last executing test programs: 1m31.575044434s ago: executing program 4 (id=452): write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd200010"], 0xffe) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000000c0)=0x4020003, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 1m31.349725565s ago: executing program 4 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x94, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x5e0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xcc, 0x80, 0x10}}}}}]}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$nvram(0xffffffffffffff9c, 0x0, 0xd3029f4ed660f78, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x88ab8, 0xca26, 0xffffffffffffffff, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x3, 0x8, 0x8000000000000001, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xf9, 0x2, 0x9, 0x0, 0x1, 0x0, 0x7, 0xb, 0x0, 0x1, 0xd, 0x2, 0x0, 0x4231, 0x3, 0xfc, 0x1, 0x2, 0x8, '\x00', 0x2, 0x35c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m30.051378236s ago: executing program 4 (id=459): bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0xa, 0x5, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) 1m25.806417922s ago: executing program 4 (id=481): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m24.990426378s ago: executing program 4 (id=483): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m23.897465935s ago: executing program 4 (id=488): syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000340)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) 1m23.478114469s ago: executing program 32 (id=488): syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000340)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) 6.604711377s ago: executing program 3 (id=938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x2e8, 0x218, 0x3d8, 0x3d8, 0x128, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, 0x0, {[{{@ipv6={@private1, @local, [], [], 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'syzkaller0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@loopback}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@loopback}}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 6.370438518s ago: executing program 3 (id=941): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 6.072110098s ago: executing program 3 (id=944): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x4f2f, 0x2, 0x8b4, 0x979f, 0x7}, &(0x7f0000000180)=0x14) 5.090430588s ago: executing program 2 (id=946): r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) dup2(r3, r2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 4.90968753s ago: executing program 3 (id=949): getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xae, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000001010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="00160100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.755569445s ago: executing program 2 (id=952): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="440b08710204", 0x6) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[]) 4.649755914s ago: executing program 0 (id=953): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x35, 0x1, 0x9252d97fd2c70b17, "0000000000080000000000000042d3000700400200", 0x50565559}) 4.592643028s ago: executing program 2 (id=954): r0 = add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x72, &(0x7f0000000080)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @remote, @private1, [@hopopts={0x11}]}}}}}}}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000640), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000000)={&(0x7f0000000280)={'md5-generic\x00'}}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) msgget$private(0x0, 0x0) r2 = msgget(0x0, 0x2c4) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_RMID(r2, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r0, r3) 4.570963114s ago: executing program 0 (id=955): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 4.460109451s ago: executing program 0 (id=956): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88fb}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) 3.249655099s ago: executing program 5 (id=958): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x240bf, 0x0) geteuid() setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000140)={{0x2b, @loopback, 0x4e22, 0x2, 'lc\x00', 0xa, 0x8, 0x4d}, {@local, 0x4e20, 0x4, 0x161, 0x1, 0xfff}}, 0x44) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) 3.173371895s ago: executing program 3 (id=960): r0 = syz_open_dev$swradio(&(0x7f0000000580), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000680)={0x867d, "16e261e8a369eab5140666f11ffd3018c8e2a363d7cbc5820bf8323971ef2899", 0x1, 0x2, 0x800, 0xc0000000, 0x2, 0x3, 0x900, 0xa}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hidraw(&(0x7f0000000380), 0x0, 0x4180) 2.861660442s ago: executing program 1 (id=961): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x0, 0x0) 2.861444239s ago: executing program 5 (id=962): r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) dup2(r3, r2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2.603285541s ago: executing program 1 (id=963): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8a902) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000000, 0x26b}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x6ed2, 0x8000dae5, 0x0, 0x0, 0x0) 2.460274477s ago: executing program 5 (id=964): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x6, 0x0, 0x8, 0x8000, 0x4, 0x8c, 0xb6}, 0x20) 2.381016535s ago: executing program 1 (id=965): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x35, 0x1, 0x9252d97fd2c70b17, "0000000000080000000000000042d3000700400200", 0x50565559}) 2.233708968s ago: executing program 5 (id=966): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "fcf2cc875f5f5199", "e595183169ea38989fc5e8fe39495c51", "98e338b6", "ea082d6d31af1084"}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8abb, 0x6, 0x204, 0xd646, 0x3ff, 0xf, 0x120000, 0x1ff, 0x4, 0x8, 0x8000000000000003, 0x2, 0x10003, 0x101, 0x5, 0x4f45], 0xab000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x7, '\x00', 0x5}) 2.197475148s ago: executing program 1 (id=967): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x1100}, {r0, 0x11}], 0x2, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000000c0)) 2.168414331s ago: executing program 0 (id=968): r0 = syz_io_uring_setup(0xa5d, &(0x7f0000000480)={0x0, 0x3, 0x0, 0x8000, 0x4f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r3, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.865262133s ago: executing program 5 (id=969): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000e80), 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.864836382s ago: executing program 1 (id=970): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x89f) ppoll(&(0x7f0000000240)=[{r5, 0x220}, {r2, 0x8315}], 0x2, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000200)=0x80000002) 807.575243ms ago: executing program 5 (id=971): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x1, 0x9, {0x9, 0x21, 0x8}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x2000, @broadcast}, 0x10, 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000000)=0x6) 641.68663ms ago: executing program 2 (id=972): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0x0) dup2(r1, r0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 515.96441ms ago: executing program 1 (id=973): socket$alg(0x26, 0x5, 0x0) io_setup(0xff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xc2) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x22c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x9c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4}}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x5}}, {0xe, 0x2, [0x3, 0x4, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x2}}, {0x8, 0x2, [0x8001, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x0, 0xf, 0xffff, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x10001, 0x1, 0x8, 0x970}}, {0x4}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0x10, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0xfff, 0x4, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x22c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000980)) 495.168221ms ago: executing program 2 (id=974): r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) dup2(r3, r2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 468.139184ms ago: executing program 0 (id=975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 69.73049ms ago: executing program 3 (id=976): r0 = syz_open_dev$media(0x0, 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f00000001c0)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000000)={{0x80000000, 0x0, 0x5, [0x7, 0x8]}, {0x80000000, 0x0, 0x2, [0x8, 0x9]}, 0x2, [0x80000001, 0x6]}) 46.992799ms ago: executing program 0 (id=977): pipe2(0x0, 0x0) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x40001043, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) write$FUSE_INIT(r2, &(0x7f0000003100)={0x50}, 0x50) tee(r1, 0xffffffffffffffff, 0x8, 0x4) 0s ago: executing program 2 (id=978): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1000, 0xfbff, 0x12, 0x86}, 'syz1\x00', 0x16}) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): tered promiscuous mode [ 80.514080][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.532349][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.544678][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.554879][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.564062][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.579033][ T5844] veth0_macvtap: entered promiscuous mode [ 80.615253][ T5844] veth1_macvtap: entered promiscuous mode [ 80.634003][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.644608][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.654645][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.665425][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.677011][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.717527][ T5836] veth0_vlan: entered promiscuous mode [ 80.728127][ T5836] veth1_vlan: entered promiscuous mode [ 80.753600][ T5836] veth0_macvtap: entered promiscuous mode [ 80.763708][ T5836] veth1_macvtap: entered promiscuous mode [ 80.773692][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.790099][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.801411][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.813534][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.835806][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.886443][ T5830] veth0_macvtap: entered promiscuous mode [ 80.901617][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.917644][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.929094][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.937921][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.982657][ T5830] veth1_macvtap: entered promiscuous mode [ 80.994549][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.005544][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.016516][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.031310][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.042705][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.053591][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.065426][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.110914][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.120687][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.134026][ T5918] program syz.3.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.148254][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.172521][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.183744][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.196919][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.212703][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.224448][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.244874][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.260174][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.274765][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.293928][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.303905][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.315253][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.326350][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.344519][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.354650][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.365875][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.378536][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.386589][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.396632][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.407117][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.415966][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.443140][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.454148][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.464188][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.476568][ T5839] Bluetooth: hci4: command tx timeout [ 81.482350][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.492293][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.502897][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.513643][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.526442][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.539301][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.547357][ T54] Bluetooth: hci3: command tx timeout [ 81.549661][ T5145] Bluetooth: hci0: command tx timeout [ 81.552844][ T5839] Bluetooth: hci2: command tx timeout [ 81.603141][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.612418][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.628840][ T5839] Bluetooth: hci1: command tx timeout [ 