last executing test programs: 5.559779682s ago: executing program 2 (id=608): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 4.978194552s ago: executing program 2 (id=612): timer_create(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092e130081b030102d52a0000000109022200010000000009040000000e010000082403"], 0x0) 4.651547646s ago: executing program 4 (id=614): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x9, 0x5, 0x2, 0x40004}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}}, 0x0) 4.544410864s ago: executing program 3 (id=616): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 4.345267183s ago: executing program 4 (id=617): r0 = semget(0x0, 0x5, 0x6b4) semop(r0, &(0x7f0000000040)=[{0x2, 0xfffc, 0x1000}, {0x2, 0x7fff}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x101, 0xf]) 4.344496509s ago: executing program 3 (id=618): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 3.748099374s ago: executing program 4 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)={0x18, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 3.711856445s ago: executing program 3 (id=622): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495300000000001000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000b00000024000000040042"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.592840959s ago: executing program 1 (id=624): r0 = socket(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4c26, 0x5, @mcast2, 0xfffffffa}, 0x6b) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) 3.404194936s ago: executing program 4 (id=626): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e000047888035", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.292124466s ago: executing program 3 (id=627): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020400000203"]}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="ee0d06"], 0x0}, 0x0) 3.279971032s ago: executing program 4 (id=628): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1}, {0x12, 0x2d, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.279300454s ago: executing program 1 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 3.194958034s ago: executing program 2 (id=630): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x4, &(0x7f0000000280)={0x4, 0x8, 0xffffffff}, 0x0) 3.11606366s ago: executing program 0 (id=631): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) 3.014194322s ago: executing program 1 (id=632): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r1, 0x405, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2.980771535s ago: executing program 4 (id=633): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0xc8, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xff}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000412}, 0x46810) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1) symlinkat(0x0, r1, &(0x7f0000000140)='./file0\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000004880)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @local, 0xc}, 0x1c, 0x0}}], 0x1, 0x240880d1) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, r2, 0x0, 0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r4 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c609040000000101"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$uac3(r4, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_type={0x1}]}, 0x58}, 0x1, 0x7}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) 2.923800408s ago: executing program 1 (id=634): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907", 0x4) 2.919679659s ago: executing program 0 (id=635): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff020003000001c9", 0x1e5) 2.854625497s ago: executing program 2 (id=636): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 2.594996322s ago: executing program 0 (id=637): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.594849103s ago: executing program 1 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.012849251s ago: executing program 2 (id=639): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r1) 1.790289893s ago: executing program 1 (id=640): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x23, 0x28, {0x28, 0x8, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.618059232s ago: executing program 0 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c0000200002801400020020010000000000000000000000000002050009000400000008000400"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) 1.617410727s ago: executing program 2 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x4, 0x4, 0x66, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.210045887s ago: executing program 3 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x5}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x81}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x4, 0x6, 0x1, 0x7fffffff, 0x3}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048801}, 0x0) 631.629336ms ago: executing program 3 (id=644): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 589.458297ms ago: executing program 0 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008", @ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x2c, r1, 0x301, 0x70bd25, 0x25dfdbfe, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x90) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 61.677629][ T5273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.705330][ T5273] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. syzkaller login: [ 90.635100][ T5599] cgroup: Unknown subsys name 'net' [ 90.875186][ T5599] cgroup: Unknown subsys name 'cpuset' [ 90.930070][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.812997][ T10] cfg80211: failed to load regulatory.db [ 93.000098][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.691639][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.738632][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.743100][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.748368][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.762555][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.775888][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.788274][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.812935][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.821774][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.830551][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.860034][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.866689][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.873607][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.876430][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.887909][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.893462][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.913544][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.921018][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.926109][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.941676][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.941840][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.957200][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.967282][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.007140][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.084864][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.121344][ T5625] Bluetooth: hci2: command tx timeout [ 98.121350][ T5629] Bluetooth: hci4: command tx timeout [ 98.199911][ T5625] Bluetooth: hci3: command tx timeout [ 98.199926][ T5629] Bluetooth: hci0: command tx timeout [ 98.279550][ T5625] Bluetooth: hci1: command tx timeout [ 98.755413][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.756751][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.756979][ T5620] bridge_slave_0: entered allmulticast mode [ 98.760663][ T5620] bridge_slave_0: entered promiscuous mode [ 98.845746][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.846038][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.846570][ T5620] bridge_slave_1: entered allmulticast mode [ 98.851760][ T5620] bridge_slave_1: entered promiscuous mode [ 98.962534][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.962842][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.963263][ T5623] bridge_slave_0: entered allmulticast mode [ 98.966085][ T5623] bridge_slave_0: entered promiscuous mode [ 99.055131][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.055468][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.055748][ T5623] bridge_slave_1: entered allmulticast mode [ 99.058147][ T5623] bridge_slave_1: entered promiscuous mode [ 99.068758][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.070674][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.071419][ T5621] bridge_slave_0: entered allmulticast mode [ 99.085068][ T5621] bridge_slave_0: entered promiscuous mode [ 99.115735][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.176833][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.177086][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.177501][ T5621] bridge_slave_1: entered allmulticast mode [ 99.182638][ T5621] bridge_slave_1: entered promiscuous mode [ 99.205752][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.207412][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.209097][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.217037][ T5624] bridge_slave_0: