last executing test programs: 30.134238682s ago: executing program 3 (id=1217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) 29.92227352s ago: executing program 3 (id=1218): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) mknod$loop(0x0, 0x0, 0x1) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) 7.844958s ago: executing program 3 (id=1224): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)=r1) 7.574306802s ago: executing program 3 (id=1303): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34343452}}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1ff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@dellink={0x38, 0x11, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x2000, 0x48040}, [@IFLA_GSO_MAX_SEGS={0x8}, @IFLA_MASTER={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffc}]}, 0x38}}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/82, 0x28000, 0x800}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) 6.296267297s ago: executing program 0 (id=1309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.223022034s ago: executing program 4 (id=1312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) 5.124132832s ago: executing program 4 (id=1313): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)=r1) 4.981110184s ago: executing program 4 (id=1314): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 4.821104667s ago: executing program 4 (id=1315): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000800000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x41) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) 4.561405508s ago: executing program 2 (id=1316): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 4.29278695s ago: executing program 2 (id=1317): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 3.55710634s ago: executing program 3 (id=1318): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa", @ANYRES16], 0x0) 3.337331838s ago: executing program 1 (id=1319): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 3.291099891s ago: executing program 0 (id=1320): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000039000000bf0900000000000055090100000000009500000000000000bf910000000000e9b70200000000000085000000baeb0000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.250778965s ago: executing program 2 (id=1321): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34343452}}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1ff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@dellink={0x38, 0x11, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x2000, 0x48040}, [@IFLA_GSO_MAX_SEGS={0x8}, @IFLA_MASTER={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffc}]}, 0x38}}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/82, 0x28000, 0x800}, 0x20) 3.210699118s ago: executing program 4 (id=1322): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x12eed8485ad) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 2.989169366s ago: executing program 0 (id=1323): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2.899205724s ago: executing program 0 (id=1324): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000300)=r2) 2.82870045s ago: executing program 0 (id=1325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 2.713118479s ago: executing program 0 (id=1326): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}], 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x2, 0x8205, 0xfb7a6b4, 0x2, 0x9, 0x74, 0x8, r4}, &(0x7f0000002840)=0x20) 1.897827445s ago: executing program 1 (id=1327): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 1.728183419s ago: executing program 1 (id=1328): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34343452}}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1ff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@dellink={0x38, 0x11, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x2000, 0x48040}, [@IFLA_GSO_MAX_SEGS={0x8}, @IFLA_MASTER={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffc}]}, 0x38}}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/82, 0x28000, 0x800}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) 1.601755809s ago: executing program 2 (id=1329): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="17000019000000000000790b28418d609e"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, r1}, 0x90) 1.557150853s ago: executing program 4 (id=1330): syz_usb_connect(0x0, 0x2d, &(0x7f0000000fc0)={{0x12, 0x1, 0x0, 0xf8, 0xee, 0xfe, 0x20, 0x4b4, 0x8613, 0xc34e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb2, 0x2, 0xd3, 0x0, [], [{}]}}]}}]}}, 0x0) 1.369108738s ago: executing program 2 (id=1331): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 476.930501ms ago: executing program 2 (id=1332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 202.302464ms ago: executing program 1 (id=1333): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000039000000bf0900000000000055090100000000009500000000000000bf910000000000e9b70200000000000085000000baeb0000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 190.130885ms ago: executing program 3 (id=1334): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000800000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x41) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) 38.752067ms ago: executing program 1 (id=1335): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 0s ago: executing program 1 (id=1336): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000080)=""/170, &(0x7f0000000140)=0xaa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.356945][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.380005][ T4738] device veth1_vlan entered promiscuous mode [ 132.473187][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.481830][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.489875][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.545143][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.548829][ T5004] loop1: detected capacity change from 0 to 32768 [ 132.582837][ T4738] device veth0_macvtap entered promiscuous mode [ 132.600515][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.606837][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.611013][ T5004] XFS: ikeep mount option is deprecated. [ 132.647248][ T4738] device veth1_macvtap entered promiscuous mode [ 132.662209][ T5009] loop4: detected capacity change from 0 to 32768 [ 132.686407][ T5009] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.386 (5009) [ 132.734975][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.746472][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.756454][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.767040][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.774016][ T5009] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.788077][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.815577][ T5004] XFS (loop1): Mounting V5 Filesystem [ 132.830348][ T5009] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 132.839006][ T5009] BTRFS info (device loop4): using free space tree [ 132.846829][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.910564][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.010319][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.021123][ T5004] XFS (loop1): Ending clean mount [ 133.021656][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.053838][ T5004] XFS (loop1): Quotacheck needed: Please wait. [ 133.069939][ T5043] loop3: detected capacity change from 0 to 256 [ 133.115873][ T5009] BTRFS info (device loop4): enabling ssd optimizations [ 133.120477][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.133305][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.145401][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.157499][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.167373][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.177833][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.188743][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.201801][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.226205][ T5004] XFS (loop1): Quotacheck: Done. [ 133.228014][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.424490][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.432749][ T3549] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.443793][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.458942][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.469291][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.487227][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.503061][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.513304][ T3545] XFS (loop1): Unmounting Filesystem [ 133.737854][ T4738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.957533][ T4738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.000273][ T4738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.033922][ T4738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.397235][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.410515][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.491249][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.540582][ T4182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.572993][ T4182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.615508][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.762050][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 134.762064][ T27] audit: type=1326 audit(1721736477.734:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 134.884718][ T27] audit: type=1326 audit(1721736477.744:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 134.951021][ T27] audit: type=1326 audit(1721736477.744:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 135.191536][ T5098] loop4: detected capacity change from 0 to 256 [ 135.260950][ T27] audit: type=1326 audit(1721736477.744:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 135.406345][ T27] audit: type=1326 audit(1721736477.744:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 135.450368][ T27] audit: type=1326 audit(1721736477.744:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 136.174373][ T27] audit: type=1326 audit(1721736477.744:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 136.197020][ T27] audit: type=1326 audit(1721736477.744:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 136.219054][ T27] audit: type=1326 audit(1721736477.744:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 136.244484][ T27] audit: type=1326 audit(1721736477.744:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3072975f19 code=0x7ffc0000 [ 136.550049][ T5107] binder: 5104:5107 ioctl 4018620d 0 returned -22 [ 137.018596][ T5067] loop3: detected capacity change from 0 to 32768 [ 137.107610][ T5067] find_entry called with index >= next_index [ 137.182257][ T5116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 137.227083][ T5090] loop1: detected capacity change from 0 to 32768 [ 137.285880][ T5090] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.397 (5090) [ 137.393816][ T5090] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.436313][ T5090] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 137.468885][ T5090] BTRFS info (device loop1): using free space tree [ 137.547882][ T5095] loop0: detected capacity change from 0 to 32768 [ 137.590935][ T5095] XFS: ikeep mount option is deprecated. [ 137.698579][ T5095] XFS (loop0): Mounting V5 Filesystem [ 137.763158][ T5090] BTRFS info (device loop1): enabling ssd optimizations [ 137.926042][ T3545] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.982910][ T5095] XFS (loop0): Ending clean mount [ 138.079205][ T5095] XFS (loop0): Quotacheck needed: Please wait. [ 138.270707][ T5095] XFS (loop0): Quotacheck: Done. [ 138.318296][ T4738] XFS (loop0): Unmounting Filesystem [ 138.594348][ T5172] loop2: detected capacity change from 0 to 1024 [ 138.638784][ T5172] hfsplus: unable to parse mount options [ 138.819685][ T5172] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 138.958526][ T5172] loop2: detected capacity change from 0 to 2048 [ 139.029794][ T5172] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 139.087778][ T5181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 139.090766][ T5172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.908544][ T5201] binder: 5200:5201 ioctl 4018620d 0 returned -22 [ 140.408452][ T5193] loop0: detected capacity change from 0 to 32768 [ 140.455317][ T5193] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.417 (5193) [ 140.466748][ T5196] loop4: detected capacity change from 0 to 32768 [ 140.518509][ T5193] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.535461][ T5196] XFS: ikeep mount option is deprecated. [ 140.559631][ T5193] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 140.584453][ T5193] BTRFS info (device loop0): using free space tree [ 140.675329][ T5196] XFS (loop4): Mounting V5 Filesystem [ 140.795630][ T5233] loop1: detected capacity change from 0 to 512 [ 140.813315][ T5196] XFS (loop4): Ending clean mount [ 140.846713][ T5196] XFS (loop4): Quotacheck needed: Please wait. [ 140.888857][ T5196] XFS (loop4): Quotacheck: Done. [ 140.914450][ T5193] BTRFS info (device loop0): enabling ssd optimizations [ 140.968875][ T5233] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.424: casefold flag without casefold feature [ 140.981835][ T3549] XFS (loop4): Unmounting Filesystem [ 141.021710][ T5233] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.424: missing EA_INODE flag [ 141.082347][ T4738] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.092746][ T5233] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.424: error while reading EA inode 2 err=-117 [ 141.137934][ T5233] EXT4-fs (loop1): 1 orphan inode deleted [ 141.161000][ T5233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.243218][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 141.392719][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 141.723994][ T5252] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 142.017382][ T5252] loop0: detected capacity change from 0 to 2048 [ 142.068730][ T5252] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 142.104528][ T5252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.147480][ T5272] loop2: detected capacity change from 0 to 32768 [ 143.185330][ T5272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.436 (5272) [ 143.262655][ T5272] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.284476][ T5273] loop0: detected capacity change from 0 to 32768 [ 143.295424][ T5272] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 143.306442][ T5273] XFS: ikeep mount option is deprecated. [ 143.336798][ T5272] BTRFS info (device loop2): using free space tree [ 143.384770][ T5273] XFS (loop0): Mounting V5 Filesystem [ 143.432695][ T5273] XFS (loop0): Ending clean mount [ 143.455180][ T5273] XFS (loop0): Quotacheck needed: Please wait. [ 143.571732][ T5273] XFS (loop0): Quotacheck: Done. [ 143.639733][ T4738] XFS (loop0): Unmounting Filesystem [ 143.718164][ T5272] BTRFS info (device loop2): enabling ssd optimizations [ 143.774347][ T3546] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.735451][ T3561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.746497][ T3561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.209698][ T3561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.217588][ T3561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.225376][ T3561] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.233199][ T3561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.970225][ T5335] chnl_net:caif_netlink_parms(): no params data found [ 148.235579][ T5335] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.273459][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.301969][ T5335] device bridge_slave_0 entered promiscuous mode [ 148.341523][ T5335] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.348972][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.377923][ T5335] device bridge_slave_1 entered promiscuous mode [ 148.507627][ T5342] loop1: detected capacity change from 0 to 32768 [ 148.533487][ T5335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.571504][ T5342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.449 (5342) [ 148.597995][ T5335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.642590][ T5342] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.690387][ T5342] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 148.713238][ T5342] BTRFS info (device loop1): using free space tree [ 149.021890][ T5335] team0: Port device team_slave_0 added [ 149.028169][ T5342] BTRFS info (device loop1): enabling ssd optimizations [ 149.059609][ T5335] team0: Port device team_slave_1 added [ 149.238818][ T5342] BTRFS info (device loop1): balance: start [ 149.256521][ T5342] BTRFS info (device loop1): balance: ended with status: 0 [ 149.310304][ T3561] Bluetooth: hci5: command tx timeout [ 149.312490][ T5335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.363015][ T5335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.460307][ T5335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.491617][ T3545] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.561184][ T5335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.578751][ T5335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.684354][ T5335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.831802][ T27] audit: type=1326 audit(1721736492.804:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.2.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3072975f19 code=0x0 [ 150.054723][ T5335] device hsr_slave_0 entered promiscuous mode [ 150.324654][ T5335] device hsr_slave_1 entered promiscuous mode [ 150.374112][ T5335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.589006][ T5335] Cannot create hsr debugfs directory [ 151.431290][ T3561] Bluetooth: hci5: command tx timeout [ 151.937110][ T5335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.256192][ T5335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.409744][ T5335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.517972][ T5335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.865949][ T5335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.992947][ T5335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.042502][ T5335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.093379][ T5335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.426624][ T27] audit: type=1326 audit(1721736496.394:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.0.473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14e1775f19 code=0x0 [ 153.434850][ T5335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.470385][ T3561] Bluetooth: hci5: command tx timeout [ 153.596038][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.614234][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.652813][ T5335] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.683209][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.691887][ T4157] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.705466][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.724743][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.731892][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.774358][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.789225][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.799109][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.814832][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.821998][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.836555][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.845439][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.861078][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.873514][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.897491][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.905709][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.923435][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.937418][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.947423][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.962933][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.976987][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.989361][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.084062][ T4157] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.106601][ T4157] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 154.130339][ T4157] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.139388][ T4157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.181712][ T4157] usb 3-1: config 0 descriptor?? [ 154.224669][ T4157] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 154.347310][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.356858][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.384354][ T5335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.429901][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.443371][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.484763][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.495400][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.516293][ T5335] device veth0_vlan entered promiscuous mode [ 154.550906][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.568913][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.568961][ T4157] usb 3-1: USB disconnect, device number 3 [ 154.636791][ T5335] device veth1_vlan entered promiscuous mode [ 154.650540][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.704818][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.720889][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.742780][ T5335] device veth0_macvtap entered promiscuous mode [ 154.776110][ T5335] device veth1_macvtap entered promiscuous mode [ 154.819319][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.841346][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.858738][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.870103][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.886556][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.928131][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.951304][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.978287][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.011265][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.034325][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.052481][ T5335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.063076][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.090751][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.104510][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.113903][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.138684][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.180241][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.190058][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.259847][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.276036][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.289406][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.324850][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.355814][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.411034][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.411052][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.412338][ T5335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.417864][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.418453][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.423659][ T5335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.423714][ T5335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.423740][ T5335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.423764][ T5335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.550631][ T3561] Bluetooth: hci5: command tx timeout [ 155.606974][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.607024][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.647638][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.692377][ T3907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.692434][ T3907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.696431][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.886502][ T4157] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 157.272833][ T4157] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.310688][ T4157] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 157.350261][ T4157] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.372448][ T4157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.423214][ T4157] usb 1-1: config 0 descriptor?? [ 157.436390][ T5524] loop4: detected capacity change from 0 to 128 [ 157.456853][ T5528] loop2: detected capacity change from 0 to 256 [ 157.472182][ T4157] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 157.506753][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.538464][ T5528] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 157.587083][ T5524] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 157.919966][ T4679] usb 1-1: USB disconnect, device number 2 [ 158.856698][ T5553] loop1: detected capacity change from 0 to 512 [ 159.809013][ T5553] EXT4-fs (loop1): Test dummy encryption mode enabled [ 159.830512][ T3592] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.845948][ T5553] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.511: casefold flag without casefold feature [ 159.866766][ T5553] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 159.937274][ T5553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.152914][ T5553] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 160.200677][ T3592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.230455][ T3592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.253803][ T3592] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 160.266367][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 160.288168][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.310300][ T5055] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.332748][ T3592] usb 1-1: config 0 descriptor?? [ 160.544479][ T5578] loop1: detected capacity change from 0 to 128 [ 160.564335][ T5055] usb 4-1: Using ep0 maxpacket: 8 [ 160.612171][ T5578] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.641412][ T5578] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 160.740523][ T5055] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.781929][ T5055] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.822086][ T3592] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 160.837347][ T5055] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 160.856678][ T3592] holtek_kbd 0003:04D9:A055.0002: item fetching failed at offset 3/5 [ 160.888311][ T5055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.910762][ T3592] holtek_kbd: probe of 0003:04D9:A055.0002 failed with error -22 [ 161.250492][ T4678] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.555513][ T3549] EXT4-fs (loop4): unmounting filesystem. [ 161.576446][ T5055] usb 4-1: config 0 descriptor?? [ 161.581917][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 161.583113][ T3592] usb 1-1: USB disconnect, device number 3 [ 161.670453][ T4678] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.691390][ T4678] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 161.745747][ T4678] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.777442][ T4678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.998410][ T4678] usb 3-1: config 0 descriptor?? [ 162.222808][ T4678] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 162.832813][ T4157] usb 3-1: USB disconnect, device number 4 [ 162.874588][ T5055] logitech 0003:046D:C298.0003: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 162.903139][ T5055] logitech 0003:046D:C298.0003: no inputs found [ 162.947597][ T5611] loop0: detected capacity change from 0 to 512 [ 162.976832][ T5611] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.048292][ T5611] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.526: casefold flag without casefold feature [ 163.068508][ T5611] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 163.102200][ T5611] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 163.415378][ T5611] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 163.491392][ T4738] EXT4-fs (loop0): unmounting filesystem. [ 163.677014][ T5628] loop1: detected capacity change from 0 to 128 [ 163.740611][ T5628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.783837][ T5628] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 164.130454][ T4676] usb 4-1: USB disconnect, device number 5 [ 164.725836][ T4676] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 165.131913][ T4676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.162755][ T4676] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 165.239652][ T4676] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.269319][ T4676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.307486][ T4676] usb 4-1: config 0 descriptor?? [ 165.352472][ T4676] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 165.941513][ T4676] usb 4-1: USB disconnect, device number 6 [ 