last executing test programs: 7.997298916s ago: executing program 0 (id=308): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20000d, &(0x7f00000000c0), 0x7, 0x4ed, &(0x7f0000000c40)="$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") r0 = syz_open_dev$loop(&(0x7f0000000700), 0xfffffffffffffffb, 0x402) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)) 7.09866648s ago: executing program 0 (id=314): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x10, 0x4, 0x2012, 0x3, 0x8016, 0x10, 0x2, 0x10, 0x7, 0x5f5, 0x10, 0xd}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.494487145s ago: executing program 4 (id=322): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0xa0, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) epoll_create1(0x0) 5.043119392s ago: executing program 4 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x2}) write$eventfd(0xffffffffffffffff, &(0x7f0000000180)=0xfffffffffffffffa, 0x8) 4.927513493s ago: executing program 4 (id=331): r0 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/dev\x00') 4.341146623s ago: executing program 1 (id=338): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000001500)={[{@nodelalloc}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000001c0)={0x404043000, 0x3ff, 0x5, 0x2}) 4.117259446s ago: executing program 4 (id=340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.900175199s ago: executing program 4 (id=342): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r0 = open(0x0, 0x145142, 0x0) ftruncate(r0, 0x96ef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x4658b0e44181081a) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8000) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x602081, 0x0) socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x74, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xa, 0x3, 0x8, 0x0, 0x0, 0x6, 0xa, 0x4, [{0x663, 0x5, 0x7, 0x4}, {0x3, 0x8, 0x9, 0x7fff}, {0x9, 0x0, 0x1000, 0x9}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x4800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08864110005000021", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0xffffff5a}) 3.815621221s ago: executing program 2 (id=343): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) shutdown(r0, 0x1) 3.760948582s ago: executing program 1 (id=344): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008804"]) 3.613102164s ago: executing program 2 (id=346): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 3.559273875s ago: executing program 3 (id=347): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 3.538328515s ago: executing program 0 (id=348): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2\x00', 0x1ff) mknod$loop(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') 3.429555767s ago: executing program 1 (id=349): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500"], 0x90}}, 0x0) add_key(0x0, 0x0, &(0x7f0000000180)="305c0605e182d1447a", 0x9, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.341099588s ago: executing program 3 (id=350): munmap(&(0x7f00005e6000/0x4000)=nil, 0x4000) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c4000000250001"], 0xc4}}, 0x4004) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 2.388124933s ago: executing program 2 (id=351): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008050, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x1, 0x6d0, &(0x7f0000001340)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.013867479s ago: executing program 1 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0xa0, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r3}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.870419461s ago: executing program 0 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x2}) write$eventfd(0xffffffffffffffff, &(0x7f0000000180)=0xfffffffffffffffa, 0x8) 1.744184663s ago: executing program 3 (id=354): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) 1.552272246s ago: executing program 0 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfeff200d, 0x0, 0x0}) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000800fdf55c3e9c020a4d7965f055c66db4e580ed97567edacc1b368abc13a51e02bae048"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.481618067s ago: executing program 2 (id=356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) shutdown(r0, 0x1) 1.459555888s ago: executing program 1 (id=357): syz_80211_join_ibss(&(0x7f0000000180)='wlan0\x00', 0x0, 0x0, 0x2) 504.226612ms ago: executing program 1 (id=358): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="403005"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 503.939062ms ago: executing program 2 (id=359): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008804"]) 436.402974ms ago: executing program 3 (id=360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x4000000) 399.995834ms ago: executing program 4 (id=361): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0xa0, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) 335.501275ms ago: executing program 3 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x101fd, 0x1, 0x80a0000, 0x1000, &(0x7f000000f000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)) 209.227357ms ago: executing program 2 (id=363): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000001980)={[{@barrier}, {@nodiscard}, {@grpjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@acl}, {@noinit_itable}, {@usrquota}, {@i_version}]}, 0x10, 0x501, &(0x7f0000001f40)="$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") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) write$bt_hci(r1, &(0x7f00000021c0)=ANY=[], 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf8, r3}, 0x14) splice(r0, 0x0, r2, 0x0, 0x104fd, 0x0) 127.977208ms ago: executing program 0 (id=364): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/73, 0x49, 0xac8c) 0s ago: executing program 3 (id=365): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x139, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x103, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x21}, {0x0, 0xd, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) mlockall(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000010101030000000000000000020000000c001980080001000208000018000180140001"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000001c0)="403e090000fa1ca10bc73db5c8bf2df4a73cc9c7", 0x14, 0x48000, &(0x7f0000000240)={0x3a, 0x0, r4, 0x1, 0x0, 0x6, @random="ba00"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x2000000000000155, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000b40)={0x52, 0xffff, 0x37, {0x0, 0x1}, {0x61, 0x2}, @period={0x59, 0xfffc, 0xfffc, 0x3, 0x80, {0x1, 0x8001, 0xc, 0x1}, 0x0, 0x0}}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r6, 0x80404518, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r7 = socket(0x1f, 0x800, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x86, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "076230e937d9cbf3d56efb2dc0f55933dac6aaec5855b32c6273c4879dd5ad78", "5feef387861cd7310d078de749e60466", {"405ea489961127c8497bce46b84eb80a", "cdb6c8af93ab18039f371df9bf8656f1"}}}}}}}, 0x0) syz_emit_ethernet(0x34, &(0x7f00000003c0)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x12, 0x0, @opaque="5b08eb6b1bceb485e895"}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts. [ 64.780983][ T4158] cgroup: Unknown subsys name 'net' [ 64.896522][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.349304][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.851705][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 67.911947][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 67.984404][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 68.064138][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.071962][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.080557][ T4169] device bridge_slave_0 entered promiscuous mode [ 68.089101][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 68.122898][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.130233][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.138755][ T4169] device bridge_slave_1 entered promiscuous mode [ 68.153240][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.160400][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.168815][ T4171] device bridge_slave_0 entered promiscuous mode [ 68.179091][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.186237][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.194357][ T4171] device bridge_slave_1 entered promiscuous mode [ 68.229538][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 68.254670][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.267201][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.288496][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.295681][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.303773][ T4177] device bridge_slave_0 entered promiscuous mode [ 68.336677][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.343782][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.351898][ T4177] device bridge_slave_1 entered promiscuous mode [ 68.360429][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.398534][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.413498][ T4169] team0: Port device team_slave_0 added [ 68.451061][ T4169] team0: Port device team_slave_1 added [ 68.470152][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.481800][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.512240][ T4171] team0: Port device team_slave_0 added [ 68.526579][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.533708][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.542376][ T4170] device bridge_slave_0 entered promiscuous mode [ 68.567393][ T4171] team0: Port device team_slave_1 added [ 68.589745][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.597103][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.605026][ T4170] device bridge_slave_1 entered promiscuous mode [ 68.613167][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.623998][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.650574][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.669675][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.677083][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.684908][ T4172] device bridge_slave_0 entered promiscuous mode [ 68.695506][ T4177] team0: Port device team_slave_0 added [ 68.709953][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.717025][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.743094][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.761147][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.768571][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.776647][ T4172] device bridge_slave_1 entered promiscuous mode [ 68.785118][ T4177] team0: Port device team_slave_1 added [ 68.811784][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.819205][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.845817][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.858526][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.865492][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.891515][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.919976][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.931787][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.959552][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.966689][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.996514][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.036780][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.046536][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.053503][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.079894][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.104481][ T4169] device hsr_slave_0 entered promiscuous mode [ 69.111282][ T4169] device hsr_slave_1 entered promiscuous mode [ 69.120627][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.143854][ T4170] team0: Port device team_slave_0 added [ 69.183926][ T4170] team0: Port device team_slave_1 added [ 69.211466][ T4172] team0: Port device team_slave_0 added [ 69.220538][ T4171] device hsr_slave_0 entered