last executing test programs: 18.334336392s ago: executing program 3 (id=675): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x40046f41, 0x1000000000000) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001e80)={0xa, @pix_mp={0x0, 0x0, 0xb5315241, 0x0, 0x0, [{0x0, 0xfffffffc}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {0x3}], 0x4}}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) 16.337238845s ago: executing program 3 (id=677): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.964625911s ago: executing program 3 (id=682): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000005050505050500000000000000000000000000100e805020202020202010003010d"], 0x31) syz_emit_ethernet(0x183, &(0x7f0000000780)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000400", 0x14d, 0x3a, 0x1, @private0, @local, {[@fragment={0x0, 0x0, 0x3, 0x1, 0x0, 0x8, 0x67}], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a9d528", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [@routing], "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"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x32) syz_80211_inject_frame(0x0, 0x0, 0x4e7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400), 0x8) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/122, 0x7a}], 0x1, 0x0, 0x0) 12.485518099s ago: executing program 0 (id=686): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r1, 0x29, 0x24, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000000)="0048000000ff0000a15089a3e56118535ec8", 0x12) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='\x00\b\x00\x00\xf9', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r4, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f046}) write(r4, &(0x7f0000000600)="1c00000016009b8a140000003b9b301fd6df191cdc826569f2a3000000006752a10000005bc0ebbfff0768a84fe46e6e0b793da68cf4489fcfde557647cf24e362623aa9b0fa73485894224ac5c4c8fb78c1711416fb0775d3c3a977314d970dfc6623a48633a458cdebc4aa9ef8446c6f470487313afb16aaebb592cd52fc511b816a2ca68257731145687e6b537cab482ae646b28521a9e8460470a2ba2f68808fcbd3f2575eae548c5c4183155a40708722ed655d37acf9133c090f4a5dbfd470d65cda2a191945a6c3584cea4e8baeb0c6a241b7663a74b1b6e55c5dcd07ba2bcea3e83489cb41e000483298fdc1d1c0ce89d8a3aea4905aa875c8b614e2c403ce9c439e8057423e3c00"/278, 0x116) 11.967783272s ago: executing program 3 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000068000100000000000000000a000000000000000400040004000b00436274a344f77b1139d0529ff254a303293623ef6fe19604337a0dcb73c9ed682df22db83e96abdd54a3fba33c2487cf"], 0x20}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 10.307332598s ago: executing program 3 (id=690): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c81040003c0001000a0702000002050932000400ffff040004090000070400de0c00040610090108004000000202d9ea050101010200010202d68c0142886e4db9b563d741241f8ac465672a1f9383f076b610b7657fa33d370013d56d5fb4a2b9d00439ce597e1f1c0834f7520753e3b6f76ac277b4fcd099dd789222776b3f45dcde04d83adc03d0b80dfd46ed2de50a61d01b000000000000000000"], 0x45) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "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"}, 0x1b3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r1, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6b38337b, 0x4, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x1, 0x8, 0x7ff], 0x100000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f000004ca80)=""/102388, 0x18ff4}], 0x1, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0xdf1}}}}, 0x11) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 9.081682718s ago: executing program 1 (id=692): syz_open_dev$usbfs(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) syz_clone(0x81201000, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0) 8.908645442s ago: executing program 4 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) unshare(0x2a020400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x800443d3, 0x20000002) 7.783051554s ago: executing program 4 (id=694): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0xf, 0x0, [@remote, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.528977994s ago: executing program 1 (id=695): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c9101800140001000a0002000200119f02000600100e0400faff03001f1c850912ca31368797492242a9"], 0x1d) 7.206091761s ago: executing program 1 (id=696): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") ptrace$setregs(0xd, r0, 0x0, 0x0) 6.913698525s ago: executing program 0 (id=698): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xb, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.708540322s ago: executing program 1 (id=699): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open(0x0, 0x141042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r3, &(0x7f0000000080), 0xffffff1c) close(0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(r4, 0x0, 0x0, 0x0) 6.560980323s ago: executing program 4 (id=701): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.49651534s ago: executing program 2 (id=702): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@private=0xa010101}, {}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@rand_addr=0x64010102]}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x2}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x2}]}]}}}}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r3, &(0x7f0000000080), 0xffffff1c) close(0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r4) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) syz_io_uring_setup(0x4b9c, &(0x7f0000000300)={0x0, 0xc1cf, 0x13910, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f0000002540)) 4.958588734s ago: executing program 4 (id=703): write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x3, &(0x7f0000000740)='|2\n'}}}}], 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a00)={[], 0x0, 0x78469555c77fef7b}) socket(0x0, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)="10000000000000002900000043000000", 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x1001) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.727301923s ago: executing program 0 (id=704): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb) listxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x40046f41, 0x1000000000000) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001e80)={0xa, @pix_mp={0x0, 0x0, 0xb5315241, 0x0, 0x0, [{0x0, 0xfffffffc}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {0x3}], 0x4}}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) 4.443627247s ago: executing program 3 (id=705): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c81040003c0001000a0702000002050932000400ffff040004090000070400de0c00040610090108004000000202d9ea050101010200010202d68c0142886e4db9b563d741241f8ac465672a1f9383f076b610b7657fa33d370013d56d5fb4a2b9d00439ce597e1f1c0834f7520753e3b6f76ac277b4fcd099dd789222776b3f45dcde04d83adc03d0b80dfd46ed2de50a61d01b000000000000000000"], 0x45) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "6a1aaa5d8ddb637af3598729c33c9eb05896c0067df1aa13702d542464be29e1c1b1fea0c94cc4cb08909377b40c54217601eda2077e38b3dc306c796a9efa9de1463fcd7aac0355ddfc684d32b5ba3d3d1684982ae5f2753d131c2f2aa883915bae2f4870a013f28fe11550ea1b20dfd325891d3e00ffae8c7825201446893311e6de47463bb629997e1afa45d462e4d7700ea8409bfe24555227b9f0ae1e33a708985a3ff32dedc4edeb6161b1e332c7c77d6c21cc3c9ed7921e57521d0000000000000000000000fc89e4410efabde18c50911e812ececec957054fa7ff506971f6432ea8f7f16cb4583a0702b8005b22324cb5f6df6c9ab3a053c3ae9c93d07a13bf6735d436c6e2fc74fca8602feabe25910050134fd3da32be6eab11146839a84e012a6a8726778c383598de7187957f1193d483749fb2f8866eb0eeded046b5eb83123aacd4f5b7d8c1df6d3375945c4405518d26eee22a8fdd6e318a5a9f603c52b13e09374957663fa0e4d7a8a80ddcc956004b478da55211e968fccf1ff15c7a899a319a9ca7f497f9d52528a131ef1a707c87ce64ebe7b6865ff4f09b9c2003ca004b"}, 0x1b3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r1, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6b38337b, 0x4, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x1, 0x8, 0x7ff], 0x100000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f000004ca80)=""/102388, 0x18ff4}], 0x1, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0xdf1}}}}, 0x11) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 4.155197441s ago: executing program 2 (id=706): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c9101800140001000a0002000200119f02000600100e0400faff03001f1c850912ca31368797492242a93adff2232079b8"], 0x1d) 3.91242412s ago: executing program 2 (id=707): syz_open_dev$usbfs(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) syz_clone(0x81201000, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0) 3.506548943s ago: executing program 2 (id=708): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.899192813s ago: executing program 2 (id=709): socket$inet(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 2.712539348s ago: executing program 1 (id=710): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002540)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xffffffbc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x38, r3, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) socket(0x0, 0x3, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) r6 = dup(r5) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg$unix(r6, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) 2.624537786s ago: executing program 0 (id=711): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.427374571s ago: executing program 4 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) 1.409411375s ago: executing program 4 (id=713): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.280488475s ago: executing program 1 (id=714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 1.225557109s ago: executing program 2 (id=715): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xb, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.159586545s ago: executing program 0 (id=716): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@private=0xa010101}, {}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@rand_addr=0x64010102]}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x2}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x2}]}]}}}}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r3, &(0x7f0000000080), 0xffffff1c) close(0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r4) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) syz_io_uring_setup(0x4b9c, &(0x7f0000000300)={0x0, 0xc1cf, 0x13910, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f0000002540)) 0s ago: executing program 0 (id=717): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0) syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) fanotify_init(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.971216][ T4071] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 108.974758][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.993856][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.037300][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.086501][ T3599] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.196250][ T4071] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 109.354762][ T3599] usb 4-1: Using ep0 maxpacket: 16 [ 109.373909][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.404416][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.459353][ T22] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 109.495539][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.515954][ T22] usb 5-1: config 0 descriptor?? [ 109.533877][ T3599] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.649167][ T3599] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.659544][ T4073] loop1: detected capacity change from 0 to 40427 [ 109.697060][ T4073] F2FS-fs (loop1): Invalid uid value -1 [ 109.739513][ T3599] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.784110][ T3599] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.942665][ T3556] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 110.059532][ T3599] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.079240][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.146931][ T3599] usb 4-1: Product: syz [ 110.151162][ T3599] usb 4-1: Manufacturer: syz [ 110.188500][ T3599] usb 4-1: SerialNumber: syz [ 110.363649][ T4099] loop0: detected capacity change from 0 to 128 [ 110.373406][ T4083] binder: 4082:4083 ioctl c0306201 20000580 returned -14 [ 110.404105][ T4099] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 110.434869][ T3599] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 110.443987][ T3599] cdc_ncm 4-1:1.0: bind() failure [ 110.638306][ T3599] usb 4-1: USB disconnect, device number 7 [ 111.423873][ T22] usb 5-1: string descriptor 0 read error: -71 [ 111.464860][ T22] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 111.568904][ T4109] netlink: 'syz.2.109': attribute type 11 has an invalid length. [ 111.577437][ T4109] netlink: 'syz.2.109': attribute type 11 has an invalid length. [ 111.585327][ T4109] netlink: 8520 bytes leftover after parsing attributes in process `syz.2.109'. [ 111.990867][ T22] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 112.029050][ T22] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 112.067873][ T22] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 112.152990][ T22] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 112.211770][ T22] usb 5-1: USB disconnect, device number 2 [ 112.493694][ T3599] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.903980][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.927425][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.967536][ T3599] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.998965][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.034578][ T3599] usb 4-1: config 0 descriptor?? [ 113.441288][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 113.495589][ T4115] binder: 4114:4115 ioctl c0306201 20000580 returned -14 [ 114.029450][ T4155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.123430][ T4154] loop1: detected capacity change from 0 to 128 [ 114.764061][ T3599] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 114.853198][ T3599] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 114.862628][ T4155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.881088][ T3599] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 114.930345][ T3599] usb 4-1: USB disconnect, device number 8 [ 115.012655][ T4164] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 