last executing test programs: 4m20.407966937s ago: executing program 32 (id=20109): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4000) 3m42.059912333s ago: executing program 33 (id=20311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20008010) 2m19.83503015s ago: executing program 34 (id=21207): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0xffffffffffffff23}}, 0x1006) 2m18.35678671s ago: executing program 35 (id=21240): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000001c0)={0x2f01, 0x0}) 2m4.813519324s ago: executing program 36 (id=21458): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0xc, 0x1, 0x9, 0x25}) 1m33.27210439s ago: executing program 37 (id=21828): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0xf8, 0x20a2262d, 0x7e, 0xf, 0x81, "1012a2c2e0d99745e394509d287560250d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) 1m16.752814946s ago: executing program 38 (id=21915): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 1m16.245618889s ago: executing program 39 (id=21923): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$KDFONTOP_SET(r0, 0x4b6a, 0x0) 1m12.732842167s ago: executing program 40 (id=21918): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS2(r0, 0x80047456, &(0x7f0000000080)={0xf0f7, 0x8000, 0x6, 0xc, 0x80, "36c4c2c304c21df76f13d562143b4be86b60e4", 0x0, 0x7}) 1m12.584775237s ago: executing program 41 (id=21926): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 1m10.405496355s ago: executing program 42 (id=21957): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x8926, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 1m1.673918826s ago: executing program 43 (id=21994): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x21, 0x8, 0xfffd, 0x15, "3eccd25569e20900"}) 54.220858804s ago: executing program 44 (id=22005): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) writev(r0, &(0x7f0000000200)=[{&(0x7f0000001380)="f585", 0x2}], 0x1) 48.2728205s ago: executing program 45 (id=22051): sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x40000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4bfb, &(0x7f0000000000)) 43.706569032s ago: executing program 46 (id=22131): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000200)) 41.194970006s ago: executing program 47 (id=22170): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x81bc) 41.13463025s ago: executing program 48 (id=22171): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x0) 40.835400593s ago: executing program 49 (id=22172): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0x15) ioctl$TCFLSH(r0, 0x540b, 0x2) 37.006962342s ago: executing program 5 (id=22232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0xffff, 0xffff}, {0x1, 0x2}}}, 0x24}}, 0x4000010) 36.75264539s ago: executing program 5 (id=22233): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) 36.681468636s ago: executing program 5 (id=22234): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495303010000ffffffff67"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x6048010) 36.485280903s ago: executing program 5 (id=22235): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="6461783d6e657665722c63616368655f73747261746567793d64697361626c65642c63616368655f73747261746567793d7265616461686561642c6461782c757365725f78617474722c61636c2c0037ab5561a2b119f1c4cb2edfc57c7995dfc791fc094cc4cfd7411cd65d7bc50a4f64c8ab92f52470d4"], 0x3, 0x1cc, &(0x7f0000001f80)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x400030c) 36.349364102s ago: executing program 5 (id=22236): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) setxattr$incfs_metadata(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000480), 0x0, 0x0, 0x2) 36.258972317s ago: executing program 5 (id=22237): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) 31.297043695s ago: executing program 2 (id=22266): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1, 0x0, 0x0) 31.154656723s ago: executing program 2 (id=22267): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 31.048682659s ago: executing program 2 (id=22268): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x300}, 0x8) 30.913156296s ago: executing program 2 (id=22270): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 30.806130381s ago: executing program 9 (id=22272): r0 = socket$nl_rdma(0x10, 0x3, 0x14) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) 30.632267594s ago: executing program 9 (id=22274): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) 30.376779437s ago: executing program 9 (id=22277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006580340000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 30.193373559s ago: executing program 9 (id=22279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40080) 29.912121046s ago: executing program 50 (id=22202): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r0, 0x400455cb, 0x0) 29.905596792s ago: executing program 2 (id=22282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 29.905178186s ago: executing program 9 (id=22283): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000004900)={0x2020}, 0x2020) 29.456987483s ago: executing program 9 (id=22287): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) close(0x3) 29.323312196s ago: executing program 2 (id=22290): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 29.000960997s ago: executing program 6 (id=22295): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 28.854058682s ago: executing program 6 (id=22297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.72267326s ago: executing program 6 (id=22299): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2018}, 0x1}) 28.645272453s ago: executing program 6 (id=22300): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1], 0x1c}}, 0x4000000) 28.51823843s ago: executing program 6 (id=22301): timer_create(0x3, 0x0, &(0x7f0000002400)=0x0) timer_settime(r0, 0x1, &(0x7f0000002440)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_delete(r0) 28.464142534s ago: executing program 6 (id=22302): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x8910, 0x2) 20.173672279s ago: executing program 51 (id=22237): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) 16.74102606s ago: executing program 0 (id=22381): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x20, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 16.119424457s ago: executing program 0 (id=22386): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r0, &(0x7f0000000000)="41000200010001", 0x7) 16.001079285s ago: executing program 0 (id=22375): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000200), 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000180)=0x800) 15.911753566s ago: executing program 0 (id=22377): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1, 0x0, 0x0) 15.857453163s ago: executing program 0 (id=22378): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x2) 15.809108129s ago: executing program 4 (id=22380): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x87, 0x4}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) 15.731974947s ago: executing program 4 (id=22383): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000000)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa0e, &(0x7f00000000c0)="$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") read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) 15.65288304s ago: executing program 4 (id=22385): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15.452104127s ago: executing program 4 (id=22389): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_win95}, {@numtail}, {@rodir}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@numtail}, {@numtail}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 15.357208269s ago: executing program 4 (id=22391): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r0, 0x1000) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) 15.260655784s ago: executing program 4 (id=22393): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000180)={0x800009, 0x10006}) 14.889305513s ago: executing program 0 (id=22395): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0xc0384707, &(0x7f0000000140)={0xe0, 0x1, 0x1, 0xb, 0xa, "3ecc0000e200"}) 14.255876517s ago: executing program 7 (id=22397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x8000) 14.196772103s ago: executing program 7 (id=22398): syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x800, 0x3, 0x9, 0x2, 0xffff2d34, 0xddf, 0x6, 0x3, 0x7ffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10010007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xa, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xd9a, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0x8, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x8, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x3, 0x1c, 0x81, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.149685049s ago: executing program 7 (id=22399): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f00000008c0)=""/233, 0xe9) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 14.023816239s ago: executing program 7 (id=22400): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0xe) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, 0x0, 0x0, 0x6) 13.968549675s ago: executing program 7 (id=22401): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0xf3, 0x6, "0080ca6f"}, 0x6, 0x2, {0x0}}) 13.919782795s ago: executing program 7 (id=22402): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) 13.167804077s ago: executing program 52 (id=22290): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 13.124381931s ago: executing program 53 (id=22287): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) close(0x3) 12.117171102s ago: executing program 54 (id=22302): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x8910, 0x2) 4.221047496s ago: executing program 3 (id=22426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r1, 0x205, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}}, 0x0) 4.127064425s ago: executing program 3 (id=22428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0x14c, 0x16, 0x1, 0x3, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0xfffffffe, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x4}}, [@algo_auth={0x48, 0x1, {{'sha384-neon\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0x7}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001160000003200000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000ff0000000000000000000000000000000a"], 0xf8}}, 0x0) 4.07217979s ago: executing program 3 (id=22429): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x6}}, 0x18) 4.025670697s ago: executing program 3 (id=22430): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x6}) 3.979644352s ago: executing program 3 (id=22431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40040c0) 3.929633256s ago: executing program 3 (id=22432): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r0, 0x540a, 0x0) 2.285269227s ago: executing program 1 (id=22451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.179839776s ago: executing program 1 (id=22453): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x9) ioctl$sock_TIOCINQ(r0, 0x8905, 0x0) 2.07838619s ago: executing program 1 (id=22454): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) accept$alg(r0, 0x0, 0x0) 2.006242523s ago: executing program 1 (id=22456): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') 1.91473922s ago: executing program 1 (id=22457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfeff0000}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.800925291s ago: executing program 1 (id=22459): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 492.746662ms ago: executing program 8 (id=22475): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f00000000c0)={[{@errors_continue}, {@norecovery}, {}, {@order_relaxed}, {}, {}, {@nobarrier}, {@errors_continue}], [], 0x2c}, 0x3, 0xf02, &(0x7f0000001e40)="$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") read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2054) 377.797759ms ago: executing program 8 (id=22476): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fdatasync(r0) 260.955569ms ago: executing program 8 (id=22477): r0 = socket$kcm(0xa, 0x2, 0x0) setuid(0xee01) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 165.33423ms ago: executing program 8 (id=22478): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') lseek(r0, 0xbce0, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) 111.310369ms ago: executing program 8 (id=22479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 0s ago: executing program 8 (id=22480): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0}) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) kernel console output (not intermixed with test programs): 1568.956992][ T4667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.006171][ T4404] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1569.027704][ T4667] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1569.036389][ T4404] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 1569.056322][ T6238] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1569.073528][ T4404] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 1569.111208][ T4404] usb 5-1: string descriptor 0 read error: -22 [ 1569.121510][ T4404] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1569.133704][ T30] audit: type=1400 audit(1501.434:319): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18420 comm="syz.5.19496" [ 1569.152618][ T4404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.254636][ T4667] scsi host1: usb-storage 1-1:1.0 [ 1569.272185][ T6238] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1569.300462][ T6238] usb 2-1: config 1 has an invalid interface number: 48 but max is 1 [ 1569.324066][ T6238] usb 2-1: config 1 has no interface number 1 [ 1569.354268][ T6238] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1569.393678][ T6238] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1569.419764][ T6238] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1569.443134][ T6238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.467110][ T6238] usb 2-1: Product: syz [ 1569.485793][ T6238] usb 2-1: Manufacturer: syz [ 1569.496554][ T6238] usb 2-1: SerialNumber: syz [ 1569.511903][ T4403] usb 1-1: USB disconnect, device number 19 [ 1569.676527][ T4404] usb 5-1: low speed audio streaming not supported [ 1569.776451][ T6238] smsusb:smsusb_probe: board id=8, interface number 0 [ 1569.845740][ T6238] smsusb:smsusb_probe: board id=8, interface number 48 [ 1569.881143][ T4404] usb 5-1: USB disconnect, device number 22 [ 1569.901826][ T6238] usb 2-1: USB disconnect, device number 27 [ 1570.392964][T18510] random: crng reseeded on system resumption [ 1570.629564][T18515] bond8: entered allmulticast mode [ 1570.659695][T18515] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1571.146182][ T30] audit: type=1326 audit(1503.315:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.194402][ T6238] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1571.207428][ T30] audit: type=1326 audit(1503.315:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.272875][ T30] audit: type=1326 audit(1503.315:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.374504][ T30] audit: type=1326 audit(1503.315:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.419024][ T6238] usb 4-1: Using ep0 maxpacket: 16 [ 1571.444807][ T6238] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1571.454311][ T6238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.466242][T16113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1571.479978][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1571.496645][ T30] audit: type=1326 audit(1503.315:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.530779][ T6238] usb 4-1: Product: syz [ 1571.544603][ T6238] usb 4-1: Manufacturer: syz [ 1571.550706][ T6238] usb 4-1: SerialNumber: syz [ 1571.560432][ T6238] usb 4-1: config 0 descriptor?? [ 1571.566218][ T30] audit: type=1326 audit(1503.315:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.617384][ T30] audit: type=1326 audit(1503.315:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.622310][T18599] netlink: 388 bytes leftover after parsing attributes in process `syz.5.19535'. [ 1571.695854][ T30] audit: type=1326 audit(1503.315:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.724937][ T30] audit: type=1326 audit(1503.315:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.19527" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcc0019de59 code=0x7ffc0000 [ 1571.823388][ T6238] usb 4-1: ignoring: not an USB2CAN converter [ 1572.024623][T18619] loop2: detected capacity change from 0 to 256 [ 1572.048024][ T6238] usb 4-1: USB disconnect, device number 30 [ 1572.098813][T18619] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 1572.146745][T18619] FAT-fs (loop2): Filesystem has been set read-only [ 1572.150410][T18632] netlink: 'syz.1.19546': attribute type 2 has an invalid length. [ 1572.695528][ T6238] wlan0 speed is unknown, defaulting to 1000 [ 1572.752947][ T4404] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1572.870047][T18680] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 1572.927404][ T4404] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 1572.945195][ T4403] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1572.952949][ T4404] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1572.962820][ T4404] usb 6-1: Product: syz [ 1572.980161][ T4404] ftdi_sio 6-1:5.0: FTDI USB Serial Device converter detected [ 1572.989717][ T4404] usb 6-1: Detected FT4233HP [ 1573.086533][ T4388] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1573.129854][ T4403] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1573.142082][ T10] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 1573.149888][ T4403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1573.160592][T18701] xt_HMARK: proto mask must be zero with L3 mode [ 1573.165092][ T4403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1573.182029][ T4403] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1573.195148][ T4403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.207991][ T4404] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1573.215364][ T4403] usb 1-1: Product: syz [ 1573.220368][ T4403] usb 1-1: Manufacturer: syz [ 1573.225454][ T4404] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1573.234644][ T4403] usb 1-1: SerialNumber: syz [ 1573.243827][ T4404] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1573.255614][ T4403] usb 1-1: config 0 descriptor?? [ 1573.276600][ T4404] usb 6-1: USB disconnect, device number 38 [ 1573.277342][ T6238] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1573.301169][ T4388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1573.312055][ T4404] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1573.317622][ T4388] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1573.344875][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1573.346982][ T4388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1573.366855][ T4404] ftdi_sio 6-1:5.0: device disconnected [ 1573.375352][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.390567][ T4388] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1573.411288][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1573.418762][ T4388] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1573.442818][ T4388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.455617][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1573.461968][ T4388] usb 3-1: Product: syz [ 1573.466202][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1573.467952][ T4388] usb 3-1: Manufacturer: syz [ 1573.475986][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.500458][ T4388] usb 3-1: SerialNumber: syz [ 1573.511558][ T6238] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1573.528924][ T6238] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 1573.543389][ T6238] usb 5-1: config 189 has no interface number 0 [ 1573.554338][ T4388] usb 3-1: config 0 descriptor?? [ 1573.559503][ T6238] usb 5-1: config 189 interface 127 has no altsetting 0 [ 1573.573803][ T4388] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1573.595376][ T6238] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1573.625164][ T6238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.641981][ T6238] usb 5-1: Product: syz [ 1573.656618][ T6238] usb 5-1: Manufacturer: syz [ 1573.666421][ T6238] usb 5-1: SerialNumber: syz [ 1573.879049][ T4388] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1573.953717][ T6238] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1574.010907][ T6238] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1574.045472][ T10] usb 4-1: USB disconnect, device number 31 [ 1574.053001][ T6238] usbserial_generic 5-1:189.127: generic converter detected [ 1574.075898][ T6238] usb 5-1: generic converter now attached to ttyUSB0 [ 1574.117389][ T6238] usb 5-1: USB disconnect, device number 23 [ 1574.218649][ T6238] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1574.274723][ T6238] usbserial_generic 5-1:189.127: device disconnected [ 1574.283863][ T4388] usb 3-1: USB disconnect, device number 28 [ 1575.074602][T18794] wlan0 speed is unknown, defaulting to 1000 [ 1575.132814][T18794] xfrm0 speed is unknown, defaulting to 1000 [ 1575.163393][T18807] loop2: detected capacity change from 0 to 2048 [ 1575.176687][T18794] wlan0 speed is unknown, defaulting to 1000 [ 1575.216036][T18807] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1575.263453][T18807] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1575.305624][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19584'. [ 1575.323222][T18807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1575.751297][T18826] vivid-007: ================= START STATUS ================= [ 1575.786646][T18826] vivid-007: Enable Output Cropping: true [ 1575.841422][T18826] vivid-007: Enable Output Composing: true [ 1575.877911][T18826] vivid-007: Enable Output Scaler: true [ 1575.899753][T18826] vivid-007: Tx RGB Quantization Range: Automatic [ 1575.926027][T18826] vivid-007: Transmit Mode: HDMI [ 1575.949494][T18826] vivid-007: Hotplug Present: 0x00000000 [ 1575.974833][T18826] vivid-007: RxSense Present: 0x00000000 [ 1575.997226][T18826] vivid-007: EDID Present: 0x00000000 [ 1576.026573][T18826] vivid-007: ================== END STATUS ================== [ 1576.303624][T18844] gtp1: entered promiscuous mode [ 1576.329371][T18844] gtp1: entered allmulticast mode [ 1576.480724][T18854] netlink: 'syz.3.19600': attribute type 7 has an invalid length. [ 1576.521427][T18853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1576.569511][T18855] ip6gre1: entered promiscuous mode [ 1577.615493][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1577.628449][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1577.804453][T18933] bond3: entered allmulticast mode [ 1577.827743][T18933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1578.224333][T18984] netlink: 'syz.0.19623': attribute type 1 has an invalid length. [ 1578.280123][T18984] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19623'. [ 1579.103471][T19022] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1579.189957][T19025] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19640'. [ 1579.783374][T19045] netlink: 'syz.4.19649': attribute type 1 has an invalid length. [ 1579.818800][T19047] xt_policy: neither incoming nor outgoing policy selected [ 1579.994358][T19043] wlan0 speed is unknown, defaulting to 1000 [ 1580.022767][T19043] xfrm0 speed is unknown, defaulting to 1000 [ 1580.043650][T19043] wlan0 speed is unknown, defaulting to 1000 [ 1580.391011][T19069] netlink: 260 bytes leftover after parsing attributes in process `syz.0.19658'. [ 1580.688054][T19075] netlink: 'syz.2.19659': attribute type 9 has an invalid length. [ 1581.084364][T19077] bond5 (unregistering): Released all slaves [ 1581.528463][T19081] bond3: entered allmulticast mode [ 1581.566521][T19081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1581.582628][T19201] netlink: 'syz.0.19668': attribute type 21 has an invalid length. [ 1582.028176][T19229] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 1582.043155][T19227] sctp: [Deprecated]: syz.1.19673 (pid 19227) Use of int in max_burst socket option. [ 1582.043155][T19227] Use struct sctp_assoc_value instead [ 1583.028587][ T30] audit: type=1326 audit(1514.433:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.2.19684" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5869d9de59 code=0x7ffc0000 [ 1583.059336][T19283] netlink: 'syz.4.19685': attribute type 5 has an invalid length. [ 1583.092272][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1583.137239][ T30] audit: type=1326 audit(1514.433:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.2.19684" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5869d9de59 code=0x7ffc0000 [ 1583.277132][ T5285] veth0_macvtap: left promiscuous mode [ 1583.290466][ T30] audit: type=1326 audit(1514.480:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.2.19684" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5869d9de59 code=0x7ffc0000 [ 1583.412673][ T30] audit: type=1326 audit(1514.480:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.2.19684" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5869d9de59 code=0x7ffc0000 [ 1583.500095][ T30] audit: type=1326 audit(1514.480:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.2.19684" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5869d9de59 code=0x7ffc0000 [ 1583.770675][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1584.399101][T19332] netlink: 'syz.2.19700': attribute type 64 has an invalid length. [ 