last executing test programs: 6m35.559085313s ago: executing program 1 (id=150): r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m33.565028258s ago: executing program 1 (id=157): socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x2c4e, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x2000000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 6m29.970506365s ago: executing program 1 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) bind$unix(r2, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 6m28.625853493s ago: executing program 1 (id=167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 6m27.206789005s ago: executing program 1 (id=171): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) 6m27.021114476s ago: executing program 1 (id=173): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004d00), 0x3157e0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10000000, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) 6m11.660840475s ago: executing program 32 (id=173): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004d00), 0x3157e0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10000000, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) 5m31.043636724s ago: executing program 3 (id=312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 5m28.804661053s ago: executing program 3 (id=314): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) 5m27.332245818s ago: executing program 3 (id=318): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0xd, 0x3, 0x40, 0x6d, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @loopback, 0x1, 0x1, 0x80000000, 0x2}}) 5m26.991081128s ago: executing program 3 (id=320): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 5m26.014395694s ago: executing program 3 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x9}) 5m25.776397338s ago: executing program 3 (id=323): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB="0000000081000000000000000000010000000000bd9372d1b5a5092df7fe3e12fda288c41258e3a49c7d9650daa655bb1e497d2b10c657f868ade14243312487cbde82d0cc7215108d1cbba3d1a5ab52d945adcdfd39218b1ec9a2e6352dbb1b09e9593a875c616de43eb96668d455479ebd28268792d673867c4160e2ae11e5e9184d87f912643808d98f1e731d89367a3b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000180)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x1}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) inotify_add_watch(r7, 0x0, 0x20000b0a) read$watch_queue(0xffffffffffffffff, &(0x7f0000001080)=""/4088, 0xff8) 5m10.068853206s ago: executing program 33 (id=323): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB="0000000081000000000000000000010000000000bd9372d1b5a5092df7fe3e12fda288c41258e3a49c7d9650daa655bb1e497d2b10c657f868ade14243312487cbde82d0cc7215108d1cbba3d1a5ab52d945adcdfd39218b1ec9a2e6352dbb1b09e9593a875c616de43eb96668d455479ebd28268792d673867c4160e2ae11e5e9184d87f912643808d98f1e731d89367a3b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000180)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x1}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) inotify_add_watch(r7, 0x0, 0x20000b0a) read$watch_queue(0xffffffffffffffff, &(0x7f0000001080)=""/4088, 0xff8) 14.544172369s ago: executing program 2 (id=1135): getpgrp(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000600)=@x86={0x6, 0x0, 0x8, 0x0, 0x4, 0x8, 0x6, 0xb, 0x83, 0xf, 0x5, 0x9, 0x0, 0x101, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', 0xff, 0xd}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8000, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200448e0}, 0x4000) r8 = syz_usbip_server_init(0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8], 0x0) 13.364958198s ago: executing program 2 (id=1138): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) pread64(r0, 0x0, 0x0, 0x4eb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 9.162702494s ago: executing program 2 (id=1152): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r2, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 8.484050484s ago: executing program 2 (id=1156): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 7.657184822s ago: executing program 5 (id=1157): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 4.718777394s ago: executing program 4 (id=1168): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 4.533788885s ago: executing program 5 (id=1169): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c1, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 4.467041499s ago: executing program 0 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 4.128753228s ago: executing program 4 (id=1171): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r2 = fanotify_init(0x2, 0x1000) fanotify_mark(r2, 0x541, 0x40001019, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 4.071172902s ago: executing program 5 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10040881) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) 4.018496765s ago: executing program 2 (id=1173): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a0102000000000000000002001900090001"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 3.960620338s ago: executing program 0 (id=1174): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x10e, 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f0000000ac0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/106, 0x6a, 0x1, 0x35}, @fd, @fda={0x66646185, 0x5, 0x2, 0x3}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@fda={0x66646185, 0x3, 0x0, 0x24}, @fda={0x66646185, 0x8, 0x0, 0x6}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x2e}}, &(0x7f0000000400)={0x0, 0x20, 0x40}}}, @free_buffer], 0x0, 0x0, 0x0}) 3.960354558s ago: executing program 4 (id=1175): write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.819579967s ago: executing program 6 (id=1176): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) pread64(r0, 0x0, 0x0, 0x4eb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 2.57176679s ago: executing program 0 (id=1177): syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be0800633f"], 0x0) 2.496407944s ago: executing program 5 (id=1178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 2.410317809s ago: executing program 4 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) writev(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000200)='!se\xf7ih,\x17i\xeb-\xed\xacP\xe6lNn\x00xseqinux\x10', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 2.347248023s ago: executing program 2 (id=1180): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 2.22996227s ago: executing program 0 (id=1181): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x0, 0x0, 0xff}]}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2.196341961s ago: executing program 6 (id=1182): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) 2.059868319s ago: executing program 6 (id=1183): io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 2.059607699s ago: executing program 0 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0x3c}}, 0x0) 1.105556315s ago: executing program 5 (id=1185): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="ff", 0x1}, {0x0}], 0x2}, 0x40810) 1.096518846s ago: executing program 6 (id=1186): write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) socket(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.016949721s ago: executing program 4 (id=1187): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 808.554243ms ago: executing program 5 (id=1188): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) lseek(r3, 0x2000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) 762.061535ms ago: executing program 6 (id=1189): write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 758.795745ms ago: executing program 4 (id=1190): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 700.552149ms ago: executing program 0 (id=1191): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) syz_open_pts(r4, 0x20800) 0s ago: executing program 6 (id=1192): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r3, 0x0, 0x9) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f00000011c0), 0xfffffffffffffffe) ptrace$cont(0x7, r4, 0x2, 0x7) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0) kernel console output (not intermixed with test programs): eady exists on: batadv_slave_1 [ 76.104740][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.116276][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.133735][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.152936][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.160542][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.168338][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 76.174765][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 76.181948][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.190291][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 76.197286][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.206071][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.215299][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.227071][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.236203][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.245369][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.255157][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.264534][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 76.270819][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 76.300095][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.310219][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.319461][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.329257][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.374253][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.385120][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.395145][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.406219][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.416297][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.426831][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.439555][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.489571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.504926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.514102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.523244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.536136][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.547275][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.557464][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.570156][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.580053][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.592060][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.603716][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.648519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.668302][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.680069][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.691870][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.700883][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.709972][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.731483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.740323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.764307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.774355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.789686][ T4199] device veth0_vlan entered promiscuous mode [ 76.825516][ T4199] device veth1_vlan entered promiscuous mode [ 76.893941][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.908645][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.941626][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.950100][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.959178][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.971527][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.980567][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.989330][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.006094][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.024356][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.035389][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.055021][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.071258][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.091367][ T4199] device veth0_macvtap entered promiscuous mode [ 77.101415][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.113637][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.140413][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.151634][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.164732][ T4199] device veth1_macvtap entered promiscuous mode [ 77.201616][ T3073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.224142][ T3073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.249910][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.263487][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.279305][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.291646][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.301647][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.312684][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.323370][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.334195][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.346779][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.366536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.381912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.393630][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.403931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.424914][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.435968][ T3073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.444981][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.456684][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.467487][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.489742][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.505969][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.516100][ T3073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.516409][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.543895][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.572565][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.737926][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.746456][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.770542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.784647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.793929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.803248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.824866][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.844861][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.856016][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.864911][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.872320][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.883582][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.913958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.541865][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 