last executing test programs: 9m44.665357872s ago: executing program 3 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x0, 0x0, 0x100000}) openat(0xffffffffffffff9c, 0x0, 0x441, 0x78) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) truncate(&(0x7f0000000900)='./file1\x00', 0xf10802) 9m40.971084447s ago: executing program 3 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 9m34.937286407s ago: executing program 3 (id=215): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f00000008c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="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", @ANYBLOB="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", @ANYRES16, @ANYBLOB="7586a035f55c6293d0f1b99c9b1885d532ab5c9f7209d3d9472bc4f6ae44ee7a08ce61001daaba6032a03b61fba7f6b0299550c27826218b7c1898ec7cb416ad734679ede2e5f49b3ef825c5f8f4441b01e9e4a78d86b9f7a56f4d2ce1c37c28d615601630e01709cfcf262367e0418aa422f760e4569bca22c7bf82b1f192a3e4f618e5978e7e8a188486fa2a380915715ef67da718b0037e943a2e8bbcd8265aef7abcca6f6e85d9d36ec4da2d8a8c1ddd4a0f9dcb5a717640ce47b6559045244e04e11052d376", @ANYBLOB="6feb6e1349fd409af7523cb2fac8ccd13a83f2d673a56207a0cba100a06ebde30a39df3a2104f7398d1120226aa476fb95bd7fc78ae5cf2fcfcd2a01120943ccc288e0d2a62f93ff56ba3d1b38573b35187c2bd479473e3222af80c576ae0e424d62f122d2f2f8d8caf4a6d35f70f5cef35ce9b7c8b6c7a57df06ae4ba4bee86848451dc5674f4618c151ed1c7910d0d536249a7276c002983e46efccc2df30362a536fba8177f39c5470bdd01fdbc4686ac9e12a10852e50b3df3f4481da4fc4bc7037a6ea487a2", @ANYRESHEX, @ANYRES32], 0xc1, 0x1521, &(0x7f0000003fc0)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x1018e58, &(0x7f0000000880), 0x6, 0x5ff, &(0x7f0000001600)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) timer_create(0xf84c69a89bdf5e86, &(0x7f00000000c0)={0x0, 0x3d, 0x2, @tid=r0}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000300)={{}, {r5, r6+10000000}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) 9m25.835470158s ago: executing program 3 (id=222): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x214c1e, &(0x7f0000000080)={[{@init_itable}, {@nogrpid}, {@mblk_io_submit}]}, 0x1, 0x510, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) 9m23.402223662s ago: executing program 3 (id=228): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x1, 0x3, 0x4, 0x1, 0x102000000000002, 0x80000009, 0x400002004c8, 0xffff, 0x100000000003, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x50fd24f7], 0x60000, 0x842d4}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) 9m12.094800917s ago: executing program 3 (id=245): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom$inet6(r3, &(0x7f0000000040)=""/10, 0xa, 0x40000002, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket(0x1, 0x803, 0x0) 8m54.644094785s ago: executing program 32 (id=245): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom$inet6(r3, &(0x7f0000000040)=""/10, 0xa, 0x40000002, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket(0x1, 0x803, 0x0) 7m46.646376116s ago: executing program 0 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, 0x0, 0xfffffd80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x0, 0x0, 0x100000}) openat(0xffffffffffffff9c, 0x0, 0x441, 0x78) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) truncate(&(0x7f0000000900)='./file1\x00', 0xf10802) 7m44.808811267s ago: executing program 0 (id=382): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e21, 0x10, @private1, 0x9}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) 7m41.078442994s ago: executing program 0 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}}, 0x0) 7m40.197106823s ago: executing program 0 (id=390): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in=@empty, 0x800, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2, 0xffffffffffffffff, 0x0, 0x0, 0x45f, 0xfffffffe, 0x1ff, 0x25}, {0x0, 0x4, 0x40000000, 0x6}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in6=@empty, 0x3500, 0x1, 0x1, 0x0, 0x1ff, 0x9}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 7m39.063040145s ago: executing program 0 (id=393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x2f, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) socket(0x2c, 0x3, 0xfe) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007119b100000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 7m37.640715282s ago: executing program 0 (id=397): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10) r5 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff06, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) 7m22.029790101s ago: executing program 33 (id=397): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10) r5 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff06, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) 53.777410497s ago: executing program 1 (id=1077): recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{0x0}, {0x0}, {&(0x7f0000003d00)=""/4096, 0x1000}], 0x3}, 0x5}], 0x1, 0x141, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 52.943903458s ago: executing program 1 (id=1079): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@nodioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@resuid}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x50c, &(0x7f00000008c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 50.322770359s ago: executing program 1 (id=1082): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) socket(0x200000000000011, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 47.877981013s ago: executing program 1 (id=1086): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x7, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x6}]}}]}]}, 0x34}}, 0x40) 47.227444308s ago: executing program 1 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, 0x0, 0xfffffd80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x0, 0x0, 0x100000}) openat(0xffffffffffffff9c, 0x0, 0x441, 0x78) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) truncate(&(0x7f0000000900)='./file1\x00', 0xf10802) 43.57762296s ago: executing program 1 (id=1092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x2f, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, 0x0, 0x40240, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x3f, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x5, 0x6, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x1, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0xed, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x400a, 0xc, 0x7, 0x0, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x1956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x8000ffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007119b100000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 27.931427094s ago: executing program 34 (id=1092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x2f, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, 0x0, 0x40240, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x3f, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x5, 0x6, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x1, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0xed, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x400a, 0xc, 0x7, 0x0, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x1956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x8000ffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007119b100000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 7.370892973s ago: executing program 4 (id=1128): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) 6.399173026s ago: executing program 4 (id=1130): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 5.840922838s ago: executing program 4 (id=1132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={0x44, r1, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @initial, @device_a, @random="40777a121acf", {0x7, 0x4}, "", @void, @value=@ver_80211n={0x0, 0x595, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, @a_msdu}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5.539308712s ago: executing program 2 (id=1133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 5.234947451s ago: executing program 2 (id=1134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x141a01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 4.728788606s ago: executing program 2 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, 0x0, 0xfffffd80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x0, 0x0, 0x100000}) openat(0xffffffffffffff9c, 0x0, 0x441, 0x78) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) truncate(&(0x7f0000000900)='./file1\x00', 0xf10802) 2.932965124s ago: executing program 4 (id=1136): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$inet6(0x2d, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x20) sendto$inet6(r0, 0x0, 0x0, 0x8080, &(0x7f0000000100)={0x2d, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c) 2.386346473s ago: executing program 4 (id=1137): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x1, 0x6, &(0x7f0000000240)={0x2e, "2b1b9951e95a1dee9300000a00000000000000000000000686e66cb299dcd6b800"}}) 1.541794067s ago: executing program 2 (id=1138): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000200)={[{@noblock_validity}, {@auto_da_alloc}, {@nodelalloc}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0x1, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 704.247234ms ago: executing program 2 (id=1139): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 46.170752ms ago: executing program 2 (id=1140): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4606ff78a0020000000000000002003e00cd000000cb030000000000004000000000000000ea02000000000000000001000500380001001ad7b106000403000000810000000600000000000000f50f0000000000000500000000000000b8"], 0x78) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 4 (id=1141): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSBRKP(r0, 0x5425, 0x1) kernel console output (not intermixed with test programs): 6785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.380096][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.482371][ T6785] veth1_macvtap: left promiscuous mode [ 563.525765][ T6785] veth0_macvtap: left promiscuous mode [ 563.541948][ T6785] veth1_vlan: left promiscuous mode [ 563.580158][ T6785] veth0_vlan: left promiscuous mode [ 563.924226][ T7944] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 565.080673][ T5835] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 565.247064][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 565.269983][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.296935][ T5835] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 565.320880][ T5835] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 565.341126][ T5835] usb 5-1: Manufacturer: syz [ 565.363735][ T5835] usb 5-1: config 0 descriptor?? [ 566.005519][ T5835] cougar 0003:060B:700A.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 566.157014][ T5835] usb 5-1: USB disconnect, device number 13 [ 567.012593][ T7949] fido_id[7949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 567.685425][ T6785] team0 (unregistering): Port device team_slave_1 removed [ 567.753201][ T6785] team0 (unregistering): Port device team_slave_0 removed [ 568.201335][ T5835] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 568.339980][ T7954] tipc: Started in network mode [ 568.345383][ T7954] tipc: Node identity ac14140f, cluster identity 4711 [ 568.397493][ T7954] tipc: New replicast peer: 172.30.1.2 [ 568.425659][ T7954] tipc: Enabled bearer , priority 23 [ 568.468423][ T5835] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 568.499837][ T5835] usb 5-1: config 0 has no interface number 0 [ 568.506309][ T5835] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 568.539667][ T5835] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.580396][ T5835] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.619680][ T5835] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 568.636087][ T5835] usb 5-1: config 0 interface 16 has no altsetting 0 [ 568.664196][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.695695][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.701631][ T5835] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 568.718697][ T7846] bridge_slave_0: entered allmulticast mode [ 568.739825][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.752813][ T7846] bridge_slave_0: entered promiscuous mode [ 568.766245][ T5835] usb 5-1: config 0 descriptor?? [ 568.911025][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.951769][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.991681][ T7846] bridge_slave_1: entered allmulticast mode [ 569.032005][ T7846] bridge_slave_1: entered promiscuous mode [ 569.263588][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.317653][ T5835] uclogic 0003:5543:004D.0007: interface is invalid, ignoring [ 569.435228][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.472384][ T10] usb 5-1: USB disconnect, device number 14 [ 569.646295][ T5832] tipc: Node number set to 2886997007 [ 569.834226][ T7846] team0: Port device team_slave_0 added [ 569.878645][ T7846] team0: Port device team_slave_1 added [ 570.357548][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.539072][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.594326][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.685503][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.720004][ T5832] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 570.790951][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.798135][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.894691][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.927467][ T5832] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 570.970493][ T5832] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.999730][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 571.025882][ T5832] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 571.069628][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.158114][ T5832] usb 5-1: config 0 descriptor?? [ 571.173249][ T7977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 571.517878][ T7846] hsr_slave_0: entered promiscuous mode [ 571.605449][ T7846] hsr_slave_1: entered promiscuous mode [ 571.700059][ T7846] debugfs: 'hsr0' already exists in 'hsr' [ 571.706035][ T7846] Cannot create hsr debugfs directory [ 571.712229][ T5832] hid_parser_main: 28 callbacks suppressed [ 571.712339][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 571.762400][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 571.796344][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 571.815884][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'. [ 571.829666][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 