last executing test programs: 12.093226634s ago: executing program 3 (id=324): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="40150407"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000180)={0x40, 0x6, 0x4, "99095632"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.030509423s ago: executing program 3 (id=328): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={0x0, 0x400, 0x8}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000900)={0x0, 0x10000, 0x0, 0x1}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r7}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.357418867s ago: executing program 3 (id=333): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xfb466550cc4dbec8, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x80}}, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xb, 0x2, "c9ed"}, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="4d11687e113c"}, &(0x7f0000000640)={0x40, 0x19, 0x2, '}('}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb}}) 8.906466118s ago: executing program 2 (id=334): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f0000000340), 0x10, 0xfffffffb, @void, @value}, 0x94) connect(0xffffffffffffffff, &(0x7f00000004c0)=@rc={0x1f, @any, 0x8}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000400)={0xd7, 0xb687, 0xc, 0x7336, 0x3, 0x0, 0x3, 0x5, 0x0, 0x8, 0x200, 0x37fc, 0x8001, 0x101, 0x8, 0x6, 0xc, 0x8000000000000001, 0xa, 0xf, 0x3, 0x1, 0x1, 0x9cf, 0x1}) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000000301010300000000000000000000000314000180060003400002000006000340000400001400198008000200000300000800010002000000100004800c0002800500020002000000200004801c0003800800024000000004080002400000000505000100d300000008"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c000b"], 0x34}}, 0xc000) 8.889659814s ago: executing program 5 (id=335): r0 = socket(0x2a, 0x2, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0xffe0}, {0x0, 0xffe0}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf000}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.545531543s ago: executing program 5 (id=337): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 7.882582089s ago: executing program 1 (id=341): openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0xc0802, 0x0) r0 = syz_io_uring_setup(0x1f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000440), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e9, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 7.784839959s ago: executing program 1 (id=342): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xd01c4813, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x0, 0x4}) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), 0x0) 7.436217907s ago: executing program 5 (id=343): r0 = io_uring_setup(0x66a, &(0x7f00000002c0)) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x28000000) shmget$private(0x0, 0xfffffffffeffffff, 0xa00, &(0x7f0000ffd000/0x1000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.235837043s ago: executing program 2 (id=344): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) io_setup(0x3, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x4, 0x3e}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3, 0x80}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 6.380659054s ago: executing program 3 (id=345): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={0x0, 0x400, 0x8}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000900)={0x0, 0x10000, 0x0, 0x1}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.879886105s ago: executing program 2 (id=346): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, &(0x7f00000001c0)={0x0, 0x5, 0xc, {0xc, 0xb, "0f891cde21a929c4c96e"}}, 0x0}, 0x0) 5.296367921s ago: executing program 3 (id=347): io_uring_setup(0x66a, &(0x7f00000002c0)) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) 5.156847134s ago: executing program 0 (id=348): socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 4.684068053s ago: executing program 4 (id=350): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x6400, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.614579105s ago: executing program 0 (id=351): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) 4.476752631s ago: executing program 5 (id=352): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780), 0x0, 0x0, 0x0}) 4.248651067s ago: executing program 5 (id=353): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x25) close(0xffffffffffffffff) 4.243979071s ago: executing program 0 (id=354): openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0xc0802, 0x0) r0 = syz_io_uring_setup(0x1f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000440), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e9, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 3.436439554s ago: executing program 4 (id=355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 3.375750764s ago: executing program 3 (id=356): syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x800808, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x598e, &(0x7f0000005f40)="$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") llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 3.35970219s ago: executing program 1 (id=357): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/246, 0xf6, 0x20d5) 3.18418413s ago: executing program 0 (id=358): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r2 = dup(r1) r3 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000400)={0x1}) 3.183832901s ago: executing program 1 (id=359): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={0x0, 0x400, 0x8}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000900)={0x0, 0x10000, 0x0, 0x1}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.183508428s ago: executing program 4 (id=360): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x9) 3.069253306s ago: executing program 5 (id=361): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "06a0"}, 0x0, 0x0, 0x0, 0x0}) 2.934501911s ago: executing program 0 (id=362): r0 = socket(0x2a, 0x2, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0xffe0}, {0x0, 0xffe0}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf000}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.807138657s ago: executing program 4 (id=363): socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 2.590028481s ago: executing program 0 (id=364): r0 = io_uring_setup(0x66a, &(0x7f00000002c0)) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x28000000) shmget$private(0x0, 0xfffffffffeffffff, 0xa00, &(0x7f0000ffd000/0x1000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.03468788s ago: executing program 2 (id=365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780), 0x0, 0x0, 0x0}) 1.877860036s ago: executing program 4 (id=366): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) 1.761353553s ago: executing program 2 (id=367): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000080)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.742068078s ago: executing program 1 (id=368): io_uring_setup(0x66a, &(0x7f00000002c0)) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) 1.66451176s ago: executing program 4 (id=369): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xd01c4813, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x0, 0x4}) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), 0x0) 128.438309ms ago: executing program 2 (id=370): openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0xc0802, 0x0) r0 = syz_io_uring_setup(0x1f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000440), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e9, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=371): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = io_uring_setup(0x354a, &(0x7f0000000480)) socket$pppoe(0x18, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 69.414946][ T5831] cgroup: Unknown subsys name 'net' [ 69.544215][ T5831] cgroup: Unknown subsys name 'cpuset' [ 69.552633][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.843578][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.849994][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.934802][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.019997][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.038699][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.056335][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.064205][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.083856][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.092554][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.101328][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.108843][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.131739][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.134315][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.140091][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.146544][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.160945][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.169576][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.177707][ T5863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.185083][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.185829][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.193707][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.206877][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.215104][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.222303][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.229689][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.231609][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.237554][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.244044][ T5864] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.259974][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.267828][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.267998][ T5864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.275091][ T5867] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.282272][ T5864] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.289517][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.298140][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.303354][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.311436][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.327630][ T5856] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.341402][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.738448][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 75.959755][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.967058][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.974895][ T5853] bridge_slave_0: entered allmulticast mode [ 75.981883][ T5853] bridge_slave_0: entered promiscuous mode [ 75.999322][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.006489][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.013727][ T5853] bridge_slave_1: entered allmulticast mode [ 76.020877][ T5853] bridge_slave_1: entered promiscuous mode [ 76.034100][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 76.054798][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 76.081082][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 76.143803][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.164173][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.189737][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 76.281812][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 76.307550][ T5853] team0: Port device team_slave_0 added [ 76.357522][ T5853] team0: Port device team_slave_1 added [ 76.407318][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.415014][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.422434][ T5842] bridge_slave_0: entered allmulticast mode [ 76.429444][ T5842] bridge_slave_0: entered promiscuous mode [ 76.458389][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.465867][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.473306][ T5851] bridge_slave_0: entered allmulticast mode [ 76.480374][ T5851] bridge_slave_0: entered promiscuous mode [ 76.488402][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.495986][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.503459][ T5851] bridge_slave_1: entered allmulticast mode [ 76.510555][ T5851] bridge_slave_1: entered promiscuous mode [ 76.537543][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.544719][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.552409][ T5842] bridge_slave_1: entered allmulticast mode [ 76.559261][ T5842] bridge_slave_1: entered promiscuous mode [ 76.566475][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.573695][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.599751][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.613352][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.620469][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.646567][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.679351][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.687293][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.694844][ T5850] bridge_slave_0: entered allmulticast mode [ 76.701826][ T5850] bridge_slave_0: entered promiscuous mode [ 76.741947][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.749161][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.756652][ T5844] bridge_slave_0: entered allmulticast mode [ 76.763801][ T5844] bridge_slave_0: entered promiscuous mode [ 76.771936][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.779039][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.786467][ T5844] bridge_slave_1: entered allmulticast mode [ 76.793508][ T5844] bridge_slave_1: entered promiscuous mode [ 76.828394][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.835995][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.843703][ T5850] bridge_slave_1: entered allmulticast mode [ 76.850968][ T5850] bridge_slave_1: entered promiscuous mode [ 76.859587][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.905164][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.917834][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.943601][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.965053][ T5853] hsr_slave_0: entered promiscuous mode [ 76.971774][ T5853] hsr_slave_1: entered promiscuous mode [ 76.999173][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.008512][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.015887][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.023504][ T5858] bridge_slave_0: entered allmulticast mode [ 77.030562][ T5858] bridge_slave_0: entered promiscuous mode [ 77.038065][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.045218][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.052454][ T5858] bridge_slave_1: entered allmulticast mode [ 77.059365][ T5858] bridge_slave_1: entered promiscuous mode [ 77.086604][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.110501][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.147891][ T5851] team0: Port device team_slave_0 added [ 77.155602][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.167223][ T5842] team0: Port device team_slave_0 added [ 77.207603][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.221866][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.232554][ T5851] team0: Port device team_slave_1 added [ 77.248713][ T5842] team0: Port device team_slave_1 added [ 77.261608][ T5844] team0: Port device team_slave_0 added [ 77.304584][ T5850] team0: Port device team_slave_0 added [ 77.320919][ T53] Bluetooth: hci1: command tx timeout [ 77.336941][ T5844] team0: Port device team_slave_1 added [ 77.359909][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.367186][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.393141][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.400520][ T53] Bluetooth: hci4: command tx timeout [ 77.405935][ T5850] team0: Port device team_slave_1 added [ 77.409532][ T5849] Bluetooth: hci5: command tx timeout [ 77.415029][ T5856] Bluetooth: hci0: command tx timeout [ 77.420340][ T5849] Bluetooth: hci2: command tx timeout [ 77.425663][ T5854] Bluetooth: hci3: command tx timeout [ 77.432781][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.443670][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.470579][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.501440][ T5858] team0: Port device team_slave_0 added [ 77.507753][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.515094][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.541182][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.557717][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.564924][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.591693][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.618014][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.625245][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.651792][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.684073][ T5858] team0: Port device team_slave_1 added [ 77.690744][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.697710][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.723751][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.758188][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.765274][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.791673][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.833709][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.840841][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.867524][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.887635][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.895084][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.921125][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.949764][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.957871][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.984317][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.001051][ T5851] hsr_slave_0: entered promiscuous mode [ 78.007476][ T5851] hsr_slave_1: entered promiscuous mode [ 78.014078][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.022044][ T5851] Cannot create hsr debugfs directory [ 78.057724][ T5842] hsr_slave_0: entered promiscuous mode [ 78.064487][ T5842] hsr_slave_1: entered promiscuous mode [ 78.071165][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.078742][ T5842] Cannot create hsr debugfs directory [ 78.107476][ T5844] hsr_slave_0: entered promiscuous mode [ 78.114451][ T5844] hsr_slave_1: entered promiscuous mode [ 78.121893][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.129481][ T5844] Cannot create hsr debugfs directory [ 78.198320][ T5858] hsr_slave_0: entered promiscuous mode [ 78.204853][ T5858] hsr_slave_1: entered promiscuous mode [ 78.212763][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.220446][ T5858] Cannot create hsr debugfs directory [ 78.301150][ T5850] hsr_slave_0: entered promiscuous mode [ 78.307585][ T5850] hsr_slave_1: entered promiscuous mode [ 78.314277][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.322413][ T5850] Cannot create hsr debugfs directory [ 