last executing test programs: 14.075510161s ago: executing program 2 (id=1103): openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 12.867683281s ago: executing program 2 (id=1112): r0 = socket$rds(0x15, 0x5, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1200, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffe1, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0x0, 0x7, 0x6}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168) listen(r4, 0x2) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "d97376d54ac169fef2aca59833ac1ffc"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@ack={0x1e, 0xf, 0x0, 0x4, "bece9292e5c3372a86ed2d"}]}}}}}}}}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000004c0)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 11.43658066s ago: executing program 2 (id=1119): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='itimer_state\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) 11.17673356s ago: executing program 2 (id=1122): openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 10.302313526s ago: executing program 2 (id=1127): mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000240)={@dev}, 0x14) 6.127640538s ago: executing program 3 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xe08, 0x200000, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 5.716395914s ago: executing program 4 (id=1143): r0 = socket$rds(0x15, 0x5, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1200, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffe1, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0x0, 0x7, 0x6}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168) listen(r4, 0x2) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "d97376d54ac169fef2aca59833ac1ffc"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@ack={0x1e, 0xf, 0x0, 0x4, "bece9292e5c3372a86ed2d"}]}}}}}}}}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r5, 0x5}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 5.171991907s ago: executing program 3 (id=1146): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) sendmsg$key(r1, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fcntl$dupfd(r0, 0x406, r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x33) r7 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ufs\x00', 0x11, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r7, &(0x7f0000000680)="240000001e005f0214ffffff49ba11a32502fffffff8070000001d000000000000000800", 0x24) 4.472114496s ago: executing program 4 (id=1148): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x5451, 0x0) 4.257764004s ago: executing program 0 (id=1150): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000480)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000b80)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x3c, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffff9f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0xaea3, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0), 0x208e24b) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 4.188657207s ago: executing program 4 (id=1151): openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 4.188389067s ago: executing program 1 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) epoll_wait(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00']) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000180)=[r8], 0x1, r9, r6, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x10, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 3.909774969s ago: executing program 2 (id=1153): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = inotify_init() syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100003b287040d81321009079000000010902120001000001000904"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x400017e) unlink(&(0x7f0000000000)='./file0\x00') write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getresgid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYRES32], 0x1c}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r5, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xd4a, 0x0, 0x200, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x200001, 0x1}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)='M', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000040a010200c833426951106cf475294a76299b542d21000000000002000000"], 0x14}}, 0x0) write$cgroup_int(r0, &(0x7f0000000300)=0x7fff, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000020000000080a01080000000000000000070000000900010073797a300000000014000020ad2df35d11283606e4001100010000000000000000000000000a"], 0x68}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 3.341395142s ago: executing program 4 (id=1154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3fffffff, 0x0, "23fcb273b504badcdb525893bdfe7da40ef521"}) 3.048656754s ago: executing program 0 (id=1155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) 3.048417834s ago: executing program 1 (id=1156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xe08, 0x200000, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 2.931593539s ago: executing program 1 (id=1157): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x21, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000000000018000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000000000000000000018400000000000000000000000000000180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000380), 0x20000000}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x681}], 0x1, 0x0, 0x46, 0x407006}, 0x0) 2.576193784s ago: executing program 3 (id=1158): r0 = socket$rds(0x15, 0x5, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1200, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffe1, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0x0, 0x7, 0x6}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168) listen(r4, 0x2) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "d97376d54ac169fef2aca59833ac1ffc"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@ack={0x1e, 0xf, 0x0, 0x4, "bece9292e5c3372a86ed2d"}]}}}}}}}}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r5, 0x5}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.139421302s ago: executing program 4 (id=1159): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000080)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) 1.836537124s ago: executing program 0 (id=1160): mount(0x0, 0x0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) sendmsg(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) readv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x20000, 0x0, 0x0, 0x2}}, 0x48) 1.836235374s ago: executing program 1 (id=1161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept$inet6(r1, 0x0, 0x0) ioctl$sock_proto_private(r2, 0x8903, &(0x7f0000000540)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) 1.422844301s ago: executing program 0 (id=1162): pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000001d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) 1.030770667s ago: executing program 3 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000b010000000008003f00eeff"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) 884.689693ms ago: executing program 1 (id=1164): openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 847.087895ms ago: executing program 3 (id=1165): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='./bus\x00', 0x0) rmdir(&(0x7f00000003c0)='./bus\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 833.361265ms ago: executing program 4 (id=1166): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x6194, &(0x7f0000004a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x101cc1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 752.686109ms ago: executing program 0 (id=1167): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d735931001800007f004103ff0100"}}}}, 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) socket$unix(0x1, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000500)={'veth1_to_hsr\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 637.654613ms ago: executing program 3 (id=1168): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) sendmsg$key(r1, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fcntl$dupfd(r0, 0x406, r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x33) r7 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ufs\x00', 0x11, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r7, &(0x7f0000000680)="240000001e005f0214ffffff49ba11a32502fffffff8070000001d000000000000000800", 0x24) 637.458933ms ago: executing program 1 (id=1169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3fffffff, 0x0, "23fcb273b504badcdb525893bdfe7da40ef521"}) 0s ago: executing program 0 (id=1170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) kernel console output (not intermixed with test programs): hange from 0 to 16 [ 141.621743][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 141.623693][ T4994] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 141.667338][ T3769] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.705215][ T3769] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.743475][ T3769] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.781507][ T3769] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.798240][ T3769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.848457][ T3769] usbtmc 1-1:16.0: bulk endpoints not found [ 141.931638][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 142.043906][ T26] audit: type=1326 audit(1719770652.613:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.1.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82f9d75b99 code=0x0 [ 142.067697][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.187971][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.677143][ T5007] loop1: detected capacity change from 0 to 64 [ 142.870519][ T5004] loop3: detected capacity change from 0 to 32768 [ 142.898403][ T5004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.371 (5004) [ 142.963529][ T5004] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.982301][ T5004] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 142.999342][ T5004] BTRFS info (device loop3): setting nodatacow, compression disabled [ 143.026992][ T5004] BTRFS info (device loop3): enabling auto defrag [ 143.033876][ T5004] BTRFS info (device loop3): max_inline at 0 [ 143.086956][ T5004] BTRFS info (device loop3): using free space tree [ 143.349033][ T3580] bond0 (unregistering): Released all slaves [ 143.487124][ T3563] Bluetooth: hci3: command tx timeout [ 143.580807][ T4899] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.607033][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.616291][ T4899] device bridge_slave_0 entered promiscuous mode [ 143.643986][ T26] audit: type=1804 audit(1719770654.213:52): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.371" name="/root/syzkaller.PgiR7T/88/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 143.659417][ T4899] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.699419][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.716738][ T4899] device bridge_slave_1 entered promiscuous mode [ 143.815548][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 143.895513][ T4899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.960262][ T3646] usb 1-1: USB disconnect, device number 4 [ 143.991697][ T4899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.042591][ T3549] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.215690][ T4899] team0: Port device team_slave_0 added [ 144.311178][ T4899] team0: Port device team_slave_1 added [ 144.492627][ T4899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.507032][ T4899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.642370][ T4899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.702818][ T4899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.716342][ T4899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.763112][ T5059] loop3: detected capacity change from 0 to 64 [ 144.776082][ T4899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.864633][ T5061] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 144.873287][ T5061] ufs: You didn't specify the type of your ufs filesystem [ 144.873287][ T5061] [ 144.873287][ T5061] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.873287][ T5061] [ 144.873287][ T5061] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.904726][ T5061] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 144.974238][ T3680] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.205164][ T4899] device hsr_slave_0 entered promiscuous mode [ 145.255161][ T4899] device hsr_slave_1 entered promiscuous mode [ 145.295770][ T4899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.320522][ T4899] Cannot create hsr debugfs directory [ 145.346809][ T5060] netlink: 'syz.4.381': attribute type 10 has an invalid length. [ 145.567186][ T3556] Bluetooth: hci3: command tx timeout [ 145.741496][ T26] audit: type=1326 audit(1719770656.313:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5064 comm="syz.3.382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128cb75b99 code=0x0 [ 146.312785][ T3771] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.567107][ T3771] usb 1-1: Using ep0 maxpacket: 8 [ 146.707214][ T3771] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.727181][ T3771] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.757001][ T3771] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 146.794216][ T3771] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.812414][ T4899] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.824454][ T3771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.854979][ T4899] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.898175][ T3771] usbtmc 1-1:16.0: bulk endpoints not found [ 146.901010][ T4899] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.927445][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 147.081132][ T4899] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.291202][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 147.334783][ T5116] program syz.4.