last executing test programs: 7m7.000968659s ago: executing program 1 (id=80): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000280)=""/249, 0xf9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 7m3.851718489s ago: executing program 1 (id=85): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m59.240794771s ago: executing program 1 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b", 0xcf}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 6m58.64258806s ago: executing program 1 (id=95): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 6m54.088505584s ago: executing program 1 (id=108): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x8, 0x2}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x108, 0x100, 0x80, 0x4000}}) 6m48.053317661s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c40)=""/102376, 0x18fe8) shmctl$IPC_RMID(0x0, 0x0) 6m32.708743518s ago: executing program 32 (id=118): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c40)=""/102376, 0x18fe8) shmctl$IPC_RMID(0x0, 0x0) 3m12.833352873s ago: executing program 5 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$full(0xffffffffffffff9c, 0x0, 0x8140, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x5) r3 = io_uring_setup(0x348e, &(0x7f00000000c0)={0x0, 0xec16, 0x8, 0x1004000, 0x1f2}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x58, 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) timer_create(0x0, 0x0, 0x0) 3m11.396421707s ago: executing program 5 (id=448): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900"}) close_range(r4, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt(r5, 0x84, 0x7d, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007500)=[{{0x0, 0x0, 0x0}, 0x7}, {{}, 0x4}], 0x2, 0x2000000022, 0x0) 3m10.02204304s ago: executing program 5 (id=450): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r0, 0x1) sendto$packet(r1, &(0x7f00000001c0)='(', 0x1, 0x4091, 0x0, 0x0) 2m59.979259609s ago: executing program 5 (id=464): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_nanosleep(0x2, 0xfcfd, &(0x7f0000000040)={0x0, 0x989680}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000140)={0x23, 0x37, 0x2, {0x2, 0x1, 0x0, r0, 0x5, '\xaa\xaa\xaa\xaa\xaa'}}, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket(0x1, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2m57.472025089s ago: executing program 5 (id=468): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_nanosleep(0x2, 0xfcfd, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 2m54.57968038s ago: executing program 2 (id=471): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900"}) close_range(r3, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt(r4, 0x84, 0x7d, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0xfffffffc, 0x0, 0x0, 0xaffffffa) 2m51.166825866s ago: executing program 2 (id=476): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "305be7ad", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 2m46.696752122s ago: executing program 5 (id=481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) 2m46.123082878s ago: executing program 2 (id=483): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.125264216s ago: executing program 2 (id=484): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x5, 0x6}]}, 0x10) syz_emit_ethernet(0xf6, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8490081003f008848"], 0x0) 2m41.834518669s ago: executing program 2 (id=487): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 2m35.313367767s ago: executing program 2 (id=493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "305be7ad", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 2m29.787697246s ago: executing program 33 (id=481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) 2m19.106403322s ago: executing program 34 (id=493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "305be7ad", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 23.504916498s ago: executing program 0 (id=671): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) openat(0xffffffffffffff9c, 0x0, 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002000000"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 18.189802883s ago: executing program 0 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80), 0x12) 14.536911277s ago: executing program 0 (id=685): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = fsopen(&(0x7f00000003c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = timerfd_create(0x0, 0x800) timerfd_gettime(r4, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000003c0)=ANY=[], 0x49, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) 11.036507057s ago: executing program 4 (id=688): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) openat(0xffffffffffffff9c, 0x0, 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002000000"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 10.821329963s ago: executing program 0 (id=689): prctl$PR_SET_SECUREBITS(0x1c, 0x15) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000000c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES32, @ANYBLOB="101500000000", @ANYRES8, @ANYRES64, @ANYRES64], 0x1, 0x6f8, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xa54, 0x121000) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x10) sendmmsg(r5, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)="a6f2d136c0725ab2d673cfe4a6d95537cbb87f8345528afa752f63809cf9fcb102a28219477ba5408e1070b6602c0a58c91590ee0816caf5dbcfecf8ae71a80e369806cadc93e9c477a9813aeda86b0d4b2b1ddf65b2", 0x56}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071183e000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 9.9529056s ago: executing program 3 (id=690): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6ee, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r2, &(0x7f00000102c0)={0x2020}, 0x2020) ftruncate(0xffffffffffffffff, 0x200004) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 8.710040773s ago: executing program 3 (id=691): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x7, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0xff}, 0x20) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2d00000037020002070000000000000002000000000000000de99d0e2b8271598f862d9b14501121089e80f46456b0c6c03ca237119e7ffde0e3916bd9849d138efb1083c8961243cda517ba45e24aa6ef881376fde718e9f309e45039fd34f85e4bc98c41279752c4896af4ea987fb036a05eace1f188e8f2", @ANYRES32=0x0, @ANYRES64], 0x2d) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7.574280254s ago: executing program 3 (id=692): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x18000000) 5.386166643s ago: executing program 3 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80), 0x12) 5.292543813s ago: executing program 4 (id=694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000004c0)={r5, 0x0, 0x0, 0x0, 0x0, [], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000540)={0x0, r3, r5, 0x0, 0x0, 0x0, &(0x7f0000000500)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) unshare(0x60400) r8 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000080)={0x9, {0x40, 0x80003, 0x8d0, 0x300}}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x4001c59) 4.287198272s ago: executing program 3 (id=695): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000001c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.215430791s ago: executing program 0 (id=696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000005}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd9c, &(0x7f0000000180)=0x1400200bee) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) waitid(0x2, 0x0, &(0x7f0000000100), 0x1000000, &(0x7f0000000600)) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = accept4(r3, 0x0, 0x0, 0x80800) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x400c880}, 0x4040000) 4.057884146s ago: executing program 4 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x9100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10c42, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 1.968590275s ago: executing program 4 (id=698): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba09"], 0x208}, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x5, 0x0, 0x0) 1.0593783s ago: executing program 4 (id=699): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6ee, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r2, &(0x7f00000102c0)={0x2020}, 0x2020) ftruncate(0xffffffffffffffff, 0x200004) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 955.212513ms ago: executing program 0 (id=700): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x4010, &(0x7f0000000580)=ANY=[], 0x12, 0xc49, &(0x7f0000001cc0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c8301f001b0001"], 0x24) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 138.485993ms ago: executing program 3 (id=701): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x18, &(0x7f0000001540)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f00002d5000/0x1000)=nil) 0s ago: executing program 4 (id=702): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) openat(0xffffffffffffff9c, 0x0, 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002000000"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) kernel console output (not intermixed with test programs): ve interface with an up link [ 100.798427][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.866915][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.866930][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.866950][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.923191][ T5624] team0: Port device team_slave_0 added [ 100.965170][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.965184][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.965203][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.025425][ T5624] team0: Port device team_slave_1 added [ 101.029357][ T5621] team0: Port device team_slave_0 added [ 101.045435][ T5625] team0: Port device team_slave_0 added [ 101.069442][ T5622] team0: Port device team_slave_0 added [ 101.097062][ T5621] team0: Port device team_slave_1 added [ 101.112899][ T5631] Bluetooth: hci2: command tx timeout [ 101.191284][ T5631] Bluetooth: hci0: command tx timeout [ 101.191321][ T5631] Bluetooth: hci1: command tx timeout [ 101.271195][ T5633] Bluetooth: hci3: command tx timeout [ 101.271234][ T5633] Bluetooth: hci4: command tx timeout [ 101.455730][ T5625] team0: Port device team_slave_1 added [ 101.462534][ T5622] team0: Port device team_slave_1 added [ 101.559845][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.559859][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.559878][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.666395][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.666408][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.666428][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.669983][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.669996][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.670015][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.723308][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.723327][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.723357][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.818968][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.818982][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.819001][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.869034][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.869046][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.869067][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.921143][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.921160][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.921185][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.980471][ T5623] hsr_slave_0: entered promiscuous mode [ 101.987569][ T5623] hsr_slave_1: entered promiscuous mode [ 101.994045][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.994062][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.994092][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.287726][ T5624] hsr_slave_0: entered promiscuous mode [ 102.289518][ T5624] hsr_slave_1: entered promiscuous mode [ 102.292444][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 102.303342][ T5624] Cannot create hsr debugfs directory [ 102.395246][ T5621] hsr_slave_0: entered promiscuous mode [ 102.397151][ T5621] hsr_slave_1: entered promiscuous mode [ 102.398623][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 102.398648][ T5621] Cannot create hsr debugfs directory [ 102.429068][ T5625] hsr_slave_0: entered promiscuous mode [ 102.430888][ T5625] hsr_slave_1: entered promiscuous mode [ 102.444048][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 102.444070][ T5625] Cannot create hsr debugfs directory [ 102.477920][ T5622] hsr_slave_0: entered promiscuous mode [ 102.479722][ T5622] hsr_slave_1: entered promiscuous mode [ 102.482989][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 102.483016][ T5622] Cannot create hsr debugfs directory [ 103.191162][ T5631] Bluetooth: hci2: command tx timeout [ 103.271264][ T5631] Bluetooth: hci1: command tx timeout [ 103.271300][ T5633] Bluetooth: hci0: command tx timeout [ 103.351303][ T5631] Bluetooth: hci3: command tx timeout [ 103.351343][ T5633] Bluetooth: hci4: command tx timeout [ 103.629430][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.687421][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.702438][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.742744][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.746209][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.776980][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.809758][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.837983][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.033995][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.066009][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.070467][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.108866][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.119783][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.148326][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.186396][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.206483][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.374972][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.419019][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.434395][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.477066][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.491475][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.538970][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.590714][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.645040][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.869926][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.898402][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.922691][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.967374][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.989341][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.019524][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.056801][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.089129][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.239760][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.271426][ T5633] Bluetooth: hci2: command tx timeout [ 105.318001][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.353753][ T5633] Bluetooth: hci1: command tx timeout [ 105.353791][ T5633] Bluetooth: hci0: command tx timeout [ 105.376774][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.395711][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.431724][ T5631] Bluetooth: hci3: command tx timeout [ 105.431761][ T5631] Bluetooth: hci4: command tx timeout [ 105.459958][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.476153][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.505551][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.525573][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.566088][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.633878][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.704710][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.704902][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.743187][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.828564][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.828708][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.979671][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.054133][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.056412][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.056581][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.139179][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.139352][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.240282][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.337754][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.337869][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.364043][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.447375][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.448091][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.613543][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.657039][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.676663][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.676845][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.785007][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.785195][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.957919][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.054269][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.054534][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.161144][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.161351][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.454088][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.056754][ T5623] veth0_vlan: entered promiscuous mode [ 108.163054][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.207076][ T5623] veth1_vlan: entered promiscuous mode [ 108.639962][ T5623] veth0_macvtap: entered promiscuous mode [ 108.763568][ T5623] veth1_macvtap: entered promiscuous mode [ 108.847676][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.886637][ T5621] veth0_vlan: entered promiscuous mode [ 108.936821][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.988818][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.004545][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.005941][ T5621] veth1_vlan: entered promiscuous mode [ 109.071743][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.190619][ T3383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.229324][ T3383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.257079][ T3383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.296002][ T3383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.646183][ T5621] veth0_macvtap: entered promiscuous mode [ 109.729702][ T5625] veth0_vlan: entered promiscuous mode [ 109.758638][ T5621] veth1_macvtap: entered promiscuous mode [ 109.887917][ T5622] veth0_vlan: entered promiscuous mode [ 109.924703][ T5625] veth1_vlan: entered promiscuous mode [ 109.959925][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.959948][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.049066][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.077774][ T5622] veth1_vlan: entered promiscuous mode [ 110.147859][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.184967][ T5624] veth0_vlan: entered promiscuous mode [ 110.212426][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.212448][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.263846][ T171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.269908][ T171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.280358][ T171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.316791][ T171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.364829][ T5624] veth1_vlan: entered promiscuous mode [ 110.477476][ T5625] veth0_macvtap: entered promiscuous mode [ 110.559275][ T5625] veth1_macvtap: entered promiscuous mode [ 110.605351][ T5622] veth0_macvtap: entered promiscuous mode [ 110.754254][ T5622] veth1_macvtap: entered promiscuous mode [ 111.110840][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.201029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.221014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.231022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.241007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.251009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.261006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.271011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.281021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.291019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.301007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.498377][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.498394][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.604720][ T5624] veth0_macvtap: entered promiscuous mode [ 113.638006][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.667642][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.734062][ T5624] veth1_macvtap: entered promiscuous mode [ 113.780729][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.790311][ T3429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.860159][ T3429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.884383][ T3429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.919189][ T3429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.947864][ T1493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.947931][ T1493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.961879][ T3429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.007664][ T1504] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.133148][ T1504] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.163390][ T1504] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.203592][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.639684][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.730413][ T5818] loop2: detected capacity change from 0 to 164 [ 115.305143][ T1319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.322440][ T1319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.382975][ T1319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.513320][ T1319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.626848][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.626868][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.726402][ T5827] Illegal XDP return value 4294967283 on prog (id 2) dev N/A, expect packet loss! [ 119.986993][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.987014][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.643793][ T5846] capability: warning: `syz.2.13' uses deprecated v2 capabilities in a way that may be insecure [ 123.876667][ T2185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.876689][ T2185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.043235][ T5858] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15'. [ 124.093982][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.094002][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.178923][ T5854] nvme_fabrics: missing parameter 'transport=%s' [ 124.178941][ T5854] nvme_fabrics: missing parameter 'nqn=%s' [ 124.476226][ T5862] process 'syz.1.17' launched './file0' with NULL argv: empty string added [ 124.546593][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.546614][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.973342][ T5865] loop0: detected capacity change from 0 to 1024 [ 125.016915][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.016938][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.032064][ T5865] hfsplus: invalid btree flag [ 125.035400][ T5865] hfsplus: failed to load catalog file [ 125.173964][ T5868] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.561659][ T5865] syz.0.1 (5865) used greatest stack depth: 18008 bytes left [ 127.440145][ T5882] loop0: detected capacity change from 0 to 1024 [ 127.454086][ T5882] hfsplus: Bad value for 'session' [ 129.174692][ T5900] syzkaller0: entered promiscuous mode [ 129.174738][ T5900] syzkaller0: entered allmulticast mode [ 129.685301][ T5730] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.181081][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 131.349712][ T5730] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.349764][ T5730] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 131.349781][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.511345][ T5730] usb 1-1: config 0 descriptor?? [ 133.637339][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.637478][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.845297][ T5760] usb 1-1: USB disconnect, device number 2 [ 135.067834][ T5911] loop0: detected capacity change from 0 to 512 [ 135.693925][ T5911] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.28: bg 0: block 393: padding at end of block bitmap is not set [ 135.694118][ T5911] loop0: lost filesystem error report for type 5 error -117 [ 135.701173][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 135.701194][ C1] EXT4-fs (loop0): initial error at time 1778022645: ext4_validate_block_bitmap:441 [ 135.701233][ C1] EXT4-fs (loop0): last error at time 1778022645: ext4_validate_block_bitmap:441 [ 135.874013][ T5911] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 135.874040][ T5911] loop0: lost filesystem error report for type 5 error -117 [ 135.920606][ T5911] EXT4-fs (loop0): 2 truncates cleaned up [ 136.020686][ T5911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.109721][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 139.050738][ T5926] loop3: detected capacity change from 0 to 128 [ 139.103874][ T5926] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 139.147344][ T5926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.815456][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.045498][ T5930] binder: BINDER_SET_CONTEXT_MGR already set [ 140.045513][ T5930] binder: 5929:5930 ioctl 4018620d 200000000040 returned -16 [ 141.923325][ T5938] loop3: detected capacity change from 0 to 1024 [ 141.959908][ T5938] hfsplus: Bad value for 'session' [ 145.620082][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.26'. [ 145.673036][ T5960] nvme_fabrics: missing parameter 'transport=%s' [ 145.673054][ T5960] nvme_fabrics: missing parameter 'nqn=%s' [ 145.713773][ T5851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 146.485887][ T5969] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.945698][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 148.468110][ T5851] usb 2-1: device descriptor read/all, error -71 [ 148.864756][ T5981] loop3: detected capacity change from 0 to 128 [ 149.362353][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 149.586955][ T5981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.617179][ T6021] netlink: 44 bytes leftover after parsing attributes in process `syz.3.52'. [ 156.698096][ T6019] nvme_fabrics: missing parameter 'transport=%s' [ 156.698109][ T6019] nvme_fabrics: missing parameter 'nqn=%s' [ 156.918721][ T6032] loop1: detected capacity change from 0 to 512 [ 156.986115][ T6032] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.986137][ T6032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.308203][ T6037] binder: 6035:6037 ioctl c0306201 200000000080 returned -14 [ 157.352578][ T6036] binder: 6035:6036 ioctl c0306201 2000000003c0 returned -14 [ 157.523053][ T6032] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 157.574225][ T6032] EXT4-fs (loop1): 1 truncate cleaned up [ 157.609696][ T6032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.761062][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.963612][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.963641][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.963680][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 157.963712][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.232533][ T9] usb 5-1: config 0 descriptor?? [ 160.293280][ T6058] loop3: detected capacity change from 0 to 128 [ 160.616398][ T5974] usb 5-1: USB disconnect, device number 2 [ 161.031458][ T6069] loop0: detected capacity change from 0 to 128 [ 161.915849][ T6069] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 161.946693][ T6066] loop4: detected capacity change from 0 to 256 [ 161.996872][ T6069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.300103][ T6066] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 164.713001][ T6093] netlink: 44 bytes leftover after parsing attributes in process `syz.4.70'. [ 164.880908][ T6091] nvme_fabrics: missing parameter 'transport=%s' [ 164.883998][ T6091] nvme_fabrics: missing parameter 'nqn=%s' [ 164.893233][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.855749][ T6129] loop0: detected capacity change from 0 to 128 [ 169.912756][ T6129] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 170.449493][ T6129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.977613][ T6132] loop3: detected capacity change from 0 to 512 [ 171.021797][ T6132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.107622][ T6132] EXT4-fs (loop3): 1 truncate cleaned up [ 171.635243][ T6140] loop0: detected capacity change from 0 to 2048 [ 171.636245][ T6140] ======================================================= [ 171.636245][ T6140] WARNING: The mand mount option has been deprecated and [ 171.636245][ T6140] and is