115.022215][ T4164] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 115.030117][ T4164] netlink: 8520 bytes leftover after parsing attributes in process `syz.1.124'. [ 116.051645][ T4170] loop2: detected capacity change from 0 to 128 [ 116.096788][ T4170] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 116.625345][ T4167] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 116.668668][ T4167] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 116.769978][ T4167] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 116.822872][ T4167] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 116.878965][ T3551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.903841][ T3551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.926811][ T3551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.938501][ T3551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.946310][ T3551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 116.954217][ T3551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.158730][ T4199] loop2: detected capacity change from 0 to 128 [ 117.328638][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 117.366609][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 117.769962][ T4207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 118.306891][ T4216] loop4: detected capacity change from 0 to 128 [ 118.450526][ T4216] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 119.013748][ T3551] Bluetooth: hci5: command tx timeout [ 119.129862][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 119.539266][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.616428][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.644887][ T4188] device bridge_slave_0 entered promiscuous mode [ 119.689329][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.715763][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.724011][ T3565] Bluetooth: Unexpected continuation frame (len 64) [ 119.781420][ T4188] device bridge_slave_1 entered promiscuous mode [ 120.040303][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.112822][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.414390][ T4188] team0: Port device team_slave_0 added [ 120.436654][ T4188] team0: Port device team_slave_1 added [ 120.559275][ T4242] loop4: detected capacity change from 0 to 128 [ 120.617952][ T4242] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 120.738894][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.791082][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.793951][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.904979][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 121.094347][ T3565] Bluetooth: hci5: command tx timeout [ 121.184323][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.245034][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.273964][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.280643][ T14] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 121.292139][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.350408][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.408890][ T14] usb 3-1: config 0 descriptor?? [ 121.452056][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.736824][ T4188] device hsr_slave_0 entered promiscuous mode [ 121.738965][ T3565] Bluetooth: hci1: command tx timeout [ 121.793943][ T4188] device hsr_slave_1 entered promiscuous mode [ 121.815275][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.826870][ T4188] Cannot create hsr debugfs directory [ 121.940576][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.061489][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.123905][ T14] video4linux radio32: keene_cmd_set failed (-71) [ 122.130632][ T14] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 122.160340][ T14] usb 3-1: USB disconnect, device number 3 [ 122.469711][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.685256][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.173706][ T3565] Bluetooth: hci5: command tx timeout [ 123.319850][ T4264] loop2: detected capacity change from 0 to 128 [ 123.411136][ T4264] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 124.636205][ T4279] loop3: detected capacity change from 0 to 128 [ 124.813357][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.850658][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.880197][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.953191][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.253725][ T3565] Bluetooth: hci5: command tx timeout [ 125.283243][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.487408][ T4279] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 125.628496][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.660347][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.685465][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.742280][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.765847][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.791639][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.798984][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.022829][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.039798][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.086634][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.135329][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.142475][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.218819][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.249416][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.299861][ T11] device hsr_slave_0 left promiscuous mode [ 126.400158][ T11] device hsr_slave_1 left promiscuous mode [ 126.468988][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.481235][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.592075][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.676123][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.831355][ T11] device bridge_slave_1 left promiscuous mode [ 126.867116][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.199640][ T11] device bridge_slave_0 left promiscuous mode [ 127.249889][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.649834][ T11] device veth1_macvtap left promiscuous mode [ 127.698508][ T11] device veth0_macvtap left promiscuous mode [ 127.744989][ T11] device veth1_vlan left promiscuous mode [ 127.750878][ T11] device veth0_vlan left promiscuous mode [ 128.902129][ T4315] loop3: detected capacity change from 0 to 4096 [ 128.948344][ T4315] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 129.074109][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.083906][ T3593] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.085069][ T11] team0 (unregistering): Port device team_slave_1 removed [ 129.101433][ T4315] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 129.201586][ T11] team0 (unregistering): Port device team_slave_0 removed [ 129.281159][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.317367][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 129.400547][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.467579][ T3593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.480357][ T3593] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 129.490882][ T3593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.519554][ T3593] usb 3-1: config 0 descriptor?? [ 129.525880][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.627455][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.648270][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.667853][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.882235][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.901769][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.920041][ T22] usb 5-1: Product: syz [ 129.924605][ T22] usb 5-1: Manufacturer: syz [ 129.930249][ T22] usb 5-1: SerialNumber: syz [ 130.002756][ T22] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 130.020702][ T22] cdc_ncm 5-1:1.0: bind() failure [ 130.233795][ T3593] video4linux radio32: keene_cmd_set failed (-71) [ 130.245498][ T3593] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 130.271340][ T3593] usb 3-1: USB disconnect, device number 4 [ 130.286568][ T3595] usb 5-1: USB disconnect, device number 3 [ 130.421096][ T11] bond0 (unregistering): Released all slaves [ 130.571505][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.588171][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.597726][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.607903][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.618267][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.628394][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.637475][ T4309] netlink: 96 bytes leftover after parsing attributes in process `syz.1.158'. [ 130.679347][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.701491][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.720748][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.734980][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.743520][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.018304][ T3559] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 131.467349][ T4350] loop3: detected capacity change from 0 to 128 [ 131.495427][ T4352] device bond0 entered promiscuous mode [ 131.525359][ T4352] device bond_slave_0 entered promiscuous mode [ 131.565904][ T4352] device bond_slave_1 entered promiscuous mode [ 131.632593][ T4350] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 131.648606][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.673089][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.715219][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.874223][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.888032][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.932406][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.989842][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.076846][ T4188] device veth0_vlan entered promiscuous mode [ 132.094513][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.112745][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.189951][ T4188] device veth1_vlan entered promiscuous mode [ 132.253224][ T4167] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 132.309125][ T4167] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 132.360605][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.374879][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.383206][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.395527][ T4167] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 132.452211][ T4167] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 132.483714][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.498106][ T4188] device veth0_macvtap entered promiscuous mode [ 132.560793][ T4188] device veth1_macvtap entered promiscuous mode [ 132.645516][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.657347][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.689194][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.700831][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.707166][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.711803][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.727541][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.739644][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.770789][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.799426][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.813125][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.843492][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.873089][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.901059][ T4367] netlink: 96 bytes leftover after parsing attributes in process `syz.4.173'. [ 132.913730][ T3592] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.921444][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.938917][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.036488][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.068163][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.103838][ T3551] Bluetooth: hci5: command tx timeout [ 133.120865][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.138012][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.151146][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.162428][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.173046][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.184355][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.210205][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.222796][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 133.296759][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.307619][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.316374][ T3592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.327562][ T3592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.352554][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.361803][ T3592] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 133.371732][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.381103][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.390481][ T3592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.404869][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.422347][ T3592] usb 4-1: config 0 descriptor?? [ 133.744692][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.771374][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.856840][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.882265][ T4365] binder: 4364:4365 ioctl c0306201 20000580 returned -14 [ 133.901199][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.930300][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.946348][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.982022][ T153] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.176841][ T4387] loop2: detected capacity change from 0 to 128 [ 134.343938][ T153] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.363163][ T153] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 134.397519][ T4387] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 134.416669][ T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.455632][ T153] usb 5-1: config 0 descriptor?? [ 134.661183][ T46] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 134.721232][ T46] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 134.765714][ T46] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 134.797517][ T46] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 