last executing test programs: 11.317465176s ago: executing program 1 (id=533): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) 9.982087763s ago: executing program 1 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 9.958665545s ago: executing program 0 (id=538): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r0, &(0x7f000000b300)={0x0, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4040889}, 0x20008050) 9.905334331s ago: executing program 4 (id=539): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r5, 0x25, 0x11, @void}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1818c12, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0x7, 0x211, &(0x7f0000000480)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FBxDiQ1TEjsOzNLtafaus7ZdHvpkTy+2l3o5nGSaD9I/QFHZoYSEGsKC1z8538IUAHzGFlArlCByoUyMDFoQtnhjIwMqlB2AgMTQxiUncrAyBAJZWchsfNhDsxJ1UvOz0lJy8xJNQARhiDCCEQYI7sP5KK3jYwMKdAwAbmJEUm+uLIqOzEnJ7UIncH6H2YPhhSpDHzhB3afIxODLZQPch8oviI6mhtBfD2ouAFS+BkyMDEYQtnGDIwMwVC2BQM7g56eHiJIkPwvxYIwnxkpmin1GxKj04OBAYsUM4TxCy7CzkBsyArqUsVhVGQwo4u8g3qGxrZzMwy830ljcCBimY3KjmdEFwFlaLiI2NtdpzF1PSXRLsYGiPORpBipn2WIY8AK88QcUHZGkrrEhV87LKfhUsMGlceqHVE+gUpvdaTyiYUBUc7rl+QW6BdXVulm5iamp/5nZ2AwMjYzMDEwMDXSBxdEEBKj3PsDL/84wOUTF5L5rDiqITZGNoaKxJKSIsMKBoaSIkM436iCCdUnDMHb8t+ABZjA5R8Tg4YyRAEoEsHeZsdmA0SeEaqPEczSYIbJMWPXMgpGwSgYBaNgFIyCUTAKRsEoGAWjYBSMglEwCkbBKBgFuAAbKleegZEBOnnGCB0QxQaMAsCqAQEAAP//2HtQSw==") 7.30882036s ago: executing program 0 (id=542): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 7.105119282s ago: executing program 2 (id=543): unshare(0x2c020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4c, 0x0, &(0x7f0000000280)) 6.878954675s ago: executing program 3 (id=544): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x70bd2c, 0x2000000, {{0x2}, {@void, @val={0xc, 0x99, {0x10000001, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x28}}, 0x8000040) 6.541842096s ago: executing program 1 (id=545): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) syz_usbip_server_init(0x2) 6.45915804s ago: executing program 4 (id=546): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 6.339878728s ago: executing program 2 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4) 6.328831595s ago: executing program 0 (id=548): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) 6.056594421s ago: executing program 3 (id=549): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe20, 0x100000, @mcast2, 0x3}, 0x1c) 5.959150781s ago: executing program 4 (id=550): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050006"], 0x48}}, 0x0) 5.862541446s ago: executing program 2 (id=551): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000b, 0x0, 0x0, 0x0, 0x0}}, 0x10) 5.544825064s ago: executing program 3 (id=552): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 5.544669988s ago: executing program 1 (id=553): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) pread64(r0, 0x0, 0x0, 0xf1) 5.491928305s ago: executing program 4 (id=554): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r0 = msgget$private(0x0, 0x204) msgrcv(r0, 0x0, 0x0, 0x0, 0x5800) 5.462735892s ago: executing program 2 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 4.956806282s ago: executing program 1 (id=556): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r5, 0x25, 0x11, @void}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1818c12, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0x7, 0x211, &(0x7f0000000480)="$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") 4.8682435s ago: executing program 3 (id=557): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 4.849703383s ago: executing program 4 (id=558): unshare(0x22020400) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) 4.74642831s ago: executing program 0 (id=559): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000840) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f00000002c0)={0xa, 0xa, 0x7, @remote}, 0x1c, 0x0}, 0x20000b5c) 2.132208159s ago: executing program 2 (id=560): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.060964472s ago: executing program 3 (id=561): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 896.635739ms ago: executing program 0 (id=562): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 844.166935ms ago: executing program 4 (id=563): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe20, 0x100000, @mcast2, 0x3}, 0x1c) 431.674851ms ago: executing program 2 (id=564): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) 185.865577ms ago: executing program 3 (id=565): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000e80)="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", 0x3f7}, {&(0x7f00000001c0)="81", 0x1}], 0x2) 103.419602ms ago: executing program 1 (id=566): unshare(0x2040400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 0s ago: executing program 0 (id=567): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r5, 0x25, 0x11, @void}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1818c12, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0x7, 0x211, &(0x7f0000000480)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 154.340495][ T5560] cgroup: Unknown subsys name 'net' [ 154.485187][ T5560] cgroup: Unknown subsys name 'cpuset' [ 154.508902][ T5560] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 159.962158][ T5560] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.164714][ T5579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.189303][ T5579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.199681][ T5579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.211719][ T5579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.223090][ T5579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.295945][ T5587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.304256][ T5587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.313771][ T5588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.323135][ T5588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.339822][ T5587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.352025][ T5588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.363477][ T5588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.376937][ T5587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.385921][ T5588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.389436][ T5587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.425113][ T4872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.434259][ T4872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.443922][ T4872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.459379][ T4872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.460044][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.478863][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.482086][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.510628][ T5587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.527084][ T5587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.540802][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.329227][ T5587] Bluetooth: hci0: command tx timeout [ 166.487053][ T5579] Bluetooth: hci1: command tx timeout [ 166.493041][ T5587] Bluetooth: hci2: command tx timeout [ 166.566951][ T5587] Bluetooth: hci3: command tx timeout [ 166.567088][ T5579] Bluetooth: hci4: command tx timeout [ 168.410264][ T5579] Bluetooth: hci0: command tx timeout [ 168.567005][ T5587] Bluetooth: hci1: command tx timeout [ 168.572678][ T5579] Bluetooth: hci2: command tx timeout [ 168.597863][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.622240][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.649330][ T5587] Bluetooth: hci4: command tx timeout [ 168.649499][ T5592] bridge_slave_0: entered allmulticast mode [ 168.654934][ T5579] Bluetooth: hci3: command tx timeout [ 168.680254][ T5592] bridge_slave_0: entered promiscuous mode [ 168.696330][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.718892][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.738008][ T5592] bridge_slave_1: entered allmulticast mode [ 168.750996][ T5592] bridge_slave_1: entered promiscuous mode [ 168.967215][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.975387][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.984058][ T5583] bridge_slave_0: entered allmulticast mode [ 168.998562][ T5583] bridge_slave_0: entered promiscuous mode [ 169.045767][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.053779][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.062664][ T5582] bridge_slave_0: entered allmulticast mode [ 169.070947][ T5582] bridge_slave_0: entered promiscuous mode [ 169.082169][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.090143][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.098254][ T5583] bridge_slave_1: entered allmulticast mode [ 169.106851][ T5583] bridge_slave_1: entered promiscuous mode [ 169.177867][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.187508][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.194929][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.202618][ T5582] bridge_slave_1: entered allmulticast mode [ 169.211368][ T5582] bridge_slave_1: entered promiscuous mode [ 169.321004][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.380501][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.394521][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.402304][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.410044][ T5578] bridge_slave_0: entered allmulticast mode [ 169.418555][ T5578] bridge_slave_0: entered promiscuous mode [ 169.459973][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.469601][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.477554][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.484973][ T5590] bridge_slave_0: entered allmulticast mode [ 169.493625][ T5590] bridge_slave_0: entered promiscuous mode [ 169.511348][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.521818][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.529809][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.537757][ T5578] bridge_slave_1: entered allmulticast mode [ 169.545899][ T5578] bridge_slave_1: entered promiscuous mode [ 169.635248][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.653924][ T5592] team0: Port device team_slave_0 added [ 169.660147][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.668189][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.675604][ T5590] bridge_slave_1: entered allmulticast mode [ 169.684174][ T5590] bridge_slave_1: entered promiscuous mode [ 169.787829][ T5592] team0: Port device team_slave_1 added [ 169.820921][ T5583] team0: Port device team_slave_0 added [ 169.923200][ T5583] team0: Port device team_slave_1 added [ 169.935937][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.957398][ T5582] team0: Port device team_slave_0 added [ 169.991337][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.029889][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.045246][ T5582] team0: Port device team_slave_1 added [ 170.084210][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.091360][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.117817][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.137132][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.214885][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.222090][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.248954][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.285259][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.292675][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.318936][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.354794][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.362382][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.388879][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.441724][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.449523][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.475994][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.487948][ T5579] Bluetooth: hci0: command tx timeout [ 170.496182][ T5578] team0: Port device team_slave_0 added [ 