ignored by this kernel. Remove the mand [ 171.636245][ T6140] option from the mount to silence this warning. [ 171.636245][ T6140] ======================================================= [ 171.636375][ T6140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.650198][ T6132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.119156][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 172.119222][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 172.120638][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 172.120655][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 172.121103][ T6135] Zero length message leads to an empty skb [ 172.240018][ T6140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.644150][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.859909][ T5760] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 174.165362][ T5760] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 174.165392][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.165412][ T5760] usb 2-1: Product: syz [ 174.165426][ T5760] usb 2-1: Manufacturer: syz [ 174.165440][ T5760] usb 2-1: SerialNumber: syz [ 174.214345][ T5760] usb 2-1: config 0 descriptor?? [ 177.799335][ T6185] loop0: detected capacity change from 0 to 128 [ 178.572831][ T5760] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 178.573044][ T5760] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 178.583291][ T6185] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 178.773872][ T6185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.815102][ T5760] usb 2-1: USB disconnect, device number 4 [ 179.370359][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.383775][ T5760] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 179.551463][ T5760] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.551493][ T5760] usb 2-1: config 0 has no interface number 0 [ 179.551543][ T5760] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 179.551584][ T5760] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 179.551627][ T5760] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.551651][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.764319][ T5760] usb 2-1: config 0 descriptor?? [ 179.780800][ T6188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.964753][ T6208] overlayfs: failed to resolve './bus': -2 [ 180.938769][ T5760] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 181.305770][ T5760] usb 2-1: USB disconnect, device number 5 [ 182.391687][ T6230] loop0: detected capacity change from 0 to 128 [ 183.315309][ T6230] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 183.420529][ T6230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.820584][ T6233] loop1: detected capacity change from 0 to 512 [ 183.912956][ T6233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.023804][ T6233] EXT4-fs (loop1): 1 truncate cleaned up [ 184.127032][ T6233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.531100][ T5761] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.736145][ T5761] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 184.736208][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.736238][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.736262][ T5761] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.736306][ T5761] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.736346][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.894828][ T5761] usb 1-1: config 0 descriptor?? [ 185.413063][ T5761] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.413104][ T5761] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.413133][ T5761] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.413161][ T5761] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.413188][ T5761] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.413216][ T5761] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 186.171028][ T5761] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 186.272338][ T5761] usb 1-1: USB disconnect, device number 3 [ 186.411201][ T6244] fido_id[6244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 187.088543][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 187.088559][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 187.174335][ T5349] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 187.227737][ T6249] all (unregistering): Released all slaves [ 187.321052][ T5349] usb 1-1: Using ep0 maxpacket: 32 [ 187.323079][ T5349] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 187.323098][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.371729][ T5349] usb 1-1: config 0 descriptor?? [ 187.485638][ T5349] gspca_main: sq930x-2.14.0 probing 041e:403c [ 187.555816][ T6258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.112'. [ 187.623653][ T5349] gspca_sq930x: reg_r 001f failed -32 [ 187.623798][ T5349] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 188.265608][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.797037][ T6288] loop2: detected capacity change from 0 to 128 [ 190.827136][ T6288] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 190.869731][ T6288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.767953][ T37] usb 1-1: USB disconnect, device number 4 [ 194.928512][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.928627][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.400718][ T6340] loop2: detected capacity change from 0 to 128 [ 200.148569][ T6319] all (unregistering): Released all slaves [ 200.190618][ T6340] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 200.518086][ T6340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.562429][ T6335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.675607][ T5974] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 201.845763][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 201.848845][ T5974] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 201.848879][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.863951][ T5851] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 202.069384][ T5974] usb 5-1: config 0 descriptor?? [ 202.094544][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 203.351405][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.351443][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.351502][ T5851] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 203.351528][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.409788][ T5851] usb 3-1: config 0 descriptor?? [ 203.577932][ T5974] gspca_main: sq930x-2.14.0 probing 041e:403c [ 203.604566][ T5974] gspca_sq930x: reg_r 001f failed -32 [ 203.604679][ T5974] sq930x 5-1:0.0: probe with driver sq930x failed with error -32 [ 205.196994][ T5851] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 205.197031][ T5851] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 205.206604][ T5737] usb 5-1: USB disconnect, device number 3 [ 205.299667][ T5851] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 205.309940][ T5851] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 205.323806][ T5851] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 205.329968][ T5851] ft260 0003:0403:6030.0002: failed to retrieve status: -5 [ 205.563446][ T5851] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 207.813215][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.848655][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.860045][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.897754][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.907597][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.076571][ T5851] usb 3-1: USB disconnect, device number 2 [ 211.180030][ T6379] syz.3.142 (6379): drop_caches: 2 [ 211.206085][ T5633] Bluetooth: hci5: command tx timeout [ 212.989920][ T6400] loop3: detected capacity change from 0 to 128 [ 213.240577][ T6400] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.276343][ T5633] Bluetooth: hci5: command tx timeout [ 213.298312][ T6400] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.655156][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 213.826606][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.826641][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.903960][ T9] usb 3-1: config 0 descriptor?? [ 214.027006][ T9] cp210x 3-1:0.0: cp210x converter detected [ 214.339439][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 214.359427][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.430145][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.453264][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 214.592685][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 214.860387][ T9] usb 3-1: USB disconnect, device number 3 [ 215.057402][ T6414] nvme_fabrics: missing parameter 'transport=%s' [ 215.057420][ T6414] nvme_fabrics: missing parameter 'nqn=%s' [ 215.175156][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.267337][ T9] cp210x 3-1:0.0: device disconnected [ 215.271201][ T3330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.355135][ T5633] Bluetooth: hci5: command tx timeout [ 215.724011][ T6417] netlink: 44 bytes leftover after parsing attributes in process `syz.4.139'. [ 215.825292][ T6422] syzkaller0: entered promiscuous mode [ 215.825323][ T6422] syzkaller0: entered allmulticast mode [ 216.056618][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 216.221629][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 216.230011][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.230047][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.230088][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 216.230114][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.315213][ T9] usb 3-1: config 0 descriptor?? [ 216.789817][ T9] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 216.789943][ T9] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 216.839113][ T3330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.987053][ T9] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 217.018265][ T5622] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.202005][ T9] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 217.432858][ T5633] Bluetooth: hci5: command tx timeout [ 217.434364][ T9] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 217.935987][ T9] usb 3-1: USB disconnect, device number 4 [ 219.416785][ T6441] syz.0.154 (6441): drop_caches: 2 [ 220.160814][ T3330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.946883][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 222.947028][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 222.947126][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 222.950815][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 223.708645][ T3330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.861089][ T5761] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 225.518488][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 225.558596][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.558623][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.558653][ T5761] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 225.558671][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.633555][ T5761] usb 1-1: config 0 descriptor?? [ 226.454234][ T6493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'. [ 226.488684][ T5761] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 226.488727][ T5761] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 226.624785][ T5761] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 226.826637][ T5761] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 227.030504][ T5761] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 230.417782][ T5761] usb 1-1: USB disconnect, device number 5 [ 234.535875][ T6549] input: syz1 as /devices/virtual/input/input5 [ 235.358903][ T3330] bridge_slave_1: left allmulticast mode [ 235.359832][ T3330] bridge_slave_1: left promiscuous mode [ 235.420891][ T3330] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.610672][ T5760] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 235.787806][ T3330] bridge_slave_0: left allmulticast mode [ 235.787964][ T3330] bridge_slave_0: left promiscuous mode [ 235.824036][ T3330] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.936974][ T5760] usb 5-1: device descriptor read/64, error -71 [ 238.361037][ T5760] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 238.545955][ T5760] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 238.545987][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.611283][ T5760] usb 5-1: config 0 descriptor?? [ 238.676444][ T5760] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 239.681753][ T6582] syz.2.190 uses obsolete (PF_INET,SOCK_PACKET) [ 239.729792][ T5760] usb 5-1: USB disconnect, device number 5 [ 240.764329][ T5760] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.935618][ T5760] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.935647][ T5760] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.935668][ T5760] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.935718][ T5760] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.935745][ T5760] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.939285][ T5760] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.939393][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.939415][ T5760] usb 5-1: Product: syz [ 240.939430][ T5760] usb 5-1: Manufacturer: syz [ 241.075329][ T6594] loop3: detected capacity change from 0 to 8 [ 241.107306][ T5760] cdc_wdm 5-1:1.0: skipping garbage [ 241.107321][ T5760] cdc_wdm 5-1:1.0: skipping garbage [ 241.133928][ T5760] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 241.133977][ T5760] cdc_wdm 5-1:1.0: Unknown control protocol [ 241.297760][ T6590] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 241.308661][ T5637] usb 5-1: USB disconnect, device number 6 [ 241.358756][ T3330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.863096][ T3330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.907585][ T3330] bond0 (unregistering): Released all slaves [ 242.092276][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 242.766403][ T6602] nvme_fabrics: missing parameter 'transport=%s' [ 242.766420][ T6602] nvme_fabrics: missing parameter 'nqn=%s' [ 243.721803][ T5349] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 245.412931][ T5349] usb 4-1: Using ep0 maxpacket: 32 [ 247.253071][ T5349] usb 4-1: unable to read config index 0 descriptor/all [ 247.253121][ T5349] usb 4-1: can't read configurations, error -71 [ 249.355601][ T6626] binder: 6625:6626 ioctl c0306201 200000000080 returned -14 [ 249.396933][ T6604] netlink: 44 bytes leftover after parsing attributes in process `syz.0.194'. [ 249.414072][ T6626] binder: 6625:6626 ioctl c0306201 2000000003c0 returned -14 [ 249.446811][ T6628] loop4: detected capacity change from 0 to 128 [ 249.532436][ T6628] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.557369][ T6628] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 249.896573][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 250.680499][ T5624] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.472762][ T6648] syz.3.208 (6648) used greatest stack depth: 17784 bytes left [ 254.061059][ T5754] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 254.231175][ T5754] usb 3-1: Using ep0 maxpacket: 32 [ 254.237932][ T5754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.237954][ T5754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.237980][ T5754] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 254.237996][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.540617][ T5754] usb 3-1: config 0 descriptor?? [ 255.766325][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.766427][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.082160][ T5754] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 256.082197][ T5754] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 256.266771][ T5754] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 256.895610][ T5754] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 257.091480][ T5754] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 257.266973][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.267308][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.267628][ T6369] bridge_slave_0: entered allmulticast mode [ 257.321590][ T6369] bridge_slave_0: entered promiscuous mode [ 257.393962][ T5754] usb 3-1: USB disconnect, device number 5 [ 259.085240][ T3330] hsr_slave_0: left promiscuous mode [ 259.406763][ T3330] hsr_slave_1: left promiscuous mode [ 259.654287][ T3330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.654411][ T3330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.922122][ T3330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.922151][ T3330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.768575][ T3330] veth1_macvtap: left promiscuous mode [ 262.768821][ T3330] veth0_macvtap: left promiscuous mode [ 262.769512][ T3330] veth1_vlan: left promiscuous mode [ 262.769900][ T3330] veth0_vlan: left promiscuous mode [ 263.761617][ T5761] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 264.035718][ T5761] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 264.035748][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.104708][ T3330] team0 (unregistering): Port device team_slave_1 removed [ 264.150549][ T5761] usb 5-1: config 0 descriptor?? [ 264.168375][ T3330] team0 (unregistering): Port device team_slave_0 removed [ 264.390546][ T5761] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 265.484025][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.484382][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.484699][ T6369] bridge_slave_1: entered allmulticast mode [ 265.535041][ T6369] bridge_slave_1: entered promiscuous mode [ 266.896480][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.983168][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.994452][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.044958][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.049984][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.114536][ T5761] usb 5-1: USB disconnect, device number 7 [ 267.663381][ T5851] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 267.811079][ T5761] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 268.341753][ T5628] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 268.758645][ T5761] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.758675][ T5761] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.758695][ T5761] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.758748][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.758775][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.771179][ T5761] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.771209][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.771232][ T5761] usb 3-1: Product: syz [ 268.771247][ T5761] usb 3-1: Manufacturer: syz [ 268.842294][ T5761] cdc_wdm 3-1:1.0: skipping garbage [ 268.842314][ T5761] cdc_wdm 3-1:1.0: skipping garbage [ 268.843964][ T5628] usb 4-1: Using ep0 maxpacket: 32 [ 269.077008][ T5851] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 269.077032][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.077046][ T5851] usb 1-1: Product: syz [ 269.077056][ T5851] usb 1-1: Manufacturer: syz [ 269.077067][ T5851] usb 1-1: SerialNumber: syz [ 269.103961][ T5761] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 269.103984][ T5761] cdc_wdm 3-1:1.0: Unknown control protocol [ 269.123595][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.123629][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.123712][ T5628] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 269.123793][ T5628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.191084][ T5639] Bluetooth: hci0: command tx timeout [ 269.359702][ T5761] usb 3-1: USB disconnect, device number 6 [ 269.385164][ T5628] usb 4-1: config 0 descriptor?? [ 269.900513][ T5851] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 269.900582][ T5851] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 269.904183][ T5851] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 269.904344][ T5851] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 269.994382][ T5628] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 269.994417][ T5628] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 270.005863][ T5851] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 270.056383][ T5628] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 270.086635][ T5851] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 270.259546][ T5628] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 270.479514][ T5628] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 270.783771][ T5628] usb 4-1: USB disconnect, device number 4 [ 271.467555][ T5639] Bluetooth: hci0: command tx timeout [ 272.113511][ T5974] usb 1-1: USB disconnect, device number 6 [ 273.426728][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 274.348414][ T6781] input: syz1 as /devices/virtual/input/input7 [ 274.663117][ T5639] Bluetooth: hci0: command tx timeout [ 276.712459][ T5639] Bluetooth: hci0: command tx timeout [ 277.005414][ T3330] bridge_slave_1: left allmulticast mode [ 277.005440][ T3330] bridge_slave_1: left promiscuous mode [ 277.005716][ T3330] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.102689][ T3330] bridge_slave_0: left allmulticast mode [ 277.102714][ T3330] bridge_slave_0: left promiscuous mode [ 277.102980][ T3330] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.738345][ T3330] bond0 (unregistering): Released all slaves [ 279.701719][ T6816] loop3: detected capacity change from 0 to 1024 [ 279.833205][ T6816] hfsplus: Bad value for 'session' [ 280.081098][ T5754] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 282.335363][ T5754] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 282.335401][ T5754] usb 1-1: can't read configurations, error -71 [ 282.441482][ T5974] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 282.627072][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 282.630058][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.630101][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.630138][ T5974] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 282.681223][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.109487][ T5974] usb 5-1: config 0 descriptor?? [ 284.381138][ T5974] usbhid 5-1:0.0: can't add hid device: -71 [ 284.381248][ T5974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 284.458373][ T5974] usb 5-1: USB disconnect, device number 8 [ 284.735686][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 287.568329][ T6876] loop3: detected capacity change from 0 to 1024 [ 287.584326][ T6876] hfsplus: Bad value for 'session' [ 288.950533][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.959464][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.962793][ T6711] bridge_slave_0: entered allmulticast mode [ 289.011241][ T6711] bridge_slave_0: entered promiscuous mode [ 289.030526][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.031196][ T5349] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 289.034167][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.038136][ T6711] bridge_slave_1: entered allmulticast mode [ 289.074761][ T6711] bridge_slave_1: entered promiscuous mode [ 289.112995][ T5974] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 289.216417][ T5349] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 289.216448][ T5349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.216467][ T5349] usb 5-1: Product: syz [ 289.216482][ T5349] usb 5-1: Manufacturer: syz [ 289.216496][ T5349] usb 5-1: SerialNumber: syz [ 289.280988][ T5974] usb 4-1: Using ep0 maxpacket: 32 [ 289.289225][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.289259][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.289300][ T5974] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 289.289325][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.378220][ T5974] usb 4-1: config 0 descriptor?? [ 289.545162][ T6711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.583745][ T6711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.819379][ T5349] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 289.833637][ T5349] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 289.836335][ T5349] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 289.836392][ T5349] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 289.876200][ T5349] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 289.894875][ T5349] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 289.913524][ T5974] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 289.913564][ T5974] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 289.997190][ T6711] team0: Port device team_slave_0 added [ 290.015486][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 290.025842][ T5974] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 290.040687][ T6711] team0: Port device team_slave_1 added [ 290.227755][ T5974] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 290.413219][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.413236][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.413263][ T6711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.432367][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.432413][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.432495][ T6711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.518958][ T5974] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 290.740749][ T5761] usb 4-1: USB disconnect, device number 5 [ 290.872510][ T6711] hsr_slave_0: entered promiscuous mode [ 290.876843][ T6711] hsr_slave_1: entered promiscuous mode [ 290.895075][ T6711] debugfs: 'hsr0' already exists in 'hsr' [ 290.895099][ T6711] Cannot create hsr debugfs directory [ 292.143373][ T5974] usb 5-1: USB disconnect, device number 9 [ 294.445801][ T6940] loop4: detected capacity change from 0 to 1024 [ 294.458376][ T6940] hfsplus: Bad value for 'session' [ 296.921785][ T5349] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 297.111058][ T5349] usb 3-1: Using ep0 maxpacket: 32 [ 297.113274][ T5349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.113303][ T5349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.113344][ T5349] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 297.113366][ T5349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.188916][ T5349] usb 3-1: config 0 descriptor?? [ 297.610619][ T6711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.643964][ T5349] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 297.643998][ T5349] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 297.686669][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.688305][ T6711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.838234][ T5349] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 297.861424][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.894318][ T6711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.980679][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.999906][ T6711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.039244][ T5349] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 298.067387][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.240548][ T5349] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 298.504177][ T5628] usb 3-1: USB disconnect, device number 7 [ 298.632090][ T5349] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 298.770738][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.810294][ T5349] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 298.810326][ T5349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.810349][ T5349] usb 1-1: Product: syz [ 298.810364][ T5349] usb 1-1: Manufacturer: syz [ 298.810379][ T5349] usb 1-1: SerialNumber: syz [ 298.951690][ T6711] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.090636][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.111868][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.235362][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.235530][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.324818][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 299.324882][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 299.828990][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 299.829058][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 299.830142][ T5349] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 299.873143][ T5349] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 300.675976][ T6986] binder: 6985:6986 ioctl c0306201 200000000080 returned -14 [ 300.679228][ T6986] binder: 6985:6986 ioctl c0306201 2000000003c0 returned -14 [ 301.667680][ T7004] loop3: detected capacity change from 0 to 1024 [ 301.669084][ T7004] hfsplus: Bad value for 'session' [ 303.935710][ T138] usb 1-1: USB disconnect, device number 9 [ 304.197153][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.281307][ T5761] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 305.361688][ T5761] usb 4-1: Using ep0 maxpacket: 32 [ 305.364211][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.364242][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.364280][ T5761] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 305.364304][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.459079][ T5761] usb 4-1: config 0 descriptor?? [ 305.957094][ T5761] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 305.957127][ T5761] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 306.117701][ T5761] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 306.326028][ T5761] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 