78.408982][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.420977][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.458894][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.492943][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.736402][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.746451][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.761143][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.772016][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.829551][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.847545][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.862157][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.872608][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.886185][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.964674][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.986744][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.998699][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.024911][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.033320][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.086695][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.093965][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.126159][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.154985][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.169735][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.181101][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.188206][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.210089][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.277362][ T5850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.307187][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.314856][ T5850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.328450][ T5850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.339589][ T5850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.364968][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.390940][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.400907][ T5854] Bluetooth: hci1: command tx timeout [ 79.422095][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.429183][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.465608][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.472785][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.481003][ T5854] Bluetooth: hci3: command tx timeout [ 79.481106][ T5856] Bluetooth: hci2: command tx timeout [ 79.486751][ T5854] Bluetooth: hci0: command tx timeout [ 79.492467][ T53] Bluetooth: hci5: command tx timeout [ 79.498170][ T5854] Bluetooth: hci4: command tx timeout [ 79.541760][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.566241][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.573379][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.628263][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.635608][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.678302][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.748138][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.759549][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.766689][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.793833][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.862184][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.869312][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.925372][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.995343][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.011973][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.038080][ T5853] veth0_vlan: entered promiscuous mode [ 80.076401][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.127351][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.134551][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.155611][ T5853] veth1_vlan: entered promiscuous mode [ 80.176930][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.184052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.246069][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.253222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.264978][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.272095][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.334940][ T5853] veth0_macvtap: entered promiscuous mode [ 80.345382][ T5853] veth1_macvtap: entered promiscuous mode [ 80.395815][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.414740][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.448410][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.530031][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.547128][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.593466][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.693159][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.703821][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.713874][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.723590][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.749576][ T5851] veth0_vlan: entered promiscuous mode [ 80.780893][ T5842] veth0_vlan: entered promiscuous mode [ 80.798889][ T5858] veth0_vlan: entered promiscuous mode [ 80.822755][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.835702][ T5851] veth1_vlan: entered promiscuous mode [ 80.874020][ T5842] veth1_vlan: entered promiscuous mode [ 80.894626][ T5858] veth1_vlan: entered promiscuous mode [ 80.906886][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.036146][ T5842] veth0_macvtap: entered promiscuous mode [ 81.092730][ T962] cfg80211: failed to load regulatory.db [ 81.113634][ T5842] veth1_macvtap: entered promiscuous mode [ 81.144684][ T5851] veth0_macvtap: entered promiscuous mode [ 81.223169][ T5858] veth0_macvtap: entered promiscuous mode [ 81.238547][ T5851] veth1_macvtap: entered promiscuous mode [ 81.292400][ T5858] veth1_macvtap: entered promiscuous mode [ 81.329309][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.350258][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.388225][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.402453][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.414261][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.447333][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.451285][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.466998][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.476040][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.487362][ T5854] Bluetooth: hci1: command tx timeout [ 81.493320][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.504056][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.516127][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.538024][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.549813][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.561155][ T5849] Bluetooth: hci2: command tx timeout [ 81.566571][ T5849] Bluetooth: hci0: command tx timeout [ 81.566599][ T53] Bluetooth: hci3: command tx timeout [ 81.572237][ T5849] Bluetooth: hci4: command tx timeout [ 81.583032][ T5854] Bluetooth: hci5: command tx timeout [ 81.589347][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.606777][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.616699][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.630256][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.641865][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.671397][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.690291][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.711355][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.721563][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.733068][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.743016][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.753661][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.765547][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.776477][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.794521][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.810383][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.820903][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.837343][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.847558][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.858346][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.870072][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.896359][ T5850] veth0_vlan: entered promiscuous mode [ 81.919483][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.929036][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.946065][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.956142][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.974151][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.982914][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.992193][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.002516][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.017060][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.028164][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.037800][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047527][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.152144][ T5850] veth1_vlan: entered promiscuous mode [ 82.228860][ T5844] veth0_vlan: entered promiscuous mode [ 82.337255][ T5844] veth1_vlan: entered promiscuous mode [ 82.451401][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.459259][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.472726][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.473967][ T5850] veth0_macvtap: entered promiscuous mode [ 82.491863][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.053378][ T5844] veth0_macvtap: entered promiscuous mode [ 83.078644][ T5850] veth1_macvtap: entered promiscuous mode [ 83.148789][ T5844] veth1_macvtap: entered promiscuous mode [ 