571.865380][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 571.874797][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'. [ 571.914375][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 571.961424][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 571.997260][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 572.035737][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 572.068383][ T5832] sony 0003:054C:0374.0008: unknown main item tag 0x0 [ 572.136576][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'. [ 572.146637][ T5832] sony 0003:054C:0374.0008: hiddev0,hidraw0: USB HID v0.20 Device [HID 054c:0374] on usb-dummy_hcd.4-1/input0 [ 572.200987][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'. [ 572.239777][ T5832] sony 0003:054C:0374.0008: failed to claim input [ 572.332468][ T5832] usb 5-1: USB disconnect, device number 15 [ 572.798785][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.807767][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.950608][ T7996] fido_id[7996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 573.050818][ T8000] loop2: detected capacity change from 0 to 256 [ 573.120644][ T29] audit: type=1326 audit(1775706964.470:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 573.246036][ T29] audit: type=1326 audit(1775706964.490:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 573.347243][ T29] audit: type=1326 audit(1775706964.490:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 573.457533][ T29] audit: type=1326 audit(1775706964.540:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 573.566774][ T29] audit: type=1326 audit(1775706964.570:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 573.699761][ T29] audit: type=1326 audit(1775706964.570:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 573.827112][ T29] audit: type=1326 audit(1775706964.570:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 573.926539][ T29] audit: type=1326 audit(1775706964.570:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 574.070165][ T29] audit: type=1326 audit(1775706964.610:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 574.166653][ T29] audit: type=1326 audit(1775706964.580:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f075459c819 code=0x7ffc0000 [ 574.364044][ T8014] loop1: detected capacity change from 0 to 128 [ 574.372187][ T8012] tipc: Enabling of bearer rejected, failed to enable media [ 575.178149][ T7683] veth0_vlan: entered promiscuous mode [ 575.370598][ T8023] binfmt_misc: register: failed to install interpreter file ./file0 [ 575.387761][ T8023] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 576.429614][ T5832] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 576.834462][ T5832] usb 2-1: unable to get BOS descriptor or descriptor too short [ 576.939962][ T5832] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 577.029761][ T5832] usb 2-1: can't read configurations, error -71 [ 577.158929][ T7846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 577.488323][ T7846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 577.677273][ T7683] veth1_vlan: entered promiscuous mode [ 577.792871][ T7846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 577.961765][ T7846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 578.627599][ T7683] veth0_macvtap: entered promiscuous mode [ 578.765084][ T7683] veth1_macvtap: entered promiscuous mode [ 579.207657][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.250680][ T5832] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 579.269093][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.471637][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 579.516211][ T5832] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 579.550682][ T6785] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.603162][ T5832] usb 3-1: config 0 has no interface number 0 [ 579.612113][ T6785] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.623384][ T5832] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 579.638241][ T5832] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 579.697312][ T5832] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 579.732077][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.760951][ T5832] usb 3-1: Product: syz [ 579.774330][ T5832] usb 3-1: Manufacturer: syz [ 579.794750][ T6785] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.804886][ T5832] usb 3-1: SerialNumber: syz [ 579.827246][ T6785] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.865850][ T5832] usb 3-1: config 0 descriptor?? [ 579.873003][ T5838] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 580.077536][ T5838] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 580.129923][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 580.185485][ T5832] radio-si470x 3-1:0.35: this is not a si470x device. [ 580.199905][ T5838] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 580.209258][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 580.274074][ T5832] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 580.294294][ T5838] usb 2-1: Product: syz [ 580.298738][ T5838] usb 2-1: Manufacturer: syz [ 580.313633][ T5838] usb 2-1: SerialNumber: syz [ 580.381477][ T5838] usb 2-1: config 0 descriptor?? [ 580.392575][ T8048] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 580.484475][ T5832] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 580.531452][ T5832] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 580.551004][ T5838] usb 2-1: selecting invalid altsetting 0 [ 580.628618][ T5832] usb 3-1: USB disconnect, device number 10 [ 580.662161][ T5832] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 580.734820][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.069977][ T7846] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.293681][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.301611][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.521269][ T5838] usb 2-1: USB disconnect, device number 15 [ 581.571539][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.579251][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.422932][ T6218] udevd[6218]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.678289][ T8070] loop1: detected capacity change from 0 to 128 [ 582.991314][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 582.991399][ T29] audit: type=1800 audit(1775706974.380:226): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.657" name="file1" dev="loop1" ino=1048646 res=0 errno=0 [ 583.599704][ T5834] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 583.829939][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 583.896254][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 583.986385][ T5834] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 584.019596][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.124846][ T5834] usb 3-1: config 0 descriptor?? [ 584.225580][ T8082] binfmt_misc: register: failed to install interpreter file ./file0 [ 584.242217][ T8082] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 585.782935][ T5834] hid_parser_main: 23 callbacks suppressed [ 585.783052][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 585.945836][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.040796][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.129258][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.259685][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.266830][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.339011][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.382993][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.419711][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.447259][ T5834] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 586.576920][ T5834] kone 0003:1E7D:2CED.0009: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 586.722096][ T5834] usb 3-1: USB disconnect, device number 11 [ 586.835898][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.870288][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.900679][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.957737][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.971703][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.695888][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.712805][ T5835] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 587.716527][ T8089] fido_id[8089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 587.999912][ T5835] usb 3-1: device descriptor read/64, error -71 [ 588.124423][ T8100] loop4: detected capacity change from 0 to 256 [ 588.260143][ T8100] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 588.280107][ T5835] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 588.472628][ T5835] usb 3-1: device descriptor read/64, error -71 [ 588.658438][ T5835] usb usb3-port1: attempt power cycle [ 589.088581][ T5782] Bluetooth: hci0: command tx timeout [ 589.099930][ T5835] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 589.153455][ T5835] usb 3-1: device descriptor read/8, error -71 [ 589.410457][ T5835] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 589.478870][ T5835] usb 3-1: device descriptor read/8, error -71 [ 589.642785][ T5835] usb usb3-port1: unable to enumerate USB device [ 589.943602][ T8115] loop1: detected capacity change from 0 to 1024 [ 590.082524][ T8115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 590.154943][ T8115] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.213374][ T8121] F2FS-fs: Conflicting test_dummy_encryption options [ 590.350239][ T8115] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: block 3: comm syz.1.668: lblock 3 mapped to illegal pblock 3 (length 3) [ 590.368008][ T8086] chnl_net:caif_netlink_parms(): no params data found [ 590.450650][ T8115] EXT4-fs (loop1): Remounting filesystem read-only [ 590.764200][ T1135] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.940145][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 590.990674][ T8129] Bluetooth: MGMT ver 1.23 [ 591.126767][ T8131] binfmt_misc: register: failed to install interpreter file ./file0 [ 591.144693][ T8131] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 591.262135][ T5782] Bluetooth: hci0: command tx timeout [ 593.034036][ T8134] loop1: detected capacity change from 0 to 4096 [ 593.125993][ T1135] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.203679][ T8134] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 593.325561][ T5782] Bluetooth: hci0: command tx timeout [ 593.508487][ T1135] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.785736][ T1135] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.453680][ T5782] Bluetooth: hci0: command tx timeout [ 595.766246][ T1135] bridge_slave_1: left allmulticast mode [ 595.898640][ T1135] bridge_slave_1: left promiscuous mode [ 595.983089][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.110820][ T1135] bridge_slave_0: left allmulticast mode [ 596.116831][ T1135] bridge_slave_0: left promiscuous mode [ 596.180749][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.671462][ T5838] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 597.660160][ T5838] usb 3-1: device descriptor read/64, error -71 [ 598.000133][ T5838] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 598.150176][ T5838] usb 3-1: device descriptor read/64, error -71 [ 598.308190][ T5838] usb usb3-port1: attempt power cycle [ 600.622428][ T5838] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 601.049222][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.096896][ T5838] usb 3-1: device not accepting address 18, error -71 [ 601.232798][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.298970][ T1135] bond0 (unregistering): Released all slaves [ 601.505726][ T8188] netlink: 80 bytes leftover after parsing attributes in process `syz.1.687'. [ 601.624578][ T7846] veth0_vlan: entered promiscuous mode [ 601.669888][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.677775][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.718729][ T8086] bridge_slave_0: entered allmulticast mode [ 601.740934][ T8086] bridge_slave_0: entered promiscuous mode [ 601.884338][ T1135] hsr_slave_0: left promiscuous mode [ 601.895330][ T1135] hsr_slave_1: left promiscuous mode [ 601.936867][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.979756][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.116279][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.125135][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.382833][ T1135] veth1_macvtap: left promiscuous mode [ 602.388620][ T1135] veth0_macvtap: left promiscuous mode [ 602.483769][ T1135] veth1_vlan: left promiscuous mode [ 602.521354][ T1135] veth0_vlan: left promiscuous mode [ 608.068294][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 608.234903][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 608.291442][ T8224] loop1: detected capacity change from 0 to 512 [ 608.437169][ T8224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.484900][ T8224] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.878571][ T8224] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 608.945000][ T8224] EXT4-fs: Cannot change journaled quota options when quota turned on [ 608.963410][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.010080][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.047256][ T8086] bridge_slave_1: entered allmulticast mode [ 609.108477][ T8086] bridge_slave_1: entered promiscuous mode [ 609.653851][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.813611][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.922216][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.017209][ T8086] team0: Port device team_slave_0 added [ 613.311119][ T8086] team0: Port device team_slave_1 added [ 614.306430][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.313839][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.369959][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.415958][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.471167][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.635160][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.946370][ T7667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 614.956676][ T7667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 615.010927][ T7667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 615.033246][ T7667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.065606][ T7667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.508208][ T8086] hsr_slave_0: entered promiscuous mode [ 615.612129][ T8086] hsr_slave_1: entered promiscuous mode [ 615.665506][ T8086] debugfs: 'hsr0' already exists in 'hsr' [ 615.715137][ T8086] Cannot create hsr debugfs directory [ 616.878486][ T29] audit: type=1326 