79.547223][ C0] sched: RT throttling activated [ 79.567643][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 79.573782][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 79.585210][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 79.592908][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 79.609219][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.731525][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.770480][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.855732][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.875153][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.554052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.641601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.043326][ T4325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.318420][ T4334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.447503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 82.271268][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 82.418269][ T4349] Zero length message leads to an empty skb [ 83.335938][ T7] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 83.405737][ T7] usb 1-1: config 0 has no interface number 0 [ 83.422113][ T7] usb 1-1: config 0 interface 29 has no altsetting 0 [ 83.763270][ T4361] netlink: 277 bytes leftover after parsing attributes in process `syz.2.16'. [ 84.097320][ T7] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 84.106609][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.115317][ T7] usb 1-1: Product: syz [ 84.120026][ T7] usb 1-1: Manufacturer: syz [ 84.124823][ T7] usb 1-1: SerialNumber: syz [ 84.135612][ T7] usb 1-1: config 0 descriptor?? [ 84.348145][ T7] peak_usb 1-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 84.397606][ T7] peak_usb 1-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 84.794559][ T7] peak_usb: probe of 1-1:0.29 failed with error -71 [ 85.259446][ T7] usb 1-1: USB disconnect, device number 2 [ 86.007456][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.245729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 86.347299][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 86.502396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 86.514813][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 86.557586][ T4234] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 86.565946][ T4234] usb 2-1: config 0 has an invalid interface number: 1 but max is -1 [ 86.591104][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 86.600965][ T4234] usb 2-1: config 0 has no interface number 0 [ 86.808058][ T4234] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 86.818725][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.826889][ T4234] usb 2-1: Product: syz [ 86.871380][ T4234] usb 2-1: Manufacturer: syz [ 86.885256][ T4234] usb 2-1: SerialNumber: syz [ 86.927620][ T4234] usb 2-1: config 0 descriptor?? [ 86.969472][ T4234] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 86.998991][ T4234] usb 2-1: selecting invalid altsetting 1 [ 87.009669][ T4234] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 87.061273][ T4234] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.108282][ T4234] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 87.127022][ T4234] usb 2-1: media controller created [ 87.215920][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.565719][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.617678][ T4234] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 87.747070][ T4234] usb 2-1: USB disconnect, device number 2 [ 87.947539][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.978059][ T7] usb 5-1: config 0 has no interfaces? [ 87.983777][ T7] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 88.014578][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.054915][ T7] usb 5-1: config 0 descriptor?? [ 88.325137][ T4291] usb 5-1: USB disconnect, device number 2 [ 88.420947][ T4417] loop1: detected capacity change from 0 to 256 [ 88.487947][ T4417] ======================================================= [ 88.487947][ T4417] WARNING: The mand mount option has been deprecated and [ 88.487947][ T4417] and is ignored by this kernel. Remove the mand [ 88.487947][ T4417] option from the mount to silence this warning. [ 88.487947][ T4417] ======================================================= [ 88.643411][ T4420] loop0: detected capacity change from 0 to 512 [ 88.698309][ T4417] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.737473][ T4417] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 88.804747][ T4417] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 88.841803][ T4420] EXT4-fs (loop0): Ignoring removed oldalloc option [ 88.862495][ T4420] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.911781][ T4420] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.149487][ T4420] EXT4-fs (loop0): 1 truncate cleaned up [ 89.176646][ T4420] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 89.472654][ T4436] loop2: detected capacity change from 0 to 256 [ 89.589537][ T4436] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.677536][ T4436] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 90.289733][ T4436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 92.017356][ T146] Bluetooth: Frame is too long (len 18, expected len 4) [ 92.546722][ T1109] cfg80211: failed to load regulatory.db [ 94.068817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 94.078152][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 94.087250][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 94.096405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 94.106281][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 94.115454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 96.502532][ T4510] loop1: detected capacity change from 0 to 256 [ 96.574576][ T4510] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.630427][ T4510] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 96.790616][ T4510] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 96.828674][ T4514] netlink: 277 bytes leftover after parsing attributes in process `syz.3.48'. [ 97.295370][ T4523] loop4: detected capacity change from 0 to 256 [ 97.463408][ T4523] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.517339][ T4523] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 97.570246][ T4523] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 98.666496][ T4525] loop1: detected capacity change from 0 to 40427 [ 98.760679][ T4525] F2FS-fs (loop1): Unrecognized mount option "errors=continue" or missing value [ 101.692703][ T4563] loop0: detected capacity change from 0 to 256 [ 101.783510][ T4563] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.851724][ T4563] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 102.000515][ T4563] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.023904][ T4566] netlink: 277 bytes leftover after parsing attributes in process `syz.4.61'. [ 107.034467][ T4605] ptrace attach of "./syz-executor exec"[4187] was attempted by "3 \x07   €   џџџџџџџџё  syz, ‹  Й ўџџџџџџџ   B< [ ./binderfs/binder0 /dev/kvm /dev/cpu/#/msr [ 107.187289][ T4254] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.460492][ T4611] netlink: 277 bytes leftover after parsing attributes in process `syz.3.73'. [ 107.481753][ T4610] loop4: detected capacity change from 0 to 256 [ 107.652773][ T4610] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.737350][ T4610] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 107.857214][ T4254] usb 2-1: Using ep0 maxpacket: 16 [ 107.863145][ T4610] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 109.197981][ T4254] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 109.211252][ T4254] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 109.229973][ T4254] usb 2-1: Product: syz [ 109.244830][ T4254] usb 2-1: Manufacturer: syz [ 109.256449][ T4254] usb 2-1: SerialNumber: syz [ 109.282112][ T4254] usb 2-1: config 0 descriptor?? [ 112.267530][ T13] usb 2-1: USB disconnect, device number 3 [ 113.323258][ T4654] loop0: detected capacity change from 0 to 256 [ 113.532363][ T4654] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.360229][ T4654] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 114.451288][ T4654] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.847553][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.638081][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.726914][ T7] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.777964][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.796728][ T7] usb 1-1: config 0 descriptor?? [ 116.258399][ T4665] udc-core: couldn't find an available UDC or it's busy [ 117.136058][ T4665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.163245][ T7] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 117.377649][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 119.313839][ T7] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 119.366590][ T7] usb 1-1: USB disconnect, device number 3 [ 120.369908][ T4695] loop0: detected capacity change from 0 to 256 [ 120.385539][ T4695] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.397074][ T4695] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 120.430919][ T4695] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 121.790094][ T4696] fido_id[4696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 131.488779][ T4773] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 131.495788][ T4773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.504382][ T4773] vhci_hcd vhci_hcd.0: Device attached [ 131.513931][ T4774] vhci_hcd: connection closed [ 131.524777][ T144] vhci_hcd: stop threads [ 131.535109][ T144] vhci_hcd: release socket [ 131.622230][ T144] vhci_hcd: disconnect device [ 131.840953][ T4773] syz.3.117 (4773) used greatest stack depth: 20056 bytes left [ 133.244379][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.251263][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.597339][ T1325] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.970855][ T1325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.197550][ T1325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.217214][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.272345][ T1325] usb 3-1: Product: syz [ 134.302967][ T1325] usb 3-1: Manufacturer: syz [ 134.317291][ T1325] usb 3-1: SerialNumber: syz [ 134.544219][ T4787] loop3: detected capacity change from 0 to 21 [ 134.589889][ T4787] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 135.497573][ T1325] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 135.504568][ T1325] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 135.530575][ T1325] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 135.717327][ T1325] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 136.277714][ T1325] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 137.016169][ T13] usb 3-1: USB disconnect, device number 2 [ 137.100621][ T13] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 139.794995][ T4823] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 139.801561][ T4823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.809700][ T4823] vhci_hcd vhci_hcd.0: Device attached [ 139.963941][ T4828] vhci_hcd: connection closed [ 139.965315][ T4337] vhci_hcd: stop threads [ 139.997205][ T4337] vhci_hcd: release socket [ 140.001673][ T4337] vhci_hcd: disconnect device [ 145.563957][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.993189][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.023653][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 146.043068][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.083462][ T13] usb 1-1: config 0 descriptor?? [ 146.297381][ T4898] xt_TCPMSS: Only works on TCP SYN packets [ 146.626128][ T13] logitech 0003:046D:C295.0002: hidraw0: USB HID v0.02 Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 146.891478][ T13] logitech 0003:046D:C295.0002: no inputs found [ 147.448556][ T13] usb 1-1: USB disconnect, device number 4 [ 149.686359][ T4911] fido_id[4911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 152.136384][ T4945] xt_TCPMSS: Only works on TCP SYN packets [ 152.419252][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 156.222861][ T4972] loop0: detected capacity change from 0 to 256 [ 156.282471][ T4972] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.297417][ T4972] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 156.343687][ T4972] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.832022][ T4986] xt_TCPMSS: Only works on TCP SYN packets [ 158.864653][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 159.997192][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 160.247338][ T13] usb 4-1: config 0 has no interfaces? [ 160.252924][ T13] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.624973][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.648710][ T13] usb 4-1: config 0 descriptor?? [ 160.910323][ T5000] loop2: detected capacity change from 0 to 7 [ 160.974871][ T4363] Dev loop2: unable to read RDB block 7 [ 160.982372][ T4363] loop2: unable to read partition table [ 161.011693][ T4363] loop2: partition table beyond EOD, truncated [ 161.056153][ T5000] Dev loop2: unable to read RDB block 7 [ 161.071820][ T5000] loop2: unable to read partition table [ 161.098536][ T5000] loop2: partition table beyond EOD, truncated [ 161.105279][ T5000] loop_reread_partitions: partition scan of loop2 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 161.231099][ T2286] usb 4-1: USB disconnect, device number 2 [ 165.236240][ T5048] loop0: detected capacity change from 0 to 256 [ 165.329039][ T5048] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.358562][ T5048] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 165.400445][ T5048] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 167.587495][ T2286] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 168.198164][ T2286] usb 3-1: device descriptor read/64, error -71 [ 168.597280][ T2286] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 168.817752][ T2286] usb 3-1: device descriptor read/64, error -71 [ 168.949439][ T2286] usb usb3-port1: attempt power cycle [ 169.735810][ T2286] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 170.058317][ T2286] usb 3-1: device descriptor read/8, error -71 [ 170.608179][ T5101] loop3: detected capacity change from 0 to 256 [ 170.695001][ T5101] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.747282][ T5101] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 170.772085][ T5104] loop4: detected capacity change from 0 to 256 [ 170.802877][ T5101] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 173.033486][ T5126] loop2: detected capacity change from 0 to 256 [ 173.472010][ T5126] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.868279][ T5126] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 174.003026][ T5126] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 175.668430][ T5142] loop0: detected capacity change from 0 to 256 [ 176.600659][ T5166] loop0: detected capacity change from 0 to 4096 [ 177.219439][ T5166] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 177.405746][ T5166] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,quota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 177.748270][ T5160] chnl_net:caif_netlink_parms(): no params data found [ 178.925388][ T5187] loop2: detected capacity change from 0 to 256 [ 178.937764][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 179.961309][ T5187] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.022189][ T5187] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 180.068293][ T5187] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 180.152701][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.314080][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.517027][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.593806][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.612819][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.642229][ T5160] device bridge_slave_0 entered promiscuous mode [ 180.714079][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.776205][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.786068][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.817835][ T5160] device bridge_slave_1 entered promiscuous mode [ 181.043600][ T5160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.124816][ T5160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.340237][ T5160] team0: Port device team_slave_0 added [ 181.367513][ T5195] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 181.374091][ T5195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.387682][ T5195] vhci_hcd vhci_hcd.0: Device attached [ 181.414178][ T5160] team0: Port device team_slave_1 added [ 181.758687][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.765724][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.920901][ T5160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.935257][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.942326][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.969448][ T5160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.014114][ T4293] Bluetooth: hci5: command 0x041b tx timeout [ 182.179782][ T4254] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 182.187490][ T2286] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 182.417568][ T2286] usb 1-1: device descriptor read/64, error -71 [ 182.455870][ T5228] xt_TCPMSS: Only works on TCP SYN packets [ 182.519552][ T5160] device hsr_slave_0 entered promiscuous mode [ 182.539534][ T5160] device hsr_slave_1 entered promiscuous mode [ 182.557822][ T5160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.574333][ T5160] Cannot create hsr debugfs directory [ 182.697154][ T2286] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 182.907174][ T2286] usb 1-1: device descriptor read/64, error -71 [ 183.038119][ T2286] usb usb1-port1: attempt power cycle [ 183.104625][ T5211] vhci_hcd: connection reset by peer [ 183.132057][ T3073] vhci_hcd: stop threads [ 183.147919][ T3073] vhci_hcd: release socket [ 183.197166][ T3073] vhci_hcd: disconnect device [ 183.651001][ T154] device hsr_slave_0 left promiscuous mode [ 183.666214][ T154] device hsr_slave_1 left promiscuous mode [ 183.694150][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.727289][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.079791][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.087475][ T1325] Bluetooth: hci5: command 0x040f tx timeout [ 184.114464][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.138005][ T154] device bridge_slave_1 left promiscuous mode [ 184.158742][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.211535][ T154] device bridge_slave_0 left promiscuous mode [ 184.252572][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.302464][ T154] device veth1_macvtap left promiscuous mode [ 184.312754][ T154] device veth0_macvtap left promiscuous mode [ 184.322331][ T154] device veth1_vlan left promiscuous mode [ 184.333064][ T154] device veth0_vlan left promiscuous mode [ 185.963391][ T154] team0 (unregistering): Port device team_slave_1 removed [ 185.990329][ T154] team0 (unregistering): Port device team_slave_0 removed [ 186.011904][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.030956][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.151978][ T154] bond0 (unregistering): Released all slaves [ 186.167440][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 186.275407][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 186.342095][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 186.361574][ T5160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.385786][ T5160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.425502][ T5160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.486768][ T5160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.749019][ T5160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.811634][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.825127][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.970685][ T5160] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.017767][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.039076][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.072815][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.080058][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.121426][ T5294] loop0: detected capacity change from 0 to 256 [ 187.176660][ T5294] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.225320][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.234339][ T5294] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 187.252696][ T5294] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 187.293867][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.307216][ T4254] vhci_hcd: vhci_device speed not set [ 187.325967][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.347507][ T5297] xt_TCPMSS: Only works on TCP SYN packets [ 187.353768][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.360937][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.419631][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.458217][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.503297][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.539563][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.572465][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.608922][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.634513][ T5160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.707378][ T5160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.720638][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.742475][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.870292][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.930875][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.988956][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.120485][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.117269][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.163249][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.491232][ T5160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.902316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.921182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.989936][ T5160] device veth0_vlan entered promiscuous mode [ 191.030313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.083131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.110775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.141667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.286738][ T5160] device veth1_vlan entered promiscuous mode [ 191.430927][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.455645][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.535258][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.593660][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.639798][ T5160] device veth0_macvtap entered promiscuous mode [ 191.702504][ T5160] device veth1_macvtap entered promiscuous mode [ 191.801401][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.903228][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.966867][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.977756][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.988150][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.998672][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.008612][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.019680][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.031987][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.048609][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.074736][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.123731][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.400997][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.678243][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.737774][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.761904][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.814881][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.847782][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.888303][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.923442][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.961255][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.992119][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.062413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.306735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.382492][ T5396] xt_TCPMSS: Only works on TCP SYN packets [ 194.497888][ T5160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.512496][ T5160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.522542][ T5160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.550913][ T5160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.656527][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.666294][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.827046][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.865048][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.998596][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.070547][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.172196][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.255994][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.757284][ T4291] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.067313][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 196.477288][ T4291] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 196.506992][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.547203][ T4291] usb 5-1: Product: syz [ 196.555800][ T4291] usb 5-1: Manufacturer: syz [ 196.560492][ T4291] usb 5-1: SerialNumber: syz [ 196.569157][ T5436] loop2: detected capacity change from 0 to 256 [ 196.586325][ T4291] r8152-cfgselector 5-1: config 0 descriptor?? [ 197.035798][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 197.041983][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 197.114708][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 197.137703][ T1325] Bluetooth: hci4: command 0x0406 tx timeout [ 197.366332][ T5436] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.557644][ T4291] r8152-cfgselector 5-1: Unknown version 0x0000 [ 197.604560][ T4291] r8152-cfgselector 5-1: bad CDC descriptors [ 197.845114][ T5436] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 198.091690][ T4291] r8152-cfgselector 5-1: Unknown version 0x0000 [ 198.147989][ T5436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 198.207309][ T4291] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 200.329389][ T5466] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 200.335974][ T5466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.343795][ T5466] vhci_hcd vhci_hcd.0: Device attached [ 200.788536][ T5474] trusted_key: encrypted_key: keylen parameter is missing [ 200.847206][ T4316] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 200.977377][ T1109] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 201.037331][ T4316] usb 6-1: device descriptor read/64, error -71 [ 201.277234][ T5467] vhci_hcd: connection reset by peer [ 201.287206][ T1325] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.340743][ T156] vhci_hcd: stop threads [ 201.346304][ T156] vhci_hcd: release socket [ 201.376971][ T156] vhci_hcd: disconnect device [ 201.384478][ T5490] loop5: detected capacity change from 0 to 256 [ 201.957463][ T5499] loop5: detected capacity change from 0 to 4096 [ 202.197960][ T5499] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 202.391578][ T5499] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,quota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 202.498419][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.647739][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.677886][ T1325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.709983][ T1325] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.735663][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.762993][ T1325] usb 1-1: config 0 descriptor?? [ 204.099769][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.129619][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.310400][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 204.340567][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 205.937229][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 206.137618][ T1109] vhci_hcd: vhci_device speed not set [ 206.184325][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 206.267157][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 206.277436][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 206.290804][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 206.311180][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.318945][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.326425][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.385810][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.447238][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.454704][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.540376][ T5548] loop4: detected capacity change from 0 to 256 [ 207.557661][ T1325] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 208.597924][ T5548] loop4: detected capacity change from 0 to 4096 [ 208.823004][ T1325] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 208.839812][ T1325] usb 1-1: USB disconnect, device number 8 [ 208.866147][ T5548] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 209.098606][ T5573] process 'syz.3.296' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 209.127723][ T5548] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,quota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 210.032029][ T5583] syz.5.300 sent an empty control message without MSG_MORE. [ 211.846862][ T5578] fido_id[5578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 216.880155][ T5650] loop2: detected capacity change from 0 to 256 [ 217.440583][ T5662] loop2: detected capacity change from 0 to 4096 [ 218.130360][ T5662] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 218.301455][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,quota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 222.977262][ T5738] xt_TCPMSS: Only works on TCP SYN packets [ 223.100647][ T4248] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.470248][ T4248] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.501881][ T4248] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.562787][ T4248] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.616581][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.707533][ T5737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 224.592019][ T4248] usb 3-1: USB disconnect, device number 7 [ 225.402914][ T4292] udevd[4292]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.502160][ T5759] loop0: detected capacity change from 0 to 256 [ 225.567242][ T5759] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.599316][ T5759] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 225.639800][ T5759] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 229.290337][ T5821] xt_TCPMSS: Only works on TCP SYN packets [ 230.483025][ T4254] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 230.632608][ T5830] netlink: 104 bytes leftover after parsing attributes in process `syz.4.347'. [ 230.887628][ T4254] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.977837][ T4254] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.750454][ T4254] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.760372][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.768777][ T4254] usb 3-1: SerialNumber: syz [ 232.151351][ T4254] usb 3-1: 0:2 : does not exist [ 232.352840][ T4254] usb 3-1: USB disconnect, device number 8 [ 232.743844][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.357391][ T4233] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 233.478852][ T5868] loop0: detected capacity change from 0 to 256 [ 233.946965][ T5880] loop0: detected capacity change from 0 to 4096 [ 233.982277][ T5880] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 234.019117][ T4233] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.506950][ T5880] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,quota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 234.610938][ T4233] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.637893][ T4233] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.644582][ T4233] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 234.653844][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.670660][ T4233] usb 3-1: config 0 descriptor?? [ 235.737770][ T5891] loop5: detected capacity change from 0 to 256 [ 235.771806][ T5893] cgroup: Name too long [ 235.812722][ T5891] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.859330][ T5891] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 235.922123][ T5891] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 235.937024][ T4233] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 235.973256][ T4233] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 236.018321][ T4233] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 236.030902][ T4233] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 236.057916][ T4233] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 236.077463][ T4233] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 236.105523][ T4233] holtek 0003:1241:5015.0004: no inputs found [ 236.147383][ T4233] usb 3-1: USB disconnect, device number 9 [ 236.235896][ T5900] fido_id[5900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 236.839866][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 236.986818][ T5917] kernel profiling enabled (shift: 9) [ 237.377645][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.470878][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.480529][ T5901] device bridge_slave_0 entered promiscuous mode [ 237.489249][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.603928][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.663343][ T5901] device bridge_slave_1 entered promiscuous mode [ 240.944369][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 241.070906][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.157312][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.299302][ T5901] team0: Port device team_slave_0 added [ 241.324396][ T5901] team0: Port device team_slave_1 added [ 241.446303][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.488280][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.962682][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.598885][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.605885][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.736477][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.047313][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 245.238692][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 246.077881][ T5970] syz.2.370 uses obsolete (PF_INET,SOCK_PACKET) [ 246.852640][ T5901] device hsr_slave_0 entered promiscuous mode [ 246.870081][ T5901] device hsr_slave_1 entered promiscuous mode [ 247.019171][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.081172][ T5901] Cannot create hsr debugfs directory [ 247.118634][ T4834] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.287830][ T4248] Bluetooth: hci2: command 0x0419 tx timeout [ 248.139349][ T4834] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.284837][ T4834] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.493276][ T4834] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.536607][ T5901] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.636213][ T5901] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 250.143388][ T6016] smc: net device bond0 applied user defined pnetid SYZ2 [ 250.154737][ T5901] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.391062][ T5901] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.965658][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.052830][ T6044] 9pnet_virtio: no channels available for device 127.0.0.1 [ 252.731917][ T6046] loop5: detected capacity change from 0 to 256 [ 252.741000][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.815383][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.823886][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.870989][ T6046] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.894639][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.903896][ T6046] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 252.938272][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.139852][ T6046] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 253.605654][ T4640] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.613040][ T4640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.737947][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.747936][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.756477][ T4640] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.763584][ T4640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.787562][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.911186][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.359237][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.369226][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.380926][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.392155][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.401585][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.427569][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.442250][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.451539][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.467186][ T4254] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 255.472662][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.502393][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.522212][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.872123][ T4254] usb 1-1: config 1 interface 0 has no altsetting 0 [ 255.947201][ T4291] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 255.980311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.001340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.031929][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.057607][ T4254] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 256.080067][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.095302][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.102332][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.109047][ T4254] usb 1-1: Product: syz [ 256.132571][ T4254] usb 1-1: Manufacturer: syz [ 256.304712][ T4254] usb 1-1: SerialNumber: syz [ 256.367137][ T4291] usb 3-1: Using ep0 maxpacket: 8 [ 257.250218][ T4291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.273135][ T4291] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.301593][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.334420][ T4291] usb 3-1: config 0 descriptor?? [ 257.531443][ T4254] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x04B8 pid 0x0202 [ 257.592230][ T4834] device hsr_slave_0 left promiscuous mode [ 258.290312][ T4834] device hsr_slave_1 left promiscuous mode [ 258.310404][ T4291] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 258.403219][ T4834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.430092][ T4834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.486429][ T4834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.513647][ T4834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.550415][ T4834] device bridge_slave_1 left promiscuous mode [ 258.562988][ T4291] usb 3-1: USB disconnect, device number 10 [ 258.614312][ T4834] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.650904][ T4834] device bridge_slave_0 left promiscuous mode [ 258.668681][ T4834] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.759642][ T4834] device veth1_macvtap left promiscuous mode [ 258.770307][ T4834] device veth0_macvtap left promiscuous mode [ 258.790845][ T4834] device veth1_vlan left promiscuous mode [ 258.811138][ T4834] device veth0_vlan left promiscuous mode [ 258.865274][ T4291] usb 1-1: USB disconnect, device number 9 [ 258.910003][ T4291] usblp0: removed [ 260.372549][ T6133] loop5: detected capacity change from 0 to 256 [ 260.420273][ T6133] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.581047][ T6133] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 260.953308][ T6133] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 262.100446][ T4834] team0 (unregistering): Port device team_slave_1 removed [ 262.232428][ T4834] team0 (unregistering): Port device team_slave_0 removed [ 262.292067][ T4834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.353422][ T4834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.791008][ T4834] bond0 (unregistering): Released all slaves [ 263.158597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.181661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.271818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.297355][ T6163] kvm [6161]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 263.304012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.334268][ T6163] kvm [6161]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x4086 [ 263.374993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.412801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.447333][ T5901] device veth0_vlan entered promiscuous mode [ 263.465875][ T6163] kvm [6161]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 263.527506][ T6163] kvm [6161]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 263.548020][ T5901] device veth1_vlan entered promiscuous mode [ 263.703050][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.716719][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.955215][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.156477][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.428241][ T5901] device veth0_macvtap entered promiscuous mode [ 264.512050][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.540413][ T5901] device veth1_macvtap entered promiscuous mode [ 264.651077][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.759622][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.837090][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.919554][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.929646][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.947449][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.037274][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.107094][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.556602][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.587567][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.607592][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.632516][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.718293][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.737142][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.818434][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.852656][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.888164][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.632366][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.659301][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.692980][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.729027][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.773098][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.976664][ T6202] IPv6: Can't replace route, no match found [ 267.031326][ T6206] xt_TCPMSS: Only works on TCP SYN packets [ 267.039805][ T5901] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.094845][ T5901] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.113901][ T5901] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.143319][ T5901] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.426192][ T4640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.463719][ T4640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.474203][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.095693][ T4640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.117293][ T4640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.228504][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.246218][ T6221] netlink: 'syz.5.415': attribute type 1 has an invalid length. [ 268.380613][ T6230] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 268.447198][ T6230] CIFS mount error: No usable UNC path provided in device string! [ 268.447198][ T6230] [ 268.499033][ T6230] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 269.911760][ T6261] netlink: 277 bytes leftover after parsing attributes in process `syz.6.423'. [ 270.821928][ T6278] xt_TCPMSS: Only works on TCP SYN packets [ 273.162294][ T6308] 9pnet: Insufficient options for proto=fd [ 275.537778][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 275.569485][ T6356] netem: incorrect ge model size [ 275.592621][ T6356] netem: change failed [ 276.124732][ T6379] mmap: syz.5.450 (6379) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 276.626162][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 278.667237][ T7] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 278.675422][ T7] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 279.512978][ T7] usb 3-1: config 0 has no interface number 0 [ 279.567294][ T7] usb 3-1: string descriptor 0 read error: -71 [ 279.573634][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 279.622124][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.659594][ T7] usb 3-1: config 0 descriptor?? [ 279.700924][ T7] usb 3-1: can't set config #0, error -71 [ 279.728204][ T7] usb 3-1: USB disconnect, device number 11 [ 280.323551][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 281.386557][ T6448] loop0: detected capacity change from 0 to 512 [ 281.593753][ T6448] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 281.603689][ T6448] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 281.613584][ T6448] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 281.749380][ T6448] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 281.757525][ T6448] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 281.765819][ T6448] EXT4-fs (loop0): failed to initialize system zone (-117) [ 281.773470][ T6448] EXT4-fs (loop0): mount failed [ 282.328522][ T7] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 282.437246][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.448265][ T4254] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 282.455771][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 282.642008][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 282.693514][ T6469] netlink: 277 bytes leftover after parsing attributes in process `syz.5.473'. [ 282.747974][ T7] usb 3-1: unable to read config index 1 descriptor/start: -71 [ 282.773061][ T7] usb 3-1: can't read configurations, error -71 [ 283.177147][ T4254] usb 7-1: Using ep0 maxpacket: 16 [ 283.397361][ T4254] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.452638][ T4254] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.587711][ T4254] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.797305][ T4254] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 283.806882][ T4254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.847324][ T4254] usb 7-1: config 0 descriptor?? [ 284.368950][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.625928][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.675748][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.740434][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.772612][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.804925][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.857745][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.881397][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.915832][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.932281][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.946225][ T6507] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.958552][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 284.981937][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 285.008332][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 285.044954][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 285.061676][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 285.124254][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 285.153863][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 285.170609][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 285.588587][ T6525] loop2: detected capacity change from 0 to 512 [ 285.610654][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 286.500003][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 286.586659][ T6525] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 286.596688][ T6525] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 286.606723][ T6525] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 286.844239][ T6528] netlink: 277 bytes leftover after parsing attributes in process `syz.0.486'. [ 287.010553][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.042642][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.097121][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.137370][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.144841][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.176413][ T6525] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 287.184459][ T6525] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 287.192424][ T6525] EXT4-fs (loop2): failed to initialize system zone (-117) [ 287.199848][ T6525] EXT4-fs (loop2): mount failed [ 287.217126][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.224585][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.246436][ T6537] netlink: 'syz.6.489': attribute type 1 has an invalid length. [ 287.257999][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.265476][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.297298][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.304771][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.337122][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.344586][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.587163][ T4254] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 287.610884][ T4254] hid-generic 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 287.766244][ T4254] usb 7-1: USB disconnect, device number 2 [ 288.640092][ T6558] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 288.863365][ T6552] fido_id[6552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 292.212373][ T6581] netlink: 277 bytes leftover after parsing attributes in process `syz.4.498'. [ 293.969128][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 294.148891][ T6599] loop5: detected capacity change from 0 to 512 [ 296.253261][ T6599] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 296.300051][ T6599] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 296.309884][ T6599] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 296.729176][ T6599] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 296.737340][ T6599] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 296.778787][ T6599] EXT4-fs (loop5): failed to initialize system zone (-117) [ 296.786885][ T6599] EXT4-fs (loop5): mount failed [ 298.924457][ T4291] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 299.273472][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 299.317291][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 299.413869][ T6653] bridge1: port 1(veth0_to_bond) entered blocking state [ 299.449571][ T6653] bridge1: port 1(veth0_to_bond) entered disabled state [ 299.460342][ T6653] device veth0_to_bond entered promiscuous mode [ 299.567341][ T4291] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 299.596705][ T4291] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 299.680365][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.207227][ T4291] usb 1-1: can't set config #4, error -71 [ 301.215447][ T4291] usb 1-1: USB disconnect, device number 10 [ 301.944899][ T6688] loop5: detected capacity change from 0 to 256 [ 301.952288][ T6682] loop0: detected capacity change from 0 to 512 [ 303.900424][ T6693] loop5: detected capacity change from 0 to 4096 [ 303.994698][ T6693] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 304.046060][ T6693] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,quota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 304.095089][ T6682] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 304.120037][ T6682] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 304.150234][ T6682] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 304.263789][ T6682] EXT4-fs: failed to create workqueue [ 304.272195][ T6682] EXT4-fs (loop0): mount failed [ 305.408767][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.563042][ T6714] netlink: 180 bytes leftover after parsing attributes in process `syz.2.531'. [ 309.139327][ T6758] loop2: detected capacity change from 0 to 256 [ 309.273323][ T6758] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.107197][ T6758] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 310.152158][ T6758] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 310.380191][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.544'. [ 311.452666][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.548'. [ 311.512190][ T6780] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.521498][ T6780] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.530970][ T6780] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.539910][ T6780] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.630305][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.548'. [ 312.027191][ T1325] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 312.307299][ T1325] usb 7-1: Using ep0 maxpacket: 8 [ 312.427304][ T1325] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.637508][ T1325] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 312.650750][ T1325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 312.663372][ T1325] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.837466][ T1325] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 312.859607][ T1325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.894819][ T1325] usb 7-1: Product: syz [ 312.914634][ T1325] usb 7-1: Manufacturer: syz [ 312.921219][ T1325] usb 7-1: SerialNumber: syz [ 312.935487][ T1325] usb 7-1: config 0 descriptor?? [ 313.707410][ T6792] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 313.729208][ T1325] ati_remote_probe: Unexpected desc.bNumEndpoints [ 313.974855][ T4293] usb 7-1: USB disconnect, device number 3 [ 314.176876][ T6813] loop4: detected capacity change from 0 to 512 [ 314.232357][ T6813] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 314.262420][ T6813] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 314.294057][ T6813] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 314.332571][ T6813] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 314.349336][ T6813] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 314.372746][ T6813] EXT4-fs (loop4): failed to initialize system zone (-117) [ 314.396889][ T6813] EXT4-fs (loop4): mount failed [ 317.534808][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.541740][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.791168][ T6872] loop4: detected capacity change from 0 to 256 [ 324.130511][ T6928] loop5: detected capacity change from 0 to 256 [ 324.446502][ T6931] loop6: detected capacity change from 0 to 512 [ 324.782030][ T6931] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 324.803764][ T6931] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 324.848316][ T6931] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 324.864851][ T6931] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 324.875440][ T6931] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 324.888296][ T6944] netlink: 'syz.4.582': attribute type 3 has an invalid length. [ 324.893212][ T6931] EXT4-fs (loop6): failed to initialize system zone (-117) [ 324.906356][ T6931] EXT4-fs (loop6): mount failed [ 324.931441][ T6944] netlink: 'syz.4.582': attribute type 3 has an invalid length. [ 325.684485][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.585'. [ 325.799395][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.585'. [ 325.881542][ T6955] device bridge0 entered promiscuous mode [ 325.890503][ T6955] device ip6gretap0 entered promiscuous mode [ 325.903112][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 327.866740][ T6991] netlink: 4560 bytes leftover after parsing attributes in process `syz.6.592'. [ 329.477118][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 329.747071][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 333.247264][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 333.347141][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 333.354867][ T23] usb 5-1: can't read configurations, error -71 [ 338.146094][ T7100] loop6: detected capacity change from 0 to 512 [ 338.794598][ T1325] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 338.872162][ T7100] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 338.882026][ T7100] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 338.891963][ T7100] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 339.212225][ T7100] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 339.220467][ T7100] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 339.228453][ T7100] EXT4-fs (loop6): failed to initialize system zone (-117) [ 339.235878][ T7100] EXT4-fs (loop6): mount failed [ 339.337225][ T1325] usb 6-1: Using ep0 maxpacket: 32 [ 339.457408][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.473925][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.504460][ T1325] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.533930][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.564019][ T1325] usb 6-1: config 0 descriptor?? [ 339.609832][ T1325] hub 6-1:0.0: USB hub found [ 339.827274][ T1325] hub 6-1:0.0: 1 port detected [ 341.043769][ T13] hub 6-1:0.0: activate --> -90 [ 341.299099][ T4293] usb 6-1: USB disconnect, device number 4 [ 345.155846][ T7195] loop0: detected capacity change from 0 to 512 [ 345.365167][ T7195] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 345.375053][ T7195] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 345.384891][ T7195] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 345.410339][ T7195] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 345.418361][ T7195] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 345.426699][ T7195] EXT4-fs (loop0): failed