83.191746][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.216881][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.236391][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.266781][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.308667][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.319937][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.330235][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.341042][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.353898][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.364981][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.375220][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.386075][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.397985][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.434591][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.450685][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.488464][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.504833][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.520818][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.544437][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.557877][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.578997][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.581549][ T5849] Bluetooth: hci1: command tx timeout [ 83.594334][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.594357][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.623952][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.640454][ T5849] Bluetooth: hci4: command tx timeout [ 83.645893][ T5849] Bluetooth: hci5: command tx timeout [ 83.652281][ T5854] Bluetooth: hci3: command tx timeout [ 83.657847][ T5854] Bluetooth: hci0: command tx timeout [ 83.663720][ T5867] Bluetooth: hci2: command tx timeout [ 84.242968][ T5850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.282243][ T5850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.307140][ T5850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.388326][ T5850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473473][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.505129][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.546771][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.565853][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.576275][ T29] audit: type=1326 audit(1731174654.226:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.8" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4c9f7e719 code=0x0 [ 84.599237][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.613075][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.623337][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.634940][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.647995][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.658810][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.687716][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.698183][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.743066][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.838410][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.878598][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.914916][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.948037][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.966520][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.979086][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.000038][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.020558][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.037618][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.049776][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.073862][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.087300][ T5966] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 85.096066][ T5966] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.111499][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.123954][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.138708][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.153228][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.476224][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.484449][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.583799][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.593101][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.928575][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.939083][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.019466][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.035195][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.105185][ T5990] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 86.419898][ T5990] loop1: detected capacity change from 0 to 4096 [ 86.429568][ T5990] ======================================================= [ 86.429568][ T5990] WARNING: The mand mount option has been deprecated and [ 86.429568][ T5990] and is ignored by this kernel. Remove the mand [ 86.429568][ T5990] option from the mount to silence this warning. [ 86.429568][ T5990] ======================================================= [ 86.730377][ T5990] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 87.061735][ T5988] ntfs3(loop1): failed to convert "c46c" to cp855 [ 89.101145][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6'. [ 89.110883][ T6012] Zero length message leads to an empty skb [ 89.371042][ T6016] loop4: detected capacity change from 0 to 32768 [ 89.401305][ T6016] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (6016) [ 90.213939][ T6032] loop0: detected capacity change from 0 to 8192 [ 90.459493][ T6016] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 90.469890][ T6016] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 90.479424][ T6016] BTRFS info (device loop4): using free-space-tree [ 90.499895][ T5211] loop0: p1 p2 p4 [ 90.554335][ T5211] loop0: p1 size 108986237 extends beyond EOD, truncated [ 90.567729][ T5211] loop0: p2 start 65535 is beyond EOD, truncated [ 90.578798][ T5211] loop0: p4 start 50331648 is beyond EOD, truncated [ 90.759172][ T6035] loop5: detected capacity change from 0 to 4096 [ 90.768662][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.808603][ T5868] udevd[5868]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 90.956484][ T5844] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 90.978564][ T5908] usb 4-1: no configurations [ 90.983472][ T5908] usb 4-1: can't read configurations, error -22 [ 91.082125][ T6021] loop2: detected capacity change from 0 to 32768 [ 91.171347][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.347162][ T6021] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.637498][ T5908] usb 4-1: no configurations [ 91.642363][ T5908] usb 4-1: can't read configurations, error -22 [ 91.769490][ T6021] XFS (loop2): Ending clean mount [ 92.184803][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.405336][ T5908] usb usb4-port1: attempt power cycle [ 93.057561][ T79] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 93.260253][ T79] usb 6-1: Using ep0 maxpacket: 16 [ 93.267918][ T79] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.283503][ T79] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.292857][ T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.360632][ T79] usb 6-1: Product: syz [ 93.364847][ T79] usb 6-1: Manufacturer: syz [ 93.369452][ T79] usb 6-1: SerialNumber: syz [ 93.405122][ T79] usb 6-1: config 0 descriptor?? [ 93.862158][ T6116] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.240443][ T79] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.400977][ T79] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 94.436341][ T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.485513][ T79] usb 1-1: config 0 descriptor?? [ 94.529151][ T79] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 94.577210][ T6112] loop1: detected capacity change from 0 to 32768 [ 94.604322][ T6112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.51 (6112) [ 94.688697][ T6112] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.720288][ T6112] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 94.749241][ T6112] BTRFS info (device loop1): using free-space-tree [ 94.794639][ T6115] loop2: detected capacity change from 0 to 32768 [ 95.047671][ T6115] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 95.186165][ T79] gspca_sunplus: reg_w_riv err -71 [ 95.191637][ T79] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 95.195064][ T6115] XFS (loop2): Ending clean mount [ 95.205039][ T5964] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.209366][ T79] usb 1-1: USB disconnect, device number 2 [ 95.313170][ T5858] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.381004][ T5964] usb 4-1: no configurations [ 95.385646][ T5964] usb 4-1: can't read configurations, error -22 [ 95.411485][ T5907] usb 6-1: USB disconnect, device number 2 [ 95.494267][ T5853] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 95.571165][ T5964] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.775806][ T5964] usb 4-1: no configurations [ 95.786343][ T5964] usb 4-1: can't read configurations, error -22 [ 96.575146][ T5964] usb usb4-port1: attempt power cycle [ 97.251834][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 97.480632][ T5905] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.566044][ T6184] loop5: detected capacity change from 0 to 4096 [ 97.573498][ T5964] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.589088][ T6184] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 97.602461][ T5964] usb 4-1: no configurations [ 97.607116][ T5964] usb 4-1: can't read configurations, error -22 [ 97.661066][ T6184] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 97.673176][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.678339][ T6188] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 97.697816][ T6188] overlayfs: conflicting options: metacopy=off,verity=require [ 97.709124][ T5905] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.728731][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.751185][ T5964] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 97.751366][ T5905] usb 1-1: config 0 descriptor?? [ 97.776743][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 97.809258][ T5964] usb 4-1: no configurations [ 97.814656][ T5964] usb 4-1: can't