audit(1775707008.260:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.2.718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8c179c819 code=0x0 [ 617.165360][ T5782] Bluetooth: hci1: command tx timeout [ 619.248420][ T5782] Bluetooth: hci1: command tx timeout [ 619.538918][ T8286] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 621.328807][ T5782] Bluetooth: hci1: command tx timeout [ 622.574450][ T5782] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 623.399986][ T5782] Bluetooth: hci1: command tx timeout [ 623.980057][ T8257] chnl_net:caif_netlink_parms(): no params data found [ 624.162265][ T8330] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 624.917016][ T8328] loop1: detected capacity change from 0 to 64 [ 626.659962][ T5782] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 626.668697][ T5782] Bluetooth: hci4: Injecting HCI hardware error event [ 626.680442][ T5782] Bluetooth: hci4: hardware error 0x00 [ 627.128268][ T8086] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 628.618394][ T8344] binfmt_misc: register: failed to install interpreter file ./file0 [ 628.633911][ T8344] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 628.761393][ T5782] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 629.394794][ T1135] bridge_slave_1: left allmulticast mode [ 629.447498][ T1135] bridge_slave_1: left promiscuous mode [ 629.520671][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.860234][ T1135] bridge_slave_0: left allmulticast mode [ 629.866136][ T1135] bridge_slave_0: left promiscuous mode [ 630.044814][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.997092][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.080325][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.167147][ T1135] bond0 (unregistering): Released all slaves [ 632.227960][ T8086] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 632.323628][ T8362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.740'. [ 632.364984][ T8086] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 632.622543][ T1135] hsr_slave_0: left promiscuous mode [ 632.671130][ T1135] hsr_slave_1: left promiscuous mode [ 632.710454][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.752216][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.920923][ T1135] veth0_vlan: left promiscuous mode [ 634.255174][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.263994][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.670859][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 634.772378][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 635.525933][ T8086] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 635.896148][ T8401] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 636.222835][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.248228][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.257969][ T8257] bridge_slave_0: entered allmulticast mode [ 636.293533][ T8257] bridge_slave_0: entered promiscuous mode [ 636.332729][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.346330][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.367189][ T8403] loop4: detected capacity change from 0 to 512 [ 636.378725][ T8257] bridge_slave_1: entered allmulticast mode [ 636.390826][ T8257] bridge_slave_1: entered promiscuous mode [ 636.594461][ T8403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.660283][ T8403] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 636.933726][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.964070][ T8257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.153769][ T8257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.558702][ T8257] team0: Port device team_slave_0 added [ 637.662428][ T8257] team0: Port device team_slave_1 added [ 637.773000][ T8419] loop1: detected capacity change from 0 to 128 [ 638.060364][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.083053][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.184604][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.354357][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.379813][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.509763][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.740117][ T5835] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 638.890991][ T8432] ptrace attach of ""[8433] was attempted by "./syz-executor exec"[8432] [ 638.919829][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 638.956571][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 639.004924][ T5835] usb 3-1: config 140 has an invalid interface number: 182 but max is 1 [ 639.027140][ T5835] usb 3-1: config 140 has no interface number 1 [ 639.076943][ T5835] usb 3-1: config 140 interface 182 has no altsetting 0 [ 639.141915][ T5835] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 639.179790][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.188076][ T5835] usb 3-1: Product: syz [ 639.229708][ T5835] usb 3-1: Manufacturer: syz [ 639.250877][ T5835] usb 3-1: SerialNumber: syz [ 639.451018][ T8257] hsr_slave_0: entered promiscuous mode [ 639.487889][ T8257] hsr_slave_1: entered promiscuous mode [ 639.534808][ T8257] debugfs: 'hsr0' already exists in 'hsr' [ 639.573757][ T8257] Cannot create hsr debugfs directory [ 639.587780][ T5835] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 640.069914][ T5835] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 640.298437][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 640.343396][ T5835] usb 3-1: device firmware changed [ 640.403208][ T5835] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 640.422226][ T5835] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 640.424780][ T8086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.461541][ T5834] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 640.505984][ T5834] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 640.521309][ T5835] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 640.559777][ T5835] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 640.616511][ T5835] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 640.730331][ T5835] usb 3-1: USB disconnect, device number 20 [ 640.788376][ T5835] usb 3-1: [ueagle-atm] ADSL device removed [ 641.178860][ T8086] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.633148][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.640864][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.657508][ T8456] loop4: detected capacity change from 0 to 512 [ 641.716220][ T8456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 641.729668][ T5835] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 641.945941][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.971082][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.981778][ T5835] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 641.999842][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.025788][ T5835] usb 2-1: config 0 descriptor?? [ 642.047082][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.133727][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.141500][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.212077][ T8456] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.571813][ T5835] hid_parser_main: 31 callbacks suppressed [ 642.571923][ T5835] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 642.617383][ T8456] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 642.632316][ T5835] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 642.743774][ T5835] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 642.775260][ T5835] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 642.794909][ T8456] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 642.806435][ T5835] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 642.868370][ T8456] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.768: Failed to acquire dquot type 1 [ 642.896862][ T5835] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 643.011812][ T5835] playstation 0003:054C:0DF2.000A: Invalid reportID received, expected 9 got 64 [ 643.070059][ T5835] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22 [ 643.128441][ T5835] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 643.208016][ T5835] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 643.294522][ T5835] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22 [ 643.471314][ T5835] usb 2-1: USB disconnect, device number 16 [ 643.849828][ T8472] binfmt_misc: register: failed to install interpreter file ./file0 [ 643.864170][ T8472] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 644.532354][ T8466] fido_id[8466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 644.755461][ T8257] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 645.073005][ T8257] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 645.365885][ T8257] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 645.527050][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.968750][ T8257] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 646.869198][ T7667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.880708][ T7667] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.891490][ T7667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.907828][ T7667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.925769][ T7667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 649.000145][ T5782] Bluetooth: hci5: command tx timeout [ 649.423931][ T8507] loop2: detected capacity change from 0 to 1024 [ 649.509897][ T8511] Zero length message leads to an empty skb [ 649.765954][ T29] audit: type=1800 audit(1775707041.140:228): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.781" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 650.407176][ T5838] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 650.730964][ T5838] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 650.755451][ T8257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.762790][ T5838] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 650.809996][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.826639][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 650.901403][ T5838] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 651.082597][ T5782] Bluetooth: hci5: command tx timeout [ 651.664004][ T8257] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.889090][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.896947][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.098946][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.106588][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.510463][ T5838] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -110 [ 652.511618][ T5838] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 652.511703][ T5838] stv0680 5-1:4.0: last error: 86, command = 0x78 [ 652.749211][ T8538] netlink: 56 bytes leftover after parsing attributes in process `syz.1.789'. [ 652.895949][ T1123] bridge_slave_1: left allmulticast mode [ 652.896064][ T1123] bridge_slave_1: left promiscuous mode [ 652.897372][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.938451][ T1123] bridge_slave_0: left allmulticast mode [ 652.938559][ T1123] bridge_slave_0: left promiscuous mode [ 652.948164][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.169620][ T5782] Bluetooth: hci5: command tx timeout [ 653.754364][ T24] usb 5-1: USB disconnect, device number 16 [ 654.285495][ T8546] loop1: detected capacity change from 0 to 22 [ 654.333367][ T8546] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 654.383798][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.494411][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.616602][ T1123] bond0 (unregistering): Released all slaves [ 655.260144][ T5782] Bluetooth: hci5: command tx timeout [ 655.385079][ T1123] hsr_slave_0: left promiscuous mode [ 655.440227][ T1123] hsr_slave_1: left promiscuous mode [ 655.500382][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.561788][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.866285][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 656.913599][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 657.517463][ T8560] netlink: 60 bytes leftover after parsing attributes in process `syz.4.796'. [ 657.584890][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.609076][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.640712][ T8482] bridge_slave_0: entered allmulticast mode [ 657.690494][ T8482] bridge_slave_0: entered promiscuous mode [ 657.800322][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.854716][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.890026][ T8482] bridge_slave_1: entered allmulticast mode [ 657.943566][ T8482] bridge_slave_1: entered promiscuous mode [ 658.350516][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 658.398747][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.476429][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.514285][ T8574] loop4: detected capacity change from 0 to 128 [ 658.622604][ T8576] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 659.478320][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 659.533015][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 659.837286][ T29] audit: type=1800 audit(1775707051.220:229): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.801" name="file2" dev="loop4" ino=1048648 res=0 errno=0 [ 659.964741][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.109591][ T8574] FAT-fs (loop4): Filesystem has been set read-only [ 660.116846][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.297674][ T8482] team0: Port device team_slave_0 added [ 660.399957][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.451102][ T8482] team0: Port device team_slave_1 added [ 660.491915][ T9] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 660.513667][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.686236][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.729810][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.765350][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.798323][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.835158][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.876326][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 660.925586][ T8574] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 661.113827][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.509833][ T9] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 661.517734][ T9] usb 2-1: can't read configurations, error -71 [ 661.701696][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.732066][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.851512][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.940069][ T40] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 