1584.447107][T19332] netlink: 9 bytes leftover after parsing attributes in process `syz.2.19700'. [ 1584.453597][ T4403] iguanair 1-1:0.0: failed to get version [ 1584.466362][ T4403] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 1584.495911][ T4403] usb 1-1: USB disconnect, device number 20 [ 1584.530777][T19327] bond4 (unregistering): Released all slaves [ 1585.132003][T19428] netlink: 'syz.5.19710': attribute type 1 has an invalid length. [ 1585.213890][T19428] netlink: 224 bytes leftover after parsing attributes in process `syz.5.19710'. [ 1585.607099][T19454] ubi8: attaching mtd1 [ 1585.623056][T19454] ubi8 error: ubi_attach_mtd_dev: bad VID header (131079) or data offsets (131143) [ 1585.954539][T19472] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1586.131318][ T4403] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1586.311404][ T4403] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1586.342740][ T4403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.380058][ T4403] usb 3-1: Product: syz [ 1586.395942][ T4403] usb 3-1: Manufacturer: syz [ 1586.413999][ T4403] usb 3-1: SerialNumber: syz [ 1586.440249][ T4403] usb 3-1: config 0 descriptor?? [ 1586.468493][ T4403] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1586.563579][T19501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19753'. [ 1586.905971][ T4403] sonixb 3-1:0.0: Error writing register 01: -71 [ 1586.931655][ T4403] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 1586.960755][ T4403] usb 3-1: USB disconnect, device number 29 [ 1588.544381][T19588] bond9: entered promiscuous mode [ 1588.770826][ T4403] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1588.972722][ T4403] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1589.019592][ T4403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.046198][ T4403] usb 1-1: Product: syz [ 1589.065285][ T4403] usb 1-1: Manufacturer: syz [ 1589.089501][ T4403] usb 1-1: SerialNumber: syz [ 1589.115018][ T4403] usb 1-1: config 0 descriptor?? [ 1589.138494][ T4403] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 021 [ 1589.240954][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1589.388897][T19661] netlink: 'syz.5.19790': attribute type 10 has an invalid length. [ 1589.409064][T19661] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1589.575566][ T4403] (null): failure reading functionality [ 1589.606488][ T4403] i2c i2c-1: failure reading functionality [ 1589.630013][ T4403] i2c i2c-1: connected i2c-tiny-usb device [ 1589.664388][ T4403] usb 1-1: USB disconnect, device number 21 [ 1590.450070][T19708] Bluetooth: MGMT ver 1.23 [ 1591.131051][T19735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19818'. [ 1591.346723][T19736] bond4: entered promiscuous mode [ 1591.873525][T19795] loop2: detected capacity change from 0 to 1024 [ 1592.232754][ T4388] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1592.397938][T19817] wlan0 speed is unknown, defaulting to 1000 [ 1592.411259][T19817] xfrm0 speed is unknown, defaulting to 1000 [ 1592.419297][ T4388] usb 5-1: Using ep0 maxpacket: 16 [ 1592.428107][T19817] wlan0 speed is unknown, defaulting to 1000 [ 1592.438541][ T4388] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1592.458842][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1592.485581][ T4388] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1592.502431][ T4388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.539718][ T4388] usb 5-1: Product: syz [ 1592.552400][ T4388] usb 5-1: Manufacturer: syz [ 1592.567497][ T4388] usb 5-1: SerialNumber: syz [ 1592.591507][ T4388] usb 5-1: config 0 descriptor?? [ 1592.642187][ T4388] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input145 [ 1592.676794][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.684188][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.691513][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.698866][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.706986][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.714362][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.721703][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.729023][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.737172][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.744500][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.752084][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.759418][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.767818][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.778706][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.786114][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.793950][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.804021][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.811352][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.818676][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.826023][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.834147][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.841474][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.848797][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.856127][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.873611][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.882154][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.889583][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.896920][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.904249][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.912323][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.919690][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.927025][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.934386][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.942377][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.953255][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.960606][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.967942][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.975991][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.983326][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.990657][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1592.998001][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.006275][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.013628][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.020946][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.028286][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.036355][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.043758][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.044690][ T4975] usb 5-1: control msg error: -71 [ 1593.051107][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.063245][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.071312][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.078650][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.085967][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.093312][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.101418][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.108738][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.116060][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1593.123240][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1593.192165][ T4388] usb 5-1: USB disconnect, device number 24 [ 1594.423833][T19926] program syz.4.19857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1595.396355][T16113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1595.993369][T19979] netlink: 'syz.0.19877': attribute type 1 has an invalid length. [ 1596.025166][T19979] netlink: 240 bytes leftover after parsing attributes in process `syz.0.19877'. [ 1596.057944][T19979] netlink: 'syz.0.19877': attribute type 1 has an invalid length. [ 1596.545668][T20003] netlink: 'syz.4.19887': attribute type 11 has an invalid length. [ 1597.765987][T20064] netlink: 'syz.0.19913': attribute type 1 has an invalid length. [ 1599.007062][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1599.028906][T23441] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1599.191728][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.215232][T23441] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1599.217984][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.247454][T23441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.255724][ T10] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1599.277598][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.283470][T23441] usb 3-1: config 0 descriptor?? [ 1599.317113][T23441] cp210x 3-1:0.0: cp210x converter detected [ 1599.321647][ T10] usb 4-1: config 0 descriptor?? [ 1599.608588][ T4388] kernel read not supported for file /vga_arbiter (pid: 4388 comm: kworker/1:6) [ 1599.818113][T20143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1599.818693][ T10] hkems 0003:2006:0118.0002: item fetching failed at offset 5/7 [ 1599.833253][T23441] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1599.910190][ T10] hkems 0003:2006:0118.0002: parse failed [ 1599.922950][ T10] hkems 0003:2006:0118.0002: probe with driver hkems failed with error -22 [ 1599.932932][T20159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19944'. [ 1599.984413][T20159] netlink: 'syz.4.19944': attribute type 1 has an invalid length. [ 1600.034439][T20159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19944'. [ 1600.038890][T23441] usb 3-1: USB disconnect, device number 30 [ 1600.086309][T23441] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1600.136799][ T10] usb 4-1: USB disconnect, device number 32 [ 1600.281278][T23441] cp210x 3-1:0.0: device disconnected [ 1601.186937][ T4388] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1601.345362][T20242] tmpfs: Cannot change global quota limit on remount [ 1601.373589][ T4388] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1601.408019][ T4388] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1601.451856][ T4388] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1601.476143][ T4388] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1601.489062][ T4388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.504402][ T4388] usb 6-1: Product: syz [ 1601.517031][ T4388] usb 6-1: Manufacturer: syz [ 1601.530422][ T4388] usb 6-1: SerialNumber: syz [ 1601.550775][T31646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1601.563691][ T4388] hub 6-1:1.0: bad descriptor, ignoring hub [ 1601.581271][ T4388] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1601.652857][T20256] loop2: detected capacity change from 0 to 128 [ 1601.665740][T20256] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1601.726208][T20256] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1601.791924][ T4388] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1601.975945][ T5992] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1602.052355][T23441] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1602.199706][T20285] loop2: detected capacity change from 0 to 2048 [ 1602.225750][T20285] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1602.241955][ T10] usb 6-1: USB disconnect, device number 39 [ 1602.249573][T20285] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1602.259246][T23441] usb 2-1: Using ep0 maxpacket: 8 [ 1602.259406][T20293] netlink: 'syz.0.19980': attribute type 4 has an invalid length. [ 1602.274145][T20293] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19980'. [ 1602.295227][T23441] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1602.306603][T20285] UDF-fs: Scanning with blocksize 512 failed [ 1602.310657][ T10] usblp0: removed [ 1602.326962][T23441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.365991][T23441] usb 2-1: Product: syz [ 1602.374516][T20285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1602.384544][T23441] usb 2-1: Manufacturer: syz [ 1602.401743][T23441] usb 2-1: SerialNumber: syz [ 1602.435073][T23441] usb 2-1: config 0 descriptor?? [ 1602.464821][T23441] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1602.584991][T20306] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1602.931851][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19987'. [ 1603.118065][T23441] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1603.129557][ T6238] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1603.165439][T23441] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1603.189840][T23441] usb 2-1: USB disconnect, device number 28 [ 1603.346823][ T6238] usb 4-1: Using ep0 maxpacket: 8 [ 1603.375669][ T6238] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1603.391504][ T6238] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1603.405735][ T6238] usb 4-1: config 0 has no interface number 0 [ 1603.412913][ T6238] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1603.437761][ T6238] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1603.463627][ T6238] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1603.488276][ T6238] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1603.502992][ T6238] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1603.517252][ T6238] usb 4-1: Product: syz [ 1603.528332][ T6238] usb 4-1: Manufacturer: syz [ 1603.552002][ T6238] usb 4-1: config 0 descriptor?? [ 1603.572356][T20317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1603.864514][T20369] netlink: 'syz.1.20002': attribute type 11 has an invalid length. [ 1604.278108][ T6238] usb 4-1: USB disconnect, device number 33 [ 1604.297257][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1604.414912][T23441] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1604.424514][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1604.516974][T20409] Bluetooth: MGMT ver 1.23 [ 1604.598342][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1604.599734][T23441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1604.610514][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.627942][T23441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1604.636298][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1604.643947][T23441] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1604.659014][T23441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.667170][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1604.688004][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1604.689300][T23441] usb 1-1: config 0 descriptor?? [ 1604.709601][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1604.735984][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1604.758865][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1604.774512][ T10] usb 3-1: Manufacturer: syz [ 1604.789512][ T10] usb 3-1: config 0 descriptor?? [ 1604.830550][ T4404] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1604.971502][T23441] usbhid 1-1:0.0: can't add hid device: -71 [ 1604.988410][T23441] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1604.997480][ T4404] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 1605.019294][T23441] usb 1-1: USB disconnect, device number 22 [ 1605.036064][ T4404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.054917][ T4403] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1605.063542][ T4404] usb 5-1: Product: syz [ 1605.088438][ T4404] usb 5-1: Manufacturer: syz [ 1605.105325][ T4404] usb 5-1: SerialNumber: syz [ 1605.172632][ T10] rc_core: IR keymap rc-hauppauge not found [ 1605.178847][ T10] Registered IR keymap rc-empty [ 1605.202262][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.236655][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.259025][ T4403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.292462][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1605.305670][ T4403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.326451][ T4403] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1605.346210][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input147 [ 1605.369948][ T4404] usb 5-1: found format II with max.bitrate = 2, frame size=4 [ 1605.377704][ T4403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.387609][ T4404] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1605.407991][ T4403] usb 2-1: config 0 descriptor?? [ 1605.414258][ T4404] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1605.422163][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.443462][ T4404] usb 5-1: unable to issue vendor read request (ret = -71) [ 1605.455648][ T4404] usb 5-1: unable to issue vendor read request (ret = -71) [ 1605.471792][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.481232][ T4404] usb 5-1: unable to issue vendor read request (ret = -71) [ 1605.492210][ T4404] usb 5-1: unable to issue vendor read request (ret = -71) [ 1605.503798][T23441] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1605.506566][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.559769][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.589214][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.621633][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.632438][ T4404] usb 5-1: USB disconnect, device number 25 [ 1605.644716][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.685431][T23441] usb 1-1: Using ep0 maxpacket: 16 [ 1605.696123][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.701023][T23441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.739713][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.742480][T23441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.788616][T23441] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 1605.792425][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1605.818889][T23441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.843481][T16971] udevd[16971]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.865165][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1605.876890][T23441] usb 1-1: config 0 descriptor?? [ 1605.884393][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1605.902951][ T4403] hid_parser_main: 7 callbacks suppressed [ 1605.902981][ T4403] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 1605.948080][ T4403] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 1605.961980][ T10] usb 3-1: USB disconnect, device number 31 [ 1606.138398][ T4403] konepure 0003:1E7D:2DBE.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 1606.144980][T23441] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1606.185649][ T4403] usb 2-1: USB disconnect, device number 29 [ 1606.187302][T23441] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 1606.220366][T20513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20029'. [ 1606.241095][T23441] usb 1-1: USB disconnect, device number 23 [ 1606.620024][T20514] fido_id[20514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1606.798307][ T4404] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1606.973273][ T4404] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1607.033172][ T4404] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.053961][ T4404] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1607.060711][ T4404] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1607.083824][ T4404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.580675][ T4404] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1607.602656][ T4404] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1607.625028][ T4404] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1607.641253][ T4404] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1607.654823][ T4404] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1607.695948][ T4404] elo 0003:04E7:0009.0004: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 1607.707679][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1607.877565][ T4667] usb 4-1: USB disconnect, device number 34 [ 1607.993625][T23441] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1608.180950][T23441] usb 6-1: Using ep0 maxpacket: 32 [ 1608.199323][T23441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1608.227765][T23441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1608.251943][T23441] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1608.298645][T23441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1608.323976][T23441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1608.338362][T23441] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1608.356926][T23441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.375590][T23441] usb 6-1: Product: syz [ 1608.382140][T23441] usb 6-1: Manufacturer: syz [ 1608.393186][T23441] usb 6-1: SerialNumber: syz [ 1608.405793][T23441] usb 6-1: config 0 descriptor?? [ 1608.431079][T23441] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input149 [ 1608.519831][T20638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1608.784984][T23441] usb 6-1: USB disconnect, device number 40 [ 1609.757655][T20708] loop2: detected capacity change from 0 to 1024 [ 1609.773842][T20708] EXT4-fs: Ignoring removed orlov option [ 1609.868741][T20708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.132696][ T5992] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /3246/file1: bad entry in directory: inode out of bounds - offset=12, inode=8454146, rec_len=12, size=1024 fake=1 [ 1610.370798][T20736] netlink: 'syz.4.20095': attribute type 1 has an invalid length. [ 1610.392670][T20736] netlink: 244 bytes leftover after parsing attributes in process `syz.4.20095'. [ 1610.442211][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1611.194614][T20761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20103'. [ 1611.273395][ T5992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.783033][ T6000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1612.803144][ T6000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1612.813989][ T6000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1612.831963][ T6000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1612.841495][ T6000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1613.010400][T32724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1613.021161][T32724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1613.031984][T32724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1613.041921][T32724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1613.050703][T32724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1613.923981][T31652] dvmrp1: left allmulticast mode [ 1614.347148][ T4667] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1614.516875][T20939] tmpfs: Too few inodes for current use [ 1614.524670][ T4667] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1614.546898][ T4667] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.567806][ T4667] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1614.581757][ T4667] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1614.593894][ T4667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.936562][T31652] bond0 (unregistering): Released all slaves [ 1614.954756][T31652] bond1 (unregistering): Released all slaves [ 1614.979800][T31652] bond2 (unregistering): Released all slaves [ 1615.011552][T31652] bond3 (unregistering): Released all slaves [ 1615.038207][T31652] bond4 (unregistering): Released all slaves [ 1615.060448][ T4667] elo 0003:04E7:0009.0005: unknown main item tag 0x0 [ 1615.061908][T31652] bond5 (unregistering): Released all slaves [ 1615.078927][ T4667] elo 0003:04E7:0009.0005: unknown main item tag 0x0 [ 1615.096977][ T4667] elo 0003:04E7:0009.0005: unknown main item tag 0x0 [ 1615.103457][T31652] bond6 (unregistering): Released all slaves [ 1615.114213][ T4667] elo 0003:04E7:0009.0005: unknown main item tag 0x0 [ 1615.128255][T31652] bond7 (unregistering): Released all slaves [ 1615.128558][ T4667] elo 0003:04E7:0009.0005: unknown main item tag 0x0 [ 1615.171552][ T4667] elo 0003:04E7:0009.0005: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0 [ 1615.173363][T31652] bond8 (unregistering): Released all slaves [ 1615.232111][T31652] bond9 (unregistering): Released all slaves [ 1615.313209][T32724] Bluetooth: hci2: command tx timeout [ 1615.317936][ T4667] usb 6-1: USB disconnect, device number 41 [ 1615.550758][T31652] : left promiscuous mode [ 1616.049558][T20978] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1616.251540][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20140'. [ 1616.296305][T20981] netlink: 64 bytes leftover after parsing attributes in process `syz.5.20140'. [ 1616.329676][T20981] tipc: Failed to obtain node identity [ 1616.342404][T20981] tipc: Enabling of bearer rejected, failed to enable media [ 1616.484012][T20811] wlan0 speed is unknown, defaulting to 1000 [ 1616.601115][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1616.893169][T21001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20147'. [ 1616.963135][T21001] nbd: illegal input index 67111936 [ 1617.072998][T20811] xfrm0 speed is unknown, defaulting to 1000 [ 1617.105531][T20811] wlan0 speed is unknown, defaulting to 1000 [ 1617.536957][T32724] Bluetooth: hci2: command tx timeout [ 1617.656140][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1617.824739][T23441] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1617.975680][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1618.029913][T23441] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1618.067406][T23441] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.097616][T23441] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1618.119381][T23441] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1618.155757][T23441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.476099][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20166'. [ 