read configurations, error -22 [ 97.841256][ T5964] usb usb4-port1: unable to enumerate USB device [ 97.893495][ T6193] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.69'. [ 98.019184][ T5850] ntfs3(loop5): ino=1a, ntfs_sync_fs failed, -22. [ 98.027020][ T5905] pwc: send_video_command error -71 [ 98.032850][ T5905] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 98.069419][ T5905] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 98.126099][ T5905] usb 1-1: USB disconnect, device number 3 [ 98.308617][ T6201] loop1: detected capacity change from 0 to 4096 [ 98.521516][ T6201] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 101.573831][ T6230] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.83'. [ 102.705974][ T6243] loop0: detected capacity change from 0 to 4096 [ 102.773283][ T6243] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 102.852483][ T5908] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.900791][ T6252] loop1: detected capacity change from 0 to 1024 [ 103.029383][ T6243] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 103.091542][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.110247][ T5908] usb 5-1: config 0 has no interfaces? [ 103.116047][ T5908] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 103.125421][ T5964] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.142770][ T5842] ntfs3(loop0): ino=1a, ntfs_sync_fs failed, -22. [ 103.160054][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.231596][ T5908] usb 5-1: config 0 descriptor?? [ 103.260396][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 103.336165][ T5964] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.346382][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.356236][ T6238] loop5: detected capacity change from 0 to 32768 [ 103.369416][ T5964] usb 3-1: Product: syz [ 103.401401][ T5964] usb 3-1: Manufacturer: syz [ 103.439064][ T6238] XFS (loop5): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 103.443966][ T965] usb 5-1: USB disconnect, device number 2 [ 103.447910][ T5964] usb 3-1: SerialNumber: syz [ 103.524445][ T5964] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.569745][ T5908] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.606024][ T6238] XFS (loop5): Ending clean mount [ 103.753029][ T5850] XFS (loop5): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 103.801859][ T79] usb 3-1: USB disconnect, device number 2 [ 103.890624][ T965] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.974771][ T6281] loop0: detected capacity change from 0 to 256 [ 104.090913][ T6281] FAT-fs (loop0): Directory bread(block 64) failed [ 104.127306][ T6281] FAT-fs (loop0): Directory bread(block 65) failed [ 104.178505][ T6281] FAT-fs (loop0): Directory bread(block 66) failed [ 104.215176][ T6281] FAT-fs (loop0): Directory bread(block 67) failed [ 104.259991][ T6281] FAT-fs (loop0): Directory bread(block 68) failed [ 104.297410][ T6281] FAT-fs (loop0): Directory bread(block 69) failed [ 104.325511][ T6281] FAT-fs (loop0): Directory bread(block 70) failed [ 104.348216][ T6281] FAT-fs (loop0): Directory bread(block 71) failed [ 104.471200][ T6281] FAT-fs (loop0): Directory bread(block 72) failed [ 104.477780][ T6281] FAT-fs (loop0): Directory bread(block 73) failed [ 104.551935][ T965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.626758][ T965] usb 5-1: config 0 has no interfaces? [ 104.658268][ T965] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.686252][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.781682][ T965] usb 5-1: config 0 descriptor?? [ 104.920237][ T5908] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 104.940660][ T5908] ath9k_htc: Failed to initialize the device [ 105.537723][ T79] usb 3-1: ath9k_htc: USB layer deinitialized [ 105.666852][ T5952] usb 5-1: USB disconnect, device number 3 [ 105.865790][ T6303] loop1: detected capacity change from 0 to 4096 [ 106.040498][ T6303] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 106.975279][ T6303] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 107.020830][ T6325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.803711][ T5858] ntfs3(loop1): ino=1a, ntfs_sync_fs failed, -22. [ 108.327239][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 108.358569][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 108.655099][ T6350] openvswitch: netlink: Actions may not be safe on all matching packets [ 109.060263][ T5952] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.955790][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.965964][ T5952] usb 3-1: config 0 has no interfaces? [ 110.972185][ T5952] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 110.981650][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.991705][ T5952] usb 3-1: config 0 descriptor?? [ 111.301948][ T5952] usb 3-1: USB disconnect, device number 3 [ 113.310223][ T29] audit: type=1326 audit(1731174682.876:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f60f7e719 code=0x7fc00000 [ 113.647393][ T6403] loop0: detected capacity change from 0 to 512 [ 113.839036][ T6403] EXT4-fs (loop0): Test dummy encryption mode enabled [ 113.864599][ T6403] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.956911][ T6423] loop1: detected capacity change from 0 to 512 [ 113.966262][ T6403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.995586][ T6423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.027490][ T6403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 114.102023][ T6403] System zones: 1-12 [ 114.136762][ T6423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.151053][ T6403] EXT4-fs (loop0): 1 truncate cleaned up [ 114.157706][ T6403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.186206][ T6423] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.399380][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.322613][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.569414][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 116.578754][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 116.587795][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 117.259760][ T965] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.479863][ T965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.513468][ T965] usb 5-1: config 0 has no interfaces? [ 117.528436][ T965] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.578836][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.823840][ T965] usb 5-1: config 0 descriptor?? [ 117.960265][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.096986][ T965] usb 5-1: USB disconnect, device number 4 [ 118.130291][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 118.262541][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 118.365912][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.483639][ T5905] usb 3-1: Product: syz [ 118.512774][ T5905] usb 3-1: Manufacturer: syz [ 118.535337][ T5905] usb 3-1: SerialNumber: syz [ 118.564372][ T5905] usb 3-1: config 0 descriptor?? [ 118.843747][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 119.012086][ T965] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.020462][ T5905] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 120.713841][ T965] usb 5-1: device descriptor read/all, error -71 [ 120.720704][ T5905] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 121.921641][ T6505] loop4: detected capacity change from 0 to 32768 [ 122.525097][ T5908] usb 3-1: USB disconnect, device number 4 [ 122.640238][ T5907] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.677417][ T6505] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.786839][ T6528] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 123.428879][ T6533] netlink: 'syz.0.169': attribute type 29 has an invalid length. [ 123.438109][ T6533] netlink: 'syz.0.169': attribute type 29 has an invalid length. [ 123.480694][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 123.489677][ T5907] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 123.598574][ T5907] usb 4-1: config 0 has no interface number 0 [ 123.606203][ T5907] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 123.617440][ T5907] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 123.627714][ T5907] usb 4-1: config 0 interface 126 has no altsetting 0 [ 123.734763][ T5907] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 123.777548][ T6505] XFS (loop4): Ending clean mount [ 123.797953][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.853094][ T5907] usb 4-1: Product: syz [ 123.857312][ T5907] usb 4-1: Manufacturer: syz [ 123.892719][ T5907] usb 4-1: SerialNumber: syz [ 123.910566][ T5907] usb 4-1: config 0 descriptor?? [ 123.921035][ T6509] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.928694][ T6509] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.004734][ T5844] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.045720][ T5854] Bluetooth: hci4: link tx timeout [ 124.051201][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.134976][ T5952] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.172570][ T965] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.350358][ T965] usb 2-1: Using ep0 maxpacket: 16 [ 124.358483][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.369843][ T5952] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.382517][ T965] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.409680][ T5952] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 124.438969][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.698740][ T965] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.708956][ T5952] usb 1-1: config 0 descriptor?? [ 124.714132][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.722773][ T965] usb 2-1: Product: syz [ 124.740257][ T965] usb 2-1: Manufacturer: syz [ 124.744900][ T965] usb 2-1: SerialNumber: syz [ 125.371167][ T965] usb 2-1: config 0 descriptor?? [ 125.432020][ T79] usb 1-1: USB disconnect, device number 4 [ 125.594296][ T5907] ir_usb 4-1:0.126: IR Dongle converter detected [ 125.603620][ T5907] usb 4-1: IRDA class descriptor not found, device not bound [ 125.621182][ T5907] usb 4-1: USB disconnect, device number 9 [ 126.080749][ T79] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.110312][ T5908] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.120318][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 126.242179][ T79] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.252627][ T79] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 126.267546][ T79] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.290206][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 126.296933][ T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.309078][ T5908] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.327175][ T79] usb 1-1: config 0 descriptor?? [ 126.354805][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.380435][ T5908] usb 5-1: Product: syz [ 126.390196][ T5908] usb 5-1: Manufacturer: syz [ 126.400990][ T5908] usb 5-1: SerialNumber: syz [ 126.417848][ T5908] usb 5-1: config 0 descriptor?? [ 126.644377][ T5908] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.950763][ T962] usb 2-1: USB disconnect, device number 2 [ 127.682991][ T5905] usb 1-1: USB disconnect, device number 5 [ 127.759834][ T5908] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 127.944671][ T6589] netlink: 'syz.1.185': attribute type 29 has an invalid length. [ 128.052524][ T6589] netlink: 'syz.1.185': attribute type 29 has an invalid length. [ 129.674953][ T6595] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.090524][ T965] usb 5-1: USB disconnect, device number 7 [ 130.106819][ T5854] Bluetooth: hci2: link tx timeout [ 130.113477][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.322269][ T6610] netlink: 'syz.5.192': attribute type 1 has an invalid length. [ 130.389605][ T6610] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.192'. [ 131.716731][ T6630] loop0: detected capacity change from 0 to 256 [ 131.786904][ T6630] exfat: Unknown parameter 'discerd' [ 131.918363][ T965] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.102287][ T965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.214664][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 132.242479][ T965] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.291119][ T5854] Bluetooth: hci1: link tx timeout [ 132.296766][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.443844][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.459366][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.517617][ T965] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.567646][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.633606][ T6630] loop0: detected capacity change from 0 to 4096 [ 132.681929][ T965] usb 5-1: config 0 descriptor?? [ 132.917558][ T79] usb 5-1: USB disconnect, device number 8 [ 133.188899][ T6639] capability: warning: `syz.0.202' uses deprecated v2 capabilities in a way that may be insecure [ 133.451916][ T79] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.469556][ T6644] loop1: detected capacity change from 0 to 512 [ 133.859901][ T6644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 133.894408][ T79] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.224537][ T79] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.393391][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 134.445920][ T6644] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.466664][ T79] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 134.560261][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.655653][ T79] usb 5-1: config 0 descriptor?? [ 134.690023][ T6659] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.208'. [ 134.722131][ T79] usb 5-1: can't set config #0, error -71 [ 134.779045][ T79] usb 5-1: USB disconnect, device number 9 [ 135.988083][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 136.054826][ T6679] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 136.920573][ T6681] loop4: detected capacity change from 0 to 32768 [ 137.211877][ T6681] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.831754][ T6681] XFS (loop4): Ending clean mount [ 138.870405][ T79] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.963128][ T79] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.973319][ T79] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.983293][ T79] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.994426][ T79] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.005397][ T79] usb 4-1: config 0 descriptor?? [ 140.042908][ T5844] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.353328][ T6727] netlink: 'syz.0.228': attribute type 29 has an invalid length. [ 140.361528][ T962] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.385436][ T6727] netlink: 'syz.0.228': attribute type 29 has an invalid length. [ 140.393754][ T6727] netlink: 'syz.0.228': attribute type 29 has an invalid length. [ 140.594872][ T79] usb 4-1: USB disconnect, device number 10 [ 140.952130][ T962] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 140.961836][ T962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.039339][ T6737] loop5: detected capacity change from 0 to 16 [ 141.049863][ T962] usb 2-1: config 0 descriptor?? [ 141.069988][ T962] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 141.116657][ T6737] erofs: (device loop5): mounted with root inode @ nid 36. [ 141.350521][ T79] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.201591][ T962] gspca_sunplus: reg_w_riv err -71 [ 142.206801][ T962] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 142.240728][ T962] usb 2-1: USB disconnect, device number 3 [ 143.096089][ T6767] netlink: 'syz.0.242': attribute type 29 has an invalid length. [ 143.177727][ T6769] netlink: 'syz.0.242': attribute type 29 has an invalid length. [ 143.249593][ T6767] netlink: 'syz.0.242': attribute type 29 has an invalid length. [ 144.581914][ T6758] loop3: detected capacity change from 0 to 32768 [ 145.023357][ T6758] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.820399][ T6758] XFS (loop3): AIL initialisation failed: error -12 [ 146.148442][ T6758] XFS (loop3): log mount failed [ 146.423765][ T79] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.890378][ T79] usb 3-1: Using ep0 maxpacket: 16 [ 147.208646][ T5908] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.230628][ T79] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 147.242189][ T79] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.275124][ T79] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 147.316096][ T6819] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 147.412933][ T79] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.772099][ T79] usb 3-1: Product: syz [ 147.791167][ T6821] netlink: 'syz.0.256': attribute type 29 has an invalid length. [ 147.815650][ T79] usb 3-1: Manufacturer: syz [ 147.835354][ T79] usb 3-1: SerialNumber: syz [ 147.844333][ T6822] netlink: 'syz.0.256': attribute type 29 has an invalid length. [ 147.901399][ T79] usb 3-1: config 0 descriptor?? [ 147.932274][ T79] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 148.003239][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 148.229599][ T5908] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 148.238941][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.313590][ T5908] usb 2-1: config 0 descriptor?? [ 148.356550][ T5908] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 148.723331][ T5849] Bluetooth: hci5: link tx timeout [ 148.728753][ T5849] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.969519][ T5908] gspca_sunplus: reg_w_riv err -71 [ 148.989228][ T5908] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 149.027944][ T5908] usb 2-1: USB disconnect, device number 4 [ 149.335752][ T5908] usb 3-1: USB disconnect, device number 5 [ 149.595884][ T6858] loop2: detected capacity change from 0 to 16 [ 149.664568][ T6858] erofs: (device loop2): mounted with root inode @ nid 36. [ 149.941934][ T6862] netlink: 'syz.1.271': attribute type 29 has an invalid length. [ 150.030406][ T6866] netlink: 'syz.1.271': attribute type 29 has an invalid length. [ 150.390065][ T29] audit: type=1326 audit(1731174720.036:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6372d7e719 code=0x0 [ 150.414933][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.273'. [ 150.765251][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 152.189341][ T6890] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.321836][ T6910] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 152.366999][ T6912] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 152.420552][ T6910] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 152.590989][ T5964] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.818312][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.843372][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.888070][ T5964] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.914947][ T5964] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.924668][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.940348][ T5964] usb 2-1: config 0 descriptor?? [ 153.043163][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 153.390424][ T5964] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 153.431177][ T5964] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 153.465452][ T6926] loop2: detected capacity change from 0 to 16 [ 153.520636][ T6926] erofs: (device loop2): mounted with root inode @ nid 36. [ 154.607872][ T29] audit: type=1326 audit(1731174724.266:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4c9f7e719 code=0x0 [ 154.921855][ T6950] netlink: 'syz.0.297': attribute type 