661.983508][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.991695][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.026132][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.130144][ T40] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.186823][ T40] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 662.239630][ T40] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 662.297799][ T40] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 662.334161][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.394845][ T8582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 662.848117][ T8482] hsr_slave_0: entered promiscuous mode [ 662.877480][ T8482] hsr_slave_1: entered promiscuous mode [ 662.911020][ T8482] debugfs: 'hsr0' already exists in 'hsr' [ 662.917213][ T8482] Cannot create hsr debugfs directory [ 663.403529][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.549023][ T40] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 663.579306][ T40] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input40 [ 663.912590][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 663.921357][ T40] usb 3-1: USB disconnect, device number 21 [ 664.847625][ T8607] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 666.266993][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 666.299938][ T5839] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 666.420660][ T8620] hsr0: entered promiscuous mode [ 666.432778][ T8620] macvlan2: entered allmulticast mode [ 666.442922][ T8620] hsr0: entered allmulticast mode [ 666.459205][ T8620] hsr_slave_0: entered allmulticast mode [ 666.482545][ T8620] hsr_slave_1: entered allmulticast mode [ 666.505798][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.539318][ T5839] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 666.567034][ T8482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 666.595842][ T5839] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 666.622022][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.639841][ T5839] usb 2-1: Product: syz [ 666.644258][ T5839] usb 2-1: Manufacturer: syz [ 666.669763][ T5839] usb 2-1: SerialNumber: syz [ 666.691073][ T5839] usb 2-1: config 0 descriptor?? [ 666.707243][ T8482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 666.811249][ T8482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 666.951511][ T8482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 667.427563][ T5839] usb 2-1: USB disconnect, device number 19 [ 667.566432][ T8257] veth0_vlan: entered promiscuous mode [ 667.744839][ T8629] netlink: 92 bytes leftover after parsing attributes in process `syz.2.818'. [ 667.895664][ T8257] veth1_vlan: entered promiscuous mode [ 668.316568][ T8635] vivid-004: disconnect [ 668.357556][ T8634] vivid-004: reconnect [ 668.711729][ T8257] veth0_macvtap: entered promiscuous mode [ 668.861058][ T8257] veth1_macvtap: entered promiscuous mode [ 668.990843][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.116695][ T8641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.135751][ T8642] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 669.308792][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.457332][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.570933][ T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 669.607452][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.615133][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.677331][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.869871][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 669.879316][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.902457][ T24] usb 5-1: config 0 descriptor?? [ 669.979215][ T24] cp210x 5-1:0.0: cp210x converter detected [ 670.014900][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.022806][ T6242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.095105][ T1078] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.178564][ T151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.263238][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.361384][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.418264][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 670.793961][ T5835] usb 5-1: USB disconnect, device number 17 [ 670.945138][ T5835] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 671.074759][ T5835] cp210x 5-1:0.0: device disconnected [ 671.379746][ T5839] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 671.652637][ T5839] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 671.757779][ T5839] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 671.794599][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.879924][ T5839] usb 3-1: Product: syz [ 671.895395][ T5839] usb 3-1: Manufacturer: syz [ 671.940118][ T5839] usb 3-1: SerialNumber: syz [ 671.993535][ T5839] usb 3-1: config 0 descriptor?? [ 672.787348][ T7667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 672.802039][ T7667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 672.813489][ T7667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 672.834639][ T7667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 672.849854][ T7667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 673.100715][ T5835] usb 3-1: USB disconnect, device number 22 [ 674.137610][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.485877][ T8679] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 674.920075][ T5782] Bluetooth: hci0: command tx timeout [ 675.783839][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 676.850931][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 677.004415][ T5782] Bluetooth: hci0: command tx timeout [ 678.264757][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.672692][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.005651][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.079767][ T5782] Bluetooth: hci0: command tx timeout [ 679.160334][ T8715] Bluetooth: MGMT ver 1.23 [ 679.375324][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.073989][ T8482] veth0_vlan: entered promiscuous mode [ 680.166572][ T8719] loop4: detected capacity change from 0 to 2048 [ 680.391010][ T8719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.407246][ T8719] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.615709][ T8732] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 681.159801][ T5782] Bluetooth: hci0: command tx timeout [ 681.812616][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.828189][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.880481][ T8662] bridge_slave_0: entered allmulticast mode [ 681.903105][ T8662] bridge_slave_0: entered promiscuous mode [ 681.962045][ T8482] veth1_vlan: entered promiscuous mode [ 682.010032][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.039245][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.070094][ T8662] bridge_slave_1: entered allmulticast mode [ 682.093913][ T8662] bridge_slave_1: entered promiscuous mode [ 682.552478][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.668982][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.803151][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.901703][ T56] bridge_slave_1: left allmulticast mode [ 682.930439][ T56] bridge_slave_1: left promiscuous mode [ 682.937460][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.121028][ T56] bridge_slave_0: left allmulticast mode [ 683.127222][ T56] bridge_slave_0: left promiscuous mode [ 683.195210][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.428682][ T8738] loop2: detected capacity change from 0 to 512 [ 683.549259][ T8738] EXT4-fs (loop2): 1 truncate cleaned up [ 683.558042][ T8738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.422300][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.610242][ T8753] netlink: 44 bytes leftover after parsing attributes in process `syz.1.850'. [ 685.120424][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.168764][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.193248][ T56] bond0 (unregistering): Released all slaves [ 685.591788][ T8748] tun0: tun_chr_ioctl cmd 1074025677 [ 685.598334][ T8748] tun0: linktype set to 776 [ 685.686983][ T8662] team0: Port device team_slave_0 added [ 685.709889][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 685.758003][ T56] hsr_slave_0: left promiscuous mode [ 685.787565][ T56] hsr_slave_1: left promiscuous mode [ 685.802571][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.860677][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.887738][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.904321][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 685.911289][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.929270][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.969939][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 685.999550][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.048395][ T24] usb 3-1: config 0 descriptor?? [ 686.064773][ T56] veth1_macvtap: left promiscuous mode [ 686.089599][ T56] veth0_macvtap: left promiscuous mode [ 686.100658][ T56] veth1_vlan: left promiscuous mode [ 686.118571][ T56] veth0_vlan: left promiscuous mode [ 686.328495][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 686.353608][ T8766] loop1: detected capacity change from 0 to 2048 [ 686.478949][ T8766] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.537244][ T5839] usb 3-1: USB disconnect, device number 23 [ 687.771700][ T8775] IPVS: persistence engine module ip_vs_pe_À not found [ 688.051216][ T56] team0 (unregistering): Port device team_slave_1 removed [ 688.162719][ T56] team0 (unregistering): Port device team_slave_0 removed [ 688.660228][ T8662] team0: Port device team_slave_1 added [ 688.972775][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.999853][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.089643][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.207139][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.259677][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.307835][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.450021][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 689.492679][ T8482] veth0_macvtap: entered promiscuous mode [ 689.609782][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 689.644736][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 689.659744][ T24] usb 5-1: config 0 has no interface number 0 [ 689.691082][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 689.719902][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.752474][ T24] usb 5-1: Product: syz [ 689.759754][ T24] usb 5-1: Manufacturer: syz [ 689.764882][ T24] usb 5-1: SerialNumber: syz [ 689.775099][ T8662] hsr_slave_0: entered promiscuous mode [ 689.786929][ T24] usb 5-1: config 0 descriptor?? [ 689.805524][ T8662] hsr_slave_1: entered promiscuous mode [ 689.832826][ T8662] debugfs: 'hsr0' already exists in 'hsr' [ 689.841386][ T8662] Cannot create hsr debugfs directory [ 689.863115][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 689.890955][ T8482] veth1_macvtap: entered promiscuous mode [ 690.110855][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 690.194397][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 690.253495][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 690.282109][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 211 [ 690.526696][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 690.539764][ T24] usb 5-1: USB disconnect, device number 18 [ 690.622293][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 690.733930][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 690.765167][ T24] quatech2 5-1:0.51: device disconnected [ 690.972357][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.319004][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.062844][ T7362] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 692.273584][ T7362] usb 5-1: Using ep0 maxpacket: 16 [ 692.816195][ T8807] loop1: detected capacity change from 0 to 512 [ 692.956065][ T1102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.023101][ T1102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.073614][ T8807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.130027][ T1078] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.170469][ T8807] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.342087][ T7362] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 693.370018][ T7362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.378316][ T7362] usb 5-1: Product: syz [ 693.567570][ T1078] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.995512][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.339597][ T7362] usb 5-1: Manufacturer: syz [ 694.344563][ T7362] usb 5-1: SerialNumber: syz [ 695.614692][ T8662] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 695.712748][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.729908][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.823640][ T8662] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 696.002275][ T8662] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 696.113981][ T7362] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 696.156167][ T7362] usb 5-1: USB disconnect, device number 19 [ 696.291620][ T8662] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 698.983534][ T8835] loop2: detected capacity change from 0 to 65536 [ 699.070673][ T8835] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 699.952071][ T8835] XFS (loop2): Ending clean mount [ 700.943461][ T5787] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 701.214132][ T5834] usb 3-1: [UEAGLE-ATM] firmware is not available [ 701.221130][ T5832] usb 3-1: [UEAGLE-ATM] firmware is not available [ 705.124902][ T8872] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 705.503760][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.258946][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.765622][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.773317][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.007390][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.015088][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.388881][ T8879] netlink: 152 bytes leftover after parsing attributes in process `syz.2.880'. [ 707.565332][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 710.156136][ T7667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 710.241692][ T7667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 710.320790][ T7667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 710.370091][ T7667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 710.387239][ T7667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 711.140057][ T5834] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 712.561528][ T7667] Bluetooth: hci1: command tx timeout [ 