306.522144][ T5761] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 306.803091][ T5761] usb 4-1: USB disconnect, device number 6 [ 307.232329][ T6711] veth0_vlan: entered promiscuous mode [ 307.325199][ T6711] veth1_vlan: entered promiscuous mode [ 307.728358][ T6711] veth0_macvtap: entered promiscuous mode [ 307.878249][ T6711] veth1_macvtap: entered promiscuous mode [ 307.989521][ T7054] binder: 7053:7054 ioctl c0306201 200000000080 returned -14 [ 308.007531][ T7054] binder: 7053:7054 ioctl c0306201 2000000003c0 returned -14 [ 308.069060][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.288184][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.665294][ T1493] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.667713][ T1493] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.667762][ T1493] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.667801][ T1493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.287349][ T7065] loop4: detected capacity change from 0 to 1024 [ 309.326546][ T7065] hfsplus: Bad value for 'session' [ 311.213456][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.213479][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.231399][ T5637] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 312.401150][ T5637] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 312.401198][ T5637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.401220][ T5637] usb 5-1: Product: syz [ 312.401236][ T5637] usb 5-1: Manufacturer: syz [ 312.401252][ T5637] usb 5-1: SerialNumber: syz [ 313.101174][ T5637] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 313.101232][ T5637] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 313.343578][ T138] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 313.356272][ T1493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.356294][ T1493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.519188][ T138] usb 1-1: Using ep0 maxpacket: 32 [ 313.525477][ T5637] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 313.525672][ T5637] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 313.593962][ T138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.593997][ T138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.594036][ T138] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 313.594060][ T138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.611736][ T5637] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 313.667980][ T138] usb 1-1: config 0 descriptor?? [ 313.694467][ T5637] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 314.260697][ T7104] binder: 7102:7104 ioctl c0306201 200000000080 returned -14 [ 314.274023][ T138] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 314.274062][ T138] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 314.319393][ T7104] binder: BINDER_SET_CONTEXT_MGR already set [ 314.319405][ T7104] binder: 7102:7104 ioctl 4018620d 200000000040 returned -16 [ 314.319603][ T7104] binder: 7102:7104 ioctl c0306201 2000000003c0 returned -14 [ 314.355446][ T138] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 314.557053][ T138] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 314.638006][ T5637] usb 5-1: USB disconnect, device number 10 [ 314.759133][ T138] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 315.217022][ T138] usb 1-1: USB disconnect, device number 10 [ 315.265573][ T7118] loop4: detected capacity change from 0 to 1024 [ 315.333347][ T7118] hfsplus: Bad value for 'session' [ 317.202965][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.203088][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.311088][ T5637] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 317.441144][ T5628] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 317.451093][ T5637] usb 3-1: device descriptor read/64, error -71 [ 317.624911][ T5628] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.624942][ T5628] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 317.624962][ T5628] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.625016][ T5628] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 317.625044][ T5628] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 317.646847][ T5628] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.646901][ T5628] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.646983][ T5628] usb 6-1: Product: syz [ 317.647018][ T5628] usb 6-1: Manufacturer: syz [ 317.741806][ T5637] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 317.799183][ T5628] cdc_wdm 6-1:1.0: skipping garbage [ 317.799205][ T5628] cdc_wdm 6-1:1.0: skipping garbage [ 317.799316][ T5628] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 317.881403][ T5637] usb 3-1: device descriptor read/64, error -71 [ 318.722981][ T5637] usb usb3-port1: attempt power cycle [ 318.781369][ T5628] usb 6-1: USB disconnect, device number 2 [ 319.461447][ T5637] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 319.520791][ T5637] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 319.520825][ T5637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.520846][ T5637] usb 3-1: Product: syz [ 319.543089][ T5637] usb 3-1: Manufacturer: syz [ 319.543111][ T5637] usb 3-1: SerialNumber: syz [ 321.027134][ T5637] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 321.027203][ T5637] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 321.171193][ T5730] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 321.597807][ T5637] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 321.601762][ T5637] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 321.602494][ T5637] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 321.698519][ T5637] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 321.723250][ T5730] usb 6-1: Using ep0 maxpacket: 32 [ 321.728687][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.728721][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.728750][ T5730] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 321.728767][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.879854][ T7182] loop3: detected capacity change from 0 to 1024 [ 321.887914][ T7182] hfsplus: Bad value for 'session' [ 321.909919][ T5730] usb 6-1: config 0 descriptor?? [ 323.009486][ T5628] usb 3-1: USB disconnect, device number 10 [ 324.199724][ T5730] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 324.199765][ T5730] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 324.605133][ T5730] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 324.607019][ T5730] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 324.609995][ T5730] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 324.811025][ T5628] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 325.030978][ T5730] usb 6-1: USB disconnect, device number 3 [ 325.033657][ T5628] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.033750][ T5628] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 325.033779][ T5628] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.033830][ T5628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 325.033857][ T5628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 325.056859][ T5628] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.056891][ T5628] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.056911][ T5628] usb 3-1: Product: syz [ 325.056927][ T5628] usb 3-1: Manufacturer: syz [ 326.290323][ T5628] cdc_wdm 3-1:1.0: skipping garbage [ 326.297091][ T5628] cdc_wdm 3-1:1.0: skipping garbage [ 326.297216][ T5628] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 326.552343][ T5628] usb 3-1: USB disconnect, device number 11 [ 326.609400][ T7230] loop3: detected capacity change from 0 to 1024 [ 326.618751][ T7230] hfsplus: Bad value for 'session' [ 329.949421][ T7244] binder: 7243:7244 ioctl c0306201 200000000080 returned -14 [ 329.971666][ T7244] binder: BINDER_SET_CONTEXT_MGR already set [ 329.971684][ T7244] binder: 7243:7244 ioctl 4018620d 200000000040 returned -16 [ 329.981043][ T7244] binder: 7243:7244 ioctl c0306201 2000000003c0 returned -14 [ 330.013978][ T7239] input: syz1 as /devices/virtual/input/input9 [ 334.409292][ T7269] loop3: detected capacity change from 0 to 1024 [ 334.413662][ T7269] hfsplus: Bad value for 'session' [ 335.883348][ T5761] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 335.962091][ T7279] binder: 7278:7279 ioctl c0306201 2000000003c0 returned -14 [ 336.057647][ T5761] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.057678][ T5761] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 336.057698][ T5761] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.057749][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 336.057882][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 336.119981][ T5761] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.120013][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.120034][ T5761] usb 3-1: Product: syz [ 336.120049][ T5761] usb 3-1: Manufacturer: syz [ 336.190732][ T5761] cdc_wdm 3-1:1.0: skipping garbage [ 336.190748][ T5761] cdc_wdm 3-1:1.0: skipping garbage [ 336.192253][ T5761] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 336.414623][ T5628] usb 3-1: USB disconnect, device number 12 [ 341.563652][ T5637] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 342.576290][ T5637] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 342.576322][ T5637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.576343][ T5637] usb 4-1: Product: syz [ 342.576358][ T5637] usb 4-1: Manufacturer: syz [ 342.576373][ T5637] usb 4-1: SerialNumber: syz [ 343.005272][ T7307] loop5: detected capacity change from 0 to 1024 [ 343.020031][ T7307] hfsplus: Bad value for 'session' [ 343.084386][ T5637] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 343.084451][ T5637] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 343.910128][ T5637] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 343.910193][ T5637] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 343.960808][ T5637] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 344.306619][ T5637] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 345.049951][ T5761] usb 4-1: USB disconnect, device number 7 [ 345.206863][ T7318] input: syz1 as /devices/virtual/input/input10 [ 347.476000][ T7331] fuse: Bad value for 'fd' [ 349.559138][ T7340] binder: 7334:7340 ioctl c0306201 2000000003c0 returned -14 [ 356.560999][ T5628] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 356.724791][ T5628] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 356.724823][ T5628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.724845][ T5628] usb 1-1: Product: syz [ 356.724861][ T5628] usb 1-1: Manufacturer: syz [ 356.724876][ T5628] usb 1-1: SerialNumber: syz [ 358.389331][ T5628] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 358.389393][ T5628] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 358.389416][ T5628] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 358.443035][ T5628] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 358.464231][ T5628] usb 1-1: USB disconnect, device number 11 [ 362.293139][ T7382] fuse: Bad value for 'fd' [ 364.531911][ T7395] input: syz1 as /devices/virtual/input/input11 [ 367.950987][ T5760] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 368.847021][ T5760] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 368.847052][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.847073][ T5760] usb 3-1: Product: syz [ 368.847087][ T5760] usb 3-1: Manufacturer: syz [ 368.847107][ T5760] usb 3-1: SerialNumber: syz [ 369.186039][ T7422] fuse: Bad value for 'fd' [ 369.225521][ T7421] loop0: detected capacity change from 0 to 512 [ 369.383039][ T7421] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 369.424427][ T5760] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 369.424489][ T5760] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 369.614395][ T7421] EXT4-fs (loop0): 1 truncate cleaned up [ 369.888575][ T7421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.419900][ T5760] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 372.419944][ T5760] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 372.567974][ T5760] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 372.639078][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.685353][ T5760] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 372.732889][ T5760] usb 3-1: USB disconnect, device number 13 [ 373.096240][ T7441] loop3: detected capacity change from 0 to 128 [ 373.136612][ T7441] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 373.169393][ T7434] input: syz1 as /devices/virtual/input/input12 [ 373.432642][ T38] audit: type=1804 audit(1778022883.439:2): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.400" name="/newroot/99/file1/bus" dev="loop3" ino=1048611 res=1 errno=0 [ 376.609294][ T7467] loop2: detected capacity change from 0 to 512 [ 376.708474][ T7467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 376.740738][ T5349] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 376.939139][ T5349] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 376.939172][ T5349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.939193][ T5349] usb 6-1: Product: syz [ 376.939209][ T5349] usb 6-1: Manufacturer: syz [ 376.939224][ T5349] usb 6-1: SerialNumber: syz [ 376.991806][ T7467] EXT4-fs (loop2): 1 truncate cleaned up [ 377.047372][ T7467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.435434][ T5349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 377.435498][ T5349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 378.073903][ T5349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 378.073956][ T5349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 378.537061][ T7463] loop3: detected capacity change from 0 to 32768 [ 378.548431][ T5349] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 378.650030][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650122][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.694808][ T5349] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 380.611317][ T7463] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 380.667895][ T7463] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 380.696744][ T7463] XFS (loop3): log mount failed [ 380.787947][ T6554] usb 6-1: USB disconnect, device number 4 [ 381.220006][ T7488] input: syz1 as /devices/virtual/input/input13 [ 381.537367][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.621204][ T7495] netlink: 220 bytes leftover after parsing attributes in process `syz.2.414'. [ 383.100343][ T7495] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 388.058724][ T7521] loop5: detected capacity change from 0 to 512 [ 388.094441][ T7521] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 388.213707][ T7521] EXT4-fs (loop5): 1 truncate cleaned up [ 388.244546][ T7521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.764179][ T7528] loop0: detected capacity change from 0 to 1024 [ 390.200339][ T6711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.527768][ T7528] hfsplus: failed to load extents file [ 391.038711][ T7535] netlink: 'syz.5.427': attribute type 12 has an invalid length. [ 398.926153][ T7581] evm: overlay not supported [ 406.153879][ T7617] loop3: detected capacity change from 0 to 512 [ 406.282599][ T7617] EXT4-fs: Ignoring removed oldalloc option [ 406.329535][ T7617] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.449: invalid indirect mapped block 4294967295 (level 1) [ 406.329783][ T7617] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 406.331429][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 406.331451][ C1] EXT4-fs (loop3): initial error at time 1778022916: ext4_free_branches:1023: inode 11 [ 406.331483][ C1] EXT4-fs (loop3): last error at time 1778022916: ext4_free_branches:1023: inode 11 [ 406.384741][ T7617] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.449: invalid indirect mapped block 4294967295 (level 1) [ 406.384776][ T7617] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 406.540481][ T7617] EXT4-fs (loop3): 2 truncates cleaned up [ 406.599082][ T7617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.845718][ T5760] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 406.881933][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.023704][ T5760] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 407.023735][ T5760] usb 5-1: config 0 interface 0 has no altsetting 0 [ 407.026642][ T5760] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 407.026669][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 407.026689][ T5760] usb 5-1: Product: syz [ 407.026703][ T5760] usb 5-1: Manufacturer: syz [ 407.026718][ T5760] usb 5-1: SerialNumber: syz [ 407.171950][ T5760] usb 5-1: config 0 descriptor?? [ 407.173159][ T7626] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 408.805987][ T5760] usb 5-1: selecting invalid altsetting 0 [ 413.427058][ T5760] usb 5-1: USB disconnect, device number 11 [ 418.774652][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.203190][ T7684] loop0: detected capacity change from 0 to 32768 [ 419.206645][ T7684] btrfs: Deprecated parameter 'usebackuproot' [ 419.206847][ T7684] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 419.246040][ T7684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.467 (7684) [ 419.331835][ T7684] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 419.332683][ T7684] BTRFS info (device loop0): using crc32c checksum algorithm [ 419.332750][ T7684] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 420.152498][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 420.152601][ T7684] BTRFS warning (device loop0): couldn't read tree root [ 420.152625][ T7684] BTRFS warning (device loop0): try to load backup roots slot 1 [ 420.155658][ T151] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 420.155772][ T7684] BTRFS warning (device loop0): couldn't read tree root [ 420.155805][ T7684] BTRFS warning (device loop0): try to load backup roots slot 2 [ 420.161463][ T151] BTRFS warning (device loop0): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 420.164060][ T7684] BTRFS warning (device loop0): couldn't read tree root [ 420.164089][ T7684] BTRFS warning (device loop0): try to load backup roots slot 3 [ 420.212101][ T7684] BTRFS info (device loop0): rebuilding free space tree [ 421.185806][ T7684] BTRFS info (device loop0): disabling free space tree [ 421.185985][ T7684] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 421.186012][ T7684] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 421.242640][ T7684] BTRFS info (device loop0): checking UUID tree [ 421.254234][ T7684] BTRFS info (device loop0): enabling ssd optimizations [ 421.254259][ T7684] BTRFS info (device loop0): turning off barriers [ 421.254276][ T7684] BTRFS info (device loop0): turning on sync discard [ 421.254297][ T7684] BTRFS info (device loop0): enabling disk space caching [ 421.254314][ T7684] BTRFS info (device loop0): force clearing of disk cache [ 421.254330][ T7684] BTRFS info (device loop0): enabling auto defrag [ 421.254346][ T7684] BTRFS info (device loop0): trying to use backup root at mount time [ 421.254371][ T7684] BTRFS info (device loop0): max_inline set to 0 [ 421.335637][ T7710] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 425.095392][ T5625] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 438.593843][ T7771] input: syz1 as /devices/virtual/input/input15 [ 440.828203][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.828318][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.762413][ T7795] loop4: detected capacity change from 0 to 512 [ 444.093209][ T7795] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.495: bg 0: block 393: padding at end of block bitmap is not set [ 444.093240][ T7795] loop4: lost filesystem error report for type 5 error -117 [ 444.100904][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 444.100930][ C0] EXT4-fs (loop4): initial error at time 1778022954: ext4_validate_block_bitmap:441 [ 444.100953][ C0] EXT4-fs (loop4): last error at time 1778022954: ext4_validate_block_bitmap:441 [ 444.157285][ T7795] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 444.157307][ T7795] loop4: lost filesystem error report for type 5 error -117 [ 444.158176][ T7795] EXT4-fs (loop4): 2 truncates cleaned up [ 444.176636][ T7795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.442804][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.575487][ T5761] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 452.812439][ T5761] usb 4-1: Using ep0 maxpacket: 8 [ 453.119171][ T5761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.119411][ T5761] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 453.119491][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.643284][ T5761] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 453.643326][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 453.643407][ T5761] usb 4-1: Product: syz [ 453.643465][ T5761] usb 4-1: Manufacturer: syz [ 453.643523][ T5761] usb 4-1: SerialNumber: syz [ 455.016833][ T5761] usb 4-1: config 0 descriptor?? [ 455.017568][ T5761] usb 4-1: can't set config #0, error -71 [ 455.023928][ T5761] usb 4-1: USB disconnect, device number 8 [ 455.096011][ T7820] fuse: Bad value for 'fd' [ 455.253597][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 455.338667][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 455.358410][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 455.396718][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 455.408215][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.962532][ T7831] input: syz1 as /devices/virtual/input/input16 [ 457.751118][ T5639] Bluetooth: hci5: command tx timeout [ 459.919919][ T5639] Bluetooth: hci5: command tx timeout [ 460.329423][ T5637] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 460.520755][ T5637] usb 1-1: Using ep0 maxpacket: 16 [ 460.522890][ T5637] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 460.522912][ T5637] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.522928][ T5637] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.531214][ T5637] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.531246][ T5637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.531266][ T5637] usb 1-1: Product: syz [ 460.531281][ T5637] usb 1-1: Manufacturer: syz [ 460.531295][ T5637] usb 1-1: SerialNumber: syz [ 460.878053][ T5637] usb 1-1: can't set config #1, error -71 [ 461.073354][ T5637] usb 1-1: USB disconnect, device number 12 [ 461.142846][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.248554][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.263057][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.292833][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.296904][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.021936][ T5639] Bluetooth: hci5: command tx timeout [ 462.777376][ T37] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 462.910969][ T37] usb 5-1: device descriptor read/64, error -71 [ 463.152774][ T37] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 463.300986][ T37] usb 5-1: device descriptor read/64, error -71 [ 463.422179][ T37] usb usb5-port1: attempt power cycle [ 464.487821][ T5639] Bluetooth: hci0: command tx timeout [ 464.488180][ T5639] Bluetooth: hci5: command tx timeout [ 464.654788][ T37] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 464.732996][ T37] usb 5-1: device descriptor read/8, error -71 [ 464.778952][ T1119] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.970987][ T37] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 464.991769][ T37] usb 5-1: device descriptor read/8, error -71 [ 465.102044][ T37] usb usb5-port1: unable to enumerate USB device [ 466.551891][ T5631] Bluetooth: hci0: command tx timeout [ 466.890652][ T7885] input: syz1 as /devices/virtual/input/input17 [ 467.663717][ T1119] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.555701][ T7898] loop4: detected capacity change from 0 to 2048 [ 469.074551][ T5631] Bluetooth: hci0: command tx timeout [ 469.293919][ T7901] syz_tun: entered allmulticast mode [ 469.395007][ T7904] fuse: Bad value for 'fd' [ 471.202324][ T5631] Bluetooth: hci0: command tx timeout [ 471.262333][ T7898] loop4: p1 < > p3 p4 < > [ 471.280281][ T7898] loop4: p3 start 4284289 is beyond EOD, truncated [ 471.679355][ T5822] udevd[5822]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 471.692300][ T7143] udevd[7143]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 473.761130][ T37] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 474.033204][ T37] usb 1-1: device descriptor read/64, error -71 [ 474.301031][ T37] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 474.459055][ T1119] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.549511][ T37] usb 1-1: device descriptor read/64, error -71 [ 474.651666][ T37] usb usb1-port1: attempt power cycle [ 474.701026][ T7925] loop3: detected capacity change from 0 to 2048 [ 474.729004][ T7925] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 474.919541][ T7925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.001889][ T38] audit: type=1800 audit(1778022985.049:3): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.524" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 475.024314][ T37] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 475.042377][ T37] usb 1-1: device descriptor read/8, error -71 [ 476.152263][ T37] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 476.195180][ T37] usb 1-1: device descriptor read/8, error -71 [ 476.366309][ T37] usb usb1-port1: unable to enumerate USB device [ 476.612198][ T1119] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.787708][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.085244][ T138] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 478.256393][ T138] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 478.256427][ T138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.256448][ T138] usb 1-1: Product: syz [ 478.256463][ T138] usb 1-1: Manufacturer: syz [ 478.256479][ T138] usb 1-1: SerialNumber: syz [ 478.322615][ T138] usb 1-1: config 0 descriptor?? [ 478.599924][ T138] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 481.126320][ T5761] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 481.272567][ T5761] usb 5-1: device descriptor read/64, error -71 [ 481.521793][ T5761] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 481.671312][ T5761] usb 5-1: device descriptor read/64, error -71 [ 481.782163][ T5761] usb usb5-port1: attempt power cycle [ 481.837998][ T138] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 481.878915][ T138] usb 1-1: USB disconnect, device number 17 [ 482.131058][ T5761] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 482.460523][ T5761] usb 5-1: device descriptor read/8, error -71 [ 482.702016][ T5761] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 482.748588][ T5761] usb 5-1: device descriptor read/8, error -71 [ 483.962637][ T5761] usb usb5-port1: unable to enumerate USB device [ 483.995445][ T1119] bridge_slave_1: left allmulticast mode [ 483.995485][ T1119] bridge_slave_1: left promiscuous mode [ 484.040977][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.132732][ T1119] bridge_slave_0: left allmulticast mode [ 484.132769][ T1119] bridge_slave_0: left promiscuous mode [ 484.133065][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.821150][ T5349] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 487.962716][ T5349] usb 4-1: device descriptor read/64, error -71 [ 488.531958][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.591656][ T5349] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 489.093533][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.127025][ T8017] loop4: detected capacity change from 0 to 1024 [ 489.135019][ T8017] hfsplus: Bad value for 'session' [ 489.155068][ T1119] bond0 (unregistering): Released all slaves [ 489.344092][ T5349] usb 4-1: device descriptor read/64, error -71 [ 489.451888][ T5349] usb usb4-port1: attempt power cycle [ 489.626051][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.626301][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.626681][ T7817] bridge_slave_0: entered allmulticast mode [ 489.629989][ T7817] bridge_slave_0: entered promiscuous mode [ 489.855983][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.856256][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.856536][ T7817] bridge_slave_1: entered allmulticast mode [ 489.859445][ T7817] bridge_slave_1: entered promiscuous mode [ 489.871117][ T5349] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 489.891790][ T5349] usb 4-1: device descriptor read/8, error -71 [ 490.141034][ T5349] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 490.161750][ T5349] usb 4-1: device descriptor read/8, error -71 [ 490.271658][ T5349] usb usb4-port1: unable to enumerate USB device [ 491.243324][ T8029] netlink: 220 bytes leftover after parsing attributes in process `syz.3.553'. [ 493.895486][ T8038] netlink: 268 bytes leftover after parsing attributes in process `syz.3.556'. [ 494.668867][ T138] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 494.830349][ T138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.830375][ T138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.830404][ T138] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 494.830421][ T138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.999275][ T138] usb 1-1: config 0 descriptor?? [ 495.035681][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.167240][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.617846][ T138] usb 1-1: string descriptor 0 read error: -22 [ 