29 has an invalid length. [ 154.931232][ T6950] netlink: 'syz.0.297': attribute type 29 has an invalid length. [ 154.939652][ T6950] netlink: 'syz.0.297': attribute type 29 has an invalid length. [ 155.155918][ T5849] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 156.246226][ T5964] usb 2-1: USB disconnect, device number 5 [ 156.377736][ T6973] loop3: detected capacity change from 0 to 16 [ 156.434196][ T6973] erofs: (device loop3): mounted with root inode @ nid 36. [ 156.470295][ T79] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.718136][ T6981] netlink: 'syz.5.310': attribute type 29 has an invalid length. [ 156.763653][ T6981] netlink: 'syz.5.310': attribute type 29 has an invalid length. [ 156.803286][ T6981] netlink: 'syz.5.310': attribute type 29 has an invalid length. [ 156.820313][ T79] usb 1-1: Using ep0 maxpacket: 8 [ 156.830531][ T79] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.839594][ T79] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.850828][ T79] usb 1-1: Product: syz [ 156.856889][ T79] usb 1-1: Manufacturer: syz [ 156.868018][ T79] usb 1-1: SerialNumber: syz [ 157.637258][ T79] usb 1-1: config 0 descriptor?? [ 157.702914][ T6991] openvswitch: netlink: Actions may not be safe on all matching packets [ 157.778289][ T5849] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 157.920271][ T5907] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.102170][ T5907] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 158.112024][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.192403][ T79] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 158.193073][ T5907] usb 3-1: config 0 descriptor?? [ 159.039531][ T5907] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 159.150254][ T5964] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.550576][ T5907] gspca_sunplus: reg_w_riv err -110 [ 159.555961][ T5907] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 160.136126][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.147421][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.157300][ T5964] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.171925][ T5964] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.210262][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.231395][ T5964] usb 6-1: config 0 descriptor?? [ 160.401882][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 160.410631][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 160.418140][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 160.426286][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 160.434678][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 160.442213][ T79] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 160.460662][ T79] usb 1-1: USB disconnect, device number 6 [ 160.741488][ T5964] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 160.753641][ T5964] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 160.776367][ T79] usb 3-1: USB disconnect, device number 6 [ 161.191188][ T79] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.350327][ T79] usb 3-1: Using ep0 maxpacket: 32 [ 161.375823][ T79] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 161.397352][ T79] usb 3-1: config 0 has no interface number 0 [ 161.429944][ T79] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 161.497454][ T7037] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 162.059792][ T7039] loop1: detected capacity change from 0 to 16 [ 162.102731][ T7039] erofs: (device loop1): mounted with root inode @ nid 36. [ 162.172433][ T79] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 162.182595][ T79] usb 3-1: config 0 interface 126 has no altsetting 0 [ 163.492404][ T79] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 163.687995][ T79] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.696502][ T79] usb 3-1: Product: syz [ 163.713672][ T79] usb 3-1: Manufacturer: syz [ 163.731424][ T79] usb 3-1: SerialNumber: syz [ 164.201514][ T79] usb 3-1: config 0 descriptor?? [ 164.228060][ T5964] usb 6-1: USB disconnect, device number 3 [ 164.266691][ T79] usb 3-1: can't set config #0, error -71 [ 164.339888][ T79] usb 3-1: USB disconnect, device number 7 [ 164.530359][ T5952] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 164.698986][ T7072] netlink: 68 bytes leftover after parsing attributes in process `syz.5.337'. [ 164.719793][ T5952] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 164.741219][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.765532][ T5952] usb 4-1: config 0 descriptor?? [ 164.797137][ T5952] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 164.817102][ T7073] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.890381][ T5907] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.070452][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 165.090056][ T5907] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 165.125662][ T5849] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 165.130553][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.184978][ T5907] usb 1-1: Product: syz [ 165.189177][ T5907] usb 1-1: Manufacturer: syz [ 165.234550][ T5907] usb 1-1: SerialNumber: syz [ 165.273072][ T5907] usb 1-1: config 0 descriptor?? [ 165.420465][ T5952] gspca_sunplus: reg_w_riv err -71 [ 165.425679][ T5952] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 165.500447][ T5952] usb 4-1: USB disconnect, device number 12 [ 165.515036][ T5907] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.972997][ T962] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.132249][ T962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.158019][ T962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.178452][ T962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.311574][ T7093] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.945142][ T962] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.954447][ T962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.965202][ T962] usb 2-1: config 0 descriptor?? [ 167.285390][ T5907] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 167.316059][ T5907] usb 1-1: USB disconnect, device number 7 [ 167.479214][ T962] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 167.526048][ T962] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 167.971205][ T965] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 168.290339][ T965] usb 3-1: Using ep0 maxpacket: 32 [ 168.300820][ T965] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 168.312922][ T965] usb 3-1: config 0 has no interface number 0 [ 168.337298][ T965] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 168.366172][ T965] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 168.395503][ T965] usb 3-1: config 0 interface 126 has no altsetting 0 [ 168.443596][ T965] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 168.472015][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.506297][ T965] usb 3-1: Product: syz [ 168.526261][ T965] usb 3-1: Manufacturer: syz [ 168.573864][ T965] usb 3-1: SerialNumber: syz [ 168.841556][ T965] usb 3-1: config 0 descriptor?? [ 168.851126][ T7098] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 168.858773][ T7098] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 169.814507][ T5849] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 169.859190][ T7128] netlink: 68 bytes leftover after parsing attributes in process `syz.4.355'. [ 170.260401][ T7129] loop3: detected capacity change from 0 to 32768 [ 170.501749][ T5908] usb 2-1: USB disconnect, device number 6 [ 170.516476][ T965] ir_usb 3-1:0.126: IR Dongle converter detected [ 170.524253][ T965] usb 3-1: IRDA class descriptor not found, device not bound [ 170.594309][ T7129] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=yes,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 170.623086][ T7129] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 170.746575][ T7129] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots [ 170.746575][ T7129] running recovery passes: check_allocations,check_inodes [ 171.010802][ T5952] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 171.071496][ T965] usb 3-1: USB disconnect, device number 8 [ 171.117133][ T7129] bcachefs (loop3): dropping and reconstructing all alloc info [ 171.187953][ T7129] bcachefs (loop3): flagging btree xattrs lost data [ 171.200336][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 171.218336][ T7163] binder: BINDER_SET_CONTEXT_MGR already set [ 171.232591][ T5952] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.242671][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.253005][ T7129] error reading btree root xattrs l=0: btree_node_read_error, fixing [ 171.259241][ T7163] binder: 7162:7163 ioctl 4018620d 20000040 returned -16 [ 171.279779][ T5952] usb 6-1: Product: syz [ 171.289644][ T5952] usb 6-1: Manufacturer: syz [ 171.292715][ T7129] bcachefs (loop3): will run btree node scan [ 171.309898][ T5952] usb 6-1: SerialNumber: syz [ 171.328165][ T5952] usb 6-1: config 0 descriptor?? [ 171.357255][ T7129] bcachefs (loop3): scan_for_btree_nodes... [ 171.390902][ T7129] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 171.390943][ T7129] extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 171.390961][ T7129] xattrs l=0 seq=1 journal_seq=4 cookie=2285c34bed0abe32 POS_MIN-18446744073709027327:18374686479671623680:50331647 ptr: 0:31:0 gen 0 [ 171.390982][ T7129] lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 171.391000][ T7129] deleted_inodes l=0 seq=75497473 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 171.391018][ T7129] [ 171.749416][ T5952] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.640588][ T7129] done [ 172.770970][ T7129] bcachefs (loop3): check_topology... [ 172.771205][ T7129] bcachefs (loop3): btree root xattrs unreadable, must recover from scan [ 172.907683][ T962] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 172.920834][ T7129] bcachefs (loop3): bch2_get_scanned_nodes(): recovering xattrs l=0 POS_MIN - SPOS_MAX [ 172.949234][ T7129] bcachefs (loop3): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 18446744073709027327:18374686479671623680:50331647 len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 173.071654][ T962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.106641][ T962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.147473][ T7129] btree node with incorrect max_keyat btree xattrs level 1: [ 173.147541][ T7129] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 173.147558][ T7129] child: u64s 11 type btree_ptr_v2 18446744073709027327:18374686479671623680:50331647 len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 173.188758][ T7129] bcachefs (loop3): bch2_get_scanned_nodes(): recovering xattrs l=0 18446744073709027327:18374686479671623680:50331648 - SPOS_MAX [ 173.202306][ T962] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.202364][ T962] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.202396][ T962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.204497][ T962] usb 5-1: config 0 descriptor?? [ 173.215952][ T7129] bcachefs (loop3): set_node_max(): u64s 11 type btree_ptr_v2 18446744073709027327:18374686479671623680:50331647 len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 -> SPOS_MAX [ 173.276666][ T7129] ------------[ cut here ]------------ [ 173.282844][ T7129] kernel BUG at fs/bcachefs/btree_cache.c:280! [ 173.303753][ T7129] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 173.310904][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.3.356 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 173.321508][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 173.331576][ T7129] RIP: 0010:__bch2_btree_node_hash_insert+0x12ed/0x1310 [ 173.338555][ T7129] Code: ea fd e9 9d f5 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c f2 f7 ff ff 48 89 df e8 de e9 ea fd e9 e5 f7 ff ff e8 04 24 81 fd 90 <0f> 0b e8 fc 23 81 fd 90 0f 0b e8 f4 23 81 fd 90 0f 0b e8 3c b0 b3 [ 173.358352][ T7129] RSP: 0018:ffffc900034de6a0 EFLAGS: 00010246 [ 173.364446][ T7129] RAX: ffffffff8413b65c RBX: ffff8880332d8228 RCX: 0000000000040000 [ 173.372434][ T7129] RDX: ffffc9000bf81000 RSI: 000000000003ffff RDI: 0000000000040000 [ 173.380429][ T7129] RBP: ffffc900034de7d0 R08: ffff8880332d81d7 R09: 1ffff1100665b03a [ 173.388423][ T7129] R10: dffffc0000000000 R11: ffffed100665b03b R12: 1ffff1100665b045 [ 173.396415][ T7129] R13: dffffc0000000000 R14: ffff88802a901a80 R15: ffff8880332d8000 [ 173.404406][ T7129] FS: 00007f5f61d546c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 173.413360][ T7129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.419959][ T7129] CR2: 00005555720d5808 CR3: 00000000298e8000 CR4: 0000000000350ef0 [ 173.427949][ T7129] Call Trace: [ 173.431234][ T7129] [ 173.434175][ T7129] ? __die_body+0x5f/0xb0 [ 173.438532][ T7129] ? die+0x9e/0xc0 [ 173.442272][ T7129] ? do_trap+0x15a/0x3a0 [ 173.446543][ T7129] ? __bch2_btree_node_hash_insert+0x12ed/0x1310 [ 173.452912][ T7129] ? do_error_trap+0x1dc/0x2c0 [ 173.457702][ T7129] ? __bch2_btree_node_hash_insert+0x12ed/0x1310 [ 173.464065][ T7129] ? __bch2_btree_node_hash_insert+0x12ed/0x1310 [ 173.470429][ T7129] ? __pfx_do_error_trap+0x10/0x10 [ 173.475569][ T7129] ? report_bug+0x3e8/0x500 [ 173.480094][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.485755][ T7129] ? handle_invalid_op+0x34/0x40 [ 173.490720][ T7129] ? __bch2_btree_node_hash_insert+0x12ed/0x1310 [ 173.497083][ T7129] ? exc_invalid_op+0x38/0x50 [ 173.501789][ T7129] ? asm_exc_invalid_op+0x1a/0x20 [ 173.506841][ T7129] ? __bch2_btree_node_hash_insert+0x12ec/0x1310 [ 173.513299][ T7129] ? __bch2_btree_node_hash_insert+0x12ed/0x1310 [ 173.519672][ T7129] ? __bch2_btree_node_hash_remove+0xe0/0xed0 [ 173.525775][ T7129] ? __pfx___bch2_btree_node_hash_remove+0x10/0x10 [ 173.532314][ T7129] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 173.538849][ T7129] ? __kasan_kmalloc+0x98/0xb0 [ 173.543645][ T7129] ? set_node_max+0x529/0x710 [ 173.548347][ T7129] set_node_max+0x542/0x710 [ 173.552885][ T7129] ? __pfx_set_node_max+0x10/0x10 [ 173.557946][ T7129] ? bch2_btree_repair_topology_recurse+0x55e2/0x6750 [ 173.564731][ T7129] bch2_btree_repair_topology_recurse+0x5630/0x6750 [ 173.571378][ T7129] ? __pfx_bch2_btree_repair_topology_recurse+0x10/0x10 [ 173.578436][ T7129] ? __pfx_bch2_journal_key_insert_take+0x10/0x10 [ 173.584975][ T7129] ? bch2_journal_key_insert+0x51/0x130 [ 173.590555][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.596217][ T7129] ? bch2_journal_key_insert+0x8e/0x130 [ 173.601820][ T7129] ? __pfx_bch2_get_scanned_nodes+0x10/0x10 [ 173.607746][ T7129] ? six_unlock_ip+0x2ce/0x3e0 [ 173.612557][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.618219][ T7129] ? __do_six_trylock+0x832/0x9f0 [ 173.623274][ T7129] ? __pfx___do_six_trylock+0x10/0x10 [ 173.628779][ T7129] ? bch2_check_topology+0x598/0xb20 [ 173.634179][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.639842][ T7129] ? six_lock_ip_waiter+0xe5/0x160 [ 173.644989][ T7129] ? __pfx_bch2_six_check_for_deadlock+0x10/0x10 [ 173.651355][ T7129] bch2_check_topology+0x68f/0xb20 [ 173.656495][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.662157][ T7129] ? irq_work_queue+0xd1/0x150 [ 173.666958][ T7129] ? bch2_check_topology+0x598/0xb20 [ 173.672270][ T7129] ? __pfx_bch2_check_topology+0x10/0x10 [ 173.677928][ T7129] ? rcu_is_watching+0x15/0xb0 [ 173.682720][ T7129] ? __bch2_print+0x17a/0x220 [ 173.687431][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.693092][ T7129] ? __mutex_unlock_slowpath+0x21d/0x750 [ 173.698763][ T7129] ? __pfx___bch2_print+0x10/0x10 [ 173.703817][ T7129] bch2_run_recovery_pass+0xf2/0x1e0 [ 173.709137][ T7129] bch2_run_recovery_passes+0x3a7/0x880 [ 173.714724][ T7129] bch2_fs_recovery+0x25cc/0x39d0 [ 173.719798][ T7129] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 173.725214][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.731056][ T7129] ? __pfx_lock_release+0x10/0x10 [ 173.736116][ T7129] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 173.741781][ T7129] ? __pfx_lock_release+0x10/0x10 [ 173.746851][ T7129] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 173.752521][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.758183][ T7129] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 173.763934][ T7129] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 173.769595][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.775252][ T7129] ? llist_reverse_order+0x72/0x90 [ 173.780393][ T7129] bch2_fs_start+0x356/0x5b0 [ 173.785011][ T7129] bch2_fs_get_tree+0xd68/0x1710 [ 173.789990][ T7129] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 173.795396][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.801065][ T7129] ? generic_parse_monolithic+0x387/0x400 [ 173.806815][ T7129] ? apparmor_capable+0x13b/0x1b0 [ 173.811138][ T5849] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 173.811874][ T7129] vfs_get_tree+0x92/0x2b0 [ 173.823772][ T7129] do_new_mount+0x2be/0xb40 [ 173.828339][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.834012][ T7129] ? __pfx_do_new_mount+0x10/0x10 [ 173.839071][ T7129] __se_sys_mount+0x2d6/0x3c0 [ 173.843777][ T7129] ? __pfx___se_sys_mount+0x10/0x10 [ 173.848987][ T7129] ? exc_page_fault+0x590/0x8c0 [ 173.853866][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.859514][ T7129] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.865156][ T7129] ? __x64_sys_mount+0x20/0xc0 [ 173.869987][ T7129] do_syscall_64+0xf3/0x230 [ 173.874527][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.880433][ T7129] RIP: 0033:0x7f5f60f7feba [ 173.884855][ T7129] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.904477][ T7129] RSP: 002b:00007f5f61d53e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.912911][ T7129] RAX: ffffffffffffffda RBX: 00007f5f61d53ef0 RCX: 00007f5f60f7feba [ 173.920897][ T7129] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 00007f5f61d53eb0 [ 173.928877][ T7129] RBP: 0000000020000180 R08: 00007f5f61d53ef0 R09: 0000000000800808 [ 173.936856][ T7129] R10: 0000000000800808 R11: 0000000000000246 R12: 0000000020000000 [ 173.945188][ T7129] R13: 00007f5f61d53eb0 R14: 000000000000598e R15: 0000000020000380 [ 173.953184][ T7129] [ 173.956207][ T7129] Modules linked in: [ 173.961654][ T7129] ---[ end trace 0000000000000000 ]--- [ 173.972123][ T7129] RIP: 0010:__bch2_btree_node_hash_insert+0x12ed/0x1310 [ 173.979298][ T7129] Code: ea fd e9 9d f5 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c f2 f7 ff ff 48 89 df e8 de e9 ea fd e9 e5 f7 ff ff e8 04 24 81 fd 90 <0f> 0b e8 fc 23 81 fd 90 0f 0b e8 f4 23 81 fd 90 0f 0b e8 3c b0 b3 [ 174.001182][ T7129] RSP: 0018:ffffc900034de6a0 EFLAGS: 00010246 [ 174.007333][ T7129] RAX: ffffffff8413b65c RBX: ffff8880332d8228 RCX: 0000000000040000 [ 174.015432][ T7129] RDX: ffffc9000bf81000 RSI: 000000000003ffff RDI: 0000000000040000 [ 174.029967][ T7129] RBP: ffffc900034de7d0 R08: ffff8880332d81d7 R09: 1ffff1100665b03a [ 174.038208][ T7129] R10: dffffc0000000000 R11: ffffed100665b03b R12: 1ffff1100665b045 [ 174.057620][ T7129] R13: dffffc0000000000 R14: ffff88802a901a80 R15: ffff8880332d8000 [ 174.066210][ T7129] FS: 00007f5f61d546c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 174.157932][ T7129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.174684][ T962] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 174.187835][ T962] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 174.220355][ T7129] CR2: 000055ca32024068 CR3: 00000000298e8000 CR4: 0000000000350ef0 [ 174.228408][ T7129] Kernel panic - not syncing: Fatal exception [ 174.234701][ T7129] Kernel Offset: disabled [ 174.239037][ T7129] Rebooting in 86400 seconds..