713.755471][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.789843][ T5834] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 713.828526][ T5834] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 713.930541][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.938832][ T5834] usb 2-1: Product: syz [ 714.049683][ T5834] usb 2-1: Manufacturer: syz [ 714.054642][ T5834] usb 2-1: SerialNumber: syz [ 714.135992][ T5834] usb 2-1: config 0 descriptor?? [ 714.357697][ T5834] usb 2-1: can't set config #0, error -71 [ 714.489856][ T5834] usb 2-1: USB disconnect, device number 20 [ 714.604769][ T7667] Bluetooth: hci1: command tx timeout [ 714.890006][ T8899] chnl_net:caif_netlink_parms(): no params data found [ 715.534306][ T5834] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 715.759714][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 715.829807][ T5834] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 715.895988][ T5834] usb 3-1: config 0 has no interface number 0 [ 715.956227][ T5834] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 715.988891][ T8933] loop1: detected capacity change from 0 to 1024 [ 716.008421][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.073198][ T5834] usb 3-1: Product: syz [ 716.077628][ T5834] usb 3-1: Manufacturer: syz [ 716.153841][ T5834] usb 3-1: SerialNumber: syz [ 716.156248][ T79] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.205479][ T5834] usb 3-1: config 0 descriptor?? [ 716.313055][ T5834] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 716.323002][ T29] audit: type=1800 audit(1775707107.700:230): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.891" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 716.423628][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.571457][ T5834] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 716.615273][ T79] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.680636][ T7667] Bluetooth: hci1: command tx timeout [ 716.740749][ T5834] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 716.899277][ T79] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.969380][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 717.011388][ T5834] usb 3-1: USB disconnect, device number 24 [ 717.118157][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 717.235337][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 717.325715][ T5834] quatech2 3-1:0.51: device disconnected [ 717.362411][ T79] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.811941][ T7667] Bluetooth: hci1: command tx timeout [ 721.566799][ T8958] loop4: detected capacity change from 0 to 2048 [ 722.516179][ T8958] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 723.380280][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.387873][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.501666][ T8899] bridge_slave_0: entered allmulticast mode [ 723.554247][ T8899] bridge_slave_0: entered promiscuous mode [ 723.692095][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.742759][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.806346][ T8899] bridge_slave_1: entered allmulticast mode [ 723.850757][ T8899] bridge_slave_1: entered promiscuous mode [ 724.471914][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 724.596439][ T8899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.646549][ T79] bridge_slave_1: left allmulticast mode [ 724.658274][ T79] bridge_slave_1: left promiscuous mode [ 724.700382][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.790508][ T79] bridge_slave_0: left allmulticast mode [ 724.802687][ T79] bridge_slave_0: left promiscuous mode [ 724.828450][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.860906][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.912068][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.942008][ T79] bond0 (unregistering): Released all slaves [ 726.069106][ T8899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.148768][ T8986] pimreg: tun_chr_ioctl cmd 1074025677 [ 726.181682][ T8986] pimreg: linktype set to 280 [ 726.850298][ T79] hsr_slave_0: left promiscuous mode [ 726.875976][ T79] hsr_slave_1: left promiscuous mode [ 726.905487][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.926944][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.939037][ T9001] loop1: detected capacity change from 0 to 512 [ 726.968143][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.970888][ T9001] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 727.021842][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.030827][ T9001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 727.095854][ T79] veth1_macvtap: left promiscuous mode [ 727.104446][ T9001] EXT4-fs (loop1): 1 truncate cleaned up [ 727.105618][ T79] veth0_macvtap: left promiscuous mode [ 727.106234][ T79] veth1_vlan: left promiscuous mode [ 727.161203][ T9001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.219904][ T79] veth0_vlan: left promiscuous mode [ 727.564663][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.032782][ T79] team0 (unregistering): Port device team_slave_1 removed [ 731.381921][ T79] team0 (unregistering): Port device team_slave_0 removed [ 732.203636][ T8899] team0: Port device team_slave_0 added [ 732.236714][ T8899] team0: Port device team_slave_1 added [ 732.793718][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.832244][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.977993][ T8899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.045630][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.066954][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.161652][ T8899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.199582][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 733.446790][ T9] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 733.462333][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.477188][ T9] usb 2-1: Product: syz [ 733.488133][ T9] usb 2-1: Manufacturer: syz [ 733.539687][ T9] usb 2-1: SerialNumber: syz [ 733.612317][ T9] usb 2-1: config 0 descriptor?? [ 733.665353][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 733.784409][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 733.871244][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 733.989774][ T9] usb 2-1: media controller created [ 734.091364][ T8899] hsr_slave_0: entered promiscuous mode [ 734.134852][ T8899] hsr_slave_1: entered promiscuous mode [ 734.183218][ T8899] debugfs: 'hsr0' already exists in 'hsr' [ 734.189250][ T8899] Cannot create hsr debugfs directory [ 734.291897][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.306577][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 734.316805][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 734.331020][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 734.344571][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 734.379205][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 734.992690][ T9037] loop4: detected capacity change from 0 to 512 [ 735.044112][ T9037] EXT4-fs: inline encryption not supported [ 735.094772][ T9037] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 735.155064][ T9] DVB: Unable to find symbol mt352_attach() [ 735.196184][ T9037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 735.210824][ T9037] System zones: 1-12 [ 735.327730][ T9037] EXT4-fs (loop4): 1 truncate cleaned up [ 735.381926][ T9037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.648335][ T9] DVB: Unable to find symbol nxt6000_attach() [ 735.709712][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 735.788164][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 735.909528][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 735.949761][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 735.997975][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 736.029497][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 736.099887][ T9] usb 2-1: USB disconnect, device number 21 [ 736.510265][ T7667] Bluetooth: hci5: command tx timeout [ 736.797143][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.599856][ T7667] Bluetooth: hci5: command tx timeout [ 738.887566][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 739.369632][ T5838] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 739.551168][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 739.637236][ T5838] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 739.678609][ T5838] usb 3-1: config 0 has no interface number 0 [ 739.708463][ T5838] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 739.793044][ T5838] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 739.929882][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.938283][ T5838] usb 3-1: Product: syz [ 740.006292][ T5838] usb 3-1: Manufacturer: syz [ 740.029546][ T5838] usb 3-1: SerialNumber: syz [ 740.070715][ T5838] usb 3-1: config 0 descriptor?? [ 740.091246][ T9061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.476862][ T9061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.680030][ T7667] Bluetooth: hci5: command tx timeout [ 740.918257][ T1102] bridge_slave_1: left allmulticast mode [ 740.969748][ T1102] bridge_slave_1: left promiscuous mode [ 740.985999][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.051075][ T1102] bridge_slave_0: left allmulticast mode [ 741.079061][ T1102] bridge_slave_0: left promiscuous mode [ 741.086624][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.147343][ T9077] loop4: detected capacity change from 0 to 4096 [ 741.161808][ T5838] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 741.194166][ T5838] asix 3-1:0.188: probe with driver asix failed with error -71 [ 741.386117][ T9079] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 741.450961][ T5838] usb 3-1: USB disconnect, device number 25 [ 743.229906][ T7667] Bluetooth: hci5: command tx timeout [ 745.308732][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.868971][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.010253][ T1102] bond0 (unregistering): Released all slaves [ 746.210265][ T9087] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 746.768864][ T1102] hsr_slave_0: left promiscuous mode [ 746.819788][ T1102] hsr_slave_1: left promiscuous mode [ 746.895078][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.942330][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.632635][ T9094] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 748.564007][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 748.620454][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 749.107507][ T9096] tipc: New replicast peer: 172.30.1.3 [ 749.119143][ T9096] tipc: Enabled bearer , priority 23 [ 749.389843][ T8899] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 749.522488][ T8899] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 749.621533][ T8899] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 749.672899][ T8899] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 749.725691][ T9029] chnl_net:caif_netlink_parms(): no params data found [ 750.664936][ T8899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.824923][ T8899] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.093832][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.101572][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.126860][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.134620][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.208006][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.245253][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.278799][ T9029] bridge_slave_0: entered allmulticast mode [ 751.294087][ T9029] bridge_slave_0: entered promiscuous mode [ 752.688513][ T9117] loop4: detected capacity change from 0 to 4096 [ 752.731286][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.780049][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.851849][ T9029] bridge_slave_1: entered allmulticast mode [ 752.958910][ T9029] bridge_slave_1: entered promiscuous mode [ 754.511373][ T9117] ntfs3(loop4): Failed to read $UpCase (-4). [ 755.754683][ T9029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.887647][ T9029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.915804][ T9029] team0: Port device team_slave_0 added [ 757.035828][ T9029] team0: Port device team_slave_1 added [ 757.113213][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.120322][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.320928][ T9029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.328216][ T9029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.163173][ T9029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.181379][ T9029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.188817][ T9029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.216365][ T9029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.979898][ T9029] hsr_slave_0: entered promiscuous mode [ 760.033349][ T9029] hsr_slave_1: entered promiscuous mode [ 760.106014][ T9029] debugfs: 'hsr0' already exists in 'hsr' [ 760.119479][ T9029] Cannot create hsr debugfs directory [ 760.133847][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 761.087464][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.948'. [ 766.046489][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 767.103928][ T9185] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 768.762207][ T9195] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 769.939892][ T9201] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 769.975727][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 769.995936][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 770.010934][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 770.025291][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 770.052719][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 770.160495][ T5835] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 770.327159][ T9201] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 770.407280][ T5835] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 770.469730][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.492860][ T5835] usb 3-1: Product: syz [ 770.497371][ T5835] usb 3-1: Manufacturer: syz [ 770.528576][ T5835] usb 3-1: SerialNumber: syz [ 770.573369][ T5835] usb 3-1: config 0 descriptor?? [ 770.611099][ T5835] hub 3-1:0.0: bad descriptor, ignoring hub [ 770.617314][ T5835] hub 3-1:0.0: probe with driver hub failed with error -5 [ 770.629251][ T5834] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 770.750467][ T5835] f81232 3-1:0.0: f81534a converter detected [ 770.837009][ T5835] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 770.849667][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.885648][ T5835] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 