495.716709][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.718704][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.719093][ T7854] bridge_slave_0: entered allmulticast mode [ 495.771500][ T7854] bridge_slave_0: entered promiscuous mode [ 495.938054][ T8053] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 496.018624][ T138] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 496.018691][ T138] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 496.018803][ T138] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 496.018875][ T138] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 496.019004][ T138] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 496.105254][ T138] usb 1-1: USB disconnect, device number 18 [ 496.583110][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.583451][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.583791][ T7854] bridge_slave_1: entered allmulticast mode [ 496.672807][ T7854] bridge_slave_1: entered promiscuous mode [ 497.628769][ T8076] netlink: 220 bytes leftover after parsing attributes in process `syz.0.562'. [ 498.786838][ T5637] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 499.321084][ T5637] usb 4-1: device descriptor read/64, error -71 [ 499.375677][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 499.479816][ T7817] team0: Port device team_slave_0 added [ 499.680975][ T5637] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 499.779612][ T7817] team0: Port device team_slave_1 added [ 500.085099][ T1119] hsr_slave_0: left promiscuous mode [ 500.115169][ T8086] netlink: 268 bytes leftover after parsing attributes in process `syz.3.567'. [ 500.130993][ T1119] hsr_slave_1: left promiscuous mode [ 500.158882][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.158916][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.186076][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.186099][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.338308][ T1119] veth1_macvtap: left promiscuous mode [ 500.338382][ T1119] veth0_macvtap: left promiscuous mode [ 500.338569][ T1119] veth1_vlan: left promiscuous mode [ 500.338694][ T1119] veth0_vlan: left promiscuous mode [ 501.915228][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.915400][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.684549][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 503.785940][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 504.596175][ T7854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.732623][ T7854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.051507][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.051526][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.051557][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.500966][ T138] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 505.615867][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.615885][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.615910][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.709773][ T7854] team0: Port device team_slave_0 added [ 505.726036][ T138] usb 5-1: device descriptor read/64, error -71 [ 505.762793][ T7854] team0: Port device team_slave_1 added [ 505.806279][ T8122] loop3: detected capacity change from 0 to 256 [ 505.999594][ T8122] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 506.001255][ T8122] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 506.001299][ T8122] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 506.013004][ T138] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 506.070565][ T38] audit: type=1800 audit(1778023016.119:4): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.576" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 506.155573][ T138] usb 5-1: device descriptor read/64, error -71 [ 506.331762][ T5637] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 506.658315][ T8125] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 506.972140][ T138] usb usb5-port1: attempt power cycle [ 507.027697][ T5637] usb 1-1: config 0 has an invalid interface number: 124 but max is 0 [ 507.027729][ T5637] usb 1-1: config 0 has no interface number 0 [ 507.027764][ T5637] usb 1-1: config 0 interface 124 has no altsetting 0 [ 507.130375][ T5637] usb 1-1: string descriptor 0 read error: -22 [ 507.130528][ T5637] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=34.38 [ 507.130553][ T5637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.171398][ T5637] usb 1-1: config 0 descriptor?? [ 507.243489][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.243505][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.243529][ T7854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.375065][ T8125] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 507.394924][ T138] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 507.417629][ T138] usb 5-1: device descriptor read/8, error -71 [ 507.432429][ T5637] usb 1-1: USB disconnect, device number 19 [ 507.463800][ T8125] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 507.483595][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.483612][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.483641][ T7854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.652640][ T138] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 507.675547][ T138] usb 5-1: device descriptor read/8, error -71 [ 507.844916][ T138] usb usb5-port1: unable to enumerate USB device [ 507.871398][ T7817] hsr_slave_0: entered promiscuous mode [ 507.886647][ T7817] hsr_slave_1: entered promiscuous mode [ 507.899831][ T7817] debugfs: 'hsr0' already exists in 'hsr' [ 507.899862][ T7817] Cannot create hsr debugfs directory [ 508.701177][ T7854] hsr_slave_0: entered promiscuous mode [ 508.710630][ T7854] hsr_slave_1: entered promiscuous mode [ 508.757993][ T7854] debugfs: 'hsr0' already exists in 'hsr' [ 508.758024][ T7854] Cannot create hsr debugfs directory [ 509.007259][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.087048][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 509.104262][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 509.125031][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 509.138379][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 510.885884][ T1119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.363884][ T5639] Bluetooth: hci2: command tx timeout [ 511.446621][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 511.856096][ T1119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.820947][ T5637] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 513.008720][ T5637] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 513.008754][ T5637] usb 5-1: config 0 has no interface number 0 [ 513.008789][ T5637] usb 5-1: config 0 interface 124 has no altsetting 0 [ 513.037288][ T5637] usb 5-1: string descriptor 0 read error: -22 [ 513.037437][ T5637] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=34.38 [ 513.037463][ T5637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.082779][ T1119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.152142][ T5637] usb 5-1: config 0 descriptor?? [ 513.412160][ T5637] usb 5-1: USB disconnect, device number 24 [ 513.430982][ T5639] Bluetooth: hci2: command tx timeout [ 513.722492][ T138] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 513.923295][ T138] usb 1-1: Using ep0 maxpacket: 16 [ 513.928884][ T138] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.928913][ T138] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.934337][ T138] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 513.934371][ T138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.934394][ T138] usb 1-1: Product: syz [ 513.934409][ T138] usb 1-1: Manufacturer: syz [ 513.934425][ T138] usb 1-1: SerialNumber: syz [ 514.063402][ T138] usb 1-1: 0:2 : does not exist [ 514.127143][ T1119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.006776][ T5639] Bluetooth: hci2: command tx timeout [ 516.142906][ T138] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 516.331526][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 517.692318][ T138] usb 1-1: USB disconnect, device number 20 [ 518.084378][ T5639] Bluetooth: hci2: command tx timeout [ 518.960109][ T7143] udevd[7143]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.035325][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.096028][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.114992][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.157604][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.198926][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.277753][ T5639] Bluetooth: hci5: command tx timeout [ 523.352717][ T5639] Bluetooth: hci5: command tx timeout [ 524.721452][ T1119] bridge_slave_1: left allmulticast mode [ 524.721489][ T1119] bridge_slave_1: left promiscuous mode [ 524.721888][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.803153][ T1119] bridge_slave_0: left allmulticast mode [ 524.803182][ T1119] bridge_slave_0: left promiscuous mode [ 524.803393][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.196141][ T8283] loop4: detected capacity change from 0 to 4096 [ 525.325272][ T8283] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 525.431312][ T5639] Bluetooth: hci5: command tx timeout [ 527.327954][ T8283] ntfs3(loop4): ino=19, mi_enum_attr [ 527.515298][ T5639] Bluetooth: hci5: command tx timeout [ 528.811518][ T8289] loop4: detected capacity change from 0 to 131072 [ 528.824846][ T8289] F2FS-fs (loop4): Test dummy encryption mode enabled [ 528.844646][ T8289] F2FS-fs (loop4): invalid crc value [ 529.029782][ T8289] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 529.123178][ T8289] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 529.190993][ T8289] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 530.138528][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.447980][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.062070][ T1119] bond0 (unregistering): Released all slaves [ 531.551400][ T8308] binder: 8307:8308 ioctl c0306201 2000000003c0 returned -14 [ 531.867141][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 534.329699][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.614'. [ 536.681985][ T8342] loop0: detected capacity change from 0 to 128 [ 537.221473][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.222083][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.222452][ T8140] bridge_slave_0: entered allmulticast mode [ 537.274594][ T8140] bridge_slave_0: entered promiscuous mode [ 537.374590][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.376649][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.377006][ T8140] bridge_slave_1: entered allmulticast mode [ 537.400336][ T8140] bridge_slave_1: entered promiscuous mode [ 537.796121][ T8347] loop4: detected capacity change from 0 to 256 [ 537.933594][ T8348] binder: 8346:8348 ioctl c0306201 2000000003c0 returned -14 [ 542.318346][ T8347] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 545.338271][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.464601][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.887572][ T1119] hsr_slave_0: left promiscuous mode [ 546.031115][ T1119] hsr_slave_1: left promiscuous mode [ 546.032373][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.032400][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.085336][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.085365][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.408120][ T1119] veth1_macvtap: left promiscuous mode [ 547.408198][ T1119] veth0_macvtap: left promiscuous mode [ 547.408402][ T1119] veth1_vlan: left promiscuous mode [ 547.408535][ T1119] veth0_vlan: left promiscuous mode [ 548.251754][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 548.313607][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 549.157226][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 549.174991][ T8394] netlink: 'syz.0.627': attribute type 39 has an invalid length. [ 550.005505][ T8140] team0: Port device team_slave_0 added [ 550.051305][ T8140] team0: Port device team_slave_1 added [ 552.214937][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.214954][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.214977][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.360031][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.360050][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.360078][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.688898][ T8140] hsr_slave_0: entered promiscuous mode [ 554.713139][ T8140] hsr_slave_1: entered promiscuous mode [ 554.796000][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.796410][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.796790][ T8229] bridge_slave_0: entered allmulticast mode [ 554.875961][ T8229] bridge_slave_0: entered promiscuous mode [ 555.067915][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.068422][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.068752][ T8229] bridge_slave_1: entered allmulticast mode [ 555.154894][ T8229] bridge_slave_1: entered promiscuous mode [ 556.179342][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.451036][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.273216][ T8470] binder: 8469:8470 ioctl c0306201 2000000003c0 returned -14 [ 559.877284][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 559.953954][ T8229] team0: Port device team_slave_0 added [ 559.992740][ T8478] loop4: detected capacity change from 0 to 1024 [ 559.993777][ T8478] hfsplus: Bad value for 'session' [ 560.556884][ T8229] team0: Port device team_slave_1 added [ 561.969396][ T8498] binder: 8497:8498 ioctl c0306201 2000000003c0 returned -14 [ 562.969117][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.969233][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.226130][ T8502] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 565.094551][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.094569][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.094598][ T8229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.280212][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.280230][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.280260][ T8229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.533565][ T8515] loop0: detected capacity change from 0 to 4096 [ 566.181780][ T8515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.254735][ T8521] loop4: detected capacity change from 0 to 1024 [ 566.255994][ T8521] hfsplus: Bad value for 'session' [ 567.047410][ T8229] hsr_slave_0: entered promiscuous mode [ 567.083068][ T8229] hsr_slave_1: entered promiscuous mode [ 567.098013][ T8229] debugfs: 'hsr0' already exists in 'hsr' [ 567.098043][ T8229] Cannot create hsr debugfs directory [ 567.672017][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.185120][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 