last executing test programs: 4.213950421s ago: executing program 0 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.86783061s ago: executing program 0 (id=162): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400200001600830425b97000fbdbdf2500000000000000000000000000000001200100000000100000f90000000000004e2100044e2200030a00200200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001"], 0x240}}, 0x4000880) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 3.500201248s ago: executing program 0 (id=165): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000800)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@utf8no}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 3.254544004s ago: executing program 3 (id=168): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00g\x00\b\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 2.857021743s ago: executing program 0 (id=172): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x4, 0x80000001, 0x8}, &(0x7f0000000640)=0x10) 2.656583778s ago: executing program 3 (id=174): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="e0", 0x1) 2.341808505s ago: executing program 3 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xbf}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 2.12027928s ago: executing program 2 (id=179): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 2.108914201s ago: executing program 0 (id=180): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x8000000000000001, 0x0) 2.009891253s ago: executing program 3 (id=181): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x36, 0x8001, 0xc445, 0x3, 0xfa, 0x4}, 0xc) listen(r0, 0x80000000) 1.854514957s ago: executing program 2 (id=182): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) 1.705871701s ago: executing program 3 (id=184): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x29, 0x43}], 0x10}}], 0x1, 0x4000000) 1.644228682s ago: executing program 2 (id=185): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfb, 0x2, 0x7fff7ffc}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.416393377s ago: executing program 1 (id=186): syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) 1.406849428s ago: executing program 0 (id=187): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x3, &(0x7f0000000140)={0x4, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 1.405340037s ago: executing program 3 (id=188): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224"], 0x0) close(r0) 1.358817879s ago: executing program 2 (id=189): socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.074205485s ago: executing program 2 (id=190): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) 918.663059ms ago: executing program 2 (id=191): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0x2, 0x1, 0x0, 0x0}], 0x1}) 811.531661ms ago: executing program 1 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000010, 0x0, 0x8}]}) 562.623967ms ago: executing program 1 (id=193): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) 416.719971ms ago: executing program 1 (id=194): mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r0, &(0x7f0000000800)='file d*vio.c +', 0xe) 247.091005ms ago: executing program 1 (id=195): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f02b, 0x1}) 0s ago: executing program 1 (id=196): r0 = semget$private(0x0, 0x7, 0x180) semtimedop(r0, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) semop(r0, &(0x7f0000000000)=[{0x4, 0xffff}], 0x1) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 83.367435][ T5761] cgroup: Unknown subsys name 'net' [ 83.501976][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.173958][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.948161][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.972690][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.980841][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.982849][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.996198][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.004707][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.005532][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.016991][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.022248][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.029398][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.039881][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.045291][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.047703][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.055569][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.068807][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.070023][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.076760][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.091796][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.100194][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.109634][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.142684][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.152317][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.167837][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.180520][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.820628][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.968020][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.984325][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.023910][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.044133][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.052951][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.060973][ T5773] bridge_slave_0: entered allmulticast mode [ 88.069084][ T5773] bridge_slave_0: entered promiscuous mode [ 88.127205][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.134511][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.141773][ T5773] bridge_slave_1: entered allmulticast mode [ 88.149055][ T5773] bridge_slave_1: entered promiscuous mode [ 88.228930][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.267526][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.323269][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.330522][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.338161][ T5778] bridge_slave_0: entered allmulticast mode [ 88.345997][ T5778] bridge_slave_0: entered promiscuous mode [ 88.355559][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.363045][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.370513][ T5778] bridge_slave_1: entered allmulticast mode [ 88.378094][ T5778] bridge_slave_1: entered promiscuous mode [ 88.410373][ T5773] team0: Port device team_slave_0 added [ 88.451471][ T5773] team0: Port device team_slave_1 added [ 88.469253][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.476629][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.484343][ T5774] bridge_slave_0: entered allmulticast mode [ 88.491844][ T5774] bridge_slave_0: entered promiscuous mode [ 88.500120][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.510467][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.518225][ T5782] bridge_slave_0: entered allmulticast mode [ 88.525973][ T5782] bridge_slave_0: entered promiscuous mode [ 88.548980][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.558998][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.566557][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.574119][ T5774] bridge_slave_1: entered allmulticast mode [ 88.581179][ T5774] bridge_slave_1: entered promiscuous mode [ 88.588299][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.596331][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.603920][ T5782] bridge_slave_1: entered allmulticast mode [ 88.610961][ T5782] bridge_slave_1: entered promiscuous mode [ 88.630078][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.699843][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.707117][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.733949][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.749035][ T5778] team0: Port device team_slave_0 added [ 88.758610][ T5778] team0: Port device team_slave_1 added [ 88.767303][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.779718][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.803046][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.810058][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.836422][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.890044][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.901985][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.909677][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.935953][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.963353][ T5774] team0: Port device team_slave_0 added [ 88.971649][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.982937][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.989947][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.016435][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.039610][ T5774] team0: Port device team_slave_1 added [ 89.087818][ T5782] team0: Port device team_slave_0 added [ 89.125590][ T5773] hsr_slave_0: entered promiscuous mode [ 89.132791][ T5773] hsr_slave_1: entered promiscuous mode [ 89.142527][ T5782] team0: Port device team_slave_1 added [ 89.158109][ T5777] Bluetooth: hci1: command tx timeout [ 89.165749][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.173230][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.199758][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.232326][ T5777] Bluetooth: hci3: command tx timeout [ 89.232589][ T5790] Bluetooth: hci2: command tx timeout [ 89.244921][ T5784] Bluetooth: hci0: command tx timeout [ 89.250454][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.257914][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.284279][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.309633][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.317727][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.344130][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.373034][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.380035][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.406435][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.449444][ T5778] hsr_slave_0: entered promiscuous mode [ 89.456993][ T5778] hsr_slave_1: entered promiscuous mode [ 89.463918][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.471748][ T5778] Cannot create hsr debugfs directory [ 89.554211][ T5782] hsr_slave_0: entered promiscuous mode [ 89.560711][ T5782] hsr_slave_1: entered promiscuous mode [ 89.567435][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.575126][ T5782] Cannot create hsr debugfs directory [ 89.601587][ T5774] hsr_slave_0: entered promiscuous mode [ 89.609403][ T5774] hsr_slave_1: entered promiscuous mode [ 89.616741][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.625037][ T5774] Cannot create hsr debugfs directory [ 90.055649][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.082570][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.094931][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.119683][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.176364][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.198251][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.209966][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.222813][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.311058][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.326987][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.343297][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.357736][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.486512][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.499301][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.527371][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.537242][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.548392][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.636462][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.666931][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.674370][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.705865][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