770.905401][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.957493][ T5834] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 770.989143][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.070142][ T5834] usb 2-1: config 0 descriptor?? [ 771.158706][ T5835] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 771.201598][ T9029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 771.478303][ T9029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 771.728441][ T5834] hid-led 0003:1D34:000A.000B: probe with driver hid-led failed with error -71 [ 771.750546][ T5835] usb 3-1: USB disconnect, device number 26 [ 771.772018][ T5835] f81232 3-1:0.0: device disconnected [ 771.842913][ T5834] usb 2-1: USB disconnect, device number 22 [ 772.006888][ T9029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 772.119723][ T5782] Bluetooth: hci0: command tx timeout [ 772.122798][ T9029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 774.109818][ T5838] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 774.568571][ T5838] usb 2-1: config 0 has no interfaces? [ 774.641982][ T5838] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 774.710141][ T5838] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 774.799921][ T5838] usb 2-1: Manufacturer: syz [ 774.997440][ T5838] usb 2-1: config 0 descriptor?? [ 775.084568][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'. [ 775.101885][ T5782] Bluetooth: hci0: command tx timeout [ 775.430720][ T9] usb 2-1: USB disconnect, device number 23 [ 776.062028][ T9204] chnl_net:caif_netlink_parms(): no params data found [ 776.131927][ T9243] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 777.831887][ T5782] Bluetooth: hci0: command tx timeout [ 778.683604][ T1135] bridge_slave_1: left allmulticast mode [ 778.725634][ T1135] bridge_slave_1: left promiscuous mode [ 778.762048][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.917060][ T1135] bridge_slave_0: left allmulticast mode [ 779.028261][ T1135] bridge_slave_0: left promiscuous mode [ 779.035215][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.884448][ T5782] Bluetooth: hci0: command tx timeout [ 780.458926][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.485343][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.504324][ T1135] bond0 (unregistering): Released all slaves [ 780.974144][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.969'. [ 781.338415][ T1135] hsr_slave_0: left promiscuous mode [ 781.454646][ T1135] hsr_slave_1: left promiscuous mode [ 781.503658][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.535237][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.887547][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 782.886935][ T9270] loop2: detected capacity change from 0 to 16 [ 783.315656][ T9272] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 784.351204][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 784.605694][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 786.525390][ T9278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.978'. [ 787.832343][ T9029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.245558][ T9029] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.434721][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.442405][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.599870][ T7967] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 788.692872][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.700593][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.823437][ T7967] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 788.853649][ T7967] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 788.888882][ T7967] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 788.930508][ T7967] usb 2-1: config 220 has no interface number 2 [ 788.937080][ T7967] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 789.021359][ T7967] usb 2-1: config 220 interface 0 has no altsetting 0 [ 789.083108][ T7967] usb 2-1: config 220 interface 76 has no altsetting 0 [ 789.130092][ T7967] usb 2-1: config 220 interface 1 has no altsetting 0 [ 789.184546][ T7967] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 789.209679][ T7967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.230137][ T9307] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 789.249758][ T7967] usb 2-1: Product: syz [ 789.273442][ T7967] usb 2-1: Manufacturer: syz [ 789.344829][ T7967] usb 2-1: SerialNumber: syz [ 789.473225][ T9204] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.515779][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.531195][ T9204] bridge_slave_0: entered allmulticast mode [ 789.726580][ T9204] bridge_slave_0: entered promiscuous mode [ 789.828187][ T9309] loop2: detected capacity change from 0 to 1024 [ 789.982515][ T7967] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 789.994049][ T9204] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.045076][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.069789][ T7967] uvcvideo 2-1:220.0: No valid video chain found. [ 790.135047][ T9204] bridge_slave_1: entered allmulticast mode [ 790.156032][ T7967] usb 2-1: selecting invalid altsetting 0 [ 790.238522][ T9204] bridge_slave_1: entered promiscuous mode [ 790.396732][ T7967] usb 2-1: selecting invalid altsetting 0 [ 790.580236][ T7967] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 790.670796][ T7967] usb 2-1: USB disconnect, device number 24 [ 791.107864][ T6785] hfsplus: bad catalog file entry [ 791.165304][ T6785] hfsplus: b-tree write err: -5, ino 3 [ 791.831908][ T9204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.012774][ T9204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.124613][ T9204] team0: Port device team_slave_0 added [ 794.353068][ T9204] team0: Port device team_slave_1 added [ 794.659564][ T5835] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 794.915641][ T5835] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 794.959935][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.967099][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.997456][ T5835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 795.081873][ T5835] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 795.094728][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 795.124354][ T5835] usb 5-1: Product: syz [ 795.128900][ T5835] usb 5-1: Manufacturer: syz [ 795.134140][ T9204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.189510][ T5835] usb 5-1: SerialNumber: syz [ 795.215833][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.241614][ T5835] usb 5-1: config 0 descriptor?? [ 795.271119][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.312238][ T9330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 795.378890][ T9204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.429040][ T5835] usb 5-1: selecting invalid altsetting 0 [ 795.963742][ T7667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 795.980693][ T7667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 795.995385][ T7667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.130842][ T7667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.160530][ T7667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 796.295401][ T5835] usb 5-1: USB disconnect, device number 20 [ 796.325832][ T9204] hsr_slave_0: entered promiscuous mode [ 796.378266][ T9204] hsr_slave_1: entered promiscuous mode [ 796.449924][ T9204] debugfs: 'hsr0' already exists in 'hsr' [ 796.473321][ T9204] Cannot create hsr debugfs directory [ 796.904724][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.279891][ T7667] Bluetooth: hci1: command tx timeout [ 800.360389][ T7667] Bluetooth: hci1: command tx timeout [ 802.440388][ T7667] Bluetooth: hci1: command tx timeout [ 802.587897][ T9379] loop2: detected capacity change from 0 to 4096 [ 802.913064][ T9379] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 802.961202][ T9381] loop1: detected capacity change from 0 to 4096 [ 803.007478][ T9381] EXT4-fs: inline encryption not supported [ 803.060336][ T9381] ext4: Unknown parameter 'nouser_xattr' [ 803.249069][ T9379] ntfs3(loop2): Failed to load $Extend (-22). [ 803.349587][ T9379] ntfs3(loop2): Failed to initialize $Extend. [ 803.805524][ T9341] chnl_net:caif_netlink_parms(): no params data found [ 804.466734][ T9204] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 804.520308][ T7667] Bluetooth: hci1: command tx timeout [ 805.036238][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 805.061490][ T9204] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 805.151741][ T9204] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 805.449618][ T5835] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 805.466060][ T9204] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 805.600465][ T12] bridge_slave_1: left allmulticast mode [ 805.606378][ T12] bridge_slave_1: left promiscuous mode [ 805.650834][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.698787][ T5835] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 805.740673][ T12] bridge_slave_0: left allmulticast mode [ 805.750334][ T5835] usb 3-1: config 0 interface 0 has no altsetting 0 [ 805.782010][ T12] bridge_slave_0: left promiscuous mode [ 805.788709][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.817187][ T5835] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 805.849668][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 805.858147][ T5835] usb 3-1: Product: syz [ 805.903946][ T5835] usb 3-1: Manufacturer: syz [ 805.909021][ T5835] usb 3-1: SerialNumber: syz [ 805.992544][ T5835] usb 3-1: config 0 descriptor?? [ 806.057147][ T9397] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 806.128817][ T5835] usb 3-1: selecting invalid altsetting 0 [ 806.840766][ T5835] usb 3-1: USB disconnect, device number 27 [ 807.235171][ T6218] udevd[6218]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.471987][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.651273][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.729167][ T12] bond0 (unregistering): Released all slaves [ 809.807349][ T9423] loop2: detected capacity change from 0 to 256 [ 810.028603][ T9423] FAT-fs (loop2): Directory bread(block 64) failed [ 810.059969][ T9423] FAT-fs (loop2): Directory bread(block 65) failed [ 810.066969][ T9423] FAT-fs (loop2): Directory bread(block 66) failed [ 810.097064][ T9423] FAT-fs (loop2): Directory bread(block 67) failed [ 810.191029][ T9423] FAT-fs (loop2): Directory bread(block 68) failed [ 810.251150][ T9423] FAT-fs (loop2): Directory bread(block 69) failed [ 810.258344][ T9423] FAT-fs (loop2): Directory bread(block 70) failed [ 810.359062][ T9423] FAT-fs (loop2): Directory bread(block 71) failed [ 810.401864][ T9423] FAT-fs (loop2): Directory bread(block 72) failed [ 810.428260][ T9423] FAT-fs (loop2): Directory bread(block 73) failed [ 810.976267][ T12] hsr_slave_0: left promiscuous mode [ 811.082818][ T12] hsr_slave_1: left promiscuous mode [ 811.118817][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.165666][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.291608][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 812.600171][ T9436] loop2: detected capacity change from 0 to 4096 [ 812.831360][ T12] team0 (unregistering): Port device team_slave_1 removed [ 812.875531][ T9440] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 812.961086][ T12] team0 (unregistering): Port device team_slave_0 removed [ 814.411821][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.475814][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.542940][ T9341] bridge_slave_0: entered allmulticast mode [ 814.645885][ T9341] bridge_slave_0: entered promiscuous mode [ 814.760253][ T9454] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 814.772377][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.816643][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.330472][ T9341] bridge_slave_1: entered allmulticast mode [ 815.362993][ T9341] bridge_slave_1: entered promiscuous mode [ 816.041717][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.206487][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.994971][ T9341] team0: Port device team_slave_0 added [ 817.055408][ T9341] team0: Port device team_slave_1 added [ 817.305423][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.339625][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.447990][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.545606][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.583074][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.696180][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.904935][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 818.182903][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.285588][ T9341] hsr_slave_0: entered promiscuous mode [ 818.331748][ T9341] hsr_slave_1: entered promiscuous mode [ 818.365355][ T9341] debugfs: 'hsr0' already exists in 'hsr' [ 818.407323][ T9341] Cannot create hsr debugfs directory [ 818.548012][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.569823][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.755240][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 819.193861][ T9204] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.458914][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.466624][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.737429][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.745143][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.014166][ T9500] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 821.265302][ T9510] program syz.4.1037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 822.291516][ T9341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 822.408267][ T9341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 822.561579][ T9341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 822.732331][ T9341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 823.741875][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.016516][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.233661][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.425958][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.433623][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.606383][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.614473][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.656894][ T9556] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 827.954005][ T9572] loop2: detected capacity change from 0 to 1024 [ 828.339364][ T9204] veth0_vlan: entered promiscuous mode [ 828.554577][ T151] hfsplus: b-tree write err: -5, ino 25 [ 828.581646][ T151] hfsplus: b-tree write err: -5, ino 4 [ 828.587583][ T151] hfsplus: b-tree write err: -5, ino 2 [ 828.730152][ T9204] veth1_vlan: entered promiscuous mode [ 828.925555][ T7967] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 829.005011][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.125849][ T7967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.174670][ T7967] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.235618][ T7967] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 829.260586][ T7967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.289874][ T7967] usb 2-1: config 0 descriptor?? [ 829.409942][ T7967] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 829.614404][ T7967] usb 2-1: USB disconnect, device number 25 [ 831.227409][ T9590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 831.267883][ T9590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 831.301307][ T9590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 831.400850][ T9590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 831.412994][ T9590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 833.217714][ T9341] veth0_vlan: entered promiscuous mode [ 833.480020][ T7667] Bluetooth: hci5: command tx timeout [ 833.712030][ T9341] veth1_vlan: entered promiscuous mode [ 834.267127][ T9341] veth0_macvtap: entered promiscuous mode [ 834.386446][ T9341] veth1_macvtap: entered promiscuous mode [ 836.199836][ T7667] Bluetooth: hci5: command tx timeout [ 836.886881][ T9589] chnl_net:caif_netlink_parms(): no params data found [ 838.132184][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.279575][ T7667] Bluetooth: hci5: command tx timeout [ 838.494839][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.637667][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.665345][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.697460][ T151] bridge_slave_1: left allmulticast mode [ 838.740807][ T151] bridge_slave_1: left promiscuous mode [ 838.747661][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.860492][ T151] bridge_slave_0: left allmulticast mode [ 838.866474][ T151] bridge_slave_0: left promiscuous mode [ 838.912208][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.791273][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.837023][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.874550][ T151] bond0 (unregistering): Released all slaves [ 839.906236][ T1102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.933830][ T1102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.062577][ T9625] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 840.069711][ T9625] pim6reg0: linktype set to 774 [ 840.322281][ T151] hsr_slave_0: left promiscuous mode [ 840.358925][ T151] hsr_slave_1: left promiscuous mode [ 840.364361][ T7667] Bluetooth: hci5: command tx timeout [ 840.402921][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.423753][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.584019][ T151] veth1_vlan: left promiscuous mode [ 840.609692][ T151] veth0_vlan: left promiscuous mode [ 842.795177][ T151] team0 (unregistering): Port device team_slave_1 removed [ 842.962730][ T151] team0 (unregistering): Port device team_slave_0 removed [ 844.672922][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.717930][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.762971][ T9589] bridge_slave_0: entered allmulticast mode [ 844.883348][ T9589] bridge_slave_0: entered promiscuous mode [ 844.973645][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.031704][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.096669][ T9589] bridge_slave_1: entered allmulticast mode [ 845.153019][ T9589] bridge_slave_1: entered promiscuous mode [ 845.667082][ T9589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.766098][ T9589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.171537][ T9658] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 846.271013][ T9589] team0: Port device team_slave_0 added [ 846.325346][ T9589] team0: Port device team_slave_1 added [ 846.745223][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.769791][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.860489][ T9589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.902880][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.946802][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.015165][ T9589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.368961][ T9669] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1073'. [ 847.563329][ T9589] hsr_slave_0: entered promiscuous mode [ 847.588471][ T9589] hsr_slave_1: entered promiscuous mode [ 847.668904][ T9589] debugfs: 'hsr0' already exists in 'hsr' [ 847.697800][ T9589] Cannot create hsr debugfs directory [ 848.025422][ T9678] loop2: detected capacity change from 0 to 256 [ 848.205901][ T9678] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 848.499920][ T29] audit: type=1800 audit(1775707239.880:231): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1076" name="file1" dev="loop2" ino=1048650 res=0 errno=0 [ 849.035855][ T9688] loop1: detected capacity change from 0 to 512 [ 849.106238][ T9688] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 849.303419][ T9688] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 849.379410][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 849.386216][ C1] EXT4-fs (loop1): initial error at time 1775707240: ext4_mb_generate_buddy:1317 [ 849.396001][ C1] EXT4-fs (loop1): last error at time 1775707240: ext4_mb_generate_buddy:1317 [ 849.451348][ T9688] Quota error (device loop1): write_blk: dquota write failed [ 849.509859][ T9688] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 849.528550][ T9694] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 849.535370][ T9694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 849.582345][ T9688] Quota error (device loop1): write_blk: dquota write failed [ 849.640288][ T9688] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 849.657359][ T9694] vhci_hcd vhci_hcd.0: Device attached [ 849.702002][ T9688] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.1079: Failed to acquire dquot type 1 [ 849.756309][ T9688] loop1: lost filesystem error report for type 5 error -28 [ 849.758088][ T9688] EXT4-fs (loop1): 1 truncate cleaned up [ 849.822369][ T9688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.942171][ T5832] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 850.063853][ T5835] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 850.098034][ T9702] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 851.176508][ T5835] usb 3-1: config 0 has no interfaces? [ 851.189715][ T5835] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 851.920532][ T9589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 852.005303][ T9589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 852.030548][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.034542][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.057018][ T5835] usb 3-1: config 0 descriptor?? [ 852.243797][ T9589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 852.422332][ T9589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 852.618557][ T5835] usb 3-1: can't set config #0, error -71 [ 852.694703][ T5835] usb 3-1: USB disconnect, device number 28 [ 852.733773][ T9695] vhci_hcd: connection reset by peer [ 852.809885][ T6242] vhci_hcd vhci_hcd.2: stop threads [ 852.815402][ T6242] vhci_hcd vhci_hcd.2: release socket [ 852.874678][ T6242] vhci_hcd vhci_hcd.2: disconnect device [ 852.956992][ T9716] loop4: detected capacity change from 0 to 24 [ 853.045607][ T9716] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 853.195569][ T9720] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1084'. [ 853.312653][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.362068][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.878662][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.940968][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.953614][ T9725] netlink: 'syz.1.1086': attribute type 2 has an invalid length. [ 855.052040][ T9589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.366674][ T9589] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.467295][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.475133][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.996024][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.003937][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.149681][ T5832] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 857.858907][ T9589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.153575][ T9742] loop4: detected capacity change from 0 to 4096 [ 858.242309][ T9742] ntfs3: Bad value for 'uid' [ 858.247163][ T9742] ntfs3: Bad value for 'uid' [ 859.085675][ T9752] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 860.224396][ T9755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.496494][ T9590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 860.512500][ T9590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 860.525006][ T9590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 860.580565][ T9590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 860.646653][ T9590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 862.729960][ T5835] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 862.751299][ T9589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.760558][ T9590] Bluetooth: hci0: command tx timeout [ 862.925584][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.979671][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.039530][ T5835] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 863.048873][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.092056][ T5835] usb 3-1: config 0 descriptor?? [ 863.185361][ T1102] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.490431][ T1102] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.586451][ T5835] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 863.610324][ T5835] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 863.634324][ T5835] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 863.669570][ T5835] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 863.677433][ T5835] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 863.772043][ T5835] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 863.821077][ T1102] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.912506][ T5835] playstation 0003:054C:0DF2.000C: Invalid reportID received, expected 9 got 64 [ 863.946400][ T5835] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 864.029961][ T5835] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 864.038931][ T5835] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 864.164569][ T5835] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 864.205688][ T1102] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.305313][ T5835] usb 3-1: USB disconnect, device number 29 [ 864.421809][ T9756] chnl_net:caif_netlink_parms(): no params data found [ 864.449540][ T9789] loop4: detected capacity change from 0 to 64 [ 864.633116][ T29] audit: type=1800 audit(1775707256.020:232): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1099" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 864.824610][ T9785] fido_id[9785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 864.840419][ T9590] Bluetooth: hci0: command tx timeout [ 865.858754][ T1102] bridge_slave_1: left allmulticast mode [ 865.947435][ T1102] bridge_slave_1: left promiscuous mode [ 866.003085][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.173216][ T1102] bridge_slave_0: left allmulticast mode [ 866.221910][ T1102] bridge_slave_0: left promiscuous mode [ 866.283614][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.926446][ T9590] Bluetooth: hci0: command tx timeout [ 869.050014][ T9590] Bluetooth: hci0: command tx timeout [ 870.035410][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.225878][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.332291][ T1102] bond0 (unregistering): Released all slaves [ 871.672184][ T9589] veth0_vlan: entered promiscuous mode [ 871.744987][ T5838] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 871.982840][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 872.006344][ T5838] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 872.027527][ T5838] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 872.067654][ T5838] usb 3-1: config 135 has no interface number 0 [ 872.105434][ T5838] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 872.118009][ T9589] veth1_vlan: entered promiscuous mode [ 872.156801][ T5838] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 872.210944][ T5838] usb 3-1: config 135 interface 230 has no altsetting 0 [ 872.266694][ T5838] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 872.290388][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.298689][ T5838] usb 3-1: Product: syz [ 872.332581][ T5838] usb 3-1: Manufacturer: syz [ 872.337610][ T5838] usb 3-1: SerialNumber: syz [ 872.441714][ T5838] uvcvideo 3-1:135.230: Found Unit with invalid ID 0 [ 872.467307][ T1102] hsr_slave_0: left promiscuous mode [ 872.499783][ T1102] hsr_slave_1: left promiscuous mode [ 872.518707][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.540420][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.558614][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.566775][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.582267][ T5838] uvcvideo 3-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 872.596102][ T5838] uvcvideo 3-1:135.230: No valid video chain found. [ 872.679193][ T1102] veth1_macvtap: left promiscuous mode [ 872.685335][ T1102] veth0_macvtap: left promiscuous mode [ 872.710183][ T1102] veth1_vlan: left promiscuous mode [ 872.761127][ T1102] veth0_vlan: left promiscuous mode [ 872.808151][ T5838] usb 3-1: USB disconnect, device number 30 [ 874.169629][ T7967] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 874.411499][ T7967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.448035][ T7967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.504740][ T7967] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 875.351630][ T7667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 875.362362][ T7667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 875.372450][ T7667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 875.392658][ T7667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 875.405323][ T7667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 875.489452][ T7967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.003142][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 876.132353][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 876.517521][ T7967] usb 5-1: config 0 descriptor?? [ 877.025966][ T7967] usb 5-1: can't set config #0, error -71 [ 877.121883][ T7967] usb 