084389][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.084399][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.084410][ C0] Call Trace: [ 151.084415][ C0] [ 151.084425][ C0] tipc_crypto_xmit+0x1915/0x2250 [ 151.084462][ C0] ? tipc_crypto_do_cmd+0xd40/0xd40 [ 151.084493][ C0] tipc_bearer_xmit_skb+0x246/0x3f0 [ 151.084519][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 151.084544][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 151.084579][ C0] tipc_disc_timeout+0x581/0x6d0 [ 151.084604][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 151.084638][ C0] call_timer_fn+0x16e/0x530 [ 151.084657][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 151.084675][ C0] ? call_timer_fn+0xbf/0x530 [ 151.084692][ C0] ? __run_timers+0x7d0/0x7d0 [ 151.084717][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.084750][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 151.084768][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 151.084789][ C0] __run_timers+0x52d/0x7d0 [ 151.084816][ C0] ? detach_timer+0x2b0/0x2b0 [ 151.084839][ C0] ? lock_chain_count+0x20/0x20 [ 151.084865][ C0] run_timer_softirq+0x67/0xf0 [ 151.084883][ C0] handle_softirqs+0x280/0x820 [ 151.084904][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 151.084926][ C0] ? do_softirq+0x180/0x180 [ 151.084947][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 151.084973][ C0] __irq_exit_rcu+0xc7/0x190 [ 151.084990][ C0] ? irq_exit_rcu+0x20/0x20 [ 151.085014][ C0] irq_exit_rcu+0x9/0x20 [ 151.085029][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 151.085048][ C0] [ 151.085053][ C0] [ 151.085060][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.085078][ C0] RIP: 0010:smp_call_function_many_cond+0xddf/0x1130 [ 151.085099][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 1a e7 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 55 e3 0a 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 39 e3 [ 151.085112][ C0] RSP: 0018:ffffc90004757780 EFLAGS: 00000293 [ 151.085126][ C0] RAX: ffffffff817ab3a7 RBX: 1ffff110171e82f5 RCX: ffff8880235ebc00 [ 151.085139][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 151.085149][ C0] RBP: ffffc90004757900 R08: ffffffff90d84527 R09: 1ffffffff21b08a4 [ 151.085162][ C0] R10: dffffc0000000000 R11: fffffbfff21b08a5 R12: ffff8880b8f417a8 [ 151.085175][ C0] R13: dffffc0000000000 R14: ffff8880b8e3d588 R15: 0000000000000001 [ 151.085194][ C0] ? smp_call_function_many_cond+0xdf7/0x1130 [ 151.085229][ C0] ? text_poke_sync+0x30/0x30 [ 151.085261][ C0] ? smp_call_function_many+0x40/0x40 [ 151.085281][ C0] ? text_poke+0xc0/0xc0 [ 151.085296][ C0] ? __mutex_trylock_common+0x153/0x250 [ 151.085316][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 151.085348][ C0] ? text_poke_sync+0x30/0x30 [ 151.085365][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 151.085385][ C0] ? kmem_cache_alloc_bulk+0x12a/0x5b0 [ 151.085403][ C0] text_poke_bp_batch+0x318/0x930 [ 151.085430][ C0] ? text_poke_loc_init+0x820/0x820 [ 151.085449][ C0] ? mutex_lock_nested+0x20/0x20 [ 151.085470][ C0] ? text_poke_queue+0x140/0x190 [ 151.085549][ C0] ? arch_jump_label_transform_queue+0x93/0x100 [ 151.085586][ C0] text_poke_finish+0x30/0x50 [ 151.085604][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 151.085623][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 151.085661][ C0] static_key_disable+0x1a/0x20 [ 151.085685][ C0] toggle_allocation_gate+0x1b0/0x250 [ 151.085704][ C0] ? show_object+0x70/0x70 [ 151.085722][ C0] ? wake_bit_function+0x200/0x200 [ 151.085745][ C0] ? process_scheduled_works+0x957/0x15b0 [ 151.085767][ C0] ? process_scheduled_works+0x957/0x15b0 [ 151.085785][ C0] process_scheduled_works+0xa45/0x15b0 [ 151.085831][ C0] ? assign_work+0x400/0x400 [ 151.085858][ C0] ? assign_work+0x39e/0x400 [ 151.085891][ C0] worker_thread+0xa55/0xfc0 [ 151.085913][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 151.085940][ C0] ? _raw_spin_unlock+0x40/0x40 [ 151.085964][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 151.086005][ C0] kthread+0x2fa/0x390 [ 151.086020][ C0] ? pr_cont_work+0x560/0x560 [ 151.086042][ C0] ? kthread_blkcg+0xd0/0xd0 [ 151.086064][ C0] ret_from_fork+0x48/0x80 [ 151.086083][ C0] ? kthread_blkcg+0xd0/0xd0 [ 151.086100][ C0] ret_from_fork_asm+0x11/0x20 [ 151.086137][ C0] [ 151.086155][ C0] irq event stamp: 2734320 [ 151.086163][ C0] hardirqs last enabled at (2734322): [] vprintk_store+0x9f0/0xc70 [ 151.086188][ C0] hardirqs last disabled at (2734323): [] vprintk_store+0x151/0xc70 [ 151.086211][ C0] softirqs last enabled at (2734104): [] __irq_exit_rcu+0xc7/0x190 [ 151.086232][ C0] softirqs last disabled at (2734107): [] __irq_exit_rcu+0xc7/0x190 [ 151.086252][ C0] ---[ end trace 0000000000000000 ]--- [ 151.699779][ C1] RBP: ffffc900001f09d0 R08: ffffc900001f0447 R09: 1ffff9200003e088 [ 151.707936][ C1] R10: dffffc0000000000 R11: fffff5200003e089 R12: ffff88802e609d40 [ 151.716005][ C1] R13: dffffc0000000000 R14: ffff88802e609e94 R15: ffff88805e994c00 [ 151.724069][ C1] ? refcount_warn_saturate+0xf3/0x1b0 [ 151.729580][ C1] tipc_crypto_xmit+0x17cf/0x2250 [ 151.734622][ C1] ? tipc_crypto_do_cmd+0xd40/0xd40 [ 151.739833][ C1] tipc_bearer_xmit_skb+0x246/0x3f0 [ 151.745042][ C1] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 151.750343][ C1] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 151.755641][ C1] tipc_disc_timeout+0x581/0x6d0 [ 151.760590][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 151.765887][ C1] call_timer_fn+0x16e/0x530 [ 151.770559][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 151.775836][ C1] ? call_timer_fn+0xbf/0x530 [ 151.780501][ C1] ? __run_timers+0x7d0/0x7d0 [ 151.785177][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.790378][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 151.795570][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 151.800761][ C1] __run_timers+0x52d/0x7d0 [ 151.805272][ C1] ? detach_timer+0x2b0/0x2b0 [ 151.809948][ C1] ? lock_chain_count+0x20/0x20 [ 151.814792][ C1] run_timer_softirq+0x67/0xf0 [ 151.819577][ C1] handle_softirqs+0x280/0x820 [ 151.824355][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 151.829122][ C1] ? do_softirq+0x180/0x180 [ 151.833624][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 151.838920][ C1] __irq_exit_rcu+0xc7/0x190 [ 151.843507][ C1] ? irq_exit_rcu+0x20/0x20 [ 151.848015][ C1] irq_exit_rcu+0x9/0x20 [ 151.852265][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 151.857894][ C1] [ 151.860925][ C1] [ 151.863847][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.869815][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 151.875527][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 10 42 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 151.895136][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 151.901202][ C1] RAX: 6b15bfe17336f000 RBX: ffffffff81618a7b RCX: 6b15bfe17336f000 [ 151.909167][ C1] RDX: 0000000000000001 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6780 [ 151.917131][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 151.925099][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e49a768 [ 151.933151][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100374d780 [ 151.941225][ C1] ? do_idle+0x1eb/0x510 [ 151.945481][ C1] default_idle+0x13/0x20 [ 151.949803][ C1] default_idle_call+0x6c/0xa0 [ 151.954559][ C1] do_idle+0x1eb/0x510 [ 151.958625][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 151.963826][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 151.969099][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 151.975250][ C1] cpu_startup_entry+0x43/0x60 [ 151.980016][ C1] start_secondary+0xee/0xf0 [ 151.984626][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 151.990730][ C1] [ 151.993967][ C1] Kernel Offset: disabled [ 151.998348][ C1] Rebooting in 86400 seconds..