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.421372][ T4899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.494823][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.512433][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.547810][ T4899] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.581157][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.598551][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.625676][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.632926][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.680238][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.694268][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.716000][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.751436][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.758673][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.804891][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.848745][ T5129] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 147.955957][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.982100][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.025713][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.055710][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.072654][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.124992][ T4899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.168855][ T4899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.203123][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.220357][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.249064][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.272654][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.285518][ T5112] loop1: detected capacity change from 0 to 40427 [ 148.305081][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.329887][ T5112] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 148.351178][ T5112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 148.381336][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.484985][ T5112] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.632501][ T5112] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 148.739092][ T5112] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 148.746189][ T5112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.848255][ T26] audit: type=1800 audit(1719770659.423:54): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.392" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 148.917017][ T26] audit: type=1800 audit(1719770659.483:55): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.392" name="bus" dev="loop1" ino=11 res=0 errno=0 [ 149.036133][ T3629] usb 1-1: USB disconnect, device number 5 [ 149.262433][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.273487][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.296592][ T4899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.354482][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.379157][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.468007][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.489809][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.500658][ T26] audit: type=1326 audit(1719770660.073:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128cb75b99 code=0x0 [ 149.526077][ T4899] device veth0_vlan entered promiscuous mode [ 149.563457][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.577049][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.611690][ T4899] device veth1_vlan entered promiscuous mode [ 149.702810][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.718420][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.743887][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.759992][ T5170] loop4: detected capacity change from 0 to 64 [ 149.778478][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.810222][ T4899] device veth0_macvtap entered promiscuous mode [ 149.831459][ T4899] device veth1_macvtap entered promiscuous mode [ 149.929792][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.984453][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.004800][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.033353][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.046144][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.077231][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.094855][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.159609][ T5177] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 150.171724][ T5177] ufs: You didn't specify the type of your ufs filesystem [ 150.171724][ T5177] [ 150.171724][ T5177] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 150.171724][ T5177] [ 150.171724][ T5177] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 150.203272][ T5177] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 150.208761][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.224911][ T3578] Bluetooth: hci5: Frame reassembly failed (-84) [ 150.304848][ T4899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.337522][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.368188][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.417123][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.479747][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.502422][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.565235][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.620545][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.676489][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.720874][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.763875][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.806027][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.841518][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.885838][ T4899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.925911][ T5194] netlink: 'syz.3.406': attribute type 10 has an invalid length. [ 150.982030][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.997686][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.009661][ T4899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.031097][ T4899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.071243][ T4899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.107854][ T4899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.312704][ T5216] loop3: detected capacity change from 0 to 64 [ 151.387755][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.395963][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.427331][ T3646] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 151.481054][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.503821][ T3682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.527427][ T3682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.553259][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.677175][ T3646] usb 2-1: Using ep0 maxpacket: 8 [ 151.720199][ T5223] loop2: detected capacity change from 0 to 1024 [ 151.785096][ T5223] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.797190][ T3646] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.819558][ T3646] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.843901][ T5223] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 151.869835][ T3646] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 151.883247][ T5223] EXT4-fs (loop2): invalid journal inode [ 151.900467][ T5223] EXT4-fs (loop2): can't get journal size [ 151.924344][ T3646] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.928990][ T5223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.977160][ T3646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.006780][ T5223] syz.2.350 (pid 5223) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 152.148268][ T3646] usbtmc 2-1:16.0: bulk endpoints not found [ 152.188034][ T4899] EXT4-fs (loop2): unmounting filesystem. [ 152.207154][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.627478][ T5245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 152.668712][ T5245] program syz.4.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.048313][ T5277] Cannot find add_set index 0 as target [ 154.139892][ T3599] usb 2-1: USB disconnect, device number 15 [ 154.211103][ T5281] loop2: detected capacity change from 0 to 64 [ 154.593856][ T5293] loop1: detected capacity change from 0 to 8 [ 155.110887][ T5307] loop1: detected capacity change from 0 to 16 [ 155.212552][ T5307] erofs: (device loop1): mounted with root inode @ nid 36. [ 155.511854][ T5322] loop1: detected capacity change from 0 to 16 [ 155.610142][ T5322] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 155.814003][ T5330] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 155.824705][ T5330] ufs: You didn't specify the type of your ufs filesystem [ 155.824705][ T5330] [ 155.824705][ T5330] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 155.824705][ T5330] [ 155.824705][ T5330] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 155.857638][ T5330] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 155.878379][ T3680] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.935305][ T26] audit: type=1326 audit(1719770666.503:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.3.433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128cb75b99 code=0x0 [ 156.049395][ T5337] loop0: detected capacity change from 0 to 64 [ 156.619033][ T5341] loop2: detected capacity change from 0 to 2048 [ 156.803405][ T5341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.867159][ T5341] ext4 filesystem being mounted at /root/syzkaller.8LLFdc/7/bus supports timestamps until 2038 (0x7fffffff) [ 156.900460][ T5353] loop3: detected capacity change from 0 to 256 [ 157.169417][ T4899] EXT4-fs (loop2): unmounting filesystem. [ 157.330037][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 157.389221][ T5362] loop3: detected capacity change from 0 to 512 [ 157.426126][ T5362] EXT4-fs: Ignoring removed oldalloc option [ 157.450998][ T5362] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.459576][ T5364] program syz.1.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.515734][ T5362] EXT4-fs warning (device loop3): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 157.834296][ T5369] loop2: detected capacity change from 0 to 16 [ 157.870105][ T5369] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 157.887713][ T3556] Bluetooth: hci5: command 0x1003 tx timeout [ 157.896380][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 158.148198][ T5373] loop3: detected capacity change from 0 to 64 [ 158.652526][ T5384] loop3: detected capacity change from 0 to 4096 [ 158.885801][ T5386] loop0: detected capacity change from 0 to 8 [ 159.328897][ T26] audit: type=1326 audit(1719770669.903:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.2.452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5e9175b99 code=0x0 [ 159.800561][ T5400] netlink: 'syz.1.460': attribute type 10 has an invalid length. [ 160.232751][ T5406] loop1: detected capacity change from 0 to 64 [ 160.387654][ T5391] loop4: detected capacity change from 0 to 32768 [ 160.528140][ T3771] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 160.530792][ T5391] XFS (loop4): Mounting V5 Filesystem [ 160.548781][ T5412] Bluetooth: MGMT ver 1.22 [ 160.615746][ T5391] XFS (loop4): Torn write (CRC failure) detected at log block 0x20. Truncating head block from 0x30. [ 160.692331][ T5391] XFS (loop4): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:32). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 160.731958][ T5391] XFS (loop4): log mount/recovery failed: error -22 [ 160.777169][ T3771] usb 3-1: Using ep0 maxpacket: 8 [ 160.812760][ T5391] XFS (loop4): log mount failed [ 160.927995][ T3771] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.946928][ T3771] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.981471][ T3771] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 161.012528][ T5398] loop3: detected capacity change from 0 to 40427 [ 161.026823][ T3771] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.062895][ T5398] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 161.085511][ T3771] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.111812][ T5398] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 161.141910][ T3771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.160551][ T5398] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 161.225881][ T5398] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.238220][ T3771] usbtmc 3-1:16.0: bulk endpoints not found [ 161.417288][ T5396] loop0: detected capacity change from 0 to 32768 [ 161.456762][ T5396] XFS: attr2 mount option is deprecated. [ 161.506097][ T5396] XFS: ikeep mount option is deprecated. [ 161.520091][ T5398] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 161.526406][ T5396] XFS: noikeep mount option is deprecated. [ 161.556558][ T5398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.620203][ T5427] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 161.629573][ T5427] ufs: You didn't specify the type of your ufs filesystem [ 161.629573][ T5427] [ 161.629573][ T5427] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 161.629573][ T5427] [ 161.629573][ T5427] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 161.661319][ T5427] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.710397][ T3680] Bluetooth: hci5: Frame reassembly failed (-84) [ 162.087073][ T5396] XFS (loop0): Mounting V5 Filesystem [ 162.200180][ T5440] loop4: detected capacity change from 0 to 4096 [ 162.232906][ T5440] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 162.305815][ T5440] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 162.447184][ T5396] XFS (loop0): Ending clean mount [ 162.477123][ T5440] loop4: detected capacity change from 4096 to 0 [ 162.501207][ T5441] ntfs3: loop4: ino=5, "/" directory corrupted [ 162.544085][ T5443] loop3: detected capacity change from 0 to 256 [ 162.557972][ T5441] ntfs3: loop4: ino=5, "/" directory corrupted [ 162.607243][ T3556] Bluetooth: hci0: command tx timeout [ 162.640700][ T5396] XFS (loop0): Quotacheck needed: Please wait. [ 162.694030][ T3700] ntfs3: loop4: ino=5, "/" directory corrupted [ 162.725641][ T3700] ntfs3: loop4: ino=5, "/" directory corrupted [ 162.892506][ T5396] XFS (loop0): Quotacheck: Done. [ 162.893699][ T46] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 162.926060][ T4033] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 163.011022][ T3548] XFS (loop0): Unmounting Filesystem [ 163.045436][ T26] audit: type=1326 audit(1719770673.613:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.3.