5-1: USB disconnect, device number 21 [ 877.484783][ T9590] Bluetooth: hci1: command tx timeout [ 878.577522][ T9756] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.626374][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.693218][ T9756] bridge_slave_0: entered allmulticast mode [ 878.730917][ T9756] bridge_slave_0: entered promiscuous mode [ 879.081114][ T9756] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.088697][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.189906][ T9756] bridge_slave_1: entered allmulticast mode [ 879.230029][ T9756] bridge_slave_1: entered promiscuous mode [ 879.353449][ T9855] loop4: detected capacity change from 0 to 256 [ 879.431201][ T9855] exfat: Deprecated parameter 'namecase' [ 879.559843][ T9590] Bluetooth: hci1: command 0x041b tx timeout [ 879.599988][ T9855] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 879.986823][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.994581][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.506423][ T9756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.635496][ T9756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.466279][ T9756] team0: Port device team_slave_0 added [ 881.536235][ T9589] veth0_macvtap: entered promiscuous mode [ 881.639918][ T7667] Bluetooth: hci1: command 0x041b tx timeout [ 881.735371][ T9756] team0: Port device team_slave_1 added [ 881.868999][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1116'. [ 882.371690][ T9589] veth1_macvtap: entered promiscuous mode [ 882.567857][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.011158][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.103401][ T9756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.144765][ T9756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.346017][ T9756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.689349][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.751043][ T7667] Bluetooth: hci1: command 0x041b tx timeout [ 883.893207][ T9756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.955261][ T9756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.085361][ T9756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.320790][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.394567][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.598597][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.339017][ T9880] IPVS: persistence engine module ip_vs_pe_À not found [ 885.624900][ T9883] loop4: detected capacity change from 0 to 512 [ 885.685499][ T9883] EXT4-fs (loop4): 1 truncate cleaned up [ 885.707327][ T9883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.751243][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.919068][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1124'. [ 885.950824][ T7667] Bluetooth: hci1: command 0x041b tx timeout [ 885.959566][ T151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.182250][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.523122][ T175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.589087][ T175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.841110][ T9844] chnl_net:caif_netlink_parms(): no params data found [ 888.296975][ T9756] hsr_slave_0: entered promiscuous mode [ 888.390616][ T9756] hsr_slave_1: entered promiscuous mode [ 888.400479][ T9756] debugfs: 'hsr0' already exists in 'hsr' [ 888.406485][ T9756] Cannot create hsr debugfs directory [ 889.232760][ T7667] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 889.882243][ T1102] bridge_slave_1: left allmulticast mode [ 889.888342][ T1102] bridge_slave_1: left promiscuous mode [ 889.940818][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.040419][ T1102] bridge_slave_0: left allmulticast mode [ 890.046602][ T1102] bridge_slave_0: left promiscuous mode [ 890.080692][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.270694][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.344954][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.465482][ T1102] bond0 (unregistering): Released all slaves [ 892.118139][ T9924] loop2: detected capacity change from 0 to 256 [ 892.392090][ T9924] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 892.861139][ T1102] tipc: Disabling bearer [ 892.890498][ T1102] tipc: Left network mode [ 894.340565][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.348265][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.429119][ T9844] bridge_slave_0: entered allmulticast mode [ 894.478228][ T9844] bridge_slave_0: entered promiscuous mode [ 894.673010][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.707463][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.721023][ T9844] bridge_slave_1: entered allmulticast mode [ 894.744033][ T9844] bridge_slave_1: entered promiscuous mode [ 894.895413][ T9590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 894.905345][ T9590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 894.923587][ T9590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 894.945825][ T9590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 894.962838][ T9590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 895.651531][ T9844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.776804][ T1102] hsr_slave_0: left promiscuous mode [ 895.806938][ T1102] hsr_slave_1: left promiscuous mode [ 895.826063][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.859925][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.892577][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.916882][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.959073][ T1102] veth1_macvtap: left promiscuous mode [ 895.966919][ T1102] veth0_macvtap: left promiscuous mode [ 895.982588][ T1102] veth1_vlan: left promiscuous mode [ 896.003459][ T1102] veth0_vlan: left promiscuous mode [ 897.080716][ T7667] Bluetooth: hci3: command tx timeout [ 897.173083][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 897.220314][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 897.774796][ T9844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.569209][ T9844] team0: Port device team_slave_0 added [ 898.682803][ T9844] team0: Port device team_slave_1 added [ 899.096955][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.114177][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.164473][ T7667] Bluetooth: hci3: command tx timeout [ 899.226795][ T9844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.549726][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.571732][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.617695][ T9844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.757951][ T5839] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 899.989703][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 900.103919][ T5839] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 900.139537][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.183297][ T1102] IPVS: stop unused estimator thread 0... [ 900.190811][ T5839] usb 5-1: Product: syz [ 900.195233][ T5839] usb 5-1: Manufacturer: syz [ 900.219547][ T5839] usb 5-1: SerialNumber: syz [ 900.260573][ T9963] loop2: detected capacity change from 0 to 512 [ 900.345024][ T9963] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1138: Invalid inode bitmap blk 4 in block_group 0 [ 900.374395][ T9844] hsr_slave_0: entered promiscuous mode [ 900.388084][ T9844] hsr_slave_1: entered promiscuous mode [ 900.403236][ T9844] debugfs: 'hsr0' already exists in 'hsr' [ 900.407954][ T9963] loop2: lost filesystem error report for type 5 error -117 [ 900.411001][ T9844] Cannot create hsr debugfs directory [ 900.437171][ T9963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.526801][ T5839] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 900.548089][ T5839] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 900.560867][ T5839] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 900.573581][ T5839] usb 5-1: media controller created [ 900.704320][ T9756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 900.716164][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.820568][ T5839] zl10353_read_register: readreg error (reg=127, ret==-71) [ 900.837668][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.885366][ T9756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 900.962352][ T9756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 901.011428][ T9756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 901.208951][ T5839] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 901.213821][ T1102] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.239551][ T7667] Bluetooth: hci3: command tx timeout [ 901.266748][ T5839] usb 5-1: USB disconnect, device number 22 [ 901.640667][ T1102] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.929017][ T175] ===================================================== [ 901.938428][ T175] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820 [ 901.947899][ T175] n_tty_receive_buf_standard+0xe7b/0xc820 [ 901.955030][ T175] n_tty_receive_buf_common+0x1a59/0x2610 [ 901.962195][ T175] n_tty_receive_buf2+0x4c/0x60 [ 901.968152][ T175] tty_ldisc_receive_buf+0xc6/0x2c0 [ 901.974699][ T175] tty_port_default_receive_buf+0xd7/0x1a0 [ 901.981885][ T175] flush_to_ldisc+0x43e/0xe40 [ 901.987629][ T175] process_scheduled_works+0xb82/0x1e80 [ 901.994677][ T175] worker_thread+0xee4/0x1590 [ 902.006710][ T175] kthread+0x53f/0x600 [ 902.014918][ T175] ret_from_fork+0x20f/0x910 [ 902.020787][ T175] ret_from_fork_asm+0x1a/0x30 [ 902.026654][ T175] [ 902.030105][ T175] Uninit was stored to memory at: [ 902.036406][ T175] n_tty_receive_buf_standard+0xe74/0xc820 [ 902.043612][ T175] n_tty_receive_buf_common+0x1a59/0x2610 [ 902.050643][ T175] n_tty_receive_buf2+0x4c/0x60 [ 902.056739][ T175] tty_ldisc_receive_buf+0xc6/0x2c0 [ 902.063331][ T175] tty_port_default_receive_buf+0xd7/0x1a0 [ 902.070597][ T175] flush_to_ldisc+0x43e/0xe40 [ 902.076302][ T175] process_scheduled_works+0xb82/0x1e80 [ 902.084611][ T175] worker_thread+0xee4/0x1590 [ 902.090473][ T175] kthread+0x53f/0x600 [ 902.095533][ T175] ret_from_fork+0x20f/0x910 [ 902.102782][ T175] ret_from_fork_asm+0x1a/0x30 [ 902.107890][ T175] [ 902.111186][ T175] Uninit was created at: [ 902.115808][ T175] __kmalloc_noprof+0x486/0x1680 [ 902.123191][ T175] __tty_buffer_request_room+0x3d4/0x7a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 902.129054][ T175] __tty_insert_flip_string_flags+0x157/0x6e0 [ 902.136283][ T175] uart_insert_char+0x368/0x930 [ 902.141608][ T175] serial8250_read_char+0x1ba/0x670 [ 902.147038][ T175] serial8250_handle_irq_locked+0x6d4/0xa40 [ 902.153563][ T175] serial8250_handle_irq+0x187/0x730 [ 902.159096][ T175] serial8250_default_handle_irq+0x116/0x370 [ 902.165453][ T175] serial8250_interrupt+0xcb/0x420 [ 902.171415][ T175] __handle_irq_event_percpu+0x13c/0xf90 [ 902.177353][ T175] handle_irq_event+0xe0/0x2a0 [ 902.186913][ T175] handle_edge_irq+0x2a9/0xb30 [ 902.192174][ T175] __common_interrupt+0x9d/0x180 [ 902.197311][ T175] common_interrupt+0x94/0xb0 [ 902.204414][ T175] asm_common_interrupt+0x2b/0x40 [ 902.210423][ T175] [ 902.212920][ T175] CPU: 0 UID: 0 PID: 175 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.224319][ T175] Tainted: [L]=SOFTLOCKUP [ 902.228776][ T175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 902.239308][ T175] Workqueue: events_unbound flush_to_ldisc [ 902.245344][ T175] ===================================================== [ 902.252555][ T175] Disabling lock debugging due to kernel taint [ 902.433205][ T175] Kernel panic - not syncing: kmsan.panic set ... [ 902.439820][ T175] CPU: 0 UID: 0 PID: 175 Comm: kworker/u8:8 Tainted: G B L syzkaller #0 PREEMPT(full) [ 902.451080][ T175] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 902.456770][ T175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 902.467093][ T175] Workqueue: events_unbound flush_to_ldisc [ 902.473151][ T175] Call Trace: [ 902.476569][ T175] [ 902.479624][ T175] __dump_stack+0x26/0x30 [ 902.484187][ T175] dump_stack_lvl+0x50/0x1c0 [ 902.488999][ T175] ? dump_stack+0x12/0x25 [ 902.493538][ T175] dump_stack+0x1e/0x25 [ 902.497914][ T175] vpanic+0x7b4/0x1430 [ 902.502234][ T175] panic+0x15d/0x160 [ 902.506421][ T175] kmsan_report+0x31a/0x320 [ 902.511329][ T175] ? kmsan_get_metadata+0xf1/0x160 [ 902.517016][ T175] ? __msan_warning+0x1b/0x30 [ 902.521932][ T175] ? n_tty_receive_buf_standard+0xe7b/0xc820 [ 902.528185][ T175] ? n_tty_receive_buf_common+0x1a59/0x2610 [ 902.534333][ T175] ? n_tty_receive_buf2+0x4c/0x60 [ 902.539622][ T175] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 902.545207][ T175] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 902.551421][ T175] ? flush_to_ldisc+0x43e/0xe40 [ 902.556565][ T175] ? process_scheduled_works+0xb82/0x1e80 [ 902.562504][ T175] ? worker_thread+0xee4/0x1590 [ 902.567576][ T175] ? kthread+0x53f/0x600 [ 902.572058][ T175] ? ret_from_fork+0x20f/0x910 [ 902.577033][ T175] ? ret_from_fork_asm+0x1a/0x30 [ 902.582255][ T175] ? ret_from_fork_asm+0x1a/0x30 [ 902.587465][ T175] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 902.594154][ T175] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 902.600512][ T175] ? __mutex_unlock_slowpath+0x3f7/0x530 [ 902.606518][ T175] ? kmsan_get_metadata+0x146/0x160 [ 902.612026][ T175] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 902.618113][ T175] ? n_tty_receive_char+0x1223/0x14f0 [ 902.623833][ T175] ? __wake_up+0x29d/0x2f0 [ 902.628557][ T175] ? kmsan_get_metadata+0xf1/0x160 [ 902.633879][ T175] __msan_warning+0x1b/0x30 [ 902.638634][ T175] n_tty_receive_buf_standard+0xe7b/0xc820 [ 902.644767][ T175] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 902.651378][ T175] ? kmsan_get_metadata+0xf1/0x160 [ 902.656725][ T175] ? kmsan_internal_task_create+0x10/0x40 [ 902.662744][ T175] n_tty_receive_buf_common+0x1a59/0x2610 [ 902.669000][ T175] n_tty_receive_buf2+0x4c/0x60 [ 902.674181][ T175] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 902.679970][ T175] tty_ldisc_receive_buf+0xc6/0x2c0 [ 902.685408][ T175] tty_port_default_receive_buf+0xd7/0x1a0 [ 902.691468][ T175] flush_to_ldisc+0x43e/0xe40 [ 902.696378][ T175] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 902.703026][ T175] ? __pfx_flush_to_ldisc+0x10/0x10 [ 902.708639][ T175] process_scheduled_works+0xb82/0x1e80 [ 902.714593][ T175] worker_thread+0xee4/0x1590 [ 902.719546][ T175] kthread+0x53f/0x600 [ 902.723894][ T175] ? __pfx_worker_thread+0x10/0x10 [ 902.729252][ T175] ? __pfx_kthread+0x10/0x10 [ 902.734278][ T175] ret_from_fork+0x20f/0x910 [ 902.739117][ T175] ? __switch_to+0x51c/0x750 [ 902.744074][ T175] ? __pfx_kthread+0x10/0x10 [ 902.749025][ T175] ret_from_fork_asm+0x1a/0x30 [ 902.754192][ T175] [ 902.757532][ T175] Kernel Offset: disabled [ 902.761941][ T175] Rebooting in 86400 seconds..