.713142][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.725149][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.774898][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.810221][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.817467][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.849221][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.856464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.908187][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.931929][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.016555][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.034774][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.062491][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.069795][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.137319][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.144601][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.175738][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.183029][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.225021][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.232249][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.249618][ T5784] Bluetooth: hci1: command tx timeout [ 91.313534][ T5784] Bluetooth: hci0: command tx timeout [ 91.319106][ T5784] Bluetooth: hci2: command tx timeout [ 91.324666][ T5784] Bluetooth: hci3: command tx timeout [ 91.579761][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.681820][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.790140][ T5773] veth0_vlan: entered promiscuous mode [ 91.824691][ T5778] veth0_vlan: entered promiscuous mode [ 91.867573][ T5773] veth1_vlan: entered promiscuous mode [ 91.882733][ T5778] veth1_vlan: entered promiscuous mode [ 91.970609][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.986700][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.997337][ T5778] veth0_macvtap: entered promiscuous mode [ 92.010259][ T5778] veth1_macvtap: entered promiscuous mode [ 92.075550][ T5773] veth0_macvtap: entered promiscuous mode [ 92.099296][ T5773] veth1_macvtap: entered promiscuous mode [ 92.119248][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.144239][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.206594][ T5774] veth0_vlan: entered promiscuous mode [ 92.216962][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.226770][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.237975][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.247134][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.260980][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.280104][ T788] cfg80211: failed to load regulatory.db [ 92.286998][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.305422][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.337480][ T5782] veth0_vlan: entered promiscuous mode [ 92.354347][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.365543][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.377494][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.390797][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.400445][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.413637][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.423972][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.457238][ T5782] veth1_vlan: entered promiscuous mode [ 92.467794][ T5774] veth1_vlan: entered promiscuous mode [ 92.581817][ T5782] veth0_macvtap: entered promiscuous mode [ 92.614088][ T5782] veth1_macvtap: entered promiscuous mode [ 92.621749][ T5774] veth0_macvtap: entered promiscuous mode [ 92.666647][ T5774] veth1_macvtap: entered promiscuous mode [ 92.705098][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.714186][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.756645][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.768723][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.779688][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.795716][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.806122][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.816981][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.828608][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.844994][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.855865][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.866574][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.877138][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.888505][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.899444][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.910965][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.933906][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.946277][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.960593][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.971154][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.983924][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.996855][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.007913][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.017917][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.029641][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.039627][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.050269][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.062587][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.095009][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.114626][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.130323][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.144762][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159101][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.168205][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.180190][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.196836][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.205743][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.214821][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.264426][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.282205][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.313234][ T5777] Bluetooth: hci1: command tx timeout [ 93.393838][ T5784] Bluetooth: hci0: command tx timeout [ 93.394997][ T5790] Bluetooth: hci3: command tx timeout [ 93.399576][ T5777] Bluetooth: hci2: command tx timeout [ 93.447702][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.467234][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.585632][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.611540][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.671236][ T5846] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 93.703753][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.711661][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.883439][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.917426][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.978590][ T5852] syz.0.6[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.716879][ T5873] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.978763][ T5852] loop0: detected capacity change from 0 to 32768 [ 95.000602][ T5852] ======================================================= [ 95.000602][ T5852] WARNING: The mand mount option has been deprecated and [ 95.000602][ T5852] and is ignored by this kernel. Remove the mand [ 95.000602][ T5852] option from the mount to silence this warning. [ 95.000602][ T5852] ======================================================= [ 95.258770][ T5852] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.308326][ T5885] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.396277][ T5777] Bluetooth: hci1: command tx timeout [ 95.473685][ T5777] Bluetooth: hci2: command tx timeout [ 95.479181][ T5777] Bluetooth: hci0: command tx timeout [ 95.485423][ T5790] Bluetooth: hci3: command tx timeout [ 95.661542][ T5876] loop2: detected capacity change from 0 to 32768 [ 95.679808][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 95.764877][ T5876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.15 (5876) [ 95.870349][ T5894] futex_wake_op: syz.3.23 tries to shift op by 144; fix this program [ 95.906117][ T5876] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.963866][ T5876] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.996543][ T5876] BTRFS info (device loop2): force clearing of disk cache [ 96.010710][ T5898] autofs4:pid:5898:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e) [ 96.016906][ T5876] BTRFS info (device loop2): use zlib compression, level 3 [ 96.053567][ T5898] autofs4:pid:5898:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 96.102077][ T5876] BTRFS info (device loop2): enabling ssd optimizations [ 96.109156][ T5876] BTRFS info (device loop2): using spread ssd allocation scheme [ 96.156708][ T5876] BTRFS info (device loop2): using free space tree [ 96.256657][ T5910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.512722][ T5876] BTRFS info (device loop2): auto enabling async discard [ 96.573863][ T5876] BTRFS info (device loop2): rebuilding free space tree [ 96.711687][ T5876] BTRFS info (device loop2): checking UUID tree [ 96.767572][ T5931] netlink: 56 bytes leftover after parsing attributes in process `syz.0.32'. [ 97.166748][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.706969][ T5763] smpboot: CPU 1 is now offline [ 97.863547][ T5953] process 'syz.0.41' launched '/dev/fd/4' with NULL argv: empty string added [ 98.629362][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.842195][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 98.868876][ T788] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 98.915209][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.939090][ T5972] loop0: detected capacity change from 0 to 2048 [ 98.973390][ T788] usb 4-1: config 0 descriptor?? [ 99.028717][ T5974] CUSE: DEVNAME unspecified [ 99.113349][ T5972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.175171][ T5960] loop2: detected capacity change from 0 to 32768 [ 99.262311][ T5960] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.44 (5960) [ 99.305969][ T788] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 99.406271][ T5960] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 99.425250][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.468248][ T5977] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 99.512396][ T5960] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 99.521893][ T5960] BTRFS info (device loop2): enabling ssd optimizations [ 99.538431][ T788] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 99.602138][ T788] usb 4-1: media controller created [ 99.631220][ T5960] BTRFS info (device loop2): setting nodatasum [ 99.673217][ T5960] BTRFS info (device loop2): enabling auto defrag [ 99.699630][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.727462][ T5960] BTRFS info (device loop2): using free space tree [ 99.830480][ T788] az6027: usb out operation failed. (-71) [ 99.894608][ T788] az6027: usb out operation failed. (-71) [ 99.900402][ T788] stb0899_attach: Driver disabled by Kconfig [ 99.954363][ T5960] BTRFS info (device loop2): auto enabling async discard [ 99.995299][ T788] az6027: no front-end attached [ 99.995299][ T788] [ 100.054455][ T788] az6027: usb out operation failed. (-71) [ 100.105258][ T788] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 100.180777][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 100.260710][ T28] audit: type=1800 audit(1785400780.433:2): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.44" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 100.280914][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.342399][ T788] dvb-usb: schedule remote query interval to 400 msecs. [ 100.349426][ T788] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 100.522567][ T788] usb 4-1: USB disconnect, device number 2 [ 100.691416][ T6006] loop1: detected capacity change from 0 to 512 [ 100.766251][ T788] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 100.821143][ T6006] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 100.892425][ T6006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 100.933683][ T6006] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.941342][ T5774] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.968115][ T6006] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.58: iget: bad i_size value: 12154761577498 [ 101.070321][ T6006] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.58: couldn't read orphan inode 13 (err -117) [ 101.133771][ T6006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.217257][ T6011] loop3: detected capacity change from 0 to 512 [ 101.299033][ T6006] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.58: dx entry: limit 65535 != root limit 120 [ 101.413208][ T6006] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.58: Corrupt directory, running e2fsck is recommended [ 101.514777][ T6006] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.58: path /24/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 101.791368][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.648166][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 103.193796][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.220461][ T6051] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 103.238127][ T6051] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 103.253895][ T6051] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 103.272992][ T6051] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 103.279641][ T6051] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 103.300541][ T6051] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 103.320723][ T6051] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 103.331828][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.344978][ T6051] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 103.361853][ T6051] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 103.384879][ T6051] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 103.391477][ T6051] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 103.399868][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 103.418623][ T6030] loop0: detected capacity change from 0 to 32768 [ 103.426887][ T9] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 103.438449][ T6051] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 103.449480][ T6051] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 103.456622][ T9] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 103.481182][ T6030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.68 (6030) [ 103.497172][ T6051] comedi comedi3: 8255: I/O port conflict (0x10000002,4) [ 103.524730][ T6051] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 103.531316][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.542290][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 103.566273][ T788] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 103.577635][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 103.605794][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.622969][ T6030] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.644456][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.673312][ T788] usb 2-1: Product: syz [ 103.685370][ T788] usb 2-1: Manufacturer: syz [ 103.691094][ T9] usb 3-1: config 0 descriptor?? [ 103.721217][ T788] usb 2-1: SerialNumber: syz [ 103.726982][ T6030] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 103.740182][ T6045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.763769][ T788] usb 2-1: config 0 descriptor?? [ 103.830042][ T788] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 103.844595][ T6030] BTRFS info (device loop0): force clearing of disk cache [ 103.908314][ T6030] BTRFS info (device loop0): enabling auto defrag [ 103.932372][ T6030] BTRFS info (device loop0): max_inline at 0 [ 103.938450][ T6030] BTRFS info (device loop0): enabling disk space caching [ 104.011062][ T6030] BTRFS info (device loop0): disk space caching is enabled [ 104.183247][ T6030] BTRFS info (device loop0): enabling ssd optimizations [ 104.218934][ T9] lenovo 0003:17EF:6062.0001: unknown main item tag 0x2 [ 104.256534][ T6030] BTRFS info (device loop0): rebuilding free space tree [ 104.273046][ T9] lenovo 0003:17EF:6062.0001: unknown main item tag 0x3 [ 104.307965][ T9] lenovo 0003:17EF:6062.0001: unknown main item tag 0x1 [ 104.348367][ T9] lenovo 0003:17EF:6062.0001: unknown main item tag 0x2 [ 104.378189][ T6030] BTRFS info (device loop0): disabling free space tree [ 104.470066][ T6030] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.482771][ T9] lenovo 0003:17EF:6062.0001: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 104.568213][ T6030] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.590444][ T9] usb 3-1: USB disconnect, device number 2 [ 104.667701][ T788] ssu100: probe of 2-1:0.0 failed with error -71 [ 104.742879][ T788] usb 2-1: USB disconnect, device number 2 [ 104.859804][ T6073] fido_id[6073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 105.298668][ T1315] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 105.498337][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.737381][ T6089] loop1: detected capacity change from 0 to 512 [ 105.867663][ T6089] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.042346][ T6089] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 106.099952][ T6089] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 106.182165][ T6089] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.88: Failed to acquire dquot type 1 [ 106.258277][ T6089] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.88: bg 0: block 495: padding at end of block bitmap is not set [ 106.286869][ T28] audit: type=1326 audit(1785400786.473:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 106.369881][ T6089] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 106.424361][ T6089] EXT4-fs (loop1): 1 truncate cleaned up [ 106.431023][ T6089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.450369][ T28] audit: type=1326 audit(1785400786.473:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 106.554691][ T6089] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.585959][ T28] audit: type=1326 audit(1785400786.473:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 106.737131][ T28] audit: type=1326 audit(1785400786.483:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 106.828423][ T6089] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.890225][ T28] audit: type=1326 audit(1785400786.483:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 107.019375][ T28] audit: type=1326 audit(1785400786.