to initialize system zone (-117) [ 345.434078][ T7195] EXT4-fs (loop0): mount failed [ 345.827114][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 346.237984][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.487605][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.717841][ T23] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.808222][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.820898][ T23] usb 6-1: SerialNumber: syz [ 346.852426][ T7220] loop6: detected capacity change from 0 to 256 [ 346.943774][ T7220] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.002113][ T7220] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 347.078719][ T7220] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 347.832922][ T23] usb 6-1: 0:2 : does not exist [ 347.853990][ T23] usb 6-1: USB disconnect, device number 5 [ 351.042974][ T7264] loop5: detected capacity change from 0 to 512 [ 351.368790][ T7264] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 351.378655][ T7264] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 351.389523][ T7264] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 351.425039][ T7264] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 351.433420][ T7264] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 351.442263][ T7264] EXT4-fs (loop5): failed to initialize system zone (-117) [ 351.450637][ T7264] EXT4-fs (loop5): mount failed [ 353.132956][ T7296] loop0: detected capacity change from 0 to 256 [ 353.184069][ T7296] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.273641][ T7296] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 353.332941][ T7296] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 355.427372][ T7238] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 355.897747][ T7238] usb 3-1: config 3 has an invalid interface number: 84 but max is 0 [ 355.941546][ T7238] usb 3-1: config 3 has no interface number 0 [ 356.047906][ T7238] usb 3-1: config 3 interface 84 has no altsetting 0 [ 356.308449][ T7324] loop5: detected capacity change from 0 to 512 [ 356.751744][ T7327] input: syz1 as /devices/virtual/input/input6 [ 357.954593][ T7324] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 357.965189][ T7324] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 357.975270][ T7324] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 358.007793][ T7324] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 358.016406][ T7324] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 358.024310][ T7324] EXT4-fs (loop5): failed to initialize system zone (-117) [ 358.031687][ T7324] EXT4-fs (loop5): mount failed [ 358.127160][ T7238] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.6b [ 358.136259][ T7238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.177350][ T7238] usb 3-1: can't set config #3, error -71 [ 358.186574][ T7238] usb 3-1: USB disconnect, device number 14 [ 358.242695][ T7339] loop6: detected capacity change from 0 to 256 [ 358.396710][ T7339] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.423517][ T7339] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 358.455937][ T7339] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 360.577294][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 361.725888][ T7382] loop6: detected capacity change from 0 to 512 [ 362.491728][ T7382] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 362.501643][ T7382] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 362.511484][ T7382] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 362.582351][ T7382] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 362.590502][ T7382] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 362.598837][ T7382] EXT4-fs (loop6): failed to initialize system zone (-117) [ 362.606410][ T7382] EXT4-fs (loop6): mount failed [ 362.613106][ T7238] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 362.927113][ T7238] usb 5-1: Using ep0 maxpacket: 8 [ 363.145160][ T7238] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 363.262842][ T7389] loop6: detected capacity change from 0 to 256 [ 363.307128][ T7389] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 363.354847][ T7238] usb 5-1: config 1 interface 0 has no altsetting 0 [ 363.364225][ T7389] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 363.393461][ T7389] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 363.488184][ T7391] 9pnet: Insufficient options for proto=fd [ 363.987389][ T7238] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 364.135071][ T7238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.296101][ T7238] usb 5-1: Product: syz [ 364.300353][ T7238] usb 5-1: Manufacturer: syz [ 364.304976][ T7238] usb 5-1: SerialNumber: syz [ 365.317791][ T7375] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 365.634176][ T13] usb 5-1: USB disconnect, device number 6 [ 369.454517][ T7417] loop4: detected capacity change from 0 to 512 [ 370.856179][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 371.246003][ T7433] 9pnet: Insufficient options for proto=fd [ 373.653921][ T7473] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 373.660493][ T7473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.669430][ T7473] vhci_hcd vhci_hcd.0: Device attached [ 373.998020][ T4248] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 376.442548][ T7477] vhci_hcd: connection reset by peer [ 376.475530][ T4640] vhci_hcd: stop threads [ 376.481911][ T4640] vhci_hcd: release socket [ 376.489891][ T4640] vhci_hcd: disconnect device [ 378.972267][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.979057][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.147119][ T4248] vhci_hcd: vhci_device speed not set [ 379.383943][ T7515] 9pnet: Insufficient options for proto=fd [ 380.200257][ T7517] loop0: detected capacity change from 0 to 256 [ 380.487117][ T7517] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.547119][ T7517] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 381.570093][ T7517] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 381.738933][ T26] audit: type=1326 audit(1770355105.549:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 381.883507][ T26] audit: type=1326 audit(1770355105.619:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 381.938525][ T26] audit: type=1326 audit(1770355105.619:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 384.761692][ T26] audit: type=1326 audit(1770355105.619:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 384.846631][ T26] audit: type=1326 audit(1770355105.619:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 384.891069][ T7541] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 384.891128][ T7541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.892527][ T7541] vhci_hcd vhci_hcd.0: Device attached [ 384.984988][ T7550] loop6: detected capacity change from 0 to 512 [ 385.008058][ T26] audit: type=1326 audit(1770355105.619:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 385.008102][ T26] audit: type=1326 audit(1770355105.619:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 385.008139][ T26] audit: type=1326 audit(1770355105.619:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 385.008176][ T26] audit: type=1326 audit(1770355105.689:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67130b2eb9 code=0x7ffc0000 [ 385.008213][ T26] audit: type=1326 audit(1770355105.689:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67130b2c22 code=0x7ffc0000 [ 385.071754][ T7550] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 385.071781][ T7550] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 385.071797][ T7550] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 385.131329][ T7550] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 385.131399][ T7550] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 385.131878][ T7550] EXT4-fs (loop6): failed to initialize system zone (-117) [ 385.132088][ T7550] EXT4-fs (loop6): mount failed [ 385.147150][ T7238] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 385.157085][ T21] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 385.347139][ T7238] usb 1-1: device descriptor read/64, error -71 [ 385.617172][ T7238] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 385.807185][ T7238] usb 1-1: device descriptor read/64, error -71 [ 386.018947][ T7544] vhci_hcd: connection reset by peer [ 386.019533][ T7238] usb usb1-port1: attempt power cycle [ 386.087057][ T156] vhci_hcd: stop threads [ 386.087104][ T156] vhci_hcd: release socket [ 386.087129][ T156] vhci_hcd: disconnect device [ 386.946786][ T7572] loop4: detected capacity change from 0 to 256 [ 386.986502][ T7572] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.049690][ T7572] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 387.092132][ T7572] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 391.110358][ T21] vhci_hcd: vhci_device speed not set [ 391.643299][ T7606] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 391.649889][ T7606] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.658064][ T7606] vhci_hcd vhci_hcd.0: Device attached [ 392.527248][ T1325] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 392.535167][ T4293] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 393.817216][ T1325] usb 3-1: device descriptor read/64, error -71 [ 393.928167][ T7624] loop6: detected capacity change from 0 to 256 [ 393.974686][ T7624] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 394.026294][ T7607] vhci_hcd: connection reset by peer [ 394.037420][ T7624] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 394.065494][ T4338] vhci_hcd: stop threads [ 394.074390][ T4338] vhci_hcd: release socket [ 394.122694][ T4338] vhci_hcd: disconnect device [ 394.134564][ T7624] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 397.860670][ T7670] loop0: detected capacity change from 0 to 256 [ 397.907091][ T7670] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 397.987216][ T7670] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 398.219071][ T7670] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 399.067083][ T4293] vhci_hcd: vhci_device speed not set [ 402.954630][ T7721] loop5: detected capacity change from 0 to 256 [ 403.257107][ T7721] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.077060][ T7721] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 404.110732][ T7721] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 405.371801][ T7751] loop4: detected capacity change from 0 to 512 [ 405.702735][ T7751] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 405.712942][ T7751] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 405.722751][ T7751] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 405.754281][ T7751] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 405.762443][ T7751] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 405.770378][ T7751] EXT4-fs (loop4): failed to initialize system zone (-117) [ 405.778295][ T7751] EXT4-fs (loop4): mount failed [ 407.230983][ T7778] syz.0.785 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 408.214467][ T7789] loop0: detected capacity change from 0 to 256 [ 408.303103][ T7789] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.693180][ T7789] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 410.055603][ T7797] loop6: detected capacity change from 0 to 512 [ 410.070606][ T7789] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 410.086756][ T7797] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 410.097044][ T7797] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 410.106816][ T7797] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 410.141350][ T7797] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 410.149379][ T7797] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 410.157767][ T7797] EXT4-fs (loop6): failed to initialize system zone (-117) [ 410.165094][ T7797] EXT4-fs (loop6): mount failed [ 411.967249][ T7238] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 412.377049][ T7238] usb 1-1: Using ep0 maxpacket: 16 [ 412.717445][ T7238] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 412.733147][ T7238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.758568][ T7238] usb 1-1: Product: syz [ 412.771970][ T7238] usb 1-1: Manufacturer: syz [ 412.786269][ T7238] usb 1-1: SerialNumber: syz [ 412.859156][ T7238] usb 1-1: config 0 descriptor?? [ 413.687459][ T7238] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 413.718537][ T7238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 413.812970][ T7238] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 413.882711][ T7238] usb 1-1: media controller created [ 413.937230][ T7238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.841808][ T7238] zl10353_read_register: readreg error (reg=127, ret==0) [ 415.851060][ T7238] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 415.859779][ T7238] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 415.908739][ T7238] usb 1-1: USB disconnect, device number 14 [ 415.989323][ T7238] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 417.790416][ T7893] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 417.937092][ T4232] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 418.192630][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 418.317257][ T4232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.342596][ T4232] usb 6-1: config 0 has no interfaces? [ 418.517403][ T4232] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 418.532633][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.552611][ T4232] usb 6-1: Product: syz [ 418.561667][ T4232] usb 6-1: Manufacturer: syz [ 418.571621][ T4232] usb 6-1: SerialNumber: syz [ 418.587820][ T4232] usb 6-1: config 0 descriptor?? [ 418.872212][ T7907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.828'. [ 418.895639][ T4232] usb 6-1: USB disconnect, device number 6 [ 419.122772][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 419.135730][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 419.144287][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 419.154848][ T146] Workqueue: hci5 hci_rx_work [ 419.159625][ T146] Call Trace: [ 419.162950][ T146] [ 419.165914][ T146] dump_stack_lvl+0x188/0x250 [ 419.170664][ T146] ? show_regs_print_info+0x20/0x20 [ 419.175916][ T146] ? load_image+0x400/0x400 [ 419.180478][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 419.186002][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 419.190766][ T146] ? process_one_work+0x85f/0x1010 [ 419.195928][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 419.201185][ T146] kobject_add_internal+0x6e0/0xd90 [ 419.206454][ T146] kobject_add+0x160/0x230 [ 419.211016][ T146] ? kobject_init+0x1d0/0x1d0 [ 419.215756][ T146] ? klist_children_get+0x50/0x50 [ 419.220839][ T146] ? get_device_parent+0x121/0x3f0 [ 