promiscuous mode [ 69.227905][ T4171] device hsr_slave_1 entered promiscuous mode [ 69.234473][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.242401][ T4171] Cannot create hsr debugfs directory [ 69.267314][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.274308][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.300629][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.313897][ T4172] team0: Port device team_slave_1 added [ 69.332301][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.339593][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.365668][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.402806][ T4177] device hsr_slave_0 entered promiscuous mode [ 69.409887][ T4177] device hsr_slave_1 entered promiscuous mode [ 69.417311][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.424902][ T4177] Cannot create hsr debugfs directory [ 69.453853][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.460940][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.487325][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.502891][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.510051][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.536113][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.547351][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 69.547351][ T4176] Bluetooth: hci3: command 0x0409 tx timeout [ 69.547911][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 69.566675][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 69.572945][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 69.619064][ T4170] device hsr_slave_0 entered promiscuous mode [ 69.625758][ T4170] device hsr_slave_1 entered promiscuous mode [ 69.638672][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.646836][ T4170] Cannot create hsr debugfs directory [ 69.757914][ T4172] device hsr_slave_0 entered promiscuous mode [ 69.764786][ T4172] device hsr_slave_1 entered promiscuous mode [ 69.771778][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.779558][ T4172] Cannot create hsr debugfs directory [ 69.975711][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.998565][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.008518][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.019002][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.037378][ T4177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.049336][ T4177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.059117][ T4177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.088997][ T4177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.143772][ T4171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.153993][ T4171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.187348][ T4171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.208365][ T4171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.235612][ T4172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.278842][ T4172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.290059][ T4172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.305507][ T4172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.326177][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.348942][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.363212][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.373880][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.388554][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.406821][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.416003][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.427076][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.441964][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.451308][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.467959][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.492757][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.505209][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.516172][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.526068][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.533483][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.543068][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.552603][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.561836][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.568971][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.576798][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.585412][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.594964][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.602192][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.610005][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.620372][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.633773][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.666144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.675367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.684553][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.691695][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.699956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.709043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.719221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.731400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.772287][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.783362][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.804413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.819935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.834565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.847554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.856154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.867061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.875493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.884675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.915247][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.925003][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.951385][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.975662][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.992689][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.002174][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.038096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.047682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.056213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.065658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.084183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.093637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.102339][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.109449][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.118317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.125809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.133728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.142532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.151774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.160965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.169460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.180623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.189333][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.196438][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.204073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.213396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.222127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.232643][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.252030][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.264330][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.277441][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.298665][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.305626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.315730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.324854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.334211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.343799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.352600][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.359712][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.369039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.378062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.386931][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.391222][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.394022][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.400499][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.442527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.452266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.472157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.482009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.491605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.500957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.510321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.520349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.529566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.538478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.546533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.573075][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.584791][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.595445][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.609034][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.618707][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.628200][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.637703][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.639399][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 71.647929][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.660024][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 71.661624][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.666258][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 71.681310][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 71.682791][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.687871][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 71.697377][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.714682][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.727815][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.744181][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.752960][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.779352][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.807694][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.833848][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.847482][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.867836][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.887223][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.898986][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.906098][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.914508][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.923552][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.932291][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.941168][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.949779][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.958826][ T4169] device veth0_vlan entered promiscuous mode [ 72.005418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.028108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.035641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.057382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.069119][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.076238][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.084334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.100745][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.114072][ T4169] device veth1_vlan entered promiscuous mode [ 