166.396838][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 166.992829][ T3563] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 167.154259][ T5715] loop0: detected capacity change from 0 to 128 [ 167.179764][ T5715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 167.189800][ T5715] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 167.221168][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.600446][ T4157] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.971099][ T4157] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.993600][ T4157] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 168.026314][ T4157] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.076689][ T4157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.108088][ T4157] usb 3-1: config 0 descriptor?? [ 168.164107][ T4157] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 168.422210][ T3592] usb 3-1: USB disconnect, device number 5 [ 168.511611][ T4157] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.760440][ T4157] usb 2-1: Using ep0 maxpacket: 16 [ 168.880908][ T4157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 169.070888][ T4157] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 169.090865][ T4157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.098984][ T4157] usb 2-1: Product: syz [ 169.172094][ T4157] usb 2-1: Manufacturer: syz [ 169.177057][ T4157] usb 2-1: SerialNumber: syz [ 169.192642][ T4157] usb 2-1: config 0 descriptor?? [ 169.232804][ T4157] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 169.249256][ T4157] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 169.439534][ T4157] usb 2-1: USB disconnect, device number 3 [ 169.500792][ T4157] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 169.548012][ T4157] kobil_sct 2-1:0.0: device disconnected [ 169.591161][ T4738] EXT4-fs (loop0): unmounting filesystem. [ 170.374711][ T5787] loop0: detected capacity change from 0 to 128 [ 170.413240][ T4679] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 170.445505][ T5787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 170.463908][ T5787] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 170.510439][ T3547] Bluetooth: hci2: command 0x0406 tx timeout [ 170.510444][ T3561] Bluetooth: hci1: command 0x0406 tx timeout [ 170.510530][ T3561] Bluetooth: hci0: command 0x0406 tx timeout [ 170.516501][ T3547] Bluetooth: hci3: command 0x0406 tx timeout [ 170.784916][ T5794] loop2: detected capacity change from 0 to 128 [ 170.887534][ T5794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 170.896456][ T4679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.910703][ T5794] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 170.914491][ T4679] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 170.942088][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.961224][ T4679] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.971300][ T4679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.982403][ T4679] usb 2-1: config 0 descriptor?? [ 171.023227][ T4679] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 171.295755][ T3592] usb 2-1: USB disconnect, device number 4 [ 171.387759][ T5789] loop4: detected capacity change from 0 to 32768 [ 171.427044][ T5789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.596 (5789) [ 171.480414][ T5789] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.507079][ T5789] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 171.551111][ T5789] BTRFS info (device loop4): disabling free space tree [ 171.557992][ T5789] BTRFS info (device loop4): turning off barriers [ 171.590239][ T5789] BTRFS info (device loop4): use no compression [ 171.596716][ T5789] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 171.640304][ T5789] BTRFS info (device loop4): trying to use backup root at mount time [ 171.672419][ T5789] BTRFS error (device loop4): cannot disable free space tree [ 171.701041][ T5789] BTRFS error (device loop4): open_ctree failed [ 172.033367][ T5811] loop1: detected capacity change from 0 to 128 [ 172.574154][ T4738] EXT4-fs (loop0): unmounting filesystem. [ 172.710399][ T4678] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.806042][ T5820] loop0: detected capacity change from 0 to 1024 [ 172.926479][ T27] audit: type=1800 audit(1721736515.894:92): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.607" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 172.980334][ T4678] usb 4-1: Using ep0 maxpacket: 32 [ 173.008875][ T9] hfsplus: b-tree write err: -5, ino 4 [ 173.150543][ T4678] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.253090][ T4678] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 173.265631][ T4678] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.276081][ T4678] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.365075][ T3546] EXT4-fs (loop2): unmounting filesystem. [ 173.460567][ T5058] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.490482][ T4678] usb 4-1: New USB device found, idVendor=0525, idProduct=11a1, bcdDevice=86.22 [ 173.507875][ T4678] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 173.531758][ T4678] usb 4-1: Product: 㣵됂妠⽪➴ꦠ腟ꛘ㖿퓸萮⬻㺫긚뼥䷵ঊမଗꦴ둀羵秸鷺ףḃ쭐崏퓁ꁄ鉝涏㮥㶾筎㕠࠵⼞䥪湭䁖孼搤䞈ဖ픨鲣⃑莅룵ﻱꮉ쪿៰䐪燶塴붿ᒲ嘃䢆膗酩斢ﶦ퍣뒦胅턔▴峣媓辚拨侙᠒雪킻퓇突ꧨ祅㩊嵚嵤瓦౯楏৯䇏 [ 173.655007][ T4678] usb 4-1: Manufacturer: syz [ 173.668107][ T4678] usb 4-1: SerialNumber: ۨ鲏ﯼ攅媥 [ 173.880366][ T5058] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 173.921751][ T5058] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 173.990289][ T5058] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.050144][ T5058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.092350][ T5058] usb 1-1: config 0 descriptor?? [ 174.152263][ T5058] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 174.455903][ T5055] usb 1-1: USB disconnect, device number 4 [ 174.737823][ T5859] loop4: detected capacity change from 0 to 1024 [ 174.785109][ T27] audit: type=1800 audit(1721736517.754:93): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.620" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 174.812663][ T9] hfsplus: b-tree write err: -5, ino 4 [ 174.828923][ T5863] loop1: detected capacity change from 0 to 128 [ 174.928390][ T5863] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.049443][ T5863] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 175.438442][ T5881] loop0: detected capacity change from 0 to 8 [ 175.581419][ T5881] SQUASHFS error: Failed to read block 0x1ec: -5 [ 175.611022][ T5881] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 176.650493][ T4157] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.804436][ T4678] usb 4-1: USB disconnect, device number 7 [ 177.031681][ T4157] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 177.067795][ T4157] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 177.166515][ T4157] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.188423][ T4157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.242248][ T4157] usb 3-1: config 0 descriptor?? [ 177.292481][ T4157] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 177.490396][ T5058] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.509678][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 177.569392][ T4157] usb 3-1: USB disconnect, device number 6 [ 177.619530][ T3554] Bluetooth: hci4: unexpected subevent 0x1a length: 10 > 6 [ 177.740365][ T5058] usb 5-1: Using ep0 maxpacket: 8 [ 178.177085][ T5058] usb 5-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 178.210282][ T5058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.329232][ T5058] usb 5-1: config 0 descriptor?? [ 178.371295][ T5058] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 178.379406][ T5058] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 178.601671][ T3592] usb 5-1: USB disconnect, device number 3 [ 178.608236][ T3592] ftdi_sio 5-1:0.0: device disconnected [ 178.629862][ T5959] loop1: detected capacity change from 0 to 512 [ 178.679737][ T5959] EXT4-fs (loop1): 1 orphan inode deleted [ 178.680725][ T3554] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 178.724150][ T5959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 178.790001][ T5959] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038 (0x7fffffff) [ 178.890902][ T5959] fuse: Unknown parameter 'measure' [ 178.959791][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 179.689906][ T3554] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 179.930264][ T4678] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.073220][ T3592] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.252519][ T6005] loop2: detected capacity change from 0 to 1024 [ 180.340787][ T4678] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 180.380343][ T3592] usb 5-1: Using ep0 maxpacket: 32 [ 180.416577][ T4678] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 180.500842][ T3592] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 180.556745][ T4678] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.646809][ T4678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.690579][ T3592] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 180.696886][ T4678] usb 4-1: config 0 descriptor?? [ 180.708407][ T6006] loop0: detected capacity change from 0 to 128 [ 180.716372][ T6014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.680'. [ 180.730542][ T3592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.749978][ T3592] usb 5-1: Product: syz [ 180.764386][ T3592] usb 5-1: Manufacturer: syz [ 180.783131][ T4678] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 180.805070][ T3592] usb 5-1: SerialNumber: syz [ 180.822344][ T3592] usb 5-1: config 0 descriptor?? [ 180.840551][ T5995] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 180.852381][ T6006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.892478][ T6006] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 181.375396][ T3592] usb 4-1: USB disconnect, device number 8 [ 181.679026][ T4678] usb 5-1: USB disconnect, device number 4 [ 181.807392][ T3554] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 182.117810][ T6026] loop1: detected capacity change from 0 to 32768 [ 182.141705][ T6026] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.684 (6026) [ 182.214935][ T6026] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 182.239837][ T6026] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 182.267767][ T6026] BTRFS info (device loop1): enabling disk space caching [ 182.289356][ T6026] BTRFS info (device loop1): force clearing of disk cache [ 182.331468][ T4678] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 182.333028][ T6026] BTRFS info (device loop1): use zlib compression, level 3 [ 182.368374][ T6026] BTRFS info (device loop1): turning on sync discard [ 182.383070][ T6026] BTRFS info (device loop1): disk space caching is enabled [ 182.460452][ T4738] EXT4-fs (loop0): unmounting filesystem. [ 182.646339][ T4678] usb 5-1: device descriptor read/64, error -71 [ 182.770333][ T6026] BTRFS info (device loop1): enabling ssd optimizations [ 182.811126][ T6026] BTRFS info (device loop1): rebuilding free space tree [ 182.910410][ T6026] BTRFS info (device loop1): disabling free space tree [ 182.918861][ T6026] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.988039][ T6026] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.010346][ T4678] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.170323][ T4676] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.203823][ T3545] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 183.221067][ T4678] usb 5-1: device descriptor read/64, error -71 [ 183.360401][ T4678] usb usb5-port1: attempt power cycle [ 183.440548][ T4157] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 183.450413][ T4676] usb 4-1: Using ep0 maxpacket: 32 [ 183.700646][ T4676] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.760311][ T4157] usb 1-1: Using ep0 maxpacket: 32 [ 183.840881][ T6084] loop1: detected capacity change from 0 to 256 [ 183.855282][ T6084] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 183.866945][ T4678] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 183.900519][ T4676] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 183.927164][ T4676] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.939311][ T4676] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.025129][ T4678] usb 5-1: device descriptor read/8, error -71 [ 184.450485][ T4157] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 184.681948][ T4157] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 184.685080][ T4676] usb 4-1: New USB device found, idVendor=0525, idProduct=11a1, bcdDevice=86.22 [ 184.804998][ T4678] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.812916][ T4676] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 184.821836][ T4676] usb 4-1: Product: 㣵됂妠⽪➴ꦠ腟ꛘ㖿퓸萮⬻㺫긚뼥䷵ঊမଗꦴ둀羵秸鷺ףḃ쭐崏퓁ꁄ鉝涏㮥㶾筎㕠࠵⼞䥪湭䁖孼搤䞈ဖ픨鲣⃑莅룵ﻱꮉ쪿៰䐪燶塴붿ᒲ嘃䢆膗酩斢ﶦ퍣뒦胅턔▴峣媓辚拨侙᠒雪킻퓇突ꧨ祅㩊嵚嵤瓦౯楏৯䇏 [ 184.831831][ T4157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.852727][ T4676] usb 4-1: Manufacturer: syz [ 184.865290][ T4676] usb 4-1: SerialNumber: ۨ鲏ﯼ攅媥 [ 184.909970][ T4157] usb 1-1: Product: syz [ 184.917656][ T4157] usb 1-1: Manufacturer: syz [ 184.926931][ T4157] usb 1-1: SerialNumber: syz [ 184.957426][ T4157] usb 1-1: config 0 descriptor?? [ 184.970432][ T4678] usb 5-1: device descriptor read/8, error -71 [ 184.980564][ T6078] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.111124][ T4678] usb usb5-port1: unable to enumerate USB device [ 185.994927][ T4678] usb 1-1: USB disconnect, device number 5 [ 186.830264][ T4679] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 187.086476][ T4679] usb 3-1: Using ep0 maxpacket: 16 [ 187.127632][ T4678] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.230578][ T4679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 187.370257][ T4678] usb 1-1: Using ep0 maxpacket: 8 [ 187.436762][ T4679] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 187.456195][ T4679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.476394][ T4679] usb 3-1: Product: syz [ 187.489632][ T4679] usb 3-1: Manufacturer: syz [ 187.494808][ T4679] usb 3-1: SerialNumber: syz [ 187.516071][ T4679] usb 3-1: config 0 descriptor?? [ 187.545797][ T4678] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.561691][ T4679] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 187.569939][ T26] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 187.589631][ T4679] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 187.631541][ T4678] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 187.640830][ T4678] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.651314][ T4678] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.663946][ T4678] usb 1-1: config 1 has no interface number 1 [ 187.670100][ T4678] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 187.684498][ T4678] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.770563][ T26] usb 5-1: device descriptor read/64, error -71 [ 187.796767][ T4679] usb 3-1: USB disconnect, device number 7 [ 187.826026][ T4679] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 187.848831][ T4679] kobil_sct 3-1:0.0: device disconnected [ 187.855012][ T4678] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.872244][ T4678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.887812][ T4678] usb 1-1: Product: syz [ 187.894754][ T4678] usb 1-1: Manufacturer: syz [ 187.899409][ T4678] usb 1-1: SerialNumber: syz [ 188.060496][ T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.160958][ T4676] usb 4-1: USB disconnect, device number 9 [ 188.257374][ T4678] usb 1-1: USB disconnect, device number 6 [ 188.263505][ T26] usb 5-1: device descriptor read/64, error -71 [ 188.483867][ T26] usb usb5-port1: attempt power cycle [ 188.641435][ T3625] udevd[3625]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.891016][ T26] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.002000][ T26] usb 5-1: device descriptor read/8, error -71 [ 189.290404][ T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 189.380313][ T4678] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.533631][ T26] usb 5-1: device descriptor read/8, error -71 [ 189.675421][ T26] usb usb5-port1: unable to enumerate USB device [ 189.720459][ T4678] usb 1-1: Using ep0 maxpacket: 32 [ 189.850335][ T4678] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 190.232472][ T6165] tmpfs: Unknown parameter './file0' [ 190.261319][ T4678] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 190.278033][ T4678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.326691][ T6167] loop2: detected capacity change from 0 to 512 [ 190.343407][ T6167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.504223][ T6167] EXT4-fs (loop2): 1 orphan inode deleted [ 190.510019][ T6167] EXT4-fs (loop2): 1 truncate cleaned up [ 190.515819][ T6167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.619852][ T4678] usb 1-1: Product: syz [ 190.736383][ T4678] usb 1-1: Manufacturer: syz [ 190.803331][ T4678] usb 1-1: SerialNumber: syz [ 190.840510][ T4678] usb 1-1: config 0 descriptor?? [ 190.867536][ T3546] EXT4-fs (loop2): unmounting filesystem. [ 190.870464][ T6145] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.910475][ T4157] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 191.170312][ T4157] usb 2-1: Using ep0 maxpacket: 8 [ 191.330517][ T4157] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.461859][ T26] usb 1-1: USB disconnect, device number 7 [ 192.630720][ T4157] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 192.640112][ T4157] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.656558][ T4157] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 192.665732][ T4157] usb 2-1: config 1 has no interface number 1 [ 192.680331][ T4157] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 192.840368][ T4157] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.040508][ T4157] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.054989][ T4157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.077140][ T4157] usb 2-1: Product: syz [ 193.083589][ T4157] usb 2-1: Manufacturer: syz [ 193.120446][ T4157] usb 2-1: can't set config #1, error -71 [ 193.130115][ T4157] usb 2-1: USB disconnect, device number 5 [ 193.500422][ T4157] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.710482][ T4157] usb 2-1: device descriptor read/64, error -71 [ 193.981600][ T4157] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.054784][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.061183][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.170296][ T4159] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.190451][ T4157] usb 2-1: device descriptor read/64, error -71 [ 194.312446][ T4157] usb usb2-port1: attempt power cycle [ 194.450326][ T4159] usb 5-1: Using ep0 maxpacket: 32 [ 194.574990][ T4159] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 194.614661][ T6239] binder: 6238:6239 ioctl c0306201 200003c0 returned -22 [ 194.720514][ T4157] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 194.760508][ T4159] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 194.774056][ T4159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.784645][ T4159] usb 5-1: Product: syz [ 194.788883][ T4159] usb 5-1: Manufacturer: syz [ 194.796782][ T4159] usb 5-1: SerialNumber: syz [ 194.808445][ T4159] usb 5-1: config 0 descriptor?? [ 194.820473][ T4157] usb 2-1: device descriptor read/8, error -71 [ 194.830567][ T6214] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 195.101119][ T4157] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 195.200505][ T4157] usb 2-1: device descriptor read/8, error -71 [ 195.320469][ T4157] usb usb2-port1: unable to enumerate USB device [ 195.602974][ T3592] usb 5-1: USB disconnect, device number 13 [ 195.694100][ T6253] loop0: detected capacity change from 0 to 1024 [ 195.713685][ T6253] EXT4-fs: Ignoring removed orlov option [ 195.727292][ T6253] EXT4-fs (loop0): Test dummy encryption mode enabled [ 195.749929][ T6253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.963502][ T6263] usb usb8: usbfs: process 6263 (syz.4.761) did not claim interface 0 before use [ 196.473604][ T4738] EXT4-fs (loop0): unmounting filesystem. [ 196.538862][ T6282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.786323][ T6289] tipc: Can't bind to reserved service type 0 [ 198.791625][ T6326] netlink: 'syz.2.785': attribute type 11 has an invalid length. [ 198.860612][ T6326] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.785'. [ 199.420387][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.921007][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.977545][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 200.040647][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.080357][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.106517][ T26] usb 4-1: config 0 descriptor?? [ 200.157162][ T26] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 200.364662][ T3592] usb 4-1: USB disconnect, device number 10 [ 200.859834][ T6370] loop0: detected capacity change from 0 to 256 [ 203.490385][ T3596] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 204.262485][ T3596] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.294735][ T3596] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 204.333825][ T3596] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.374650][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.434696][ T3596] usb 4-1: config 0 descriptor?? [ 204.484509][ T3596] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 204.938406][ T6448] 9pnet_fd: Insufficient options for proto=fd [ 205.261485][ T6458] tmpfs: Bad value for 'nr_inodes' [ 205.606356][ T3592] usb 4-1: USB disconnect, device number 11 [ 207.695028][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 207.769107][ T6508] tmpfs: Bad value for 'nr_inodes' [ 208.663381][ T6512] loop4: detected capacity change from 0 to 2048 [ 208.690364][ T3592] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 208.698895][ T6512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.716885][ T6512] EXT4-fs (loop4): unmounting filesystem. [ 208.930462][ T3592] usb 3-1: Using ep0 maxpacket: 32 [ 209.018798][ T6524] loop4: detected capacity change from 0 to 128 [ 209.050484][ T3592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.067511][ T3592] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 209.089154][ T6524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.099397][ T3592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.114768][ T6524] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 209.163739][ T3592] usb 3-1: config 0 descriptor?? [ 209.211320][ T3592] hub 3-1:0.0: bad descriptor, ignoring hub [ 209.217381][ T3592] hub: probe of 3-1:0.0 failed with error -5 [ 209.235590][ T6524] Trying to write to read-only block-device loop4 [ 209.248393][ T3592] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 209.257497][ T6524] Trying to write to read-only block-device loop4 [ 209.285540][ T6524] Trying to write to read-only block-device loop4 [ 209.336580][ T3549] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 209.351293][ T3549] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 209.366436][ T3549] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 209.449693][ T3549] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 209.476936][ T3549] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 209.496005][ T3549] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 209.509575][ T3549] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 209.527689][ T3549] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 209.542309][ T4157] usb 3-1: USB disconnect, device number 8 [ 209.551292][ T3549] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 209.566417][ T3549] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 209.890860][ T3549] Trying to write to read-only block-device loop4 [ 209.897367][ T3549] Trying to write to read-only block-device loop4 [ 209.907862][ T3549] Trying to write to read-only block-device loop4 [ 209.948560][ T3796] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.959334][ T3554] Bluetooth: hci0: unexpected subevent 0x1a length: 10 > 6 [ 209.984084][ T3549] Trying to write to read-only block-device loop4 [ 210.000473][ T3549] Trying to write to read-only block-device loop4 [ 210.078473][ T3549] EXT4-fs (loop4): unmounting filesystem. [ 210.100663][ T3549] Trying to write to read-only block-device loop4 [ 210.177535][ T3796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.352768][ T3796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.500293][ T3796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.812189][ T4157] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 210.843955][ T3547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.853842][ T3547] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.862670][ T3547] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.874406][ T3547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.886271][ T3547] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.894667][ T3547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.010393][ T4157] usb 3-1: device descriptor read/64, error -71 [ 211.218372][ T6553] loop1: detected capacity change from 0 to 40427 [ 211.268623][ T3547] Bluetooth: hci5: unexpected subevent 0x1a length: 10 > 6 [ 211.280486][ T4157] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.330819][ T6553] F2FS-fs (loop1): Found nat_bits in checkpoint [ 211.440613][ T6553] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.480289][ T4157] usb 3-1: device descriptor read/64, error -71 [ 211.566471][ T6565] chnl_net:caif_netlink_parms(): no params data found [ 211.583549][ T3545] syz-executor: attempt to access beyond end of device [ 211.583549][ T3545] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.602929][ T4157] usb usb3-port1: attempt power cycle [ 211.898118][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.920447][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.941559][ T6565] device bridge_slave_0 entered promiscuous mode [ 212.006982][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.014194][ T4157] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.022423][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.046557][ T6565] device bridge_slave_1 entered promiscuous mode [ 212.120577][ T4157] usb 3-1: device descriptor read/8, error -71 [ 212.128405][ T6565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.170832][ T6565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.304824][ T6565] team0: Port device team_slave_0 added [ 212.323339][ T6565] team0: Port device team_slave_1 added [ 212.408154][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.415833][ T4157] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 212.426157][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.467831][ T6565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.527385][ T4157] usb 3-1: device descriptor read/8, error -71 [ 212.553961][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.569859][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.595922][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.655194][ T6565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.666875][ T4157] usb usb3-port1: unable to enumerate USB device [ 212.723101][ T3796] device hsr_slave_0 left promiscuous mode [ 212.733193][ T3796] device hsr_slave_1 left promiscuous mode [ 212.780817][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.807225][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.849251][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.868892][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.878959][ T3796] device bridge_slave_1 left promiscuous mode [ 212.894771][ T3796] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.910604][ T3547] Bluetooth: hci2: command tx timeout [ 212.956863][ T3796] device bridge_slave_0 left promiscuous mode [ 212.963358][ T3796] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.005794][ T3796] device veth1_macvtap left promiscuous mode [ 213.012131][ T3796] device veth0_macvtap left promiscuous mode [ 213.018418][ T3796] device veth1_vlan left promiscuous mode [ 213.025630][ T3796] device veth0_vlan left promiscuous mode [ 214.593060][ T3796] team0 (unregistering): Port device team_slave_1 removed [ 214.667954][ T3796] team0 (unregistering): Port device team_slave_0 removed [ 214.739454][ T6638] loop2: detected capacity change from 0 to 40427 [ 214.746365][ T3796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.769721][ T6638] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 214.806916][ T6638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 214.826764][ T3796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.855027][ T6638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.950056][ T6638] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 214.963996][ T6638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 214.991210][ T3547] Bluetooth: hci2: command tx timeout [ 215.241391][ T6638] overlayfs: statfs failed on './file0' [ 215.301579][ T3546] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 215.301641][ T3546] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 215.324690][ T3546] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 215.354794][ T3546] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 215.377685][ T3546] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 215.405913][ T3546] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 215.426151][ T3546] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 215.638055][ T3554] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.655485][ T3554] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.664474][ T3554] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.675566][ T3554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.690663][ T3554] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.699603][ T3562] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.777722][ T3796] bond0 (unregistering): Released all slaves [ 216.131520][ T6565] device hsr_slave_0 entered promiscuous mode [ 216.152603][ T6565] device hsr_slave_1 entered promiscuous mode [ 216.180585][ T6565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.189675][ T6565] Cannot create hsr debugfs directory [ 216.570579][ T3596] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.840370][ T3596] usb 4-1: Using ep0 maxpacket: 16 [ 216.990854][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 217.070800][ T3547] Bluetooth: hci2: command tx timeout [ 217.380819][ T3596] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 217.390959][ T3596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.398976][ T3596] usb 4-1: Product: syz [ 217.429735][ T3596] usb 4-1: Manufacturer: syz [ 217.449532][ T3596] usb 4-1: SerialNumber: syz [ 217.465938][ T3596] usb 4-1: config 0 descriptor?? [ 217.551575][ T3596] kobil_sct 4-1:0.0: required endpoints missing [ 217.710716][ T3547] Bluetooth: hci6: command tx timeout [ 217.719571][ T6651] chnl_net:caif_netlink_parms(): no params data found [ 217.756342][ T3596] usb 4-1: USB disconnect, device number 12 [ 218.022631][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.039936][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.074081][ T6651] device bridge_slave_0 entered promiscuous mode [ 218.128766][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.146138][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.175174][ T6651] device bridge_slave_1 entered promiscuous mode [ 218.320070][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.372466][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.512403][ T6565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.607166][ T6651] team0: Port device team_slave_0 added [ 218.624217][ T6565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.853777][ T6651] team0: Port device team_slave_1 added [ 219.151045][ T3547] Bluetooth: hci2: command tx timeout [ 219.732108][ T6565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.763253][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.770882][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.797162][ T3547] Bluetooth: hci6: command tx timeout [ 219.850281][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.912243][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.919734][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.017778][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.057823][ T6565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.223585][ T6651] device hsr_slave_0 entered promiscuous mode [ 220.241888][ T6651] device hsr_slave_1 entered promiscuous mode [ 220.281862][ T6651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.307363][ T6651] Cannot create hsr debugfs directory [ 220.436023][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.519134][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.535152][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.560836][ T6565] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.620933][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.631586][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.643218][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.650367][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.659265][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.684015][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.710163][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.717328][ T4678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.753860][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.788303][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.869855][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.914639][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.941572][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.998512][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.014838][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.035510][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.065083][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.079374][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.124763][ T6565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.192886][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.319073][ T6651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.360363][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.368855][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.485357][ T6651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.650280][ T6651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.844715][ T6651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.870738][ T3547] Bluetooth: hci6: command tx timeout [ 221.921036][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.928566][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.945146][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.132808][ T6651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.184048][ T6651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.213767][ T6651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.271615][ T6651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.522997][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.564144][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.578099][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.599313][ T6651] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.627680][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.664326][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.697150][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.704330][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.840572][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.851336][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.894157][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.945296][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.952473][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.015127][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.044473][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.074731][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.101155][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.157657][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.174565][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.201570][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.258382][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.289179][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.919'. [ 223.305259][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.319023][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.343410][ T6565] device veth0_vlan entered promiscuous mode [ 223.401602][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.411661][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.421452][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.429827][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.450767][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.466204][ T6651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.485633][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.497239][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.511264][ T6565] device veth1_vlan entered promiscuous mode [ 223.571257][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.589534][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.628380][ T6565] device veth0_macvtap entered promiscuous mode [ 223.688447][ T6565] device veth1_macvtap entered promiscuous mode [ 223.717748][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.736624][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.796443][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.841830][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.871107][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.900770][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.922147][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.938080][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.950536][ T3547] Bluetooth: hci6: command tx timeout [ 224.020441][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.063449][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.079845][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.126747][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.179659][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.221119][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.262474][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.302133][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.343562][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.367002][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.410242][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.461768][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.492578][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.527711][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.568555][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.578668][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.619722][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.640245][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.660254][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.707432][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.737521][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.761104][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.897676][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.953864][ T6565] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.969226][ T6565] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.978331][ T6565] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.000281][ T6565] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.014317][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.030965][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.104738][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.122708][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.193769][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.203174][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.228034][ T6651] device veth0_vlan entered promiscuous mode [ 225.248801][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.257230][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.292036][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.300097][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.308891][ T6651] device veth1_vlan entered promiscuous mode [ 225.355760][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.373735][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.396586][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.416266][ T5589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.427115][ T6651] device veth0_macvtap entered promiscuous mode [ 225.445223][ T5589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.457282][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.471705][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.484659][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.501617][ T6651] device veth1_macvtap entered promiscuous mode [ 225.530741][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.557035][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.575442][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.618397][ T6869] loop4: detected capacity change from 0 to 128 [ 225.624793][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.640988][ T6869] /dev/loop4: Can't open blockdev [ 225.646161][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.707368][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.728051][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.748932][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.767875][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.779212][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.798028][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.808584][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.826271][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.838033][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.872589][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.959246][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.993292][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.042421][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.063028][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.082837][ T27] audit: type=1326 audit(1721736569.054:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.090264][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.144665][ T27] audit: type=1326 audit(1721736569.054:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.163358][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.194214][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.208737][ T27] audit: type=1326 audit(1721736569.054:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.215776][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.257161][ T4157] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 226.268524][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.285452][ T27] audit: type=1326 audit(1721736569.054:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.320281][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.350317][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.376871][ T27] audit: type=1326 audit(1721736569.054:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.385269][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.436438][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.452174][ T27] audit: type=1326 