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128cb75b99 code=0x0 [ 163.206717][ T936] usb 3-1: USB disconnect, device number 11 [ 163.398989][ T5451] loop2: detected capacity change from 0 to 64 [ 163.399237][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.606699][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.727088][ T3556] Bluetooth: hci5: command 0x1003 tx timeout [ 163.735223][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 163.944302][ T5456] loop3: detected capacity change from 0 to 4096 [ 163.969078][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.061539][ T3556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.072009][ T3556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.082154][ T3556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.111280][ T3556] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.121132][ T3556] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.132501][ T3556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.167888][ T5460] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.301727][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.898767][ T5473] loop1: detected capacity change from 0 to 4096 [ 164.947990][ T5473] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 164.979909][ T5479] loop0: detected capacity change from 0 to 256 [ 165.015811][ T5473] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 165.042805][ T5457] chnl_net:caif_netlink_parms(): no params data found [ 165.388468][ T5473] loop1: detected capacity change from 4096 to 0 [ 165.479031][ T5485] ntfs3: loop1: ino=5, "/" directory corrupted [ 165.543036][ T5485] ntfs3: loop1: ino=5, "/" directory corrupted [ 165.570776][ T5454] loop2: detected capacity change from 0 to 32768 [ 165.633932][ T3547] ntfs3: loop1: ino=5, "/" directory corrupted [ 165.647253][ T3547] ntfs3: loop1: ino=5, "/" directory corrupted [ 165.823970][ T5454] XFS (loop2): Mounting V5 Filesystem [ 165.884154][ T5457] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.892746][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.931355][ T3682] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 165.937186][ T5457] device bridge_slave_0 entered promiscuous mode [ 165.947820][ T5457] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.955309][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.974914][ T5457] device bridge_slave_1 entered promiscuous mode [ 165.979807][ T4826] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 165.982386][ T5505] loop3: detected capacity change from 0 to 64 [ 166.017059][ T3599] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.061392][ T5454] XFS (loop2): Torn write (CRC failure) detected at log block 0x20. Truncating head block from 0x30. [ 166.125569][ T5454] XFS (loop2): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:32). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 166.207210][ T3556] Bluetooth: hci4: command tx timeout [ 166.248322][ T5454] XFS (loop2): log mount/recovery failed: error -22 [ 166.267124][ T3599] usb 1-1: Using ep0 maxpacket: 8 [ 166.387057][ T3599] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.401433][ T5454] XFS (loop2): log mount failed [ 166.404064][ T3599] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.409577][ T5457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.455854][ T3599] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 166.495189][ T3599] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.519058][ T3599] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.552887][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.562232][ T26] audit: type=1326 audit(1719770677.133:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128cb75b99 code=0x0 [ 166.615355][ T5457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.688254][ T3599] usbtmc 1-1:16.0: bulk endpoints not found [ 166.910345][ T5457] team0: Port device team_slave_0 added [ 166.934200][ T5457] team0: Port device team_slave_1 added [ 167.189699][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.197747][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.256024][ T5457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.429752][ T3563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.442617][ T3563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.454547][ T3563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.464086][ T3563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.474193][ T3563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.481713][ T3563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.525765][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.535162][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.563800][ T5457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.879020][ T5457] device hsr_slave_0 entered promiscuous mode [ 167.886630][ T5457] device hsr_slave_1 entered promiscuous mode [ 167.930061][ T5457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.948127][ T5457] Cannot create hsr debugfs directory [ 168.072715][ T33] device hsr_slave_0 left promiscuous mode [ 168.107633][ T33] device hsr_slave_1 left promiscuous mode [ 168.188651][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.206748][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.241049][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.277035][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.287078][ T3563] Bluetooth: hci4: command tx timeout [ 168.349448][ T33] device bridge_slave_0 left promiscuous mode [ 168.355982][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.411365][ T5551] loop3: detected capacity change from 0 to 64 [ 168.531506][ T33] device veth1_macvtap left promiscuous mode [ 168.548078][ T33] device veth0_macvtap left promiscuous mode [ 168.562715][ T33] device veth1_vlan left promiscuous mode [ 168.574398][ T33] device veth0_vlan left promiscuous mode [ 168.763443][ T5554] loop3: detected capacity change from 0 to 4096 [ 168.777850][ T936] usb 1-1: USB disconnect, device number 6 [ 169.374155][ T26] audit: type=1326 audit(1719770679.943:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5559 comm="syz.3.499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128cb75b99 code=0x0 [ 169.567068][ T3563] Bluetooth: hci1: command tx timeout [ 169.625149][ T5567] loop2: detected capacity change from 0 to 16 [ 169.675279][ T5567] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 170.310090][ T33] team0 (unregistering): Port device team_slave_1 removed [ 170.330987][ T5577] loop3: detected capacity change from 0 to 64 [ 170.367040][ T3563] Bluetooth: hci4: command tx timeout [ 170.484990][ T33] team0 (unregistering): Port device team_slave_0 removed [ 170.669609][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.823192][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.877097][ T3636] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.148202][ T3636] usb 4-1: Using ep0 maxpacket: 8 [ 171.268649][ T3636] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.286331][ T5589] loop2: detected capacity change from 0 to 16 [ 171.294174][ T3636] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.332720][ T3636] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 171.358572][ T5273] syz.0.419 (5273) used greatest stack depth: 20216 bytes left [ 171.366473][ T5589] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 171.378323][ T3636] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 171.399186][ T3636] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.419970][ T3636] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.436955][ T3636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.649632][ T3563] Bluetooth: hci1: command tx timeout [ 171.727427][ T3636] usb 4-1: usb_control_msg returned -71 [ 171.743228][ T3636] usbtmc 4-1:16.0: can't read capabilities [ 171.823705][ T3636] usb 4-1: USB disconnect, device number 7 [ 171.917850][ T33] bond0 (unregistering): Released all slaves [ 172.302760][ T5591] loop2: detected capacity change from 0 to 32768 [ 172.459087][ T3563] Bluetooth: hci4: command tx timeout [ 172.532399][ T5608] loop0: detected capacity change from 0 to 64 [ 172.561994][ T5591] XFS (loop2): Mounting V5 Filesystem [ 172.850683][ T5522] chnl_net:caif_netlink_parms(): no params data found [ 172.870507][ T5591] XFS (loop2): Torn write (CRC failure) detected at log block 0x20. Truncating head block from 0x30. [ 173.017952][ T5591] XFS (loop2): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:32). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 173.083694][ T5591] XFS (loop2): log mount/recovery failed: error -22 [ 173.221828][ T5591] XFS (loop2): log mount failed [ 173.450100][ T5522] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.467277][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.475541][ T5522] device bridge_slave_0 entered promiscuous mode [ 173.512242][ T5522] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.568419][ T5522] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.576695][ T5522] device bridge_slave_1 entered promiscuous mode [ 173.728394][ T3556] Bluetooth: hci1: command tx timeout [ 173.770637][ T5639] loop0: detected capacity change from 0 to 16 [ 173.800590][ T5522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.819292][ T5639] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 173.852612][ T5522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.907167][ T5457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.946797][ T5457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.067888][ T5457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.103362][ T5522] team0: Port device team_slave_0 added [ 174.121658][ T5457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.149167][ T5522] team0: Port device team_slave_1 added [ 174.306164][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.314258][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.413696][ T5522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.438295][ T5644] loop2: detected capacity change from 0 to 4096 [ 174.507436][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.514444][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.567829][ T5648] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.619839][ T5522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.632279][ T5650] loop0: detected capacity change from 0 to 64 [ 174.858593][ T5522] device hsr_slave_0 entered promiscuous mode [ 174.897580][ T5522] device hsr_slave_1 entered promiscuous mode [ 174.958539][ T5522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.974993][ T5522] Cannot create hsr debugfs directory [ 174.991226][ T5661] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 175.066430][ T5661] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 175.172631][ T5667] loop3: detected capacity change from 0 to 16 [ 175.222170][ T5667] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 175.271616][ T5457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.495364][ T5457] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.607924][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.615949][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.684947][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.714220][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.723328][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.730800][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.731413][ T5686] loop2: detected capacity change from 0 to 4096 [ 175.804577][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.813101][ T3556] Bluetooth: hci1: command tx timeout [ 175.828089][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.847110][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.854290][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.868370][ T5690] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.877356][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.900029][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.908801][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.988288][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.007369][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.055971][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.079611][ T5693] loop2: detected capacity change from 0 to 64 [ 176.085143][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.131879][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.149852][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.256072][ T5522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.299902][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.345506][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.363201][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.446011][ T5522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.474620][ T5696] loop2: detected capacity change from 0 to 4096 [ 176.493191][ T5457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.734293][ T5522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.752938][ T5712] loop3: detected capacity change from 0 to 16 [ 176.791691][ T5712] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 176.979284][ T5522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.073484][ T5720] netlink: 'syz.2.540': attribute type 10 has an invalid length. [ 177.244184][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.262104][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.297590][ T5457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.346430][ T5729] loop3: detected capacity change from 0 to 64 [ 177.490082][ T5522] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.553037][ T5522] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.606649][ T5522] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.777300][ T5522] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.140506][ T5522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.205668][ T5522] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.248512][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.268904][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.300959][ T5749] loop0: detected capacity change from 0 to 4096 [ 178.323317][ T5754] loop2: detected capacity change from 0 to 16 [ 178.341991][ T5754] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 178.399349][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.416610][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.477948][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.485419][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.502350][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.512836][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.522624][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.531068][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.683104][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.695481][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.712609][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.724388][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.745496][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.762358][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.773688][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.807934][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.816816][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.861137][ T5769] loop0: detected capacity change from 0 to 64 [ 178.910222][ T5522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.945828][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.991535][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.001000][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.019189][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.034693][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.062506][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.120590][ T5772] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 179.170714][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.182792][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.194053][ T5780] Zero length message leads to an empty skb [ 179.340644][ T5457] device veth0_vlan entered promiscuous mode [ 179.356995][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.372374][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.400070][ T5457] device veth1_vlan entered promiscuous mode [ 179.472997][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.494761][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.530365][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.558972][ T5793] loop2: detected capacity change from 0 to 16 [ 179.566303][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.609158][ T5457] device veth0_macvtap entered promiscuous mode [ 179.617424][ T5793] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 179.863129][ T5457] device veth1_macvtap entered promiscuous mode [ 179.911781][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.958399][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.965400][ T5799] loop0: detected capacity change from 0 to 4096 [ 179.987487][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.003606][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.038853][ T5522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.133491][ T33] device hsr_slave_0 left promiscuous mode [ 180.178499][ T33] device hsr_slave_1 left promiscuous mode [ 180.213327][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.227126][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.264946][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.284091][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.317187][ T33] device bridge_slave_1 left promiscuous mode [ 180.323508][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.376723][ T33] device bridge_slave_0 left promiscuous mode [ 180.388927][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.448740][ T33] device veth1_macvtap left promiscuous mode [ 180.454885][ T33] device veth0_macvtap left promiscuous mode [ 180.473021][ T33] device veth1_vlan left promiscuous mode [ 180.487250][ T33] device veth0_vlan left promiscuous mode [ 181.319251][ T33] team0 (unregistering): Port device team_slave_1 removed [ 181.379732][ T33] team0 (unregistering): Port device team_slave_0 removed [ 181.488658][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.488740][ T5836] loop2: detected capacity change from 0 to 16 [ 181.525918][ T5836] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 181.572817][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.096307][ T5847] loop0: detected capacity change from 0 to 4096 [ 182.402252][ T5856] loop0: detected capacity change from 0 to 16 [ 182.412478][ T33] bond0 (unregistering): Released all slaves [ 182.418571][ T5856] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 182.457198][ T3629] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 182.607106][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.618233][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.629042][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.639827][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.650314][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.661784][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.675914][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.691780][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.706101][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.721214][ T3629] usb 3-1: Using ep0 maxpacket: 8 [ 182.726410][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.744794][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.754996][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.766205][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.778488][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.787381][ T5817] netlink: 'syz.3.564': attribute type 10 has an invalid length. [ 182.825393][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.844734][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.857492][ T3629] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.865453][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.878161][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.886358][ T3629] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.905718][ T3629] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 182.936581][ T3629] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 182.952317][ T5457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.976034][ T5457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.002301][ T3629] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.025441][ T5457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.035104][ T3629] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.052094][ T5457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.062261][ T3629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.104778][ T5522] device veth0_vlan entered promiscuous mode [ 183.120712][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.132542][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.155382][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.172568][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.212752][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.241057][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.270881][ T5522] device veth1_vlan entered promiscuous mode [ 183.347135][ T3629] usb 3-1: usb_control_msg returned -71 [ 183.352875][ T3629] usbtmc 3-1:16.0: can't read capabilities [ 183.393365][ T3629] usb 3-1: USB disconnect, device number 12 [ 183.432068][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.439707][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.439763][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.471745][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.487891][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.506275][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.525818][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.564701][ T5522] device veth0_macvtap entered promiscuous mode [ 183.579186][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.620298][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.632150][ T5522] device veth1_macvtap entered promiscuous mode [ 183.639024][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.641408][ T5873] loop3: detected capacity change from 0 to 4096 [ 183.680473][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.704716][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.736314][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.753094][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.763689][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.781964][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.792566][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.803374][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.814006][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.825141][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.837254][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.848745][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.864110][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.877860][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.892195][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.943682][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.949175][ T5878] loop0: detected capacity change from 0 to 16 [ 184.012909][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.030323][ T5878] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 184.041451][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.075031][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.106615][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.144676][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.194951][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.243721][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.271705][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.315023][ T5522] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.344366][ T5522] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.389762][ T5522] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.409317][ T5895] loop4: detected capacity change from 0 to 64 [ 184.421097][ T5522] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.470799][ T5896] netlink: 'syz.3.589': attribute type 10 has an invalid length. [ 184.764465][ T3682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.785776][ T3682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.845442][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.891183][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.938231][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.966006][ T5914] loop0: detected capacity change from 0 to 16 [ 184.982934][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.992554][ T5914] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 185.084018][ T5908] loop3: detected capacity change from 0 to 4096 [ 185.096990][ T3600] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 185.376948][ T3600] usb 3-1: Using ep0 maxpacket: 8 [ 185.497346][ T3600] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.527094][ T3600] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.531577][ T5927] loop0: detected capacity change from 0 to 64 [ 185.569590][ T3600] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 185.601742][ T3600] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 185.645899][ T3600] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.700356][ T3600] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.734077][ T3600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.874948][ T5937] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 185.967973][ T5937] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 186.017055][ T3600] usb 3-1: usb_control_msg returned -71 [ 186.035963][ T3600] usbtmc 3-1:16.0: can't read capabilities [ 186.137289][ T3600] usb 3-1: USB disconnect, device number 13 [ 186.143651][ T5945] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 186.152990][ T5945] ufs: You didn't specify the type of your ufs filesystem [ 186.152990][ T5945] [ 186.152990][ T5945] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 186.152990][ T5945] [ 186.152990][ T5945] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 186.185934][ T5945] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 186.186822][ T3578] Bluetooth: hci5: Frame reassembly failed (-84) [ 186.491446][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 186.760907][ T5954] loop3: detected capacity change from 0 to 16 [ 186.790995][ T5954] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 187.365639][ T5967] loop2: detected capacity change from 0 to 64 [ 187.382114][ T5963] loop3: detected capacity change from 0 to 4096 [ 188.207230][ T3563] Bluetooth: hci5: command 0x1003 tx timeout [ 188.215235][ T3556] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 188.377056][ T3629] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.626976][ T3629] usb 1-1: Using ep0 maxpacket: 8 [ 188.757071][ T3629] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.773574][ T3563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.787698][ T3563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.796596][ T3565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.804948][ T3629] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.818340][ T3565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.825549][ T3629] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 188.837418][ T3565] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 188.844592][ T3629] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 188.844746][ T3565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.922777][ T3629] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.984816][ T3629] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.028548][ T3629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.111565][ T3680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.312987][ T3629] usb 1-1: usb_control_msg returned -71 [ 189.322306][ T3680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.333006][ T3629] usbtmc 1-1:16.0: can't read capabilities [ 189.357369][ T3629] usb 1-1: USB disconnect, device number 7 [ 189.357584][ T6008] loop1: detected capacity change from 0 to 64 [ 189.436684][ T6006] loop3: detected capacity change from 0 to 4096 [ 189.509294][ T3680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.657494][ T3680] bond0: (slave netdevsim0): Releasing backup interface [ 189.691490][ T3680] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.984779][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 190.180136][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 190.317860][ T6036] loop1: detected capacity change from 0 to 64 [ 190.694587][ T6039] loop3: detected capacity change from 0 to 4096 [ 190.767122][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.774271][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.856273][ T5993] device bridge_slave_0 entered promiscuous mode [ 190.927152][ T3563] Bluetooth: hci3: command tx timeout [ 190.971518][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.996442][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.011211][ T6057] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 191.020786][ T6057] ufs: You didn't specify the type of your ufs filesystem [ 191.020786][ T6057] [ 191.020786][ T6057] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 191.020786][ T6057] [ 191.020786][ T6057] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 191.053373][ T6057] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 191.126671][ T33] Bluetooth: hci5: Frame reassembly failed (-84) [ 191.135257][ T5993] device bridge_slave_1 entered promiscuous mode [ 191.167368][ T3562] Bluetooth: hci2: command 0x0406 tx timeout [ 191.167366][ T3565] Bluetooth: hci0: command 0x0406 tx timeout [ 191.438353][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.491873][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.577078][ T3629] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.726457][ T5993] team0: Port device team_slave_0 added [ 191.757736][ T5993] team0: Port device team_slave_1 added [ 191.827073][ T3629] usb 4-1: Using ep0 maxpacket: 8 [ 191.918312][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.925318][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.003943][ T3629] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.029621][ T3629] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.038444][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.089654][ T3629] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 192.149117][ T3629] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 192.188677][ T3629] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.239296][ T3629] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.269184][ T3629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.288660][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.306835][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.364463][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.567152][ T3629] usb 4-1: usb_control_msg returned -71 [ 192.572797][ T3629] usbtmc 4-1:16.0: can't read capabilities [ 192.632128][ T3629] usb 4-1: USB disconnect, device number 8 [ 192.699686][ T5993] device hsr_slave_0 entered promiscuous mode [ 192.711879][ T5993] device hsr_slave_1 entered promiscuous mode [ 192.724576][ T5993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.741395][ T5993] Cannot create hsr debugfs directory [ 192.792960][ T3680] device hsr_slave_0 left promiscuous mode [ 192.820005][ T3680] device hsr_slave_1 left promiscuous mode [ 192.846729][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.867430][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.896349][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.922782][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.944165][ T3680] device bridge_slave_1 left promiscuous mode [ 193.003498][ T3680] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.017328][ T3565] Bluetooth: hci3: command tx timeout [ 193.069928][ T3680] device bridge_slave_0 left promiscuous mode [ 193.087333][ T3565] Bluetooth: hci5: command 0x1003 tx timeout [ 193.095958][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.109712][ T3680] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.265010][ T3680] device veth1_macvtap left promiscuous mode [ 193.272395][ T3680] device veth0_macvtap left promiscuous mode [ 193.287043][ T3680] device veth1_vlan left promiscuous mode [ 193.293332][ T3680] device veth0_vlan left promiscuous mode [ 193.381840][ T6093] loop4: detected capacity change from 0 to 4096 [ 194.209941][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.216669][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.797159][ T3597] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.059389][ T3597] usb 1-1: Using ep0 maxpacket: 8 [ 195.087109][ T3563] Bluetooth: hci3: command tx timeout [ 195.089349][ T3680] team0 (unregistering): Port device team_slave_1 removed [ 195.187379][ T3597] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.212918][ T3597] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.253469][ T3597] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 195.276439][ T3597] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 195.289958][ T3680] team0 (unregistering): Port device team_slave_0 removed [ 195.293621][ T6136] loop4: detected capacity change from 0 to 4096 [ 195.303890][ T3597] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.320072][ T3597] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.345054][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.817621][ T3597] usb 1-1: usb_control_msg returned -71 [ 195.828736][ T3597] usbtmc 1-1:16.0: can't read capabilities [ 196.043548][ T3597] usb 1-1: USB disconnect, device number 8 [ 196.177601][ T3680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.355904][ T3680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.539378][ T6148] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 196.548546][ T6148] ufs: You didn't specify the type of your ufs filesystem [ 196.548546][ T6148] [ 196.548546][ T6148] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 196.548546][ T6148] [ 196.548546][ T6148] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 196.579663][ T6148] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.888683][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 197.676766][ T3563] Bluetooth: hci3: command tx timeout [ 198.686221][ T3564] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.260200][ T3596] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 199.738502][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 199.767715][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 199.796120][ T3596] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.823516][ T3596] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.853374][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.878851][ T3596] usb 1-1: config 0 descriptor?? [ 199.932577][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.177905][ T3680] bond0 (unregistering): Released all slaves [ 200.431453][ T3596] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 200.476940][ T3597] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 200.608299][ T3596] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 200.667023][ T3597] usb 5-1: device descriptor read/64, error -71 [ 200.968180][ T3597] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 201.085867][ T3596] usb 1-1: USB disconnect, device number 9 [ 201.247367][ T3597] usb 5-1: device descriptor read/64, error -71 [ 201.397266][ T3597] usb usb5-port1: attempt power cycle [ 201.417641][ T6189] program syz.3.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.695507][ T6194] loop1: detected capacity change from 0 to 4096 [ 201.826946][ T3597] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.937174][ T3597] usb 5-1: device descriptor read/8, error -71 [ 202.379019][ T3597] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 202.637071][ T3597] usb 5-1: device descriptor read/8, error -71 [ 202.787772][ T3597] usb usb5-port1: unable to enumerate USB device [ 203.463633][ T5993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.555935][ T5993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.591149][ T5993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.645240][ T5993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.050467][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.836727][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.246880][ C0] sched: RT throttling activated [ 205.247391][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.457262][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.609355][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.706583][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.759918][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.767169][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.823056][ T6240] loop4: detected capacity change from 0 to 4096 [ 205.885151][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.915371][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.934272][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.935723][ T26] audit: type=1326 audit(1719770716.503:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x0 [ 205.941474][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.957350][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.963390][ T3569] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 206.081910][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.101188][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.133356][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.146290][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.161789][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.173739][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.190613][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.250096][ T6252] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 206.258434][ T6252] ufs: You didn't specify the type of your ufs filesystem [ 206.258434][ T6252] [ 206.258434][ T6252] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 206.258434][ T6252] [ 206.258434][ T6252] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 206.290493][ T6252] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 206.318123][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.417494][ T3569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 206.457453][ T3569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 206.519896][ T3569] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.591514][ T3569] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.631321][ T3569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.647742][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.656470][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.675105][ T3569] usb 2-1: config 0 descriptor?? [ 206.677769][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.698940][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.707503][ T6238] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.760639][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.095494][ T3569] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 208.178288][ T3569] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 208.387257][ T3564] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 208.445976][ T3569] usb 2-1: USB disconnect, device number 16 [ 209.523969][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.045512][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.169934][ T3596] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 210.185932][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.307682][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.356274][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.429541][ T5993] device veth0_vlan entered promiscuous mode [ 210.483720][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.500954][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.522965][ T5993] device veth1_vlan entered promiscuous mode [ 210.567276][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 210.595410][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.623823][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 210.654569][ T6308] loop1: detected capacity change from 0 to 4096 [ 210.657825][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.711258][ T3596] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.766652][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.896047][ T3596] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.128266][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.207085][ T5993] device veth0_macvtap entered promiscuous mode [ 211.230398][ T3596] usb 1-1: config 0 descriptor?? [ 211.310806][ T5993] device veth1_macvtap entered promiscuous mode [ 211.337299][ T6293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.388445][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.399842][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.410112][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.430918][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.462961][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.484122][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.525223][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.556468][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.599657][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.645416][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.678115][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.694984][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.697302][ T3600] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 211.713271][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.743981][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.792502][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.843670][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.861199][ T3596] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 211.862701][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.898578][ T3596] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 