72.148292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.159361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.169318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.178402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.185863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.194310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.202174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.213876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.229089][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.239360][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.249885][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.288133][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.300009][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.318984][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.339513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.352099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.360844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.369777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.379005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.388581][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.398722][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.422426][ T4169] device veth0_macvtap entered promiscuous mode [ 72.441445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.455687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.477057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.485293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.495534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.510810][ T4169] device veth1_macvtap entered promiscuous mode [ 72.551185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.569604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.582507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.608024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.617565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.639935][ T4172] device veth0_vlan entered promiscuous mode [ 72.669077][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.682847][ T4172] device veth1_vlan entered promiscuous mode [ 72.694804][ T4177] device veth0_vlan entered promiscuous mode [ 72.726093][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.737423][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.746184][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.757181][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.765724][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.776154][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.786141][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.795910][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.804229][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.824997][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.842962][ T4171] device veth0_vlan entered promiscuous mode [ 72.857644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.865917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.876132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.885234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.896675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.909411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.917786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.927270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.934734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.948465][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.958005][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.967154][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.976213][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.993869][ T4171] device veth1_vlan entered promiscuous mode [ 73.004655][ T4177] device veth1_vlan entered promiscuous mode [ 73.037659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.045853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.055205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.065154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.075633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.087785][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.095600][ T4172] device veth0_macvtap entered promiscuous mode [ 73.137982][ T4172] device veth1_macvtap entered promiscuous mode [ 73.156634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.164812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.175228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.193403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.203187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.222979][ T4171] device veth0_macvtap entered promiscuous mode [ 73.236819][ T4177] device veth0_macvtap entered promiscuous mode [ 73.268241][ T4171] device veth1_macvtap entered promiscuous mode [ 73.307312][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.317327][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.325577][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.334293][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.347721][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.359136][ T4177] device veth1_macvtap entered promiscuous mode [ 73.367693][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.379730][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.391645][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.418903][ T396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.431437][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.442482][ T396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.446214][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.460662][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.472034][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.483795][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.492896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.501341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.510165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.519162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.527484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.536119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.547456][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.560821][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.573162][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.585802][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.597185][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.607446][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.618222][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.628983][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.639679][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.650866][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.668927][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.679885][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.690461][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.700959][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.711910][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 73.715726][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.718091][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 73.725952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.731952][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 73.745710][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 73.748647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.751959][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 73.767913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.777168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.788504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.797624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.809764][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.818968][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.827854][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.837200][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.850453][ T396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.856679][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.867223][ T396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.878261][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.891555][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.902211][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.912826][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.923896][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.936312][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.957055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.965087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.975326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.984865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.993548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.003605][ T4177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.013335][ T4177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.022308][ T4177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.033500][ T4177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.047126][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.055873][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.065418][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.074493][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.086948][ T4170] device veth0_vlan entered promiscuous mode [ 74.095156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.104227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.203958][ T4170] device veth1_vlan entered promiscuous mode [ 74.259123][ T4256] 9pnet_virtio: no channels available for device syz [ 74.347065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.355955][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.375456][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.386849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.403333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.419161][ T4170] device veth0_macvtap entered promiscuous mode [ 74.464323][ T4170] device veth1_macvtap entered promiscuous mode [ 74.487933][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.495975][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.512465][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.550196][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.564446][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.573942][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.582889][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.594865][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.610279][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.626931][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.643419][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.654463][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.673000][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.689234][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.704193][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.716139][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.733311][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.744905][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.761339][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.773075][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.788588][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.802518][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.813599][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.823680][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.835348][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.849647][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.865481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.876226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.886058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.903115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.918610][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.927570][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.927957][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.949406][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.961826][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.974188][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.039088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.084339][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.115276][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.117575][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.143923][ T4265] bridge0: port 3(syz_tun) entered blocking state [ 75.161268][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.168714][ T4265] bridge0: port 3(syz_tun) entered disabled state [ 75.169916][ T4265] device syz_tun entered promiscuous mode [ 75.189182][ T4265] bridge0: port 3(syz_tun) entered blocking state [ 75.195856][ T4265] bridge0: port 3(syz_tun) entered forwarding state [ 75.237124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.245125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.359164][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.395726][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.448000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.501555][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.529836][ T4273] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5'. [ 75.540216][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.558651][ T4273] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5'. [ 75.572301][ T4275] overlayfs: unrecognized mount option "verity=require" or missing value [ 75.592041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.626220][ T4280] overlayfs: missing 'lowerdir' [ 75.717193][ T4275] overlayfs: missing 'lowerdir' [ 75.763575][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.796616][ T4224] Bluetooth: hci1: command 0x0419 tx timeout [ 75.804950][ T4224] Bluetooth: hci4: command 0x0419 tx timeout [ 75.836529][ T4224] Bluetooth: hci2: command 0x0419 tx timeout [ 75.851938][ T4224] Bluetooth: hci3: command 0x0419 tx timeout [ 75.866671][ T4224] Bluetooth: hci0: command 0x0419 tx timeout [ 75.955179][ T4295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14'. [ 76.092054][ T4224] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 76.151945][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 76.300802][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.310857][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.320876][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.333115][ T4302] device bridge_slave_0 left promiscuous mode [ 76.343204][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.438170][ T4302] device bridge_slave_1 left promiscuous mode [ 76.462276][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.489020][ T4302] bond0: (slave bond_slave_0): Releasing backup interface [ 76.513952][ T4224] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.514038][ T4224] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.573067][ T4302] bond0: (slave bond_slave_1): Releasing backup interface [ 76.640691][ T4302] team0: Port device team_slave_0 removed [ 76.664713][ T4311] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 76.679039][ T4221] kernel read not supported for file /vga_arbiter (pid: 4221 comm: kworker/0:5) [ 76.690092][ T4224] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.700718][ T4302] team0: Port device team_slave_1 removed [ 76.710963][ T4224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.710992][ T4224] usb 5-1: Product: syz [ 76.711006][ T4224] usb 5-1: Manufacturer: syz [ 76.711023][ T4224] usb 5-1: SerialNumber: syz [ 76.716051][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.716099][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.742964][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.743005][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.825064][ T4310] team0: Mode changed to "broadcast" [ 76.896724][ T4302] syz.3.17 (4302) used greatest stack depth: 20840 bytes left [ 77.196759][ T4224] usb 5-1: 0:2 : does not exist [ 77.267451][ T4224] usb 5-1: USB disconnect, device number 2 [ 77.317668][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.531120][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.552573][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.576886][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 77.717395][ T21] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 77.726707][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.737460][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.747687][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.785986][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.808174][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.818564][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.907869][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.939948][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.968837][ T7] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 77.993109][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.034473][ T7] usb 1-1: config 0 descriptor?? [ 78.097167][ T21] usb 2-1: usb_control_msg returned -32 [ 78.106454][ T21] usbtmc 2-1:16.0: can't read capabilities [ 78.520836][ T4220] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.532400][ T7] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 78.543611][ T7] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 78.555823][ T7] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input5 [ 78.581375][ T7] cm6533_jd 0003:0D8C:0022.0001: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 78.743586][ T4253] usb 1-1: USB disconnect, device number 2 [ 78.807609][ T21] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 78.921663][ T4220] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.930953][ T4220] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.945305][ T4220] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.954662][ T4220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 78.970729][ T4220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 79.096747][ T4220] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.107372][ T4220] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.115456][ T4220] usb 3-1: Product: syz [ 79.119855][ T4220] usb 3-1: Manufacturer: syz [ 79.168558][ T4220] cdc_wdm 3-1:1.0: skipping garbage [ 79.177973][ T4220] cdc_wdm 3-1:1.0: skipping garbage [ 79.184902][ T4220] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 79.193850][ T4220] cdc_wdm 3-1:1.0: Unknown control protocol [ 79.237242][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.248015][ T21] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.257389][ T21] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.267021][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.279146][ T21] usb 5-1: config 0 descriptor?? [ 79.586483][ T4220] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.681291][ T4224] usb 5-1: USB disconnect, device number 3 [ 79.745878][ T7] usb 3-1: USB disconnect, device number 2 [ 79.946722][ T4220] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.955459][ T4220] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.989612][ T4220] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.997737][ T4365] binder: 4363:4365 ioctl c0306201 200000000140 returned -14 [ 80.019121][ T4220] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 80.050688][ T4220] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 80.083369][ T4253] usb 2-1: USB disconnect, device number 2 [ 80.179207][ T4369] block nbd3: NBD_DISCONNECT [ 80.196705][ T4220] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.207588][ T4369] block nbd3: Disconnected due to user request. [ 80.220125][ T4220] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.245745][ T4369] block nbd3: shutting down sockets [ 80.256499][ T4220] usb 1-1: Product: syz [ 80.260711][ T4220] usb 1-1: Manufacturer: syz [ 80.317563][ T4220] cdc_wdm 1-1:1.0: skipping garbage [ 80.324050][ T4220] cdc_wdm 1-1:1.0: skipping garbage [ 80.348163][ T4220] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 80.382930][ T4220] cdc_wdm 1-1:1.0: Unknown control protocol [ 80.533306][ T4382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'. [ 80.556810][ T4382] netlink: 'syz.4.44': attribute type 7 has an invalid length. [ 80.588780][ T4220] usb 1-1: USB disconnect, device number 3 [ 80.595455][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 80.634078][ T4382] device ip6gretap0 entered promiscuous mode [ 80.668873][ T4382] device syz_tun entered promiscuous mode [ 80.697664][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 80.787978][ T4390] Zero length message leads to an empty skb [ 80.941453][ T4398] 9pnet_virtio: no channels available for device syz [ 81.232678][ T4409] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 82.090031][ T4447] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.144553][ T4446] ======================================================= [ 82.144553][ T4446] WARNING: The mand mount option has been deprecated and [ 82.144553][ T4446] and is ignored by this kernel. Remove the mand [ 82.144553][ T4446] option from the mount to silence this warning. [ 82.144553][ T4446] ======================================================= [ 82.245565][ T4446] 9pnet_virtio: no channels available for device syz [ 83.133917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.142947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 83.156415][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 83.165381][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 83.174337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 83.183279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 83.192238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 83.201287][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 83.210404][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 83.219430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 83.470939][ T4186] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 83.480998][ T4186] CPU: 1 PID: 4186 Comm: kworker/u5:7 Not tainted 5.15.185-syzkaller #0 [ 83.489361][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.499447][ T4186] Workqueue: hci2 hci_rx_work [ 83.504186][ T4186] Call Trace: [ 83.507492][ T4186] [ 83.510449][ T4186] dump_stack_lvl+0x168/0x230 [ 83.515158][ T4186] ? show_regs_print_info+0x20/0x20 [ 83.520390][ T4186] ? load_image+0x3b0/0x3b0 [ 83.524935][ T4186] sysfs_create_dir_ns+0x252/0x280 [ 83.530078][ T4186] ? __lock_acquire+0x7c60/0x7c60 [ 83.535138][ T4186] ? sysfs_warn_dup+0xa0/0xa0 [ 83.539843][ T4186] ? le_conn_complete_evt+0xcbc/0x1590 [ 83.545335][ T4186] ? hci_event_packet+0xe05/0x12f0 [ 83.549125][ T4477] binder: 4473:4477 ioctl 40046205 0 returned -22 [ 83.550471][ T4186] ? process_one_work+0x863/0x1000 [ 83.562129][ T4186] ? do_raw_spin_unlock+0x11d/0x230 [ 83.567366][ T4186] kobject_add_internal+0x662/0xd00 [ 83.572604][ T4186] kobject_add+0x152/0x210 [ 83.577058][ T4186] ? kobject_init+0x1d0/0x1d0 [ 83.581861][ T4186] ? klist_children_get+0x50/0x50 [ 83.586914][ T4186] ? get_device_parent+0x121/0x3f0 [ 83.592059][ T4186] device_add+0x483/0xfb0 [ 83.596437][ T4186] hci_conn_add_sysfs+0xd1/0x1e0 [ 83.601418][ T4186] le_conn_complete_evt+0xcbc/0x1590 [ 83.606760][ T4186] ? cs_le_create_conn+0x5e0/0x5e0 [ 83.611914][ T4186] ? __mutex_trylock_common+0x14f/0x250 [ 83.617504][ T4186] hci_le_meta_evt+0x289/0x3b80 [ 83.622473][ T4186] ? hci_event_packet+0x36d/0x12f0 [ 83.627609][ T4186] ? hci_event_packet+0x2e2/0x12f0 [ 83.632746][ T4186] ? __lock_acquire+0x7c60/0x7c60 [ 83.637805][ T4186] ? hci_remote_host_features_evt+0x280/0x280 [ 83.643898][ T4186] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 83.649566][ T4186] ? mark_lock+0x94/0x320 [ 83.653933][ T4186] ? mutex_unlock+0x10/0x10 [ 83.658466][ T4186] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.664483][ T4186] ? lock_chain_count+0x20/0x20 [ 83.669364][ T4186] ? __rwlock_init+0x140/0x140 [ 83.674160][ T4186] hci_event_packet+0xe05/0x12f0 [ 83.679123][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 83.684355][ T4186] ? rcu_lock_release+0x20/0x20 [ 83.689238][ T4186] ? hci_send_to_monitor+0x9c/0x4a0 [ 83.694465][ T4186] hci_rx_work+0x255/0xa10 [ 83.698932][ T4186] process_one_work+0x863/0x1000 [ 83.703925][ T4186] ? worker_detach_from_pool+0x240/0x240 [ 83.709583][ T4186] ? lockdep_hardirqs_off+0x70/0x100 [ 83.714898][ T4186] ? _raw_spin_lock_irq+0xab/0xe0 [ 83.719958][ T4186] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 83.725447][ T4186] ? wq_worker_running+0x97/0x170 [ 83.730498][ T4186] worker_thread+0xaa8/0x12a0 [ 83.735230][ T4186] kthread+0x436/0x520 [ 83.739410][ T4186] ? rcu_lock_release+0x20/0x20 [ 83.744286][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 83.748899][ T4186] ret_from_fork+0x1f/0x30 [ 83.753365][ T4186] [ 83.760437][ T4186] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 83.773812][ T4186] Bluetooth: hci2: failed to register connection device [ 84.072628][ T4481] process 'syz.1.81' launched './file0' with NULL argv: empty string added [ 84.429955][ T4487] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.506117][ T4489] loop2: detected capacity change from 0 to 16 [ 84.580403][ T4489] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.682443][ C0] blk_update_request: operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0 [ 84.696661][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.793020][ T4495] loop3: detected capacity change from 0 to 1024 [ 84.937241][ T4495] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 84.986528][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 85.116684][ T23] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 85.129498][ T23] usb 2-1: config 0 has no interface number 0 [ 85.337357][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 85.352235][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.374674][ T23] usb 2-1: Product: syz [ 85.385905][ T23] usb 2-1: Manufacturer: syz [ 85.400019][ T23] usb 2-1: SerialNumber: syz [ 85.429325][ T23] usb 2-1: config 0 descriptor?? [ 85.480306][ T23] smsc95xx v2.0.0 [ 85.484016][ T23] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 85.509254][ T23] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 86.049467][ T21] usb 2-1: USB disconnect, device number 3 [ 86.467692][ T4518] syz.2.94 (4518): /proc/4517/oom_adj is deprecated, please use /proc/4517/oom_score_adj instead. [ 86.750838][ T1325] cfg80211: failed to load regulatory.db [ 86.854076][ T4526] 9pnet_virtio: no channels available for device syz [ 86.992681][ T4529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.276605][ T4537] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.462461][ T4544] loop1: detected capacity change from 0 to 1024 [ 88.551571][ T4544] hfsplus: bad catalog file entry [ 88.557233][ T4544] hfsplus: failed to load root directory [ 89.142082][ T4558] [ 89.442612][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.629831][ T4572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.637692][ T4572] IPv6: NLM_F_CREATE should be set when creating new route [ 89.732411][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 89.883393][ T23] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 89.899932][ T23] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 89.940509][ T23] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 90.008186][ T4457] Set syz1 is full, maxelem 65536 reached [ 90.054123][ T23] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 90.065073][ T23] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 90.106696][ T4578] loop2: detected capacity change from 0 to 1024 [ 90.126655][ T23] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 90.232478][ T23] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 90.242254][ T23] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 90.294900][ T23] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 90.475236][ T26] audit: type=1800 audit(1750325411.437:2): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.116" name="file2" dev="loop2" ino=22 res=0 errno=0 [ 90.595531][ T23] usb 4-1: string descriptor 0 read error: -22 [ 90.603381][ T23] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 90.618267][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.709440][ T23] adutux 4-1:168.0: interrupt endpoints not found [ 90.724538][ T4593] loop0: detected capacity change from 0 to 128 [ 90.775603][ T4593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.856570][ T4593] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.055096][ T4176] usb 4-1: USB disconnect, device number 2 [ 91.142462][ T4574] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.150236][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.500834][ T4609] 9pnet_virtio: no channels available for device syz [ 91.616478][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.644847][ T4613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.126'. [ 91.996551][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 92.035044][ T4619] binder: 4615:4619 ioctl c0306201 0 returned -14 [ 92.044696][ T4619] binder: 4615:4619 ioctl c0306201 0 returned -14 [ 92.116514][ T21] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 92.124923][ T21] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 92.173785][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 92.224812][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.255176][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.305842][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.359878][ T21] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 92.406449][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.449653][ T21] usb 3-1: config 0 descriptor?? [ 92.763162][ T21] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 92.802037][ T21] usb 3-1: USB disconnect, device number 3 [ 92.845311][ T21] usblp0: removed [ 92.963559][ T4629] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 92.992011][ T4629] kvm: pic: non byte read [ 92.998105][ T4629] kvm: pic: non byte read [ 93.003028][ T4629] kvm: pic: non byte read [ 93.008565][ T4629] kvm: pic: non byte read [ 93.014972][ T4629] kvm: pic: level sensitive irq not supported [ 93.015169][ T4629] kvm: pic: non byte read [ 93.029031][ T4629] kvm: pic: non byte read [ 93.135224][ T4574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.177874][ T4574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.251409][ T4634] loop3: detected capacity change from 0 to 512 [ 93.327413][ T4634] EXT4-fs (loop3): Test dummy encryption mode enabled [ 93.337055][ T4634] EXT4-fs (loop3): Test dummy encryption mode enabled [ 93.360117][ T4634] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 93.466855][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.596972][ T4634] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 93.609827][ T4634] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.133: Directory hole found for htree leaf block 0 [ 93.634788][ T4634] EXT4-fs (loop3): Remounting filesystem read-only [ 93.736594][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 93.892526][ T21] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 93.901717][ T21] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 93.929486][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 93.956685][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.966799][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.986446][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.016488][ T21] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 94.025586][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.061999][ T21] usb 3-1: config 0 descriptor?? [ 94.316275][ T4650] loop3: detected capacity change from 0 to 512 [ 94.350931][ T4650] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.361615][ T4650] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 94.385033][ T21] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 94.414413][ T4650] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 94.427601][ T21] usb 3-1: USB disconnect, device number 4 [ 94.433889][ T4650] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 94.443561][ T4650] System zones: 0-2, 18-18, 34-34 [ 94.454246][ T4650] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 94.480282][ T4650] EXT4-fs (loop3): 1 truncate cleaned up [ 94.482751][ T21] usblp0: removed [ 94.489271][ T4650] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.673759][ T4574] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.683001][ T4574] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.692327][ T4574] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.701622][ T4574] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.901314][ T4607] bridge0: port 3(batadv0) entered blocking state [ 94.922373][ T4607] bridge0: port 3(batadv0) entered disabled state [ 94.946598][ T4607] device batadv0 entered promiscuous mode [ 94.953550][ T4607] bridge0: port 3(batadv0) entered blocking state [ 94.960572][ T4607] bridge0: port 3(batadv0) entered forwarding state [ 95.005610][ T4653] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 95.057020][ T4653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.088285][ T4653] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 95.120408][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.176475][ T4654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.189392][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.189425][ T4654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.209988][ T4654] bond0: (slave batadv0): Releasing backup interface [ 95.222243][ T26] audit: type=1800 audit(1750325416.187:3): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.137" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 95.286825][ T4215] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 95.286913][ T4215] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 95.393227][ T4663] loop0: detected capacity change from 0 to 1024 [ 95.414856][ T4657] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 95.437948][ T4663] EXT4-fs (loop0): Ignoring removed nobh option [ 95.451735][ T4657] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 95.472118][ T4663] EXT4-fs (loop0): Ignoring removed bh option [ 95.516614][ T4663] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.622374][ T4663] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noload,noinit_itable,barrier=0x0000000000000009,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 95.750012][ T4663] EXT4-fs (loop0): shut down requested (0) [ 95.944201][ T4680] loop2: detected capacity change from 0 to 2048 [ 96.050198][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 96.464220][ T4702] loop2: detected capacity change from 0 to 8 [ 96.525160][ T4702] squashfs: Unknown parameter '€ëø¡J›´¨^øˤ]5dÝÓÁþëØHÏ`™ºÍ8 $%gkX*[8ÔîÛ‚ÓqÜ—*' [ 97.403828][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'. [ 97.718808][ T4724] binder: 4721:4724 ioctl 4018620d 0 returned -22 [ 97.871101][ T4732] loop2: detected capacity change from 0 to 7 [ 97.904749][ T4732] Dev loop2: unable to read RDB block 7 [ 97.919969][ T4732] loop2: AHDI p1 p2 p3 [ 97.946529][ T4732] loop2: partition table partially beyond EOD, truncated [ 97.958849][ T4732] loop2: p1 start 209 is beyond EOD, truncated [ 97.990704][ T4732] loop2: p3 start 335544320 is beyond EOD, truncated [ 98.000188][ T4224] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.204710][ T4744] loop3: detected capacity change from 0 to 128 [ 98.253194][ T4744] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.291640][ T4744] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,acl,,errors=continue. Quota mode: none. [ 98.309669][ T4744] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.366546][ T4224] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.377372][ T4224] usb 1-1: config 0 has no interfaces? [ 98.426559][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.536639][ T4224] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 98.551102][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.561716][ T4224] usb 1-1: Product: syz [ 98.566042][ T4224] usb 1-1: Manufacturer: syz [ 98.573755][ T4224] usb 1-1: SerialNumber: syz [ 98.599505][ T4224] usb 1-1: config 0 descriptor?? [ 98.715547][ T4748] loop3: detected capacity change from 0 to 512 [ 98.722750][ T21] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 98.744044][ T4748] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 98.759855][ T4748] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 