170.504673][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.512096][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.538705][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.575067][ T5590] team0: Port device team_slave_0 added [ 170.601972][ T5578] team0: Port device team_slave_1 added [ 170.633138][ T5590] team0: Port device team_slave_1 added [ 170.657071][ T5587] Bluetooth: hci1: command tx timeout [ 170.663052][ T5579] Bluetooth: hci2: command tx timeout [ 170.737219][ T5587] Bluetooth: hci4: command tx timeout [ 170.742935][ T5579] Bluetooth: hci3: command tx timeout [ 170.770144][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.777483][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.804450][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.863128][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.870270][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.896735][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.934651][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.942085][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.969647][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.993452][ T5592] hsr_slave_0: entered promiscuous mode [ 171.001816][ T5592] hsr_slave_1: entered promiscuous mode [ 171.034371][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.041641][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.069405][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.135097][ T5583] hsr_slave_0: entered promiscuous mode [ 171.143436][ T5583] hsr_slave_1: entered promiscuous mode [ 171.151198][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 171.157099][ T5583] Cannot create hsr debugfs directory [ 171.191686][ T5582] hsr_slave_0: entered promiscuous mode [ 171.199829][ T5582] hsr_slave_1: entered promiscuous mode [ 171.207385][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 171.213225][ T5582] Cannot create hsr debugfs directory [ 171.417085][ T5578] hsr_slave_0: entered promiscuous mode [ 171.425223][ T5578] hsr_slave_1: entered promiscuous mode [ 171.433088][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 171.438956][ T5578] Cannot create hsr debugfs directory [ 171.572890][ T5590] hsr_slave_0: entered promiscuous mode [ 171.582877][ T5590] hsr_slave_1: entered promiscuous mode [ 171.592675][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 171.599675][ T5590] Cannot create hsr debugfs directory [ 172.566978][ T5579] Bluetooth: hci0: command tx timeout [ 172.662890][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.692598][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.704238][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.720980][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.728482][ T5579] Bluetooth: hci2: command tx timeout [ 172.729201][ T5587] Bluetooth: hci1: command tx timeout [ 172.738376][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.759833][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.769540][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.787546][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.807422][ T5587] Bluetooth: hci3: command tx timeout [ 172.807955][ T5579] Bluetooth: hci4: command tx timeout [ 172.915752][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.934918][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.944756][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.962324][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.972416][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.988485][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.023301][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.041649][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.181094][ T5582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.204339][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.226463][ T5582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.247234][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.277583][ T5582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.296448][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.309749][ T5582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.329009][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.529959][ T5578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.548380][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.580445][ T5578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.598228][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.609842][ T5578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.628678][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.640446][ T5578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.658474][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.892569][ T5590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.915536][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.948666][ T5590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.965515][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.995944][ T5590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.016223][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.060176][ T5590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.078681][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.110161][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.352165][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.409554][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.417034][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.439997][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.505970][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.513351][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.601165][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.693654][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.716836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.724212][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.809118][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.816478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.870244][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.988991][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.086047][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.093581][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.137969][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.242752][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.250281][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.290631][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.298027][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.352058][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.370427][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.377936][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.643562][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.780439][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.787992][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.949432][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.957006][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.613908][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.315285][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.342491][ T5592] veth0_vlan: entered promiscuous mode [ 178.503601][ T5592] veth1_vlan: entered promiscuous mode [ 179.003562][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.103097][ T5592] veth0_macvtap: entered promiscuous mode [ 179.202071][ T5592] veth1_macvtap: entered promiscuous mode [ 179.273951][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.533734][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.599850][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.636260][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.745503][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.755132][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.782180][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.792436][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.910329][ T5578] veth0_vlan: entered promiscuous mode [ 180.054052][ T5582] veth0_vlan: entered promiscuous mode [ 180.116192][ T5578] veth1_vlan: entered promiscuous mode [ 180.314523][ T5582] veth1_vlan: entered promiscuous mode [ 180.344803][ T5583] veth0_vlan: entered promiscuous mode [ 180.422068][ T5590] veth0_vlan: entered promiscuous mode [ 180.533422][ T5583] veth1_vlan: entered promiscuous mode [ 180.599348][ T5590] veth1_vlan: entered promiscuous mode [ 180.732878][ T5578] veth0_macvtap: entered promiscuous mode [ 180.873254][ T5582] veth0_macvtap: entered promiscuous mode [ 180.893902][ T5578] veth1_macvtap: entered promiscuous mode [ 180.956500][ T5582] veth1_macvtap: entered promiscuous mode [ 181.160436][ T5590] veth0_macvtap: entered promiscuous mode [ 181.192737][ T5583] veth0_macvtap: entered promiscuous mode [ 181.212904][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.282641][ T5590] veth1_macvtap: entered promiscuous mode [ 181.311352][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.342468][ T5583] veth1_macvtap: entered promiscuous mode [ 181.374742][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.431725][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.505765][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.518652][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.557876][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.571957][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.626157][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.661754][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.682126][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.715965][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.731320][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.778626][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.911175][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.019085][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.104978][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.137458][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.207160][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.237210][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.266233][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.324323][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.379824][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.459217][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.938433][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.985498][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.215118][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.258770][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.869263][ T5592] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.350271][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.391792][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.588786][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.619066][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.754793][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.789221][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.029622][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.074535][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.423815][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.468671][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.694946][ T5852] loop1: detected capacity change from 0 to 1024 [ 188.736366][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.767751][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.009175][ T5852] syz.1.2: attempt to access beyond end of device [ 189.009175][ T5852] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 189.012278][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.112631][ T5852] Buffer I/O error on dev loop1, logical block 2889, async page read [ 189.154943][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.171384][ T5852] syz.1.2: attempt to access beyond end of device [ 189.171384][ T5852] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 189.200892][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 189.228391][ T5852] Buffer I/O error on dev loop1, logical block 2889, async page read [ 189.296109][ T5857] syz.1.2: attempt to access beyond end of device [ 189.296109][ T5857] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 189.311976][ T29] audit: type=1800 audit(1778800596.172:2): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 189.342556][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.351181][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.947372][ T5863] mmap: syz.0.12 (5863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.987554][ T5863] loop0: detected capacity change from 0 to 16 [ 190.108281][ T5863] erofs (device loop0): invalid ishare xattr prefix id 0 [ 191.208382][ T5585] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 191.425968][ T5585] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.519745][ T5585] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.563071][ T5585] usb 2-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 191.589411][ T5204] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 191.612250][ T5585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.775405][ T5585] usb 2-1: config 0 descriptor?? [ 191.797235][ T5204] usb 4-1: Using ep0 maxpacket: 8 [ 191.875196][ T5204] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.984125][ T5204] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 192.090021][ T5204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.175016][ T5204] usb 4-1: config 0 descriptor?? [ 193.107021][ T5795] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.222200][ T5585] sony 0003:1430:474C.0001: unknown main item tag 0x0 [ 193.231773][ T5204] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 193.239713][ T5204] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 193.246945][ T5585] sony 0003:1430:474C.0001: unknown main item tag 0x0 [ 193.254091][ T5204] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 193.262633][ T5585] sony 0003:1430:474C.0001: unknown main item tag 0x0 [ 193.270530][ T5204] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 193.288978][ T5585] sony 0003:1430:474C.0001: unknown main item tag 0x0 [ 193.305933][ T5585] sony 0003:1430:474C.0001: unknown main item tag 0x0 [ 193.321079][ T5585] sony 0003:1430:474C.0001: unknown main item tag 0x0 [ 193.664517][ T5885] loop4: detected capacity change from 0 to 256 [ 194.492166][ T5585] sony 0003:1430:474C.0001: hidraw0: USB HID v0.20 Device [HID 1430:474c] on usb-dummy_hcd.1-1/input0 [ 194.701502][ T5885] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 195.211769][ T5890] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17'. [ 195.247196][ T5585] sony 0003:1430:474C.0001: failed to claim input [ 195.256007][ T5204] isku 0003:1E7D:319C.0002: hidraw1: USB HID v0.08 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 195.595522][ T5204] usb 4-1: USB disconnect, device number 2 [ 195.654973][ T5585] usb 2-1: USB disconnect, device number 2 [ 196.324398][ T5795] usb 3-1: unable to read config index 0 descriptor/all [ 196.370441][ T5795] usb 3-1: can't read configurations, error -71 [ 197.097814][ T5900] loop1: detected capacity change from 0 to 4096 [ 197.279443][ T5903] bond1: option arp_validate: invalid value (85) [ 197.308878][ T5204] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 197.344247][ T5903] bond1 (unregistering): Released all slaves [ 197.392344][ T5900] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 197.560681][ T5914] loop4: detected capacity change from 0 to 16 [ 197.596223][ T5204] usb 4-1: Using ep0 maxpacket: 8 [ 197.765707][ T5914] erofs (device loop4): invalid ishare xattr prefix id 0 [ 198.547140][ T5204] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 198.634557][ T5204] usb 4-1: config 2 has no interface number 0 [ 198.696473][ T5204] usb 4-1: config 2 interface 31 has no altsetting 0 [ 198.847691][ T5204] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 198.868703][ T5900] ntfs3(loop1): Failed to load $Extend (-22). [ 198.925453][ T5900] ntfs3(loop1): Failed to initialize $Extend. [ 198.937714][ T5204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.987523][ T5204] usb 4-1: Product: syz [ 199.029923][ T5204] usb 4-1: Manufacturer: syz [ 199.094322][ T5204] usb 4-1: SerialNumber: syz [ 199.172526][ T29] audit: type=1800 audit(1778800606.052:3): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 199.676370][ T5917] loop2: detected capacity change from 0 to 16 [ 199.722860][ T5917] ======================================================= [ 199.722860][ T5917] WARNING: The mand mount option has been deprecated and [ 199.722860][ T5917] and is ignored by this kernel. Remove the mand [ 199.722860][ T5917] option from the mount to silence this warning. [ 199.722860][ T5917] ======================================================= [ 199.859888][ T5911] fido_id[5911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 199.867722][ T5915] fido_id[5915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 199.914285][ T5917] erofs (device loop2): mounted with root inode @ nid 36. [ 200.259568][ T5204] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 200.371777][ T5204] usb 4-1: USB disconnect, device number 3 [ 200.470062][ T5921] loop0: detected capacity change from 0 to 64 [ 200.607198][ T5921] syz.0.29: attempt to access beyond end of device [ 200.607198][ T5921] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 201.788451][ T5930] loop2: detected capacity change from 0 to 256 [ 202.264321][ T5930] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 203.911691][ T5939] nbd: socks must be embedded in a SOCK_ITEM attr [ 204.079717][ T5204] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 204.175511][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.187008][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.458313][ T5204] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 204.504906][ T5204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.560959][ T5204] usb 1-1: Product: syz [ 204.593421][ T5204] usb 1-1: Manufacturer: syz [ 204.609880][ T5204] usb 1-1: SerialNumber: syz [ 205.143091][ T5204] gspca_main: pac207-2.14.0 probing 093a:2476 [ 205.212057][ T5204] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 205.243735][ T5950] loop4: detected capacity change from 0 to 2048 [ 205.269888][ T5204] uvcvideo 1-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 205.284878][ T5950] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 205.305145][ T5204] uvcvideo 1-1:13.0: No valid video chain found. [ 205.333225][ T5950] NILFS (loop4): mounting unchecked fs [ 205.384750][ T5204] usb 1-1: USB disconnect, device number 2 [ 205.511410][ T5950] NILFS (loop4): recovery complete [ 205.544757][ T5955] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.151548][ T5961] loop1: detected capacity change from 0 to 512 [ 206.277449][ T5961] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 206.373757][ T5961] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.44: invalid indirect mapped block 2683928664 (level 1) [ 206.476456][ T5961] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 206.481440][ T5961] EXT4-fs (loop1): Remounting filesystem read-only [ 206.491009][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 206.491097][ C1] EXT4-fs (loop1): initial error at time 1778800613: ext4_free_branches:1023: inode 13 [ 206.491265][ C1] EXT4-fs (loop1): last error at time 1778800613: ext4_free_branches:1023: inode 13 [ 206.560471][ T5961] EXT4-fs (loop1): 1 truncate cleaned up [ 206.610896][ T5961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.888159][ T5204] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 206.912136][ T5975] loop2: detected capacity change from 0 to 16 [ 206.949764][ T5974] loop3: detected capacity change from 0 to 16 [ 207.005153][ T5975] erofs (device loop2): invalid ishare xattr prefix id 0 [ 207.021902][ T5961] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 207.024483][ T5974] erofs (device loop3): invalid ishare xattr prefix id 0 [ 207.111075][ T5204] usb 5-1: Using ep0 maxpacket: 16 [ 207.133975][ T5204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.170700][ T5204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.217599][ T5204] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.251820][ T5204] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 207.319478][ T5204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.356275][ T5578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.366047][ T5585] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 207.401655][ T5204] usb 5-1: config 0 descriptor?? [ 207.644068][ T5585] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 207.700536][ T5585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.829536][ T5585] usb 1-1: config 0 descriptor?? [ 207.890399][ T5585] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 208.017689][ T5981] loop1: detected capacity change from 0 to 16 [ 208.887189][ T5981] erofs (device loop1): invalid ishare xattr prefix id 0 [ 209.345327][ T5585] gspca_cpia1: usb_control_msg 05, error -110 [ 209.472979][ T5585] gspca_cpia1: usb_control_msg 01, error -32 [ 209.549433][ T5585] gspca_cpia1: usb_control_msg 01, error -71 [ 209.640310][ T5585] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 209.650392][ T5204] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0003/input/input5 [ 209.780192][ T5585] usb 1-1: USB disconnect, device number 3 [ 209.951537][ T5204] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 209.952162][ T5984] loop3: detected capacity change from 0 to 512 [ 210.055527][ T5204] usb 5-1: USB disconnect, device number 2 [ 210.311430][ T5984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 210.355589][ T5984] System zones: 1-12 [ 210.441568][ T5984] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.51: error while reading EA inode 32 err=-116 [ 210.513299][ T5984] loop3: lost filesystem error report for type 5 error -117 [ 210.516773][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 210.531037][ C0] EXT4-fs (loop3): initial error at time 1778800617: ext4_xattr_inode_iget:446 [ 210.540321][ C0] EXT4-fs (loop3): last error at time 1778800617: ext4_xattr_inode_iget:446 [ 210.562893][ T5984] EXT4-fs (loop3): Remounting filesystem read-only [ 210.604181][ T5984] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 210.680704][ T5984] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 210.726878][ T5984] EXT4-fs (loop3): 1 orphan inode deleted [ 210.745742][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.924536][ T5995] loop4: detected capacity change from 0 to 128 [ 210.981699][ T5995] EXT4-fs: Ignoring removed nobh option [ 211.090669][ T5995] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.182871][ T5995] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.355676][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.360021][ T5995] EXT4-fs (loop4): resizing filesystem from 64 to 2 blocks [ 211.372847][ T5995] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 211.387085][ T5795] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.464427][ T6003] loop0: detected capacity change from 0 to 256 [ 211.474738][ T6003] exfat: Deprecated parameter 'utf8' [ 211.526476][ T6003] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x113658e0, utbl_chksum : 0xe619d30d) [ 211.601322][ T5795] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 211.636942][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.668981][ T5795] usb 2-1: Product: syz [ 211.692483][ T5795] usb 2-1: Manufacturer: syz [ 211.719665][ T5795] usb 2-1: SerialNumber: syz [ 211.738996][ T5583] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.807579][ T6008] loop3: detected capacity change from 0 to 8 [ 212.065063][ T6008] SQUASHFS error: zlib decompression failed, data probably corrupt [ 212.112147][ T6007] fido_id[6007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 212.148606][ T6008] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.170017][ T6008] SQUASHFS error: zlib decompression failed, data probably corrupt [ 212.207898][ T6008] SQUASHFS error: Failed to read block 0x4df: -5 [ 212.235103][ T6008] SQUASHFS error: zlib decompression failed, data probably corrupt [ 212.262530][ T5795] gspca_main: pac207-2.14.0 probing 093a:2476 [ 212.274934][ T6008] SQUASHFS error: Failed to read block 0x4e0: -5 [ 212.292337][ T5795] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 212.298937][ T6008] SQUASHFS error: zlib decompression failed, data probably corrupt [ 212.319199][ T6008] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.359043][ T29] audit: type=1800 audit(1778800619.242:4): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 212.361932][ T5795] uvcvideo 2-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 212.439820][ T6013] loop0: detected capacity change from 0 to 64 [ 212.478713][ T5795] uvcvideo 2-1:13.0: No valid video chain found. [ 212.509378][ T5795] usb 2-1: USB disconnect, device number 3 [ 213.524461][ T6024] loop0: detected capacity change from 0 to 164 [ 215.565900][ T6041] loop0: detected capacity change from 0 to 16 [ 215.634150][ T6041] erofs (device loop0): invalid ishare xattr prefix id 0 [ 216.507044][ T5204] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 216.768114][ T5204] usb 2-1: Using ep0 maxpacket: 32 [ 216.857514][ T5204] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 216.946433][ T5204] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 216.977591][ T5204] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.991847][ T5204] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 217.063706][ T5204] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 217.092575][ T5204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.109750][ T5204] usb 2-1: Product: syz [ 217.123277][ T5204] usb 2-1: Manufacturer: syz [ 217.174280][ T5204] usb 2-1: SerialNumber: syz [ 217.259465][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 217.274275][ T6044] loop3: detected capacity change from 0 to 4096 [ 217.290221][ T5204] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input6 [ 217.328426][ T5795] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 217.488004][ T5204] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 217.510477][ T5204] (id 0x00) [ 217.580027][ T5795] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 217.623123][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.663283][ T5795] usb 5-1: Product: syz [ 217.681348][ T6044] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 217.694125][ T5795] usb 5-1: Manufacturer: syz [ 217.714417][ T5795] usb 5-1: SerialNumber: syz [ 217.912509][ T6044] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB [ 217.961314][ T5204] rc_core: IR keymap rc-imon-pad not found [ 217.993174][ T5204] Registered IR keymap rc-empty [ 218.030168][ T5204] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 218.091443][ T5204] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 218.198682][ T5204] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 218.265230][ T5795] gspca_main: pac207-2.14.0 probing 093a:2476 [ 218.292973][ T5795] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 218.303083][ T5204] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input7 [ 218.328000][ T5795] uvcvideo 5-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 218.380395][ T5795] uvcvideo 5-1:13.0: No valid video chain found. [ 218.428535][ T5204] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:4> initialized [ 218.477500][ T5795] usb 5-1: USB disconnect, device number 3 [ 218.521541][ T5204] usb 2-1: USB disconnect, device number 4 [ 219.239442][ T6064] loop2: detected capacity change from 0 to 2048 [ 219.349571][ T6064] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 219.446989][ T6067] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.763956][ T6073] loop0: detected capacity change from 0 to 256 [ 220.240510][ T6073] FAT-fs (loop0): Directory bread(block 64) failed [ 220.271287][ T5795] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 220.295527][ T6073] FAT-fs (loop0): Directory bread(block 65) failed [ 220.497766][ T6073] FAT-fs (loop0): Directory bread(block 66) failed [ 220.525507][ T5795] usb 4-1: Using ep0 maxpacket: 8 [ 220.590366][ T6073] FAT-fs (loop0): Directory bread(block 67) failed [ 220.683406][ T6073] FAT-fs (loop0): Directory bread(block 68) failed [ 220.705766][ T5795] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 220.761344][ T6073] FAT-fs (loop0): Directory bread(block 69) failed [ 220.786522][ T6073] FAT-fs (loop0): Directory bread(block 70) failed [ 220.793759][ T6073] FAT-fs (loop0): Directory bread(block 71) failed [ 220.799293][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.800781][ T6073] FAT-fs (loop0): Directory bread(block 72) failed [ 220.815105][ T6073] FAT-fs (loop0): Directory bread(block 73) failed [ 220.877470][ T5795] usb 4-1: Product: syz [ 220.906107][ T5795] usb 4-1: Manufacturer: syz [ 220.935674][ T5795] usb 4-1: SerialNumber: syz [ 220.942563][ T807] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 220.982661][ T5795] usb 4-1: config 0 descriptor?? [ 221.198497][ T807] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 221.270853][ T5795] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 221.278845][ T807] usb 3-1: config 127 has no interface number 0 [ 221.327314][ T807] usb 3-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 221.359697][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.415148][ T807] usb 3-1: Product: syz [ 221.449412][ T807] usb 3-1: Manufacturer: syz [ 221.462843][ T807] usb 3-1: SerialNumber: syz [ 221.719192][ T5795] usb write operation failed. (-71) [ 221.781921][ T5795] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.812098][ T807] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 221.828356][ T5795] dvbdev: DVB: registering new adapter (Terratec H7) [ 221.829412][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.92'. [ 221.856571][ T5795] usb 4-1: media controller created [ 221.864020][ T6085] loop0: detected capacity change from 0 to 512 [ 221.865347][ T5795] usb read operation failed. (-71) [ 221.909551][ T5795] usb write operation failed. (-71) [ 221.977417][ T6085] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.91: iget: bad i_size value: 38620345925642 [ 222.031377][ T5795] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 222.068975][ T6085] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.076762][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 222.092893][ C1] EXT4-fs (loop0): initial error at time 1778800628: ext4_orphan_get:1397: inode 15 [ 222.102667][ C1] EXT4-fs (loop0): last error at time 1778800628: ext4_orphan_get:1397: inode 15 [ 222.138227][ T6085] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.91: couldn't read orphan inode 15 (err -117) [ 222.178986][ T6085] loop0: lost filesystem error report for type 5 error -117 [ 222.205684][ T807] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 222.241697][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.259391][ T5795] usb 4-1: USB disconnect, device number 4 [ 222.307160][ T807] pac7311 3-1:127.192: probe with driver pac7311 failed with error -71 [ 222.386012][ T807] usb 3-1: USB disconnect, device number 4 [ 222.505791][ T5204] IPVS: starting estimator thread 0... [ 222.517043][ T6085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.91: bg 0: block 5: invalid block bitmap [ 222.582763][ T6085] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 57 with error 28 [ 222.638888][ T6092] IPVS: using max 240 ests per chain, 12000 per kthread [ 222.683841][ T6085] EXT4-fs (loop0): This should not happen!! Data will be lost [ 222.683841][ T6085] [ 222.749438][ T6085] EXT4-fs (loop0): Total free blocks count 0 [ 222.795176][ T6085] EXT4-fs (loop0): Free/Dirty block details [ 222.837344][ T6085] EXT4-fs (loop0): free_blocks=0 [ 222.886294][ T6085] EXT4-fs (loop0): dirty_blocks=57 [ 222.913777][ T6085] EXT4-fs (loop0): Block reservation details [ 222.920695][ T5204] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 222.950985][ T6085] EXT4-fs (loop0): i_reserved_data_blocks=57 [ 223.135973][ T5204] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 223.154843][ T5204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.164294][ T5204] usb 2-1: Product: syz [ 223.189333][ T5204] usb 2-1: Manufacturer: syz [ 223.194403][ T5204] usb 2-1: SerialNumber: syz [ 223.216307][ T5592] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost [ 223.291423][ T5592] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.571718][ T6101] syz.2.98 uses obsolete (PF_INET,SOCK_PACKET) [ 223.686117][ T5204] gspca_main: pac207-2.14.0 probing 093a:2476 [ 223.741762][ T5204] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 223.764193][ T5204] uvcvideo 2-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 223.782648][ T5204] uvcvideo 2-1:13.0: No valid video chain found. [ 223.838604][ T5204] usb 2-1: USB disconnect, device number 5 [ 224.489522][ T6116] loop2: detected capacity change from 0 to 16 [ 224.564798][ T6116] erofs (device loop2): mounted with root inode @ nid 36. [ 224.694309][ T6116] syz.2.105: attempt to access beyond end of device [ 224.694309][ T6116] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 224.799773][ T6122] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 224.867257][ T6116] syz.2.105: attempt to access beyond end of device [ 224.867257][ T6116] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 224.910864][ T6116] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 224.913490][ T6125] loop3: detected capacity change from 0 to 256 [ 225.037572][ T6116] erofs (device loop2): read error -117 @ 1 of nid 89 [ 225.059387][ T5204] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 225.131209][ T29] audit: type=1800 audit(1778800631.992:5): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.105" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 225.289857][ T5204] usb 2-1: Using ep0 maxpacket: 32 [ 225.323078][ T5204] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.377321][ T6125] FAT-fs (loop3): Directory bread(block 64) failed [ 225.390335][ T5204] usb 2-1: config 0 has no interface number 0 [ 225.409363][ T6125] FAT-fs (loop3): Directory bread(block 65) failed [ 225.445412][ T6125] FAT-fs (loop3): Directory bread(block 66) failed [ 225.445622][ T5204] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 225.479825][ T6125] FAT-fs (loop3): Directory bread(block 67) failed [ 225.517924][ T6125] FAT-fs (loop3): Directory bread(block 68) failed [ 225.525377][ T5204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.569588][ T6125] FAT-fs (loop3): Directory bread(block 69) failed [ 225.573338][ T5204] usb 2-1: Product: syz [ 225.600028][ T6125] FAT-fs (loop3): Directory bread(block 70) failed [ 225.618668][ T5204] usb 2-1: Manufacturer: syz [ 225.638606][ T5204] usb 2-1: SerialNumber: syz [ 225.677948][ T6125] FAT-fs (loop3): Directory bread(block 71) failed [ 225.704633][ T5204] usb 2-1: config 0 descriptor?? [ 225.710264][ T6125] FAT-fs (loop3): Directory bread(block 72) failed [ 225.731050][ T6125] FAT-fs (loop3): Directory bread(block 73) failed [ 225.749574][ T5204] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 225.786287][ T5204] usb 2-1: selecting invalid altsetting 1 [ 225.820925][ T5204] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 225.888995][ T5204] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.918667][ T5204] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 225.960555][ T5204] usb 2-1: media controller created [ 226.321198][ T5204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.047845][ T6123] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 228.028939][ T5204] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 228.031195][ T6146] loop0: detected capacity change from 0 to 256 [ 228.036240][ T5204] zl10353_read_register: readreg error (reg=127, ret==-71) [ 228.052701][ T5204] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 228.147922][ T6146] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.160818][ T6141] loop3: detected capacity change from 0 to 32768 [ 228.234775][ T6141] gfs2: can't find protocol ldebug [ 228.746288][ T5204] usb 2-1: USB disconnect, device number 6 [ 228.830615][ T5795] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 229.046278][ T5795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.111644][ T5795] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.195612][ T5795] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 229.247228][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.360233][ T5795] usb 5-1: config 0 descriptor?? [ 229.461129][ T5795] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 229.495365][ T5795] dvb-usb: bulk message failed: -22 (3/0) [ 229.562052][ T5795] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 229.617923][ T5795] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 229.654111][ T6152] dvb-usb: bulk message failed: -22 (2/0) [ 229.667691][ T5795] usb 5-1: media controller created [ 229.723730][ T5795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.854665][ T5204] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 229.858091][ T5795] dvb-usb: bulk message failed: -22 (6/0) [ 229.919554][ T5795] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 229.989494][ T5795] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 230.077388][ T5204] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.082554][ T5795] dvb-usb: schedule remote query interval to 150 msecs. [ 230.134369][ T5204] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 230.149825][ T5795] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 230.183966][ T5795] usb 5-1: USB disconnect, device number 4 [ 230.233512][ T5204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 230.287904][ T5204] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.363977][ T5204] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.413216][ T5204] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.428624][ T5795] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 230.469448][ T5204] usb 1-1: Manufacturer: syz [ 230.520091][ T5204] usb 1-1: config 0 descriptor?? [ 230.631614][ T6172] loop3: detected capacity change from 0 to 256 [ 230.675996][ T6172] exfat: Deprecated parameter 'utf8' [ 230.795634][ T6172] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 232.041827][ T6182] loop4: detected capacity change from 0 to 256 [ 232.587801][ T6182] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 232.995264][ T5585] usb 1-1: USB disconnect, device number 4 [ 233.435614][ T6190] loop0: detected capacity change from 0 to 256 [ 233.483001][ T6190] exfat: Deprecated parameter 'utf8' [ 233.530328][ T6190] exfat: Deprecated parameter 'namecase' [ 233.560709][ T6190] exfat: Deprecated parameter 'namecase' [ 233.955695][ T6190] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 234.215478][ T29] audit: type=1800 audit(1778800641.082:6): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="bus" dev="loop0" ino=1048637 res=0 errno=0 [ 235.035045][ T6199] warning: `syz.0.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 235.233837][ T6201] loop4: detected capacity change from 0 to 64 [ 236.309228][ T6212] loop4: detected capacity change from 0 to 64 [ 236.569657][ T5585] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 236.820216][ T5585] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 236.862988][ T5585] usb 3-1: config 0 has no interface number 0 [ 236.893589][ T5585] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 236.944658][ T5585] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 236.990201][ T5585] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 237.041831][ T5585] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 237.069038][ T5585] usb 3-1: Manufacturer: syz [ 237.084474][ T5585] usb 3-1: SerialNumber: syz [ 237.159815][ T5585] usb 3-1: config 0 descriptor?? [ 237.622363][ T5585] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 237.709056][ T5585] usb 3-1: USB disconnect, device number 5 [ 237.737896][ T5795] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 237.937391][ T5795] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 237.973564][ T5795] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.038661][ T5795] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 238.083514][ T6229] loop1: detected capacity change from 0 to 512 [ 238.099985][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.130701][ T5795] usb 1-1: Product: syz [ 238.144316][ T6229] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 238.162816][ T5795] usb 1-1: Manufacturer: syz [ 238.184414][ T5795] usb 1-1: SerialNumber: syz [ 238.211183][ T6229] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 238.287278][ T6229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 238.343988][ T6229] System zones: 1-12 [ 238.424565][ T5795] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 238.444376][ T6229] EXT4-fs (loop1): 1 truncate cleaned up [ 238.470741][ T5585] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 238.489838][ T6229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.523573][ T4917] bcm5974 1-1:1.0: could not read from device [ 238.603721][ T5795] usb 1-1: USB disconnect, device number 5 [ 238.603762][ T4917] bcm5974 1-1:1.0: could not read from device [ 238.647068][ T4917] bcm5974 1-1:1.0: could not read from device [ 238.990045][ T5578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.338492][ T5585] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 239.349940][ T5585] usb 4-1: config 1 has no interface number 0 [ 239.363250][ T5585] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 239.376059][ T5585] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 239.386456][ T5585] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.116981][ T6245] netlink: 52 bytes leftover after parsing attributes in process `syz.4.154'. [ 242.081469][ T5585] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 242.113784][ T5585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.244833][ T5585] usb 4-1: can't set config #1, error -71 [ 242.280588][ T5585] usb 4-1: USB disconnect, device number 5 [ 244.786457][ T6276] loop3: detected capacity change from 0 to 2048 [ 244.807388][ T6268] comedi comedi0: reset error (fatal) [ 245.014134][ T6281] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.184992][ T6282] loop1: detected capacity change from 0 to 256 [ 245.788306][ T6282] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 248.792094][ T5795] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 248.828508][ T6308] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 249.045941][ T5795] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 249.106188][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.131256][ T5795] usb 1-1: Product: syz [ 249.147394][ T5795] usb 1-1: Manufacturer: syz [ 249.173147][ T5795] usb 1-1: SerialNumber: syz [ 249.227323][ T5795] usb 1-1: config 0 descriptor?? [ 249.395457][ T6316] loop3: detected capacity change from 0 to 736 [ 250.609537][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 250.620961][ T5795] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 250.627607][ T5795] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 250.635209][ T5795] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 251.634709][ T5795] usb 1-1: USB disconnect, device number 6 [ 253.565589][ T6333] loop1: detected capacity change from 0 to 256 [ 253.783651][ T6336] loop0: detected capacity change from 0 to 1024 [ 254.133305][ T6336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 254.255252][ T6336] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.103845][ T5592] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 255.171652][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 255.197677][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 255.303257][ T6351] netlink: 'syz.3.193': attribute type 11 has an invalid length. [ 255.932141][ T6360] netlink: 112 bytes leftover after parsing attributes in process `syz.1.196'. [ 256.467914][ T6362] loop3: detected capacity change from 0 to 1024 [ 256.783450][ T6370] loop0: detected capacity change from 0 to 16 [ 256.854668][ T6370] erofs (device loop0): invalid ishare xattr prefix id 0 [ 256.935957][ T6362] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 258.197530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 258.607165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 259.016890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 259.938274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 260.348420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 260.757833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 260.957122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 260.967153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 261.167297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 261.987259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 265.548317][ T5795] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 265.620586][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.628421][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.793746][ T5795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.869239][ T5795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.963262][ T5795] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 266.024234][ T5795] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 266.087527][ T5795] usb 3-1: Manufacturer: syz [ 266.200791][ T5795] usb 3-1: config 0 descriptor?? [ 266.527351][ T5680] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 266.698130][ T5680] usb 4-1: Using ep0 maxpacket: 16 [ 266.749514][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.773759][ T6402] loop0: detected capacity change from 0 to 2048 [ 266.812138][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.876331][ T5680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.965654][ T5680] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.035949][ T6402] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.044765][ T6405] netlink: 68 bytes leftover after parsing attributes in process `syz.1.215'. [ 267.058478][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.085446][ T5795] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 267.126303][ T5680] usb 4-1: config 0 descriptor?? [ 267.134434][ T5795] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 267.173588][ T5795] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 267.263757][ T5795] usb 3-1: USB disconnect, device number 6 [ 267.581572][ T6409] loop4: detected capacity change from 0 to 16 [ 267.712394][ T6409] erofs (device loop4): invalid ishare xattr prefix id 0 [ 268.991055][ T6416] netlink: 'syz.2.219': attribute type 30 has an invalid length. [ 269.392742][ T5680] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 269.431160][ T5680] microsoft 0003:045E:07DA.0005: no inputs found [ 269.774375][ T5680] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 269.791850][ T5680] usb 4-1: USB disconnect, device number 6 [ 270.665704][ T6433] loop3: detected capacity change from 0 to 512 [ 270.829438][ T6433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.083011][ T6433] fs-verity (loop3, inode 18): Unsupported log_blocksize: 12 [ 271.733954][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.330519][ T6447] fido_id[6447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 273.465205][ T6455] loop0: detected capacity change from 0 to 16 [ 273.631572][ T6455] erofs (device loop0): invalid ishare xattr prefix id 0 [ 276.003061][ T6460] loop4: detected capacity change from 0 to 4096 [ 276.914714][ T6468] loop3: detected capacity change from 0 to 4096 [ 277.523379][ T6468] ntfs3(loop3): ino=18, mi_enum_attr [ 277.591025][ T6468] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 278.191385][ T6468] ntfs3(loop3): failed to convert "0080" to macgaelic [ 278.253239][ T5585] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 278.552983][ T5585] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 278.579021][ T5585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.596837][ T5585] usb 1-1: Product: syz [ 278.604624][ T5585] usb 1-1: Manufacturer: syz [ 278.621813][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.630129][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.638457][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.646787][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.654995][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.663256][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.671567][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.679830][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.688066][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.696203][ T6480] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 278.726822][ T5585] usb 1-1: SerialNumber: syz [ 279.613769][ T5585] gspca_main: pac207-2.14.0 probing 093a:2476 [ 279.751922][ T5585] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 279.863619][ T5585] uvcvideo 1-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 279.945776][ T5585] uvcvideo 1-1:13.0: No valid video chain found. [ 280.055985][ T5585] usb 1-1: USB disconnect, device number 7 [ 281.515524][ T6495] loop0: detected capacity change from 0 to 16 [ 281.812652][ T6495] erofs (device loop0): invalid ishare xattr prefix id 0 [ 283.605292][ T6505] loop2: detected capacity change from 0 to 512 [ 283.662649][ T6505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.774158][ T6505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.827271][ T6505] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.971904][ T6505] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.251: corrupted xattr block 33: invalid ea_ino [ 284.025582][ T6505] EXT4-fs (loop2): Remounting filesystem read-only [ 284.285502][ T5590] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.300195][ T57] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 284.363228][ T57] Quota error (device loop2): write_blk: dquota write failed [ 284.390054][ T57] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 284.428794][ T57] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 284.472532][ T57] Quota error (device loop2): write_blk: dquota write failed [ 284.508164][ T57] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 284.533200][ T57] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 284.548556][ T57] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 284.786036][ T6528] loop1: detected capacity change from 0 to 1024 [ 284.853250][ T6528] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 285.396507][ T6537] loop3: detected capacity change from 0 to 16 [ 285.413193][ T6537] erofs (device loop3): invalid ishare xattr prefix id 0 [ 287.368654][ T29] audit: type=1326 audit(1778800694.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.3.275" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 287.556789][ T29] audit: type=1326 audit(1778800694.252:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.3.275" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 287.717623][ T29] audit: type=1326 audit(1778800694.322:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.3.275" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 287.862107][ T29] audit: type=1326 audit(1778800694.322:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.3.275" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 288.006483][ T29] audit: type=1326 audit(1778800694.332:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.3.275" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 288.248578][ T6551] Bluetooth: hci1: command 0x0406 tx timeout [ 288.257620][ T5588] Bluetooth: hci0: command 0x0406 tx timeout [ 288.263875][ T4872] Bluetooth: hci4: command 0x0406 tx timeout [ 288.270735][ T6551] Bluetooth: hci2: command 0x0406 tx timeout [ 288.277835][ T5579] Bluetooth: hci3: command 0x0406 tx timeout [ 288.793221][ T6576] loop3: detected capacity change from 0 to 16 [ 288.989512][ T6576] erofs (device loop3): invalid ishare xattr prefix id 0 [ 291.081346][ T6584] loop2: detected capacity change from 0 to 16 [ 291.223901][ T6584] erofs (device loop2): invalid ishare xattr prefix id 0 [ 293.080971][ T6590] pim6reg: entered allmulticast mode [ 293.533666][ T6601] loop0: detected capacity change from 0 to 16 [ 293.616150][ T6601] erofs (device loop0): invalid ishare xattr prefix id 0 [ 296.040326][ T6617] loop1: detected capacity change from 0 to 16 [ 296.089017][ T6617] erofs (device loop1): invalid ishare xattr prefix id 0 [ 298.603049][ T6632] loop4: detected capacity change from 0 to 16 [ 301.340521][ T6632] erofs (device loop4): invalid ishare xattr prefix id 0 [ 301.622452][ T6637] loop1: detected capacity change from 0 to 512 [ 301.632999][ T6637] EXT4-fs: Ignoring removed bh option [ 301.643057][ T6637] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 301.738907][ T6637] EXT4-fs (loop1): 1 truncate cleaned up [ 301.772380][ T6637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.253943][ T5578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.623523][ T6653] loop3: detected capacity change from 0 to 16 [ 302.645375][ T6653] erofs (device loop3): invalid ishare xattr prefix id 0 [ 305.941368][ T6672] loop1: detected capacity change from 0 to 4096 [ 305.994234][ T6672] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 306.891507][ T6698] Bluetooth: MGMT ver 1.23 [ 306.908876][ T6698] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 307.367361][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 307.367431][ T29] audit: type=1326 audit(1778800714.242:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 307.497616][ T29] audit: type=1326 audit(1778800714.282:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 308.047600][ T29] audit: type=1326 audit(1778800714.282:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 308.129990][ T29] audit: type=1326 audit(1778800714.282:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 308.288104][ T6715] loop4: detected capacity change from 0 to 256 [ 309.228713][ T6715] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 309.779793][ T6718] netlink: 52 bytes leftover after parsing attributes in process `syz.4.326'. [ 310.738165][ T29] audit: type=1326 audit(1778800714.302:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 310.841867][ T29] audit: type=1326 audit(1778800714.302:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f255b396bd7 code=0x7ffc0000 [ 311.020389][ T29] audit: type=1326 audit(1778800714.302:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f255b33e1d9 code=0x7ffc0000 [ 311.237465][ T29] audit: type=1326 audit(1778800714.302:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 311.416078][ T29] audit: type=1326 audit(1778800714.302:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 311.576805][ T29] audit: type=1326 audit(1778800714.332:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.3.323" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x7ffc0000 [ 312.742015][ T6746] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 313.864695][ T6760] loop0: detected capacity change from 0 to 256 [ 316.504010][ T6760] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 316.727013][ T48] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 316.733425][ T6571] Bluetooth: hci0: command 0x0406 tx timeout [ 317.207353][ T6764] faux_driver vgem: [drm] Unknown color mode 2147483649; guessing buffer size. [ 317.476274][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'. [ 317.511305][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 317.511373][ T29] audit: type=1326 audit(1778800724.382:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.3.345" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f255b39ce59 code=0x0 [ 317.567217][ T6768] netlink: 11 bytes leftover after parsing attributes in process `syz.1.344'. [ 317.636385][ T6770] loop4: detected capacity change from 0 to 512 [ 317.724790][ T6770] EXT4-fs (loop4): 1 truncate cleaned up [ 317.800927][ T6770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.880254][ T6773] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 317.917629][ T29] audit: type=1800 audit(1778800724.802:37): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.346" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 318.332583][ T5583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.000919][ T6789] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 319.732422][ T6797] loop3: detected capacity change from 0 to 512 [ 319.868083][ T6797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.983008][ T6797] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.067760][ T6797] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.356: corrupted xattr block 33: e_value out of bounds [ 320.126129][ T6797] EXT4-fs (loop3): Remounting filesystem read-only [ 320.472465][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.511445][ T5864] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 320.545083][ T6810] loop1: detected capacity change from 0 to 512 [ 320.559000][ T5864] Quota error (device loop3): write_blk: dquota write failed [ 320.593047][ T5864] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 320.624610][ T6810] EXT4-fs: Ignoring removed nobh option [ 320.629621][ T5864] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 320.685461][ T5864] Quota error (device loop3): write_blk: dquota write failed [ 320.704974][ T6810] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.744029][ T5864] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 320.795085][ T5864] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 320.808904][ T6812] loop2: detected capacity change from 0 to 1024 [ 320.847511][ T5864] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 320.930938][ T6817] loop0: detected capacity change from 0 to 16 [ 321.080745][ T6817] erofs (device loop0): invalid ishare xattr prefix id 0 [ 321.235291][ T6810] EXT4-fs (loop1): 1 truncate cleaned up [ 321.509915][ T6810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.896858][ T29] audit: type=1800 audit(1778800728.722:38): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 323.032188][ T29] audit: type=1800 audit(1778800728.752:39): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.362" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 323.065268][ T6821] loop4: detected capacity change from 0 to 16 [ 323.201872][ T6821] erofs (device loop4): invalid ishare xattr prefix id 0 [ 323.867676][ T5578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.404129][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 324.535955][ T6832] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 325.212247][ T6838] capability: warning: `syz.2.371' uses 32-bit capabilities (legacy support in use) [ 326.172816][ T6852] loop1: detected capacity change from 0 to 16 [ 326.270490][ T6852] erofs (device loop1): invalid ishare xattr prefix id 0 [ 327.061811][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.066881][ T5680] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 327.075729][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.232662][ T5680] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 327.246826][ T5680] usb 3-1: config 0 has no interface number 0 [ 327.263150][ T5680] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 327.939160][ T6856] netlink: 80 bytes leftover after parsing attributes in process `syz.4.378'. [ 328.212834][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.231841][ T5680] usb 3-1: Product: syz [ 328.236453][ T5680] usb 3-1: Manufacturer: syz [ 328.247931][ T5680] usb 3-1: SerialNumber: syz [ 328.262809][ T5680] usb 3-1: config 0 descriptor?? [ 328.529979][ T5680] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 328.594567][ T5680] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 328.643381][ T5680] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 328.699070][ T5680] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 328.724638][ T6861] loop1: detected capacity change from 0 to 16 [ 328.763931][ T6861] erofs (device loop1): invalid ishare xattr prefix id 0 [ 329.661972][ T5680] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 329.686376][ T5680] usb 3-1: USB disconnect, device number 7 [ 329.704793][ T5680] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 330.180120][ T6869] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 330.523728][ T5680] keyspan 3-1:0.133: device disconnected [ 331.363989][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 331.630422][ T6881] loop4: detected capacity change from 0 to 4096 [ 331.798870][ T6888] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.939942][ T6891] loop3: detected capacity change from 0 to 16 [ 332.073579][ T6891] erofs (device