1618.749505][T23441] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1618.771442][T23441] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1618.787177][T23441] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1618.808158][T23441] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1618.827439][T23441] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1618.879463][T23441] elo 0003:04E7:0009.0006: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 1619.131642][ T10] usb 2-1: USB disconnect, device number 30 [ 1619.526850][T23441] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1619.736715][T23441] usb 4-1: Using ep0 maxpacket: 32 [ 1619.749028][T23441] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.758158][T32724] Bluetooth: hci2: command tx timeout [ 1619.803297][T23441] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1619.846945][T23441] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1619.925186][T23441] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1619.948054][T23441] usb 4-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 1619.970274][T23441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.998378][T23441] usb 4-1: Product: syz [ 1620.007634][T23441] usb 4-1: Manufacturer: syz [ 1620.012672][T23441] usb 4-1: SerialNumber: syz [ 1620.033181][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1620.044479][T23441] usb 4-1: config 0 descriptor?? [ 1620.068829][T23441] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1620.223939][T21194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1620.240782][T21194] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1620.285958][T23441] usb 4-1: USB disconnect, device number 35 [ 1620.426258][T21194] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1620.904014][T20811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.918370][T20811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.925978][T20811] bridge_slave_0: entered allmulticast mode [ 1620.974252][T20811] bridge_slave_0: entered promiscuous mode [ 1621.007394][T20811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.036186][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.069076][T20811] bridge_slave_1: entered allmulticast mode [ 1621.106849][T20811] bridge_slave_1: entered promiscuous mode [ 1621.430604][T20811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1621.601646][T31652] hsr_slave_0: left promiscuous mode [ 1621.652657][T31652] hsr_slave_1: left promiscuous mode [ 1622.408227][T32724] Bluetooth: hci2: command 0x0c1a tx timeout [ 1622.755251][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1623.277482][T21354] Invalid ELF header len 1 [ 1624.120727][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1624.630681][T32724] Bluetooth: hci2: command 0x0c1a tx timeout [ 1625.680713][T20811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.712926][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1625.766008][T21422] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1625.910252][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20228'. [ 1625.961795][T20811] team0: Port device team_slave_0 added [ 1626.098252][T21436] vlan2: entered promiscuous mode [ 1626.103514][T21436] gretap0: entered promiscuous mode [ 1626.215733][T20811] team0: Port device team_slave_1 added [ 1626.233479][T23441] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1626.298753][T20811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.324896][T20811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.365120][T20811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.389834][T20811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.397679][T20811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.449272][T20811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.459991][T23441] usb 6-1: Using ep0 maxpacket: 16 [ 1626.471487][T23441] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1626.491753][T23441] usb 6-1: config 0 has no interface number 0 [ 1626.498010][T23441] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1626.523318][T23441] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1626.546840][T23441] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1626.567121][T23441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.587786][T23441] usb 6-1: Product: syz [ 1626.588953][T20811] hsr_slave_0: entered promiscuous mode [ 1626.596859][T23441] usb 6-1: Manufacturer: syz [ 1626.601759][T20811] hsr_slave_1: entered promiscuous mode [ 1626.608067][T23441] usb 6-1: SerialNumber: syz [ 1626.609523][T20811] debugfs: 'hsr0' already exists in 'hsr' [ 1626.620226][T20811] Cannot create hsr debugfs directory [ 1626.627646][T23441] usb 6-1: config 0 descriptor?? [ 1626.643737][T21440] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1626.651627][T21440] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1626.854212][T32724] Bluetooth: hci2: command 0x0c1a tx timeout [ 1626.919495][T21440] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1626.937708][T21440] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1627.380055][T23441] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1627.405922][T23441] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1627.418515][T20811] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1627.439383][T23441] asix 6-1:0.34: probe with driver asix failed with error -71 [ 1627.467165][T23441] usb 6-1: USB disconnect, device number 42 [ 1627.499104][T20811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1627.528825][T20811] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1627.567333][T20811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1627.577110][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1627.587368][T20811] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1627.640582][T20811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1627.650952][T20811] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1627.702838][T20811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1627.829069][T20811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.860622][T20811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.876734][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.884878][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.903352][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.910522][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.221372][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1628.631152][T20811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.056816][T20811] veth0_vlan: entered promiscuous mode [ 1629.071542][T20811] veth1_vlan: entered promiscuous mode [ 1629.125326][T20811] veth0_macvtap: entered promiscuous mode [ 1629.136864][T20811] veth1_macvtap: entered promiscuous mode [ 1629.168102][T20811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.189816][T20811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.210552][T31656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.232768][T31656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.283792][T31656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.301271][T31656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.478220][T31652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.506579][T31652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.571806][T31656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.580101][T31656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.873847][T21686] IPVS: ip_vs_add_dest(): server weight less than zero [ 1630.257692][T21705] macsec1: entered promiscuous mode [ 1630.273754][T31646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1630.288534][T21705] virt_wifi0: entered promiscuous mode [ 1631.096974][T21747] syz.5.20255 (21747) used obsolete PPPIOCDETACH ioctl [ 1631.947149][T21790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20273'. [ 1632.161928][ T4667] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1632.339325][ T5356] kworker/1:3 (5356) used greatest stack depth: 15224 bytes left [ 1632.362296][ T4667] usb 7-1: Using ep0 maxpacket: 32 [ 1632.386540][ T4667] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1632.398731][ T4667] usb 7-1: config 0 has no interface number 0 [ 1632.412395][ T4667] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1632.434891][ T4667] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1632.451369][ T4667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.472703][ T4667] usb 7-1: Product: syz [ 1632.487561][ T4667] usb 7-1: Manufacturer: syz [ 1632.499276][ T4667] usb 7-1: SerialNumber: syz [ 1632.527920][ T4667] usb 7-1: config 0 descriptor?? [ 1633.028839][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20290'. [ 1633.216568][ T4667] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1633.240267][T21847] openvswitch: netlink: Unknown nsh attribute 0 [ 1633.242360][ T4667] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1633.266837][ T4667] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1633.278922][ T4667] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1633.293860][ T4667] usb 7-1: USB disconnect, device number 2 [ 1633.393046][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1633.564871][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1633.573697][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.596853][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1633.616903][ T10] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1633.650492][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1633.666698][ T10] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 1633.679824][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.693328][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1633.728567][ T10] usb 2-1: config 0 descriptor?? [ 1634.232572][ T10] acrux 0003:1A34:F705.0007: item fetching failed at offset 1/40 [ 1634.263759][ T10] acrux 0003:1A34:F705.0007: parse failed [ 1634.279802][T21898] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20312'. [ 1634.288949][ T10] acrux 0003:1A34:F705.0007: probe with driver acrux failed with error -22 [ 1634.482942][ T10] usb 2-1: USB disconnect, device number 31 [ 1635.211677][T21927] tipc: Started in network mode [ 1635.229247][T21927] tipc: Node identity ac14140f, cluster identity 4711 [ 1635.258533][T21927] tipc: New replicast peer: 255.255.255.255 [ 1635.283903][T21927] tipc: Enabled bearer , priority 10 [ 1635.536037][T21941] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20323'. [ 1635.619313][T21941] vlan2: entered promiscuous mode [ 1635.643605][T21941] gretap0: entered promiscuous mode [ 1635.661499][T21946] [U]  [ 1636.427766][T31650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1636.474278][ T6096] tipc: Node number set to 2886997007 [ 1636.680022][T21981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1636.955882][ T30] audit: type=1326 audit(1564.909:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.4.20340" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04dbd9de59 code=0x0 [ 1637.584680][T22018] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1637.591243][T22018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1637.634362][T22018] vhci_hcd vhci_hcd.0: Device attached [ 1637.675265][T22022] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 1637.681827][T22022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1637.731310][T22022] vhci_hcd vhci_hcd.0: Device attached [ 1637.754183][T22018] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 1637.760724][T22018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1637.775485][T22018] vhci_hcd vhci_hcd.0: Device attached [ 1637.792501][T22029] vhci_hcd: connection closed [ 1637.792855][T31646] vhci_hcd vhci_hcd.3: stop threads [ 1637.821361][T22024] vhci_hcd: connection closed [ 1637.836553][T22019] vhci_hcd: connection closed [ 1637.851980][T31646] vhci_hcd vhci_hcd.3: release socket [ 1637.874195][T31646] vhci_hcd vhci_hcd.3: disconnect device [ 1637.891636][T31646] vhci_hcd vhci_hcd.3: stop threads [ 1637.905471][ T4667] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1637.912981][T31646] vhci_hcd vhci_hcd.3: release socket [ 1637.923805][T22020] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1637.925542][T31646] vhci_hcd vhci_hcd.3: disconnect device [ 1637.978086][T31646] vhci_hcd vhci_hcd.3: stop threads [ 1637.998120][T31646] vhci_hcd vhci_hcd.3: release socket [ 1638.015420][T31646] vhci_hcd vhci_hcd.3: disconnect device [ 1638.603057][T22055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20363'. [ 1638.846668][T22060] openvswitch: netlink: Unknown nsh attribute 0 [ 1639.828085][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1639.912528][T22086] netlink: 'syz.4.20376': attribute type 4 has an invalid length. [ 1639.946294][T22086] netlink: 17 bytes leftover after parsing attributes in process `syz.4.20376'. [ 1639.975441][T22088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20377'. [ 1640.680011][T22113] tipc: Enabling of bearer rejected, failed to enable media [ 1640.799698][ T6096] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1640.979505][ T6096] usb 5-1: Using ep0 maxpacket: 16 [ 1641.004861][ T6096] usb 5-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 1641.049188][ T6096] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.098900][T22123] loop6: detected capacity change from 0 to 1024 [ 1641.100008][ T6096] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.140649][T22123] EXT4-fs: Ignoring removed i_version option [ 1641.147252][ T6096] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1641.198573][T22123] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1641.228973][ T6096] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1641.252476][ T6096] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1641.285549][ T6096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.286173][T22123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1641.311609][ T6096] usb 5-1: config 0 descriptor?? [ 1641.493644][T20811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.966237][T22146] loop6: detected capacity change from 0 to 1024 [ 1642.096015][ T4404] usb 5-1: USB disconnect, device number 26 [ 1642.371561][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20395'. [ 1642.540253][T31646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1642.887474][T22194] netlink: 'syz.4.20404': attribute type 1 has an invalid length. [ 1642.899769][T22193] loop6: detected capacity change from 0 to 256 [ 1642.924921][T22194] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.20404'. [ 1643.032210][T22193] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1643.168256][ T30] audit: type=1800 audit(1570.766:335): pid=22193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.20403" name="file1" dev="loop6" ino=1048789 res=0 errno=0 [ 1643.397944][ T4667] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1643.726749][ T6238] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1643.908764][ T6238] usb 5-1: Using ep0 maxpacket: 16 [ 1643.937520][ T6238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.971772][ T6238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.009256][ T6238] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1644.038053][ T6238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.075406][ T6238] usb 5-1: config 0 descriptor?? [ 1644.433679][T22257] Invalid source name [ 1644.470892][T22259] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20425'. [ 1644.547125][ T6238] hid-multitouch 0003:1FD2:6007.0009: reserved main item tag 0xe [ 1644.601207][ T6238] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 1644.776829][ T6238] usb 5-1: USB disconnect, device number 27 [ 1644.837079][T22265] fido_id[22265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1645.256213][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1645.889706][ T6238] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1646.082158][ T6238] usb 2-1: Using ep0 maxpacket: 8 [ 1646.108315][ T6238] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1646.156645][ T6238] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1646.189198][ T6238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1646.208209][ T6238] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1646.241149][ T6238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.277366][ T6238] usb 2-1: config 0 descriptor?? [ 1646.757192][ T6238] asus 0003:0B05:17E0.000A: unknown main item tag 0x0 [ 1646.792014][ T6238] asus 0003:0B05:17E0.000A: unknown main item tag 0x0 [ 1646.811209][ T6238] asus 0003:0B05:17E0.000A: unknown main item tag 0x0 [ 1646.835361][ T6238] asus 0003:0B05:17E0.000A: unknown main item tag 0x0 [ 1646.854609][ T6238] asus 0003:0B05:17E0.000A: unknown main item tag 0x0 [ 1646.874395][ T6238] asus 0003:0B05:17E0.000A: unknown main item tag 0x0 [ 1646.883103][ T6238] asus 0003:0B05:17E0.000A: unknown main item tag 0x0 [ 1646.911359][ T6238] asus 0003:0B05:17E0.000A: unknown main item tag 0x0 [ 1646.959129][ T6238] asus 0003:0B05:17E0.000A: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.1-1/input0 [ 1647.017866][ T6238] usb 2-1: USB disconnect, device number 32 [ 1647.274295][T22355] fido_id[22355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1648.457045][T23441] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 1648.633712][T23441] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1648.659621][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1648.686814][T23441] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1648.713473][T23441] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1648.748069][T23441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.777343][T23441] usb 2-1: config 0 descriptor?? [ 1648.965345][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20458'. [ 1649.199759][ T4404] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1649.273237][T23441] pyra 0003:1E7D:2C24.000B: unexpected long global item [ 1649.308289][T23441] pyra 0003:1E7D:2C24.000B: parse failed [ 1649.323555][T23441] pyra 0003:1E7D:2C24.000B: probe with driver pyra failed with error -22 [ 1649.383647][ T4404] usb 4-1: Using ep0 maxpacket: 16 [ 1649.404707][ T4404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.451011][ T4404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.491560][ T4404] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1649.507326][T23441] usb 2-1: USB disconnect, device number 33 [ 1649.549637][ T4404] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1649.588187][ T4404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.635320][ T4404] usb 4-1: config 0 descriptor?? [ 1650.128702][ T4404] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 1650.176776][ T4404] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 1650.364701][ T4404] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1650.411247][T22457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20461'. [ 1650.432397][ T4404] microsoft 0003:045E:07DA.000C: no inputs found [ 1650.449470][ T4404] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 1650.500258][ T4404] usb 4-1: USB disconnect, device number 36 [ 1650.525128][T22457] vlan2: entered promiscuous mode [ 1650.571230][T22457] gretap0: entered promiscuous mode [ 1650.680902][T22460] fido_id[22460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1650.953805][ T6000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1650.976607][ T6000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1650.984974][ T6000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1650.993794][ T6000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1651.001480][ T6000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1651.037920][T22481] loop6: detected capacity change from 0 to 4096 [ 1651.126639][T22481] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 1651.308367][T22481] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1651.374095][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1652.287713][T22506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1652.314139][T22506] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1652.338031][T22506] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1652.489668][T22506] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1653.135520][T22482] wlan0 speed is unknown, defaulting to 1000 [ 1653.172238][T22482] xfrm0 speed is unknown, defaulting to 1000 [ 1653.189622][T22482] wlan0 speed is unknown, defaulting to 1000 [ 1653.838222][T32724] Bluetooth: hci2: command 0x0c1a tx timeout [ 1653.976055][ T4404] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1654.089228][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1654.174572][ T4404] usb 5-1: Using ep0 maxpacket: 8 [ 1654.188562][ T6238] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1654.193260][ T4404] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1654.227151][ T4404] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1654.265498][ T4404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.273670][T31646] pimreg: left allmulticast mode [ 1654.339316][ T4404] usb 5-1: Product: syz [ 1654.364348][ T4404] usb 5-1: Manufacturer: syz [ 1654.382153][ T6238] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1654.388810][ T4404] usb 5-1: SerialNumber: syz [ 1654.416928][ T6238] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1654.446533][ T4404] usb 5-1: config 0 descriptor?? [ 1654.465586][ T6238] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.491216][ T4404] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1654.495055][ T6238] usb 4-1: config 220 has no interface number 2 [ 1654.507139][T32724] Bluetooth: hci6: command 0x041b tx timeout [ 1654.525578][ T4404] usb 5-1: setting power ON [ 1654.546126][ T4404] dvb-usb: bulk message failed: -22 (2/0) [ 1654.555395][ T6238] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 1654.565615][ T6238] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1654.579130][ T6238] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1654.590084][ T6238] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1654.599164][ T6238] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1654.610005][ T6238] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1654.621076][ T4404] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1654.653622][ T6238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.665745][ T4404] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1654.701505][ T6238] usb 4-1: Product: syz [ 1654.714861][ T4404] usb 5-1: media controller created [ 1654.718299][ T6238] usb 4-1: Manufacturer: syz [ 1654.723746][T22582] dvb-usb: bulk message failed: -22 (3/0) [ 1654.741453][ T6238] usb 4-1: SerialNumber: syz [ 1654.778320][T22582] cxusb: i2c rd: len=118 is too big! [ 1654.778320][T22582] [ 1654.833621][ T4404] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1654.939581][ T4404] usb 5-1: selecting invalid altsetting 6 [ 1654.966679][ T4404] usb 5-1: digital interface selection failed (-22) [ 1654.990046][ T4404] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1655.038730][ T6238] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1655.044662][ T4404] usb 5-1: setting power OFF [ 1655.054066][ T6238] uvcvideo 4-1:220.0: No valid video chain found. [ 1655.068941][ T4404] dvb-usb: bulk message failed: -22 (2/0) [ 1655.069591][ T6238] usb 4-1: selecting invalid altsetting 0 [ 1655.108328][ T4404] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1655.135683][ T4404] (NULL device *): no alternate interface [ 1655.149661][ T6238] usb 4-1: selecting invalid altsetting 0 [ 1655.188676][ T6238] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1655.211179][ T6238] usb 4-1: USB disconnect, device number 37 [ 1655.279153][ T4404] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1655.318371][ T4404] usb 5-1: USB disconnect, device number 28 [ 1656.036880][T31646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1656.078338][T23441] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1656.099899][ T6238] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1656.110855][T31646] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 1656.154259][T31646] bond0 (unregistering): Released all slaves [ 1656.171837][T31646] bond1 (unregistering): Released all slaves [ 1656.192549][T31646] bond2 (unregistering): Released all slaves [ 1656.213904][T31646] bond3 (unregistering): Released all slaves [ 1656.238003][T23441] usb 4-1: Using ep0 maxpacket: 16 [ 1656.253121][T23441] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1656.266671][ T6238] usb 7-1: Using ep0 maxpacket: 32 [ 1656.273349][T23441] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1656.283560][T23441] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1656.293599][T23441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.302801][ T6238] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1656.319959][ T6238] usb 7-1: config 0 has no interface number 0 [ 1656.331689][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1656.339974][T23441] usb 4-1: config 0 descriptor?? [ 1656.356760][ T6238] usb 7-1: too many endpoints for config 0 interface 52 altsetting 10: 254, using maximum allowed: 30 [ 1656.389454][ T6238] usb 7-1: config 0 interface 52 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.420582][ T6238] usb 7-1: config 0 interface 52 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.436959][ T6238] usb 7-1: config 0 interface 52 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1656.451906][ T6238] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1656.458709][ T6238] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1656.469821][ T6238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.508292][ T6238] usb 7-1: config 0 descriptor?? [ 1656.550195][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20516'. [ 1656.562809][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20516'. [ 1656.718500][T32724] Bluetooth: hci6: command 0x041b tx timeout [ 1656.839935][T23441] bigben 0003:146B:0902.000D: unexpected rdesc, please submit for review [ 1656.869590][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20517'. [ 1656.879847][T23441] bigben 0003:146B:0902.000D: unknown main item tag 0x3 [ 1656.898373][T23441] bigben 0003:146B:0902.000D: unknown main item tag 0x3 [ 1656.912435][T23441] bigben 0003:146B:0902.000D: unexpected long global item [ 1656.932657][T23441] bigben 0003:146B:0902.000D: parse failed [ 1656.949330][T23441] bigben 0003:146B:0902.000D: probe with driver bigben failed with error -22 [ 1657.005821][ T6238] uclogic 0003:5543:0522.000E: unknown main item tag 0x2 [ 1657.033291][ T6238] uclogic 0003:5543:0522.000E: unknown main item tag 0x2 [ 1657.101705][ T6238] uclogic 0003:5543:0522.000E: hidraw0: USB HID v0.05 Device [HID 5543:0522] on usb-dummy_hcd.6-1/input52 [ 1657.155087][ T4404] usb 4-1: USB disconnect, device number 38 [ 1657.339189][ T6238] usb 7-1: USB disconnect, device number 3 [ 1657.396412][T22751] fido_id[22751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1657.483513][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1657.581387][T22796] tipc: Enabling of bearer rejected, failed to enable media [ 1658.769575][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1658.797548][T22482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.810266][T22482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.830831][T22482] bridge_slave_0: entered allmulticast mode [ 1658.857457][T22482] bridge_slave_0: entered promiscuous mode [ 1658.926851][T32724] Bluetooth: hci6: command 0x041b tx timeout [ 1658.994821][T22482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.027263][T22482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.046159][T22482] bridge_slave_1: entered allmulticast mode [ 1659.071194][T22482] bridge_slave_1: entered promiscuous mode [ 1659.316947][T22482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.400194][T22482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.671623][T22482] team0: Port device team_slave_0 added [ 1659.736709][T22963] loop6: detected capacity change from 0 to 128 [ 1659.751181][T22482] team0: Port device team_slave_1 added [ 1659.762388][T22963] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1659.793697][T22963] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1660.032938][T31656] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1660.108685][T31646] hsr_slave_0: left promiscuous mode [ 1660.146665][T31646] hsr_slave_1: left promiscuous mode [ 1660.152791][T31646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.178901][T31646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.200987][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1661.029343][T22482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.036344][T22482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.065608][T22482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.078800][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1661.087916][T22482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.094987][T22482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.123005][T22482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.134196][T32724] Bluetooth: hci6: command 0x041b tx timeout [ 1661.221688][T22482] hsr_slave_0: entered promiscuous mode [ 1661.228566][T22482] hsr_slave_1: entered promiscuous mode [ 1661.235224][T22482] debugfs: 'hsr0' already exists in 'hsr' [ 1661.244875][T22482] Cannot create hsr debugfs directory [ 1661.703589][T22482] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1661.759965][T22482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1661.770297][T22482] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1661.799799][T22482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1661.817249][T22482] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1661.852292][T22482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1661.862519][T22482] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1661.909087][T22482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1662.018027][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1662.088646][T22482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.197694][T22482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.211947][T31646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.219135][T31646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.235789][T31650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.242965][T31650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.317580][T22482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1662.890954][T22482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.275739][T22482] veth0_vlan: entered promiscuous mode [ 1663.289322][T22482] veth1_vlan: entered promiscuous mode [ 1663.332861][T22482] veth0_macvtap: entered promiscuous mode [ 1663.344389][T32724] Bluetooth: hci6: command 0x041b tx timeout [ 1663.358249][T22482] veth1_macvtap: entered promiscuous mode [ 1663.393647][T22482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1663.412013][T22482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.429816][T31656] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.441559][T31654] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.453340][T31654] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.472895][T31654] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.600921][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1663.761071][T31650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.782740][T31650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.840487][T31646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.849509][T31646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.207021][T23205] max out of range [ 1664.380682][T23209] netlink: 'syz.1.20547': attribute type 21 has an invalid length. [ 1664.397703][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1664.398820][T23209] IPv6: NLM_F_CREATE should be specified when creating new route [ 1664.460860][T23209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1664.468162][T23209] IPv6: NLM_F_CREATE should be set when creating new route [ 1664.475506][T23209] IPv6: NLM_F_CREATE should be set when creating new route [ 1664.475790][T23216] netlink: 'syz.1.20547': attribute type 21 has an invalid length. [ 1664.482763][T23209] IPv6: NLM_F_CREATE should be set when creating new route [ 1664.528265][T23216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1664.589152][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1664.601074][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.629830][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.670902][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1664.722803][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1664.751058][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1664.766017][T23217] loop7: detected capacity change from 0 to 4096 [ 1664.788869][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.861125][ T9] usb 4-1: config 0 descriptor?? [ 1664.903119][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20552'. [ 1664.961287][T23232] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20552'. [ 1665.386315][ T9] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 1665.407442][ T9] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 1665.428666][ T9] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 1665.453030][ T9] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 1665.474319][ T9] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 1665.503784][ T9] corsair-psu 0003:1B1C:1C09.000F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 1665.554672][T32724] Bluetooth: hci6: command 0x041b tx timeout [ 1665.660601][ T4670] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 1665.660792][ T9] corsair-psu 0003:1B1C:1C09.000F: unable to initialize device (-38) [ 1665.698434][T23272] loop7: detected capacity change from 0 to 1024 [ 1665.733242][ T9] corsair-psu 0003:1B1C:1C09.000F: probe with driver corsair-psu failed with error -38 [ 1665.808111][ T9] usb 4-1: USB disconnect, device number 39 [ 1665.860544][ T4670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1665.909314][ T4670] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1665.951896][ T4670] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1665.979286][ T4670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.022520][ T4670] usb 5-1: config 0 descriptor?? [ 1666.321522][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1666.508474][ T4670] hid (null): unknown global tag 0xc [ 1666.548620][ T4670] glorious 0003:22D4:1503.0010: unknown global tag 0xc [ 1666.582278][ T4670] glorious 0003:22D4:1503.0010: item 0 1 1 12 parsing failed [ 1666.614461][ T4670] glorious 0003:22D4:1503.0010: probe with driver glorious failed with error -22 [ 1666.749309][ T4670] usb 5-1: USB disconnect, device number 29 [ 1667.145085][T23294] loop6: detected capacity change from 0 to 32768 [ 1667.177685][T23294] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.20567 (23294) [ 1667.237461][T23294] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1667.263650][T23294] BTRFS info (device loop6): using sha256 checksum algorithm [ 1667.458999][T23294] BTRFS info (device loop6): enabling ssd optimizations [ 1667.502763][T23294] BTRFS info (device loop6): turning on async discard [ 1667.541204][T23294] BTRFS info (device loop6): enabling free space tree [ 1668.029966][T23376] loop7: detected capacity change from 0 to 256 [ 1668.074573][T23376] exfat: Deprecated parameter 'utf8' [ 1668.209245][T23384] netlink: 'syz.4.20589': attribute type 1 has an invalid length. [ 1668.245541][T23384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20589'. [ 1668.502664][T20811] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1668.647633][ T4388] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1668.849282][ T4388] usb 8-1: Using ep0 maxpacket: 32 [ 1668.874754][ T4388] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1668.907717][ T4388] usb 8-1: config 0 has no interface number 0 [ 1668.934955][ T4388] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 1668.978926][ T4388] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1669.015771][ T4388] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1669.044458][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1669.052292][ T4388] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.092867][ T4388] usb 8-1: Product: syz [ 1669.110474][ T4388] usb 8-1: Manufacturer: syz [ 1669.131523][ T4388] usb 8-1: SerialNumber: syz [ 1669.166376][ T4388] usb 8-1: config 0 descriptor?? [ 1669.198348][T23391] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1669.233247][T23391] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1669.527904][T23391] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1669.564940][T23391] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1670.052526][ T4388] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1670.102919][ T4388] asix 8-1:0.188: probe with driver asix failed with error -71 [ 1670.146100][ T4388] usb 8-1: USB disconnect, device number 2 [ 1670.773470][ T4388] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1670.813582][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.821567][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.829490][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.837399][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.845299][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.853222][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.861139][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.869057][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.876919][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.884828][T23487] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1670.912409][T23441] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1671.009551][ T4388] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1671.017951][ T4388] usb 4-1: config 0 has no interface number 0 [ 1671.063071][ T4388] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1671.077981][ T4388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.086181][T23441] usb 2-1: Using ep0 maxpacket: 8 [ 1671.099857][T23441] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1671.132796][T23441] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1671.157126][ T4388] usb 4-1: Product: syz [ 1671.174548][ T4388] usb 4-1: Manufacturer: syz [ 1671.188994][ T4388] usb 4-1: SerialNumber: syz [ 1671.203733][T23441] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1671.224499][ T4388] usb 4-1: config 0 descriptor?? [ 1671.233723][T23441] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1671.254694][T23441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.275795][ T4388] usb 4-1: selecting invalid altsetting 1 [ 1671.293680][T23441] usb 2-1: config 0 descriptor?? [ 1671.347612][ T4388] dvb_ttusb_budget: ttusb_init_controller: error [ 1671.357004][ T4388] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1671.427014][T23496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1671.521210][ T4388] DVB: Unable to find symbol stv0299_attach() [ 1671.604990][ T4388] DVB: Unable to find symbol tda8083_attach() [ 1671.619372][ T4388] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1671.657081][ T4388] usb 4-1: USB disconnect, device number 40 [ 1671.765812][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1671.780735][T23441] kye 0003:0458:0153.0011: ignoring exceeding usage max [ 1671.799352][T23441] kye 0003:0458:0153.0011: usage index exceeded [ 1671.815131][T23441] kye 0003:0458:0153.0011: item 0 4 2 0 parsing failed [ 1671.823834][T23441] kye 0003:0458:0153.0011: parse failed [ 1671.830189][T23441] kye 0003:0458:0153.0011: probe with driver kye failed with error -22 [ 1672.001787][T23169] usb 2-1: USB disconnect, device number 34 [ 1672.413030][T23571] loop6: detected capacity change from 0 to 4096 [ 1672.455700][T23571] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1672.494899][T23571] ntfs3(loop6): Failed to load $Extend (-22). [ 1672.513751][T23571] ntfs3(loop6): Failed to initialize $Extend. [ 1673.634507][T32724] Bluetooth: hci6: command 0x041b tx timeout [ 1673.640930][T32724] Bluetooth: hci2: command 0x0c1a tx timeout [ 1673.663102][T23496] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1674.059022][T23441] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1674.071147][ T4388] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1674.261115][T23441] usb 2-1: Using ep0 maxpacket: 8 [ 1674.266316][ T4388] usb 4-1: Using ep0 maxpacket: 8 [ 1674.278661][T23441] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1674.289368][ T4388] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1674.302661][T23441] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1674.313536][ T4388] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1674.340832][T23441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.349159][ T4388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.378773][T23441] usb 2-1: config 0 descriptor?? [ 1674.384867][ T4388] usb 4-1: config 0 descriptor?? [ 1674.857131][T23441] hid (null): global environment stack underflow [ 1674.865244][ T4388] ryos 0003:1E7D:31CE.0012: unknown main item tag 0x6 [ 1674.880726][ T4388] ryos 0003:1E7D:31CE.0012: reserved main item tag 0xe [ 1674.898553][ T4388] ryos 0003:1E7D:31CE.0012: invalid report_size 21625 [ 1674.921213][ T4388] ryos 0003:1E7D:31CE.0012: item 0 2 1 7 parsing failed [ 1674.929905][T23441] nintendo 0003:057E:200E.0013: unknown main item tag 0x2 [ 1674.951007][ T4388] ryos 0003:1E7D:31CE.0012: parse failed [ 1674.959216][T23441] nintendo 0003:057E:200E.0013: unknown main item tag 0x6 [ 1674.972822][ T4388] ryos 0003:1E7D:31CE.0012: probe with driver ryos failed with error -22 [ 1674.989778][T23441] nintendo 0003:057E:200E.0013: global environment stack underflow [ 1675.014869][T23441] nintendo 0003:057E:200E.0013: item 0 0 1 11 parsing failed [ 1675.041812][T23441] nintendo 0003:057E:200E.0013: HID parse failed [ 1675.086159][ T10] usb 4-1: USB disconnect, device number 41 [ 1675.087537][T23441] nintendo 0003:057E:200E.0013: probe - fail = -22 [ 1675.109650][T23441] nintendo 0003:057E:200E.0013: probe with driver nintendo failed with error -22 [ 1675.167917][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1675.201092][T23441] usb 2-1: USB disconnect, device number 35 [ 1675.236561][T23645] loop7: detected capacity change from 0 to 32768 [ 1675.591908][T23651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1675.603025][T23651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1675.647526][T23651] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1675.720414][T23691] loop7: detected capacity change from 0 to 512 [ 1676.011196][T23169] kernel write not supported for file /radio1 (pid: 23169 comm: kworker/0:4) [ 1676.807551][T23746] loop7: detected capacity change from 0 to 256 [ 1676.892538][T23724] veth3: entered promiscuous mode [ 1677.037313][ T6000] Bluetooth: hci2: command 0x0c1a tx timeout [ 1677.803996][ T6000] Bluetooth: hci6: command 0x041b tx timeout [ 1677.890776][T31646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1678.279243][T23775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1678.289226][T23775] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1678.572499][T23441] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1678.759245][T23834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20699'. [ 1678.783917][T23441] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1678.810857][T23441] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1678.836650][T23441] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1678.859263][T23441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.895421][T23441] usb 7-1: config 0 descriptor?? [ 1678.923446][T23842] netlink: 277 bytes leftover after parsing attributes in process `syz.0.20702'. [ 1679.440280][T23441] aureal 0003:0755:2626.0014: unknown main item tag 0x5 [ 1679.483016][T23441] aureal 0003:0755:2626.0014: unknown main item tag 0x3 [ 1679.518143][T23441] aureal 0003:0755:2626.0014: reserved main item tag 0xe [ 1679.552684][T23441] aureal 0003:0755:2626.0014: unknown main item tag 0x2 [ 1679.590195][T23441] aureal 0003:0755:2626.0014: global environment stack underflow [ 1679.621856][ T4388] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 1679.632724][T23441] aureal 0003:0755:2626.0014: item 0 1 1 11 parsing failed [ 1679.676257][ T6000] Bluetooth: hci2: command 0x0c1a tx timeout [ 1679.691584][T23441] aureal 0003:0755:2626.0014: probe with driver aureal failed with error -22 [ 1679.788676][T23441] usb 7-1: USB disconnect, device number 4 [ 1679.818403][T23867] net_ratelimit: 45 callbacks suppressed [ 1679.818428][T23867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1679.838606][ T4388] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1679.895216][ T4388] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1679.933985][ T4388] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1679.963234][ T4388] usb 8-1: New USB device found, idVendor=18d1, idProduct=502b, bcdDevice= 0.00 [ 1679.983117][ T4388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.018611][ T4388] usb 8-1: config 0 descriptor?? [ 1680.040040][T23850] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1680.053616][T23169] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1680.107884][T23169] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1680.361796][T23886] fido_id[23886]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1680.442260][ T6000] Bluetooth: hci6: command 0x041b tx timeout [ 1680.501095][ T4388] hid (null): unknown global tag 0xe [ 1680.552008][ T4388] hid-generic 0003:18D1:502B.0016: unknown main item tag 0x1 [ 1680.576375][ T4388] hid-generic 0003:18D1:502B.0016: unknown global tag 0xe [ 1680.600739][ T4388] hid-generic 0003:18D1:502B.0016: item 0 2 1 14 parsing failed [ 1680.614117][T31650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1680.633768][ T4388] hid-generic 0003:18D1:502B.0016: probe with driver hid-generic failed with error -22 [ 1680.808968][ T4388] usb 8-1: USB disconnect, device number 3 [ 1681.220570][T23937] can0: slcan on ttyS3. [ 1681.496259][T23936] can0 (unregistered): slcan off ttyS3. [ 1682.369925][T23169] kernel write not supported for file /radio7 (pid: 23169 comm: kworker/0:4) [ 1682.474865][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20734'. [ 1682.602705][T23990] vlan2: entered promiscuous mode [ 1682.616165][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20736'. [ 1682.634517][T23990] gretap0: entered promiscuous mode [ 1684.020970][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1684.062866][T24065] netlink: 136 bytes leftover after parsing attributes in process `syz.6.20755'. [ 1684.407134][T24042] loop7: detected capacity change from 0 to 32768 [ 1684.461615][T24042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.20748 (24042) [ 1684.519803][T24042] BTRFS error: failed to open device for path /dev/loop7 with flags 0x23: -13 [ 1685.790430][T24132] loop6: detected capacity change from 0 to 2048 [ 1686.071895][T31650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1686.565385][T24167] loop7: detected capacity change from 0 to 256 [ 1688.119589][T24248] netlink: 'syz.3.20814': attribute type 1 has an invalid length. [ 1688.136640][T24248] netlink: 232 bytes leftover after parsing attributes in process `syz.3.20814'. [ 1688.161323][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20814'. [ 1688.394284][T24258] loop6: detected capacity change from 0 to 512 [ 1688.432744][T24261] sch_tbf: peakrate 7 is lower than or equals to rate 5840457056772342912 ! [ 1688.490915][T24258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1688.641845][T24258] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1688.852791][T20811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.466055][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1689.845094][T24314] loop6: detected capacity change from 0 to 1764 [ 1689.892040][T24314] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1689.975083][T24324] loop7: detected capacity change from 0 to 2048 [ 1690.646541][T24357] loop7: detected capacity change from 0 to 1024 [ 1691.222500][ T4388] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1691.403006][ T4388] usb 7-1: Using ep0 maxpacket: 16 [ 1691.407988][T24388] loop7: detected capacity change from 0 to 8 [ 1691.421312][ T4388] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.455090][ T4388] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1691.489278][ T4388] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1691.531054][ T4388] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1691.578791][ T4388] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1691.604814][T24393] netlink: 136 bytes leftover after parsing attributes in process `syz.0.20859'. [ 1691.638326][ T4388] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1691.657803][ T4388] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1691.683711][ T4388] usb 7-1: Manufacturer: syz [ 1691.708598][ T4388] usb 7-1: config 0 descriptor?? [ 1691.903866][T24404] loop7: detected capacity change from 0 to 1024 [ 1692.161743][ T4388] rc_core: IR keymap rc-hauppauge not found [ 1692.185260][ T4388] Registered IR keymap rc-empty [ 1692.194168][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1692.203801][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.244765][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.281225][ T4388] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1692.288871][ T4388] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input152 [ 1692.366017][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.382578][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.414682][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.446340][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.478590][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.499685][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.566553][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.607869][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.670708][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.714691][ T4388] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1692.769602][ T4388] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1692.804312][ T4388] mceusb 7-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1692.853249][ T4388] usb 7-1: USB disconnect, device number 5 [ 1693.699398][T24472] binfmt_misc: register: failed to install interpreter file ./file0 [ 1694.343430][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.364155][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.385716][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.405282][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.416017][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.438294][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.476535][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.508406][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.534794][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.555804][T24503] loop7: detected capacity change from 0 to 8 [ 1694.562107][ T6238] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 1694.878156][T24504] loop6: detected capacity change from 0 to 32768 [ 1694.886739][T24504] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.20893 (24504) [ 1694.907754][T24504] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1694.920366][T24504] BTRFS info (device loop6): using sha256 checksum algorithm [ 1694.962652][ T6238] hid-generic 0000:0000:0004.0017: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1695.024539][ T48] BTRFS warning (device loop6): checksum verify failed on logical 5267456 mirror 1 wanted 0x335d39565c71738882e9c778b97d855737807c3b4cc2d9fb107991a100dbef3e found 0x33d1b63988449adf39de86eb185b14ef66d954d48fb91e8b30431bcf6be7e8ff level 0 [ 1695.114269][T24530] fido_id[24530]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1695.156137][T24504] BTRFS error (device loop6): failed to read fs tree: -5 [ 1695.200426][T24504] BTRFS error (device loop6): open_ctree failed: -5 [ 1695.571408][T24548] vimc link validate: Scaler:src:16x16 (0x33424752, 6, 2, 0, 1) RGB/YUV Capture:snk:4096x2160 (0x33424752, 8, 0, 0, 0) [ 1695.598323][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1695.652106][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20902'. [ 1696.031285][T24555] loop7: detected capacity change from 0 to 4096 [ 1696.634488][T24579] loop6: detected capacity change from 0 to 4096 [ 1696.787474][T24585] loop7: detected capacity change from 0 to 32768 [ 1696.797477][T24585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.20915 (24585) [ 1696.811469][T24585] BTRFS error: failed to open device for path /dev/loop7 with flags 0x23: -13 [ 1697.611351][T23441] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1697.829206][T23441] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1697.864770][T23441] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 1697.887929][T23441] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.935088][T23441] usb 7-1: config 63 has no interface number 0 [ 1697.952268][T23441] usb 7-1: config 63 interface 66 has no altsetting 0 [ 1697.979280][T23441] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1697.997752][T23441] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.023396][T23441] usb 7-1: Product: syz [ 1698.034558][T23441] usb 7-1: Manufacturer: syz [ 1698.049376][T23441] usb 7-1: SerialNumber: syz [ 1698.328579][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1698.331435][T23441] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1698.384616][T23441] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1698.410977][T23441] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1698.436309][T23441] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1698.457928][T23441] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1698.488001][T23441] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1698.526094][T23441] uvcvideo 7-1:63.66: No streaming interface found for terminal 29. [ 1698.560137][T23441] uvcvideo 7-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1698.603946][T23441] usb 7-1: USB disconnect, device number 6 [ 1699.228366][T24682] loop7: detected capacity change from 0 to 4096 [ 1700.314414][T24747] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20972'. [ 1700.345819][T24747] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20972'. [ 1700.380281][T24750] binder: 24749:24750 ioctl c00c620f 2000000003c0 returned -22 [ 1700.452745][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20976'. [ 1700.772852][T24769] loop7: detected capacity change from 0 to 8 [ 1701.052663][T23169] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1701.237578][T23169] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1701.237643][T23169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.239061][T23169] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1701.239106][T23169] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1701.239145][T23169] usb 2-1: Manufacturer: syz [ 1701.245497][T23169] usb 2-1: config 0 descriptor?? [ 1701.415282][T23169] rc_core: IR keymap rc-hauppauge not found [ 1701.421367][T23169] Registered IR keymap rc-empty [ 1701.449339][T23169] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1701.505954][T23169] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input153 [ 1701.526899][ T30] audit: type=1326 audit(1625.660:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1701.602578][ T30] audit: type=1326 audit(1625.660:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1701.629038][ T30] audit: type=1326 audit(1625.660:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1701.704111][ T30] audit: type=1326 audit(1625.660:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1701.735081][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1701.781342][ T30] audit: type=1326 audit(1625.660:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1701.807587][ T30] audit: type=1326 audit(1625.660:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1701.838308][ T30] audit: type=1326 audit(1625.660:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1701.895705][T24824] usb usb9: usbfs: process 24824 (syz.0.20998) did not claim interface 0 before use [ 1701.912482][ C0] igorplugusb 2-1:0.0: receive overflow, at least 27 lost [ 1701.962855][ T30] audit: type=1326 audit(1625.669:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1702.031659][ T30] audit: type=1326 audit(1625.669:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1702.074627][ T30] audit: type=1326 audit(1625.669:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.4.20994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbd9de59 code=0x7ff00000 [ 1702.153220][ T6238] usb 2-1: USB disconnect, device number 36 [ 1703.039829][T24885] netlink: 'syz.7.21016': attribute type 29 has an invalid length. [ 1703.064731][T24885] netlink: 'syz.7.21016': attribute type 29 has an invalid length. [ 1703.548997][T24910] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 1703.663637][T24915] xt_hashlimit: size too large, truncated to 1048576 [ 1704.257218][T23441] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1704.438066][T23441] usb 7-1: Using ep0 maxpacket: 16 [ 1704.453014][T23441] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1704.460230][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1704.481861][T23441] usb 7-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 1704.500282][T23441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.533040][T23441] usb 7-1: config 0 descriptor?? [ 1704.589469][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1704.773491][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1704.803122][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.831042][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.858997][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1704.895300][ T10] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1704.918974][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.942099][ T10] usb 8-1: config 0 descriptor?? [ 1705.032485][T23441] hid_parser_main: 91 callbacks suppressed [ 1705.032515][T23441] wacom 0003:056A:00B1.0018: unknown main item tag 0x6 [ 1705.048703][T23441] wacom 0003:056A:00B1.0018: ignoring exceeding usage max [ 1705.063629][T23441] wacom 0003:056A:00B1.0018: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 1705.080408][T23441] wacom 0003:056A:00B1.0018: hidraw0: USB HID v0.08 Device [HID 056a:00b1] on usb-dummy_hcd.6-1/input0 [ 1705.110846][T23441] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B1.0018/input/input154 [ 1705.293329][T23441] usb 7-1: USB disconnect, device number 7 [ 1705.381464][T24973] fido_id[24973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1705.455431][ T10] holtek_kbd 0003:04D9:A055.0019: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.7-1/input0 [ 1705.563973][T24997] netlink: 136 bytes leftover after parsing attributes in process `syz.1.21049'. [ 1705.644223][ T4388] usb 8-1: USB disconnect, device number 4 [ 1705.838455][T25010] fido_id[25010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1705.996260][T25031] netlink: 199808 bytes leftover after parsing attributes in process `syz.3.21055'. [ 1706.015061][T25031] netlink: 'syz.3.21055': attribute type 1 has an invalid length. [ 1706.059124][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1706.231941][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.262414][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.275438][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1706.290107][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1706.301057][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.321313][ T10] usb 2-1: config 0 descriptor?? [ 1706.425675][T25052] ptrace attach of ""[25053] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[25052] [ 1706.826086][ T10] playstation 0003:054C:09CC.001A: unknown main item tag 0x0 [ 1706.833895][ T10] playstation 0003:054C:09CC.001A: unknown main item tag 0x0 [ 1706.843419][ T10] playstation 0003:054C:09CC.001A: unexpected long global item [ 1706.855011][ T10] playstation 0003:054C:09CC.001A: Parse failed [ 1706.869218][T25064] netlink: 136 bytes leftover after parsing attributes in process `syz.3.21064'. [ 1706.881167][ T10] playstation 0003:054C:09CC.001A: probe with driver playstation failed with error -22 [ 1707.111093][T23169] usb 2-1: USB disconnect, device number 37 [ 1707.207799][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1707.624975][T25099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21072'. [ 1707.723419][T25099] IPVS: Unknown mcast interface: vetN1_macvtap [ 1708.001207][T25119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21079'. [ 1708.560781][ T4388] kernel write not supported for file /dsp (pid: 4388 comm: kworker/1:6) [ 1709.164638][T25171] netlink: 136 bytes leftover after parsing attributes in process `syz.4.21098'. [ 1709.216633][T25177] loop6: detected capacity change from 0 to 1024 [ 1709.329777][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1709.431424][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1709.431450][ T30] audit: type=1800 audit(1633.075:410): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.21100" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1709.511553][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1709.529592][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1709.551209][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.561708][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 1709.611491][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.622645][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.642972][ T10] usb 4-1: config 0 descriptor?? [ 1709.651799][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.689547][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.950756][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21108'. [ 1710.113723][ T10] ntrig 0003:1B96:0013.001B: unknown main item tag 0x0 [ 1710.151733][T25214] team0 (unregistering): Port device team_slave_0 removed [ 1710.166114][ T10] ntrig 0003:1B96:0013.001B: unknown main item tag 0x0 [ 1710.175632][ T10] ntrig 0003:1B96:0013.001B: unknown main item tag 0x0 [ 1710.188799][ T10] ntrig 0003:1B96:0013.001B: unknown main item tag 0x0 [ 1710.197325][ T10] ntrig 0003:1B96:0013.001B: unknown main item tag 0x0 [ 1710.210064][ T10] ntrig 0003:1B96:0013.001B: unknown main item tag 0x0 [ 1710.224978][T25214] team0 (unregistering): Port device team_slave_1 removed [ 1710.232199][ T10] ntrig 0003:1B96:0013.001B: unknown main item tag 0x0 [ 1710.252167][ T10] ntrig 0003:1B96:0013.001B: hidraw0: USB HID v0.03 Device [HID 1b96:0013] on usb-dummy_hcd.3-1/input0 [ 1710.340078][ T10] usb 4-1: USB disconnect, device number 42 [ 1710.473555][T25230] fido_id[25230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1710.596933][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1711.642923][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1711.812729][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1711.824531][ T10] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1711.845865][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.879258][ T10] usb 5-1: config 0 has no interface number 0 [ 1711.904841][ T10] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1711.957322][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1711.981266][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.001780][ T10] usb 5-1: Product: syz [ 1712.012549][ T10] usb 5-1: Manufacturer: syz [ 1712.027366][ T10] usb 5-1: SerialNumber: syz [ 1712.042876][ T10] usb 5-1: config 0 descriptor?? [ 1712.062928][ T10] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1712.077049][ T10] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1712.301038][ T10] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1712.531653][ T10] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 1712.645064][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1712.749370][ T4388] usb 5-1: USB disconnect, device number 30 [ 1712.771892][ T4388] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 1712.784530][T25342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1713.056944][T25359] vlan2: entered promiscuous mode [ 1713.064468][T25359] batadv0: entered promiscuous mode [ 1713.258894][T25326] loop6: detected capacity change from 0 to 32768 [ 1713.317922][T25326] ERROR: (device loop6): diRead: i_ino != di_number [ 1713.317922][T25326] [ 1713.386529][T25326] ERROR: (device loop6): remounting filesystem as read-only [ 1713.569656][ T4388] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1713.753780][ T4388] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1713.780404][ T4388] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1713.825361][ T4388] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1713.849094][ T4388] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1713.868256][ T4388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.887125][ T4388] usb 4-1: Product: syz [ 1713.897879][ T4388] usb 4-1: Manufacturer: syz [ 1713.908181][ T4388] usb 4-1: SerialNumber: syz [ 1713.940927][ T4388] usb 4-1: config 0 descriptor?? [ 1713.960977][T25373] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1713.972346][T25373] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1714.006209][ T4388] usb 4-1: ucan: probing device on interface #0 [ 1714.432420][ T4388] usb 4-1: ucan: device reported invalid tx-fifo size [ 1714.450725][ T4388] usb 4-1: ucan: probe failed; try to update the device firmware [ 1714.652426][ T4388] usb 4-1: USB disconnect, device number 43 [ 1714.675550][T25434] netlink: 64 bytes leftover after parsing attributes in process `syz.4.21171'. [ 1714.963654][T25449] loop7: detected capacity change from 0 to 4096 [ 1715.759331][T25489] CIFS mount error: No usable UNC path provided in device string! [ 1715.759331][T25489] [ 1715.800505][T25489] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1715.965573][ T30] audit: type=1326 audit(1639.203:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.6.21193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29f559de59 code=0x0 [ 1716.737934][T23169] [ 1716.737950][T23169] ====================================================== [ 1716.737980][T23169] WARNING: possible circular locking dependency detected [ 1716.738001][T23169] syzkaller #0 Tainted: G L [ 1716.738022][T23169] ------------------------------------------------------ [ 1716.738037][T23169] kworker/0:4/23169 is trying to acquire lock: [ 1716.738058][T23169] ffff88801bc620b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 1716.738153][T23169] [ 1716.738153][T23169] but task is already holding lock: [ 1716.738167][T23169] ffffffff8ebd2520 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 1716.738267][T23169] [ 1716.738267][T23169] which lock already depends on the new lock. [ 1716.738267][T23169] [ 1716.738282][T23169] [ 1716.738282][T23169] the existing dependency chain (in reverse order) is: [ 1716.738297][T23169] [ 1716.738297][T23169] -> #2 (console_lock){+.+.}-{0:0}: [ 1716.738350][T23169] lock_acquire+0x1b9/0x370 [ 1716.738389][T23169] console_lock+0x7a/0xa0 [ 1716.738426][T23169] con_flush_chars+0x63/0x90 [ 1716.738460][T23169] n_tty_receive_buf_common+0x4be/0x1930 [ 1716.738518][T23169] tty_ldisc_receive_buf+0xaa/0x1a0 [ 1716.738557][T23169] tty_port_default_receive_buf+0x70/0xb0 [ 1716.738605][T23169] flush_to_ldisc+0x26b/0x730 [ 1716.738644][T23169] process_one_work+0xa23/0x1940 [ 1716.738702][T23169] worker_thread+0x5ef/0xe50 [ 1716.738764][T23169] kthread+0x370/0x450 [ 1716.738817][T23169] ret_from_fork+0x72b/0xd50 [ 1716.738861][T23169] ret_from_fork_asm+0x1a/0x30 [ 1716.738914][T23169] [ 1716.738914][T23169] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 1716.738987][T23169] lock_acquire+0x1b9/0x370 [ 1716.739023][T23169] down_write+0x8b/0x1f0 [ 1716.739061][T23169] n_tty_flush_buffer+0x25/0x1b0 [ 1716.739113][T23169] tty_buffer_flush+0x239/0x310 [ 1716.739153][T23169] tty_ldisc_flush+0x68/0xf0 [ 1716.739187][T23169] tty_port_close_start+0x306/0x500 [ 1716.739234][T23169] tty_port_close+0x26/0x170 [ 1716.739281][T23169] uart_close+0x7d/0x240 [ 1716.739339][T23169] tty_release+0x40e/0x1300 [ 1716.739379][T23169] __fput+0x3ff/0xb50 [ 1716.739438][T23169] task_work_run+0x150/0x240 [ 1716.739496][T23169] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1716.739537][T23169] do_syscall_64+0x666/0x870 [ 1716.739571][T23169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.739610][T23169] [ 1716.739610][T23169] -> #0 (&buf->lock){+.+.}-{4:4}: [ 1716.739664][T23169] check_prev_add+0xeb/0xe60 [ 1716.739698][T23169] __lock_acquire+0x136c/0x1a40 [ 1716.739733][T23169] lock_acquire+0x1b9/0x370 [ 1716.739768][T23169] __mutex_lock+0x1a4/0x1bd0 [ 1716.739802][T23169] tty_buffer_flush+0x72/0x310 [ 1716.739842][T23169] tty_ldisc_flush+0x68/0xf0 [ 1716.739875][T23169] __do_SAK+0x368/0x480 [ 1716.739918][T23169] vc_SAK+0x7f/0x320 [ 1716.739982][T23169] process_one_work+0xa23/0x1940 [ 1716.740040][T23169] worker_thread+0x5ef/0xe50 [ 1716.740097][T23169] kthread+0x370/0x450 [ 1716.740150][T23169] ret_from_fork+0x72b/0xd50 [ 1716.740193][T23169] ret_from_fork_asm+0x1a/0x30 [ 1716.740245][T23169] [ 1716.740245][T23169] other info that might help us debug this: [ 1716.740245][T23169] [ 1716.740258][T23169] Chain exists of: [ 1716.740258][T23169] &buf->lock --> &tty->termios_rwsem --> console_lock [ 1716.740258][T23169] [ 1716.740324][T23169] Possible unsafe locking scenario: [ 1716.740324][T23169] [ 1716.740336][T23169] CPU0 CPU1 [ 1716.740349][T23169] ---- ---- [ 1716.740361][T23169] lock(console_lock); [ 1716.740388][T23169] lock(&tty->termios_rwsem); [ 1716.740419][T23169] lock(console_lock); [ 1716.740449][T23169] lock(&buf->lock); [ 1716.740475][T23169] [ 1716.740475][T23169] *** DEADLOCK *** [ 1716.740475][T23169] [ 1716.740486][T23169] 4 locks held by kworker/0:4/23169: [ 1716.740510][T23169] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1716.740625][T23169] #1: ffffc900042a7d08 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1716.740743][T23169] #2: ffffffff8ebd2520 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 1716.740851][T23169] #3: ffff88807c14c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xf0 [ 1716.740942][T23169] [ 1716.740942][T23169] stack backtrace: [ 1716.740963][T23169] CPU: 0 UID: 0 PID: 23169 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1716.741031][T23169] Tainted: [L]=SOFTLOCKUP [ 1716.741045][T23169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1716.741070][T23169] Workqueue: events vc_SAK [ 1716.741123][T23169] Call Trace: [ 1716.741136][T23169] [ 1716.741150][T23169] dump_stack_lvl+0x100/0x190 [ 1716.741191][T23169] print_circular_bug.cold+0x178/0x1c7 [ 1716.741256][T23169] check_noncircular+0x146/0x160 [ 1716.741326][T23169] check_prev_add+0xeb/0xe60 [ 1716.741366][T23169] __lock_acquire+0x136c/0x1a40 [ 1716.741413][T23169] lock_acquire+0x1b9/0x370 [ 1716.741451][T23169] ? tty_buffer_flush+0x72/0x310 [ 1716.741494][T23169] ? __pfx___might_resched+0x10/0x10 [ 1716.741538][T23169] __mutex_lock+0x1a4/0x1bd0 [ 1716.741573][T23169] ? tty_buffer_flush+0x72/0x310 [ 1716.741615][T23169] ? tty_buffer_flush+0x72/0x310 [ 1716.741659][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.741706][T23169] ? check_prev_add+0x354/0xe60 [ 1716.741742][T23169] ? __pfx___mutex_lock+0x10/0x10 [ 1716.741781][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.741830][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.741886][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.741938][T23169] ? tty_buffer_flush+0x72/0x310 [ 1716.741991][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.742038][T23169] tty_buffer_flush+0x72/0x310 [ 1716.742085][T23169] tty_ldisc_flush+0x68/0xf0 [ 1716.742122][T23169] __do_SAK+0x368/0x480 [ 1716.742166][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.742212][T23169] ? mark_held_locks+0x40/0x70 [ 1716.742255][T23169] vc_SAK+0x7f/0x320 [ 1716.742310][T23169] process_one_work+0xa23/0x1940 [ 1716.742382][T23169] ? __pfx_process_one_work+0x10/0x10 [ 1716.742442][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.742497][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.742548][T23169] worker_thread+0x5ef/0xe50 [ 1716.742617][T23169] ? __pfx_worker_thread+0x10/0x10 [ 1716.742678][T23169] ? kthread+0x13a/0x450 [ 1716.742736][T23169] ? __pfx_worker_thread+0x10/0x10 [ 1716.742794][T23169] kthread+0x370/0x450 [ 1716.742847][T23169] ? __pfx_kthread+0x10/0x10 [ 1716.742904][T23169] ret_from_fork+0x72b/0xd50 [ 1716.742950][T23169] ? __pfx_ret_from_fork+0x10/0x10 [ 1716.743007][T23169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.743053][T23169] ? __switch_to+0x800/0x10f0 [ 1716.743109][T23169] ? __switch_to_asm+0x39/0x70 [ 1716.743161][T23169] ? __pfx_kthread+0x10/0x10 [ 1716.743217][T23169] ret_from_fork_asm+0x1a/0x30 [ 1716.743282][T23169] [ 1716.749846][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1717.409073][T25586] loop6: detected capacity change from 0 to 256 [ 1717.411269][T25586] exfat: Deprecated parameter 'namecase' [ 1717.411314][T25586] exfat: Deprecated parameter 'namecase' [ 1717.423170][T25586] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1718.111226][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1718.163214][ T4388] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1718.274108][ T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1718.274165][ T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1718.274217][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1718.274261][ T9] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1718.274304][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.276077][ T9] usb 2-1: config 0 descriptor?? [ 1718.276799][T25614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1718.336838][ T4388] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.336896][ T4388] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1718.336938][ T4388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.345776][ T4388] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1718.569271][T22432] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1718.712726][ T9] hid_parser_main: 33 callbacks suppressed [ 1718.712759][ T9] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x2 [ 1718.712802][ T9] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x7 [ 1718.715054][ T9] pantherlord 0003:0F30:0111.001C: hidraw0: USB HID v9.0d Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0 [ 1718.715110][ T9] pantherlord 0003:0F30:0111.001C: no output reports found [ 1718.729420][T22432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1718.729473][T22432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.729527][T22432] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1718.729559][T22432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.733635][T22432] usb 4-1: config 0 descriptor?? [ 1718.781941][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1718.934651][ T6238] usb 2-1: USB disconnect, device number 38 [ 1719.167918][T22432] kye 0003:0458:5016.001D: control desc unexpectedly large [ 1719.172406][T22432] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.001D/input/input157 [ 1719.233123][T22432] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.001D/input/input158 [ 1719.246931][T22432] kye 0003:0458:5016.001D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 1719.384499][ T6238] usb 4-1: USB disconnect, device number 44 [ 1719.474816][ T4388] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1719.474850][ T4388] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1719.475316][ T4388] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 1719.665689][T25707] netlink: 'syz.1.21252': attribute type 1 has an invalid length. [ 1719.665714][T25707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21252'. [ 1719.692303][ T4388] usb 8-1: USB disconnect, device number 5 [ 1720.311480][T25740] loop7: detected capacity change from 0 to 512 [ 1720.453930][T25751] netlink: 24 bytes leftover after parsing attributes in process `syz.7.21267'. [ 1720.453956][T25751] netlink: 212 bytes leftover after parsing attributes in process `syz.7.21267'. [ 1720.453988][T25751] netlink: 32 bytes leftover after parsing attributes in process `syz.7.21267'. [ 1720.526797][T25754] loop7: detected capacity change from 0 to 2048 [ 1721.116993][T25781] netlink: 'syz.1.21278': attribute type 1 has an invalid length. [ 1721.117036][T25781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1721.692539][T25821] loop7: detected capacity change from 0 to 1024 [ 1721.915422][T25833] loop7: detected capacity change from 0 to 128 [ 1722.663232][T25868] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1722.664938][T25868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1723.134921][T25890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21319'. [ 1723.766390][T25905] can0: slcan on ptm0. [ 1723.826118][T25904] can0 (unregistered): slcan off ptm0. [ 1723.983654][T23441] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1724.144122][T23441] usb 4-1: Using ep0 maxpacket: 8 [ 