211.909425][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.952996][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.985291][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.027432][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.052366][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.069104][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.096061][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.097393][ T3600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 212.116305][ T5993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.132542][ T5993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.142507][ T5993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.145026][ T3600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 212.162147][ T5993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.193728][ T3600] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.219554][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.239135][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.242264][ T3600] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.261320][ T3600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.286293][ T3600] usb 5-1: config 0 descriptor?? [ 212.328196][ T6319] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 212.429490][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.457312][ T3564] Bluetooth: hci3: command tx timeout [ 212.463311][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.574191][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.602958][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.632885][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.664741][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.753222][ T6344] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 212.763050][ T6344] ufs: You didn't specify the type of your ufs filesystem [ 212.763050][ T6344] [ 212.763050][ T6344] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 212.763050][ T6344] [ 212.763050][ T6344] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 212.794936][ T6344] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.826410][ T3600] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 212.912700][ T3563] Bluetooth: hci5: sending frame failed (-49) [ 212.920758][ T3564] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 212.949848][ T3600] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 212.998735][ T6346] netlink: 'syz.2.619': attribute type 10 has an invalid length. [ 213.070814][ T3600] usb 5-1: USB disconnect, device number 7 [ 213.210681][ T6346] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 213.230726][ T3636] usb 1-1: USB disconnect, device number 10 [ 215.271639][ T6374] tmpfs: Unknown parameter 'usrquota' [ 215.325163][ T6370] loop4: detected capacity change from 0 to 4096 [ 215.378597][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 215.932001][ T6383] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 217.456987][ T3636] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.773678][ T6412] loop2: detected capacity change from 0 to 4096 [ 217.827412][ T3636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 217.845383][ T3636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 217.857692][ T3596] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 217.858117][ T3636] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.881090][ T3636] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.897087][ T3636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.914611][ T3636] usb 4-1: config 0 descriptor?? [ 217.937262][ T6397] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.016566][ T6419] loop2: detected capacity change from 0 to 64 [ 218.107003][ T3596] usb 2-1: Using ep0 maxpacket: 8 [ 218.157070][ T6424] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 218.268968][ T3596] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 218.278509][ T3596] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.290168][ T3596] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.300979][ T3596] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.326839][ T3596] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.361910][ T3596] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.371305][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.566251][ T3636] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 218.578430][ T3636] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 218.865189][ T3596] usb 2-1: usb_control_msg returned -32 [ 218.892229][ T3596] usbtmc 2-1:16.0: can't read capabilities [ 219.170023][ T3608] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 219.216676][ T3596] usb 2-1: USB disconnect, device number 17 [ 219.405676][ T3766] usb 4-1: USB disconnect, device number 9 [ 219.417347][ T3608] usb 3-1: Using ep0 maxpacket: 8 [ 219.538448][ T3608] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 219.558648][ T3608] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 219.574679][ T3608] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.797971][ T3608] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.822396][ T3608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.832819][ T3608] usb 3-1: Product: syz [ 220.816165][ T6455] loop1: detected capacity change from 0 to 4096 [ 220.828606][ T3608] usb 3-1: Manufacturer: syz [ 220.833392][ T3608] usb 3-1: SerialNumber: syz [ 220.912416][ T6457] loop4: detected capacity change from 0 to 64 [ 221.147189][ T3608] usb 3-1: 0:2 : does not exist [ 221.205323][ T6465] netlink: 'syz.1.752': attribute type 10 has an invalid length. [ 221.236707][ T3608] usb 3-1: USB disconnect, device number 14 [ 221.265140][ T6465] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 221.676975][ T3596] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 222.007100][ T3596] usb 5-1: Using ep0 maxpacket: 32 [ 222.187308][ T3596] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 222.226899][ T3596] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 222.254305][ T26] audit: type=1326 audit(1719770732.783:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2375b99 code=0x7ffc0000 [ 222.288040][ T3596] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 222.307512][ T26] audit: type=1326 audit(1719770732.813:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2375b99 code=0x7ffc0000 [ 222.357400][ T3596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.614095][ T3596] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.803836][ T3596] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 222.967179][ T26] audit: type=1326 audit(1719770733.033:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 223.159449][ T3596] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 223.181133][ T26] audit: type=1326 audit(1719770733.033:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 223.210830][ T6493] loop1: detected capacity change from 0 to 64 [ 223.220016][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.230744][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.300037][ T3596] usb 5-1: config 0 descriptor?? [ 223.434848][ T6492] loop2: detected capacity change from 0 to 4096 [ 223.578857][ T3596] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 223.637925][ T6505] netlink: 'syz.3.767': attribute type 10 has an invalid length. [ 223.650748][ T6505] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 223.663656][ T3596] usb 5-1: USB disconnect, device number 8 [ 223.863299][ T3596] usblp0: removed [ 224.466924][ T3596] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 225.697190][ T3596] usb 5-1: Using ep0 maxpacket: 32 [ 225.757507][ T3596] usb 5-1: device descriptor read/all, error -71 [ 226.185511][ T26] audit: type=1326 audit(1719770736.753:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90e375b99 code=0x7ffc0000 [ 226.609423][ T26] audit: type=1326 audit(1719770736.803:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90e375b99 code=0x7ffc0000 [ 226.725804][ T26] audit: type=1326 audit(1719770736.873:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa90e375b99 code=0x7ffc0000 [ 226.813528][ T26] audit: type=1326 audit(1719770736.883:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90e375b99 code=0x7ffc0000 [ 226.895454][ T26] audit: type=1326 audit(1719770736.923:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90e375b99 code=0x7ffc0000 [ 226.962435][ T26] audit: type=1326 audit(1719770736.963:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa90e3745d0 code=0x7ffc0000 [ 227.762446][ T6566] can0: slcan on pty26. [ 228.300233][ T6561] can0 (unregistered): slcan off pty26. [ 228.567068][ T3766] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 228.837055][ T3766] usb 3-1: Using ep0 maxpacket: 32 [ 228.978438][ T3766] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.038770][ T3766] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.252148][ T3766] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.419522][ T3766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.492783][ T3766] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.529640][ T3766] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.543428][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 229.543443][ T26] audit: type=1326 audit(1719770740.113:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 229.592379][ T3766] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.615317][ T3766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.626992][ T26] audit: type=1326 audit(1719770740.113:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 229.648067][ T3766] usb 3-1: config 0 descriptor?? [ 229.721737][ T26] audit: type=1326 audit(1719770740.143:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 229.813373][ T26] audit: type=1326 audit(1719770740.143:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 229.936951][ T26] audit: type=1326 audit(1719770740.143:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 229.989698][ T3766] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.996750][ T26] audit: type=1326 audit(1719770740.153:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8fe7745d0 code=0x7ffc0000 [ 230.062271][ T3766] usb 3-1: USB disconnect, device number 15 [ 230.101763][ T3766] usblp0: removed [ 230.111845][ T26] audit: type=1326 audit(1719770740.153:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8fe7745d0 code=0x7ffc0000 [ 230.228065][ T26] audit: type=1326 audit(1719770740.153:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 230.316962][ T26] audit: type=1326 audit(1719770740.153:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 230.367034][ T26] audit: type=1326 audit(1719770740.153:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fc8fe775b99 code=0x7ffc0000 [ 230.626970][ T3766] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 230.900031][ T3766] usb 3-1: Using ep0 maxpacket: 32 [ 231.205359][ T3766] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.214671][ T3766] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.224327][ T3766] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.235012][ T3766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.255780][ T3766] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.321159][ T3766] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.354082][ T3766] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.414758][ T3766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.455009][ T3766] usb 3-1: config 0 descriptor?? [ 231.697096][ T3766] usb 3-1: can't set config #0, error -71 [ 231.706480][ T3766] usb 3-1: USB disconnect, device number 16 [ 232.057005][ T6634] program syz.1.798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.195404][ T6651] hfsplus: unable to find HFS+ superblock [ 234.203359][ T6667] Option '2Z[Lɵ{rj6eϊxQXeT'0.ȳc Lص X@[Ռ9RtHh>' to dns_resolver key: bad/missing value [ 235.076973][ T3766] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 235.349109][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 235.534523][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 235.534540][ T26] audit: type=1326 audit(1719770746.103:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e9b75b99 code=0x7ffc0000 [ 235.630363][ T26] audit: type=1326 audit(1719770746.103:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f76e9b75b99 code=0x7ffc0000 [ 235.657012][ T3766] usb 1-1: Using ep0 maxpacket: 32 [ 235.695129][ T26] audit: type=1326 audit(1719770746.103:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e9b75b99 code=0x7ffc0000 [ 235.810158][ T26] audit: type=1326 audit(1719770746.103:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e9b75b99 code=0x7ffc0000 [ 235.875661][ T26] audit: type=1326 audit(1719770746.103:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76e9b745d0 code=0x7ffc0000 [ 235.877134][ T3766] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 235.899829][ T26] audit: type=1326 audit(1719770746.103:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76e9b745d0 code=0x7ffc0000 [ 236.045789][ T6694] hfsplus: unable to find HFS+ superblock [ 236.141471][ T3766] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 236.252334][ T3766] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 236.458587][ T3766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.559578][ T3766] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.600776][ T3766] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 236.666751][ T3766] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 236.698526][ T26] audit: type=1326 audit(1719770746.113:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e9b75b99 code=0x7ffc0000 [ 236.763733][ T26] audit: type=1326 audit(1719770746.113:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f76e9b75b99 code=0x7ffc0000 [ 236.786440][ T3766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.796408][ T26] audit: type=1326 audit(1719770746.113:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e9b75b99 code=0x7ffc0000 [ 236.797786][ T3766] usb 1-1: config 0 descriptor?? [ 236.836499][ T26] audit: type=1326 audit(1719770746.113:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f76e9b75b99 code=0x7ffc0000 [ 237.162100][ T3766] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 237.217261][ T3766] usb 1-1: USB disconnect, device number 11 [ 237.262535][ T3766] usblp0: removed [ 237.867550][ T3766] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 237.996176][ T6725] Option '2Z[Lɵ{rj6eϊxQXeT'0.