loop3): invalid ishare xattr prefix id 0 [ 332.969482][ T5585] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 333.183733][ T5585] usb 2-1: Using ep0 maxpacket: 16 [ 333.234981][ T5585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.323239][ T5585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.416145][ T5585] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 333.521980][ T5585] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 333.605870][ T5585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.778016][ T5585] usb 2-1: config 0 descriptor?? [ 334.436839][ T5585] microsoft 0003:045E:07DA.0006: item 0 4 0 9 parsing failed [ 334.503285][ T5585] microsoft 0003:045E:07DA.0006: parse failed [ 334.516436][ T6903] tipc: MTU too low for tipc bearer [ 334.526091][ T5585] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 334.639649][ T5585] usb 2-1: USB disconnect, device number 7 [ 334.724182][ T6898] loop0: detected capacity change from 0 to 4096 [ 334.765631][ T6898] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 334.767124][ T5680] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 334.874093][ T6906] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 334.982763][ T5680] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.010510][ T6898] ntfs3(loop0): ino=19, mi_enum_attr [ 335.015266][ T5680] usb 3-1: config 0 has no interface number 0 [ 335.028534][ T6898] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 335.050972][ T5680] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 335.097492][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.144325][ T5680] usb 3-1: Product: syz [ 335.162730][ T5680] usb 3-1: Manufacturer: syz [ 335.181656][ T5680] usb 3-1: SerialNumber: syz [ 335.228257][ T5680] usb 3-1: config 0 descriptor?? [ 335.284061][ T5680] usb 3-1: selecting invalid altsetting 1 [ 335.320665][ T5680] dvb_ttusb_budget: ttusb_init_controller: error [ 335.964806][ T5680] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 336.400458][ T6914] netlink: 'syz.1.400': attribute type 29 has an invalid length. [ 336.536018][ T6918] netlink: 'syz.1.400': attribute type 29 has an invalid length. [ 337.105816][ T5680] DVB: Unable to find symbol stv0299_attach() [ 337.596456][ T5680] DVB: Unable to find symbol tda8083_attach() [ 337.793766][ T6924] loop2: detected capacity change from 0 to 16 [ 337.823886][ T6924] erofs (device loop2): invalid ishare xattr prefix id 0 [ 338.133804][ T5680] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 338.147281][ T5680] usb 3-1: USB disconnect, device number 8 [ 338.558339][ T6934] loop4: detected capacity change from 0 to 64 [ 338.741722][ T29] audit: type=1800 audit(1778800745.622:40): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.407" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 338.968998][ T6939] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 339.283434][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 339.460722][ T6946] loop0: detected capacity change from 0 to 16 [ 339.472445][ T6946] erofs (device loop0): invalid ishare xattr prefix id 0 [ 339.568169][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.414'. [ 340.172666][ T6955] loop0: detected capacity change from 0 to 16 [ 342.024910][ T6955] erofs (device loop0): invalid ishare xattr prefix id 0 [ 342.622017][ T5585] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 342.889711][ T5585] usb 2-1: Using ep0 maxpacket: 16 [ 342.946198][ T5585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.044635][ T5585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.102075][ T6968] loop4: detected capacity change from 0 to 1024 [ 343.124791][ T5585] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 343.169313][ T5585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.221079][ T5585] usb 2-1: config 0 descriptor?? [ 343.772570][ T5585] ntrig 0003:1B96:0008.0007: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 343.952351][ T5585] usb 2-1: USB disconnect, device number 8 [ 344.044362][ T6975] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 344.287551][ T5204] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 344.497043][ T5204] usb 3-1: Using ep0 maxpacket: 16 [ 344.590787][ T5204] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.656051][ T5204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 344.681419][ T5204] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 344.722960][ T5204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.832094][ T5204] usb 3-1: config 0 descriptor?? [ 345.319437][ T6989] loop3: detected capacity change from 0 to 512 [ 345.391103][ T5204] hid_parser_main: 66 callbacks suppressed [ 345.404981][ T5204] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x6 [ 345.421297][ T5204] zeroplus 0003:0C12:0030.0008: invalid report_size 26545 [ 345.475150][ T5204] zeroplus 0003:0C12:0030.0008: item 0 2 1 7 parsing failed [ 345.493058][ T6989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.541716][ T6989] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.582304][ T6992] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 320: padding at end of block bitmap is not set [ 345.612621][ T5204] zeroplus 0003:0C12:0030.0008: parse failed [ 345.694359][ T5204] zeroplus 0003:0C12:0030.0008: probe with driver zeroplus failed with error -22 [ 345.773463][ T6992] EXT4-fs (loop3): Remounting filesystem read-only [ 345.788495][ T6986] fido_id[6986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 345.887799][ T5204] usb 3-1: USB disconnect, device number 9 [ 346.834592][ T6990] loop1: detected capacity change from 0 to 4096 [ 346.895457][ T6990] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 347.116035][ T7001] loop4: detected capacity change from 0 to 512 [ 347.162079][ T7001] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.406243][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.579020][ T6990] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 347.763096][ T29] audit: type=1800 audit(1778800754.612:41): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.432" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 348.269804][ T7001] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 348.306736][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 348.313396][ C0] EXT4-fs (loop4): initial error at time 1778800755: ext4_mb_generate_buddy:1317 [ 348.322926][ C0] EXT4-fs (loop4): last error at time 1778800755: ext4_mb_generate_buddy:1317 [ 348.437283][ T7001] Quota error (device loop4): write_blk: dquota write failed [ 348.444947][ T7001] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 348.467089][ T7001] Quota error (device loop4): write_blk: dquota write failed [ 348.523668][ T7001] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 348.573646][ T7001] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.436: Failed to acquire dquot type 1 [ 348.652225][ T7001] loop4: lost filesystem error report for type 5 error -28 [ 348.658870][ T7001] EXT4-fs (loop4): 1 truncate cleaned up [ 348.750152][ T7012] tipc: Enabling of bearer rejected, failed to enable media [ 348.784908][ T7001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.189116][ T7016] loop0: detected capacity change from 0 to 16 [ 350.251514][ T7021] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 350.379802][ T5583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.428642][ T7016] erofs (device loop0): invalid ishare xattr prefix id 0 [ 350.859009][ T5204] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 351.116810][ T5204] usb 3-1: Using ep0 maxpacket: 16 [ 351.216352][ T5204] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 351.265051][ T5204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.322853][ T5204] usb 3-1: Product: syz [ 351.356798][ T5204] usb 3-1: Manufacturer: syz [ 351.391279][ T5204] usb 3-1: SerialNumber: syz [ 351.532610][ T5204] usb 3-1: config 0 descriptor?? [ 351.593888][ T5204] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 351.952585][ T7033] loop3: detected capacity change from 0 to 16 [ 352.222904][ T5204] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 352.870093][ T7033] erofs (device loop3): invalid ishare xattr prefix id 0 [ 354.100397][ T5204] usb 3-1: USB disconnect, device number 10 [ 354.450938][ T7044] comedi comedi2: pcl711: I/O port conflict (0x100,16) [ 355.203332][ T7050] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 355.640549][ T7057] loop4: detected capacity change from 0 to 16 [ 355.950706][ T7057] erofs (device loop4): invalid ishare xattr prefix id 0 [ 358.250001][ T7077] loop2: detected capacity change from 0 to 16 [ 358.391697][ T7077] erofs (device loop2): invalid ishare xattr prefix id 0 [ 360.306599][ T5680] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 360.492485][ T5680] usb 5-1: unable to get BOS descriptor or descriptor too short [ 360.540369][ T5680] usb 5-1: not running at top speed; connect to a high speed hub [ 360.573778][ T5680] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.587622][ T5585] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 360.601197][ T5680] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.608100][ T7087] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 360.621130][ T5680] usb 5-1: config 1 has no interface number 0 [ 360.663320][ T5680] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 360.684211][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.706434][ T5680] usb 5-1: Product: syz [ 360.717418][ T5680] usb 5-1: Manufacturer: syz [ 360.728674][ T5680] usb 5-1: SerialNumber: syz [ 360.782406][ T5585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 360.912924][ T5585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 360.946258][ T5585] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.012819][ T5585] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 361.045406][ T5585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.186110][ T5585] usb 2-1: config 0 descriptor?? [ 361.238625][ T7084] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.320572][ T5204] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 361.482910][ T5680] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 361.523315][ T5204] usb 3-1: Using ep0 maxpacket: 32 [ 361.530787][ T5680] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 361.599162][ T5680] usb 5-1: USB disconnect, device number 5 [ 362.540256][ T5204] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 362.594550][ T5585] hid (null): unknown global tag 0xe [ 362.877525][ T5585] hid (null): unknown global tag 0xe [ 362.906965][ T5204] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 363.378906][ T5204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.392985][ T5204] usb 3-1: Product: syz [ 363.403266][ T5204] usb 3-1: Manufacturer: syz [ 363.413449][ T5204] usb 3-1: SerialNumber: syz [ 363.420220][ T5585] corsair-psu 0003:1B1C:1C1F.0009: unknown main item tag 0x3 [ 363.441213][ T5585] corsair-psu 0003:1B1C:1C1F.0009: unknown global tag 0xe [ 363.471141][ T5204] usb 3-1: config 0 descriptor?? [ 363.490906][ T5585] corsair-psu 0003:1B1C:1C1F.0009: item 0 1 1 14 parsing failed [ 363.503836][ T7090] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 363.545308][ T5585] corsair-psu 0003:1B1C:1C1F.0009: probe with driver corsair-psu failed with error -22 [ 363.611344][ T5204] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.652372][ T5585] usb 2-1: USB disconnect, device number 9 [ 363.937147][ T40] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 363.953634][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 364.168219][ T40] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 364.202242][ T40] usb 1-1: config 1 has no interface number 0 [ 364.231094][ T40] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 364.254773][ T5204] usb 3-1: USB disconnect, device number 11 [ 364.281114][ T40] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 364.358622][ T40] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.481790][ T7112] loop3: detected capacity change from 0 to 16 [ 364.630463][ T7112] erofs (device loop3): invalid ishare xattr prefix id 0 [ 365.375034][ T40] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 