134.851717][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.908590][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.945948][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.033794][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.074483][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.126068][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.153839][ T153] video4linux radio32: keene_cmd_set failed (-71) [ 135.163398][ T153] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 135.189259][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.210132][ T153] usb 5-1: USB disconnect, device number 4 [ 135.286509][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.332784][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 135.432226][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.479013][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.524301][ T4390] loop1: detected capacity change from 0 to 4096 [ 135.544534][ T3592] usb 4-1: string descriptor 0 read error: -71 [ 135.557948][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 135.575709][ T3592] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 135.592155][ T3592] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 135.622231][ T4390] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 135.670656][ T3592] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 135.686654][ T3592] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 135.734214][ T3592] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 135.795594][ T3592] usb 4-1: USB disconnect, device number 9 [ 135.875618][ T4390] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 136.326015][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 136.326032][ T27] audit: type=1326 audit(1720816032.462:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 136.423633][ T27] audit: type=1326 audit(1720816032.482:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 136.543628][ T27] audit: type=1326 audit(1720816032.482:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 136.552394][ T4412] netlink: 96 bytes leftover after parsing attributes in process `syz.4.185'. [ 136.601466][ T3549] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 136.616324][ T27] audit: type=1326 audit(1720816032.482:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 136.828700][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 136.848247][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 137.484618][ T4437] loop2: detected capacity change from 0 to 512 [ 137.543244][ T4437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 137.613521][ T4437] UDF-fs: Scanning with blocksize 512 failed [ 137.674050][ T4437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 137.838388][ T4437] UDF-fs: Scanning with blocksize 1024 failed [ 137.867846][ T4437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 137.965747][ T4437] UDF-fs: Scanning with blocksize 2048 failed [ 138.088192][ T4437] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 138.090198][ T27] audit: type=1326 audit(1720816034.222:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000 [ 138.206658][ T4437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.214814][ T27] audit: type=1326 audit(1720816034.272:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000 [ 138.273497][ T4458] netlink: 96 bytes leftover after parsing attributes in process `syz.1.199'. [ 138.324554][ T27] audit: type=1326 audit(1720816034.272:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000 [ 138.570602][ T27] audit: type=1326 audit(1720816034.272:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000 [ 138.708503][ T27] audit: type=1326 audit(1720816034.272:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000 [ 139.347207][ T27] audit: type=1804 audit(1720816034.522:94): pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.191" name="/newroot/46/file0/bus" dev="loop2" ino=43 res=1 errno=0 [ 139.683033][ T4472] loop1: detected capacity change from 0 to 512 [ 139.777352][ T4472] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 139.786673][ T4472] UDF-fs: Scanning with blocksize 512 failed [ 139.815874][ T4472] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 139.823331][ T4472] UDF-fs: Scanning with blocksize 1024 failed [ 139.883943][ T4472] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 139.908918][ T4472] UDF-fs: Scanning with blocksize 2048 failed [ 139.939253][ T4472] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 140.204821][ T4472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.431907][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.519619][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.659406][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.757271][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.948935][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.086881][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.118350][ T4480] loop0: detected capacity change from 0 to 4096 [ 141.279467][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.368185][ T4480] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 141.385299][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.432647][ T4480] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 141.464507][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.514497][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.924113][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 141.924139][ T27] audit: type=1326 audit(1720816038.062:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c9175bd9 code=0x7ffc0000 [ 142.018798][ T27] audit: type=1326 audit(1720816038.092:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f95c9175bd9 code=0x7ffc0000 [ 142.094871][ T27] audit: type=1326 audit(1720816038.092:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c9175bd9 code=0x7ffc0000 [ 142.300735][ T27] audit: type=1326 audit(1720816038.092:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c9175bd9 code=0x7ffc0000 [ 142.436721][ T4513] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 142.532842][ T4519] ptrace attach of "./syz-executor exec"[3559] was attempted by "./syz-executor exec"[4519] [ 142.978309][ T4522] device bond0 entered promiscuous mode [ 143.055974][ T4522] device bond_slave_0 entered promiscuous mode [ 143.062349][ T4522] device bond_slave_1 entered promiscuous mode [ 143.240454][ T4527] loop3: detected capacity change from 0 to 512 [ 143.263966][ T4527] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 143.306204][ T4527] UDF-fs: Scanning with blocksize 512 failed [ 143.324825][ T4527] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 143.384115][ T4527] UDF-fs: Scanning with blocksize 1024 failed [ 143.411346][ T4527] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 143.437726][ T4527] UDF-fs: Scanning with blocksize 2048 failed [ 143.469123][ T4527] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 143.528585][ T4527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.623276][ T27] audit: type=1804 audit(1720816039.752:100): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.217" name="/newroot/50/file0/bus" dev="loop3" ino=43 res=1 errno=0 [ 146.109469][ T27] audit: type=1326 audit(1720816042.242:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 146.166889][ T4543] loop3: detected capacity change from 0 to 40427 [ 146.242856][ T27] audit: type=1326 audit(1720816042.262:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 146.251507][ T4543] F2FS-fs (loop3): Invalid uid value -1 [ 146.408738][ T27] audit: type=1326 audit(1720816042.262:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 146.573738][ T27] audit: type=1326 audit(1720816042.262:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 146.596221][ T27] audit: type=1326 audit(1720816042.262:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000 [ 146.598909][ T4565] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 146.710309][ T4565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.754355][ T4565] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.886787][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 148.257878][ T4589] loop0: detected capacity change from 0 to 128 [ 148.429800][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 150.618468][ T4636] loop1: detected capacity change from 0 to 128 [ 150.771153][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 150.816290][ T4646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.886294][ T4648] device bond0 entered promiscuous mode [ 150.912889][ T4648] device bond_slave_0 entered promiscuous mode [ 150.944523][ T4648] device bond_slave_1 entered promiscuous mode [ 150.978666][ T4648] device batadv0 entered promiscuous mode [ 151.079295][ T3595] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.497686][ T4646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.523782][ T3595] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 151.543742][ T3595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.562411][ T3595] usb 1-1: config 0 descriptor?? [ 151.846166][ T3595] kaweth 1-1:0.0: Firmware present in device. [ 151.948449][ T4661] tipc: Can't bind to reserved service type 0 [ 152.053897][ T3595] kaweth 1-1:0.0: Statistics collection: 0 [ 152.059812][ T3595] kaweth 1-1:0.0: Multicast filter limit: 0 [ 152.079835][ T3595] kaweth 1-1:0.0: MTU: 0 [ 152.109042][ T3595] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 152.273948][ T3595] kaweth: probe of 1-1:0.0 failed with error -5 [ 152.325145][ T3595] usb 1-1: USB disconnect, device number 3 [ 153.263151][ T4679] loop4: detected capacity change from 0 to 128 [ 153.695125][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 154.556995][ T4711] loop4: detected capacity change from 0 to 1024 [ 154.863073][ T3690] hfsplus: b-tree write err: -5, ino 4 [ 155.085101][ T4726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.249146][ T3595] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 155.349850][ T4731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 155.565507][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 155.633798][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.664076][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.683875][ T4726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.803134][ T3595] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 155.833944][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.856496][ T3595] usb 5-1: config 0 descriptor?? [ 156.376832][ T4722] binder: 4721:4722 ioctl c0306201 20000580 returned -14 [ 156.481917][ T4750] loop1: detected capacity change from 0 to 1024 [ 156.533719][ T153] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.558757][ T3640] hfsplus: b-tree write err: -5, ino 4 [ 156.884820][ T4762] xt_hashlimit: overflow, try lower: 0/0 [ 156.902236][ T4763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'. [ 157.054200][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.084232][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.129750][ T153] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 157.157762][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.193061][ T153] usb 3-1: config 0 descriptor?? [ 157.815793][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 157.835894][ T4746] binder: 4745:4746 ioctl c0306201 20000580 returned -14 [ 158.003793][ T3595] usb 5-1: string descriptor 0 read error: -71 [ 158.023916][ T3595] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 158.037354][ T3595] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 158.053108][ T3595] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 158.069573][ T3595] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 158.085188][ T3595] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 158.113853][ T3595] usb 5-1: USB disconnect, device number 5 [ 158.622217][ T4792] loop4: detected capacity change from 0 to 1024 [ 158.813794][ T153] usb 3-1: string descriptor 0 read error: -71 [ 158.903856][ T153] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 158.930108][ T153] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 158.951045][ T153] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 158.962346][ T153] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 158.970550][ T153] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 159.001346][ T153] usb 3-1: USB disconnect, device number 5 [ 159.051983][ T3875] hfsplus: b-tree write err: -5, ino 4 [ 159.325495][ T4807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 159.396169][ T4808] process 'syz.4.312' launched './file0' with NULL argv: empty string added [ 159.923407][ T4819] xt_hashlimit: overflow, try lower: 0/0 [ 159.937794][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 161.717260][ T4839] loop4: detected capacity change from 0 to 16 [ 161.838773][ T4839] erofs: (device loop4): mounted with root inode @ nid 36. [ 161.994053][ T3551] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 162.144112][ T4839] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 162.306848][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 162.306867][ T27] audit: type=1800 audit(1720816058.442:124): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.322" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 162.498471][ T4839] syz.4.322 (4839) used greatest stack depth: 18864 bytes left [ 162.868182][ T4853] Bluetooth: MGMT ver 1.22 [ 163.053703][ T3596] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.573892][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.591189][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.617441][ T3596] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.633763][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.645690][ T3596] usb 4-1: config 0 descriptor?? [ 164.058905][ T4869] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 164.124934][ T4851] binder: 4850:4851 ioctl c0306201 20000580 returned -14 [ 164.181496][ T4869] ptrace attach of "./syz-executor exec"[3549] was attempted by "./syz-executor exec"[4869] [ 165.060028][ T3596] usb 4-1: string descriptor 0 read error: -71 [ 165.083929][ T3596] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 165.101895][ T3596] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 165.256428][ T3596] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 165.266581][ T3596] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 165.283864][ T3596] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 165.315331][ T3596] usb 4-1: USB disconnect, device number 10 [ 165.959800][ T4903] loop4: detected capacity change from 0 to 2048 [ 166.125524][ T4903] loop4: p3 < > p4 < > [ 166.172301][ T4903] loop4: partition table partially beyond EOD, truncated [ 166.180204][ T4911] loop3: detected capacity change from 0 to 2048 [ 166.235569][ T4911] loop3: p3 < > p4 < > [ 166.242090][ T4903] loop4: p3 start 4284289 is beyond EOD, truncated [ 166.255262][ T4911] loop3: partition table partially beyond EOD, truncated [ 166.268806][ T4911] loop3: p3 start 4284289 is beyond EOD, truncated [ 166.310725][ T3002] loop3: p3 < > p4 < > [ 166.339800][ T3002] loop3: partition table partially beyond EOD, truncated [ 166.358848][ T3002] loop3: p3 start 4284289 is beyond EOD, truncated [ 166.439482][ T3002] loop4: p3 < > p4 < > [ 166.449084][ T3002] loop4: partition table partially beyond EOD, truncated [ 166.479773][ T3002] loop4: p3 start 4284289 is beyond EOD, truncated [ 166.700125][ T4919] loop0: detected capacity change from 0 to 1024 [ 166.871371][ T3879] hfsplus: b-tree write err: -5, ino 4 [ 167.094219][ T4924] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 167.176334][ T4929] ptrace attach of "./syz-executor exec"[3737] was attempted by "./syz-executor exec"[4929] [ 169.097713][ T4936] loop0: detected capacity change from 0 to 4096 [ 169.140413][ T4936] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 169.251182][ T4936] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 169.863792][ T4936] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 169.958429][ T4969] loop2: detected capacity change from 0 to 2048 [ 170.012712][ T4969] loop2: p3 < > p4 < > [ 170.120196][ T4969] loop2: partition table partially beyond EOD, truncated [ 170.129362][ T4969] loop2: p3 start 4284289 is beyond EOD, truncated [ 170.608005][ T4985] loop0: detected capacity change from 0 to 2048 [ 170.709244][ T4988] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 170.729317][ T4988] ptrace attach of "./syz-executor exec"[3737] was attempted by "./syz-executor exec"[4988] [ 170.741561][ T4985] loop0: p3 < > p4 < > [ 170.749337][ T4985] loop0: partition table partially beyond EOD, truncated [ 170.757932][ T4985] loop0: p3 start 4284289 is beyond EOD, truncated [ 170.963739][ T153] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.213875][ T153] usb 2-1: Using ep0 maxpacket: 16 [ 171.333813][ T153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.424014][ T153] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 171.443224][ T153] usb 2-1: can't read configurations, error -71 [ 171.943770][ T3116] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 172.363911][ T3116] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 172.421110][ T3116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.530948][ T3116] usb 1-1: config 0 descriptor?? [ 172.900427][ T3116] kaweth 1-1:0.0: Firmware present in device. [ 173.103825][ T3116] kaweth 1-1:0.0: Statistics collection: 0 [ 173.109856][ T3116] kaweth 1-1:0.0: Multicast filter limit: 0 [ 173.149377][ T3116] kaweth 1-1:0.0: MTU: 0 [ 173.220917][ T3116] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 173.324044][ T3116] kaweth: probe of 1-1:0.0 failed with error -5 [ 173.358691][ T3116] usb 1-1: USB disconnect, device number 4 [ 173.632950][ T5014] loop1: detected capacity change from 0 to 4096 [ 174.391109][ T5014] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 174.713901][ T5014] ntfs3: loop1: Failed to load $Volume. [ 176.227147][ T5044] loop4: detected capacity change from 0 to 16 [ 176.374819][ T5044] erofs: (device loop4): mounted with root inode @ nid 36. [ 176.503354][ T3551] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 176.597839][ T5044] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 177.058773][ T27] audit: type=1800 audit(1720816073.192:125): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.379" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 177.220673][ T5047] loop0: detected capacity change from 0 to 2048 [ 177.330180][ T5047] loop0: p3 < > p4 < > [ 177.341401][ T5047] loop0: partition table partially beyond EOD, truncated [ 177.372660][ T5047] loop0: p3 start 4284289 is beyond EOD, truncated [ 180.205108][ T5095] loop0: detected capacity change from 0 to 4096 [ 180.259865][ T5095] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 180.366266][ T5095] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 180.707706][ T5095] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 180.728997][ T5123] loop3: detected capacity change from 0 to 256 [ 181.731923][ T5128] loop2: detected capacity change from 0 to 2048 [ 181.824633][ T5128] loop2: p3 < > p4 < > [ 181.851511][ T5128] loop2: partition table partially beyond EOD, truncated [ 181.919133][ T5128] loop2: p3 start 4284289 is beyond EOD, truncated [ 182.388087][ T3116] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.406313][ T5151] loop1: detected capacity change from 0 to 16 [ 182.507047][ T5151] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.599357][ T3551] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.632805][ T5151] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 182.659129][ T27] audit: type=1800 audit(1720816078.792:126): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.404" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 182.813887][ T3116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.840271][ T3116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.883741][ T3116] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 182.919608][ T3116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.957832][ T3116] usb 5-1: config 0 descriptor?? [ 183.438726][ T5145] binder: 5143:5145 ioctl c0306201 20000580 returned -14 [ 184.406245][ T5180] netlink: 'syz.3.410': attribute type 11 has an invalid length. [ 184.414580][ T5180] netlink: 'syz.3.410': attribute type 11 has an invalid length. [ 184.422890][ T5180] netlink: 8520 bytes leftover after parsing attributes in process `syz.3.410'. [ 187.454224][ T3116] usb 5-1: string descriptor 0 read error: -71 [ 187.526996][ T3116] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 187.555372][ T3116] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 187.583015][ T3116] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 187.624563][ T3116] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 187.651755][ T3116] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 187.702232][ T3116] usb 5-1: USB disconnect, device number 6 [ 188.780353][ T5199] loop3: detected capacity change from 0 to 2048 [ 189.002666][ T5199] loop3: p3 < > p4 < > [ 189.055140][ T5199] loop3: partition table partially beyond EOD, truncated [ 189.205186][ T5199] loop3: p3 start 4284289 is beyond EOD, truncated [ 189.449199][ T3002] loop3: p3 < > p4 < > [ 189.453492][ T3002] loop3: partition table partially beyond EOD, truncated [ 189.597260][ T3002] loop3: p3 start 4284289 is beyond EOD, truncated [ 190.708451][ T5218] loop2: detected capacity change from 0 to 256 [ 191.177297][ T153] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.543811][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.582760][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.633054][ T153] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 191.679627][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.737135][ T153] usb 1-1: config 0 descriptor?? [ 192.216368][ T5224] binder: 5222:5224 ioctl c0306201 20000580 returned -14 [ 192.598020][ T5241] netlink: 'syz.3.425': attribute type 11 has an invalid length. [ 192.606114][ T5241] netlink: 'syz.3.425': attribute type 11 has an invalid length. [ 192.614052][ T5241] netlink: 8520 bytes leftover after parsing attributes in process `syz.3.425'. [ 194.140407][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.149925][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.324075][ T153] usb 1-1: string descriptor 0 read error: -71 [ 194.332741][ T5254] loop1: detected capacity change from 0 to 512 [ 194.344008][ T153] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 194.355308][ T5254] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 194.365058][ T153] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 194.373321][ T153] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 194.383927][ T153] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 194.391466][ T153] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 194.399423][ T5254] UDF-fs: Scanning with blocksize 512 failed [ 194.428297][ T153] usb 1-1: USB disconnect, device number 5 [ 194.454093][ T5254] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 194.488072][ T5254] UDF-fs: Scanning with blocksize 1024 failed [ 194.518869][ T5254] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 194.557201][ T5254] UDF-fs: Scanning with blocksize 2048 failed [ 194.588149][ T5254] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 194.652326][ T5254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.422576][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.520333][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.586404][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.702113][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.804414][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.820617][ T5288] loop2: detected capacity change from 0 to 2048 [ 196.881299][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.923463][ T5270] loop4: detected capacity change from 0 to 4096 [ 196.957999][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.985737][ T5270] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 197.054704][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.093877][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.126816][ T5270] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 197.153984][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.300466][ T5288] loop2: p3 < > p4 < > [ 197.304954][ T5288] loop2: partition table partially beyond EOD, truncated [ 197.312991][ T5288] loop2: p3 start 4284289 is beyond EOD, truncated [ 197.657220][ T3551] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 197.787202][ T3551] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 198.130418][ T3737] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 198.702182][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 201.357083][ T3596] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.366838][ T3551] Bluetooth: hci5: command tx timeout [ 201.427548][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 203.289006][ T5328] netlink: 'syz.1.444': attribute type 11 has an invalid length. [ 203.297036][ T5328] netlink: 'syz.1.444': attribute type 11 has an invalid length. [ 203.304939][ T5328] netlink: 8520 bytes leftover after parsing attributes in process `syz.1.444'. [ 208.657926][ T5333] loop4: detected capacity change from 0 to 1024 [ 208.905186][ T3996] hfsplus: b-tree write err: -5, ino 4 [ 209.570517][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.613978][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.622200][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.631189][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.639933][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.647509][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.684111][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.700111][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.709903][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.719696][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.728575][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.737272][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.791879][ T3565] Bluetooth: hci6: command tx timeout [ 213.800577][ T3557] Bluetooth: hci2: command tx timeout [ 214.207450][ T3557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.231937][ T3557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.247020][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.264611][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.273325][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.281322][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.772318][ T5371] device bond0 entered promiscuous mode [ 214.811184][ T5371] device bond_slave_0 entered promiscuous mode [ 214.833833][ T5371] device bond_slave_1 entered promiscuous mode [ 215.137322][ T3880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.358333][ T3880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.563842][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 215.698548][ T3880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.761573][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 215.813675][ T48] Bluetooth: hci2: command tx timeout [ 215.892472][ T3880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.904161][ T48] Bluetooth: hci6: command tx timeout [ 216.373883][ T48] Bluetooth: hci4: command tx timeout [ 216.545276][ T5336] chnl_net:caif_netlink_parms(): no params data found [ 217.570935][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 217.583774][ T48] Bluetooth: hci5: command tx timeout [ 217.697311][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 217.891907][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.903102][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.903884][ T48] Bluetooth: hci2: command tx timeout [ 217.912493][ T5336] device bridge_slave_0 entered promiscuous mode [ 217.973992][ T48] Bluetooth: hci6: command tx timeout [ 218.053906][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.061088][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.081519][ T5336] device bridge_slave_1 entered promiscuous mode [ 218.260993][ T5336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.315547][ T5336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.428564][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.436958][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.453652][ T48] Bluetooth: hci4: command tx timeout [ 218.521942][ T5337] device bridge_slave_0 entered promiscuous mode [ 218.600239][ T5336] team0: Port device team_slave_0 added [ 218.613373][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.644593][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.661542][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 218.724061][ T5372] device bridge_slave_0 entered promiscuous mode [ 