ȳc Lص X@[Ռ9RtHh>' to dns_resolver key: bad/missing value [ 238.877133][ T3766] usb 1-1: Using ep0 maxpacket: 32 [ 239.144811][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 239.709040][ T3766] usb 1-1: device descriptor read/all, error -71 [ 240.735464][ T6753] loop4: detected capacity change from 0 to 4096 [ 240.959492][ T3766] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 241.300923][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 241.400433][ T3766] usb 1-1: Using ep0 maxpacket: 32 [ 241.517276][ T3766] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 241.527626][ T3766] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 241.545595][ T3766] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 241.555347][ T3766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.565854][ T3596] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 241.575404][ T3766] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.585970][ T3766] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.819386][ T6773] Option '2Z[Lɵ{rj6eϊxQXeT'0.ȳc Lص X@[Ռ9RtHh>' to dns_resolver key: bad/missing value [ 242.321442][ T3766] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 242.330709][ T3766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.341588][ T3766] usb 1-1: config 0 descriptor?? [ 242.651125][ T3766] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 242.677693][ T3596] usb 5-1: Using ep0 maxpacket: 32 [ 242.683849][ T3766] usb 1-1: USB disconnect, device number 13 [ 242.692611][ T3766] usblp0: removed [ 243.517225][ T3596] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.544360][ T3596] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 243.723624][ T6793] loop2: detected capacity change from 0 to 4096 [ 243.744888][ T3596] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 243.754620][ T3596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.764484][ T3596] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.775328][ T3596] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.791043][ T3596] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 243.801109][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.475979][ T3596] usb 5-1: config 0 descriptor?? [ 244.502536][ T3596] usb 5-1: can't set config #0, error -71 [ 244.509602][ T3596] usb 5-1: USB disconnect, device number 11 [ 244.729275][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 244.919000][ T6804] hfsplus: unable to find HFS+ superblock [ 245.703959][ T6817] Option '2Z[Lɵ{rj6eϊxQXeT'0.ȳc Lص X@[Ռ9RtHh>' to dns_resolver key: bad/missing value [ 248.048158][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 248.403478][ T6855] loop3: detected capacity change from 0 to 4096 [ 249.998243][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 250.112382][ T3608] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 250.887880][ T6875] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 250.917016][ T3608] usb 4-1: Using ep0 maxpacket: 32 [ 251.147454][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 251.177409][ T3608] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 251.814389][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 251.844648][ T3608] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 251.855752][ T3608] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 251.867725][ T3608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.868596][ T6902] program syz.2.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.879047][ T3608] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 251.927182][ T3608] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 251.944048][ T3608] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 251.963212][ T3608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.089966][ T3608] usb 4-1: config 0 descriptor?? [ 252.423141][ T3608] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 252.468488][ T3608] usb 4-1: USB disconnect, device number 10 [ 252.477703][ T6909] loop4: detected capacity change from 0 to 4096 [ 252.506244][ T3608] usblp0: removed [ 252.976937][ T3608] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 253.230356][ T3608] usb 4-1: Using ep0 maxpacket: 32 [ 253.378560][ T3608] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 253.395721][ T3608] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 253.431452][ T3608] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 253.461242][ T3608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.484782][ T3608] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.495938][ T3608] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 253.522356][ T3608] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 253.541925][ T3608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.566437][ T3608] usb 4-1: config 0 descriptor?? [ 253.709079][ T3608] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 253.747819][ T3608] usb 4-1: USB disconnect, device number 11 [ 253.787975][ T3608] usblp0: removed [ 254.283720][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 254.855973][ T6933] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 254.944513][ T6942] loop2: detected capacity change from 0 to 4096 [ 255.648853][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655871][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.766563][ T6990] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 256.792567][ T3578] Bluetooth: hci5: Frame reassembly failed (-84) [ 256.809194][ T6990] ufs: You didn't specify the type of your ufs filesystem [ 256.809194][ T6990] [ 256.809194][ T6990] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 256.809194][ T6990] [ 256.809194][ T6990] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 256.841405][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.850734][ T6990] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 257.656178][ T6998] loop3: detected capacity change from 0 to 4096 [ 258.849021][ T3564] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 258.857023][ T3563] Bluetooth: hci5: command 0x1003 tx timeout [ 259.277761][ T7013] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.839000][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 259.839026][ T26] audit: type=1326 audit(1719770770.413:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76e9b75b99 code=0x0 [ 261.102998][ T7042] loop3: detected capacity change from 0 to 4096 [ 261.651901][ T7051] loop2: detected capacity change from 0 to 1024 [ 262.682577][ T7051] EXT4-fs: Ignoring removed orlov option [ 262.693967][ T7051] EXT4-fs (loop2): Test dummy encryption mode enabled [ 262.740698][ T7051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 262.910550][ T3608] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 263.055251][ T5993] EXT4-fs (loop2): unmounting filesystem. [ 263.276963][ T3608] usb 4-1: Using ep0 maxpacket: 16 [ 263.407361][ T3608] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.446082][ T3608] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.772220][ T3608] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 263.803499][ T3608] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.432457][ T3608] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 264.442482][ T3608] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 264.527509][ T3608] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.582813][ T3608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 264.629239][ T3608] usb 4-1: SerialNumber: syz [ 264.728214][ T3608] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 264.745505][ T3608] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 264.892259][ T7092] loop2: detected capacity change from 0 to 4096 [ 264.931776][ T3608] usb 4-1: USB disconnect, device number 12 [ 265.572048][ T7102] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 265.585213][ T7102] ufs: You didn't specify the type of your ufs filesystem [ 265.585213][ T7102] [ 265.585213][ T7102] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 265.585213][ T7102] [ 265.585213][ T7102] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 265.616274][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.623385][ T7102] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 265.650762][ T3578] Bluetooth: hci5: Frame reassembly failed (-84) [ 265.815893][ T7110] loop3: detected capacity change from 0 to 2048 [ 265.880465][ T7110] Alternate GPT is invalid, using primary GPT. [ 265.907237][ T7110] loop3: p1 p2 p3 [ 265.931153][ T7097] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 265.942934][ T7110] overlayfs: './file1' not a directory [ 266.307042][ T3599] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 266.567140][ T3599] usb 4-1: Using ep0 maxpacket: 32 [ 266.707344][ T3599] usb 4-1: config 0 has an invalid interface number: 155 but max is 0 [ 266.722794][ T3599] usb 4-1: config 0 has no interface number 0 [ 266.742757][ T3599] usb 4-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.762538][ T3599] usb 4-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 266.947366][ T3599] usb 4-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 266.965546][ T3599] usb 4-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 266.977077][ T3599] usb 4-1: Product: syz [ 266.981434][ T3599] usb 4-1: Manufacturer: syz [ 266.986506][ T3599] usb 4-1: SerialNumber: syz [ 267.149209][ T3599] usb 4-1: config 0 descriptor?? [ 267.268437][ T3599] ftdi_sio 4-1:0.155: FTDI USB Serial Device converter detected [ 267.433682][ T3599] ftdi_sio ttyUSB0: unknown device type: 0xc561 [ 267.674563][ T3599] usb 4-1: USB disconnect, device number 13 [ 267.680945][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 267.725420][ T3599] ftdi_sio 4-1:0.155: device disconnected [ 268.542833][ T7147] loop2: detected capacity change from 0 to 2048 [ 268.638341][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 268.914287][ T7160] loop1: detected capacity change from 0 to 512 [ 268.945003][ T7160] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 268.996055][ T7160] EXT4-fs (loop1): group descriptors corrupted! [ 269.103328][ T3563] Bluetooth: hci1: unexpected cc 0x100c length: 11 > 3 [ 270.429866][ T7184] loop1: detected capacity change from 0 to 2048 [ 270.493954][ T7184] Alternate GPT is invalid, using primary GPT. [ 270.510028][ T7184] loop1: p1 p2 p3 [ 270.585155][ T7184] overlayfs: './file1' not a directory [ 271.089061][ T33] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.107540][ T33] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.268448][ T7191] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 271.307528][ T7191] ufs: You didn't specify the type of your ufs filesystem [ 271.307528][ T7191] [ 271.307528][ T7191] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 271.307528][ T7191] [ 271.307528][ T7191] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 271.348970][ T7191] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.522037][ T3596] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 271.680460][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 271.767014][ T3596] usb 2-1: Using ep0 maxpacket: 32 [ 271.855615][ T7207] Mount JFS Failure: -22 [ 271.867086][ T7207] jfs_mount failed w/return code = -22 [ 272.067207][ T3596] usb 2-1: config 0 has an invalid interface number: 155 but max is 0 [ 272.090022][ T3596] usb 2-1: config 0 has no interface number 0 [ 272.099939][ T3596] usb 2-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 272.195935][ T7212] loop4: detected capacity change from 0 to 1024 [ 272.212384][ T7212] EXT4-fs: Ignoring removed orlov option [ 272.242530][ T7212] EXT4-fs (loop4): Test dummy encryption mode enabled [ 272.406869][ T7212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 272.536498][ T3596] usb 2-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 272.985560][ T5457] EXT4-fs (loop4): unmounting filesystem. [ 273.047170][ T3596] usb 2-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 273.056532][ T3596] usb 2-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 273.087205][ T3564] Bluetooth: hci5: command 0x1003 tx timeout [ 273.087240][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 273.159454][ T3596] usb 2-1: Product: syz [ 273.166325][ T26] audit: type=1326 audit(1719770783.733:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.3.968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128cb75b99 code=0x0 [ 273.170235][ T3563] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 273.197242][ T3563] Bluetooth: hci1: Injecting HCI hardware error event [ 273.206959][ T3565] Bluetooth: hci1: hardware error 0x00 [ 273.252507][ T3596] usb 2-1: Manufacturer: syz [ 273.282187][ T3596] usb 2-1: SerialNumber: syz [ 273.386610][ T3596] usb 2-1: config 0 descriptor?? [ 273.457994][ T3596] usb 2-1: can't set config #0, error -71 [ 273.533029][ T3596] usb 2-1: USB disconnect, device number 18 [ 274.187832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.196890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.205377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.213789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.222369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.231089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 274.239415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 274.996264][ T7243] loop1: detected capacity change from 0 to 2048 [ 275.567653][ T3565] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 275.713226][ T7252] loop2: detected capacity change from 0 to 16 [ 276.518573][ T7252] erofs: (device loop2): mounted with root inode @ nid 36. [ 276.855308][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 277.922755][ T7275] loop4: detected capacity change from 0 to 1024 [ 277.936410][ T7275] EXT4-fs: Ignoring removed orlov option [ 278.193109][ T7275] EXT4-fs (loop4): Test dummy encryption mode enabled [ 278.843992][ T7275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 279.930773][ T5457] EXT4-fs (loop4): unmounting filesystem. [ 280.629729][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 280.756949][ T7306] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 280.777217][ T7306] ufs: You didn't specify the type of your