365.390386][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.402910][ T40] usb 1-1: Product: syz [ 365.441814][ T40] usb 1-1: Manufacturer: syz [ 365.473975][ T40] usb 1-1: SerialNumber: syz [ 365.569143][ T7102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.672121][ T7115] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 365.854033][ T7116] loop1: detected capacity change from 0 to 1024 [ 365.972709][ T7102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 366.109506][ T7116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 366.248262][ T7116] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.318369][ T40] usb 1-1: Incompatible driver and firmware versions [ 366.482419][ T29] audit: type=1800 audit(1778800773.302:42): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.481" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 366.578083][ T40] usb 1-1: USB disconnect, device number 8 [ 366.739062][ T7123] loop4: detected capacity change from 0 to 256 [ 366.784155][ T5578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 366.917247][ T7123] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 367.062786][ T7123] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 369.003835][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.502178][ T7148] loop3: detected capacity change from 0 to 16 [ 370.599735][ T7148] erofs (device loop3): invalid ishare xattr prefix id 0 [ 370.991206][ T7153] loop2: detected capacity change from 0 to 16 [ 371.020192][ T7155] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 371.127609][ T7153] erofs (device loop2): invalid ishare xattr prefix id 0 [ 371.687835][ T7162] loop3: detected capacity change from 0 to 16 [ 371.698061][ T7162] erofs (device loop3): invalid ishare xattr prefix id 0 [ 373.479051][ T7188] loop2: detected capacity change from 0 to 16 [ 374.557356][ T7188] erofs (device loop2): invalid ishare xattr prefix id 0 [ 374.655821][ T7196] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 375.844059][ T7198] loop1: detected capacity change from 0 to 4096 [ 375.973839][ T7198] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 376.712889][ T7198] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 376.971433][ T29] audit: type=1800 audit(1778800783.782:43): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.508" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 377.278576][ T7213] loop2: detected capacity change from 0 to 16 [ 377.296761][ T7213] erofs (device loop2): invalid ishare xattr prefix id 0 [ 381.663454][ T7251] loop1: detected capacity change from 0 to 16 [ 381.707070][ T40] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 381.907021][ T7251] erofs (device loop1): invalid ishare xattr prefix id 0 [ 382.018456][ T40] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 382.074350][ T40] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 382.116369][ T40] usb 3-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 382.648670][ T5680] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 382.786888][ T40] usb 3-1: config 220 has no interface number 2 [ 382.806893][ T40] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 382.837167][ T40] usb 3-1: config 220 interface 0 has no altsetting 0 [ 382.856878][ T40] usb 3-1: config 220 interface 76 has no altsetting 0 [ 382.879417][ T40] usb 3-1: config 220 interface 1 has no altsetting 0 [ 383.323105][ T40] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 383.373226][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.423923][ T40] usb 3-1: Product: syz [ 383.467460][ T40] usb 3-1: Manufacturer: syz [ 383.485509][ T40] usb 3-1: SerialNumber: syz [ 383.790144][ T5680] usb 1-1: Using ep0 maxpacket: 32 [ 383.834401][ T5680] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 383.930308][ T40] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 384.041790][ T40] uvcvideo 3-1:220.0: No valid video chain found. [ 384.088533][ T40] usb 3-1: selecting invalid altsetting 0 [ 384.225988][ T40] usb 3-1: selecting invalid altsetting 0 [ 384.270673][ T40] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 384.376686][ T40] usb 3-1: USB disconnect, device number 12 [ 384.789316][ T5680] usb 1-1: config 0 has no interface number 0 [ 384.796213][ T5680] usb 1-1: config 0 interface 12 has no altsetting 0 [ 384.813020][ T5680] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 384.822921][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.831301][ T5680] usb 1-1: Product: syz [ 384.835631][ T5680] usb 1-1: Manufacturer: syz [ 384.840588][ T5680] usb 1-1: SerialNumber: syz [ 385.008466][ T5680] usb 1-1: config 0 descriptor?? [ 385.531651][ T7274] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 385.597263][ T807] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 385.717813][ T5680] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 385.747254][ T5680] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 385.776042][ T5680] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 385.784247][ T807] usb 3-1: Using ep0 maxpacket: 16 [ 385.797538][ T5680] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 385.830737][ T807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 385.839900][ T7278] loop3: detected capacity change from 0 to 16 [ 385.851087][ T807] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 385.853614][ T7278] erofs (device loop3): invalid ishare xattr prefix id 0 [ 385.935747][ T5680] usb 1-1: USB disconnect, device number 9 [ 385.956588][ T807] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 385.997304][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.032995][ T807] usb 3-1: Product: syz [ 386.047843][ T807] usb 3-1: Manufacturer: syz [ 386.063558][ T807] usb 3-1: SerialNumber: syz [ 386.444161][ T807] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 386.480955][ T807] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 386.572366][ T807] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 388.720722][ T7294] loop4: detected capacity change from 0 to 16 [ 388.836085][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.845293][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.142877][ T807] usb 3-1: USB disconnect, device number 13 [ 389.949701][ T7294] erofs (device loop4): invalid ishare xattr prefix id 0 [ 390.120272][ T7305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 390.127005][ T7305] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 390.195833][ T7305] vhci_hcd vhci_hcd.0: Device attached [ 390.222782][ T7307] vhci_hcd: connection closed [ 390.225332][ T5804] vhci_hcd vhci_hcd.1: stop threads [ 390.276540][ T5804] vhci_hcd vhci_hcd.1: release socket [ 390.299193][ T5804] vhci_hcd vhci_hcd.1: disconnect device [ 390.385005][ T7311] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 390.419976][ T7314] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 391.163099][ T7327] capability: warning: `syz.4.554' uses deprecated v2 capabilities in a way that may be insecure [ 391.276918][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.252956][ T7341] loop1: detected capacity change from 0 to 16 [ 395.665134][ T7344] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 395.858565][ T807] kernel read not supported for file /vcsu (pid: 807 comm: kworker/0:2) [ 396.208613][ T7341] erofs (device loop1): invalid ishare xattr prefix id 0 [ 396.523745][ T34] ===================================================== [ 396.531730][ T34] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x776/0xe20 [ 396.544698][ T34] n_tty_receive_buf_closing+0x776/0xe20 [ 396.551962][ T34] n_tty_receive_buf_common+0x19cd/0x25a0 [ 396.558391][ T34] n_tty_receive_buf2+0x4c/0x60 [ 396.563947][ T34] tty_ldisc_receive_buf+0xc6/0x2c0 [ 396.570062][ T34] tty_port_default_receive_buf+0xd7/0x1a0 [ 396.576558][ T34] flush_to_ldisc+0x43e/0xe40 [ 396.581992][ T34] process_scheduled_works+0xb65/0x1e40 [ 396.588257][ T34] worker_thread+0xee4/0x1590 [ 396.593544][ T34] kthread+0x53a/0x5f0 [ 396.598323][ T34] ret_from_fork+0x20f/0x8d0 [ 396.603579][ T34] ret_from_fork_asm+0x1a/0x30 [ 396.609178][ T34] [ 396.612063][ T34] Uninit was created at: [ 396.617781][ T34] __kmalloc_noprof+0x482/0x1660 [ 396.623219][ T34] __tty_buffer_request_room+0x3d4/0x7a0 [ 396.629623][ T34] __tty_insert_flip_string_flags+0x157/0x6e0 [ 396.636347][ T34] uart_insert_char+0x368/0x930 [ 396.645857][ T34] serial8250_read_char+0x1ba/0x670 [ 396.653270][ T34] serial8250_handle_irq_locked+0x6d4/0xa40 [ 396.659989][ T34] serial8250_handle_irq+0x189/0x710 [ 396.665887][ T34] serial8250_default_handle_irq+0x116/0x350 [ 396.672724][ T34] serial8250_interrupt+0xcb/0x3f0 [ 396.678697][ T34] __handle_irq_event_percpu+0x118/0xf30 [ 396.684955][ T34] handle_irq_event+0xe0/0x2a0 [ 396.690530][ T34] handle_edge_irq+0x2a9/0xaf0 [ 396.695911][ T34] __common_interrupt+0x9d/0x180 [ 396.701572][ T34] common_interrupt+0x94/0xb0 [ 396.707010][ T34] asm_common_interrupt+0x2b/0x40 [ 396.712649][ T34] [ 396.715559][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 396.725667][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.736969][ T34] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 396.747780][ T34] ===================================================== [ 396.756119][ T34] Disabling lock debugging due to kernel taint [ 396.856319][ T34] Kernel panic - not syncing: kmsan.panic set ... [ 396.862860][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Tainted: G B syzkaller #0 PREEMPT(full) [ 396.873883][ T34] Tainted: [B]=BAD_PAGE [ 396.878113][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.888287][ T34] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 396.894471][ T34] Call Trace: [ 396.897837][ T34] [ 396.900852][ T34] __dump_stack+0x26/0x30 [ 396.905339][ T34] dump_stack_lvl+0x50/0x1c0 [ 396.910089][ T34] ? dump_stack+0x12/0x25 [ 396.914590][ T34] dump_stack+0x1e/0x25 [ 396.918890][ T34] vpanic+0x7b4/0x1430 [ 396.923144][ T34] panic+0x15d/0x160 [ 396.927259][ T34] kmsan_report+0x31a/0x320 [ 396.931941][ T34] ? __msan_warning+0x1b/0x30 [ 396.936773][ T34] ? n_tty_receive_buf_closing+0x776/0xe20 [ 396.942769][ T34] ? n_tty_receive_buf_common+0x19cd/0x25a0 [ 396.948849][ T34] ? n_tty_receive_buf2+0x4c/0x60 [ 396.954049][ T34] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 396.959593][ T34] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 396.965745][ T34] ? flush_to_ldisc+0x43e/0xe40 [ 396.970742][ T34] ? process_scheduled_works+0xb65/0x1e40 [ 396.976620][ T34] ? worker_thread+0xee4/0x1590 [ 396.981626][ T34] ? kthread+0x53a/0x5f0 [ 396.986044][ T34] ? ret_from_fork+0x20f/0x8d0 [ 396.990965][ T34] ? ret_from_fork_asm+0x1a/0x30 [ 396.996068][ T34] ? __update_load_avg_cfs_rq+0xe9/0x1050 [ 397.001982][ T34] ? __update_load_avg_cfs_rq+0xe9/0x1050 [ 397.007899][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 397.013195][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.019195][ T34] ? kmsan_get_metadata+0x70/0x160 [ 397.024506][ T34] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 397.030226][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 397.035515][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 397.040814][ T34] __msan_warning+0x1b/0x30 [ 397.045476][ T34] n_tty_receive_buf_closing+0x776/0xe20 [ 397.051354][ T34] n_tty_receive_buf_common+0x19cd/0x25a0 [ 397.057367][ T34] n_tty_receive_buf2+0x4c/0x60 [ 397.062398][ T34] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 397.068126][ T34] tty_ldisc_receive_buf+0xc6/0x2c0 [ 397.073514][ T34] tty_port_default_receive_buf+0xd7/0x1a0 [ 397.079505][ T34] flush_to_ldisc+0x43e/0xe40 [ 397.084362][ T34] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 397.090955][ T34] ? __pfx_flush_to_ldisc+0x10/0x10 [ 397.096320][ T34] process_scheduled_works+0xb65/0x1e40 [ 397.102095][ T34] worker_thread+0xee4/0x1590 [ 397.106979][ T34] kthread+0x53a/0x5f0 [ 397.111222][ T34] ? __pfx_worker_thread+0x10/0x10 [ 397.116509][ T34] ? __pfx_kthread+0x10/0x10 [ 397.121268][ T34] ret_from_fork+0x20f/0x8d0 [ 397.126021][ T34] ? __switch_to+0x573/0x7a0 [ 397.130792][ T34] ? __pfx_kthread+0x10/0x10 [ 397.135562][ T34] ret_from_fork_asm+0x1a/0x30 [ 397.140525][ T34] [ 397.143838][ T34] Kernel Offset: disabled [ 397.148210][ T34] Rebooting in 86400 seconds..