1724.145589][T23441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.145642][T23441] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1724.145703][T23441] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1724.145745][T23441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.147223][T23441] usb 4-1: config 0 descriptor?? [ 1724.250550][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1724.584987][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585041][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585066][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585091][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585116][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585142][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585167][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585192][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585216][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.585241][T23441] nti 0003:0757:0A00.001E: unknown main item tag 0x0 [ 1724.586975][T23441] nti 0003:0757:0A00.001E: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0 [ 1724.808226][ T9] usb 4-1: USB disconnect, device number 45 [ 1725.137208][T22432] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1725.296499][T22432] usb 2-1: Using ep0 maxpacket: 16 [ 1725.298150][T22432] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1725.299054][T22432] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1725.300772][T22432] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1725.300816][T22432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.300852][T22432] usb 2-1: Product: syz [ 1725.300876][T22432] usb 2-1: Manufacturer: syz [ 1725.300898][T22432] usb 2-1: SerialNumber: syz [ 1725.489909][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21332'. [ 1725.489936][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21332'. [ 1725.489965][T25948] netlink: 'syz.3.21332': attribute type 15 has an invalid length. [ 1725.526745][T22432] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1725.526965][T22432] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1725.653525][T25962] netlink: 32 bytes leftover after parsing attributes in process `syz.7.21335'. [ 1725.710361][T25965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1726.024687][T22432] usb 2-1: USB disconnect, device number 39 [ 1726.058727][T26009] netlink: 'syz.7.21344': attribute type 1 has an invalid length. [ 1726.058767][T26009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1726.068925][T16971] udevd[16971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1726.683835][T26033] loop7: detected capacity change from 0 to 32768 [ 1726.896736][T22432] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1727.058020][T22432] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1727.058067][T22432] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1727.058103][T22432] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.058140][T22432] usb 4-1: config 220 has no interface number 2 [ 1727.058200][T22432] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1727.058252][T22432] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1727.058288][T22432] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1727.058324][T22432] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1727.060075][T22432] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1727.060120][T22432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.060157][T22432] usb 4-1: Product: syz [ 1727.060186][T22432] usb 4-1: Manufacturer: syz [ 1727.060214][T22432] usb 4-1: SerialNumber: syz [ 1727.242161][T26087] loop7: detected capacity change from 0 to 256 [ 1727.298495][T22432] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1727.298543][T22432] uvcvideo 4-1:220.0: No valid video chain found. [ 1727.298593][T22432] usb 4-1: selecting invalid altsetting 0 [ 1727.306885][T22432] usb 4-1: selecting invalid altsetting 0 [ 1727.306922][T22432] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1727.318625][T22432] usb 4-1: USB disconnect, device number 46 [ 1727.984921][T26133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21386'. [ 1729.528183][T26194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21415'. [ 1730.279907][T26247] loop7: detected capacity change from 0 to 1024 [ 1730.386927][T31650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1730.436143][T26260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21436'. [ 1730.653977][T26277] netlink: 'syz.7.21444': attribute type 1 has an invalid length. [ 1730.654009][T26277] netlink: 32 bytes leftover after parsing attributes in process `syz.7.21444'. [ 1731.375572][T26322] batadv_slave_1: entered promiscuous mode [ 1731.606040][T26335] xt_limit: Overflow, try lower: 324382443/0 [ 1731.655077][T26340] loop7: detected capacity change from 0 to 512 [ 1732.671139][T23595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1732.671410][T23595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1732.671670][T23595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1732.672404][T23595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1732.672922][T23595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1732.901579][T26348] wlan0 speed is unknown, defaulting to 1000 [ 1732.902277][T26348] xfrm0 speed is unknown, defaulting to 1000 [ 1732.902960][T26348] wlan0 speed is unknown, defaulting to 1000 [ 1733.289553][T26348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.289681][T26348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.289998][T26348] bridge_slave_0: entered allmulticast mode [ 1733.291183][T26348] bridge_slave_0: entered promiscuous mode [ 1733.296628][T26348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.296750][T26348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.296884][T26348] bridge_slave_1: entered allmulticast mode [ 1733.298018][T26348] bridge_slave_1: entered promiscuous mode [ 1733.337524][T26348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.340300][T26348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.411449][T26513] batadv_slave_1: entered promiscuous mode [ 1733.414686][T26348] team0: Port device team_slave_0 added [ 1733.415842][T26519] loop7: detected capacity change from 0 to 1024 [ 1733.416772][T26519] EXT4-fs: Ignoring removed nobh option [ 1733.426889][ T30] audit: type=1326 audit(1655.589:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.428261][ T30] audit: type=1326 audit(1655.589:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.428587][ T30] audit: type=1326 audit(1655.589:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.428828][ T30] audit: type=1326 audit(1655.589:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.429057][ T30] audit: type=1326 audit(1655.589:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.429266][ T30] audit: type=1326 audit(1655.589:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.429474][ T30] audit: type=1326 audit(1655.589:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.429717][ T30] audit: type=1326 audit(1655.589:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.430388][ T30] audit: type=1326 audit(1655.589:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.430597][ T30] audit: type=1326 audit(1655.589:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26518 comm="syz.7.21479" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4361d9de59 code=0x7ff00000 [ 1733.438522][T26348] team0: Port device team_slave_1 added [ 1733.515703][T26348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.515730][T26348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.515780][T26348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.523574][T26348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.523598][T26348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.523649][T26348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.610008][T26348] hsr_slave_0: entered promiscuous mode [ 1733.610802][T26348] hsr_slave_1: entered promiscuous mode [ 1733.611389][T26348] debugfs: 'hsr0' already exists in 'hsr' [ 1733.611416][T26348] Cannot create hsr debugfs directory [ 1733.881397][T26348] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1733.894138][T26348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1733.894908][T26348] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1733.916031][T26348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1733.917672][T26348] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1733.947581][T26348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1733.948564][T26348] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1733.989366][T26348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1734.026191][T26348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.026284][T26348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1734.026498][T26348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.026608][T26348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1734.138531][T26348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1734.161500][T31646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.181199][T26568] loop7: detected capacity change from 0 to 32768 [ 1734.200904][T31646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.274735][T23595] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1734.275011][T23595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1734.275260][T23595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1734.275932][T23595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1734.276397][T23595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1734.384772][T26348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1734.397819][T31652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.397902][T31652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1734.419274][T31652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.419371][T31652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1734.619263][T26677] wlan0 speed is unknown, defaulting to 1000 [ 1734.620186][T26677] xfrm0 speed is unknown, defaulting to 1000 [ 1734.621154][T26677] wlan0 speed is unknown, defaulting to 1000 [ 1734.821166][ T6000] Bluetooth: hci4: command tx timeout [ 1734.889123][T26348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.013774][T26677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.014154][T26677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.014289][T26677] bridge_slave_0: entered allmulticast mode [ 1735.015387][T26677] bridge_slave_0: entered promiscuous mode [ 1735.018260][T26677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.018366][T26677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.018518][T26677] bridge_slave_1: entered allmulticast mode [ 1735.019795][T26677] bridge_slave_1: entered promiscuous mode [ 1735.049365][T26677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.056529][T26677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.082205][T26677] team0: Port device team_slave_0 added [ 1735.087043][T26677] team0: Port device team_slave_1 added [ 1735.110538][T26677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.110562][T26677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.110611][T26677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.111918][T26677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.111941][T26677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.112003][T26677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.153732][T26677] hsr_slave_0: entered promiscuous mode [ 1735.154534][T26677] hsr_slave_1: entered promiscuous mode [ 1735.155070][T26677] debugfs: 'hsr0' already exists in 'hsr' [ 1735.155097][T26677] Cannot create hsr debugfs directory [ 1735.569081][T26348] veth0_vlan: entered promiscuous mode [ 1735.580865][T26348] veth1_vlan: entered promiscuous mode [ 1735.592128][T26677] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1735.621078][T26677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1735.621799][T26677] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1735.663386][T26677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1735.664490][T26677] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1735.705484][T26677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1735.706216][T26677] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1735.748240][T26677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1735.778905][T26348] veth0_macvtap: entered promiscuous mode [ 1735.783741][T26348] veth1_macvtap: entered promiscuous mode [ 1735.804274][T26348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.813530][T26348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.823084][T31654] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.823155][T31654] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.823216][T31654] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.823275][T31654] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.921758][T26677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.922253][T26348] ieee80211 phy106: Selected rate control algorithm 'minstrel_ht' [ 1735.955522][T31652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.955552][T31652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.961040][T26677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1735.961530][T26348] ieee80211 phy107: Selected rate control algorithm 'minstrel_ht' [ 1735.986914][T31652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.986978][T31652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1735.995126][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.995188][T16113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.997153][T16113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.997183][T16113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.387710][T27007] loop8: detected capacity change from 0 to 1024 [ 1736.389792][T27007] EXT4-fs: Ignoring removed nobh option [ 1736.390730][T27007] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 1736.390730][T27007] [ 1736.438613][ T6000] Bluetooth: hci7: command tx timeout [ 1736.539962][T27018] usb usb9: usbfs: process 27018 (syz.7.21495) did not claim interface 0 before use [ 1736.625002][T27023] batadv_slave_1: entered promiscuous mode [ 1736.810867][T26677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1737.046785][ T6000] Bluetooth: hci4: command tx timeout [ 1737.102413][T27059] xt_hashlimit: size too large, truncated to 1048576 [ 1737.210979][T31646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1737.239936][T26677] veth0_vlan: entered promiscuous mode [ 1737.246053][T26677] veth1_vlan: entered promiscuous mode [ 1737.275392][T26677] veth0_macvtap: entered promiscuous mode [ 1737.278947][T26677] veth1_macvtap: entered promiscuous mode [ 1737.290893][T26677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1737.294540][T26677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.301998][T26922] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.307737][T26922] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.307799][T26922] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.307854][T26922] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.336323][ T4388] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1737.425548][T26677] ieee80211 phy108: Selected rate control algorithm 'minstrel_ht' [ 1737.488702][T31656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.488734][T31656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.492559][T26677] ieee80211 phy109: Selected rate control algorithm 'minstrel_ht' [ 1737.494602][ T4388] usb 9-1: Using ep0 maxpacket: 16 [ 1737.497096][ T4388] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1737.497145][ T4388] usb 9-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 1737.497188][ T4388] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.498901][ T4388] usb 9-1: config 0 descriptor?? [ 1737.502747][T27078] xt_hashlimit: size too large, truncated to 1048576 [ 1737.545567][T27082] netlink: 199808 bytes leftover after parsing attributes in process `syz.7.21510'. [ 1737.545601][T27082] netlink: 'syz.7.21510': attribute type 1 has an invalid length. [ 1737.554098][T16113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.554127][T16113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.954493][ T4388] hid_parser_main: 24 callbacks suppressed [ 1737.954526][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954580][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954615][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954668][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954706][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954742][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954777][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954813][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954848][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.954882][ T4388] ntrig 0003:1B96:0013.001F: unknown main item tag 0x0 [ 1737.962484][ T4388] ntrig 0003:1B96:0013.001F: hidraw0: USB HID v0.03 Device [HID 1b96:0013] on usb-dummy_hcd.8-1/input0 [ 1738.116234][T16113] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1738.116367][T16113] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1738.116447][T16113] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1738.116524][T16113] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1738.172645][ T4388] usb 9-1: USB disconnect, device number 2 [ 1738.242670][T27142] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 1738.245264][ T4404] kernel write not supported for file /dsp (pid: 4404 comm: kworker/0:16) [ 1738.657577][ T6000] Bluetooth: hci7: command tx timeout [ 1738.791846][T27147] loop7: detected capacity change from 0 to 512 [ 1738.819419][ T4388] kernel write not supported for file /dsp (pid: 4388 comm: kworker/1:6) [ 1738.938878][T27157] netlink: 199808 bytes leftover after parsing attributes in process `syz.8.21524'. [ 1738.938912][T27157] netlink: 'syz.8.21524': attribute type 1 has an invalid length. [ 1739.257743][ T6000] Bluetooth: hci4: command tx timeout [ 1739.500076][T27203] loop9: detected capacity change from 0 to 512 [ 1739.506877][T27203] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1739.520253][T27203] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1739.525372][T27203] EXT4-fs (loop9): 1 truncate cleaned up [ 1739.526392][T27203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1739.633889][T26677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.758806][T27226] loop9: detected capacity change from 0 to 1024 [ 1739.806396][ T30] kauditd_printk_skb: 572 callbacks suppressed [ 1739.806425][ T30] audit: type=1800 audit(1661.571:994): pid=27226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.21546" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 1740.171300][T27263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21557'. [ 1740.238274][ T4404] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1740.254439][T27268] loop8: detected capacity change from 0 to 512 [ 1740.266701][T27268] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1740.283711][T27268] EXT4-fs (loop8): 1 truncate cleaned up [ 1740.284721][T27268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1740.358475][T26348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1740.400196][ T4404] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1740.400253][ T4404] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.401125][ T4404] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1740.401170][ T4404] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1740.401209][ T4404] usb 10-1: Manufacturer: syz [ 1740.403190][ T4404] usb 10-1: config 0 descriptor?? [ 1740.482538][ T4404] rc_core: IR keymap rc-hauppauge not found [ 1740.482561][ T4404] Registered IR keymap rc-empty [ 1740.483263][ T4404] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1740.484587][ T4404] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input159 [ 1740.621922][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1740.887173][ T6000] Bluetooth: hci7: command tx timeout [ 1740.902252][ C0] igorplugusb 10-1:0.0: receive overflow, at least 27 lost [ 1741.119480][ T4388] usb 10-1: USB disconnect, device number 2 [ 1741.473661][ T6000] Bluetooth: hci4: command tx timeout [ 1741.766078][T27333] xt_hashlimit: size too large, truncated to 1048576 [ 1741.796192][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21573'. [ 1742.018451][T22432] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1742.095615][T27353] ptrace attach of ""[27354] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[27353] [ 1742.180149][T22432] usb 4-1: Using ep0 maxpacket: 32 [ 1742.181703][T22432] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1742.181743][T22432] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.181780][T22432] usb 4-1: config 0 has no interface number 0 [ 1742.181823][T22432] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1742.183560][T22432] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1742.183605][T22432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.183644][T22432] usb 4-1: Product: syz [ 1742.183673][T22432] usb 4-1: Manufacturer: syz [ 1742.183727][T22432] usb 4-1: SerialNumber: syz [ 1742.196904][T22432] usb 4-1: config 0 descriptor?? [ 1742.213094][T22432] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1742.213158][T22432] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1742.239649][ T9] kernel write not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 1742.432642][T22432] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1742.651918][T22432] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 1742.669758][T31650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1742.686898][T27388] CIFS mount error: No usable UNC path provided in device string! [ 1742.686898][T27388] [ 1742.686927][T27388] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1742.883985][ T4404] usb 4-1: USB disconnect, device number 47 [ 1742.884368][ T4404] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 1743.053807][T22432] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1743.095069][ T6000] Bluetooth: hci7: command tx timeout [ 1743.227173][T22432] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1743.227232][T22432] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1743.228125][T22432] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1743.228169][T22432] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1743.228206][T22432] usb 9-1: Manufacturer: syz [ 1743.231953][T22432] usb 9-1: config 0 descriptor?? [ 1743.285318][T27431] ptrace attach of ""[27432] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[27431] [ 1743.291109][T27429] loop7: detected capacity change from 0 to 1024 [ 1743.342332][T22432] rc_core: IR keymap rc-hauppauge not found [ 1743.342354][T22432] Registered IR keymap rc-empty [ 1743.343334][T22432] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1743.344623][T22432] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input160 [ 1743.721503][ C0] igorplugusb 9-1:0.0: receive overflow, at least 27 lost [ 1743.940709][T22432] usb 9-1: USB disconnect, device number 3 [ 1744.237769][T27459] loop9: detected capacity change from 0 to 32768 [ 1744.260287][T27459] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1744.366947][T27459] XFS (loop9): Ending clean mount [ 1744.368473][T27459] XFS (loop9): Quotacheck needed: Please wait. [ 1744.382212][T27459] XFS (loop9): Quotacheck: Done. [ 1744.518562][T26677] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1744.637046][T27488] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1744.756520][T27498] vlan2: entered promiscuous mode [ 1744.756554][T27498] batadv0: entered promiscuous mode [ 1745.140756][T27520] loop7: detected capacity change from 0 to 1024 [ 1745.149894][T27520] EXT4-fs: Ignoring removed bh option [ 1745.149989][T27520] EXT4-fs: Ignoring removed bh option [ 1745.333153][T27539] loop7: detected capacity change from 0 to 256 [ 1745.554782][T27556] netlink: 'syz.9.21624': attribute type 1 has an invalid length. [ 1745.554813][T27556] netlink: 32 bytes leftover after parsing attributes in process `syz.9.21624'. [ 1745.690427][T23441] kernel write not supported for file /dsp (pid: 23441 comm: kworker/1:2) [ 1745.725822][T27570] vlan2: entered promiscuous mode [ 1745.725880][T27570] batadv0: entered promiscuous mode [ 1746.767146][T26922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1747.713597][T27591] loop8: detected capacity change from 0 to 1024 [ 1747.721156][T27591] EXT4-fs: Ignoring removed bh option [ 1747.721254][T27591] EXT4-fs: Ignoring removed bh option [ 1747.731583][T27591] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1747.751816][T27591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1747.786713][T23595] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1747.791161][T23595] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1747.791537][T23595] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1747.794235][T23595] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1747.794713][T23595] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1747.840993][T26348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.460186][T22432] kernel write not supported for file /dsp (pid: 22432 comm: kworker/0:2) [ 1748.489856][T27600] wlan0 speed is unknown, defaulting to 1000 [ 1748.490838][T27600] xfrm0 speed is unknown, defaulting to 1000 [ 1748.496769][T27600] wlan0 speed is unknown, defaulting to 1000 [ 1748.567132][ T6238] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1748.734151][ T6238] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.734213][ T6238] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1748.734255][ T6238] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.742324][ T6238] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1748.825833][T31646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1749.203511][T27600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.203635][T27600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.203751][T27600] bridge_slave_0: entered allmulticast mode [ 1749.204864][T27600] bridge_slave_0: entered promiscuous mode [ 1749.211119][T27600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.211236][T27600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.211365][T27600] bridge_slave_1: entered allmulticast mode [ 1749.212541][T27600] bridge_slave_1: entered promiscuous mode [ 1749.238822][T27600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.243702][T27600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.269183][T27600] team0: Port device team_slave_0 added [ 1749.274604][T27600] team0: Port device team_slave_1 added [ 1749.308543][T27600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.308567][T27600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.308615][T27600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.313539][T27600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.313562][T27600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.313610][T27600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.388299][T27600] hsr_slave_0: entered promiscuous mode [ 1749.392178][T27600] hsr_slave_1: entered promiscuous mode [ 1749.392714][T27600] debugfs: 'hsr0' already exists in 'hsr' [ 1749.392739][T27600] Cannot create hsr debugfs directory [ 1749.630063][T27948] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21660'. [ 1749.795695][T27961] loop8: detected capacity change from 0 to 512 [ 1749.838175][ T6238] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1749.838205][ T6238] stv0680 10-1:4.0: STV(e): camera ping failed!! [ 1749.838679][ T6238] stv0680 10-1:4.0: last error: 0, command = 0x0 [ 1749.845018][T27961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1749.903127][T27961] EXT4-fs: Ignoring sb option on remount [ 1749.903293][T27961] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1749.957577][T26348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1750.009696][ T6000] Bluetooth: hci8: command tx timeout [ 1750.056351][ T6238] usb 10-1: USB disconnect, device number 3 [ 1750.399859][T28013] loop8: detected capacity change from 0 to 1024 [ 1750.402970][T28013] hfsplus: failed to load extents file [ 1750.487977][T28021] loop8: detected capacity change from 0 to 512 [ 1750.489787][T28021] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1750.489814][T28021] UDF-fs: Scanning with blocksize 512 failed [ 1750.490321][T28021] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1750.490348][T28021] UDF-fs: Scanning with blocksize 1024 failed [ 1750.490854][T28021] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1750.490881][T28021] UDF-fs: Scanning with blocksize 2048 failed [ 1750.491410][T28021] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1750.493342][T28021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1750.745923][T28045] can0: slcan on ptm0. [ 1750.803523][T27600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1750.836363][T27600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1750.842061][T28039] can0 (unregistered): slcan off ptm0. [ 1750.844189][T27600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1750.871378][T27600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1750.876052][T27600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1750.906173][T27600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1750.907098][T27600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1750.938252][T27600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1751.125416][T27600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1751.151392][T27600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1751.157623][T31646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.157739][T31646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1751.294981][T31646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.295062][T31646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.497364][T28105] loop9: detected capacity change from 0 to 2048 [ 1751.521577][T28105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1751.553644][ T30] audit: type=1800 audit(1672.576:995): pid=28105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.21687" name="file2" dev="loop9" ino=1416 res=0 errno=0 [ 1752.065988][T27600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.119434][T27600] veth0_vlan: entered promiscuous mode [ 1752.127519][T27600] veth1_vlan: entered promiscuous mode [ 1752.158756][T27600] veth0_macvtap: entered promiscuous mode [ 1752.162338][T27600] veth1_macvtap: entered promiscuous mode [ 1752.196318][T27600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1752.199811][T27600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1752.222143][T31656] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.222208][T31656] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.223806][T31654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.223866][T31654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.229749][ T6000] Bluetooth: hci8: command tx timeout [ 1752.244739][T28139] loop9: detected capacity change from 0 to 1024 [ 1752.326255][T27600] ieee80211 phy110: Selected rate control algorithm 'minstrel_ht' [ 1752.479891][T31646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.479924][T31646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.486350][T27600] ieee80211 phy111: Selected rate control algorithm 'minstrel_ht' [ 1752.549960][T28158] loop7: detected capacity change from 0 to 2048 [ 1752.604957][T31654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.604989][T31654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.912443][T16113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1753.101807][ T6238] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1753.134422][T28143] loop8: detected capacity change from 0 to 32768 [ 1753.154488][T28143] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1753.272570][ T6238] usb 10-1: Using ep0 maxpacket: 16 [ 1753.275698][ T6238] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1753.275746][ T6238] usb 10-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 1753.275788][ T6238] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.277802][ T6238] usb 10-1: config 0 descriptor?? [ 1753.327899][T28143] XFS (loop8): Ending clean mount [ 1753.336079][T28143] XFS (loop8): Quotacheck needed: Please wait. [ 1753.367412][T28143] XFS (loop8): Quotacheck: Done. [ 1753.536239][T26348] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1753.542774][T28239] tmpfs: Bad value for 'mpol' [ 1753.759404][ T6238] hid_parser_main: 30 callbacks suppressed [ 1753.759436][ T6238] wacom 0003:056A:00B1.0020: unknown main item tag 0x6 [ 1753.759558][ T6238] wacom 0003:056A:00B1.0020: ignoring exceeding usage max [ 1753.771411][ T6238] wacom 0003:056A:00B1.0020: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 1753.778414][ T6238] wacom 0003:056A:00B1.0020: hidraw0: USB HID v0.08 Device [HID 056a:00b1] on usb-dummy_hcd.9-1/input0 [ 1753.786094][ T6238] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:00B1.0020/input/input161 [ 1753.984151][T28271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21713'. [ 1753.984187][T28271] netlink: 212 bytes leftover after parsing attributes in process `syz.0.21713'. [ 1753.984230][T28271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21713'. [ 1754.087703][T22432] usb 10-1: USB disconnect, device number 4 [ 1754.385801][T28306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21729'. [ 1754.461798][ T6000] Bluetooth: hci8: command tx timeout [ 1754.599382][T28259] loop7: detected capacity change from 0 to 32768 [ 1754.603306][T28259] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.21710 (28259) [ 1754.603521][T28259] BTRFS error: failed to open device for path /dev/loop7 with flags 0x23: -13 [ 1754.945305][T28334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21734'. [ 1754.958876][T31646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1755.208790][T28350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21728'. [ 1755.208826][T28350] netlink: 212 bytes leftover after parsing attributes in process `syz.3.21728'. [ 1755.208871][T28350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21728'. [ 1755.271572][T28356] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1755.491484][T28373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1755.685429][T22432] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1755.771215][T28385] loop8: detected capacity change from 0 to 1024 [ 1755.791235][T28385] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1755.797837][T28385] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1755.798130][T28385] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1755.807889][T28385] EXT4-fs error (device loop8): ext4_free_blocks:6717: comm syz.8.21738: Freeing blocks not in datazone - block = 0, count = 4096 [ 1755.807940][T28385] loop8: lost filesystem error report for type 5 error -117 [ 1755.810214][T28385] EXT4-fs (loop8): 1 orphan inode deleted [ 1755.811261][T28385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1755.848042][T22432] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1755.848103][T22432] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1755.848147][T22432] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1755.848185][T22432] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1755.848243][T22432] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1755.848282][T22432] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.849849][T22432] usb 10-1: config 0 descriptor?? [ 1755.900489][T28385] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1755.946876][T28337] loop2: detected capacity change from 0 to 32768 [ 1755.974911][T28337] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1756.059981][T26348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1756.090015][T28337] XFS (loop2): Ending clean mount [ 1756.093288][T28337] XFS (loop2): Quotacheck needed: Please wait. [ 1756.130543][T28337] XFS (loop2): Quotacheck: Done. [ 1756.283006][T27600] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1756.334185][T22432] holtek_kbd 0003:04D9:A055.0021: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.9-1/input0 [ 1756.564063][ T4670] usb 10-1: USB disconnect, device number 5 [ 1756.665907][ T6000] Bluetooth: hci8: command tx timeout [ 1756.957576][T28477] loop2: detected capacity change from 0 to 256 [ 1757.445122][T28514] bpf: Bad value for 'gid' [ 1757.535985][ T30] audit: type=1326 audit(1678.190:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.538139][ T30] audit: type=1326 audit(1678.190:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.542762][ T30] audit: type=1326 audit(1678.199:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.545763][ T30] audit: type=1326 audit(1678.199:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.545831][ T30] audit: type=1326 audit(1678.199:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.545896][ T30] audit: type=1326 audit(1678.199:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.557260][ T30] audit: type=1326 audit(1678.208:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.557330][ T30] audit: type=1326 audit(1678.208:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.557397][ T30] audit: type=1326 audit(1678.208:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1757.557462][ T30] audit: type=1326 audit(1678.208:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28518 comm="syz.9.21762" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6a19de59 code=0x7ffc0000 [ 1758.476040][T28564] tmpfs: Bad value for 'mpol' [ 1758.847462][T28578] loop2: detected capacity change from 0 to 2048 [ 1758.862480][T28584] loop8: detected capacity change from 0 to 2048 [ 1758.891521][T28590] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1758.910456][T28584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1759.059027][T31652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1759.400402][T28621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21789'. [ 1759.400437][T28621] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21789'. [ 1759.400476][T28621] netlink: 'syz.8.21789': attribute type 15 has an invalid length. [ 1759.588823][T28632] loop7: detected capacity change from 0 to 1024 [ 1759.954154][T28662] loop9: detected capacity change from 0 to 64 [ 1760.195945][T28675] loop8: detected capacity change from 0 to 256 [ 1760.197412][T28675] exfat: Deprecated parameter 'namecase' [ 1760.205254][T28675] exfat: Deprecated parameter 'namecase' [ 1760.205319][T28675] exfat: Deprecated parameter 'namecase' [ 1760.260643][T28675] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 1760.261374][T28675] exFAT-fs (loop8): failed to load alloc-bitmap [ 1760.261394][T28675] exFAT-fs (loop8): failed to recognize exfat type [ 1760.498768][ T4403] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1760.673074][ T4403] usb 10-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1760.673132][ T4403] usb 10-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1760.673184][ T4403] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1760.673228][ T4403] usb 10-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1760.673271][ T4403] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.676920][ T4403] usb 10-1: config 0 descriptor?? [ 1760.677583][T28679] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1761.080465][T28730] tipc: MTU too low for tipc bearer [ 1761.105413][T31650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1761.130959][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.130999][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.131046][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.131082][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.131119][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.131155][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.134589][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.134629][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.134666][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.134700][ T4403] uclogic 0003:5543:0003.0022: unknown main item tag 0x0 [ 1761.144528][ T4403] uclogic 0003:5543:0003.0022: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.9-1/input0 [ 1761.347019][ T9] usb 10-1: USB disconnect, device number 6 [ 1761.449561][ T4403] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1761.608962][ T4403] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1761.609034][ T4403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.609084][ T4403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1761.609127][ T4403] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1761.609189][ T4403] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1761.609234][ T4403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.611026][ T4403] usb 4-1: config 0 descriptor?? [ 1761.720055][T28728] loop2: detected capacity change from 0 to 32768 [ 1761.733372][T28728] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1761.736815][T28728] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1761.785545][T28728] XFS (loop2): Ending clean mount [ 1761.794574][T28728] XFS (loop2): Quotacheck needed: Please wait. [ 1761.804581][T28728] XFS (loop2): Quotacheck: Done. [ 1761.879365][T27600] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1761.894516][ T4670] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1762.068615][ T4670] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1762.068674][ T4670] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.068727][ T4670] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1762.068770][ T4670] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.072276][ T4403] holtek_kbd 0003:04D9:A055.0023: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 1762.078214][ T4670] usb 9-1: config 0 descriptor?? [ 1762.323677][ T4403] usb 4-1: USB disconnect, device number 48 [ 1762.394874][T28821] loop2: detected capacity change from 0 to 512 [ 1762.422050][T28821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022] [ 1762.422179][T28821] System zones: 1-12 [ 1762.424430][T28821] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.21823: Directory hole found for htree index block 0 [ 1762.424483][T28821] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1762.426738][T28821] EXT4-fs (loop2): Remounting filesystem read-only [ 1762.426786][T28821] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1762.426882][T28821] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1762.434538][T28821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1762.506181][T27600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.549592][ T4670] kye 0003:0458:5016.0024: control desc unexpectedly large [ 1762.572609][ T4670] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0024/input/input164 [ 1762.651254][ T4670] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0024/input/input165 [ 1762.746468][ T4670] kye 0003:0458:5016.0024: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 1762.756137][T28850] loop7: detected capacity change from 0 to 256 [ 1762.774537][ T4670] usb 9-1: USB disconnect, device number 4 [ 1763.054126][T28865] fido_id[28865]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1763.510046][T28915] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1763.983613][T28947] loop8: detected capacity change from 0 to 2048 [ 1764.028171][T28954] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1764.616955][T28992] loop7: detected capacity change from 0 to 2048 [ 1764.651948][T28994] loop2: detected capacity change from 0 to 2048 [ 1764.663245][T28994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1764.692897][ T4403] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1764.694115][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1764.694138][ T30] audit: type=1800 audit(1684.899:1025): pid=28994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.21859" name="file2" dev="loop2" ino=1416 res=0 errno=0 [ 1764.790646][T29002] loop8: detected capacity change from 0 to 4096 [ 1764.825718][T29007] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1764.852929][ T4403] usb 4-1: Using ep0 maxpacket: 16 [ 1764.855561][ T4403] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.855613][ T4403] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1764.855663][ T4403] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1764.855709][ T4403] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1764.855751][ T4403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.857777][ T4403] usb 4-1: config 0 descriptor?? [ 1764.873781][T29002] NILFS (loop8): bad btree node (ino=5, blocknr=4096): level = 0, flags = 0x0, nchildren = 0 [ 1764.873830][T29002] NILFS (loop8): error -5 preparing GC: cannot read source blocks [ 1765.134762][T29023] loop7: detected capacity change from 0 to 256 [ 1765.136402][T29023] exfat: Deprecated parameter 'namecase' [ 1765.136463][T29023] exfat: Deprecated parameter 'namecase' [ 1765.136526][T29023] exfat: Deprecated parameter 'namecase' [ 1765.208678][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1765.302232][ T4403] sony 0003:1345:3008.0025: global environment stack underflow [ 1765.302265][ T4403] sony 0003:1345:3008.0025: item 0 4 1 11 parsing failed [ 1765.302706][ T4403] sony 0003:1345:3008.0025: parse failed [ 1765.302798][ T4403] sony 0003:1345:3008.0025: probe with driver sony failed with error -22 [ 1765.340778][T29040] loop8: detected capacity change from 0 to 64 [ 1765.464620][T29043] loop7: detected capacity change from 0 to 2048 [ 1765.509663][ T4670] usb 4-1: USB disconnect, device number 49 [ 1765.518348][ T30] audit: type=1800 audit(1685.667:1026): pid=29051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.21886" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1766.633069][ T4670] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1766.793312][ T4670] usb 3-1: Using ep0 maxpacket: 16 [ 1766.795475][ T4670] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.795544][ T4670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.795594][ T4670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.795636][ T4670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1766.795697][ T4670] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1766.795740][ T4670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.805098][ T4670] usb 3-1: config 0 descriptor?? [ 1767.105863][T29146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1767.134797][ T6238] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1767.246442][ T4670] nintendo 0003:057E:2019.0026: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 1767.257352][T16113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1767.305478][ T6238] usb 9-1: Using ep0 maxpacket: 32 [ 1767.305684][ T4670] nintendo 0003:057E:2019.0026: Failed to get joycon info; ret=-38 [ 1767.306210][ T4670] nintendo 0003:057E:2019.0026: Failed to retrieve controller info; ret=-38 [ 1767.306245][ T4670] nintendo 0003:057E:2019.0026: Failed to initialize controller; ret=-38 [ 1767.307173][ T6238] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1767.307231][ T6238] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1767.307318][ T6238] usb 9-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1767.307360][ T6238] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.310337][ T6238] usb 9-1: config 0 descriptor?? [ 1767.312107][ T4670] nintendo 0003:057E:2019.0026: probe - fail = -38 [ 1767.312224][ T4670] nintendo 0003:057E:2019.0026: probe with driver nintendo failed with error -38 [ 1767.456507][ T4670] usb 3-1: USB disconnect, device number 32 [ 1767.752103][ T6238] logitech 0003:046D:CA04.0027: unexpected long global item [ 1767.752545][ T6238] logitech 0003:046D:CA04.0027: parse failed [ 1767.752647][ T6238] logitech 0003:046D:CA04.0027: probe with driver logitech failed with error -22 [ 1767.969080][ T6238] usb 9-1: USB disconnect, device number 5 [ 1771.351787][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1773.400970][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1777.499283][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1779.234032][T29191] set_capacity_and_notify: 2 callbacks suppressed [ 1779.234064][T29191] loop8: detected capacity change from 0 to 512 [ 1779.245214][T29191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022] [ 1779.245315][T29191] System zones: 1-12 [ 1779.248799][T29191] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.21904: Directory hole found for htree index block 0 [ 1779.248847][T29191] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1779.249469][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1779.249500][ C0] EXT4-fs (loop8): initial error at time 1698: dx_probe:791: inode 2 [ 1779.249553][ C0] EXT4-fs (loop8): last error at time 1698: dx_probe:791: inode 2 [ 1779.252239][T29191] EXT4-fs (loop8): Remounting filesystem read-only [ 1779.252291][T29191] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 1779.252376][T29191] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1779.253389][T29191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1779.349877][T23595] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1779.350162][T23595] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1779.350411][T23595] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1779.351182][T23595] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1779.351683][T23595] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1779.532949][T26348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.555896][T26922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1780.011694][T29198] wlan0 speed is unknown, defaulting to 1000 [ 1780.012701][T29198] xfrm0 speed is unknown, defaulting to 1000 [ 1780.013657][T29198] wlan0 speed is unknown, defaulting to 1000 [ 1780.222615][T22432] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1780.319853][T29198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.319944][T29198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.320080][T29198] bridge_slave_0: entered allmulticast mode [ 1780.320872][T29198] bridge_slave_0: entered promiscuous mode [ 1780.322541][T29198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.322616][T29198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.322706][T29198] bridge_slave_1: entered allmulticast mode [ 1780.323508][T29198] bridge_slave_1: entered promiscuous mode [ 1780.343903][T29198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.346195][T29198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.366105][T29198] team0: Port device team_slave_0 added [ 1780.367970][T29198] team0: Port device team_slave_1 added [ 1780.386503][T22432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1780.386563][T22432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.386616][T22432] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1780.386659][T22432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.389120][T22432] usb 3-1: config 0 descriptor?? [ 1780.390152][T29198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.390202][T29198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1780.390253][T29198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.400486][T29198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.400505][T29198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1780.400546][T29198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1780.438217][T29198] hsr_slave_0: entered promiscuous mode [ 1780.439019][T29198] hsr_slave_1: entered promiscuous mode [ 1780.439868][T29198] debugfs: 'hsr0' already exists in 'hsr' [ 1780.439893][T29198] Cannot create hsr debugfs directory [ 1780.833511][T22432] kye 0003:0458:5016.0028: control desc unexpectedly large [ 1780.838934][T22432] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0028/input/input167 [ 1780.908267][T22432] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0028/input/input168 [ 1780.933917][T22432] kye 0003:0458:5016.0028: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 1781.059501][T22432] usb 3-1: USB disconnect, device number 33 [ 1781.514442][T23595] Bluetooth: hci9: command tx timeout [ 1781.617582][T29198] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1781.645048][T29198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1781.645807][T29198] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1781.661439][T29198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1781.671605][T29198] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1781.703113][T29198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1781.709066][T29198] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1781.746520][T29198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1781.899842][T29198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.912655][T29198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1781.917319][T26922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.917402][T26922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1781.924710][T26922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.924791][T26922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.355119][T29198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1782.618830][T29198] veth0_vlan: entered promiscuous mode [ 1782.628316][T29198] veth1_vlan: entered promiscuous mode [ 1782.658488][T29198] veth0_macvtap: entered promiscuous mode [ 1782.662351][T29198] veth1_macvtap: entered promiscuous mode [ 1782.674999][T29198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1782.683456][T29198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.689973][T31654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.690048][T31654] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.690106][T31654] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.690165][T31654] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.776345][T29198] ieee80211 phy112: Selected rate control algorithm 'minstrel_ht' [ 1782.828931][T31654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.828965][T31654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.833389][T29198] ieee80211 phy113: Selected rate control algorithm 'minstrel_ht' [ 1782.876290][T16113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.876323][T16113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.048279][T29666] netlink: 24 bytes leftover after parsing attributes in process `syz.7.21932'. [ 1783.285352][ T6238] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1783.348630][T29684] loop5: detected capacity change from 0 to 2048 [ 1783.367755][T29684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1783.385829][ T30] audit: type=1800 audit(1702.409:1027): pid=29684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.21914" name="file2" dev="loop5" ino=1416 res=0 errno=0 [ 1783.448318][ T6238] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1783.449589][ T6238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1783.449646][ T6238] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1783.449697][ T6238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1783.451079][ T6238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1783.451132][ T6238] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1783.451180][ T6238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1783.452015][ T6238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1783.452089][ T6238] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1783.452137][ T6238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1783.452961][ T6238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1783.453016][ T6238] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1783.453073][ T6238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1783.453898][ T6238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1783.453953][ T6238] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1783.454003][ T6238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1783.459959][ T6238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1783.460014][ T6238] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1783.460070][ T6238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1783.460926][ T6238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1783.460981][ T6238] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1783.461031][ T6238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1783.461882][ T6238] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1783.461936][ T6238] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1783.461985][ T6238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1783.467730][ T6238] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1783.467776][ T6238] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1783.467815][ T6238] usb 3-1: Product: syz [ 1783.467844][ T6238] usb 3-1: Manufacturer: syz [ 1783.467873][ T6238] usb 3-1: SerialNumber: syz [ 1783.487084][ T6238] usb 3-1: config 0 descriptor?? [ 1783.507733][ T6238] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1783.650874][T26922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1783.734720][T23595] Bluetooth: hci9: command tx timeout [ 1783.753893][ T4404] usb 3-1: USB disconnect, device number 34 [ 1783.758095][ T4404] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1784.452517][T29763] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 1784.549165][T29771] loop5: detected capacity change from 0 to 512 [ 1784.554573][T29771] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.21938: bad orphan inode 17 [ 1784.554618][T29771] loop5: lost filesystem error report for type 5 error -117 [ 1784.555191][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1784.555223][ C0] EXT4-fs (loop5): initial error at time 1703: ext4_orphan_get:1425 [ 1784.555263][ C0] EXT4-fs (loop5): last error at time 1703: ext4_orphan_get:1425 [ 1784.557107][T29771] ext4_test_bit(bit=16, block=4) = 1 [ 1784.557133][T29771] is_bad_inode(inode)=0 [ 1784.557149][T29771] NEXT_ORPHAN(inode)=0 [ 1784.557164][T29771] max_ino=32 [ 1784.557179][T29771] i_nlink=1 [ 1784.558214][T29771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1784.608169][T29777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21939'. [ 1784.658729][T29198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1785.288479][T29825] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1785.570827][T29849] loop5: detected capacity change from 0 to 256 [ 1785.704092][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1785.752556][ T4403] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1785.913186][ T4403] usb 3-1: Using ep0 maxpacket: 16 [ 1785.914542][ T4403] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1785.914586][ T4403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.916364][ T4403] usb 3-1: config 0 descriptor?? [ 1785.956141][T23595] Bluetooth: hci9: command tx timeout [ 1786.365388][ T4403] hid_parser_main: 31 callbacks suppressed [ 1786.365420][ T4403] elecom 0003:056E:011C.0029: unknown main item tag 0x7 [ 1786.365461][ T4403] elecom 0003:056E:011C.0029: unknown global tag 0xd [ 1786.365493][ T4403] elecom 0003:056E:011C.0029: item 0 0 1 13 parsing failed [ 1786.365987][ T4403] elecom 0003:056E:011C.0029: probe with driver elecom failed with error -22 [ 1786.588652][ T4403] usb 3-1: USB disconnect, device number 35 [ 1789.209901][T29949] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 1789.404001][T29961] loop2: detected capacity change from 0 to 64 [ 1789.808590][T31646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1789.809451][ T4404] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1789.969440][ T4404] usb 3-1: Using ep0 maxpacket: 8 [ 1789.970739][ T4404] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1789.970796][ T4404] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1789.970840][ T4404] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1789.970878][ T4404] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1789.972593][ T4404] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1789.972637][ T4404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.972671][ T4404] usb 3-1: Product: syz [ 1789.972698][ T4404] usb 3-1: Manufacturer: syz [ 1789.972719][ T4404] usb 3-1: SerialNumber: syz [ 1789.974254][ T4404] usb 3-1: config 0 descriptor?? [ 1789.975217][T29968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1790.195740][ T4404] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1790.197302][ T4404] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input169 [ 1790.650590][ C0] powermate: config urb returned -71 [ 1790.650803][ C0] powermate: config urb returned -71 [ 1790.650818][ T6238] usb 3-1: USB disconnect, device number 36 [ 1790.650825][ C0] powermate: usb_submit_urb(config) failed [ 1790.650860][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1791.331212][T29996] loop2: detected capacity change from 0 to 512 [ 1791.332960][T29996] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1791.338396][T29996] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.21971: bad orphan inode 131083 [ 1791.338439][T29996] loop2: lost filesystem error report for type 5 error -117 [ 1791.339724][T29996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1791.422814][T27600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.668046][T30013] loop2: detected capacity change from 0 to 4096 [ 1791.670082][T30013] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1791.693732][T30013] ntfs3(loop2): ino=1a, mi_enum_attr [ 1791.693771][T30013] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1791.706534][T30013] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1791.847833][T31650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1792.616319][ T4670] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1792.789793][ T4670] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1792.789855][ T4670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1792.789903][ T4670] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1792.789953][ T4670] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1792.789996][ T4670] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1792.790037][ T4670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.792868][ T4670] usb 3-1: config 0 descriptor?? [ 1792.793490][T30038] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1793.229747][ T4670] lenovo 0003:17EF:6067.002A: unknown main item tag 0x1 [ 1793.229794][ T4670] lenovo 0003:17EF:6067.002A: unknown main item tag 0x2 [ 1793.229852][ T4670] lenovo 0003:17EF:6067.002A: item 0 4 0 9 parsing failed [ 1793.230402][ T4670] lenovo 0003:17EF:6067.002A: hid_parse failed [ 1793.230481][ T4670] lenovo 0003:17EF:6067.002A: probe with driver lenovo failed with error -22 [ 1793.449405][ T4670] usb 3-1: USB disconnect, device number 37 [ 1794.325884][T30073] loop2: detected capacity change from 0 to 1024 [ 1794.426076][ T30] audit: type=1326 audit(1712.749:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.426198][ T30] audit: type=1326 audit(1712.749:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.428449][ T30] audit: type=1326 audit(1712.749:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.428590][ T30] audit: type=1326 audit(1712.749:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.428738][ T30] audit: type=1326 audit(1712.749:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.428919][ T30] audit: type=1326 audit(1712.749:1033): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.429316][ T30] audit: type=1326 audit(1712.749:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.429443][ T30] audit: type=1326 audit(1712.749:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.429618][ T30] audit: type=1326 audit(1712.749:1036): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1794.429751][ T30] audit: type=1326 audit(1712.749:1037): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=30079 comm="syz.2.21989" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8d9de59 code=0x7ffc0000 [ 1795.757487][ T6000] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1795.757794][ T6000] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1795.758049][ T6000] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1795.758739][ T6000] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1795.759218][ T6000] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1795.953615][T31666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1796.003055][T30099] wlan0 speed is unknown, defaulting to 1000 [ 1796.003881][T30099] xfrm0 speed is unknown, defaulting to 1000 [ 1796.004575][T30099] wlan0 speed is unknown, defaulting to 1000 [ 1796.278846][ T6000] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1796.279109][ T6000] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1796.279354][ T6000] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1796.280035][ T6000] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1796.280482][ T6000] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1796.377649][T30099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.377777][T30099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.377923][T30099] bridge_slave_0: entered allmulticast mode [ 1796.379097][T30099] bridge_slave_0: entered promiscuous mode [ 1796.382901][T30099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.383022][T30099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.383172][T30099] bridge_slave_1: entered allmulticast mode [ 1796.384263][T30099] bridge_slave_1: entered promiscuous mode [ 1796.413872][T30099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.416677][T30099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1796.447872][T30099] team0: Port device team_slave_0 added [ 1796.451979][T30099] team0: Port device team_slave_1 added [ 1796.486471][T30099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.486499][T30099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.486554][T30099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.487925][T30099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.487963][T30099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.488013][T30099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.528595][T30099] hsr_slave_0: entered promiscuous mode [ 1796.529562][T30099] hsr_slave_1: entered promiscuous mode [ 1796.530222][T30099] debugfs: 'hsr0' already exists in 'hsr' [ 1796.530248][T30099] Cannot create hsr debugfs directory [ 1796.743007][T30169] wlan0 speed is unknown, defaulting to 1000 [ 1796.743741][T30169] xfrm0 speed is unknown, defaulting to 1000 [ 1796.744467][T30169] wlan0 speed is unknown, defaulting to 1000 [ 1797.123300][T30099] bond0: (slave netdevsim1): Releasing backup interface [ 1797.315591][T31656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1797.613246][T30169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.613311][T30169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.613514][T30169] bridge_slave_0: entered allmulticast mode [ 1797.614424][T30169] bridge_slave_0: entered promiscuous mode [ 1797.616229][T30169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.616319][T30169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.616549][T30169] bridge_slave_1: entered allmulticast mode [ 1797.617437][T30169] bridge_slave_1: entered promiscuous mode [ 1797.638282][T30169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.640846][T30169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.662836][T30169] team0: Port device team_slave_0 added [ 1797.664651][T30169] team0: Port device team_slave_1 added [ 1797.683896][T30169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1797.683922][T30169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1797.683971][T30169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1797.685132][T30169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1797.685151][T30169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1797.685187][T30169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1797.726267][T30169] hsr_slave_0: entered promiscuous mode [ 1797.727047][T30169] hsr_slave_1: entered promiscuous mode [ 1797.727490][T30169] debugfs: 'hsr0' already exists in 'hsr' [ 1797.727515][T30169] Cannot create hsr debugfs directory [ 1797.814915][T30099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1797.840554][T30099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1797.845468][T30099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1797.851447][T30099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1797.861771][T30099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1797.886522][T30099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1797.892948][T30099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1797.913575][T23595] Bluetooth: hci10: command tx timeout [ 1797.926433][T30099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1798.053015][T30169] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.108155][T30099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1798.344652][T30099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.352253][T31654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.352332][T31654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.357473][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.357536][T16113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.424720][T23595] Bluetooth: hci11: command tx timeout [ 1798.511716][T30169] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.684696][T30169] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.928484][T30169] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.086667][T30099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1799.164029][T30169] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1799.197716][T30169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1799.198615][T30169] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1799.228491][T30169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1799.229351][T30169] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1799.271272][T30169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1799.272225][T30169] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1799.294309][T30169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1799.379421][T30099] veth0_vlan: entered promiscuous mode [ 1799.389138][T30099] veth1_vlan: entered promiscuous mode [ 1799.392118][T30169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.410655][T30169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.419666][T31656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.419749][T31656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.426198][T30099] veth0_macvtap: entered promiscuous mode [ 1799.432653][T31666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.432716][T31666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.434189][T30099] veth1_macvtap: entered promiscuous mode [ 1799.474762][T30099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1799.484140][T30099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1799.495180][T31656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.495314][T31656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.495513][T31656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.495842][T31656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.595338][T30099] ieee80211 phy114: Selected rate control algorithm 'minstrel_ht' [ 1799.636286][T16113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.636320][T16113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.637915][T30099] ieee80211 phy115: Selected rate control algorithm 'minstrel_ht' [ 1799.704721][T31666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.704755][T31666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.925735][ T6000] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1799.926029][ T6000] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1799.926296][ T6000] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1799.927060][ T6000] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1799.927588][ T6000] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1800.075860][T23595] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1800.076142][T23595] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1800.076395][T23595] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1800.077125][T23595] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1800.077592][T23595] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1800.134933][T23595] Bluetooth: hci10: command tx timeout [ 1800.167326][T30169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.579154][T30713] wlan0 speed is unknown, defaulting to 1000 [ 1800.580156][T30713] xfrm0 speed is unknown, defaulting to 1000 [ 1800.581081][T30713] wlan0 speed is unknown, defaulting to 1000 [ 1800.648662][T23595] Bluetooth: hci11: command tx timeout [ 1800.745311][T30753] sctp: [Deprecated]: syz.4.21999 (pid 30753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1800.745311][T30753] Use struct sctp_sack_info instead [ 1800.774250][T30169] veth0_vlan: entered promiscuous mode [ 1800.793130][T30169] veth1_vlan: entered promiscuous mode [ 1800.830143][T30723] wlan0 speed is unknown, defaulting to 1000 [ 1800.831115][T30723] xfrm0 speed is unknown, defaulting to 1000 [ 1800.837102][T30169] veth0_macvtap: entered promiscuous mode [ 1800.846498][T30169] veth1_macvtap: entered promiscuous mode [ 1800.857981][T30169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1800.868294][T30169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1800.871115][T30723] wlan0 speed is unknown, defaulting to 1000 [ 1800.896822][T16113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.896901][T16113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.897022][T16113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.897459][T16113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.080681][T30169] ieee80211 phy116: Selected rate control algorithm 'minstrel_ht' [ 1801.139404][T16113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.139438][T16113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.165558][T30169] ieee80211 phy117: Selected rate control algorithm 'minstrel_ht' [ 1801.246151][T31654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.246186][T31654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.455128][T30713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.455681][T30713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.455856][T30713] bridge_slave_0: entered allmulticast mode [ 1801.459466][T30713] bridge_slave_0: entered promiscuous mode [ 1801.469356][T30713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.469436][T30713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.469578][T30713] bridge_slave_1: entered allmulticast mode [ 1801.470579][T30713] bridge_slave_1: entered promiscuous mode [ 1801.513447][T30713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.544929][T30713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.634893][T30713] team0: Port device team_slave_0 added [ 1801.653478][T30713] team0: Port device team_slave_1 added [ 1801.861294][T30713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.861323][T30713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.861373][T30713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.865811][T30713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.865835][T30713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.865885][T30713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.868465][T30723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.868579][T30723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.868725][T30723] bridge_slave_0: entered allmulticast mode [ 1801.869893][T30723] bridge_slave_0: entered promiscuous mode [ 1801.883324][T30723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.883452][T30723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.884025][T30723] bridge_slave_1: entered allmulticast mode [ 1801.887103][T30723] bridge_slave_1: entered promiscuous mode [ 1801.934755][T30723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.962203][T30723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.971267][T30713] hsr_slave_0: entered promiscuous mode [ 1801.972275][T30713] hsr_slave_1: entered promiscuous mode [ 1801.973004][T30713] debugfs: 'hsr0' already exists in 'hsr' [ 1801.973035][T30713] Cannot create hsr debugfs directory [ 1802.019290][T30723] team0: Port device team_slave_0 added [ 1802.078071][T30723] team0: Port device team_slave_1 added [ 1802.098634][T31654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1802.099448][T23595] Bluetooth: hci12: command tx timeout [ 1802.124513][T30723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1802.124539][T30723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.124596][T30723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1802.135246][T30723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.135271][T30723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.135317][T30723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1802.229775][ T6000] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1