81.666169][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.683857][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.703443][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.711296][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.763378][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.773813][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.783513][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.793164][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.811765][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.825296][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.010618][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.029553][ T5929] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 82.058244][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.076132][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.101161][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.241827][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.262812][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.467044][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 82.491727][ T30] audit: type=1326 audit(1735186917.057:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.1" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac6a985d29 code=0x0 [ 82.649905][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.689613][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 82.755249][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.792708][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.837773][ T25] usb 5-1: Product: syz [ 82.842034][ T25] usb 5-1: Manufacturer: syz [ 82.867100][ T25] usb 5-1: SerialNumber: syz [ 83.131300][ T25] cdc_ncm 5-1:1.0: bind() failure [ 83.165742][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 83.179851][ T25] cdc_ncm 5-1:1.1: bind() failure [ 83.195160][ T25] usb 5-1: USB disconnect, device number 2 [ 83.548415][ T5839] Bluetooth: hci4: command tx timeout [ 83.632282][ T5839] Bluetooth: hci0: command tx timeout [ 83.632647][ T5963] loop3: detected capacity change from 0 to 2048 [ 83.638749][ T5839] Bluetooth: hci2: command tx timeout [ 83.656791][ T5145] Bluetooth: hci3: command tx timeout [ 83.709491][ T5963] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.718684][ T5839] Bluetooth: hci1: command tx timeout [ 83.733744][ T5963] process 'syz.3.20' launched './file1' with NULL argv: empty string added [ 84.009199][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 84.062026][ T5972] Zero length message leads to an empty skb [ 84.417237][ T5839] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 84.425860][ T5839] Bluetooth: Wrong link type (-22) [ 84.748085][ T5925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.196893][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 86.214727][ T5925] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 86.223631][ T5925] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 86.233967][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 86.252272][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.263760][ T5925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.292009][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 86.311704][ T5925] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 86.323216][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.375061][ T5925] usb 1-1: config 0 descriptor?? [ 86.610350][ T5925] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 86.673343][ T6002] bond0: Unable to set up delay as MII monitoring is disabled [ 87.003051][ T5925] usb 1-1: USB disconnect, device number 2 [ 87.044714][ T6007] loop2: detected capacity change from 0 to 2048 [ 87.050115][ T5925] usblp0: removed [ 87.095868][ T6007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.667233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.019759][ T6050] loop1: detected capacity change from 0 to 2048 [ 89.044012][ T6050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.157907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 89.253270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 90.766314][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 90.775578][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 90.987051][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.234744][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.382306][ T5883] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.604992][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.673873][ T5883] usb 2-1: config 0 descriptor?? [ 91.716239][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 91.918844][ T5883] pwc: send_video_command error -71 [ 91.924140][ T5883] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 91.963291][ T5883] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 92.025667][ T5883] usb 2-1: USB disconnect, device number 2 [ 92.208798][ T975] cfg80211: failed to load regulatory.db [ 92.578163][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.603991][ T975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.767090][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.777549][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 92.787178][ T5883] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 92.796296][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.834098][ T975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.868332][ T975] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 92.893512][ T975] usb 5-1: config 127 has no interface number 0 [ 92.907858][ T5883] usb 2-1: config 0 descriptor?? [ 92.934257][ T975] usb 5-1: config 127 interface 25 has no altsetting 0 [ 92.959241][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 92.992531][ T975] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 93.032655][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.040921][ T975] usb 5-1: Product: syz [ 93.045682][ T975] usb 5-1: Manufacturer: syz [ 93.051393][ T975] usb 5-1: SerialNumber: syz [ 93.877563][ T975] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 93.897635][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 93.909011][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 93.916053][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 93.924704][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 93.934979][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 93.956874][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 93.996991][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 94.018088][ T5883] pwc: recv_control_msg error -32 req 02 val 2100 [ 94.080931][ T5883] pwc: recv_control_msg error -32 req 04 val 1500 [ 94.113092][ T5883] pwc: recv_control_msg error -32 req 02 val 2500 [ 94.142705][ T5883] pwc: recv_control_msg error -32 req 02 val 2400 [ 94.250467][ T975] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 94.268234][ T6141] sctp: [Deprecated]: syz.0.83 (pid 6141) Use of int in max_burst socket option deprecated. [ 94.268234][ T6141] Use struct sctp_assoc_value instead [ 94.295261][ T975] usb 5-1: device reset changed ep0 maxpacket size! [ 94.330072][ T975] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 94.362200][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 94.392387][ T975] usb 5-1: USB disconnect, device number 3 [ 94.408780][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 94.426855][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 94.449641][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 94.469226][ T5883] pwc: Registered as video103. [ 94.487293][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 94.512618][ T6145] netlink: 'syz.2.84': attribute type 3 has an invalid length. [ 94.536726][ T5883] usb 2-1: USB disconnect, device number 3 [ 94.541599][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 94.566872][ T975] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.721945][ T6148] netlink: 'syz.0.85': attribute type 10 has an invalid length. [ 94.776429][ T6148] team0: Device veth0_macvtap failed to register rx_handler [ 94.798792][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 94.833454][ T975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.869796][ T6148] syz.0.85 uses obsolete (PF_INET,SOCK_PACKET) [ 94.889967][ T975] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 94.904220][ T975] usb 5-1: can't read configurations, error -71 [ 95.163746][ T6157] binder: 6156:6157 ioctl c0306201 20000100 returned -14 [ 95.396901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.407243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.437105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.445862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.454611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.558530][ T6058] Set syz1 is full, maxelem 65536 reached [ 96.580213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.589041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.743789][ T6181] usb usb8: usbfs: process 6181 (syz.3.95) did not claim interface 0 before use [ 97.419340][ T6199] Invalid option length (1045106) for dns_resolver key [ 98.851935][ T5885] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 99.034350][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.096385][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.164884][ T5885] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 99.302335][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.396416][ T5885] usb 5-1: config 0 descriptor?? [ 99.985341][ T5885] itetech 0003:06CB:2968.0001: unknown main item tag 0x0 [ 99.992681][ T5885] itetech 0003:06CB:2968.0001: unknown main item tag 0x0 [ 99.999996][ T5885] itetech 0003:06CB:2968.0001: unknown main item tag 0x0 [ 100.008402][ T5885] itetech 0003:06CB:2968.0001: unknown main item tag 0x0 [ 100.017820][ T5885] itetech 0003:06CB:2968.0001: unknown main item tag 0x0 [ 100.027768][ T5885] itetech 0003:06CB:2968.0001: unknown main item tag 0x0 [ 100.034882][ T5885] itetech 0003:06CB:2968.0001: unknown main item tag 0x0 [ 100.057810][ T5885] itetech 0003:06CB:2968.0001: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.4-1/input0 [ 100.184429][ T975] usb 5-1: USB disconnect, device number 6 [ 100.919031][ T6229] input: syz1 as /devices/virtual/input/input6 [ 102.752969][ T6275] loop0: detected capacity change from 0 to 2048 [ 102.852222][ T6275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.446859][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.933882][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.172012][ T5885] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.181873][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.222749][ T5885] usb 2-1: config 0 descriptor?? [ 104.249161][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 104.427034][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.463289][ T5885] pwc: send_video_command error -71 [ 104.469815][ T5885] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 104.478368][ T5885] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 104.502621][ T5885] usb 2-1: USB disconnect, device number 4 [ 104.625121][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.635824][ T5925] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.643556][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.663697][ T5883] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.681779][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.706091][ T5883] usb 3-1: SerialNumber: syz [ 105.018994][ T5883] usb 3-1: 0:2 : does not exist [ 105.157175][ T5883] usb 3-1: USB disconnect, device number 2 [ 105.300562][ T6308] loop0: detected capacity change from 0 to 2048 [ 105.327207][ T6308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.351088][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.365562][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 177, changing to 11 [ 105.377108][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.439865][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 105.495040][ T5925] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.539424][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.559470][ T5925] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 105.585003][ T5885] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 105.612908][ T5925] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.628742][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.654765][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.688178][ T5885] usb 2-1: config 0 descriptor?? [ 105.697604][ T5925] usb 5-1: Product: syz [ 105.778319][ T5925] usb 5-1: Manufacturer: syz [ 105.783083][ T5925] usb 5-1: SerialNumber: syz [ 105.797601][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 105.830564][ T6293] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 105.981036][ T5885] pwc: send_video_command error -71 [ 106.029823][ T5885] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 106.078505][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.102907][ T5885] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 106.166172][ T5885] usb 2-1: USB disconnect, device number 5 [ 106.210877][ T5925] cdc_ncm 5-1:1.0: bind() failure [ 106.236646][ T5925] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 106.476428][ T5925] cdc_ncm 5-1:1.1: bind() failure [ 106.500004][ T5925] usb 5-1: USB disconnect, device number 7 [ 107.378858][ T6329] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 109.799927][ T6366] program syz.0.160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.337206][ T975] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.589907][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 110.628389][ T975] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 110.688219][ T975] usb 5-1: config 0 has no interface number 0 [ 110.694406][ T975] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 110.796746][ T975] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 110.834879][ T975] usb 5-1: config 0 interface 41 has no altsetting 0 [ 110.856825][ T975] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 110.900066][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.949775][ T975] usb 5-1: Product: syz [ 110.954017][ T975] usb 5-1: Manufacturer: syz [ 110.994251][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.003150][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.012705][ T975] usb 5-1: SerialNumber: syz [ 111.037095][ T6384] bridge0: entered allmulticast mode [ 111.058228][ T975] usb 5-1: config 0 descriptor?? [ 111.087558][ T6376] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.127514][ T6376] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.422219][ T6384] bridge_slave_1: left allmulticast mode [ 111.545896][ T6384] bridge_slave_1: left promiscuous mode [ 111.691420][ T6364] loop2: detected capacity change from 0 to 32768 [ 111.730709][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.810909][ T6364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.158 (6364) [ 111.869904][ T6384] bridge_slave_0: left allmulticast mode [ 111.892238][ T6376] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.894166][ T6384] bridge_slave_0: left promiscuous mode [ 111.905594][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.934375][ T6376] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.037267][ T6364] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.068618][ T6364] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 112.108157][ T6364] BTRFS info (device loop2): using free-space-tree [ 112.287506][ T975] Error reading MAC address [ 112.304254][ T6376] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.315740][ T6376] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.760517][ T5840] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.991692][ T975] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, fe:bc:61:32:48:70 [ 113.021662][ T975] usb 5-1: USB disconnect, device number 8 [ 113.031084][ T975] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 113.496613][ T6432] syzkaller1: entered promiscuous mode [ 113.526305][ T6432] syzkaller1: entered allmulticast mode [ 114.277362][ T5925] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.436983][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 114.464059][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.496839][ T5925] usb 2-1: config 0 has no interfaces? [ 114.525242][ T5925] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.556907][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.623760][ T6459] loop0: detected capacity change from 0 to 4096 [ 114.630643][ T5925] usb 2-1: config 0 descriptor?? [ 114.699978][ T6459] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 114.814013][ T6459] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 114.821686][ T6456] loop2: detected capacity change from 0 to 32768 [ 114.938024][ T6456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.183 (6456) [ 115.062073][ T6456] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.088867][ T5925] usb 2-1: USB disconnect, device number 6 [ 115.100890][ T5844] ntfs3(loop0): ino=1a, ntfs_sync_fs failed, -22. [ 115.109526][ T6456] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 115.157102][ T6456] BTRFS info (device loop2): using free-space-tree [ 115.598539][ T5840] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.154723][ T6501] cgroup: fork rejected by pids controller in /syz1 [ 116.437025][ T6493] loop3: detected capacity change from 0 to 32768 [ 116.448931][ T6493] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.189 (6493) [ 116.466655][ T6493] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.477618][ T6493] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 117.140340][ T6493] BTRFS info (device loop3): rebuilding free space tree [ 117.442602][ T6493] BTRFS info (device loop3): disabling free space tree [ 117.469236][ T6493] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.480352][ T6493] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.876092][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.378625][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.531986][ T5829] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.806155][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.149328][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.159619][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.175300][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.187314][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.205701][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.215311][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.224060][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.566023][ T6563] cgroup: fork rejected by pids controller in /syz0 [ 120.299447][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 120.420562][ T975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.543746][ T67] bridge_slave_1: left allmulticast mode [ 120.551505][ T67] bridge_slave_1: left promiscuous mode [ 120.562310][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.590352][ T975] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.615416][ T975] usb 5-1: config 0 has no interface number 0 [ 120.635497][ T67] bridge_slave_0: left allmulticast mode [ 120.642359][ T67] bridge_slave_0: left promiscuous mode [ 120.645246][ T975] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 120.648231][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.707992][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.716073][ T975] usb 5-1: Product: syz [ 120.743871][ T975] usb 5-1: Manufacturer: syz [ 120.753040][ T975] usb 5-1: SerialNumber: syz [ 120.774983][ T975] usb 5-1: config 0 descriptor?? [ 121.011075][ T975] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 121.037039][ T975] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.047711][ T975] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 121.055937][ T975] usb 5-1: media controller created [ 121.074643][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.200051][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.237820][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.263265][ T67] bond0 (unregistering): Released all slaves [ 121.308223][ T5839] Bluetooth: hci1: command tx timeout [ 121.423780][ T46] usb 5-1: USB disconnect, device number 9 [ 121.498355][ T5844] syz-executor (5844) used greatest stack depth: 18256 bytes left [ 121.610331][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.623742][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.635121][ T6555] bridge_slave_0: entered allmulticast mode [ 121.646881][ T6555] bridge_slave_0: entered promiscuous mode [ 121.757306][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.764505][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.789781][ T6555] bridge_slave_1: entered allmulticast mode [ 121.804546][ T6555] bridge_slave_1: entered promiscuous mode [ 122.075195][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.124082][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.289992][ T67] hsr_slave_0: left promiscuous mode [ 122.310528][ T67] hsr_slave_1: left promiscuous mode [ 122.325946][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.370801][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.441592][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.453935][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.480086][ T6632] cgroup: fork rejected by pids controller in /syz4 [ 122.485307][ T6630] loop2: detected capacity change from 0 to 2048 [ 122.559881][ T67] veth1_macvtap: left promiscuous mode [ 122.565949][ T67] veth0_macvtap: left promiscuous mode [ 122.597186][ T67] veth1_vlan: left promiscuous mode [ 122.602839][ T67] veth0_vlan: left promiscuous mode [ 122.645123][ T6630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.668540][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.678538][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.687477][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.703291][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.713621][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 122.723848][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.815035][ T6629] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.887946][ T6629] EXT4-fs (loop2): Remounting filesystem read-only [ 123.055037][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.399353][ T54] Bluetooth: hci1: command tx timeout [ 123.591139][ T67] team0 (unregistering): Port device team_slave_1 removed [ 123.641653][ T67] team0 (unregistering): Port device team_slave_0 removed [ 124.264797][ T6555] team0: Port device team_slave_0 added [ 124.279879][ T6555] team0: Port device team_slave_1 added [ 124.366856][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 124.703156][ T6663] loop3: detected capacity change from 0 to 32768 [ 124.741870][ T6663] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.237 (6663) [ 124.785170][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.801229][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.827749][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.840578][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.847706][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.873713][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.973941][ T54] Bluetooth: hci4: command tx timeout [ 125.224429][ T6555] hsr_slave_0: entered promiscuous mode [ 125.242893][ T6555] hsr_slave_1: entered promiscuous mode [ 125.248648][ T6663] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.259636][ T6663] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 125.274439][ T6663] BTRFS info (device loop3): using free-space-tree [ 125.317048][ T6555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.337800][ T6555] Cannot create hsr debugfs directory [ 125.478985][ T54] Bluetooth: hci1: command tx timeout [ 125.817653][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.847392][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.867149][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.876344][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.924618][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.942601][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.959569][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.344401][ T6640] chnl_net:caif_netlink_parms(): no params data found [ 126.518933][ T6713] loop2: detected capacity change from 0 to 2048 [ 126.558233][ T6713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.623980][ T6712] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.643833][ T6712] EXT4-fs (loop2): Remounting filesystem read-only [ 126.691505][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.987057][ T5839] Bluetooth: hci4: command tx timeout [ 127.041687][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.114386][ T6728] cgroup: fork rejected by pids controller in /syz2 [ 127.213730][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.274209][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.302682][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.336278][ T6640] bridge_slave_0: entered allmulticast mode [ 127.373608][ T6640] bridge_slave_0: entered promiscuous mode [ 127.421553][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.459329][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.468969][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.476260][ T6640] bridge_slave_1: entered allmulticast mode [ 127.484149][ T6640] bridge_slave_1: entered promiscuous mode [ 127.520889][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.558888][ T5839] Bluetooth: hci1: command tx timeout [ 127.560696][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.577821][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.752147][ T6640] team0: Port device team_slave_0 added [ 127.850774][ T6640] team0: Port device team_slave_1 added [ 128.026496][ T6555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.076369][ T6555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.133826][ T5839] Bluetooth: hci3: command tx timeout [ 128.161954][ T6698] chnl_net:caif_netlink_parms(): no params data found [ 128.287590][ T6555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.616322][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.721079][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.884472][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.912059][ T6555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.974958][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.987291][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.016167][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.067185][ T5839] Bluetooth: hci4: command tx timeout [ 129.159848][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.340005][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.383880][ T6640] hsr_slave_0: entered promiscuous mode [ 129.427364][ T6640] hsr_slave_1: entered promiscuous mode [ 129.444593][ T6640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.464862][ T6640] Cannot create hsr debugfs directory [ 129.595723][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.601696][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.615535][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.621941][ T6750] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.624174][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.643914][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.671408][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.694160][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.718093][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.730140][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.745061][ T6698] bridge_slave_0: entered allmulticast mode [ 129.753457][ T6698] bridge_slave_0: entered promiscuous mode [ 129.820568][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.835915][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.843818][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.851528][ T6698] bridge_slave_1: entered allmulticast mode [ 129.859235][ T6698] bridge_slave_1: entered promiscuous mode [ 129.936043][ T6698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.977704][ T6698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.072991][ T6698] team0: Port device team_slave_0 added [ 130.143686][ T6698] team0: Port device team_slave_1 added [ 130.197550][ T54] Bluetooth: hci3: command tx timeout [ 130.289871][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.310548][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.351110][ T6698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.368053][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.377897][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.407459][ T6698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.482744][ T67] bridge_slave_1: left allmulticast mode [ 130.495684][ T67] bridge_slave_1: left promiscuous mode [ 130.505509][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.534502][ T67] bridge_slave_0: left allmulticast mode [ 130.544179][ T67] bridge_slave_0: left promiscuous mode [ 130.552791][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.569101][ T67] bridge_slave_1: left allmulticast mode [ 130.574826][ T67] bridge_slave_1: left promiscuous mode [ 130.589986][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.668300][ T67] bridge_slave_0: left allmulticast mode [ 130.674049][ T67] bridge_slave_0: left promiscuous mode [ 130.686994][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.149590][ T54] Bluetooth: hci4: command tx timeout [ 131.682465][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.708807][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.727818][ T67] bond0 (unregistering): Released all slaves [ 131.799115][ T54] Bluetooth: hci2: command tx timeout [ 132.007412][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.021773][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.048404][ T67] bond0 (unregistering): Released all slaves [ 132.267343][ T54] Bluetooth: hci3: command tx timeout [ 132.655954][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.728750][ T6698] hsr_slave_0: entered promiscuous mode [ 132.739076][ T6698] hsr_slave_1: entered promiscuous mode [ 132.745314][ T6698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.760647][ T6698] Cannot create hsr debugfs directory [ 132.773100][ T6748] chnl_net:caif_netlink_parms(): no params data found [ 133.134292][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.163303][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.170145][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.261725][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.268925][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.469854][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.477080][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.500231][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.514502][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.526295][ T6748] bridge_slave_0: entered allmulticast mode [ 133.540427][ T6748] bridge_slave_0: entered promiscuous mode [ 133.559113][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.566269][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.583378][ T6748] bridge_slave_1: entered allmulticast mode [ 133.593999][ T6748] bridge_slave_1: entered promiscuous mode [ 133.771909][ T67] hsr_slave_0: left promiscuous mode [ 133.800319][ T67] hsr_slave_1: left promiscuous mode [ 133.812503][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.826972][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.856894][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.864405][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.877306][ T54] Bluetooth: hci2: command tx timeout [ 133.896284][ T67] hsr_slave_0: left promiscuous mode [ 133.906445][ T67] hsr_slave_1: left promiscuous mode [ 133.929220][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.947074][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.955058][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.976821][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.059687][ T67] veth1_macvtap: left promiscuous mode [ 134.065257][ T67] veth0_macvtap: left promiscuous mode [ 134.079357][ T67] veth1_vlan: left promiscuous mode [ 134.086076][ T67] veth0_vlan: left promiscuous mode [ 134.094938][ T67] veth1_macvtap: left promiscuous mode [ 134.101505][ T67] veth1_vlan: left promiscuous mode [ 134.107679][ T67] veth0_vlan: left promiscuous mode [ 134.347041][ T54] Bluetooth: hci3: command tx timeout [ 134.665766][ T67] team0 (unregistering): Port device team_slave_1 removed [ 134.711900][ T67] team0 (unregistering): Port device team_slave_0 removed [ 135.432985][ T67] team0 (unregistering): Port device team_slave_1 removed [ 135.476393][ T67] team0 (unregistering): Port device team_slave_0 removed [ 135.877264][ T6748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.933491][ T6640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.947986][ T54] Bluetooth: hci2: command tx timeout [ 135.970628][ T6748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.034824][ T6640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.047969][ T6640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.072170][ T6640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.111019][ T6748] team0: Port device team_slave_0 added [ 136.129785][ T6748] team0: Port device team_slave_1 added [ 136.288709][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.317507][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.351860][ T6748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.450194][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.466840][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.506849][ T6748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.708784][ T6748] hsr_slave_0: entered promiscuous mode [ 136.729017][ T6748] hsr_slave_1: entered promiscuous mode [ 136.862834][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.991777][ T6698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.000115][ T6867] netlink: 165 bytes leftover after parsing attributes in process `syz.3.259'. [ 137.034213][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.052334][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.103775][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.111036][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.121675][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.128893][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.157906][ T6698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.202627][ T6698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.207072][ T6869] netlink: 'syz.3.260': attribute type 8 has an invalid length. [ 137.248927][ T6698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.552625][ T6748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.581965][ T6555] veth0_vlan: entered promiscuous mode [ 137.643133][ T6748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.683880][ T6555] veth1_vlan: entered promiscuous mode [ 137.758635][ T6748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.791165][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.861784][ T6748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.976404][ T6555] veth0_macvtap: entered promiscuous mode [ 138.028791][ T6555] veth1_macvtap: entered promiscuous mode [ 138.036860][ T54] Bluetooth: hci2: command tx timeout [ 138.070301][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.082843][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.095493][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.106393][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.123175][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.154209][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.230913][ T3516] bridge_slave_1: left allmulticast mode [ 138.236640][ T3516] bridge_slave_1: left promiscuous mode [ 138.249792][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.269189][ T3516] bridge_slave_0: left allmulticast mode [ 138.279818][ T3516] bridge_slave_0: left promiscuous mode [ 138.297347][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.979346][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.014251][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.039936][ T3516] bond0 (unregistering): Released all slaves [ 139.060721][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.086724][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.096616][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.126740][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.155162][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.184218][ T6555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.193377][ T6555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.202567][ T6555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.211630][ T6555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.234356][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.265735][ T6640] veth0_vlan: entered promiscuous mode [ 139.487431][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.494705][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.511486][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.518712][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.616125][ T6748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.627017][ T6748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.641417][ T6748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.652505][ T6748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.753477][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.761755][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.768074][ T6640] veth1_vlan: entered promiscuous mode [ 139.799620][ T6698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.810125][ T6698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.953644][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.961779][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.016148][ T3516] hsr_slave_0: left promiscuous mode [ 140.037048][ T3516] hsr_slave_1: left promiscuous mode [ 140.044779][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.057209][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.089870][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.107280][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.171206][ T3516] veth1_macvtap: left promiscuous mode [ 140.188945][ T3516] veth0_macvtap: left promiscuous mode [ 140.194703][ T3516] veth1_vlan: left promiscuous mode [ 140.206911][ T3516] veth0_vlan: left promiscuous mode [ 140.610366][ T6914] loop3: detected capacity change from 0 to 32768 [ 140.624809][ T6914] ======================================================= [ 140.624809][ T6914] WARNING: The mand mount option has been deprecated and [ 140.624809][ T6914] and is ignored by this kernel. Remove the mand [ 140.624809][ T6914] option from the mount to silence this warning. [ 140.624809][ T6914] ======================================================= [ 140.786145][ T6914] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 141.039243][ T6914] syz.3.266 (6914) used greatest stack depth: 16984 bytes left [ 141.172053][ T5829] ocfs2: Unmounting device (7,3) on (node local) [ 141.237169][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 141.367973][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 141.741472][ T6927] loop3: detected capacity change from 0 to 4096 [ 141.758572][ T6927] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 141.924794][ T6927] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 142.054136][ T5829] ntfs3(loop3): ino=1a, ntfs_sync_fs failed, -22. [ 142.634463][ T6640] veth0_macvtap: entered promiscuous mode [ 142.808892][ T6640] veth1_macvtap: entered promiscuous mode [ 142.844301][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.934476][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.951834][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.981884][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.993005][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.004671][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.056379][ T6748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.066509][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.086746][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.114483][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.126030][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.151595][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.197652][ T6640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.206530][ T6640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.225492][ T6640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.235033][ T6640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.293068][ T6748] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.352449][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.359654][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.394746][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.401959][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.561315][ T6698] veth0_vlan: entered promiscuous mode [ 143.598422][ T6748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.617184][ T6748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.662858][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.691646][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.731330][ T6698] veth1_vlan: entered promiscuous mode [ 143.830339][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.848725][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.909492][ T6698] veth0_macvtap: entered promiscuous mode [ 143.943490][ T6698] veth1_macvtap: entered promiscuous mode [ 144.040573][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.088244][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.118861][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.146425][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.174464][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.199553][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.254621][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.286511][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.330499][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.376070][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.406843][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.423184][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.451469][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.481956][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.524614][ T6698] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.551698][ T6698] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.564947][ T6698] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.601552][ T6698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.708494][ T6748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.957251][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.965378][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.071969][ T6748] veth0_vlan: entered promiscuous mode [ 145.095792][ T6748] veth1_vlan: entered promiscuous mode [ 145.110999][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.136726][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.203236][ T6748] veth0_macvtap: entered promiscuous mode [ 145.236529][ T6748] veth1_macvtap: entered promiscuous mode [ 145.284390][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.328438][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.361567][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.393867][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.424589][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.454131][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.484866][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.523186][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.545417][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.602125][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.633346][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.653865][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.666931][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.702167][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.734254][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.756862][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.784218][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.806494][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.859260][ T6748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.881227][ T6748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.911283][ T6748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.938010][ T6748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.214791][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.257056][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.362197][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.406843][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.604864][ T6966] loop4: detected capacity change from 0 to 32768 [ 146.789659][ T6966] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 146.922875][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 147.109680][ T6698] ocfs2: Unmounting device (7,4) on (node local) [ 148.885774][ T6956] Set syz1 is full, maxelem 65536 reached [ 150.146933][ T7019] loop3: detected capacity change from 0 to 32768 [ 150.173598][ T7019] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.290 (7019) [ 150.241136][ T7019] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.261811][ T7019] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 150.361275][ T7019] BTRFS info (device loop3): rebuilding free space tree [ 150.447948][ T7019] BTRFS info (device loop3): disabling free space tree [ 150.485639][ T7019] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.526982][ T7019] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.976037][ T7027] loop2: detected capacity change from 0 to 32768 [ 151.025802][ T5829] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.277042][ T7027] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 151.638909][ T6748] ocfs2: Unmounting device (7,2) on (node local) [ 151.712422][ T7056] input: syz0 as /devices/virtual/input/input8 [ 151.737149][ T5925] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.890168][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 152.057088][ T5925] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 152.066478][ T5925] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 152.075214][ T5925] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 152.084462][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.094447][ T5925] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.104254][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.117477][ T5925] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 152.127159][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.144066][ T5925] usb 5-1: config 0 descriptor?? [ 152.367320][ T5925] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.585266][ T9] usb 5-1: USB disconnect, device number 10 [ 152.600459][ T9] usblp0: removed [ 153.568645][ T7079] netlink: 165 bytes leftover after parsing attributes in process `syz.4.305'. [ 153.675103][ T7085] netlink: 104 bytes leftover after parsing attributes in process `syz.0.308'. [ 154.842347][ T7094] loop0: detected capacity change from 0 to 32768 [ 154.863655][ T7094] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.310 (7094) [ 154.910004][ T7094] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.935357][ T7094] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 155.222519][ T7094] BTRFS info (device loop0): rebuilding free space tree [ 155.370400][ T7094] BTRFS info (device loop0): disabling free space tree [ 155.379221][ T7094] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.392824][ T7094] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.349643][ T6640] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.867019][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.036870][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 158.055020][ T5884] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 158.077846][ T5884] usb 4-1: config 0 has no interface number 0 [ 158.107447][ T5884] usb 4-1: config 0 interface 12 has no altsetting 0 [ 158.142355][ T5884] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 158.173645][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.203013][ T5884] usb 4-1: Product: syz [ 158.223954][ T5884] usb 4-1: Manufacturer: syz [ 158.231748][ T7171] loop4: detected capacity change from 0 to 32768 [ 158.245376][ T5884] usb 4-1: SerialNumber: syz [ 158.277188][ T7171] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.331 (7171) [ 158.281718][ T5884] usb 4-1: config 0 descriptor?? [ 158.312130][ T7171] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.323015][ T7171] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 158.605231][ T7171] BTRFS info (device loop4): rebuilding free space tree [ 158.658693][ T7171] BTRFS info (device loop4): disabling free space tree [ 158.665884][ T7171] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.676996][ T7171] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.573726][ T6698] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.894004][ T5884] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 159.901668][ T5884] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 159.966868][ T5884] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 159.974677][ T5884] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 160.043611][ T5884] usb 4-1: USB disconnect, device number 2 [ 161.573129][ T7232] loop2: detected capacity change from 0 to 32768 [ 161.588703][ T7232] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.346 (7232) [ 161.623631][ T7232] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.634115][ T7232] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 161.666967][ T5884] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 161.782611][ T7232] BTRFS info (device loop2): rebuilding free space tree [ 161.816502][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.349'. [ 161.852357][ T5884] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.862659][ T5884] usb 2-1: config 0 has no interface number 0 [ 161.905657][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.926784][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 161.956891][ T5884] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 161.962870][ T7232] BTRFS info (device loop2): disabling free space tree [ 161.975221][ T5884] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 161.988733][ T7232] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.001329][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.013544][ T7232] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.015118][ T5884] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 162.033900][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.060769][ T5884] usb 2-1: config 0 descriptor?? [ 162.076084][ T7262] program syz.4.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.078559][ T7236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.119427][ T5884] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 162.380125][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.401953][ T5884] usb 2-1: USB disconnect, device number 7 [ 162.420626][ T5884] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 162.589420][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.631547][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.706922][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 162.751897][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 162.810030][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.879033][ T9] usb 4-1: config 0 descriptor?? [ 162.962373][ T6748] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.306893][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.408193][ T9] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 163.416465][ T9] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 163.426358][ T9] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 163.435011][ T9] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 163.443291][ T9] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 163.476880][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 163.497070][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 163.514421][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.536805][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.566841][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.586811][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.591245][ T5925] usb 4-1: USB disconnect, device number 3 [ 163.618271][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.651213][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.711905][ T7282] input: syz1 as /devices/virtual/input/input9 [ 163.729328][ T7284] loop0: detected capacity change from 0 to 32768 [ 163.742912][ T7284] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.359 (7284) [ 163.776488][ T7284] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.788459][ T7284] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 163.897807][ T25] usb 5-1: usb_control_msg returned -32 [ 163.914592][ T25] usbtmc 5-1:16.0: can't read capabilities [ 163.914881][ T7284] BTRFS info (device loop0): rebuilding free space tree [ 164.013979][ T7284] BTRFS info (device loop0): disabling free space tree [ 164.023963][ T7306] input: syz0 as /devices/virtual/input/input10 [ 164.026891][ T7284] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.052917][ T7284] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.208294][ T6640] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.461997][ T5925] usb 5-1: USB disconnect, device number 11 [ 164.475240][ T7307] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 165.554127][ T7322] loop1: detected capacity change from 0 to 32768 [ 165.575868][ T7322] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.368 (7322) [ 165.639789][ T7322] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.656369][ T7322] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.901509][ T7322] BTRFS info (device loop1): rebuilding free space tree [ 165.980810][ T7322] BTRFS info (device loop1): disabling free space tree [ 166.019151][ T7322] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.068388][ T7322] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.175148][ T7340] loop0: detected capacity change from 0 to 32768 [ 167.185174][ T7340] BTRFS: device /dev/loop0 (7:0) using temp-fsid 51a0f784-38f5-43cb-81ee-58b6176d8c82 [ 167.196409][ T7340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.373 (7340) [ 167.458030][ T7340] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.524085][ T7340] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 167.559023][ T6555] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.959987][ T7340] BTRFS info (device loop0): rebuilding free space tree [ 168.012707][ T7340] BTRFS info (device loop0): disabling free space tree [ 168.046825][ T7340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.076968][ T7340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.414599][ T6640] BTRFS info (device loop0): last unmount of filesystem 51a0f784-38f5-43cb-81ee-58b6176d8c82 [ 168.863585][ T7410] netlink: 144 bytes leftover after parsing attributes in process `syz.3.387'. [ 170.059898][ T7423] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 170.276997][ T25] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 170.365212][ T7436] netlink: 1088 bytes leftover after parsing attributes in process `syz.4.398'. [ 170.375336][ T30] audit: type=1326 audit(1735187004.907:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bbf85d29 code=0x7ffc0000 [ 170.405846][ T30] audit: type=1326 audit(1735187004.907:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bbf85d29 code=0x7ffc0000 [ 170.437738][ T30] audit: type=1326 audit(1735187004.937:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7bbf85d29 code=0x7ffc0000 [ 170.473382][ T30] audit: type=1326 audit(1735187004.937:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bbf85d29 code=0x7ffc0000 [ 170.503434][ T30] audit: type=1326 