audit(1721736569.224:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.460939][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.520257][ T4157] usb 3-1: Using ep0 maxpacket: 16 [ 226.535883][ T27] audit: type=1326 audit(1721736569.224:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.567341][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.619077][ T27] audit: type=1326 audit(1721736569.224:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.641652][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.650551][ T4157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 226.655813][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.682559][ T6651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.718415][ T6651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.725985][ T27] audit: type=1326 audit(1721736569.224:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.742358][ T6651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.755092][ T27] audit: type=1326 audit(1721736569.224:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e08375f19 code=0x7ffc0000 [ 226.788811][ T6651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.841579][ T4157] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 226.864161][ T4157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.884381][ T4157] usb 3-1: Product: syz [ 226.888563][ T4157] usb 3-1: Manufacturer: syz [ 226.919662][ T4157] usb 3-1: SerialNumber: syz [ 226.959368][ T4157] usb 3-1: config 0 descriptor?? [ 226.980441][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.990692][ T26] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 227.001409][ T4157] kobil_sct 3-1:0.0: required endpoints missing [ 227.015312][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.053671][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.086350][ T5589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.101608][ T5589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.149338][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.214839][ T4676] usb 3-1: USB disconnect, device number 13 [ 227.231866][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 227.355404][ T26] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 227.369156][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.459355][ T26] usb 5-1: config 0 descriptor?? [ 227.513452][ T26] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 228.542517][ T26] usb 5-1: USB disconnect, device number 14 [ 228.767016][ T6922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.858762][ T6922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.490463][ T4679] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 231.601544][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 231.740319][ T4679] usb 2-1: Using ep0 maxpacket: 8 [ 231.886809][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 232.030723][ T4679] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 232.039791][ T4679] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 232.048058][ T26] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 232.072723][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.076714][ T6985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.095602][ T4679] usb 2-1: Product: syz [ 232.104854][ T26] usb 1-1: config 0 descriptor?? [ 232.115576][ T4679] usb 2-1: Manufacturer: syz [ 232.137471][ T4679] usb 2-1: SerialNumber: syz [ 232.143995][ T26] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 232.172027][ T4679] usb 2-1: config 0 descriptor?? [ 232.213152][ T4679] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 232.294432][ T6985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.785337][ T26] usb 1-1: USB disconnect, device number 8 [ 232.873119][ T4679] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 233.107326][ T26] usb 2-1: USB disconnect, device number 10 [ 233.901062][ T7019] loop2: detected capacity change from 0 to 256 [ 233.951626][ T7019] exfat: Unknown parameter 'calar() [ 233.951626][ T7019] 3: (95) exit [ 233.951626][ T7019] ' [ 233.961719][ T7032] fuse: Bad value for 'fd' [ 234.025031][ T3625] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.320333][ T4679] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.580261][ T4679] usb 1-1: Using ep0 maxpacket: 32 [ 234.720577][ T4679] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 234.737790][ T4679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.782053][ T4679] usb 1-1: config 0 descriptor?? [ 234.842057][ T4679] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 234.848206][ T4676] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.116305][ T4676] usb 2-1: Using ep0 maxpacket: 8 [ 235.350288][ T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 235.480979][ T4676] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 235.490045][ T4676] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 235.522335][ T4676] usb 2-1: Product: syz [ 235.526579][ T4676] usb 2-1: Manufacturer: syz [ 235.538713][ T4676] usb 2-1: SerialNumber: syz [ 235.546787][ T4676] usb 2-1: config 0 descriptor?? [ 235.562034][ T3596] usb 1-1: USB disconnect, device number 9 [ 235.592698][ T4676] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 235.620456][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 235.750429][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.780256][ T4157] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 235.840487][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.853821][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.866210][ T26] usb 5-1: SerialNumber: syz [ 236.040282][ T4157] usb 4-1: Using ep0 maxpacket: 8 [ 236.219324][ T7072] loop4: detected capacity change from 0 to 1024 [ 236.220499][ T4157] usb 4-1: config 0 has no interfaces? [ 236.257213][ T4676] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 236.400442][ T4157] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 236.421802][ T4157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.466213][ T4676] usb 2-1: USB disconnect, device number 11 [ 236.504081][ T4157] usb 4-1: Product: syz [ 236.508276][ T4157] usb 4-1: Manufacturer: syz [ 236.553904][ T4157] usb 4-1: SerialNumber: syz [ 236.589719][ T4157] usb 4-1: config 0 descriptor?? [ 237.008460][ T7104] loop2: detected capacity change from 0 to 1024 [ 237.124214][ T7104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.184665][ T7104] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038 (0x7fffffff) [ 237.530296][ T4676] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 237.655521][ T3546] EXT4-fs (loop2): unmounting filesystem. [ 237.821534][ T4676] usb 1-1: Using ep0 maxpacket: 32 [ 237.961661][ T4676] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 237.961692][ T4676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.964589][ T4676] usb 1-1: config 0 descriptor?? [ 238.013768][ T4676] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 238.222077][ T4679] usb 5-1: USB disconnect, device number 15 [ 238.656591][ T4679] usb 1-1: USB disconnect, device number 10 [ 238.889746][ T4679] usb 4-1: USB disconnect, device number 13 [ 240.749233][ T7182] loop1: detected capacity change from 0 to 1024 [ 240.980001][ T7182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 241.002676][ T7182] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038 (0x7fffffff) [ 241.330421][ T4679] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 241.509008][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 241.530829][ T4679] usb 1-1: device descriptor read/64, error -71 [ 241.924784][ T7212] loop4: detected capacity change from 0 to 512 [ 241.944048][ T4679] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 241.977620][ T7212] /dev/loop4: Can't open blockdev [ 242.040366][ T3625] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.170305][ T4679] usb 1-1: device descriptor read/64, error -71 [ 242.290485][ T4679] usb usb1-port1: attempt power cycle [ 242.440393][ T3562] Bluetooth: hci4: command 0x0406 tx timeout [ 242.860402][ T4679] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 243.002686][ T4679] usb 1-1: device descriptor read/8, error -71 [ 243.340461][ T4679] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 243.434256][ T7239] loop2: detected capacity change from 0 to 1024 [ 243.470618][ T4679] usb 1-1: device descriptor read/8, error -71 [ 243.590438][ T4679] usb usb1-port1: unable to enumerate USB device [ 243.611244][ T7239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 243.696302][ T7239] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038 (0x7fffffff) [ 244.473037][ T3546] EXT4-fs (loop2): unmounting filesystem. [ 245.347622][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 245.830479][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.851165][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.871158][ T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.897059][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.926275][ T22] usb 4-1: config 0 descriptor?? [ 245.949186][ T7294] loop1: detected capacity change from 0 to 1024 [ 246.043333][ T4157] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 246.066089][ T7294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 246.083640][ T7294] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038 (0x7fffffff) [ 246.250302][ T4157] usb 5-1: device descriptor read/64, error -71 [ 246.384103][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 246.520402][ T4157] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 246.710292][ T4157] usb 5-1: device descriptor read/64, error -71 [ 246.749564][ T4159] usb 4-1: USB disconnect, device number 14 [ 246.830400][ T4157] usb usb5-port1: attempt power cycle [ 247.240306][ T4157] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 247.340493][ T4157] usb 5-1: device descriptor read/8, error -71 [ 247.621720][ T4157] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 247.720528][ T4157] usb 5-1: device descriptor read/8, error -71 [ 247.840471][ T4157] usb usb5-port1: unable to enumerate USB device [ 248.608265][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.990494][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.041925][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.090331][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.131429][ T26] usb 2-1: config 0 descriptor?? [ 249.444046][ T4159] usb 2-1: USB disconnect, device number 12 [ 250.730784][ T26] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 250.940491][ T26] usb 1-1: device descriptor read/64, error -71 [ 251.220309][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 251.430280][ T22] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.480422][ T26] usb 1-1: device descriptor read/64, error -71 [ 251.601126][ T26] usb usb1-port1: attempt power cycle [ 251.831204][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.850321][ T22] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.868709][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.895054][ T22] usb 2-1: config 0 descriptor?? [ 252.032132][ T26] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 252.171223][ T26] usb 1-1: device descriptor read/8, error -71 [ 252.197321][ T3595] usb 2-1: USB disconnect, device number 13 [ 252.444464][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 252.570433][ T26] usb 1-1: device descriptor read/8, error -71 [ 252.600537][ T4159] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 252.690509][ T26] usb usb1-port1: unable to enumerate USB device [ 252.811568][ T4159] usb 3-1: device descriptor read/64, error -71 [ 253.085350][ T4159] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 253.300770][ T4159] usb 3-1: device descriptor read/64, error -71 [ 253.420997][ T4159] usb usb3-port1: attempt power cycle [ 253.834361][ T4159] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 253.940668][ T4159] usb 3-1: device descriptor read/8, error -71 [ 254.211389][ T4159] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 254.238174][ T3547] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 254.290351][ T3592] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.326703][ T4159] usb 3-1: device descriptor read/8, error -71 [ 254.460433][ T4159] usb usb3-port1: unable to enumerate USB device [ 254.632633][ T4157] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.650380][ T3592] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.677355][ T3592] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.686954][ T3592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.721210][ T3592] usb 4-1: config 0 descriptor?? [ 254.910295][ T4157] usb 2-1: Using ep0 maxpacket: 16 [ 255.030434][ T4157] usb 2-1: config index 0 descriptor too short (expected 65535, got 27) [ 255.051471][ T4157] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.075565][ T4157] usb 2-1: config 0 has no interfaces? [ 255.107226][ T3592] usb 4-1: USB disconnect, device number 15 [ 255.240523][ T4157] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 255.255340][ T4157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.267710][ T4157] usb 2-1: Product: syz [ 255.276641][ T4157] usb 2-1: Manufacturer: syz [ 255.286136][ T4157] usb 2-1: SerialNumber: syz [ 255.308322][ T4157] usb 2-1: config 0 descriptor?? [ 255.472930][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.481785][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.558658][ T26] usb 2-1: USB disconnect, device number 14 [ 255.756168][ T7521] loop4: detected capacity change from 0 to 1024 [ 255.818639][ T7521] /dev/loop4: Can't open blockdev [ 256.330427][ T26] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 256.386698][ T7552] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.540305][ T26] usb 1-1: device descriptor read/64, error -71 [ 256.820907][ T26] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 257.050314][ T26] usb 1-1: device descriptor read/64, error -71 [ 257.185720][ T26] usb usb1-port1: attempt power cycle [ 257.277617][ T22] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 257.666085][ T26] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 257.674049][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.690326][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.710371][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.739602][ T22] usb 3-1: config 0 descriptor?? [ 257.790493][ T26] usb 1-1: device descriptor read/8, error -71 [ 258.071602][ T22] usb 3-1: USB disconnect, device number 18 [ 258.090721][ T26] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 258.210528][ T26] usb 1-1: device descriptor read/8, error -71 [ 258.220342][ T4157] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 258.471592][ T26] usb usb1-port1: unable to enumerate USB device [ 258.476160][ T4157] usb 5-1: Using ep0 maxpacket: 16 [ 258.610303][ T4157] usb 5-1: config index 0 descriptor too short (expected 65535, got 27) [ 258.621915][ T4157] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.632162][ T4157] usb 5-1: config 0 has no interfaces? [ 258.790522][ T4157] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 258.806294][ T4157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.842032][ T4157] usb 5-1: Product: syz [ 258.854210][ T4157] usb 5-1: Manufacturer: syz [ 258.860406][ T4157] usb 5-1: SerialNumber: syz [ 258.881446][ T4157] usb 5-1: config 0 descriptor?? [ 259.125076][ T26] usb 5-1: USB disconnect, device number 20 [ 260.350637][ T22] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.930541][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.969008][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.039807][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.131633][ T22] usb 3-1: config 0 descriptor?? [ 261.620310][ T4157] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 261.638255][ T3562] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.648712][ T3562] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 261.660088][ T3562] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 261.672205][ T3562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 261.681125][ T3562] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 261.688673][ T3562] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 261.696573][ T4674] usb 3-1: USB disconnect, device number 19 [ 261.820449][ T4157] usb 5-1: device descriptor read/64, error -71 [ 261.848510][ T3562] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 262.090353][ T4157] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 262.208447][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 262.280418][ T4157] usb 5-1: device descriptor read/64, error -71 [ 262.414226][ T4157] usb usb5-port1: attempt power cycle [ 262.704322][ T7253] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.802359][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.821580][ T4157] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 262.839281][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.859281][ T7641] device bridge_slave_0 entered promiscuous mode [ 262.910472][ T4157] usb 5-1: device descriptor read/8, error -71 [ 262.913348][ T7253] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.953845][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.971467][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.000570][ T7641] device bridge_slave_1 entered promiscuous mode [ 263.046446][ T7253] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.200367][ T4157] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 263.290517][ T4157] usb 5-1: device descriptor read/8, error -71 [ 263.364240][ T7253] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.411971][ T4157] usb usb5-port1: unable to enumerate USB device [ 263.431206][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.455402][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.565446][ T7641] team0: Port device team_slave_0 added [ 263.594308][ T7641] team0: Port device team_slave_1 added [ 263.710423][ T3562] Bluetooth: hci7: command tx timeout [ 263.720991][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.735412][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.847894][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.883363][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.899873][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.925924][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.968826][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.424034][ T7641] device hsr_slave_0 entered promiscuous mode [ 264.488877][ T7641] device hsr_slave_1 entered promiscuous mode [ 264.507828][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.550371][ T7641] Cannot create hsr debugfs directory [ 264.567161][ T3562] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 264.709912][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1240'. [ 265.790402][ T3562] Bluetooth: hci7: command tx timeout [ 266.682167][ T7706] loop4: detected capacity change from 0 to 2048 [ 266.857813][ T3625] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.207107][ T7253] device hsr_slave_0 left promiscuous mode [ 267.278640][ T7253] device hsr_slave_1 left promiscuous mode [ 267.351674][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.384017][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.392355][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.399842][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.426991][ T7253] device bridge_slave_1 left promiscuous mode [ 267.437511][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.463789][ T7253] device bridge_slave_0 left promiscuous mode [ 267.576832][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.695827][ T7253] device veth1_macvtap left promiscuous mode [ 267.718747][ T7253] device veth0_macvtap left promiscuous mode [ 267.733925][ T7253] device veth1_vlan left promiscuous mode [ 267.747967][ T7253] device veth0_vlan left promiscuous mode [ 267.870590][ T3562] Bluetooth: hci7: command tx timeout [ 268.919432][ T7253] team0 (unregistering): Port device team_slave_1 removed [ 268.986812][ T7253] team0 (unregistering): Port device team_slave_0 removed [ 269.061217][ T7253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.146533][ T7253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.625427][ T7744] loop1: detected capacity change from 0 to 1024 [ 269.718513][ T7744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 269.730509][ T7744] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038 (0x7fffffff) [ 269.899350][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 269.951870][ T3562] Bluetooth: hci7: command tx timeout [ 270.023198][ T7253] bond0 (unregistering): Released all slaves [ 271.076668][ T7641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.227680][ T7641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.294987][ T7641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.422462][ T7641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.986749][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.215040][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.235062][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.993629][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.071578][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.087582][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.135711][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.142876][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.260810][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.278692][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.447330][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.495291][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.502503][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.542294][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.565241][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.626878][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.649250][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.669419][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.680758][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.693654][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.703797][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.718507][ T7641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.919005][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.927194][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.047734][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.059024][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.070831][ T3594] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 275.340371][ T3594] usb 1-1: Using ep0 maxpacket: 16 [ 276.120475][ T3594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.132914][ T3594] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 276.146907][ T3594] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 276.190940][ T3594] usb 1-1: config 0 interface 0 has no altsetting 0 [ 276.260880][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.270657][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.286245][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.370524][ T3594] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 276.389780][ T3594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.424258][ T3594] usb 1-1: Product: syz [ 276.428836][ T3594] usb 1-1: Manufacturer: syz [ 276.453257][ T7641] device veth0_vlan entered promiscuous mode [ 276.459384][ T3594] usb 1-1: SerialNumber: syz [ 276.478794][ T7641] device veth1_vlan entered promiscuous mode [ 276.575942][ T3594] usb 1-1: config 0 descriptor?? [ 276.697986][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.707000][ T3594] kobil_sct 1-1:0.0: required endpoints missing [ 277.334807][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.350453][ T3594] usb 1-1: USB disconnect, device number 23 [ 277.367405][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.378871][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.410798][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.554687][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.563178][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.611096][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.626919][ T7641] device veth0_macvtap entered promiscuous mode [ 277.708969][ T7641] device veth1_macvtap entered promiscuous mode [ 277.750485][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.759053][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.816798][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.876110][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.118792][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.159819][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.841436][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.891636][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.934462][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.936180][ T3594] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 279.011768][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.021749][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.032789][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.055297][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.082763][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.100246][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.130067][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.160078][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.187005][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.201299][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.240781][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.260538][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.300296][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.330495][ T3594] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.350264][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.360171][ T3594] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 279.383562][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.400337][ T3594] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.415371][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.430364][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.448607][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.461037][ T3594] usb 5-1: config 0 descriptor?? [ 279.475456][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.505507][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.540011][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.567901][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.599872][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.628668][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.078896][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.183446][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.390566][ T7641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.423462][ T7641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.486851][ T4674] usb 5-1: USB disconnect, device number 25 [ 280.511168][ T7641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.550287][ T7641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.891594][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.941970][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.138487][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.314607][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.488491][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.614655][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.310270][ T4157] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 284.480336][ T3592] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 284.570262][ T4157] usb 2-1: Using ep0 maxpacket: 32 [ 284.853103][ T3592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.866301][ T4157] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=c3.4e [ 284.910524][ T4157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.924430][ T3592] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 284.954666][ T4157] usb 2-1: Product: syz [ 284.960576][ T4157] usb 2-1: Manufacturer: syz [ 284.974052][ T3592] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.990545][ T4157] usb 2-1: SerialNumber: syz [ 285.006546][ T4157] usb 2-1: config 0 descriptor?? [ 285.011593][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.050681][ T3592] usb 1-1: config 0 descriptor?? [ 285.061882][ T4157] usbtest 2-1:0.0: FX2 device [ 285.066588][ T4157] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 285.267085][ T22] usb 2-1: USB disconnect, device number 15 [ 285.341520][ T4678] usb 1-1: USB disconnect, device number 24 [ 286.590439][ T3592] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.850281][ T3592] usb 4-1: Using ep0 maxpacket: 16 [ 286.970510][ T3592] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 286.991650][ T3592] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.180350][ T3592] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 287.679191][ T3592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.688451][ T3592] usb 4-1: Product: syz [ 287.699900][ T3592] usb 4-1: Manufacturer: syz [ 287.715486][ T3592] usb 4-1: SerialNumber: syz [ 287.740498][ T3592] usb 4-1: config 0 descriptor?? [ 288.030923][ T3592] kobil_sct 4-1:0.0: required endpoints missing [ 288.071185][ T3592] usb 4-1: USB disconnect, device number 16 [ 289.082865][ T4678] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 289.380359][ T4678] usb 5-1: Using ep0 maxpacket: 32 [ 289.465521][ T3592] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 289.520652][ T4678] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 291.449955][ T28] INFO: task kworker/u4:13:3839 blocked for more than 144 seconds. [ 291.465712][ T28] Not tainted 6.1.100-syzkaller #0 [ 291.487970][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.540748][ T3592] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 291.619338][ T3592] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 291.641733][ T28] task:kworker/u4:13 state:D stack:24448 pid:3839 ppid:2 flags:0x00004000 [ 291.700348][ T28] Workqueue: writeback wb_workfn (flush-7:3) [ 291.716680][ T3592] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.736914][ T28] Call Trace: [ 291.750285][ T28] [ 291.753262][ T28] __schedule+0x143f/0x4570 [ 291.770344][ T4678] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=c3.4e [ 291.778093][ T3592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.779372][ T4678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.797693][ T4678] usb 5-1: Product: syz [ 291.803450][ T4678] usb 5-1: Manufacturer: syz [ 291.810998][ T4678] usb 5-1: config 0 descriptor?? [ 291.830336][ T28] ? __sched_text_start+0x8/0x8 [ 291.830374][ T4678] usb 5-1: can't set config #0, error -71 [ 291.835198][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 291.862636][ T3592] usb 3-1: config 0 descriptor?? [ 291.875813][ T4678] usb 5-1: USB disconnect, device number 26 [ 291.951562][ T3592] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 291.973870][ T28] ? blk_check_plugged+0x250/0x250 [ 291.979426][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 292.011176][ T28] schedule+0xbf/0x180 [ 292.015285][ T28] schedule_preempt_disabled+0xf/0x20 [ 292.040220][ T28] __mutex_lock+0x6b9/0xd80 [ 292.044755][ T28] ? __mutex_lock+0x53c/0xd80 [ 292.049435][ T28] ? jfs_commit_inode+0x242/0x580 [ 292.092664][ T28] ? mutex_lock_nested+0x10/0x10 [ 292.097653][ T28] jfs_commit_inode+0x242/0x580 [ 292.120553][ T28] ? jfs_iget+0x3b0/0x3b0 [ 292.124917][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 292.130119][ T28] jfs_write_inode+0x13f/0x210 [ 292.150246][ T28] __writeback_single_inode+0x67d/0x11e0 [ 292.155922][ T28] writeback_sb_inodes+0xc2b/0x1b20 [ 292.170290][ T28] ? queue_io+0x630/0x630 [ 292.174666][ T28] ? __writeback_inodes_wb+0x400/0x400 [ 292.180138][ T28] __writeback_inodes_wb+0x114/0x400 [ 292.211467][ T28] wb_writeback+0x4b1/0xe10 [ 292.216021][ T28] ? percpu_ref_tryget+0x260/0x260 [ 292.260262][ T28] ? _find_next_bit+0x11b/0x120 [ 292.265178][ T28] wb_workfn+0xc9e/0x1020 [ 292.269543][ T28] ? inode_wait_for_writeback+0x280/0x280 [ 292.280001][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 292.286290][ T28] ? print_irqtrace_events+0x210/0x210 [ 292.292056][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 292.297983][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 292.307010][ T28] ? process_one_work+0x7a9/0x11d0 [ 292.316371][ T28] process_one_work+0x8a9/0x11d0 [ 292.328123][ T28] ? worker_detach_from_pool+0x260/0x260 [ 292.334088][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 292.339649][ T28] ? kthread_data+0x4e/0xc0 [ 292.352083][ T28] ? wq_worker_running+0x97/0x190 [ 292.357154][ T28] worker_thread+0xa47/0x1200 [ 292.367439][ T28] kthread+0x28d/0x320 [ 292.373856][ T28] ? worker_clr_flags+0x190/0x190 [ 292.378891][ T28] ? kthread_blkcg+0xd0/0xd0 [ 292.389153][ T28] ret_from_fork+0x1f/0x30 [ 292.395938][ T28] [ 292.399080][ T28] [ 292.399080][ T28] Showing all locks held in the system: [ 292.415553][ T28] 1 lock held by rcu_tasks_kthre/12: [ 292.427048][ T28] #0: ffffffff8d12af10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 292.438336][ T28] 1 lock held by rcu_tasks_trace/13: [ 292.446035][ T28] #0: ffffffff8d12b710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 292.487359][ T28] 2 locks held by kworker/1:0/22: [ 292.492697][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 292.526325][ T28] #1: ffffc900001c7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 292.567680][ T28] 1 lock held by khungtaskd/28: [ 292.580367][ T28] #0: ffffffff8d12ad40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 292.600314][ T28] 2 locks held by getty/3302: [ 292.615443][ T28] #0: ffff88814b59b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 292.642080][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 292.660256][ T28] 4 locks held by kworker/u4:13/3839: [ 292.665643][ T28] #0: ffff88801464e138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 292.677828][ T28] #1: ffffc900050e7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 292.689915][ T28] #2: ffff888077c360e0 (&type->s_umount_key#74){.+.+}-{3:3}, at: trylock_super+0x1b/0xf0 [ 292.710315][ T28] #3: ffff88805e633008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 [ 292.726445][ T28] 3 locks held by syz.1.87/3891: [ 292.740229][ T28] #0: ffff88807e3650b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 292.752572][ T28] #1: ffff88807e364078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 292.770263][ T28] #2: ffffffff8e3f0f48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 292.790230][ T28] 3 locks held by kworker/1:13/4678: [ 292.795514][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 292.805890][ T28] #1: ffffc90014e47d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 292.815626][ T28] #2: ffffffff8d130338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 292.835410][ T28] 4 locks held by syz.3.392/5115: [ 292.842740][ T28] 2 locks held by syz.0.832/6443: [ 292.847765][ T28] #0: ffff888077c360e0 (&type->s_umount_key#74){.+.+}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 292.867215][ T28] #1: ffff88814374e7d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x270/0xb10 [ 292.885413][ T28] 2 locks held by syz-executor/6565: [ 292.892756][ T28] #0: ffff888076eed0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 292.902959][ T28] #1: ffff888076eec078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 292.912730][ T28] 4 locks held by syz-executor/6651: [ 292.920170][ T28] #0: ffff888050d210b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 292.938846][ T28] #1: ffff888050d20078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 292.958616][ T28] #2: ffffffff8e3f0f48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 292.968742][ T28] #3: ffffffff8d130338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 292.989215][ T28] 3 locks held by syz.2.1332/7992: [ 292.995030][ T28] #0: ffff8880768210b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 293.012489][ T28] #1: ffff888076820078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 293.026395][ T28] #2: ffffffff8e3f0f48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 293.038301][ T28] 3 locks held by syz.3.1334/7996: [ 293.043530][ T28] #0: ffff88807ad510b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 293.057729][ T28] #1: ffff88807ad50078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 293.067497][ T28] #2: ffffffff8e3f0f48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 293.084887][ T28] [ 293.087224][ T28] ============================================= [ 293.087224][ T28] [ 293.114352][ T28] NMI backtrace for cpu 0 [ 293.118702][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.100-syzkaller #0 [ 293.126597][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 293.136655][ T28] Call Trace: [ 293.139930][ T28] [ 293.142855][ T28] dump_stack_lvl+0x1e3/0x2cb [ 293.147541][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 293.153003][ T28] ? panic+0x764/0x764 [ 293.157069][ T28] ? vprintk_emit+0x622/0x740 [ 293.161749][ T28] ? printk_sprint+0x490/0x490 [ 293.166516][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 293.171635][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 293.176583][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 293.182740][ T28] ? _printk+0xd1/0x111 [ 293.186893][ T28] ? panic+0x764/0x764 [ 293.190959][ T28] ? __wake_up_klogd+0xcc/0x100 [ 293.195807][ T28] ? panic+0x764/0x764 [ 293.199879][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 293.205950][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 293.212030][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 293.218017][ T28] watchdog+0xf88/0xfd0 [ 293.222184][ T28] ? watchdog+0x1f8/0xfd0 [ 293.226518][ T28] kthread+0x28d/0x320 [ 293.230582][ T28] ? hungtask_pm_notify+0x50/0x50 [ 293.235610][ T28] ? kthread_blkcg+0xd0/0xd0 [ 293.240200][ T28] ret_from_fork+0x1f/0x30 [ 293.244631][ T28] [ 293.248664][ T28] Sending NMI from CPU 0 to CPUs 1: [ 293.254252][ C1] NMI backtrace for cpu 1 [ 293.254262][ C1] CPU: 1 PID: 5115 Comm: syz.3.392 Not tainted 6.1.100-syzkaller #0 [ 293.254277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 293.254286][ C1] RIP: 0010:dtSplitRoot+0x89b/0x1920 [ 293.254311][ C1] Code: 00 00 00 4c 8b 64 24 10 0f 84 aa 00 00 00 49 8d 5c 24 13 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 05 0f 00 00 44 88 3b <49> 0f be df 0f b6 f3 bf ff 00 00 00 e8 b4 ed 82 fe 84 db 78 44 e8 [ 293.254324][ C1] RSP: 0018:ffffc90004f67020 EFLAGS: 00000246 [ 293.254337][ C1] RAX: ffffffff8307af5a RBX: ffff88805e9b7000 RCX: 0000000000040000 [ 293.254349][ C1] RDX: ffffc9000a49a000 RSI: 000000000003ffff RDI: 0000000000040000 [ 293.254358][ C1] RBP: ffffc90004f67210 R08: ffffffff8307af2c R09: ffffed100bd36e24 [ 293.254369][ C1] R10: 0000000000000004 R11: dffffc0000000001 R12: ffff88805e9b7000 [ 293.254379][ C1] R13: dffffc0000000000 R14: ffff88805e633270 R15: 0000000000000000 [ 293.254394][ C1] FS: 00007f18c0de96c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 293.254407][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.254418][ C1] CR2: 000000002004d000 CR3: 000000007b715000 CR4: 00000000003526e0 [ 293.254430][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.254438][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.254447][ C1] Call Trace: [ 293.254452][ C1] [ 293.254457][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 293.254480][ C1] ? read_lock_is_recursive+0x10/0x10 [ 293.254503][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 293.254526][ C1] ? nmi_handle+0x25/0x440 [ 293.254555][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 293.254576][ C1] ? nmi_handle+0x12e/0x440 [ 293.254597][ C1] ? nmi_handle+0x25/0x440 [ 293.254618][ C1] ? dtSplitRoot+0x89b/0x1920 [ 293.254637][ C1] ? default_do_nmi+0x62/0x150 [ 293.254652][ C1] ? exc_nmi+0xa8/0x100 [ 293.254666][ C1] ? end_repeat_nmi+0x16/0x31 [ 293.254689][ C1] ? dtSplitRoot+0x8ac/0x1920 [ 293.254708][ C1] ? dtSplitRoot+0x8da/0x1920 [ 293.254728][ C1] ? dtSplitRoot+0x89b/0x1920 [ 293.254748][ C1] ? dtSplitRoot+0x89b/0x1920 [ 293.254768][ C1] ? dtSplitRoot+0x89b/0x1920 [ 293.254788][ C1] [ 293.254792][ C1] [ 293.254810][ C1] ? dtModify+0x5c0/0x5c0 [ 293.254829][ C1] ? dbNextAG+0x630/0x630 [ 293.254853][ C1] dtInsert+0x12f6/0x6b00 [ 293.254880][ C1] ? __lock_acquire+0x125b/0x1f80 [ 293.254909][ C1] ? UniStrupr+0x2c0/0x2c0 [ 293.254931][ C1] ? txLock+0x2b1/0x21a0 [ 293.254945][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 293.254964][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 293.254982][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 293.255019][ C1] jfs_create+0x7b2/0xbb0 [ 293.255039][ C1] ? jfs_lookup+0x400/0x400 [ 293.255055][ C1] ? jfs_get_parent+0xa0/0xa0 [ 293.255081][ C1] ? make_kgid+0x6f0/0x6f0 [ 293.255099][ C1] ? generic_permission+0x21c/0x4f0 [ 293.255119][ C1] ? inode_permission+0xf7/0x450 [ 293.255133][ C1] ? bpf_lsm_inode_create+0x5/0x10 [ 293.255148][ C1] ? security_inode_create+0xb4/0x100 [ 293.255170][ C1] ? jfs_lookup+0x400/0x400 [ 293.255186][ C1] path_openat+0x12f1/0x2e60 [ 293.255218][ C1] ? do_filp_open+0x480/0x480 [ 293.255244][ C1] do_filp_open+0x230/0x480 [ 293.255262][ C1] ? vfs_tmpfile+0x4a0/0x4a0 [ 293.255290][ C1] ? _raw_spin_unlock+0x24/0x40 [ 293.255307][ C1] ? alloc_fd+0x59c/0x640 [ 293.255325][ C1] do_sys_openat2+0x13b/0x4f0 [ 293.255348][ C1] ? do_sys_open+0x220/0x220 [ 293.255375][ C1] __x64_sys_openat+0x243/0x290 [ 293.255401][ C1] ? __ia32_sys_open+0x270/0x270 [ 293.255423][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 293.255440][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 293.255457][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 293.255475][ C1] do_syscall_64+0x3b/0xb0 [ 293.255495][ C1] ? clear_bhb_loop+0x45/0xa0 [ 293.255515][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.255535][ C1] RIP: 0033:0x7f18bff75f19 [ 293.255553][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.255565][ C1] RSP: 002b:00007f18c0de9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.255579][ C1] RAX: ffffffffffffffda RBX: 00007f18c0106038 RCX: 00007f18bff75f19 [ 293.255590][ C1] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 293.255600][ C1] RBP: 00007f18bffe4e68 R08: 0000000000000000 R09: 0000000000000000 [ 293.255608][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.255617][ C1] R13: 000000000000006e R14: 00007f18c0106038 R15: 00007ffeed6d9878 [ 293.255635][ C1] [ 293.425002][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 293.425018][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.100-syzkaller #0 [ 293.425037][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 293.425047][ T28] Call Trace: [ 293.425053][ T28] [ 293.425059][ T28] dump_stack_lvl+0x1e3/0x2cb [ 293.425089][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 293.425111][ T28] ? panic+0x764/0x764 [ 293.425142][ T28] ? vscnprintf+0x59/0x80 [ 293.425161][ T28] panic+0x318/0x764 [ 293.425180][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 293.425203][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 293.425223][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 293.425244][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 293.425267][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 293.425291][ T28] watchdog+0xfc7/0xfd0 [ 293.425315][ T28] ? watchdog+0x1f8/0xfd0 [ 293.425337][ T28] kthread+0x28d/0x320 [ 293.425351][ T28] ? hungtask_pm_notify+0x50/0x50 [ 293.425368][ T28] ? kthread_blkcg+0xd0/0xd0 [ 293.425383][ T28] ret_from_fork+0x1f/0x30 [ 293.425414][ T28] [ 293.425940][ T28] Kernel Offset: disabled [ 293.868409][ T28] Rebooting in 86400 seconds..