419.226012][ T146] device_add+0x483/0xfb0 [ 419.230415][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 419.235417][ T146] le_conn_complete_evt+0xc48/0x15c0 [ 419.240788][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 419.245977][ T146] ? __mutex_trylock_common+0x155/0x260 [ 419.251685][ T146] hci_le_meta_evt+0x285/0x3c90 [ 419.256589][ T146] ? hci_event_packet+0x37b/0x1370 [ 419.261769][ T146] ? __lock_acquire+0x7d10/0x7d10 [ 419.266954][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 419.273074][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 419.278870][ T146] ? mark_lock+0x94/0x320 [ 419.283252][ T146] ? mutex_unlock+0x10/0x10 [ 419.287813][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 419.293851][ T146] ? lock_chain_count+0x20/0x20 [ 419.298943][ T146] ? __rwlock_init+0x140/0x140 [ 419.303767][ T146] hci_event_packet+0xe48/0x1370 [ 419.308849][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 419.314206][ T146] ? rcu_lock_release+0x20/0x20 [ 419.319120][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 419.324382][ T146] hci_rx_work+0x255/0xa10 [ 419.328877][ T146] process_one_work+0x85f/0x1010 [ 419.333979][ T146] ? worker_detach_from_pool+0x240/0x240 [ 419.339671][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 419.345097][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 419.350178][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 419.355887][ T146] ? wq_worker_running+0x97/0x170 [ 419.360975][ T146] worker_thread+0xaa6/0x1290 [ 419.365733][ T146] kthread+0x436/0x520 [ 419.369846][ T146] ? rcu_lock_release+0x20/0x20 [ 419.374746][ T146] ? kthread_blkcg+0xd0/0xd0 [ 419.379591][ T146] ret_from_fork+0x1f/0x30 [ 419.384067][ T146] [ 419.389968][ T146] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 419.404333][ T146] Bluetooth: hci5: failed to register connection device [ 422.285027][ T7944] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 426.197065][ T4293] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 426.417297][ T1325] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 426.450761][ T4293] usb 5-1: Using ep0 maxpacket: 32 [ 426.642699][ T4293] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 426.665325][ T4293] usb 5-1: config 0 has no interface number 0 [ 426.671924][ T4293] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.704362][ T4293] usb 5-1: config 0 interface 85 has no altsetting 0 [ 426.767239][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 426.867387][ T4293] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 426.880342][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.888924][ T1325] usb 1-1: config 0 has no interfaces? [ 426.894621][ T1325] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 426.907182][ T4293] usb 5-1: Product: syz [ 426.915380][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.923546][ T4293] usb 5-1: Manufacturer: syz [ 426.929693][ T4293] usb 5-1: SerialNumber: syz [ 426.936126][ T1325] usb 1-1: config 0 descriptor?? [ 426.944614][ T4293] usb 5-1: config 0 descriptor?? [ 427.193450][ T7973] loop2: detected capacity change from 0 to 7 [ 427.234399][ T6024] Dev loop2: unable to read RDB block 7 [ 427.246172][ T6024] loop2: unable to read partition table [ 427.255057][ T6024] loop2: partition table beyond EOD, truncated [ 427.277612][ T7973] Dev loop2: unable to read RDB block 7 [ 427.283342][ T7973] loop2: unable to read partition table [ 427.297918][ T7973] loop2: partition table beyond EOD, truncated [ 427.308940][ T7973] loop_reread_partitions: partition scan of loop2 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 427.531377][ T7238] usb 1-1: USB disconnect, device number 15 [ 429.417417][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.860'. [ 429.427456][ T4293] appletouch 5-1:0.85: Failed to request geyser raw mode [ 429.434783][ T4293] appletouch: probe of 5-1:0.85 failed with error -5 [ 430.870858][ T4293] usb 5-1: USB disconnect, device number 7 [ 431.693079][ T8029] ALSA: seq fatal error: cannot create timer (-22) [ 431.960008][ T8036] loop5: detected capacity change from 0 to 256 [ 432.223596][ T8036] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 432.334554][ T8036] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 432.358920][ T8083] loop6: detected capacity change from 0 to 512 [ 432.407116][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 432.407143][ T26] audit: type=1804 audit(1770355156.199:29): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.862" name="bus" dev="ramfs" ino=44031 res=1 errno=0 [ 432.480284][ T8036] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 432.647835][ T8083] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 432.658016][ T8083] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 432.668626][ T8083] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 432.702334][ T8083] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 432.710511][ T8083] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 432.718512][ T8083] EXT4-fs (loop6): failed to initialize system zone (-117) [ 432.726039][ T8083] EXT4-fs (loop6): mount failed [ 432.800155][ T26] audit: type=1804 audit(1770355156.309:30): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.862" name="bus" dev="ramfs" ino=44031 res=1 errno=0 [ 434.747153][ T1325] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 435.027237][ T1325] usb 5-1: Using ep0 maxpacket: 16 [ 435.237328][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.277111][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.294833][ T1325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 435.313895][ T1325] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 435.323698][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.539809][ T1325] usb 5-1: config 0 descriptor?? [ 436.375926][ T8124] loop5: detected capacity change from 0 to 256 [ 436.451428][ T8124] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.483304][ T8124] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 437.278569][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 437.285895][ T1325] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 437.372243][ T8124] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 437.434507][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.473348][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.483481][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.491316][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.498925][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.507802][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.515202][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.522962][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.600285][ T8134] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 438.606613][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.606939][ T8134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 438.622760][ T8134] vhci_hcd vhci_hcd.0: Device attached [ 438.678490][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.723476][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.754108][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.771869][ T1325] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 438.807371][ T1325] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input8 [ 438.897211][ T23] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 438.922591][ T1325] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 439.003942][ T1325] usb 5-1: USB disconnect, device number 8 [ 439.133323][ T8149] fido_id[8149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 440.765617][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.772070][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.843818][ T8141] vhci_hcd: connection reset by peer [ 440.886180][ T8061] vhci_hcd: stop threads [ 440.987079][ T8061] vhci_hcd: release socket [ 441.077115][ T8061] vhci_hcd: disconnect device [ 444.320696][ T23] vhci_hcd: vhci_device speed not set [ 445.970559][ T8205] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 445.977143][ T8205] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.985706][ T8205] vhci_hcd vhci_hcd.0: Device attached [ 446.526067][ T8216] xt_TCPMSS: Only works on TCP SYN packets [ 447.545822][ T23] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 447.666858][ T8238] loop0: detected capacity change from 0 to 256 [ 447.771347][ T8238] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 447.799323][ T8238] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 447.831633][ T8238] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 448.682451][ T8210] vhci_hcd: connection reset by peer [ 448.978047][ T155] vhci_hcd: stop threads [ 448.986738][ T155] vhci_hcd: release socket [ 449.105660][ T146] Bluetooth: Frame is too long (len 117, expected len 4) [ 450.105295][ T155] vhci_hcd: disconnect device [ 450.548710][ T8263] netlink: 173 bytes leftover after parsing attributes in process `syz.6.919'. [ 453.930367][ T23] vhci_hcd: vhci_device speed not set [ 453.937511][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 453.989444][ T8286] loop2: detected capacity change from 0 to 256 [ 454.162118][ T8286] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.176259][ T8286] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 454.206603][ T8286] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 454.457024][ T13] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 454.607210][ T21] usb 5-1: device descriptor read/all, error -71 [ 455.827820][ T13] usb 1-1: device not accepting address 16, error -71 [ 456.102930][ T8316] netlink: 173 bytes leftover after parsing attributes in process `syz.5.936'. [ 459.887328][ T1109] Bluetooth: hci0: command 0x1407 tx timeout [ 460.021601][ T8341] loop4: detected capacity change from 0 to 256 [ 460.413461][ T8341] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 461.051761][ T8341] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 461.329291][ T8341] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 462.210032][ T8363] netlink: 592 bytes leftover after parsing attributes in process `syz.6.951'. [ 465.601506][ T8395] loop6: detected capacity change from 0 to 256 [ 465.669892][ T8395] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 465.744154][ T8395] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 465.789410][ T8395] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 467.309904][ T8420] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 467.501295][ T8435] loop6: detected capacity change from 0 to 256 [ 468.153370][ T8435] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 468.197167][ T8435] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 468.252119][ T8435] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 469.626451][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 471.397818][ T26] audit: type=1326 audit(1770355195.199:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.2.984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67130b2eb9 code=0x0 [ 471.885634][ T8484] loop5: detected capacity change from 0 to 256 [ 471.945242][ T8484] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 471.967202][ T8484] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 471.993431][ T8484] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 472.249043][ T26] audit: type=1326 audit(1770355196.059:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.6.985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f38e82eb9 code=0x0 [ 476.133366][ T8521] netlink: 173 bytes leftover after parsing attributes in process `syz.5.998'. [ 476.868360][ T8527] loop6: detected capacity change from 0 to 256 [ 476.913366][ T8527] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 476.967133][ T8527] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 477.055483][ T8527] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 477.117416][ T1109] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 478.417048][ T1109] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 478.448097][ T1109] usb 6-1: config 0 interface 0 has no altsetting 0 [ 478.767610][ T1109] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 479.471356][ T1109] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 479.482531][ T1109] usb 6-1: Product: syz [ 479.487505][ T1109] usb 6-1: Manufacturer: syz [ 479.493516][ T1109] usb 6-1: SerialNumber: syz [ 479.650702][ T1109] usb 6-1: config 0 descriptor?? [ 479.909604][ T1109] usb 6-1: selecting invalid altsetting 0 [ 481.062164][ T1109] usb 6-1: USB disconnect, device number 7 [ 482.287892][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.557498][ T4254] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 484.847536][ T4254] usb 5-1: Using ep0 maxpacket: 8 [ 486.499447][ T4254] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 486.937618][ T4254] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 486.967138][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.300832][ T4254] usb 5-1: Product: syz [ 490.007075][ T4254] usb 5-1: Manufacturer: syz [ 490.012768][ T4254] usb 5-1: SerialNumber: syz [ 490.048047][ T4254] usb 5-1: config 0 descriptor?? [ 490.168014][ T4254] usb 5-1: can't set config #0, error -71 [ 490.176044][ T4254] usb 5-1: USB disconnect, device number 11 [ 496.187548][ T8664] xt_TCPMSS: Only works on TCP SYN packets [ 503.221736][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.238870][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.187242][ T1109] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 508.819486][ T1109] usb 3-1: config 0 interface 0 has no altsetting 0 [ 508.832028][ T1109] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 508.846896][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.278354][ T1109] usb 3-1: config 0 descriptor?? [ 510.617400][ T1109] usb 3-1: can't set config #0, error -71 [ 510.639825][ T1109] usb 3-1: USB disconnect, device number 17 [ 510.784636][ T8778] loop2: detected capacity change from 0 to 256 [ 511.644281][ T8782] netlink: 'syz.4.1079': attribute type 1 has an invalid length. [ 512.251432][ T8787] loop2: detected capacity change from 0 to 4096 [ 512.745508][ T8787] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 512.787029][ T8787] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,quota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 512.838094][ T8784] device veth3 entered promiscuous mode [ 513.659377][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 514.631389][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 515.597094][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 515.717391][ T7] usb 3-1: config 64 has an invalid interface number: 23 but max is 1 [ 515.746339][ T7] usb 3-1: config 64 has an invalid interface number: 83 but max is 1 [ 515.923107][ T7] usb 3-1: config 64 has no interface number 0 [ 516.894526][ T7] usb 3-1: config 64 has no interface number 1 [ 516.902126][ T7] usb 3-1: config 64 interface 23 has no altsetting 0 [ 516.910500][ T7] usb 3-1: config 64 interface 83 has no altsetting 0 [ 517.236738][ T7] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=3e.66 [ 517.827370][ T8835] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 517.897260][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.945604][ T7] usb 3-1: Product: syz [ 517.950188][ T7] usb 3-1: Manufacturer: syz [ 517.954918][ T7] usb 3-1: SerialNumber: syz [ 518.017276][ T7] usb 3-1: can't set config #64, error -71 [ 518.047959][ T7] usb 3-1: USB disconnect, device number 18 [ 518.279439][ T4232] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 518.757343][ T4232] usb 1-1: config 2 has an invalid interface number: 220 but max is 0 [ 518.798657][ T4232] usb 1-1: config 2 has no interface number 0 [ 518.945706][ T4232] usb 1-1: config 2 interface 220 has no altsetting 0 [ 519.397968][ T4232] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=94.f4 [ 519.465320][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.501412][ T4232] usb 1-1: Product: syz [ 519.514696][ T4232] usb 1-1: Manufacturer: syz [ 519.533021][ T4232] usb 1-1: SerialNumber: syz [ 519.834994][ T4232] usb 1-1: USB disconnect, device number 18 [ 522.460613][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.471400][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.249168][ T8889] device bridge_slave_1 left promiscuous mode [ 524.269933][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.922430][ T8889] device bridge_slave_0 left promiscuous mode [ 525.070922][ T8909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1114'. [ 525.343150][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.985619][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 532.727198][ T1325] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 533.138269][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 533.163296][ T1325] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 533.193264][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.224422][ T1325] usb 6-1: config 0 descriptor?? [ 533.257395][ T8985] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 533.750439][ T1325] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 534.385395][ T4241] usb 6-1: USB disconnect, device number 8 [ 536.468785][ T9028] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 536.592529][ T9028] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 536.603109][ T9028] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 536.619052][ T9028] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 536.629216][ T9028] device geneve2 entered promiscuous mode [ 537.068536][ T9028] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 537.916175][ T9028] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 537.931073][ T9028] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 537.955295][ T9028] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 538.858572][ T13] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 539.395042][ T13] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD4, skipping [ 540.358055][ T13] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 540.367766][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.376266][ T13] usb 1-1: Product: syz [ 540.381525][ T13] usb 1-1: Manufacturer: syz [ 540.386308][ T13] usb 1-1: SerialNumber: syz [ 540.644109][ T13] usb 1-1: config 0 descriptor?? [ 540.668373][ T9043] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 540.724537][ T13] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 540.787899][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.038959][ T4241] usb 1-1: USB disconnect, device number 19 [ 542.703135][ T9101] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1173'. [ 545.512273][ T9138] [ 545.516427][ T9138] ============================= [ 545.522620][ T9138] WARNING: suspicious RCU usage [ 545.545342][ T9138] syzkaller #0 Not tainted [ 545.550193][ T9138] ----------------------------- [ 545.556225][ T9138] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 545.565612][ T9138] [ 545.565612][ T9138] other info that might help us debug this: [ 545.565612][ T9138] [ 545.577670][ T9138] [ 545.577670][ T9138] rcu_scheduler_active = 2, debug_locks = 1 [ 545.586562][ T9138] 1 lock held by syz.4.1190/9138: [ 545.592277][ T9138] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 545.603108][ T9138] [ 545.603108][ T9138] stack backtrace: [ 546.026360][ T9138] CPU: 1 PID: 9138 Comm: syz.4.1190 Not tainted syzkaller #0 [ 546.034099][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 546.046718][ T9138] Call Trace: [ 546.050383][ T9138] [ 546.053518][ T9138] dump_stack_lvl+0x188/0x250 [ 546.058330][ T9138] ? load_image+0x400/0x400 [ 546.062979][ T9138] ? show_regs_print_info+0x20/0x20 [ 546.068578][ T9138] ? lockdep_rcu_suspicious+0x110/0x180 [ 546.075192][ T9138] ? local_bh_enable+0x20/0x20 [ 546.080832][ T9138] rhltable_lookup+0x7a9/0x7c0 [ 546.087030][ T9138] ? local_bh_enable+0x20/0x20 [ 546.093286][ T9138] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 546.102115][ T9138] ? release_firmware_map_entry+0x190/0x190 [ 546.109855][ T9138] ? lock_chain_count+0x20/0x20 [ 546.116100][ T9138] ? mr_mfc_find_parent+0x190/0x190 [ 546.122773][ T9138] ? local_bh_enable+0x20/0x20 [ 546.129286][ T9138] ? preempt_schedule+0xbc/0xd0 [ 546.137134][ T9138] ? ipmr_mfc_add+0x212d/0x2d40 [ 546.143875][ T9138] ? preempt_schedule+0xbc/0xd0 [ 546.149490][ T9138] ? schedule_preempt_disabled+0x20/0x20 [ 546.156864][ T9138] ? lock_chain_count+0x20/0x20 [ 546.162363][ T9138] mr_mfc_find_any_parent+0xb6/0x1e0 [ 546.169292][ T9138] ? local_bh_enable+0x20/0x20 [ 546.176981][ T9138] ip_mr_forward+0x24c/0xf90 [ 546.182033][ T9138] ipmr_mfc_add+0x23cc/0x2d40 [ 546.188119][ T9138] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 546.193338][ T9138] ? __lock_acquire+0x7d10/0x7d10 [ 546.198886][ T9138] ip_mroute_setsockopt+0xeaf/0x1250 [ 546.205294][ T9138] ? ipmr_rule_default+0x70/0x70 [ 546.211259][ T9138] ? __might_sleep+0xf0/0xf0 [ 546.216091][ T9138] ip_setsockopt+0x568/0x3130 [ 546.221524][ T9138] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 546.227127][ T9138] ? aa_sk_perm+0x7dc/0x910 [ 546.231682][ T9138] ? aa_af_perm+0x340/0x340 [ 546.236224][ T9138] ? __fget_files+0x40f/0x480 [ 546.241410][ T9138] ? aa_sock_opt_perm+0x74/0x100 [ 546.247094][ T9138] ? sock_common_setsockopt+0x32/0xb0 [ 546.253255][ T9138] ? raw_setsockopt+0xc5/0x180 [ 546.258963][ T9138] ? sock_common_recvmsg+0x1c0/0x1c0 [ 546.264432][ T9138] __sys_setsockopt+0x2bf/0x3d0 [ 546.269842][ T9138] __x64_sys_setsockopt+0xb1/0xc0 [ 546.274942][ T9138] do_syscall_64+0x4c/0xa0 [ 546.279584][ T9138] ? clear_bhb_loop+0x30/0x80 [ 546.285636][ T9138] ? clear_bhb_loop+0x30/0x80 [ 546.290375][ T9138] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 546.296330][ T9138] RIP: 0033:0x7ff7db589eb9 [ 546.300848][ T9138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.321305][ T9138] RSP: 002b:00007ff7d97e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 546.330237][ T9138] RAX: ffffffffffffffda RBX: 00007ff7db804fa0 RCX: 00007ff7db589eb9 [ 546.339089][ T9138] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 546.347903][ T9138] RBP: 00007ff7db5f7c1f R08: 000000000000003c R09: 0000000000000000 [ 546.355917][ T9138] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 546.363941][ T9138] R13: 00007ff7db805038 R14: 00007ff7db804fa0 R15: 00007ffc6634afb8 [ 546.372046][ T9138] [ 546.460653][ T9138] [ 546.463157][ T9138] ============================= [ 546.468991][ T9138] WARNING: suspicious RCU usage [ 546.474681][ T9138] syzkaller #0 Not tainted [ 546.726996][ T9138] ----------------------------- [ 546.732394][ T9138] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 546.818093][ T9138] [ 546.818093][ T9138] other info that might help us debug this: [ 546.818093][ T9138] [ 546.926489][ T9138] [ 546.926489][ T9138] rcu_scheduler_active = 2, debug_locks = 1 [ 547.006265][ T9138] 1 lock held by syz.4.1190/9138: [ 547.064639][ T9138] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 547.201364][ T9138] [ 547.201364][ T9138] stack backtrace: [ 547.341527][ T9138] CPU: 0 PID: 9138 Comm: syz.4.1190 Not tainted syzkaller #0 [ 547.349087][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 547.359198][ T9138] Call Trace: [ 547.362521][ T9138] [ 547.365482][ T9138] dump_stack_lvl+0x188/0x250 [ 547.370376][ T9138] ? load_image+0x400/0x400 [ 547.375011][ T9138] ? show_regs_print_info+0x20/0x20 [ 547.380462][ T9138] ? print_lock+0xa2/0x1a0 [ 547.385096][ T9138] ? lockdep_rcu_suspicious+0x110/0x180 [ 547.390689][ T9138] ? local_bh_enable+0x20/0x20 [ 547.395539][ T9138] rhltable_lookup+0x52a/0x7c0 [ 547.400346][ T9138] ? local_bh_enable+0x20/0x20 [ 547.405443][ T9138] ? mr_mfc_find_parent+0x190/0x190 [ 547.411039][ T9138] ? local_bh_enable+0x20/0x20 [ 547.416308][ T9138] ? preempt_schedule+0xbc/0xd0 [ 547.421209][ T9138] ? ipmr_mfc_add+0x212d/0x2d40 [ 547.426216][ T9138] ? preempt_schedule+0xbc/0xd0 [ 547.431118][ T9138] ? schedule_preempt_disabled+0x20/0x20 [ 547.436797][ T9138] ? lock_chain_count+0x20/0x20 [ 547.441982][ T9138] mr_mfc_find_any_parent+0xb6/0x1e0 [ 547.447854][ T9138] ? local_bh_enable+0x20/0x20 [ 547.452688][ T9138] ip_mr_forward+0x24c/0xf90 [ 547.457765][ T9138] ipmr_mfc_add+0x23cc/0x2d40 [ 547.463541][ T9138] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 547.468718][ T9138] ? __lock_acquire+0x7d10/0x7d10 [ 547.474141][ T9138] ip_mroute_setsockopt+0xeaf/0x1250 [ 547.479518][ T9138] ? ipmr_rule_default+0x70/0x70 [ 547.484951][ T9138] ? __might_sleep+0xf0/0xf0 [ 547.489688][ T9138] ip_setsockopt+0x568/0x3130 [ 547.494438][ T9138] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 547.499870][ T9138] ? aa_sk_perm+0x7dc/0x910 [ 547.504434][ T9138] ? aa_af_perm+0x340/0x340 [ 547.508987][ T9138] ? __fget_files+0x40f/0x480 [ 547.513726][ T9138] ? aa_sock_opt_perm+0x74/0x100 [ 547.518710][ T9138] ? sock_common_setsockopt+0x32/0xb0 [ 547.524646][ T9138] ? raw_setsockopt+0xc5/0x180 [ 547.529577][ T9138] ? sock_common_recvmsg+0x1c0/0x1c0 [ 547.534925][ T9138] __sys_setsockopt+0x2bf/0x3d0 [ 547.540100][ T9138] __x64_sys_setsockopt+0xb1/0xc0 [ 547.545200][ T9138] do_syscall_64+0x4c/0xa0 [ 547.549688][ T9138] ? clear_bhb_loop+0x30/0x80 [ 547.554415][ T9138] ? clear_bhb_loop+0x30/0x80 [ 547.559367][ T9138] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.565397][ T9138] RIP: 0033:0x7ff7db589eb9 [ 547.569958][ T9138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.589612][ T9138] RSP: 002b:00007ff7d97e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 547.598772][ T9138] RAX: ffffffffffffffda RBX: 00007ff7db804fa0 RCX: 00007ff7db589eb9 [ 547.606950][ T9138] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 547.614949][ T9138] RBP: 00007ff7db5f7c1f R08: 000000000000003c R09: 0000000000000000 [ 547.622993][ T9138] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 547.631008][ T9138] R13: 00007ff7db805038 R14: 00007ff7db804fa0 R15: 00007ffc6634afb8 [ 547.639053][ T9138] [ 547.642125][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.656796][ T9138] [ 547.659408][ T9138] ============================= [ 547.665718][ T9138] WARNING: suspicious RCU usage [ 547.672314][ T9138] syzkaller #0 Not tainted [ 547.677253][ T9138] ----------------------------- [ 547.682590][ T9138] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 547.692326][ T9138] [ 547.692326][ T9138] other info that might help us debug this: [ 547.692326][ T9138] [ 547.703422][ T9138] [ 547.703422][ T9138] rcu_scheduler_active = 2, debug_locks = 1 [ 547.712269][ T9138] 1 lock held by syz.4.1190/9138: [ 547.717822][ T9138] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 547.729125][ T9138] [ 547.729125][ T9138] stack backtrace: [ 547.735251][ T9138] CPU: 0 PID: 9138 Comm: syz.4.1190 Not tainted syzkaller #0 [ 547.743066][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 547.753438][ T9138] Call Trace: [ 547.756774][ T9138] [ 547.759746][ T9138] dump_stack_lvl+0x188/0x250 [ 547.764619][ T9138] ? load_image+0x400/0x400 [ 547.769475][ T9138] ? show_regs_print_info+0x20/0x20 [ 547.774847][ T9138] ? lockdep_rcu_suspicious+0x110/0x180 [ 547.780542][ T9138] ? local_bh_enable+0x20/0x20 [ 547.785348][ T9138] rhltable_lookup+0x61e/0x7c0 [ 547.790602][ T9138] ? local_bh_enable+0x20/0x20 [ 547.795430][ T9138] ? mr_mfc_find_parent+0x190/0x190 [ 547.800759][ T9138] ? local_bh_enable+0x20/0x20 [ 547.805629][ T9138] ? preempt_schedule+0xbc/0xd0 [ 547.810605][ T9138] ? ipmr_mfc_add+0x212d/0x2d40 [ 547.815501][ T9138] ? preempt_schedule+0xbc/0xd0 [ 547.820385][ T9138] ? schedule_preempt_disabled+0x20/0x20 [ 547.826064][ T9138] ? lock_chain_count+0x20/0x20 [ 547.831191][ T9138] mr_mfc_find_any_parent+0xb6/0x1e0 [ 547.836626][ T9138] ? local_bh_enable+0x20/0x20 [ 547.841532][ T9138] ip_mr_forward+0x24c/0xf90 [ 547.846281][ T9138] ipmr_mfc_add+0x23cc/0x2d40 [ 547.851686][ T9138] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 547.856911][ T9138] ? __lock_acquire+0x7d10/0x7d10 [ 547.862142][ T9138] ip_mroute_setsockopt+0xeaf/0x1250 [ 547.867599][ T9138] ? ipmr_rule_default+0x70/0x70 [ 547.872602][ T9138] ? __might_sleep+0xf0/0xf0 [ 547.877684][ T9138] ip_setsockopt+0x568/0x3130 [ 547.882498][ T9138] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 547.888088][ T9138] ? aa_sk_perm+0x7dc/0x910 [ 547.892818][ T9138] ? aa_af_perm+0x340/0x340 [ 547.897446][ T9138] ? __fget_files+0x40f/0x480 [ 547.902165][ T9138] ? aa_sock_opt_perm+0x74/0x100 [ 547.907232][ T9138] ? sock_common_setsockopt+0x32/0xb0 [ 547.912644][ T9138] ? raw_setsockopt+0xc5/0x180 [ 547.918680][ T9138] ? sock_common_recvmsg+0x1c0/0x1c0 [ 547.926338][ T9138] __sys_setsockopt+0x2bf/0x3d0 [ 547.931472][ T9138] __x64_sys_setsockopt+0xb1/0xc0 [ 547.936973][ T9138] do_syscall_64+0x4c/0xa0 [ 547.941684][ T9138] ? clear_bhb_loop+0x30/0x80 [ 547.946417][ T9138] ? clear_bhb_loop+0x30/0x80 [ 547.951221][ T9138] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.957156][ T9138] RIP: 0033:0x7ff7db589eb9 [ 547.961611][ T9138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.982763][ T9138] RSP: 002b:00007ff7d97e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 547.991505][ T9138] RAX: ffffffffffffffda RBX: 00007ff7db804fa0 RCX: 00007ff7db589eb9 [ 548.000572][ T9138] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 548.009335][ T9138] RBP: 00007ff7db5f7c1f R08: 000000000000003c R09: 0000000000000000 [ 548.017449][ T9138] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 548.026869][ T9138] R13: 00007ff7db805038 R14: 00007ff7db804fa0 R15: 00007ffc6634afb8 [ 548.036528][ T9138] [ 548.040201][ C0] vkms_vblank_simulate: vblank timer overrun