audit(1735187004.937:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff7bbf85d29 code=0x7ffc0000 [ 170.532375][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.546929][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 170.556769][ T5884] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.587510][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 170.599780][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 170.609300][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.617681][ T25] usb 4-1: Product: syz [ 170.621896][ T25] usb 4-1: Manufacturer: syz [ 170.626537][ T25] usb 4-1: SerialNumber: syz [ 170.646871][ T30] audit: type=1326 audit(1735187005.187:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bbf85d29 code=0x7ffc0000 [ 170.741181][ T7440] netlink: 96 bytes leftover after parsing attributes in process `syz.1.400'. [ 170.742796][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 170.757950][ T7440] vlan2: entered allmulticast mode [ 170.791427][ T5884] usb 3-1: config 9 has an invalid interface number: 181 but max is 0 [ 170.815748][ T5884] usb 3-1: config 9 has no interface number 0 [ 170.842397][ T5884] usb 3-1: config 9 interface 181 has no altsetting 0 [ 170.852044][ T5884] usb 3-1: New USB device found, idVendor=0856, idProduct=ac24, bcdDevice=7a.83 [ 170.871757][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.886793][ T5884] usb 3-1: Product: syz [ 170.891028][ T5884] usb 3-1: Manufacturer: syz [ 170.895972][ T25] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 170.908198][ T7442] input: syz1 as /devices/virtual/input/input12 [ 170.926142][ T5884] usb 3-1: SerialNumber: syz [ 170.949624][ T5192] bcm5974 4-1:1.0: could not read from device [ 170.959717][ T25] usb 4-1: USB disconnect, device number 4 [ 170.995219][ T5192] bcm5974 4-1:1.0: could not read from device [ 171.040891][ T5192] bcm5974 4-1:1.0: could not read from device [ 171.202512][ T5884] mos7840 3-1:9.181: required endpoints missing [ 171.232967][ T5884] usb 3-1: USB disconnect, device number 3 [ 171.290870][ T7430] loop0: detected capacity change from 0 to 32768 [ 171.335276][ T7430] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.396 (7430) [ 171.378659][ T7430] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.389099][ T7430] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 172.211360][ T7430] BTRFS info (device loop0): rebuilding free space tree [ 172.229338][ T7430] BTRFS info (device loop0): disabling free space tree [ 172.236757][ T7430] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.246456][ T7430] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.387022][ T6640] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.822215][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.932745][ T7485] input: syz1 as /devices/virtual/input/input13 [ 172.985194][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.997603][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.013138][ T5884] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 173.026986][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.055554][ T5884] usb 2-1: config 0 descriptor?? [ 173.563561][ T5884] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.0003/input/input14 [ 173.669806][ T5884] uclogic 0003:28BD:0935.0003: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0 [ 173.773924][ T5885] usb 2-1: USB disconnect, device number 8 [ 174.220125][ T7497] loop3: detected capacity change from 0 to 32768 [ 174.236387][ T7497] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.417 (7497) [ 174.276841][ T7497] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.302579][ T7497] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 174.419226][ T7497] BTRFS info (device loop3): rebuilding free space tree [ 174.451172][ T7497] BTRFS info (device loop3): disabling free space tree [ 174.458578][ T7497] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.469296][ T7497] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.446122][ T5829] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.812417][ T7542] input: syz0 as /devices/virtual/input/input15 [ 176.036823][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.206940][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 176.226827][ T9] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 176.274285][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.315949][ T9] usb 2-1: config 0 descriptor?? [ 176.367140][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 176.761056][ T7555] netlink: 'syz.0.432': attribute type 11 has an invalid length. [ 177.159608][ T7559] loop3: detected capacity change from 0 to 32768 [ 177.187742][ T7559] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.434 (7559) [ 177.242571][ T7559] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.253641][ T7559] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 177.432981][ T7559] BTRFS info (device loop3): rebuilding free space tree [ 177.495722][ T7559] BTRFS info (device loop3): disabling free space tree [ 177.516772][ T7559] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 177.549377][ T7559] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 177.686929][ T9] gspca_vc032x: reg_w err -71 [ 177.691699][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.697139][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.702473][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.707990][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.713329][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.718807][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.724164][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.729967][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.735696][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.741274][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.746747][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.752071][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.757478][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.762968][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.768567][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.774113][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.779521][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.784847][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.790283][ T9] gspca_vc032x: Unknown sensor... [ 177.795407][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 177.836963][ T9] usb 2-1: USB disconnect, device number 9 [ 179.080677][ T5829] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.855237][ T7607] input: syz0 as /devices/virtual/input/input16 [ 179.994428][ T7610] netlink: 'syz.1.445': attribute type 11 has an invalid length. [ 181.943824][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 182.143849][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 182.202487][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.203812][ T7641] netlink: 'syz.0.456': attribute type 11 has an invalid length. [ 182.221271][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 182.235067][ T9] usb 5-1: can't read configurations, error -71 [ 182.529454][ T7635] loop3: detected capacity change from 0 to 32768 [ 182.596120][ T7635] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.451 (7635) [ 182.646680][ T7635] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.699260][ T7635] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 182.921608][ T7635] BTRFS info (device loop3): rebuilding free space tree [ 182.979995][ T7592] Set syz1 is full, maxelem 65536 reached [ 183.272390][ T7635] BTRFS info (device loop3): disabling free space tree [ 183.346925][ T7635] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.386868][ T7635] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.486811][ T7672] netlink: 104 bytes leftover after parsing attributes in process `syz.1.461'. [ 184.100931][ T7682] loop1: detected capacity change from 0 to 1024 [ 184.357177][ T5829] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 184.655001][ T29] hfsplus: b-tree write err: -5, ino 4 [ 186.337796][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.380433][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.393556][ T7718] loop2: detected capacity change from 0 to 1024 [ 186.406905][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.428424][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.474158][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.516285][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.549013][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.568771][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.585577][ T7714] loop1: detected capacity change from 0 to 32768 [ 186.588629][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.605779][ T3516] hfsplus: b-tree write err: -5, ino 4 [ 186.623447][ T7714] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.476 (7714) [ 186.629381][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.652812][ T7714] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 186.663122][ T7714] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 186.683488][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.716840][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.755068][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.800090][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.811503][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.822178][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.829958][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.837867][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.847263][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.855119][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.863311][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.871405][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.882285][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.891881][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 186.932838][ T7714] BTRFS info (device loop1): rebuilding free space tree [ 186.956346][ T7714] BTRFS info (device loop1): disabling free space tree [ 186.968105][ T7714] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.983932][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.002861][ T7714] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.021844][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.034358][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.051725][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.062493][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.074483][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.086583][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.119511][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.129304][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.138851][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.158173][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.170244][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.393150][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.422016][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.429727][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.926400][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.933919][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.941440][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.949006][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 187.958589][ T6555] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.977466][ T5885] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 189.345012][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.522795][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.834393][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.908220][ T7698] Set syz1 is full, maxelem 65536 reached [ 190.853612][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.863383][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.872405][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.914148][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.921875][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.929737][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.145622][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.262885][ T7762] loop3: detected capacity change from 0 to 32768 [ 191.339578][ T7762] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.492 (7762) [ 191.404887][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 191.432787][ T7762] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.450723][ T7762] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 191.616394][ T7762] BTRFS info (device loop3): rebuilding free space tree [ 191.645868][ T7762] BTRFS info (device loop3): disabling free space tree [ 191.662184][ T7762] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.675633][ T7762] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.785501][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.816522][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.926964][ T7769] bridge_slave_0: entered allmulticast mode [ 191.940032][ T7769] bridge_slave_0: entered promiscuous mode [ 192.068624][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.213813][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.592734][ T7769] bridge_slave_1: entered allmulticast mode [ 192.599786][ T7769] bridge_slave_1: entered promiscuous mode [ 192.610867][ T52] bridge_slave_1: left allmulticast mode [ 192.616575][ T52] bridge_slave_1: left promiscuous mode [ 192.633100][ T5829] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 192.658753][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.755253][ T52] bridge_slave_0: left allmulticast mode [ 192.766882][ T52] bridge_slave_0: left promiscuous mode [ 192.772657][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.993577][ T5839] Bluetooth: hci3: command tx timeout [ 193.720587][ T7841] kvm: pic: level sensitive irq not supported [ 193.720965][ T7841] kvm: pic: level sensitive irq not supported [ 193.769056][ T7841] kvm: pic: single mode not supported [ 193.788174][ T7841] kvm: pic: single mode not supported [ 193.793674][ T7841] kvm: pic: level sensitive irq not supported [ 193.816281][ T7841] kvm: pic: single mode not supported [ 193.825380][ T7841] kvm: pic: single mode not supported [ 193.831268][ T7841] kvm: pic: level sensitive irq not supported [ 193.844597][ T7841] kvm: pic: single mode not supported [ 193.853291][ T7841] kvm: pic: single mode not supported [ 193.858815][ T7841] kvm: pic: level sensitive irq not supported [ 193.874068][ T7841] kvm: pic: single mode not supported [ 193.881535][ T7841] kvm: pic: level sensitive irq not supported [ 193.893663][ T7841] kvm: pic: single mode not supported [ 193.907074][ T7841] kvm: pic: level sensitive irq not supported [ 193.917522][ T7841] kvm: pic: level sensitive irq not supported [ 193.934339][ T7841] kvm: pic: level sensitive irq not supported [ 193.944274][ T7841] kvm: pic: single mode not supported [ 193.950760][ T7841] kvm: pic: level sensitive irq not supported [ 193.967210][ T7841] kvm: pic: single mode not supported [ 194.137019][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.164562][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.185818][ T52] bond0 (unregistering): Released all slaves [ 194.344272][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.594163][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.600770][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.604695][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.819745][ T7769] team0: Port device team_slave_0 added [ 194.930015][ T7769] team0: Port device team_slave_1 added [ 195.089377][ T7873] Invalid option length (1045106) for dns_resolver key [ 195.158618][ T5839] Bluetooth: hci3: command tx timeout [ 195.540498][ T52] hsr_slave_0: left promiscuous mode [ 195.615155][ T52] hsr_slave_1: left promiscuous mode [ 195.655491][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.677414][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.709308][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.726431][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.757124][ T52] veth0_macvtap: left promiscuous mode [ 195.762861][ T52] veth1_vlan: left promiscuous mode [ 195.768931][ T52] veth0_vlan: left promiscuous mode [ 195.898719][ T7887] kvm: user requested TSC rate below hardware speed [ 195.937075][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 196.165579][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 196.175690][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.207692][ T46] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 196.246466][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.270316][ T46] usb 3-1: config 0 descriptor?? [ 196.698390][ T46] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.726783][ T46] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.733918][ T46] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.763813][ T46] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.791621][ T46] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 196.799527][ T46] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 196.887949][ T52] team0 (unregistering): Port device team_slave_1 removed [ 197.065732][ T52] team0 (unregistering): Port device team_slave_0 removed [ 197.110304][ T5925] usb 3-1: USB disconnect, device number 4 [ 197.228701][ T5839] Bluetooth: hci3: command tx timeout [ 197.445208][ T7906] fuse: Bad value for 'fd' [ 198.193433][ T7922] Invalid option length (1045106) for dns_resolver key [ 199.300424][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.310012][ T5839] Bluetooth: hci3: command tx timeout [ 200.286755][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.534286][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.554430][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.561721][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.588038][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.820944][ T7769] hsr_slave_0: entered promiscuous mode [ 200.897543][ T7769] hsr_slave_1: entered promiscuous mode [ 200.917975][ T7769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.925620][ T7769] Cannot create hsr debugfs directory [ 201.391816][ T7974] Invalid option length (1045106) for dns_resolver key [ 201.875599][ T7769] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.903423][ T7769] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.924010][ T7769] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.953925][ T7769] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.243770][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.381749][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.450081][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.457312][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.518350][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 202.614281][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.621507][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.372515][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.223473][ T7769] veth0_vlan: entered promiscuous mode [ 204.270378][ T7769] veth1_vlan: entered promiscuous mode [ 204.368909][ T7769] veth0_macvtap: entered promiscuous mode [ 204.422026][ T7769] veth1_macvtap: entered promiscuous mode [ 204.505709][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.518964][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.536415][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.553221][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.564974][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.585021][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.595758][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.620863][ T8050] Invalid option length (1045106) for dns_resolver key [ 204.635243][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.655193][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.697869][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.714493][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.725810][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.743467][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.754354][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.773092][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.783702][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.816031][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.869047][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.905118][ T7769] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.938826][ T7769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.964905][ T7769] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.000012][ T7769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.182831][ T8041] loop0: detected capacity change from 0 to 32768 [ 205.226911][ T8041] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.562 (8041) [ 205.233501][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.269659][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.319812][ T8041] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.346930][ T8041] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 205.362604][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.403667][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.411514][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.529075][ T8041] BTRFS info (device loop0): rebuilding free space tree [ 205.608109][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 205.637836][ T8041] BTRFS info (device loop0): disabling free space tree [ 205.655992][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.688453][ T8041] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.709655][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 205.721634][ T8041] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.762308][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 205.785551][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.814136][ T9] usb 4-1: Product: syz [ 205.824255][ T9] usb 4-1: Manufacturer: syz [ 205.839200][ T9] usb 4-1: SerialNumber: syz [ 206.071395][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 206.724329][ T9] usb 4-1: USB disconnect, device number 5 [ 206.727751][ T6640] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.766805][ T9] usblp0: removed [ 207.337779][ T8111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.570'. [ 207.348305][ T8111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.570'. [ 207.395254][ T8111] bond0: entered promiscuous mode [ 207.400744][ T8111] bond_slave_0: entered promiscuous mode [ 207.475508][ T8111] bond_slave_1: entered promiscuous mode [ 207.541042][ T8111] syz_tun: entered promiscuous mode [ 209.122450][ T8153] input: syz0 as /devices/virtual/input/input17 [ 209.364701][ T8132] loop5: detected capacity change from 0 to 32768 [ 209.444831][ T8132] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.577 (8132) [ 209.512959][ T8164] Invalid option length (1045106) for dns_resolver key [ 209.669785][ T8132] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.716008][ T8132] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 209.859548][ T8175] netlink: 'syz.2.585': attribute type 11 has an invalid length. [ 209.938841][ T8132] BTRFS info (device loop5): rebuilding free space tree [ 210.068974][ T30] audit: type=1326 audit(1735187044.637:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.1.586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7bbf85d29 code=0x0 [ 210.115450][ T8132] BTRFS info (device loop5): disabling free space tree [ 210.149564][ T8132] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.166758][ T8132] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.237298][ T7769] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.797681][ T8211] UHID_CREATE from different security context by process 398 (syz.3.594), this is not allowed. [ 211.920459][ T8218] input: syz0 as /devices/virtual/input/input18 [ 212.155749][ T8224] netlink: 'syz.2.598': attribute type 11 has an invalid length. [ 214.688224][ T8277] netlink: 'syz.1.612': attribute type 11 has an invalid length. [ 215.332274][ T8290] input: syz0 as /devices/virtual/input/input19 [ 215.444596][ T8257] loop0: detected capacity change from 0 to 32768 [ 215.477397][ T8257] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.607 (8257) [ 215.573675][ T8257] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.585933][ T8257] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 215.826899][ T8257] BTRFS info (device loop0): rebuilding free space tree [ 215.861812][ T8257] BTRFS info (device loop0): disabling free space tree [ 215.869845][ T8257] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 215.880302][ T8257] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.890927][ T8274] loop3: detected capacity change from 0 to 32768 [ 216.899108][ T6640] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 216.931527][ T8274] BTRFS: device /dev/loop3 (7:3) using temp-fsid 41ba83fb-6b60-45ea-b755-f434aa25002b [ 216.997533][ T8274] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.610 (8274) [ 217.102302][ T8274] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.136868][ T8341] netlink: 'syz.1.624': attribute type 11 has an invalid length. [ 217.207362][ T8274] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 217.681657][ T8274] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 218.964780][ T8274] BTRFS error (device loop3): open_ctree failed: -12 [ 220.182355][ T8391] loop0: detected capacity change from 0 to 32768 [ 220.395085][ T8391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.632 (8391) [ 220.434493][ T8391] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 220.444872][ T8391] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 220.610769][ T8391] BTRFS info (device loop0): rebuilding free space tree [ 220.724515][ T8391] BTRFS info (device loop0): disabling free space tree [ 220.746936][ T8391] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.785544][ T8391] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 222.624386][ T6640] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.920650][ T8449] loop3: detected capacity change from 0 to 32768 [ 222.975368][ T8449] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.644 (8449) [ 223.033022][ T8449] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 223.078093][ T8449] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 223.174996][ T8469] input: syz0 as /devices/virtual/input/input20 [ 223.789105][ T8449] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 223.789425][ T8449] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 223.799741][ T8449] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 223.871608][ T8449] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 223.943185][ T8449] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 223.976914][ T8449] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 224.013649][ T8449] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 224.055983][ T8449] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 224.104250][ T8449] BTRFS error (device loop3): open_ctree failed: -12 [ 224.244569][ T8511] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 225.438833][ T8553] loop3: detected capacity change from 0 to 1024 [ 225.661144][ T197] hfsplus: b-tree write err: -5, ino 4 [ 225.949756][ T8569] netlink: 173 bytes leftover after parsing attributes in process `syz.2.674'. [ 226.476178][ T8561] loop1: detected capacity change from 0 to 32768 [ 226.510307][ T8561] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.671 (8561) [ 226.727955][ T8579] netlink: 'syz.3.679': attribute type 11 has an invalid length. [ 226.795362][ T8561] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 226.811788][ T8561] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 227.044067][ T8561] BTRFS info (device loop1): rebuilding free space tree [ 227.116949][ T8604] loop2: detected capacity change from 0 to 1024 [ 227.291562][ T8561] BTRFS info (device loop1): disabling free space tree [ 227.299467][ T8561] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 227.314561][ T8561] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 228.379457][ T29] hfsplus: b-tree write err: -5, ino 4 [ 228.784827][ T6555] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 229.740559][ T8652] loop5: detected capacity change from 0 to 1024 [ 230.036991][ T197] hfsplus: b-tree write err: -5, ino 4 [ 230.916560][ T8700] fuse: Bad value for 'fd' [ 231.062813][ T8705] loop3: detected capacity change from 0 to 1024 [ 231.232901][ T197] hfsplus: b-tree write err: -5, ino 4 [ 231.667209][ T8729] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 231.758250][ T8731] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 232.070697][ T8743] loop0: detected capacity change from 0 to 1024 [ 232.122407][ T8689] loop2: detected capacity change from 0 to 32768 [ 232.182171][ T8689] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.698 (8689) [ 232.251849][ T8689] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.265657][ T52] hfsplus: b-tree write err: -5, ino 4 [ 232.296865][ T8689] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 232.523179][ T8689] BTRFS info (device loop2): rebuilding free space tree [ 232.579412][ T8689] BTRFS info (device loop2): disabling free space tree [ 232.597849][ T8689] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 232.613421][ T8689] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 233.423708][ T8794] input: syz1 as /devices/virtual/input/input21 [ 233.885882][ T8811] loop0: detected capacity change from 0 to 1024 [ 234.217294][ T52] hfsplus: b-tree write err: -5, ino 4 [ 235.309986][ T6748] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 235.338137][ T8862] loop5: detected capacity change from 0 to 1024 [ 235.928303][ T29] hfsplus: b-tree write err: -5, ino 4 [ 237.491809][ T8884] input: syz0 as /devices/virtual/input/input22 [ 237.533928][ T8914] loop2: detected capacity change from 0 to 1024 [ 237.887155][ T197] hfsplus: b-tree write err: -5, ino 4 [ 239.555738][ T8910] loop0: detected capacity change from 0 to 32768 [ 239.588948][ T8910] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.761 (8910) [ 239.952321][ T8910] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 239.962951][ T8910] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 240.121785][ T8956] loop2: detected capacity change from 0 to 1024 [ 240.309474][ T8910] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 240.344704][ T8910] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 240.357342][ T8910] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 240.552831][ T29] hfsplus: b-tree write err: -5, ino 4 [ 240.660592][ T8910] BTRFS error (device loop0): open_ctree failed: -12 [ 242.747036][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 243.769069][ T9017] loop5: detected capacity change from 0 to 32768 [ 243.924063][ T9017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.790 (9017) [ 244.052039][ T9017] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.062819][ T9017] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 244.252416][ T9017] BTRFS info (device loop5): rebuilding free space tree [ 244.328663][ T9017] BTRFS info (device loop5): disabling free space tree [ 244.337066][ T9017] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 244.389873][ T9017] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 247.869456][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 247.908431][ T9111] Invalid option length (1045106) for dns_resolver key [ 249.094795][ T7769] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.027673][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 250.385261][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 250.398847][ T46] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 250.407166][ T46] usb 3-1: config 0 has no interface number 0 [ 252.546124][ T46] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 252.555390][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.563537][ T46] usb 3-1: Product: syz [ 252.567811][ T46] usb 3-1: Manufacturer: syz [ 252.572490][ T46] usb 3-1: SerialNumber: syz [ 252.582739][ T46] usb 3-1: config 0 descriptor?? [ 252.705770][ T46] usb 3-1: can't set config #0, error -71 [ 252.713006][ T46] usb 3-1: USB disconnect, device number 5 [ 253.512882][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 254.439138][ T9195] loop5: detected capacity change from 0 to 1024 [ 254.684340][ T9198] dvmrp1: entered allmulticast mode [ 254.898333][ T3548] hfsplus: b-tree write err: -5, ino 4 [ 255.214479][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 256.067518][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.074191][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.543757][ C1] vcan0: j1939_tp_txtimer: 0xffff88807eb91000: tx aborted with unknown reason: -2 [ 258.555955][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 258.632916][ T9281] tipc: Started in network mode [ 258.638335][ T9281] tipc: Node identity 7, cluster identity 4711 [ 258.644578][ T9281] tipc: Node number set to 7 [ 262.502895][ T5925] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 262.879689][ T5925] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.889011][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.901123][ T5925] usb 4-1: config 0 descriptor?? [ 262.909252][ T5925] cp210x 4-1:0.0: cp210x converter detected [ 263.481072][ T5925] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 263.616815][ T5925] cp210x 4-1:0.0: querying part number failed [ 263.675767][ T5925] usb 4-1: cp210x converter now attached to ttyUSB0 [ 263.773421][ T5925] usb 4-1: USB disconnect, device number 6 [ 263.819061][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.828850][ T5925] cp210x 4-1:0.0: device disconnected [ 265.547440][ T30] audit: type=1800 audit(1735187100.107:10): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.929" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 265.567746][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.729288][ T9449] tun0: tun_chr_ioctl cmd 2148553947 [ 267.097826][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 267.397362][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.553377][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.727316][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.955918][ T46] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 268.065320][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.092290][ T46] usb 2-1: config 0 descriptor?? [ 268.253443][ T9476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.406743][ T5925] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 268.533869][ T46] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0006/input/input24 [ 268.606822][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 268.621347][ T5925] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 268.636914][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.649879][ T5925] usb 4-1: SerialNumber: syz [ 268.666116][ T5925] usb 4-1: config 0 descriptor?? [ 268.754383][ T46] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0006/input/input25 [ 268.808458][ T46] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0006/input/input26 [ 268.844997][ T46] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0006/input/input27 [ 268.978973][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 268.988536][ T46] hid-udraw 0003:20D6:CB17.0006: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 269.311640][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.447636][ T46] usb 2-1: USB disconnect, device number 10 [ 269.599776][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 269.751142][ T5925] usb 4-1: media controller created [ 269.802561][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.889879][ T5925] az6027: usb out operation failed. (-71) [ 269.908994][ T5925] az6027: usb out operation failed. (-71) [ 269.917518][ T5925] stb0899_attach: Driver disabled by Kconfig [ 269.923724][ T5925] az6027: no front-end attached [ 269.923724][ T5925] [ 269.959778][ T5925] az6027: usb out operation failed. (-71) [ 269.977551][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 269.986095][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 270.094712][ T5925] dvb-usb: schedule remote query interval to 400 msecs. [ 270.108072][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 270.161474][ T5925] usb 4-1: USB disconnect, device number 7 [ 270.281500][ T5925] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 270.707356][ T5925] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 270.879257][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.900792][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.932142][ T5925] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 270.972584][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.001006][ T5925] usb 4-1: config 0 descriptor?? [ 272.271968][ T5925] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 272.419001][ T5925] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 272.499031][ T5925] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 272.586409][ T5925] usb 4-1: USB disconnect, device number 8 [ 272.620035][ T5925] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 272.776777][ T9545] input: syz0 as /devices/virtual/input/input29 [ 272.784714][ T9545] input: failed to attach handler leds to device input29, error: -6 [ 273.219806][ T9554] ================================================================== [ 273.227963][ T9554] BUG: KASAN: null-ptr-deref in input_ff_create+0x213/0x2f0 [ 273.235305][ T9554] Read of size 8 at addr 0000000000000040 by task syz.2.978/9554 [ 273.243054][ T9554] [ 273.245406][ T9554] CPU: 0 UID: 0 PID: 9554 Comm: syz.2.978 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 273.245435][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.245450][ T9554] Call Trace: [ 273.245457][ T9554] [ 273.245465][ T9554] dump_stack_lvl+0x241/0x360 [ 273.245491][ T9554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.245509][ T9554] ? __pfx__printk+0x10/0x10 [ 273.245538][ T9554] ? _printk+0xd5/0x120 [ 273.245580][ T9554] print_report+0xe8/0x550 [ 273.245606][ T9554] ? __asan_memset+0x23/0x50 [ 273.245626][ T9554] ? __virt_addr_valid+0x58/0x530 [ 273.245652][ T9554] ? input_ff_create+0x213/0x2f0 [ 273.245669][ T9554] kasan_report+0x143/0x180 [ 273.245694][ T9554] ? input_ff_create+0x213/0x2f0 [ 273.245713][ T9554] kasan_check_range+0x282/0x290 [ 273.245739][ T9554] input_ff_create+0x213/0x2f0 [ 273.245757][ T9554] uinput_create_device+0x26d/0x630 [ 273.245786][ T9554] uinput_ioctl_handler+0x488/0x1770 [ 273.245814][ T9554] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 273.245847][ T9554] ? __pfx_uinput_ioctl+0x10/0x10 [ 273.245872][ T9554] __se_sys_ioctl+0xf5/0x170 [ 273.245896][ T9554] do_syscall_64+0xf3/0x230 [ 273.245913][ T9554] ? clear_bhb_loop+0x35/0x90 [ 273.245938][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.245961][ T9554] RIP: 0033:0x7f5a74185d29 [ 273.245981][ T9554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.245997][ T9554] RSP: 002b:00007f5a73ff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.246017][ T9554] RAX: ffffffffffffffda RBX: 00007f5a74375fa0 RCX: 00007f5a74185d29 [ 273.246031][ T9554] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 273.246042][ T9554] RBP: 00007f5a74201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 273.246054][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.246071][ T9554] R13: 0000000000000000 R14: 00007f5a74375fa0 R15: 00007ffd9d10ea28 [ 273.246090][ T9554] [ 273.246097][ T9554] ================================================================== [ 273.737822][ T9554] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 273.745093][ T9554] CPU: 1 UID: 0 PID: 9554 Comm: syz.2.978 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 273.755229][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.765297][ T9554] Call Trace: [ 273.768582][ T9554] [ 273.771517][ T9554] dump_stack_lvl+0x241/0x360 [ 273.776208][ T9554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.781417][ T9554] ? __pfx__printk+0x10/0x10 [ 273.786028][ T9554] ? preempt_schedule+0xe1/0xf0 [ 273.790894][ T9554] ? vscnprintf+0x5d/0x90 [ 273.795240][ T9554] panic+0x349/0x880 [ 273.799153][ T9554] ? check_panic_on_warn+0x21/0xb0 [ 273.804277][ T9554] ? __pfx_panic+0x10/0x10 [ 273.808708][ T9554] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 273.814728][ T9554] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.821073][ T9554] ? print_report+0xe8/0x550 [ 273.825679][ T9554] check_panic_on_warn+0x86/0xb0 [ 273.830631][ T9554] ? input_ff_create+0x213/0x2f0 [ 273.835574][ T9554] end_report+0x77/0x160 [ 273.839844][ T9554] kasan_report+0x154/0x180 [ 273.844364][ T9554] ? input_ff_create+0x213/0x2f0 [ 273.849312][ T9554] kasan_check_range+0x282/0x290 [ 273.854268][ T9554] input_ff_create+0x213/0x2f0 [ 273.859040][ T9554] uinput_create_device+0x26d/0x630 [ 273.864255][ T9554] uinput_ioctl_handler+0x488/0x1770 [ 273.869572][ T9554] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 273.875321][ T9554] ? __pfx_uinput_ioctl+0x10/0x10 [ 273.880362][ T9554] __se_sys_ioctl+0xf5/0x170 [ 273.884964][ T9554] do_syscall_64+0xf3/0x230 [ 273.889476][ T9554] ? clear_bhb_loop+0x35/0x90 [ 273.894168][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.900073][ T9554] RIP: 0033:0x7f5a74185d29 [ 273.904490][ T9554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.924107][ T9554] RSP: 002b:00007f5a73ff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.932534][ T9554] RAX: ffffffffffffffda RBX: 00007f5a74375fa0 RCX: 00007f5a74185d29 [ 273.940528][ T9554] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 273.948519][ T9554] RBP: 00007f5a74201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 273.956511][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.964497][ T9554] R13: 0000000000000000 R14: 00007f5a74375fa0 R15: 00007ffd9d10ea28 [ 273.972484][ T9554] [ 273.975946][ T9554] Kernel Offset: disabled [ 273.980277][ T9554] Rebooting in 86400 seconds..