ufs filesystem [ 280.777217][ T7306] [ 280.777217][ T7306] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 280.777217][ T7306] [ 280.777217][ T7306] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 280.807951][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.817213][ T7306] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 280.867727][ T7309] loop1: detected capacity change from 0 to 16 [ 281.023508][ T7309] erofs: (device loop1): mounted with root inode @ nid 36. [ 281.114460][ T3682] Bluetooth: hci5: Frame reassembly failed (-84) [ 281.136782][ T3682] Bluetooth: hci5: Frame reassembly failed (-84) [ 281.971763][ T7318] netlink: 2 bytes leftover after parsing attributes in process `syz.1.992'. [ 282.038651][ T7318] loop1: detected capacity change from 0 to 1024 [ 282.173733][ T7318] input: syz0 as /devices/virtual/input/input6 [ 282.735499][ T7312] loop4: detected capacity change from 0 to 2048 [ 282.926988][ T3565] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 285.209525][ T7344] loop2: detected capacity change from 0 to 1024 [ 285.223481][ T7344] EXT4-fs: Ignoring removed orlov option [ 285.267148][ T7344] EXT4-fs (loop2): Test dummy encryption mode enabled [ 285.464964][ T7344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 285.977635][ T5993] EXT4-fs (loop2): unmounting filesystem. [ 286.123962][ T26] audit: type=1326 audit(1719770796.693:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.4.1002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90e375b99 code=0x0 [ 286.150174][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 286.635183][ T7366] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1004'. [ 286.697955][ T7366] loop0: detected capacity change from 0 to 1024 [ 286.712957][ T3563] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 286.790251][ T7366] input: syz0 as /devices/virtual/input/input7 [ 286.806434][ T3563] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 288.527013][ T3565] Bluetooth: hci4: command 0x0406 tx timeout [ 288.539613][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 288.766165][ T7397] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 288.967607][ T7405] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 288.975443][ T33] Bluetooth: hci5: Frame reassembly failed (-84) [ 288.981086][ T7405] ufs: You didn't specify the type of your ufs filesystem [ 288.981086][ T7405] [ 288.981086][ T7405] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 288.981086][ T7405] [ 288.981086][ T7405] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 289.012789][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.019665][ T7405] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 290.406592][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 290.667568][ T7437] 9pnet_virtio: no channels available for device syz [ 290.693371][ T7436] Bluetooth: MGMT ver 1.22 [ 291.006995][ T3565] Bluetooth: hci5: command 0x1003 tx timeout [ 291.007080][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 291.824476][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 294.162786][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 294.631439][ T7512] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 294.646583][ T3682] Bluetooth: hci5: Frame reassembly failed (-84) [ 294.670495][ T7512] ufs: You didn't specify the type of your ufs filesystem [ 294.670495][ T7512] [ 294.670495][ T7512] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 294.670495][ T7512] [ 294.670495][ T7512] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 294.701928][ T7512] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 296.697261][ T3563] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.265720][ T7569] netlink: 'syz.0.1072': attribute type 10 has an invalid length. [ 299.179740][ T7592] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 300.310786][ T7614] netlink: 'syz.0.1086': attribute type 10 has an invalid length. [ 300.557265][ T7624] input: syz0 as /devices/virtual/input/input8 [ 300.575946][ T26] audit: type=1326 audit(1719770811.143:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.2.1087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76e9b75b99 code=0x0 [ 302.974377][ T7673] syz.4.1106 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 303.504249][ T26] audit: type=1326 audit(1719770814.073:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.0.1109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x0 [ 304.183892][ T26] audit: type=1800 audit(1719770814.753:113): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1113" name="bus" dev="sda1" ino=2000 res=0 errno=0 [ 304.397036][ T26] audit: type=1326 audit(1719770814.943:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.1.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e2375b99 code=0x0 [ 305.636088][ T7725] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 305.646745][ T7725] ufs: You didn't specify the type of your ufs filesystem [ 305.646745][ T7725] [ 305.646745][ T7725] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 305.646745][ T7725] [ 305.646745][ T7725] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 305.677978][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.685274][ T7725] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 305.705245][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 306.019201][ T26] audit: type=1326 audit(1719770816.593:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.0.1126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe775b99 code=0x0 [ 306.041998][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.435336][ T3563] Bluetooth: hci5: command 0x1003 tx timeout [ 308.446928][ T3564] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 309.757718][ T26] audit: type=1326 audit(1719770820.333:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.4.1139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90e375b99 code=0x0 [ 311.778942][ T7797] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 311.791370][ T7797] ufs: You didn't specify the type of your ufs filesystem [ 311.791370][ T7797] [ 311.791370][ T7797] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 311.791370][ T7797] [ 311.791370][ T7797] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 311.822944][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.832264][ T7797] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 311.923147][ T3682] Bluetooth: hci5: Frame reassembly failed (-84) [ 311.940168][ T3682] Bluetooth: hci5: Frame reassembly failed (-84) [ 312.326954][ T7804] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 313.588606][ T22] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 313.886940][ T3564] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 314.058693][ T3563] Bluetooth: hci3: command 0x0406 tx timeout [ 314.867926][ T22] usb 3-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 314.893284][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.048782][ T22] usb 3-1: config 0 descriptor?? [ 315.457533][ T22] usb 3-1: selecting invalid altsetting 3 [ 315.581268][ T22] comedi comedi0: could not set alternate setting 3 in high speed [ 315.637606][ T22] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 315.650145][ T22] usbduxsigma: probe of 3-1:0.0 failed with error -22 [ 315.702198][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 315.868929][ T7857] usb usb8: usbfs: process 7857 (syz.3.1165) did not claim interface 0 before use [ 316.136698][ T7866] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 316.146986][ T6301] Bluetooth: hci5: Frame reassembly failed (-84) [ 316.154669][ T7866] ufs: You didn't specify the type of your ufs filesystem [ 316.154669][ T7866] [ 316.154669][ T7866] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 316.154669][ T7866] [ 316.154669][ T7866] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 316.186489][ T7866] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 316.370456][ T3599] usb 3-1: USB disconnect, device number 17 [ 316.614718][ T7856] loop4: detected capacity change from 0 to 32768 [ 316.845584][ T7856] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 316.857451][ T7856] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 316.865903][ T7856] CPU: 0 PID: 7856 Comm: syz.4.1166 Not tainted 6.1.96-syzkaller #0 [ 316.874355][ T7856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 316.884699][ T7856] RIP: 0010:dtInsertEntry+0xd08/0x1770 [ 316.890372][ T7856] Code: 83 e6 02 31 ff e8 98 a1 83 fe 83 e3 02 75 3a e8 2e 9f 83 fe 48 8b 9c 24 a8 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 4c 89 f2 <42> 0f b6 04 30 84 c0 74 3e 89 d9 80 e1 07 38 c1 7c 35 48 89 df e8 [ 316.910187][ T7856] RSP: 0018:ffffc90004b67060 EFLAGS: 00010202 [ 316.916262][ T7856] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000040000 [ 316.924257][ T7856] RDX: dffffc0000000000 RSI: 0000000000002c01 RDI: 0000000000002c02 [ 316.932241][ T7856] RBP: ffffc90004b67210 R08: ffffffff8306f498 R09: ffffed100a9c55d4 [ 316.940225][ T7856] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888054e2b130 [ 316.948311][ T7856] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000002 [ 316.956472][ T7856] FS: 00007fa90e1ff6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 316.965429][ T7856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.972028][ T7856] CR2: 0000000020001000 CR3: 000000007ecd5000 CR4: 00000000003506f0 [ 316.980014][ T7856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 316.988093][ T7856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 316.996174][ T7856] Call Trace: [ 316.999638][ T7856] [ 317.002669][ T7856] ? __die_body+0x5e/0xa0 [ 317.007014][ T7856] ? die_addr+0x95/0xc0 [ 317.011309][ T7856] ? exc_general_protection+0x3ae/0x590 [ 317.016894][ T7856] ? asm_exc_general_protection+0x22/0x30 [ 317.022759][ T7856] ? dtInsertEntry+0xce8/0x1770 [ 317.027639][ T7856] ? dtInsertEntry+0xd08/0x1770 [ 317.032510][ T7856] ? kernel_text_address+0x9f/0xd0 [ 317.037661][ T7856] ? dtInsert+0x6b00/0x6b00 [ 317.042326][ T7856] ? rcu_is_watching+0x11/0xb0 [ 317.047216][ T7856] ? __mark_inode_dirty+0x430/0xf80 [ 317.052500][ T7856] dtInsert+0xbed/0x6b00 [ 317.056877][ T7856] ? kasan_save_free_info+0x27/0x40 [ 317.062123][ T7856] ? ____kasan_slab_free+0xd6/0x120 [ 317.067345][ T7856] ? do_syscall_64+0x3b/0xb0 [ 317.071990][ T7856] ? __lock_acquire+0x125b/0x1f80 [ 317.077122][ T7856] ? UniStrupr+0x2c0/0x2c0 [ 317.081651][ T7856] ? txLock+0x2b1/0x21a0 [ 317.086094][ T7856] ? __lock_acquire+0x1f80/0x1f80 [ 317.091274][ T7856] ? do_raw_spin_lock+0x14a/0x370 [ 317.096511][ T7856] ? do_raw_spin_unlock+0x137/0x8a0 [ 317.101739][ T7856] ? txLock+0x1256/0x21a0 [ 317.106204][ T7856] jfs_create+0x7b2/0xbb0 [ 317.110765][ T7856] ? jfs_lookup+0x400/0x400 [ 317.115303][ T7856] ? jfs_get_parent+0xa0/0xa0 [ 317.119999][ T7856] ? make_kgid+0x6f0/0x6f0 [ 317.124429][ T7856] ? generic_permission+0x21c/0x4f0 [ 317.129735][ T7856] ? inode_permission+0xf7/0x450 [ 317.134699][ T7856] ? bpf_lsm_inode_create+0x5/0x10 [ 317.139859][ T7856] ? security_inode_create+0xb4/0x100 [ 317.145248][ T7856] ? jfs_lookup+0x400/0x400 [ 317.149849][ T7856] path_openat+0x12f1/0x2e60 [ 317.154803][ T7856] ? do_filp_open+0x480/0x480 [ 317.159513][ T7856] do_filp_open+0x230/0x480 [ 317.164033][ T7856] ? vfs_tmpfile+0x4a0/0x4a0 [ 317.168659][ T7856] ? _raw_spin_unlock+0x24/0x40 [ 317.173521][ T7856] ? alloc_fd+0x59c/0x640 [ 317.177878][ T7856] do_sys_openat2+0x13b/0x500 [ 317.182675][ T7856] ? do_sys_open+0x220/0x220 [ 317.187444][ T7856] ? xfd_validate_state+0x6a/0x140 [ 317.192601][ T7856] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 317.198548][ T7856] __x64_sys_openat+0x243/0x290 [ 317.203410][ T7856] ? __ia32_sys_open+0x270/0x270 [ 317.208621][ T7856] ? syscall_enter_from_user_mode+0x2e/0x230 [ 317.214598][ T7856] ? lockdep_hardirqs_on+0x94/0x130 [ 317.219823][ T7856] ? syscall_enter_from_user_mode+0x2e/0x230 [ 317.225849][ T7856] do_syscall_64+0x3b/0xb0 [ 317.230315][ T7856] ? clear_bhb_loop+0x45/0xa0 [ 317.235027][ T7856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.241125][ T7856] RIP: 0033:0x7fa90e375b99 [ 317.245668][ T7856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.265507][ T7856] RSP: 002b:00007fa90e1ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 317.274050][ T7856] RAX: ffffffffffffffda RBX: 00007fa90e503fa0 RCX: 00007fa90e375b99 [ 317.282067][ T7856] RDX: 000000000000275a RSI: 0000000020000140 RDI: ffffffffffffff9c [ 317.290056][ T7856] RBP: 00007fa90e3f677e R08: 0000000000000000 R09: 0000000000000000 [ 317.298073][ T7856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.306060][ T7856] R13: 000000000000000b R14: 00007fa90e503fa0 R15: 00007ffda749a6f8 [ 317.314126][ T7856] [ 317.317167][ T7856] Modules linked in: [ 317.323727][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.332659][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.358283][ T7856] ---[ end trace 0000000000000000 ]--- [ 317.363810][ T7856] RIP: 0010:dtInsertEntry+0xd08/0x1770 [ 317.377036][ T7856] Code: 83 e6 02 31 ff e8 98 a1 83 fe 83 e3 02 75 3a e8 2e 9f 83 fe 48 8b 9c 24 a8 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 4c 89 f2 <42> 0f b6 04 30 84 c0 74 3e 89 d9 80 e1 07 38 c1 7c 35 48 89 df e8 [ 317.547034][ T7856] RSP: 0018:ffffc90004b67060 EFLAGS: 00010202 [ 317.560610][ T7856] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000040000 [ 317.610565][ T7856] RDX: dffffc0000000000 RSI: 0000000000002c01 RDI: 0000000000002c02 [ 317.620408][ T7856] RBP: ffffc90004b67210 R08: ffffffff8306f498 R09: ffffed100a9c55d4 [ 317.630150][ T7856] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888054e2b130 [ 317.651072][ T7856] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000002 [ 317.671423][ T7856] FS: 00007fa90e1ff6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 317.685815][ T7856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.694253][ T7856] CR2: 00007f76e9cd1ef8 CR3: 000000007ecd5000 CR4: 00000000003506f0 [ 317.704245][ T7856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.714632][ T7856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.723752][ T7856] Kernel panic - not syncing: Fatal exception [ 317.730220][ T7856] Kernel Offset: disabled [ 317.734550][ T7856] Rebooting in 86400 seconds..