218.805186][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.829364][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.844058][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 218.885680][ T5337] device bridge_slave_1 entered promiscuous mode [ 218.931454][ T5336] team0: Port device team_slave_1 added [ 219.116601][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.128257][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.184919][ T5372] device bridge_slave_1 entered promiscuous mode [ 219.310066][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.320341][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.410443][ T5336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.498609][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.588959][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.629888][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.664564][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.678933][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.782498][ T5336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.871283][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.973959][ T48] Bluetooth: hci2: command tx timeout [ 220.053864][ T48] Bluetooth: hci6: command tx timeout [ 220.125753][ T5372] team0: Port device team_slave_0 added [ 220.225571][ T5337] team0: Port device team_slave_0 added [ 220.233408][ T5372] team0: Port device team_slave_1 added [ 220.247687][ T5336] device hsr_slave_0 entered promiscuous mode [ 220.268902][ T5336] device hsr_slave_1 entered promiscuous mode [ 220.288635][ T5336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.302723][ T5336] Cannot create hsr debugfs directory [ 220.345196][ T5337] team0: Port device team_slave_1 added [ 220.483480][ T5470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.523418][ T3880] device hsr_slave_0 left promiscuous mode [ 220.533812][ T48] Bluetooth: hci4: command tx timeout [ 220.570911][ T3880] device hsr_slave_1 left promiscuous mode [ 220.604128][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.616068][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.659325][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.676321][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.695883][ T48] Bluetooth: hci5: command tx timeout [ 220.734342][ T3880] device bridge_slave_1 left promiscuous mode [ 220.740573][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.796664][ T3880] device bridge_slave_0 left promiscuous mode [ 220.816049][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.912032][ T3880] device veth1_macvtap left promiscuous mode [ 220.934557][ T3880] device veth0_macvtap left promiscuous mode [ 220.946644][ T3880] device veth1_vlan left promiscuous mode [ 220.952520][ T3880] device veth0_vlan left promiscuous mode [ 221.210511][ T5470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.416408][ T5482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.470'. [ 222.260226][ T5497] netlink: 'syz.0.473': attribute type 11 has an invalid length. [ 222.268448][ T5497] netlink: 'syz.0.473': attribute type 11 has an invalid length. [ 222.276473][ T5497] netlink: 8520 bytes leftover after parsing attributes in process `syz.0.473'. [ 222.634880][ T48] Bluetooth: hci4: command tx timeout [ 224.891792][ T48] Bluetooth: hci4: command tx timeout [ 226.119064][ T3880] team0 (unregistering): Port device team_slave_1 removed [ 226.187281][ T3880] team0 (unregistering): Port device team_slave_0 removed [ 226.219781][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.260412][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.576822][ T3880] bond0 (unregistering): Released all slaves [ 226.651653][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.658980][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.686859][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.730031][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.742995][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.790176][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.871940][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.877469][ T5503] loop4: detected capacity change from 0 to 128 [ 226.893748][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.920498][ T5503] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 226.983288][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.017945][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.036183][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.064439][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.277746][ T5337] device hsr_slave_0 entered promiscuous mode [ 227.290067][ T5337] device hsr_slave_1 entered promiscuous mode [ 227.312881][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.323463][ T5337] Cannot create hsr debugfs directory [ 227.337913][ T5372] device hsr_slave_0 entered promiscuous mode [ 227.346033][ T5372] device hsr_slave_1 entered promiscuous mode [ 227.354675][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.362265][ T5372] Cannot create hsr debugfs directory [ 227.744846][ T5522] netlink: 'syz.4.478': attribute type 11 has an invalid length. [ 227.752835][ T5522] netlink: 'syz.4.478': attribute type 11 has an invalid length. [ 227.761554][ T5522] netlink: 8520 bytes leftover after parsing attributes in process `syz.4.478'. [ 232.116624][ T5518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.479'. [ 232.282944][ T3565] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 232.516235][ T5336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.637251][ T5336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.669622][ T3565] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 232.817213][ T5336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.861267][ T5539] netlink: 96 bytes leftover after parsing attributes in process `syz.4.481'. [ 232.996823][ T5336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.121916][ T5547] loop4: detected capacity change from 0 to 128 [ 234.165463][ T5547] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 234.293821][ T3565] Bluetooth: hci5: command tx timeout [ 234.415568][ T5372] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.640316][ T5552] loop4: detected capacity change from 0 to 4096 [ 234.707016][ T5372] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.739125][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 234.978688][ T5525] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.140408][ T5372] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.313649][ T3593] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 235.326766][ T5372] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.675533][ T3593] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.703764][ T3593] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.723656][ T3593] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.733001][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.742281][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.487'. [ 235.804203][ T5552] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.053382][ T3593] usb 5-1: USB disconnect, device number 7 [ 236.576498][ T5337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.603949][ T5337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.733902][ T5337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.781778][ T5337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.068641][ T5336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.136715][ T5336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.546960][ T5336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.013625][ T5372] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.060547][ T5372] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.084753][ T5372] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.111718][ T5372] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.196462][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 238.229311][ T5336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.321684][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.405845][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.415746][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.447429][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.646764][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.657623][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.685629][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.692820][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.724398][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.748700][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.771617][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.778869][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.921780][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.939286][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.969939][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.999269][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.036146][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.065747][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.183288][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.204641][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.242223][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.271533][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.298569][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.339465][ T5337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.365042][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.441721][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.460832][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.489227][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.640110][ T5336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.667429][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.704564][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.716874][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.752444][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.792040][ T3116] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.799284][ T3116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.817235][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.845059][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.864263][ T3116] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.871415][ T3116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.012798][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.022717][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.066177][ T5336] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.134623][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.154523][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.204438][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.263310][ T5638] loop4: detected capacity change from 0 to 4096 [ 240.454550][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.469953][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.495132][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.514983][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.540227][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.549942][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.559024][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.568561][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.577191][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.586662][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.595476][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.602607][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.613104][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.675381][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.694304][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.702523][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.714670][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.723262][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.730805][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.783629][ T3116] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 240.883086][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.934600][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.949057][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.987269][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.000045][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.013220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.032126][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.042881][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.060282][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.071945][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.163156][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.174593][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.199536][ T5336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.064029][ T3116] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.084519][ T3116] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.094658][ T3116] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.114988][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.124027][ T3116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.132986][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.152016][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.337720][ T5638] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 243.284184][ T14] usb 5-1: USB disconnect, device number 8 [ 243.444879][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.464570][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.540570][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.548901][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.564060][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.584833][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.631938][ T3880] device hsr_slave_0 left promiscuous mode [ 243.659561][ T3880] device hsr_slave_1 left promiscuous mode [ 243.684469][ T5556] udevd[5556]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.705945][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.724077][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.752133][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.779366][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.796337][ T3880] device bridge_slave_1 left promiscuous mode [ 243.809408][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.841981][ T3880] device bridge_slave_0 left promiscuous mode [ 243.848719][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.862887][ T3880] device hsr_slave_0 left promiscuous mode [ 243.870174][ T3880] device hsr_slave_1 left promiscuous mode [ 243.880463][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.893370][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.905512][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.913071][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.927651][ T3880] device bridge_slave_1 left promiscuous mode [ 243.940586][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.957650][ T3880] device bridge_slave_0 left promiscuous mode [ 243.969847][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.058768][ T3880] device veth1_macvtap left promiscuous mode [ 244.073183][ T3880] device veth0_macvtap left promiscuous mode [ 244.079643][ T3880] device veth1_vlan left promiscuous mode [ 244.092483][ T3880] device veth0_vlan left promiscuous mode [ 244.101897][ T3880] device veth1_macvtap left promiscuous mode [ 244.115267][ T3880] device veth0_macvtap left promiscuous mode [ 244.121538][ T3880] device veth1_vlan left promiscuous mode [ 244.127958][ T5667] loop0: detected capacity change from 0 to 32768 [ 244.133393][ T3880] device veth0_vlan left promiscuous mode [ 244.203953][ T5667] XFS (loop0): Mounting V5 Filesystem [ 244.294034][ T5667] XFS (loop0): Ending clean mount [ 244.329313][ T5667] XFS (loop0): Quotacheck needed: Please wait. [ 244.431769][ T5667] XFS (loop0): Quotacheck: Done. [ 244.576657][ T4188] XFS (loop0): Unmounting Filesystem [ 244.617269][ T5692] loop4: detected capacity change from 0 to 4096 [ 244.713363][ T5583] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.043715][ T3594] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 245.122443][ T3880] team0 (unregistering): Port device team_slave_1 removed [ 245.168405][ T3880] team0 (unregistering): Port device team_slave_0 removed [ 245.204565][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.213329][ T3880] device bond_slave_1 left promiscuous mode [ 245.250238][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.260021][ T3880] device bond_slave_0 left promiscuous mode [ 245.403952][ T3594] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.424384][ T3594] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.444171][ T3594] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.454105][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.496051][ T5692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.515670][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 245.739905][ T3593] usb 5-1: USB disconnect, device number 9 [ 245.762329][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 246.076116][ T3880] bond0 (unregistering): Released all slaves [ 247.340097][ T5714] loop0: detected capacity change from 0 to 256 [ 247.610783][ T48] Bluetooth: hci5: command tx timeout [ 249.160225][ T3880] team0 (unregistering): Port device team_slave_1 removed [ 249.199541][ T3880] team0 (unregistering): Port device team_slave_0 removed [ 249.237847][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.269823][ T3880] device bond_slave_1 left promiscuous mode [ 249.334458][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.359444][ T3880] device bond_slave_0 left promiscuous mode [ 249.548302][ T3880] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 249.557948][ T3880] device batadv0 left promiscuous mode [ 249.963106][ T3880] bond0 (unregistering): Released all slaves [ 250.048363][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.055992][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.065067][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.084001][ T5337] device veth0_vlan entered promiscuous mode [ 250.129358][ T5337] device veth1_vlan entered promiscuous mode [ 250.176769][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.199389][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.243631][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.252306][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.283752][ T3593] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 250.285512][ T5337] device veth0_macvtap entered promiscuous mode [ 250.321316][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.333465][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.342994][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.362151][ T5337] device veth1_macvtap entered promiscuous mode [ 250.381281][ T5372] device veth0_vlan entered promiscuous mode [ 250.390531][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.410355][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.428741][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.451907][ T5372] device veth1_vlan entered promiscuous mode [ 250.478769][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.495683][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.503317][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.521170][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.539425][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.550891][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.575675][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.593086][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.614552][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.624088][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.643286][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.670905][ T5336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.678212][ T3593] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.694849][ T3593] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 250.715838][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.720880][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.733902][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.761121][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.768250][ T3593] usb 1-1: config 0 descriptor?? [ 250.787150][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.825299][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.859054][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.873353][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.892779][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.914690][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.930675][ T5755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.513'. [ 250.940508][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.949686][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.999579][ T5337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.045801][ T5337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.077815][ T5337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.086811][ T5337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.108324][ T5372] device veth0_macvtap entered promiscuous mode [ 251.249918][ T5762] netlink: 'syz.4.514': attribute type 11 has an invalid length. [ 251.258344][ T5762] netlink: 'syz.4.514': attribute type 11 has an invalid length. [ 251.266295][ T5762] netlink: 8520 bytes leftover after parsing attributes in process `syz.4.514'. [ 251.808297][ T3593] video4linux radio32: keene_cmd_set failed (-71) [ 251.815124][ T5336] device veth0_vlan entered promiscuous mode [ 251.823736][ T3593] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 251.868776][ T3593] usb 1-1: USB disconnect, device number 6 [ 254.166810][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.450644][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.498099][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.676270][ T5372] device veth1_macvtap entered promiscuous mode [ 254.735373][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.746491][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.792744][ T5336] device veth1_vlan entered promiscuous mode [ 254.847182][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.884218][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.909479][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.937587][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.976949][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.998287][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.019928][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.054000][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.074468][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.091544][ T3996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.125989][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.126031][ T3996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.163678][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.210358][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.241485][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.262050][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.283053][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.306943][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.328268][ T5372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.353847][ T5372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.362685][ T5372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.383592][ T5372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.441328][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.449730][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.467232][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.514236][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.522341][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.560785][ T5336] device veth0_macvtap entered promiscuous mode [ 255.576558][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.582926][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.602592][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.611370][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.628563][ T5786] loop4: detected capacity change from 0 to 256 [ 255.650691][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.681305][ T5336] device veth1_macvtap entered promiscuous mode [ 255.733834][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.742080][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.910456][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.962685][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.021454][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.032723][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.065953][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.078195][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.169724][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.275830][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.742890][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.756304][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.795257][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.803123][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.823091][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.854417][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.865426][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.896715][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.932906][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.969118][ T5798] loop2: detected capacity change from 0 to 2048 [ 256.997728][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.023649][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.056662][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.089730][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.141378][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.209610][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.243841][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.260572][ T5798] loop2: p3 < > p4 < > [ 257.266917][ T5798] loop2: partition table partially beyond EOD, truncated [ 257.280032][ T5798] loop2: p3 start 4284289 is beyond EOD, truncated [ 257.287664][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.356697][ T5336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.393724][ T5336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.429742][ T5336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.448828][ T5336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.482813][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.515459][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.622224][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.824416][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.832848][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.971777][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.028416][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.085523][ T5824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'. [ 258.086263][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.150421][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.163703][ T3597] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 258.283887][ T3594] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 258.583947][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.602315][ T5835] loop3: detected capacity change from 0 to 128 [ 258.693910][ T3594] usb 1-1: config 0 interface 0 has no altsetting 0 [ 259.039902][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.068135][ T3594] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 259.119125][ T5835] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 259.186954][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.199353][ T3597] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.245269][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.264479][ T3594] usb 1-1: config 0 descriptor?? [ 259.328315][ T3597] usb 2-1: config 0 descriptor?? [ 259.461818][ T3875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 259.515257][ T3875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 259.631465][ T3875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 259.707585][ T3875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 259.798266][ T5820] binder: 5819:5820 ioctl c0306201 20000580 returned -14 [ 260.033703][ T3594] video4linux radio32: keene_cmd_set failed (-71) [ 260.041481][ T3594] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 260.082695][ T3594] usb 1-1: USB disconnect, device number 7 [ 260.403649][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 260.763937][ T22] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 260.773062][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.792794][ T22] usb 3-1: config 0 descriptor?? [ 261.074007][ T3597] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 261.082925][ T3597] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 261.100743][ T22] kaweth 3-1:0.0: Firmware present in device. [ 261.107326][ T3597] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 261.125216][ T3597] usb 2-1: USB disconnect, device number 6 [ 261.305039][ T22] kaweth 3-1:0.0: Statistics collection: 0 [ 261.311366][ T22] kaweth 3-1:0.0: Multicast filter limit: 0 [ 261.331287][ T22] kaweth 3-1:0.0: MTU: 0 [ 261.356105][ T22] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 261.523759][ T22] kaweth: probe of 3-1:0.0 failed with error -5 [ 261.562023][ T22] usb 3-1: USB disconnect, device number 6 [ 263.359094][ T5904] loop4: detected capacity change from 0 to 4096 [ 263.685133][ T5583] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.833588][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 264.166762][ T3593] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 264.267153][ T3550] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 264.513418][ T3602] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 265.113907][ T3593] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.125262][ T3550] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.132186][ T3550] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 265.162503][ T3593] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 265.198563][ T3550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.207469][ T3593] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.222585][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.232283][ T3550] usb 2-1: config 0 descriptor?? [ 265.270210][ T5904] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.373956][ T3602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.507743][ T3594] usb 5-1: USB disconnect, device number 10 [ 265.512864][ T3602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.540066][ T3602] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.565059][ T3602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.591672][ T3602] usb 1-1: config 0 descriptor?? [ 265.753642][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 265.944021][ T3550] video4linux radio32: keene_cmd_set failed (-71) [ 265.953571][ T3550] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 265.972596][ T3550] usb 2-1: USB disconnect, device number 7 [ 266.087625][ T5934] binder: 5932:5934 ioctl c0306201 20000580 returned -14 [ 266.173950][ T14] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.205475][ T14] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.226597][ T14] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.256991][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.294073][ T5942] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 266.551098][ T3116] usb 3-1: USB disconnect, device number 7 [ 267.293730][ T3602] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 267.302986][ T3602] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 267.313600][ T3602] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 267.522505][ T3602] usb 1-1: USB disconnect, device number 8 [ 268.094064][ T5983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.336812][ T3565] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 269.349720][ T3565] Bluetooth: hci6: Injecting HCI hardware error event [ 269.358137][ T48] Bluetooth: hci6: hardware error 0x00 [ 269.746509][ T5983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.427929][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 270.491705][ T6000] loop0: detected capacity change from 0 to 2048 [ 270.610708][ T6000] loop0: p3 < > p4 < > [ 270.619657][ T6000] loop0: partition table partially beyond EOD, truncated [ 270.630359][ T6000] loop0: p3 start 4284289 is beyond EOD, truncated [ 270.804396][ T3565] Bluetooth: hci6: unexpected event for opcode 0x080c [ 271.113881][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 271.141133][ T6023] netlink: 684 bytes leftover after parsing attributes in process `syz.3.565'. [ 271.415958][ T48] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 271.425121][ T6040] netlink: 'syz.0.570': attribute type 11 has an invalid length. [ 271.433048][ T6040] netlink: 'syz.0.570': attribute type 11 has an invalid length. [ 271.442171][ T6040] netlink: 8520 bytes leftover after parsing attributes in process `syz.0.570'. [ 271.464338][ T3593] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 272.183811][ T22] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.207647][ T22] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.220513][ T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.230252][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.253640][ T3602] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 272.273907][ T6021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.398076][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.412577][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.422700][ T3593] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 272.455111][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.494935][ T3593] usb 2-1: config 0 descriptor?? [ 272.537505][ T3550] usb 3-1: USB disconnect, device number 8 [ 272.654019][ T3602] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 272.705619][ T3602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.747162][ T3602] usb 5-1: config 0 descriptor?? [ 272.979219][ T6027] binder: 6024:6027 ioctl c0306201 20000580 returned -14 [ 273.148918][ T3602] kaweth 5-1:0.0: Firmware present in device. [ 273.357045][ T3602] kaweth 5-1:0.0: Statistics collection: 0 [ 273.363150][ T3602] kaweth 5-1:0.0: Multicast filter limit: 0 [ 273.410855][ T3602] kaweth 5-1:0.0: MTU: 0 [ 273.421536][ T3602] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 273.575559][ T3602] kaweth: probe of 5-1:0.0 failed with error -5 [ 273.589581][ T6064] loop2: detected capacity change from 0 to 2048 [ 273.601679][ T3602] usb 5-1: USB disconnect, device number 11 [ 273.646239][ T6064] loop2: p3 < > p4 < > [ 273.650623][ T6064] loop2: partition table partially beyond EOD, truncated [ 273.668213][ T6064] loop2: p3 start 4284289 is beyond EOD, truncated [ 274.066021][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 274.276751][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 274.433917][ T3593] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71 [ 274.451014][ T3593] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 274.465853][ T3593] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 274.481014][ T3593] usb 2-1: USB disconnect, device number 8 [ 275.234917][ T6089] netlink: 684 bytes leftover after parsing attributes in process `syz.1.582'. [ 275.384340][ T6090] device bond0 entered promiscuous mode [ 275.430508][ T6090] device bond_slave_0 entered promiscuous mode [ 275.462405][ T6090] device bond_slave_1 entered promiscuous mode [ 276.139039][ T48] Bluetooth: hci5: command tx timeout [ 276.727697][ T6108] loop2: detected capacity change from 0 to 2048 [ 276.791087][ T3594] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 277.094612][ T6108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 277.164033][ T3594] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.360235][ T3594] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.930364][ T5337] EXT4-fs (loop2): unmounting filesystem. [ 278.143411][ T3594] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.198365][ T3594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.267540][ T6106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 278.413931][ T153] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 278.505301][ T3593] usb 2-1: USB disconnect, device number 9 [ 278.540177][ T6131] loop4: detected capacity change from 0 to 512 [ 278.638458][ T6131] loop4: detected capacity change from 0 to 512 [ 278.813963][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.840841][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.878209][ T153] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 278.916637][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.968453][ T153] usb 4-1: config 0 descriptor?? [ 279.449265][ T6124] binder: 6123:6124 ioctl c0306201 20000580 returned -14 [ 279.539776][ T6142] device bond0 entered promiscuous mode [ 279.558073][ T6142] device bond_slave_0 entered promiscuous mode [ 279.569526][ T6141] netlink: 684 bytes leftover after parsing attributes in process `syz.2.598'. [ 279.635906][ T6146] loop4: detected capacity change from 0 to 16 [ 279.913549][ T6146] erofs: (device loop4): mounted with root inode @ nid 36. [ 279.924141][ T3565] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 279.947043][ T6145] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 279.949257][ T6142] device bond_slave_1 entered promiscuous mode [ 279.974899][ T27] audit: type=1800 audit(1720816176.112:127): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.599" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 280.455382][ T3565] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 280.464218][ T3565] Bluetooth: hci4: Injecting HCI hardware error event [ 280.472843][ T48] Bluetooth: hci4: hardware error 0x00 [ 280.887124][ T153] uclogic 0003:256C:006D.000F: failed retrieving Huion firmware version: -71 [ 280.909244][ T153] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 280.955210][ T153] uclogic: probe of 0003:256C:006D.000F failed with error -71 [ 280.999327][ T153] usb 4-1: USB disconnect, device number 11 [ 281.055495][ T3592] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 282.486925][ T3592] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.548260][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 282.645886][ T3592] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 282.694162][ T3592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.730357][ T3592] usb 2-1: config 0 descriptor?? [ 283.108646][ T6187] loop4: detected capacity change from 0 to 4096 [ 283.167034][ T5951] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.183841][ T3594] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 283.443684][ T3592] video4linux radio32: keene_cmd_set failed (-71) [ 283.463441][ T3592] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 283.486585][ T3592] usb 2-1: USB disconnect, device number 10 [ 283.555058][ T3594] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 283.563757][ T3595] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 283.579230][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.603087][ T3594] usb 3-1: config 0 descriptor?? [ 283.753411][ T3550] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 284.166813][ T3594] kaweth 3-1:0.0: Firmware present in device. [ 284.624626][ T3594] kaweth 3-1:0.0: Statistics collection: 0 [ 284.630479][ T3594] kaweth 3-1:0.0: Multicast filter limit: 0 [ 284.651710][ T3594] kaweth 3-1:0.0: MTU: 0 [ 284.663242][ T3594] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 284.694814][ T3550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.704858][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 284.707358][ T3595] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 284.734837][ T3550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.750466][ T3595] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 284.762827][ T3550] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.772959][ T3595] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.782494][ T3550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.801334][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.821003][ T3550] usb 4-1: config 0 descriptor?? [ 284.843810][ T3594] kaweth: probe of 3-1:0.0 failed with error -5 [ 284.856839][ T6187] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 284.892841][ T3594] usb 3-1: USB disconnect, device number 9 [ 285.133658][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 285.161606][ T3594] usb 5-1: USB disconnect, device number 12 [ 285.295301][ T6194] binder: 6193:6194 ioctl c0306201 20000580 returned -14 [ 286.112870][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.203787][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.223787][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.340804][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.362428][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.387789][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.460885][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 286.473443][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.550377][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.599893][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.621968][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.651677][ T6223] loop1: detected capacity change from 0 to 4096 [ 286.668701][ T6223] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 286.678224][ T3550] usb 4-1: string descriptor 0 read error: -71 [ 286.703760][ T3550] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 286.746655][ T3550] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 286.770595][ T3550] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 286.780275][ T48] Bluetooth: hci5: command tx timeout [ 286.786577][ T3550] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 286.797641][ T3550] uclogic: probe of 0003:256C:006D.0010 failed with error -71 [ 286.809454][ T3550] usb 4-1: USB disconnect, device number 12 [ 286.853845][ T3602] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 286.905429][ T6223] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 287.264411][ T3602] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.300475][ T3602] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.319959][ T3602] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.378595][ T3602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.423908][ T6227] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 287.714893][ T3550] usb 5-1: USB disconnect, device number 13 [ 287.756927][ T6234] loop2: detected capacity change from 0 to 2048 [ 287.834464][ T5372] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 287.958339][ T6234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 289.228999][ T5337] EXT4-fs (loop2): unmounting filesystem. [ 289.693038][ T6255] loop2: detected capacity change from 0 to 4096 [ 289.705818][ T48] Bluetooth: Unexpected start frame (len 0) [ 289.747175][ T6261] loop3: detected capacity change from 0 to 2048 [ 289.772167][ T5583] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.803664][ T3550] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 289.892352][ T6261] loop3: p3 < > p4 < > [ 289.899141][ T6261] loop3: partition table partially beyond EOD, truncated [ 289.927131][ T6261] loop3: p3 start 4284289 is beyond EOD, truncated [ 289.972248][ T3002] loop3: p3 < > p4 < > [ 289.979469][ T3002] loop3: partition table partially beyond EOD, truncated [ 289.999980][ T3002] loop3: p3 start 4284289 is beyond EOD, truncated [ 290.123871][ T3595] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 290.233902][ T3550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.257451][ T3550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.289943][ T3550] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 290.316391][ T3550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.345314][ T3550] usb 5-1: config 0 descriptor?? [ 290.534477][ T3595] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.556754][ T3595] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 290.571700][ T3595] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.582426][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.633979][ T6255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 290.815650][ T6258] binder: 6257:6258 ioctl c0306201 20000580 returned -14 [ 290.872765][ T3595] usb 3-1: USB disconnect, device number 10 [ 291.954252][ T3550] usb 5-1: string descriptor 0 read error: -71 [ 292.196760][ T3550] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #200: -71 [ 293.324507][ T3550] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71 [ 293.332752][ T3550] uclogic 0003:256C:006D.0011: failed probing pen v2 parameters: -71 [ 293.362380][ T3550] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 293.389448][ T3550] uclogic: probe of 0003:256C:006D.0011 failed with error -71 [ 293.462621][ T3550] usb 5-1: USB disconnect, device number 14 [ 293.655329][ T6281] loop0: detected capacity change from 0 to 4096 [ 293.813907][ T6281] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 293.823676][ T3595] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 293.998674][ T6281] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 294.225447][ T3595] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.259879][ T3595] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.313444][ T3595] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.349358][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.394891][ T6304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 294.408531][ T6281] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 294.684973][ T3595] usb 2-1: USB disconnect, device number 11 [ 295.133869][ T3592] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 296.013945][ T3592] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.049994][ T3592] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.103816][ T3592] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.137909][ T3592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.193929][ T6326] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 296.323623][ T3594] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 296.483432][ T153] usb 3-1: USB disconnect, device number 11 [ 296.703846][ T3594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.740632][ T3594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.776566][ T3594] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 296.788899][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.877683][ T3594] usb 4-1: config 0 descriptor?? [ 297.355178][ T6339] binder: 6338:6339 ioctl c0306201 20000580 returned -14 [ 297.688026][ T6363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.353673][ T3594] usb 4-1: string descriptor 0 read error: -71 [ 298.393984][ T3594] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 298.405440][ T6363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.408952][ T6372] loop4: detected capacity change from 0 to 128 [ 298.425693][ T3594] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 298.453843][ T3594] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 298.480588][ T3594] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 298.520133][ T3594] uclogic: probe of 0003:256C:006D.0012 failed with error -71 [ 298.576759][ T3594] usb 4-1: USB disconnect, device number 13 [ 298.605580][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 298.887128][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 299.383683][ T3594] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 299.763956][ T3594] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.792704][ T3594] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 299.851800][ T3594] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.881464][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.957653][ T6394] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.249343][ T3592] usb 4-1: USB disconnect, device number 14 [ 300.613734][ T48] Bluetooth: hci5: command tx timeout [ 301.878389][ T6418] loop0: detected capacity change from 0 to 2048 [ 303.990297][ T3565] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 303.999013][ T3565] Bluetooth: hci2: Injecting HCI hardware error event [ 304.008254][ T48] Bluetooth: hci2: hardware error 0x00 [ 304.137514][ T6418] loop0: p3 < > p4 < > [ 304.147604][ T6418] loop0: partition table partially beyond EOD, truncated [ 304.210964][ T6428] loop2: detected capacity change from 0 to 128 [ 304.297996][ T6418] loop0: p3 start 4284289 is beyond EOD, truncated [ 304.467202][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.219155][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.549552][ T3550] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 305.963927][ T3550] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.975951][ T3550] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 306.143749][ T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 306.151163][ T3550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.176278][ T3550] usb 5-1: config 0 descriptor?? [ 307.069663][ T6449] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.265804][ T3550] video4linux radio32: keene_cmd_set failed (-71) [ 307.272352][ T3550] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 307.298162][ T3550] usb 5-1: USB disconnect, device number 15 [ 310.249013][ T6494] loop1: detected capacity change from 0 to 128 [ 311.058444][ T6516] netlink: 'syz.2.700': attribute type 11 has an invalid length. [ 311.066410][ T6516] netlink: 'syz.2.700': attribute type 11 has an invalid length. [ 311.074629][ T6516] netlink: 8520 bytes leftover after parsing attributes in process `syz.2.700'. [ 312.843658][ T3116] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 312.983739][ T3592] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 313.243980][ T3116] usb 5-1: config 0 interface 0 has no altsetting 0 [ 313.265985][ T3116] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 313.313864][ T3116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.335326][ T3116] usb 5-1: config 0 descriptor?? [ 313.393806][ T3592] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.414709][ T3592] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.429706][ T3592] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.440048][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.523910][ T6533] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 313.780499][ T3594] usb 1-1: USB disconnect, device number 9 [ 314.006337][ T6527] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.083803][ T3116] video4linux radio32: keene_cmd_set failed (-71) [ 314.100814][ T3116] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 314.139952][ T3116] usb 5-1: USB disconnect, device number 16 [ 314.168342][ T5556] udevd[5556]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.696103][ T48] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 316.705876][ T48] Bluetooth: hci5: Injecting HCI hardware error event [ 316.716701][ T48] Bluetooth: hci5: hardware error 0x00 [ 317.228002][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.234410][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.259885][ T48] [ 317.262272][ T48] ====================================================== [ 317.269396][ T48] WARNING: possible circular locking dependency detected [ 317.276443][ T48] 6.1.98-syzkaller #0 Not tainted [ 317.281477][ T48] ------------------------------------------------------ [ 317.288517][ T48] kworker/u5:0/48 is trying to acquire lock: [ 317.294524][ T48] ffff888029c01130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x104/0x300 [ 317.305023][ T48] [ 317.305023][ T48] but task is already holding lock: [ 317.312407][ T48] ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 317.322029][ T48] [ 317.322029][ T48] which lock already depends on the new lock. [ 317.322029][ T48] [ 317.332454][ T48] [ 317.332454][ T48] the existing dependency chain (in reverse order) is: [ 317.341516][ T48] [ 317.341516][ T48] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 317.349301][ T48] lock_acquire+0x1f8/0x5a0 [ 317.354408][ T48] __mutex_lock+0x132/0xd80 [ 317.359518][ T48] hci_remote_features_evt+0x664/0xab0 [ 317.365541][ T48] hci_event_packet+0xa9d/0x1510 [ 317.371010][ T48] hci_rx_work+0x3cd/0xce0 [ 317.375959][ T48] process_one_work+0x8a9/0x11d0 [ 317.381423][ T48] worker_thread+0xa47/0x1200 [ 317.386642][ T48] kthread+0x28d/0x320 [ 317.391245][ T48] ret_from_fork+0x1f/0x30 [ 317.396208][ T48] [ 317.396208][ T48] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 317.403514][ T48] lock_acquire+0x1f8/0x5a0 [ 317.408556][ T48] __mutex_lock+0x132/0xd80 [ 317.413582][ T48] sco_sock_connect+0x181/0x8f0 [ 317.418967][ T48] __sys_connect+0x2c9/0x300 [ 317.424091][ T48] __x64_sys_connect+0x76/0x80 [ 317.429391][ T48] do_syscall_64+0x3b/0xb0 [ 317.434337][ T48] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.440758][ T48] [ 317.440758][ T48] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 317.449882][ T48] validate_chain+0x1661/0x5950 [ 317.455263][ T48] __lock_acquire+0x125b/0x1f80 [ 317.460641][ T48] lock_acquire+0x1f8/0x5a0 [ 317.465674][ T48] lock_sock_nested+0x44/0x100 [ 317.470969][ T48] sco_conn_del+0x104/0x300 [ 317.475994][ T48] hci_conn_hash_flush+0x10e/0x2a0 [ 317.481629][ T48] hci_dev_close_sync+0x9a9/0x1020 [ 317.487264][ T48] hci_error_reset+0x12c/0x3c0 [ 317.492565][ T48] process_one_work+0x8a9/0x11d0 [ 317.498036][ T48] worker_thread+0xa47/0x1200 [ 317.503323][ T48] kthread+0x28d/0x320 [ 317.507919][ T48] ret_from_fork+0x1f/0x30 [ 317.512870][ T48] [ 317.512870][ T48] other info that might help us debug this: [ 317.512870][ T48] [ 317.523181][ T48] Chain exists of: [ 317.523181][ T48] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 317.523181][ T48] [ 317.537448][ T48] Possible unsafe locking scenario: [ 317.537448][ T48] [ 317.544890][ T48] CPU0 CPU1 [ 317.550345][ T48] ---- ---- [ 317.555703][ T48] lock(hci_cb_list_lock); [ 317.560204][ T48] lock(&hdev->lock); [ 317.566793][ T48] lock(hci_cb_list_lock); [ 317.573822][ T48] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 317.579720][ T48] [ 317.579720][ T48] *** DEADLOCK *** [ 317.579720][ T48] [ 317.588037][ T48] 5 locks held by kworker/u5:0/48: [ 317.593140][ T48] #0: ffff88807e1ee938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 317.603331][ T48] #1: ffffc90000b97d20 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 317.615079][ T48] #2: ffff8880235a50b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_error_reset+0x124/0x3c0 [ 317.624759][ T48] #3: ffff8880235a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 317.634443][ T48] #4: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 317.644469][ T48] [ 317.644469][ T48] stack backtrace: [ 317.650372][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.98-syzkaller #0 [ 317.658387][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 317.668528][ T48] Workqueue: hci5 hci_error_reset [ 317.673565][ T48] Call Trace: [ 317.676844][ T48] <TASK> [ 317.679863][ T48] dump_stack_lvl+0x1e3/0x2cb [ 317.684555][ T48] ? nf_tcp_handle_invalid+0x642/0x642 [ 317.690028][ T48] ? print_circular_bug+0x12b/0x1a0 [ 317.695228][ T48] check_noncircular+0x2fa/0x3b0 [ 317.700167][ T48] ? add_chain_block+0x850/0x850 [ 317.705121][ T48] ? lockdep_lock+0x11f/0x2a0 [ 317.709836][ T48] ? lockdep_unlock+0x165/0x300 [ 317.714694][ T48] ? lockdep_lock+0x2a0/0x2a0 [ 317.719408][ T48] ? _find_first_zero_bit+0xd0/0x100 [ 317.724701][ T48] validate_chain+0x1661/0x5950 [ 317.729572][ T48] ? reacquire_held_locks+0x660/0x660 [ 317.734970][ T48] ? reacquire_held_locks+0x660/0x660 [ 317.740353][ T48] ? __stack_depot_save+0x36/0x470 [ 317.745471][ T48] ? mark_lock+0x9a/0x340 [ 317.749829][ T48] ? __lock_acquire+0x125b/0x1f80 [ 317.754880][ T48] ? mark_lock+0x9a/0x340 [ 317.759270][ T48] __lock_acquire+0x125b/0x1f80 [ 317.764176][ T48] lock_acquire+0x1f8/0x5a0 [ 317.768691][ T48] ? sco_conn_del+0x104/0x300 [ 317.773377][ T48] ? read_lock_is_recursive+0x10/0x10 [ 317.778850][ T48] ? sco_conn_del+0xfa/0x300 [ 317.783440][ T48] ? __lock_acquire+0x1f80/0x1f80 [ 317.788501][ T48] lock_sock_nested+0x44/0x100 [ 317.793278][ T48] ? sco_conn_del+0x104/0x300 [ 317.797958][ T48] sco_conn_del+0x104/0x300 [ 317.802466][ T48] ? sco_connect_cfm+0xb10/0xb10 [ 317.807412][ T48] hci_conn_hash_flush+0x10e/0x2a0 [ 317.812559][ T48] hci_dev_close_sync+0x9a9/0x1020 [ 317.817776][ T48] hci_error_reset+0x12c/0x3c0 [ 317.822548][ T48] ? process_one_work+0x7a9/0x11d0 [ 317.828012][ T48] process_one_work+0x8a9/0x11d0 [ 317.832961][ T48] ? worker_detach_from_pool+0x260/0x260 [ 317.838612][ T48] ? _raw_spin_lock_irqsave+0x120/0x120 [ 317.844164][ T48] ? kthread_data+0x4e/0xc0 [ 317.848679][ T48] ? wq_worker_running+0x97/0x190 [ 317.853722][ T48] worker_thread+0xa47/0x1200 [ 317.858416][ T48] ? __sched_text_start+0x8/0x8 [ 317.863283][ T48] kthread+0x28d/0x320 [ 317.867352][ T48] ? worker_clr_flags+0x190/0x190 [ 317.872378][ T48] ? kthread_blkcg+0xd0/0xd0 [ 317.876983][ T48] ret_from_fork+0x1f/0x30 [ 317.881412][ T48] </TASK> [ 318.390704][ T6599] loop1: detected capacity change from 0 to 4096 [ 318.413342][ T6599] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 318.446157][ T6599] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 318.806108][ T6599] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 319.987259][ T48] Bluetooth: hci5: Opcode 0x0c03 failed: -110