98.816703][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.830820][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.850708][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.898631][ T23] usb 1-1: USB disconnect, device number 4 [ 98.936618][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.960047][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.973676][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.056721][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.076607][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.111471][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.309499][ T4756] binder: 4753:4756 ioctl c0306201 0 returned -14 [ 99.958490][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.087617][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.099893][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.187803][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.204610][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.216005][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.297983][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.312180][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.323874][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.416861][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.435050][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.451285][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 100.483991][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.509962][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 100.580076][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.593794][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.616254][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.731977][ T4780] loop6: detected capacity change from 0 to 524287999 [ 100.776598][ T21] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 100.788188][ T21] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 100.797371][ T21] usb 3-1: Product: syz [ 100.802902][ T21] usb 3-1: Manufacturer: syz [ 100.809648][ T21] usb 3-1: SerialNumber: syz [ 100.834037][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.845340][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.863216][ T21] usb 3-1: config 0 descriptor?? [ 100.868980][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.880168][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.893851][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.904995][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.914389][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.925445][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.946832][ T21] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.969114][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.980196][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.000090][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 101.011458][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 101.011829][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.034093][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.087523][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.098532][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.130467][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.141468][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.153251][ T4780] ldm_validate_partition_table(): Disk read failed. [ 101.160761][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.174195][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.186678][ T4780] Dev loop6: unable to read RDB block 0 [ 101.230232][ T4780] loop6: unable to read partition table [ 101.287141][ T4780] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 101.478605][ T23] usb 3-1: USB disconnect, device number 5 [ 101.548993][ T23] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 101.553179][ T3547] ldm_validate_partition_table(): Disk read failed. [ 101.643190][ T3547] Dev loop6: unable to read RDB block 0 [ 101.697235][ T3547] loop6: unable to read partition table [ 102.248947][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 102.354614][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 102.380314][ T4816] 9pnet_virtio: no channels available for device syz [ 103.617182][ T4829] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 103.710119][ T4829] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.756558][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.131964][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 104.156660][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.336788][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.359579][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.400480][ T21] usb 4-1: Product: syz [ 104.422008][ T21] usb 4-1: Manufacturer: syz [ 104.449930][ T21] usb 4-1: SerialNumber: syz [ 104.882082][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.918811][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.929626][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.970521][ T4861] device bridge_slave_0 left promiscuous mode [ 104.998854][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.058698][ T4861] device bridge_slave_1 left promiscuous mode [ 105.064988][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.223102][ T4861] bond0: (slave bond_slave_0): Releasing backup interface [ 105.323906][ T4861] bond0: (slave bond_slave_1): Releasing backup interface [ 105.507372][ T4861] team0: Port device team_slave_0 removed [ 105.531488][ T4884] syz.2.217 uses obsolete (PF_INET,SOCK_PACKET) [ 105.565642][ T4861] team0: Port device team_slave_1 removed [ 105.586634][ T21] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 105.593136][ T21] cdc_ncm 4-1:1.0: setting tx_max = 76 [ 105.611692][ T4861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.650205][ T4861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.668241][ T4861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.683109][ T4861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.802121][ T4878] team0: Mode changed to "broadcast" [ 105.827202][ T4872] device vlan0 entered promiscuous mode [ 105.930840][ T4872] team0: Port device vlan0 added [ 105.989427][ T21] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 105.991924][ T4881] tipc: Started in network mode [ 106.011440][ T4881] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 106.026836][ T4881] tipc: Enabled bearer , priority 0 [ 106.063742][ T21] usb 4-1: USB disconnect, device number 3 [ 106.078960][ T21] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 106.271016][ T4895] device vlan2 entered promiscuous mode [ 106.308984][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 106.955348][ T4909] loop3: detected capacity change from 0 to 256 [ 107.038132][ T21] tipc: Node number set to 11578026 [ 107.072645][ T4909] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.138895][ T4909] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 107.184145][ T4919] loop2: detected capacity change from 0 to 164 [ 107.201156][ T4909] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.315278][ T4919] Unable to read rock-ridge attributes [ 108.859619][ T4932] loop3: detected capacity change from 0 to 8192 [ 108.883104][ T4937] mmap: syz.4.233 (4937) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 108.955267][ T4942] loop2: detected capacity change from 0 to 128 [ 108.974098][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.019570][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.031519][ T4932] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.080130][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.419671][ T4948] capability: warning: `syz.1.237' uses deprecated v2 capabilities in a way that may be insecure [ 110.593253][ T21] Bluetooth: hci4: command 0x0405 tx timeout [ 110.795441][ T4941] sched: RT throttling activated [ 111.192280][ T4939] team0: Port device vlan0 removed [ 111.308549][ T4828] tipc: Resetting bearer [ 111.359364][ T4962] device bridge_slave_0 left promiscuous mode [ 111.365667][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.374280][ T4932] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 111.439468][ T4968] netlink: zone id is out of range [ 111.445257][ T4932] FAT-fs (loop3): Filesystem has been set read-only [ 111.463282][ T4962] device bridge_slave_1 left promiscuous mode [ 111.477504][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.507045][ T4971] program syz.1.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.591759][ T4962] bond0: (slave bond_slave_0): Releasing backup interface [ 111.686578][ T4962] bond0: (slave bond_slave_1): Releasing backup interface [ 111.770489][ T4962] team0: Port device team_slave_0 removed [ 111.798858][ T4962] team0: Port device team_slave_1 removed [ 111.804966][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.855070][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.866069][ T4987] loop0: detected capacity change from 0 to 512 [ 111.881083][ T4970] team0: Mode changed to "random" [ 112.019500][ T4987] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,journal_dev=0x0000000000000008,data_err=abort,,errors=continue. Quota mode: writeback. [ 112.062348][ T4987] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.074108][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.094409][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.172966][ T4994] device batadv0 left promiscuous mode [ 112.183229][ T4994] bridge0: port 3(batadv0) entered disabled state [ 112.192541][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.201250][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.212021][ T4994] device bridge_slave_0 left promiscuous mode [ 112.218646][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.229361][ T4994] device bridge_slave_1 left promiscuous mode [ 112.235613][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.269507][ T21] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 112.276923][ T4994] bond0: (slave bond_slave_0): Releasing backup interface [ 112.379095][ T4994] bond0: (slave bond_slave_1): Releasing backup interface [ 112.426219][ T4981] loop2: detected capacity change from 0 to 32768 [ 112.448690][ T4994] team0: Port device team_slave_0 removed [ 112.456521][ T4176] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.472153][ T4994] team0: Port device team_slave_1 removed [ 112.479594][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.491479][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.503012][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.514478][ T4981] (syz.2.246,4981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.525625][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.542357][ T4981] (syz.2.246,4981,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.563933][ T5003] team0: Mode changed to "broadcast" [ 112.604230][ T4981] JBD2: Ignoring recovery information on journal [ 112.644789][ T4981] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 112.681004][ T4223] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.697072][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 112.726485][ T21] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 112.735950][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.746637][ T4176] usb 4-1: Using ep0 maxpacket: 8 [ 112.769387][ T21] usb 2-1: config 0 descriptor?? [ 112.797166][ T4993] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.820419][ T5008] (syz.2.246,5008,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 112.846900][ T4224] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 112.897502][ T4176] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.913294][ T4176] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.923481][ T4176] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 112.965529][ T4172] ocfs2: Unmounting device (7,2) on (node local) [ 113.055709][ T4223] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.111257][ T4176] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.126589][ T4176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.145025][ T4176] usb 4-1: Product: syz [ 113.155202][ T4176] usb 4-1: Manufacturer: syz [ 113.175393][ T4176] usb 4-1: SerialNumber: syz [ 113.222078][ T5018] loop2: detected capacity change from 0 to 1024 [ 113.246772][ T4223] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.258740][ T21] elan 0003:04F3:0755.0002: unknown main item tag 0x1 [ 113.270476][ T4223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.279871][ T21] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 113.294431][ T4223] usb 1-1: Product: syz [ 113.311794][ T4223] usb 1-1: Manufacturer: syz [ 113.334188][ T4223] usb 1-1: SerialNumber: syz [ 113.347236][ T4610] hfsplus: b-tree write err: -5, ino 4 [ 113.630036][ T5031] loop2: detected capacity change from 0 to 2048 [ 113.670251][ T4997] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.681440][ T5031] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 113.711550][ T5031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.726286][ T5037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.733654][ T5037] IPv6: NLM_F_CREATE should be set when creating new route [ 114.353429][ T4176] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 114.406645][ T4176] cdc_ncm 4-1:1.0: bind() failure [ 114.424120][ T4176] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 114.432893][ T4176] cdc_ncm 4-1:1.1: bind() failure [ 114.456302][ T4176] usb 4-1: USB disconnect, device number 4 [ 114.516827][ T4223] cdc_ncm 1-1:1.0: failed to get mac address [ 114.536868][ T4223] cdc_ncm 1-1:1.0: bind() failure [ 114.537380][ T4224] usb 2-1: reset full-speed USB device number 4 using dummy_hcd [ 114.610636][ T4223] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 114.773211][ T4223] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 114.882781][ T4223] usbtest: probe of 1-1:1.1 failed with error -71 [ 115.413467][ T4223] usb 1-1: USB disconnect, device number 5 [ 115.680803][ T5060] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 115.776034][ T5059] kvm [5058]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 116.327016][ T4620] usb 2-1: USB disconnect, device number 4 [ 117.127153][ T5072] loop2: detected capacity change from 0 to 32768 [ 117.188392][ T5072] (syz.2.280,5072,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.274469][ T5072] (syz.2.280,5072,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.355720][ T5072] JBD2: Ignoring recovery information on journal [ 117.451733][ T5072] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 117.641192][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.166740][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.201316][ T4620] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.352317][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.363222][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.373768][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.389636][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.401766][ T13] usb 1-1: Product: syz [ 118.405997][ T13] usb 1-1: Manufacturer: syz [ 118.414480][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.427760][ T13] usb 1-1: SerialNumber: syz [ 118.429428][ T5108] (syz.2.280,5108,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 118.532440][ T5110] team0: Unable to change to the same mode the team is in [ 118.555934][ T5072] syz.2.280 (5072) used greatest stack depth: 20488 bytes left [ 118.586790][ T4620] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.595896][ T4620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.619058][ T4620] usb 2-1: config 0 descriptor?? [ 118.678149][ T4620] cp210x 2-1:0.0: cp210x converter detected [ 118.844437][ T4172] ocfs2: Unmounting device (7,2) on (node local) [ 119.101194][ T4620] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 119.139792][ T5123] loop2: detected capacity change from 0 to 128 [ 119.265445][ T5123] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.313813][ T5123] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue. Quota mode: none. [ 119.341359][ T5123] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.411170][ T4620] usb 2-1: cp210x converter now attached to ttyUSB0 [ 119.586675][ T13] cdc_ncm 1-1:1.0: failed to get mac address [ 119.601576][ T1108] usb 2-1: USB disconnect, device number 5 [ 119.616643][ T13] cdc_ncm 1-1:1.0: bind() failure [ 119.632834][ T1108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.656577][ T13] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 119.670285][ T1108] cp210x 2-1:0.0: device disconnected [ 119.686720][ T13] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 119.716545][ T13] usbtest: probe of 1-1:1.1 failed with error -71 [ 119.734447][ T13] usb 1-1: USB disconnect, device number 6 [ 119.846591][ T4220] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 120.162465][ T5140] loop0: detected capacity change from 0 to 512 [ 120.216627][ T4220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 120.406653][ T4220] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 120.420182][ T4220] usb 3-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 120.439849][ T4220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.476298][ T4220] usb 3-1: config 0 descriptor?? [ 120.506793][ T5129] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.299220][ T5140] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 121.320844][ T5140] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.360890][ T5156] loop1: detected capacity change from 0 to 256 [ 121.383021][ T4220] wacom 0003:056A:005D.0003: hidraw0: USB HID vff.fa Device [HID 056a:005d] on usb-dummy_hcd.2-1/input0 [ 121.440949][ T5156] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 121.518527][ T4220] usb 3-1: USB disconnect, device number 6 [ 121.714715][ T5156] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 121.730149][ T5162] loop0: detected capacity change from 0 to 512 [ 121.754647][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.796141][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.804304][ T5161] fido_id[5161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 121.835468][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.854540][ T5162] EXT4-fs (loop0): orphan cleanup on readonly fs [ 121.885035][ T5162] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.308: bg 0: block 5: invalid block bitmap [ 121.917696][ T5162] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 122.052383][ T5162] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.308: invalid indirect mapped block 3 (level 2) [ 122.136787][ T5169] team0: Mode changed to "broadcast" [ 122.143630][ T5162] EXT4-fs (loop0): 1 orphan inode deleted [ 122.168829][ T5162] EXT4-fs (loop0): 1 truncate cleaned up [ 122.211258][ T5162] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.433677][ T5182] loop1: detected capacity change from 0 to 256 [ 122.478976][ T5180] loop3: detected capacity change from 0 to 2048 [ 122.585243][ T5180] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.856456][ T4223] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.019480][ T5199] loop3: detected capacity change from 0 to 1024 [ 123.102694][ T5205] loop1: detected capacity change from 0 to 1024 [ 123.190084][ T5205] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.226887][ T4223] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.252049][ T4826] hfsplus: b-tree write err: -5, ino 4 [ 123.289328][ T5205] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 124.149678][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.192659][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.212834][ T5198] kvm [5197]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 124.222425][ T5198] kvm [5197]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 124.237515][ T4223] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.243685][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.250546][ T4223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.276675][ T4223] usb 1-1: Product: syz [ 124.280996][ T4223] usb 1-1: Manufacturer: syz [ 124.285629][ T4223] usb 1-1: SerialNumber: syz [ 124.286063][ T5198] kvm [5197]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 124.306071][ T5198] kvm [5197]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 124.331567][ T5198] kvm [5197]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 124.386587][ T5214] team0: Unable to change to the same mode the team is in [ 124.465802][ T5228] loop3: detected capacity change from 0 to 2048 [ 124.544310][ T5228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.717912][ T5241] loop1: detected capacity change from 0 to 8 [ 124.853084][ T5241] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 125.222771][ T5258] loop1: detected capacity change from 0 to 1024 [ 125.347071][ T5258] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 125.368559][ T5265] loop3: detected capacity change from 0 to 4096 [ 125.397467][ T5258] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.418393][ T5258] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 3: comm syz.1.338: lblock 3 mapped to illegal pblock 3 (length 1) [ 125.445562][ T5265] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 125.458080][ T5265] System zones: 0-5 [ 125.467132][ T4223] cdc_ncm 1-1:1.0: failed to get mac address [ 125.471603][ T5258] EXT4-fs error (device loop1): ext4_ext_remove_space:2927: inode #15: comm syz.1.338: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 125.491639][ T4223] cdc_ncm 1-1:1.0: bind() failure [ 125.505518][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000010000,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 125.513606][ T4223] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 125.556554][ T4223] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 125.576656][ T4223] usbtest: probe of 1-1:1.1 failed with error -71 [ 125.616255][ T4223] usb 1-1: USB disconnect, device number 7 [ 126.152047][ T5290] loop0: detected capacity change from 0 to 1024 [ 127.199892][ T5302] binder: 5295:5302 ioctl c0306201 0 returned -14 [ 127.420355][ T5301] loop2: detected capacity change from 0 to 1024 [ 127.701347][ T5307] team0: Unable to change to the same mode the team is in [ 127.767274][ T5306] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 127.810379][ T1267] hfsplus: b-tree write err: -5, ino 3 [ 129.208502][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.287786][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.336991][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.405438][ T5342] loop2: detected capacity change from 0 to 512 [ 129.508354][ T5331] team0: Unable to change to the same mode the team is in [ 129.582495][ T4620] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.625816][ T5342] [ 129.628239][ T5342] ====================================================== [ 129.635272][ T5342] WARNING: possible circular locking dependency detected [ 129.642315][ T5342] 5.15.185-syzkaller #0 Not tainted [ 129.647534][ T5342] ------------------------------------------------------ [ 129.654563][ T5342] syz.2.363/5342 is trying to acquire lock: [ 129.660462][ T5342] ffff8880735240a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 129.669389][ T5342] [ 129.669389][ T5342] but task is already holding lock: [ 129.676774][ T5342] ffff88805edcdc30 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 129.686034][ T5342] [ 129.686034][ T5342] which lock already depends on the new lock. [ 129.686034][ T5342] [ 129.696451][ T5342] [ 129.696451][ T5342] the existing dependency chain (in reverse order) is: [ 129.705483][ T5342] [ 129.705483][ T5342] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 129.713161][ T5342] down_write+0x38/0x60 [ 129.717884][ T5342] ext4_truncate+0x96d/0x10d0 [ 129.723115][ T5342] ext4_setattr+0xffe/0x19e0 [ 129.728260][ T5342] notify_change+0xbcd/0xee0 [ 129.733513][ T5342] do_truncate+0x197/0x220 [ 129.738488][ T5342] do_sys_ftruncate+0x31b/0x3d0 [ 129.743888][ T5342] do_syscall_64+0x4c/0xa0 [ 129.747993][ T5350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.365'. [ 129.748850][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.748883][ T5342] [ 129.748883][ T5342] -> #4 [ 129.764112][ T5350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.365'. [ 129.764153][ T5342] (jbd2_handle){++++}-{0:0}: [ 129.782652][ T5342] start_this_handle+0x1338/0x15a0 [ 129.788319][ T5342] jbd2__journal_start+0x2b7/0x5a0 [ 129.794109][ T5342] jbd2_journal_start+0x26/0x30 [ 129.799515][ T5342] ocfs2_start_trans+0x374/0x6c0 [ 129.805007][ T5342] ocfs2_modify_bh+0xe5/0x470 [ 129.810241][ T5342] ocfs2_local_read_info+0x13b1/0x16e0 [ 129.816248][ T5342] dquot_load_quota_sb+0x756/0xac0 [ 129.821911][ T5342] dquot_load_quota_inode+0x2d8/0x5d0 [ 129.827833][ T5342] ocfs2_enable_quotas+0x1c3/0x440 [ 129.833492][ T5342] ocfs2_fill_super+0x3a1f/0x4d80 [ 129.839062][ T5342] mount_bdev+0x287/0x3c0 [ 129.843947][ T5342] legacy_get_tree+0xe6/0x180 [ 129.849166][ T5342] vfs_get_tree+0x88/0x270 [ 129.854133][ T5342] do_new_mount+0x24a/0xa40 [ 129.859176][ T5342] __se_sys_mount+0x2d6/0x3c0 [ 129.864525][ T5342] do_syscall_64+0x4c/0xa0 [ 129.869498][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.875950][ T5342] [ 129.875950][ T5342] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 129.884509][ T5342] down_read+0x44/0x2e0 [ 129.889221][ T5342] ocfs2_start_trans+0x368/0x6c0 [ 129.894709][ T5342] ocfs2_modify_bh+0xe5/0x470 [ 129.899935][ T5342] ocfs2_local_read_info+0x13b1/0x16e0 [ 129.905940][ T5342] dquot_load_quota_sb+0x756/0xac0 [ 129.911690][ T5342] dquot_load_quota_inode+0x2d8/0x5d0 [ 129.917607][ T5342] ocfs2_enable_quotas+0x1c3/0x440 [ 129.923267][ T5342] ocfs2_fill_super+0x3a1f/0x4d80 [ 129.928833][ T5342] mount_bdev+0x287/0x3c0 [ 129.933710][ T5342] legacy_get_tree+0xe6/0x180 [ 129.938925][ T5342] vfs_get_tree+0x88/0x270 [ 129.943888][ T5342] do_new_mount+0x24a/0xa40 [ 129.948936][ T5342] __se_sys_mount+0x2d6/0x3c0 [ 129.954155][ T5342] do_syscall_64+0x4c/0xa0 [ 129.959120][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.965564][ T5342] [ 129.965564][ T5342] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 129.973073][ T5342] ocfs2_start_trans+0x269/0x6c0 [ 129.978569][ T5342] ocfs2_acquire_dquot+0x677/0xaf0 [ 129.984229][ T5342] dqget+0x778/0xeb0 [ 129.988671][ T5342] __dquot_initialize+0x3b6/0xcb0 [ 129.994244][ T5342] ocfs2_get_init_inode+0x138/0x1b0 [ 129.999987][ T5342] ocfs2_mknod+0x8aa/0x22b0 [ 130.005048][ T5342] ocfs2_create+0x192/0x410 [ 130.010105][ T5342] path_openat+0x11e1/0x2f30 [ 130.015238][ T5342] do_filp_open+0x1b3/0x3e0 [ 130.020287][ T5342] do_sys_openat2+0x142/0x4a0 [ 130.025534][ T5342] __x64_sys_openat+0x135/0x160 [ 130.030923][ T5342] do_syscall_64+0x4c/0xa0 [ 130.035879][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.042308][ T5342] [ 130.042308][ T5342] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 130.051174][ T5342] down_write+0x38/0x60 [ 130.055860][ T5342] ocfs2_create_local_dquot+0x194/0x1750 [ 130.062020][ T5342] ocfs2_acquire_dquot+0x7cb/0xaf0 [ 130.067655][ T5342] dqget+0x778/0xeb0 [ 130.072081][ T5342] __dquot_initialize+0x3b6/0xcb0 [ 130.077633][ T5342] ocfs2_get_init_inode+0x138/0x1b0 [ 130.083362][ T5342] ocfs2_mknod+0x8aa/0x22b0 [ 130.088394][ T5342] ocfs2_create+0x192/0x410 [ 130.093423][ T5342] path_openat+0x11e1/0x2f30 [ 130.098543][ T5342] do_filp_open+0x1b3/0x3e0 [ 130.103571][ T5342] do_sys_openat2+0x142/0x4a0 [ 130.108773][ T5342] __x64_sys_openat+0x135/0x160 [ 130.114150][ T5342] do_syscall_64+0x4c/0xa0 [ 130.119097][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.125519][ T5342] [ 130.125519][ T5342] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 130.133168][ T5342] __lock_acquire+0x2c33/0x7c60 [ 130.138552][ T5342] lock_acquire+0x197/0x3f0 [ 130.143580][ T5342] __mutex_lock_common+0x1eb/0x2390 [ 130.149309][ T5342] mutex_lock_nested+0x17/0x20 [ 130.154611][ T5342] dquot_commit+0x5a/0x410 [ 130.159557][ T5342] ext4_write_dquot+0x1f0/0x360 [ 130.164938][ T5342] mark_all_dquot_dirty+0xf9/0x400 [ 130.170575][ T5342] __dquot_free_space+0x7ca/0xb90 [ 130.176129][ T5342] ext4_free_blocks+0x1af5/0x2480 [ 130.181680][ T5342] ext4_ext_remove_space+0x1eaa/0x4390 [ 130.187666][ T5342] ext4_ext_truncate+0x192/0x240 [ 130.193131][ T5342] ext4_truncate+0x9f1/0x10d0 [ 130.198330][ T5342] ext4_evict_inode+0xb43/0x1080 [ 130.203794][ T5342] evict+0x485/0x870 [ 130.208218][ T5342] ext4_orphan_cleanup+0xaa9/0x12e0 [ 130.213958][ T5342] ext4_fill_super+0x9288/0x9a00 [ 130.219419][ T5342] mount_bdev+0x287/0x3c0 [ 130.224273][ T5342] legacy_get_tree+0xe6/0x180 [ 130.229480][ T5342] vfs_get_tree+0x88/0x270 [ 130.234424][ T5342] do_new_mount+0x24a/0xa40 [ 130.239457][ T5342] __se_sys_mount+0x2d6/0x3c0 [ 130.244660][ T5342] do_syscall_64+0x4c/0xa0 [ 130.249606][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.256024][ T5342] [ 130.256024][ T5342] other info that might help us debug this: [ 130.256024][ T5342] [ 130.266248][ T5342] Chain exists of: [ 130.266248][ T5342] &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem [ 130.266248][ T5342] [ 130.278933][ T5342] Possible unsafe locking scenario: [ 130.278933][ T5342] [ 130.286382][ T5342] CPU0 CPU1 [ 130.291744][ T5342] ---- ---- [ 130.297109][ T5342] lock(&ei->i_data_sem); [ 130.301528][ T5342] lock(jbd2_handle); [ 130.308128][ T5342] lock(&ei->i_data_sem); [ 130.315071][ T5342] lock(&dquot->dq_lock); [ 130.319492][ T5342] [ 130.319492][ T5342] *** DEADLOCK *** [ 130.319492][ T5342] [ 130.327630][ T5342] 4 locks held by syz.2.363/5342: [ 130.332652][ T5342] #0: ffff88807e91a0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 130.342852][ T5342] #1: ffff88807e91a650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 130.352342][ T5342] #2: ffff88805edcdc30 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 130.361922][ T5342] #3: ffffffff8c23fd58 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 130.370985][ T5342] [ 130.370985][ T5342] stack backtrace: [ 130.376890][ T5342] CPU: 1 PID: 5342 Comm: syz.2.363 Not tainted 5.15.185-syzkaller #0 [ 130.385074][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.395140][ T5342] Call Trace: [ 130.398446][ T5342] [ 130.401385][ T5342] dump_stack_lvl+0x168/0x230 [ 130.406070][ T5342] ? load_image+0x3b0/0x3b0 [ 130.410574][ T5342] ? show_regs_print_info+0x20/0x20 [ 130.415778][ T5342] ? print_circular_bug+0x12b/0x1a0 [ 130.420985][ T5342] check_noncircular+0x274/0x310 [ 130.425938][ T5342] ? add_chain_block+0x940/0x940 [ 130.430875][ T5342] ? lockdep_lock+0xdc/0x1e0 [ 130.435482][ T5342] ? mark_lock+0x94/0x320 [ 130.439830][ T5342] __lock_acquire+0x2c33/0x7c60 [ 130.444695][ T5342] ? hlock_conflict+0x59/0x1f0 [ 130.449464][ T5342] ? check_path+0x40/0x40 [ 130.453799][ T5342] ? verify_lock_unused+0x140/0x140 [ 130.459013][ T5342] ? check_path+0x21/0x40 [ 130.463354][ T5342] ? check_noncircular+0x16f/0x310 [ 130.468468][ T5342] ? add_chain_block+0x940/0x940 [ 130.473410][ T5342] ? lockdep_lock+0xdc/0x1e0 [ 130.478009][ T5342] ? lockdep_unlock+0x134/0x2d0 [ 130.482867][ T5342] ? lockdep_lock+0x1e0/0x1e0 [ 130.487553][ T5342] lock_acquire+0x197/0x3f0 [ 130.492085][ T5342] ? dquot_commit+0x5a/0x410 [ 130.496681][ T5342] ? __might_sleep+0xf0/0xf0 [ 130.501276][ T5342] ? read_lock_is_recursive+0x10/0x10 [ 130.506654][ T5342] ? __lock_acquire+0x13ad/0x7c60 [ 130.511684][ T5342] ? dquot_commit+0x5a/0x410 [ 130.516287][ T5342] __mutex_lock_common+0x1eb/0x2390 [ 130.521498][ T5342] ? dquot_commit+0x5a/0x410 [ 130.526113][ T5342] ? __might_sleep+0xf0/0xf0 [ 130.530711][ T5342] ? mutex_lock_io_nested+0x60/0x60 [ 130.535920][ T5342] mutex_lock_nested+0x17/0x20 [ 130.540692][ T5342] dquot_commit+0x5a/0x410 [ 130.545116][ T5342] ? __ext4_journal_start_sb+0x1bd/0x360 [ 130.550757][ T5342] ext4_write_dquot+0x1f0/0x360 [ 130.555619][ T5342] mark_all_dquot_dirty+0xf9/0x400 [ 130.560745][ T5342] __dquot_free_space+0x7ca/0xb90 [ 130.565790][ T5342] ext4_free_blocks+0x1af5/0x2480 [ 130.570843][ T5342] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 130.578281][ T5342] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 130.584494][ T5342] ? ext4_inode_journal_mode+0x18f/0x460 [ 130.590154][ T5342] ext4_ext_remove_space+0x1eaa/0x4390 [ 130.595643][ T5342] ? rcu_lock_release+0x5/0x20 [ 130.600419][ T5342] ? rcu_is_watching+0x11/0xa0 [ 130.605200][ T5342] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 130.611190][ T5342] ? ext4_es_remove_extent+0x24f/0x3e0 [ 130.616660][ T5342] ext4_ext_truncate+0x192/0x240 [ 130.621605][ T5342] ext4_truncate+0x9f1/0x10d0 [ 130.626294][ T5342] ? __ext4_mark_inode_dirty+0x700/0x700 [ 130.631978][ T5342] ext4_evict_inode+0xb43/0x1080 [ 130.636927][ T5342] ? _raw_spin_unlock+0x24/0x40 [ 130.641791][ T5342] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 130.647693][ T5342] ? do_raw_spin_unlock+0x11d/0x230 [ 130.652925][ T5342] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 130.658826][ T5342] evict+0x485/0x870 [ 130.662732][ T5342] ? __lock_acquire+0x7c60/0x7c60 [ 130.667780][ T5342] ? proc_nr_inodes+0x320/0x320 [ 130.672640][ T5342] ? do_raw_spin_unlock+0x11d/0x230 [ 130.677848][ T5342] ? _raw_spin_unlock+0x24/0x40 [ 130.682707][ T5342] ? iput+0x706/0x8a0 [ 130.686696][ T5342] ext4_orphan_cleanup+0xaa9/0x12e0 [ 130.691907][ T5342] ? ext4_orphan_del+0xb90/0xb90 [ 130.696871][ T5342] ? errseq_check_and_advance+0x62/0x120 [ 130.702513][ T5342] ext4_fill_super+0x9288/0x9a00 [ 130.707479][ T5342] ? ext4_mount+0x40/0x40 [ 130.711836][ T5342] ? set_blocksize+0x1f1/0x370 [ 130.716609][ T5342] ? sb_set_blocksize+0xa5/0xe0 [ 130.721476][ T5342] mount_bdev+0x287/0x3c0 [ 130.725813][ T5342] ? ext4_mount+0x40/0x40 [ 130.730153][ T5342] legacy_get_tree+0xe6/0x180 [ 130.734837][ T5342] ? ext4_errno_to_code+0x160/0x160 [ 130.740039][ T5342] vfs_get_tree+0x88/0x270 [ 130.744470][ T5342] do_new_mount+0x24a/0xa40 [ 130.748985][ T5342] __se_sys_mount+0x2d6/0x3c0 [ 130.753671][ T5342] ? __x64_sys_mount+0xc0/0xc0 [ 130.758440][ T5342] ? lockdep_hardirqs_on+0x94/0x140 [ 130.763646][ T5342] ? __x64_sys_mount+0x1c/0xc0 [ 130.768415][ T5342] do_syscall_64+0x4c/0xa0 [ 130.772836][ T5342] ? clear_bhb_loop+0x30/0x80 [ 130.777523][ T5342] ? clear_bhb_loop+0x30/0x80 [ 130.782212][ T5342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.788129][ T5342] RIP: 0033:0x7f3dd8a5b0ca [ 130.792555][ T5342] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.812168][ T5342] RSP: 002b:00007f3dd68c0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.820590][ T5342] RAX: ffffffffffffffda RBX: 00007f3dd68c0ef0 RCX: 00007f3dd8a5b0ca [ 130.828568][ T5342] RDX: 0000200000000840 RSI: 0000200000000140 RDI: 00007f3dd68c0eb0 [ 130.836548][ T5342] RBP: 0000200000000840 R08: 00007f3dd68c0ef0 R09: 0000000002000040 [ 130.844523][ T5342] R10: 0000000002000040 R11: 0000000000000246 R12: 0000200000000140 [ 130.852499][ T5342] R13: 00007f3dd68c0eb0 R14: 0000000000000501 R15: 0000200000001980 [ 130.860487][ T5342] [ 130.873825][ T5342] EXT4-fs (loop2): 1 orphan inode deleted [ 130.879707][ T5342] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodiscard,grpjquota=,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000079,resgid=0x0000000000000000,acl,noinit_itable,usrquota,i_version,,errors=continue. Quota mode: writeback. [ 130.906191][ T5342] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.156515][ T4620] usb 2-1: Using ep0 maxpacket: 8 [ 131.276585][ T4620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.287612][ T4620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.297410][ T4620] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.310268][ T4620] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 131.319635][ T4620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.328965][ T4620] usb 2-1: config 0 descriptor?? [ 131.808024][ T4620] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 131.815245][ T4620] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 131.822452][ T4620] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 131.830916][ T4620] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 132.246551][ T4620] logitech 0003:046D:C29C.0004: no inputs found [ 132.255406][ T4620] usb 2-1: USB disconnect, device number 6 [ 132.286750][ T5354] fido_id[5354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 132.828674][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835001][ T1427] ieee802154 phy1 wpan1: encryption failed: -22