569.228475][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 569.249970][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 569.280601][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 569.289268][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 570.139495][ T5851] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 570.854689][ T5851] usb 1-1: unable to get BOS descriptor or descriptor too short [ 570.854781][ T5851] usb 1-1: too many configurations: 14, using maximum allowed: 8 [ 570.856299][ T5851] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 570.857774][ T5851] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 570.860342][ T5851] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 570.869131][ T5851] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 570.871281][ T5851] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 570.877352][ T5851] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 570.878823][ T5851] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 570.880276][ T5851] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 570.885136][ T5851] usb 1-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=32.1a [ 570.885166][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.885187][ T5851] usb 1-1: Product: syz [ 570.885203][ T5851] usb 1-1: Manufacturer: syz [ 570.885218][ T5851] usb 1-1: SerialNumber: syz [ 571.448003][ T5639] Bluetooth: hci0: command tx timeout [ 571.603299][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 571.633268][ T8566] loop4: detected capacity change from 0 to 1024 [ 571.636378][ T8566] hfsplus: Bad value for 'session' [ 571.659251][ T5851] usb 1-1: USB disconnect, device number 21 [ 573.511129][ T5639] Bluetooth: hci0: command tx timeout [ 573.932508][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 575.619605][ T5639] Bluetooth: hci0: command tx timeout [ 577.681021][ T5639] Bluetooth: hci0: command tx timeout [ 578.137940][ T8611] loop3: detected capacity change from 0 to 1024 [ 578.149319][ T8611] hfsplus: Bad value for 'session' [ 578.524784][ T8618] loop3: detected capacity change from 0 to 512 [ 578.696387][ T8618] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 579.833105][ T8618] EXT4-fs (loop3): 1 truncate cleaned up [ 579.840585][ T8618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.871963][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.008154][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.009995][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.024352][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.025227][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 580.887133][ T1119] bridge_slave_1: left allmulticast mode [ 580.887173][ T1119] bridge_slave_1: left promiscuous mode [ 580.887461][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.058321][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.258674][ T1119] bridge_slave_0: left allmulticast mode [ 581.258716][ T1119] bridge_slave_0: left promiscuous mode [ 581.259049][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.531080][ T1119] bridge_slave_1: left allmulticast mode [ 581.531121][ T1119] bridge_slave_1: left promiscuous mode [ 581.531410][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.634942][ T1119] bridge_slave_0: left allmulticast mode [ 581.634981][ T1119] bridge_slave_0: left promiscuous mode [ 581.635260][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.641723][ T5851] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 581.848118][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 581.848163][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 581.848234][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 581.971684][ T5851] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 581.971741][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.971813][ T5851] usb 4-1: Product: syz [ 581.971830][ T5851] usb 4-1: Manufacturer: syz [ 581.971846][ T5851] usb 4-1: SerialNumber: syz [ 582.191395][ T5639] Bluetooth: hci6: command tx timeout [ 582.904050][ T8637] loop0: detected capacity change from 0 to 4096 [ 583.407488][ T5851] usb 4-1: config 0 descriptor?? [ 584.277479][ T8637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.567281][ T5639] Bluetooth: hci6: command tx timeout [ 584.886984][ T5851] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 584.971635][ T5851] usb 4-1: USB disconnect, device number 15 [ 585.430540][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.688920][ T8653] loop0: detected capacity change from 0 to 1024 [ 585.703720][ T8653] hfsplus: Bad value for 'session' [ 586.098732][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.272621][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.368548][ T8657] loop3: detected capacity change from 0 to 256 [ 586.391212][ T1119] bond0 (unregistering): Released all slaves [ 586.559288][ T8657] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 586.559435][ T8657] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 586.559742][ T8657] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 586.643709][ T5639] Bluetooth: hci6: command tx timeout [ 587.027878][ T8657] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 587.066590][ T38] audit: type=1800 audit(1778023096.799:5): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.690" name="file1" dev="loop3" ino=1048628 res=0 errno=0 [ 587.261849][ T8657] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 587.308820][ T8657] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 588.533907][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.633615][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.712582][ T5639] Bluetooth: hci6: command tx timeout [ 589.067865][ T1119] bond0 (unregistering): Released all slaves [ 592.016198][ T1119] hsr_slave_0: left promiscuous mode [ 592.064765][ T1119] hsr_slave_1: left promiscuous mode [ 592.065566][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.095817][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.687803][ T1119] hsr_slave_0: left promiscuous mode [ 593.868376][ T1119] hsr_slave_1: left promiscuous mode [ 593.877323][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.858780][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.211437][ T8694] loop4: detected capacity change from 0 to 256 [ 595.265219][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 595.265313][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 595.265356][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 595.265770][ T38] audit: type=1800 audit(1778023105.319:6): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.699" name="file1" dev="loop4" ino=1048629 res=0 errno=0 [ 595.788466][ T8696] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 596.017162][ T8696] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 596.054978][ T8696] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 596.152466][ T8697] loop0: detected capacity change from 0 to 2048 [ 596.271347][ T8697] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 596.361836][ T8697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.435898][ T8697] Bluetooth: MGMT ver 1.23 [ 596.583867][ T8697] ------------[ cut here ]------------ [ 596.583877][ T8697] workqueue: cannot queue hci_cmd_work on wq hci0 [ 596.583902][ T8697] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd67/0x1010, CPU#0: syz.0.700/8697 [ 596.583936][ T8697] Modules linked in: [ 596.583963][ T8697] CPU: 0 UID: 0 PID: 8697 Comm: syz.0.700 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.583985][ T8697] Tainted: [L]=SOFTLOCKUP [ 596.583991][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.584003][ T8697] RIP: 0010:__queue_work+0xd87/0x1010 [ 596.584024][ T8697] Code: 01 00 00 4c 8d 35 e9 3c 00 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 f3 10 a1 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 596.584038][ T8697] RSP: 0018:ffffc900041d7780 EFLAGS: 00010046 [ 596.584051][ T8697] RAX: 1ffff1100589f186 RBX: 0000000000000008 RCX: 0000000000080000 [ 596.584062][ T8697] RDX: ffff8880611ee968 RSI: ffffffff8a1ae420 RDI: ffffffff8f8d6ee0 [ 596.584074][ T8697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.584083][ T8697] R10: dffffc0000000000 R11: ffffed100589f184 R12: dffffc0000000000 [ 596.584095][ T8697] R13: ffff88802c4f8c30 R14: ffffffff8f8d6ee0 R15: ffff8880611ee968 [ 596.584107][ T8697] FS: 00007fcd7d4466c0(0000) GS:ffff888125f25000(0000) knlGS:0000000000000000 [ 596.584120][ T8697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.584131][ T8697] CR2: 00007fcd7d404d58 CR3: 0000000020b34000 CR4: 00000000003526f0 [ 596.584148][ T8697] Call Trace: [ 596.584153][ T8697] [ 596.584163][ T8697] ? rcu_is_watching+0x15/0xb0 [ 596.584183][ T8697] queue_work_on+0x106/0x1d0 [ 596.584208][ T8697] hci_send_cmd+0xb7/0x1a0 [ 596.584257][ T8697] set_link_security+0x5aa/0x770 [ 596.584291][ T8697] ? __pfx_set_link_security+0x10/0x10 [ 596.584319][ T8697] ? timer_init_key+0x131/0x2c0 [ 596.584362][ T8697] hci_mgmt_cmd+0xa14/0xfa0 [ 596.584382][ T8697] ? mutex_lock_nested+0x152/0x1d0 [ 596.584420][ T8697] hci_sock_sendmsg+0x6dd/0xf40 [ 596.584447][ T8697] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 596.584473][ T8697] ? __pfx_aa_file_perm+0x10/0x10 [ 596.584496][ T8697] ? __pfx_futex_wake_mark+0x10/0x10 [ 596.584515][ T8697] ? aa_sock_msg_perm+0x122/0x200 [ 596.584535][ T8697] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 596.584557][ T8697] sock_sendmsg_nosec+0x112/0x150 [ 596.584580][ T8697] sock_write_iter+0x308/0x410 [ 596.584602][ T8697] ? __pfx_sock_write_iter+0x10/0x10 [ 596.584636][ T8697] vfs_write+0x629/0xba0 [ 596.584662][ T8697] ? __pfx_vfs_write+0x10/0x10 [ 596.584688][ T8697] ? __fget_files+0x2a/0x420 [ 596.584710][ T8697] ksys_write+0x156/0x270 [ 596.584731][ T8697] ? __pfx_ksys_write+0x10/0x10 [ 596.584756][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.584772][ T8697] do_syscall_64+0x15f/0xf80 [ 596.584788][ T8697] ? trace_irq_disable+0x3b/0x140 [ 596.584808][ T8697] ? clear_bhb_loop+0x40/0x90 [ 596.584825][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.584840][ T8697] RIP: 0033:0x7fcd7f1ecdd9 [ 596.584859][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.584872][ T8697] RSP: 002b:00007fcd7d446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.584886][ T8697] RAX: ffffffffffffffda RBX: 00007fcd7f465fa0 RCX: 00007fcd7f1ecdd9 [ 596.584897][ T8697] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000005 [ 596.584906][ T8697] RBP: 00007fcd7f282d69 R08: 0000000000000000 R09: 0000000000000000 [ 596.584915][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.584923][ T8697] R13: 00007fcd7f466038 R14: 00007fcd7f465fa0 R15: 00007fffe2811848 [ 596.584946][ T8697] [ 596.584958][ T8697] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 596.584971][ T8697] CPU: 0 UID: 0 PID: 8697 Comm: syz.0.700 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.584990][ T8697] Tainted: [L]=SOFTLOCKUP [ 596.584996][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.585005][ T8697] Call Trace: [ 596.585010][ T8697] [ 596.585016][ T8697] vpanic+0x56c/0xa60 [ 596.585037][ T8697] ? __pfx__printk+0x10/0x10 [ 596.585051][ T8697] ? __pfx_vpanic+0x10/0x10 [ 596.585069][ T8697] ? is_bpf_text_address+0x292/0x2b0 [ 596.585091][ T8697] ? is_bpf_text_address+0x26/0x2b0 [ 596.585120][ T8697] panic+0xc5/0xd0 [ 596.585139][ T8697] ? __pfx_panic+0x10/0x10 [ 596.585171][ T8697] __warn+0x315/0x4c0 [ 596.585189][ T8697] ? __queue_work+0xd67/0x1010 [ 596.585209][ T8697] ? __queue_work+0xd67/0x1010 [ 596.585229][ T8697] __report_bug+0x29a/0x540 [ 596.585256][ T8697] ? __queue_work+0xd67/0x1010 [ 596.585275][ T8697] ? __pfx___report_bug+0x10/0x10 [ 596.585290][ T8697] ? __pfx_hci_cmd_work+0x10/0x10 [ 596.585319][ T8697] report_bug_entry+0x19a/0x290 [ 596.585336][ T8697] ? __queue_work+0xd87/0x1010 [ 596.585353][ T8697] ? __queue_work+0xd8c/0x1010 [ 596.585371][ T8697] handle_bug+0xce/0x200 [ 596.585411][ T8697] exc_invalid_op+0x1a/0x50 [ 596.585438][ T8697] asm_exc_invalid_op+0x1a/0x20 [ 596.585458][ T8697] RIP: 0010:__queue_work+0xd87/0x1010 [ 596.585485][ T8697] Code: 01 00 00 4c 8d 35 e9 3c 00 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 f3 10 a1 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 596.585502][ T8697] RSP: 0018:ffffc900041d7780 EFLAGS: 00010046 [ 596.585520][ T8697] RAX: 1ffff1100589f186 RBX: 0000000000000008 RCX: 0000000000080000 [ 596.585531][ T8697] RDX: ffff8880611ee968 RSI: ffffffff8a1ae420 RDI: ffffffff8f8d6ee0 [ 596.585542][ T8697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.585550][ T8697] R10: dffffc0000000000 R11: ffffed100589f184 R12: dffffc0000000000 [ 596.585562][ T8697] R13: ffff88802c4f8c30 R14: ffffffff8f8d6ee0 R15: ffff8880611ee968 [ 596.585581][ T8697] ? __pfx_hci_cmd_work+0x10/0x10 [ 596.585604][ T8697] ? rcu_is_watching+0x15/0xb0 [ 596.585622][ T8697] queue_work_on+0x106/0x1d0 [ 596.585645][ T8697] hci_send_cmd+0xb7/0x1a0 [ 596.585665][ T8697] set_link_security+0x5aa/0x770 [ 596.585687][ T8697] ? __pfx_set_link_security+0x10/0x10 [ 596.585705][ T8697] ? timer_init_key+0x131/0x2c0 [ 596.585731][ T8697] hci_mgmt_cmd+0xa14/0xfa0 [ 596.585748][ T8697] ? mutex_lock_nested+0x152/0x1d0 [ 596.585773][ T8697] hci_sock_sendmsg+0x6dd/0xf40 [ 596.585800][ T8697] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 596.585826][ T8697] ? __pfx_aa_file_perm+0x10/0x10 [ 596.585847][ T8697] ? __pfx_futex_wake_mark+0x10/0x10 [ 596.585864][ T8697] ? aa_sock_msg_perm+0x122/0x200 [ 596.585885][ T8697] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 596.585908][ T8697] sock_sendmsg_nosec+0x112/0x150 [ 596.585930][ T8697] sock_write_iter+0x308/0x410 [ 596.585950][ T8697] ? __pfx_sock_write_iter+0x10/0x10 [ 596.585983][ T8697] vfs_write+0x629/0xba0 [ 596.586009][ T8697] ? __pfx_vfs_write+0x10/0x10 [ 596.586035][ T8697] ? __fget_files+0x2a/0x420 [ 596.586058][ T8697] ksys_write+0x156/0x270 [ 596.586079][ T8697] ? __pfx_ksys_write+0x10/0x10 [ 596.586103][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.586120][ T8697] do_syscall_64+0x15f/0xf80 [ 596.586135][ T8697] ? trace_irq_disable+0x3b/0x140 [ 596.586155][ T8697] ? clear_bhb_loop+0x40/0x90 [ 596.586173][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.586187][ T8697] RIP: 0033:0x7fcd7f1ecdd9 [ 596.586200][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.586212][ T8697] RSP: 002b:00007fcd7d446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.586226][ T8697] RAX: ffffffffffffffda RBX: 00007fcd7f465fa0 RCX: 00007fcd7f1ecdd9 [ 596.586237][ T8697] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000005 [ 596.586251][ T8697] RBP: 00007fcd7f282d69 R08: 0000000000000000 R09: 0000000000000000 [ 596.586261][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.586271][ T8697] R13: 00007fcd7f466038 R14: 00007fcd7f465fa0 R15: 00007fffe2811848 [ 596.586294][ T8697] [ 596.586999][ T8697] Kernel Offset: disabled