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 107.082964][ T6098] syz.3.91 (6098) used greatest stack depth: 20216 bytes left [ 107.104109][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.168187][ T28] audit: type=1326 audit(1785400786.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 107.331223][ T28] audit: type=1326 audit(1785400786.483:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 107.924764][ T6113] can0: slcan on ptm0. [ 108.121951][ T6122] capability: warning: `syz.0.99' uses 32-bit capabilities (legacy support in use) [ 108.149342][ T6121] loop1: detected capacity change from 0 to 164 [ 108.203934][ T6112] can0 (unregistered): slcan off ptm0. [ 108.241848][ T6121] rock: directory entry would overflow storage [ 108.271534][ T6124] program syz.0.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.314377][ T6121] rock: sig=0x4543, size=28, remaining=18 [ 108.399893][ T6101] loop2: detected capacity change from 0 to 32768 [ 108.627508][ T6101] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.747390][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.101'. [ 108.830656][ T6134] bond0: entered promiscuous mode [ 108.906428][ T6134] bond_slave_0: entered promiscuous mode [ 108.966892][ T6141] loop0: detected capacity change from 0 to 1024 [ 108.976305][ T6134] bond_slave_1: entered promiscuous mode [ 108.997570][ T6101] XFS (loop2): Ending clean mount [ 109.042731][ T6134] team0: entered promiscuous mode [ 109.111610][ T6134] team_slave_0: entered promiscuous mode [ 109.167331][ T6141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.185526][ T6134] team_slave_1: entered promiscuous mode [ 109.273448][ T6134] hsr1: entered promiscuous mode [ 109.330597][ T6134] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 109.343500][ T6141] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.845344][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.883388][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.753230][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 111.005835][ T6177] loop0: detected capacity change from 0 to 512 [ 111.083335][ T6177] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.227626][ T6177] EXT4-fs (loop0): 1 truncate cleaned up [ 111.314330][ T6177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.563817][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 111.563829][ T28] audit: type=1800 audit(1785400791.753:49): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.113" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 111.869069][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.032491][ T6228] loop3: detected capacity change from 0 to 2048 [ 113.099408][ T6228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.272288][ T5821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.415415][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.473071][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 113.527275][ T5821] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 113.562222][ T5821] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 113.599908][ T5821] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 113.663018][ T5821] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 113.714060][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.739859][ T5821] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 113.760955][ T5821] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 113.783700][ T5821] usb 2-1: Product: syz [ 113.803055][ T5821] usb 2-1: Manufacturer: syz [ 113.817945][ T5821] usb 2-1: SerialNumber: syz [ 113.822743][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.853173][ T5821] usb 2-1: config 0 descriptor?? [ 113.880443][ T5821] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.935139][ T5821] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.043111][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 114.067440][ T8] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 114.094655][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.147506][ T8] usb 3-1: config 0 descriptor?? [ 114.211411][ T788] usb 2-1: USB disconnect, device number 3 [ 114.237295][ T788] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 114.415083][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.449197][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.489840][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.505512][ T6250] netlink: 'syz.0.141': attribute type 11 has an invalid length. [ 114.519792][ T8] usb 3-1: media controller created [ 114.579195][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.600991][ T6238] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 114.649254][ T8] az6027: usb out operation failed. (-71) [ 114.667999][ T8] az6027: usb out operation failed. (-71) [ 114.682365][ T8] stb0899_attach: Driver disabled by Kconfig [ 114.708949][ T8] az6027: no front-end attached [ 114.708949][ T8] [ 114.733590][ T8] az6027: usb out operation failed. (-71) [ 114.745225][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.783443][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 114.803625][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.856759][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 114.892646][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 114.908610][ T6254] loop0: detected capacity change from 0 to 1024 [ 114.931673][ T8] usb 3-1: USB disconnect, device number 3 [ 115.033206][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 115.112214][ T788] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 115.169428][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.180726][ T788] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 115.238124][ T788] usb 4-1: Product: syz [ 115.293489][ T788] usb 4-1: Manufacturer: syz [ 115.324065][ T788] usb 4-1: SerialNumber: syz [ 115.366695][ T788] usb 4-1: config 0 descriptor?? [ 115.403869][ T788] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 115.669810][ T8] usb 4-1: USB disconnect, device number 3 [ 116.826153][ T6292] loop3: detected capacity change from 0 to 512 [ 116.938750][ T6292] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.160: inode has both inline data and extents flags [ 117.030381][ T6292] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.160: couldn't read orphan inode 15 (err -117) [ 117.134822][ T6292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.479177][ T6306] loop0: detected capacity change from 0 to 256 [ 117.529889][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.877629][ T6314] netlink: 'syz.3.168': attribute type 5 has an invalid length. [ 118.171633][ T6321] loop2: detected capacity change from 0 to 128 [ 119.225037][ T28] audit: type=1326 audit(1785400799.423:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 119.402267][ T28] audit: type=1326 audit(1785400799.463:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 119.426125][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.590275][ T28] audit: type=1326 audit(1785400799.463:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 119.614106][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.666295][ T6355] binder: 6353:6355 ioctl 4018620d 0 returned -22 [ 119.705537][ T28] audit: type=1326 audit(1785400799.463:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 119.729526][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.820604][ T28] audit: type=1326 audit(1785400799.463:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 119.844600][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.856346][ T788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.864015][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.965762][ T28] audit: type=1326 audit(1785400799.463:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8950b9df99 code=0x7ffc0000 [ 120.082231][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 120.090838][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.117111][ T8] usb 4-1: config 0 has no interfaces? [ 120.126882][ T788] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 120.145241][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 120.163173][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.183312][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.203716][ T788] usb 1-1: Product: syz [ 120.207951][ T788] usb 1-1: Manufacturer: syz [ 120.212781][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.226650][ T8] usb 4-1: config 0 descriptor?? [ 120.241887][ T788] usb 1-1: SerialNumber: syz [ 120.422230][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 120.431906][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 120.491530][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.524941][ T788] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 120.537016][ T5821] usb 4-1: USB disconnect, device number 4 [ 120.579718][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 120.620630][ T788] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 120.632160][ T9] pvrusb2: ********** [ 120.636172][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 120.663233][ T788] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 120.685837][ T9] pvrusb2: Important functionality might not be entirely working. [ 120.704133][ T788] usb 1-1: media controller created [ 120.713488][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 120.772551][ T9] pvrusb2: ********** [ 120.790850][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.817879][ T2322] pvrusb2: Invalid write control endpoint [ 120.947610][ T6381] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 120.947610][ T6381] The task syz.1.196 (6381) triggered the difference, watch for misbehavior. [ 120.980043][ T788] zl10353_read_register: readreg error (reg=127, ret==-71) [ 120.994059][ T2322] pvrusb2: Invalid write control endpoint [ 121.025307][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 121.051537][ T6367] ------------[ cut here ]------------ [ 121.057725][ T6367] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 121.091961][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 121.114725][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 121.134209][ T6367] WARNING: CPU: 0 PID: 6367 at drivers/usb/core/urb.c:413 usb_submit_urb+0x108d/0x17a0 [ 121.144386][ T6367] Modules linked in: [ 121.148315][ T6367] CPU: 0 PID: 6367 Comm: syz.2.191 Not tainted syzkaller #0 [ 121.155807][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.165999][ T6367] RIP: 0010:usb_submit_urb+0x108d/0x17a0 [ 121.171666][ T6367] Code: fc ff df 41 0f b6 44 05 00 84 c0 0f 85 18 06 00 00 45 0f b6 07 48 c7 c7 c0 e6 6b 8b 48 8b 34 24 4c 89 e2 89 e9 e8 f3 57 e7 fa <0f> 0b 48 bd 00 00 00 00 00 fc ff df e9 91 f4 ff ff 44 89 f1 80 e1 [ 121.191430][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.199329][ T6367] RSP: 0018:ffffc900037ff7d8 EFLAGS: 00010246 [ 121.205516][ T6367] RAX: 3655752a19d29700 RBX: ffff88802ee84000 RCX: 0000000000080000 [ 121.213572][ T6367] RDX: ffffc9000d6ac000 RSI: 0000000000006369 RDI: 000000000000636a [ 121.221581][ T6367] RBP: 0000000080000280 R08: ffffc900037ff3e7 R09: 1ffff920006ffe7c [ 121.229697][ T6367] R10: dffffc0000000000 R11: fffff520006ffe7d R12: ffff88802bfe9960 [ 121.238134][ T6367] R13: 1ffff110285758e6 R14: ffff8880781f40f8 R15: ffff888142bac730 [ 121.246615][ T6367] FS: 00007f8951aa56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 121.255676][ T6367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.262361][ T6367] CR2: 00007f2e3ccc888d CR3: 000000005841d000 CR4: 00000000003506f0 [ 121.270460][ T6367] Call Trace: [ 121.273793][ T6367] [ 121.276769][ T6367] ? __init_swait_queue_head+0xa8/0x140 [ 121.282398][ T6367] usb_start_wait_urb+0x140/0x580 [ 121.288701][ T6367] ? usb_api_blocking_completion+0xb0/0xb0 [ 121.294770][ T6367] usb_control_msg+0x235/0x3e0 [ 121.299595][ T6367] gl861_ctrl_msg+0x215/0x3d0 [ 121.304450][ T6367] ? gl861_i2c_functionality+0x10/0x10 [ 121.309985][ T6367] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 121.317815][ T6367] ? _raw_spin_unlock+0x40/0x40 [ 121.323029][ T6367] ? try_to_take_rt_mutex+0x7fb/0xaa0 [ 121.328440][ T6367] gl861_i2c_master_xfer+0x434/0x640 [ 121.333840][ T6367] ? gl861_init+0x40/0x40 [ 121.338212][ T6367] __i2c_transfer+0x891/0x2090 [ 121.343079][ T6367] ? i2c_cmd+0x110/0x110 [ 121.347460][ T6367] ? i2c_transfer+0x11b/0x3a0 [ 121.352227][ T6367] i2c_transfer+0x261/0x3a0 [ 121.356786][ T6367] ? __i2c_transfer+0x2090/0x2090 [ 121.361852][ T6367] ? __might_fault+0xc6/0x120 [ 121.366637][ T6367] ? __might_fault+0xaa/0x120 [ 121.371350][ T6367] ? _copy_from_user+0xa5/0xe0 [ 121.376218][ T6367] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 121.381237][ T6367] i2cdev_ioctl+0x6a0/0x840 [ 121.387134][ T6367] ? i2cdev_write+0x120/0x120 [ 121.391890][ T6367] ? bpf_lsm_file_ioctl+0x9/0x10 [ 121.397221][ T6367] ? security_file_ioctl+0x80/0xa0 [ 121.402459][ T6367] ? i2cdev_write+0x120/0x120 [ 121.407261][ T6367] __se_sys_ioctl+0xfd/0x170 [ 121.411904][ T6367] do_syscall_64+0x55/0xb0 [ 121.416454][ T6367] ? clear_bhb_loop+0x40/0x90 [ 121.421155][ T6367] ? clear_bhb_loop+0x40/0x90 [ 121.425959][ T6367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.431894][ T6367] RIP: 0033:0x7f8950b9df99 [ 121.436406][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.456376][ T6367] RSP: 002b:00007f8951aa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.464962][ T6367] RAX: ffffffffffffffda RBX: 00007f8950e25fa0 RCX: 00007f8950b9df99 [ 121.473061][ T6367] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 121.481069][ T6367] RBP: 00007f8950c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 121.490343][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.498603][ T6367] R13: 00007f8950e26038 R14: 00007f8950e25fa0 R15: 00007ffda844d008 [ 121.506763][ T6367] [ 121.509827][ T6367] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.517119][ T6367] CPU: 0 PID: 6367 Comm: syz.2.191 Not tainted syzkaller #0 [ 121.524457][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.534568][ T6367] Call Trace: [ 121.537889][ T6367] [ 121.540837][ T6367] dump_stack_lvl+0x18c/0x250 [ 121.545657][ T6367] ? show_regs_print_info+0x20/0x20 [ 121.550888][ T6367] ? load_image+0x420/0x420 [ 121.555434][ T6367] panic+0x2ca/0x720 [ 121.559461][ T6367] ? bpf_jit_dump+0xd0/0xd0 [ 121.563991][ T6367] __warn+0x2e0/0x470 [ 121.568075][ T6367] ? usb_submit_urb+0x108d/0x17a0 [ 121.573115][ T6367] ? usb_submit_urb+0x108d/0x17a0 [ 121.578187][ T6367] report_bug+0x2be/0x4f0 [ 121.582530][ T6367] ? usb_submit_urb+0x108d/0x17a0 [ 121.587582][ T6367] ? usb_submit_urb+0x108d/0x17a0 [ 121.592624][ T6367] ? usb_submit_urb+0x108f/0x17a0 [ 121.597678][ T6367] handle_bug+0xcf/0x120 [ 121.601934][ T6367] exc_invalid_op+0x1a/0x50 [ 121.606477][ T6367] asm_exc_invalid_op+0x1a/0x20 [ 121.611357][ T6367] RIP: 0010:usb_submit_urb+0x108d/0x17a0 [ 121.617005][ T6367] Code: fc ff df 41 0f b6 44 05 00 84 c0 0f 85 18 06 00 00 45 0f b6 07 48 c7 c7 c0 e6 6b 8b 48 8b 34 24 4c 89 e2 89 e9 e8 f3 57 e7 fa <0f> 0b 48 bd 00 00 00 00 00 fc ff df e9 91 f4 ff ff 44 89 f1 80 e1 [ 121.636731][ T6367] RSP: 0018:ffffc900037ff7d8 EFLAGS: 00010246 [ 121.642826][ T6367] RAX: 3655752a19d29700 RBX: ffff88802ee84000 RCX: 0000000000080000 [ 121.650832][ T6367] RDX: ffffc9000d6ac000 RSI: 0000000000006369 RDI: 000000000000636a [ 121.658820][ T6367] RBP: 0000000080000280 R08: ffffc900037ff3e7 R09: 1ffff920006ffe7c [ 121.666807][ T6367] R10: dffffc0000000000 R11: fffff520006ffe7d R12: ffff88802bfe9960 [ 121.674789][ T6367] R13: 1ffff110285758e6 R14: ffff8880781f40f8 R15: ffff888142bac730 [ 121.682785][ T6367] ? usb_submit_urb+0x108d/0x17a0 [ 121.687834][ T6367] ? __init_swait_queue_head+0xa8/0x140 [ 121.693397][ T6367] usb_start_wait_urb+0x140/0x580 [ 121.698460][ T6367] ? usb_api_blocking_completion+0xb0/0xb0 [ 121.704323][ T6367] usb_control_msg+0x235/0x3e0 [ 121.709111][ T6367] gl861_ctrl_msg+0x215/0x3d0 [ 121.713809][ T6367] ? gl861_i2c_functionality+0x10/0x10 [ 121.719298][ T6367] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 121.725222][ T6367] ? _raw_spin_unlock+0x40/0x40 [ 121.730092][ T6367] ? try_to_take_rt_mutex+0x7fb/0xaa0 [ 121.735483][ T6367] gl861_i2c_master_xfer+0x434/0x640 [ 121.740883][ T6367] ? gl861_init+0x40/0x40 [ 121.745309][ T6367] __i2c_transfer+0x891/0x2090 [ 121.750122][ T6367] ? i2c_cmd+0x110/0x110 [ 121.754558][ T6367] ? i2c_transfer+0x11b/0x3a0 [ 121.759264][ T6367] i2c_transfer+0x261/0x3a0 [ 121.763796][ T6367] ? __i2c_transfer+0x2090/0x2090 [ 121.768838][ T6367] ? __might_fault+0xc6/0x120 [ 121.773555][ T6367] ? __might_fault+0xaa/0x120 [ 121.778292][ T6367] ? _copy_from_user+0xa5/0xe0 [ 121.783169][ T6367] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 121.788151][ T6367] i2cdev_ioctl+0x6a0/0x840 [ 121.792677][ T6367] ? i2cdev_write+0x120/0x120 [ 121.797391][ T6367] ? bpf_lsm_file_ioctl+0x9/0x10 [ 121.802393][ T6367] ? security_file_ioctl+0x80/0xa0 [ 121.807545][ T6367] ? i2cdev_write+0x120/0x120 [ 121.812367][ T6367] __se_sys_ioctl+0xfd/0x170 [ 121.817043][ T6367] do_syscall_64+0x55/0xb0 [ 121.821477][ T6367] ? clear_bhb_loop+0x40/0x90 [ 121.826167][ T6367] ? clear_bhb_loop+0x40/0x90 [ 121.831441][ T6367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.837363][ T6367] RIP: 0033:0x7f8950b9df99 [ 121.841794][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.861563][ T6367] RSP: 002b:00007f8951aa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.869992][ T6367] RAX: ffffffffffffffda RBX: 00007f8950e25fa0 RCX: 00007f8950b9df99 [ 121.877976][ T6367] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 121.885958][ T6367] RBP: 00007f8950c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 121.893938][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.901917][ T6367] R13: 00007f8950e26038 R14: 00007f8950e25fa0 R15: 00007ffda844d008 [ 121.909910][ T6367] [ 121.912995][ T6367] Kernel Offset: disabled [ 121.917392][ T6367] Rebooting in 86400 seconds..