entered allmulticast mode [ 99.227149][ T5624] bridge_slave_0: entered promiscuous mode [ 99.315342][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.315577][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.316016][ T5624] bridge_slave_1: entered allmulticast mode [ 99.318406][ T5624] bridge_slave_1: entered promiscuous mode [ 99.320629][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.321493][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.322771][ T5622] bridge_slave_0: entered allmulticast mode [ 99.331434][ T5622] bridge_slave_0: entered promiscuous mode [ 99.363673][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.431106][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.431357][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.431551][ T5622] bridge_slave_1: entered allmulticast mode [ 99.433998][ T5622] bridge_slave_1: entered promiscuous mode [ 99.444708][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.464431][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.481241][ T5620] team0: Port device team_slave_0 added [ 99.555695][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.558916][ T5620] team0: Port device team_slave_1 added [ 99.581070][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.663763][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.668709][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.688684][ T5623] team0: Port device team_slave_0 added [ 99.751507][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.755564][ T5623] team0: Port device team_slave_1 added [ 99.758808][ T5621] team0: Port device team_slave_0 added [ 99.767763][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.767804][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.767879][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.878442][ T5621] team0: Port device team_slave_1 added [ 99.882537][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.882589][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.882666][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.905097][ T5624] team0: Port device team_slave_0 added [ 99.995970][ T5624] team0: Port device team_slave_1 added [ 99.999302][ T5622] team0: Port device team_slave_0 added [ 100.008931][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.008970][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.009047][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.090596][ T5622] team0: Port device team_slave_1 added [ 100.092189][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.092200][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.092220][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.094097][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.094107][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.094126][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.199447][ T5625] Bluetooth: hci4: command tx timeout [ 100.210447][ T5625] Bluetooth: hci2: command tx timeout [ 100.233991][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.234003][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.234024][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.285556][ T5625] Bluetooth: hci0: command tx timeout [ 100.285572][ T5629] Bluetooth: hci3: command tx timeout [ 100.359541][ T5629] Bluetooth: hci1: command tx timeout [ 100.682084][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.682097][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.682118][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.775831][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.775845][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.775867][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.778304][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.778315][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.778334][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.857272][ T5620] hsr_slave_0: entered promiscuous mode [ 100.871080][ T5620] hsr_slave_1: entered promiscuous mode [ 100.910315][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.910329][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.910349][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.012874][ T5623] hsr_slave_0: entered promiscuous mode [ 101.014441][ T5623] hsr_slave_1: entered promiscuous mode [ 101.015877][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 101.015964][ T5623] Cannot create hsr debugfs directory [ 101.098466][ T5621] hsr_slave_0: entered promiscuous mode [ 101.102731][ T5621] hsr_slave_1: entered promiscuous mode [ 101.107374][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 101.107435][ T5621] Cannot create hsr debugfs directory [ 101.198519][ T5624] hsr_slave_0: entered promiscuous mode [ 101.204249][ T5624] hsr_slave_1: entered promiscuous mode [ 101.210077][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 101.210142][ T5624] Cannot create hsr debugfs directory [ 101.294434][ T5622] hsr_slave_0: entered promiscuous mode [ 101.296037][ T5622] hsr_slave_1: entered promiscuous mode [ 101.297335][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 101.297368][ T5622] Cannot create hsr debugfs directory [ 102.280596][ T5629] Bluetooth: hci2: command tx timeout [ 102.280617][ T5625] Bluetooth: hci4: command tx timeout [ 102.361603][ T5629] Bluetooth: hci3: command tx timeout [ 102.361611][ T5625] Bluetooth: hci0: command tx timeout [ 102.409166][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.439925][ T5625] Bluetooth: hci1: command tx timeout [ 102.474081][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.491158][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.526872][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.537108][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.574845][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.611732][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.654211][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.854056][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.894286][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.898460][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.935661][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.976022][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.017368][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.023077][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.054926][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.223251][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.267063][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.274849][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.315170][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.328250][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.356421][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.394404][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.454386][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.611265][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.668832][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.695305][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.727741][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.741999][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.784560][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.823347][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.863779][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.945026][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.046654][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.083958][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.108748][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.145799][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.179239][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.224356][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.229088][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.276978][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.308716][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.361090][ T5625] Bluetooth: hci2: command tx timeout [ 104.369989][ T5625] Bluetooth: hci4: command tx timeout [ 104.412693][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.419124][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.447453][ T5625] Bluetooth: hci3: command tx timeout [ 104.452260][ T5625] Bluetooth: hci0: command tx timeout [ 104.520451][ T5625] Bluetooth: hci1: command tx timeout [ 104.538830][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.538952][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.567166][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.743551][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.804484][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.830582][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.830818][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.888361][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.888535][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.990241][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.091722][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.091965][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.125214][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.183685][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.183891][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.346021][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.384715][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.413962][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.414139][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.497916][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.510503][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.635179][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.723116][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.724361][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.877240][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.877430][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.106635][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.725974][ T5620] veth0_vlan: entered promiscuous mode [ 106.793452][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.860811][ T5620] veth1_vlan: entered promiscuous mode [ 107.241956][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.341146][ T5620] veth0_macvtap: entered promiscuous mode [ 107.417676][ T5620] veth1_macvtap: entered promiscuous mode [ 107.594100][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.649075][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.708088][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.751581][ T5622] veth0_vlan: entered promiscuous mode [ 107.784842][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.785202][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.816476][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.848308][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.873798][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.895888][ T5622] veth1_vlan: entered promiscuous mode [ 108.025331][ T5624] veth0_vlan: entered promiscuous mode [ 108.355539][ T5624] veth1_vlan: entered promiscuous mode [ 108.387873][ T5623] veth0_vlan: entered promiscuous mode [ 108.543577][ T5622] veth0_macvtap: entered promiscuous mode [ 108.574293][ T5623] veth1_vlan: entered promiscuous mode [ 108.591465][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.591491][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.631716][ T5621] veth0_vlan: entered promiscuous mode [ 108.633959][ T5622] veth1_macvtap: entered promiscuous mode [ 108.787283][ T5621] veth1_vlan: entered promiscuous mode [ 108.843815][ T4701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.843837][ T4701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.879119][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.892734][ T5624] veth0_macvtap: entered promiscuous mode [ 108.962792][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.964908][ T5624] veth1_macvtap: entered promiscuous mode [ 109.024722][ T1131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.029045][ T5623] veth0_macvtap: entered promiscuous mode [ 109.050818][ T1131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.056459][ T1131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.096938][ T1131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.181127][ T5623] veth1_macvtap: entered promiscuous mode [ 109.209299][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.324179][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.366374][ T5621] veth0_macvtap: entered promiscuous mode [ 109.553968][ T5621] veth1_macvtap: entered promiscuous mode [ 109.641228][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.695814][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.701383][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.777479][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.789723][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.837146][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.109939][ T4701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.109958][ T4701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.110235][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.167594][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.167843][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.271900][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.347105][ T5602] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 110.424054][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.504133][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.587306][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.587340][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 110.587367][ T5602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 110.587410][ T5602] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 110.587431][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.663985][ T5602] usb 4-1: config 0 descriptor?? [ 110.686178][ T5810] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.819134][ T2301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.819170][ T2301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.830410][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.901862][ T1142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.098326][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.116259][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.236676][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.236698][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.397350][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397389][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397416][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397455][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397483][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397510][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397555][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397583][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397611][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.397639][ T5602] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 111.603953][ T5602] asus 0003:0B05:17E0.0001: hidraw0: USB HID v0.08 Device [HID 0b05:17e0] on usb-dummy_hcd.3-1/input0 [ 111.973866][ T5602] usb 4-1: USB disconnect, device number 2 [ 112.546023][ T4701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.546045][ T4701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.693941][ T4701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.693961][ T4701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.880055][ T5820] loop1: detected capacity change from 0 to 16 [ 112.971420][ T5820] erofs (device loop1): mounted with root inode @ nid 36. [ 113.199110][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.199133][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.394550][ T5822] loop3: detected capacity change from 0 to 512 [ 113.439296][ T5822] ======================================================= [ 113.439296][ T5822] WARNING: The mand mount option has been deprecated and [ 113.439296][ T5822] and is ignored by this kernel. Remove the mand [ 113.439296][ T5822] option from the mount to silence this warning. [ 113.439296][ T5822] ======================================================= [ 113.651096][ T4701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.651117][ T4701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.739295][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 113.835027][ T5824] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.986431][ T5826] vlan2: entered promiscuous mode [ 113.986454][ T5826] gretap0: entered promiscuous mode [ 114.163811][ T5822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.163943][ T5822] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.389710][ T4701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.389731][ T4701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.832440][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.336021][ T5840] bridge_slave_0: left allmulticast mode [ 115.336073][ T5840] bridge_slave_0: left promiscuous mode [ 115.358428][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.700554][ T5840] bridge_slave_1: left allmulticast mode [ 115.700588][ T5840] bridge_slave_1: left promiscuous mode [ 115.700869][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.045515][ T5840] bond0: (slave bond_slave_0): Releasing backup interface [ 116.207546][ T5840] bond0: (slave bond_slave_1): Releasing backup interface [ 116.364369][ T5840] team0: Port device team_slave_0 removed [ 116.411847][ T5840] team0: Port device team_slave_1 removed [ 116.413069][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.413094][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.458299][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.458320][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.478087][ T5840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.760765][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.967997][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.007013][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.007061][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.075868][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 117.075900][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.075922][ T10] usb 3-1: Product: syz [ 117.075937][ T10] usb 3-1: Manufacturer: syz [ 117.075961][ T10] usb 3-1: SerialNumber: syz [ 117.527023][ T5876] loop4: detected capacity change from 0 to 4096 [ 117.775950][ T10] usb 3-1: selecting invalid altsetting 1 [ 118.001050][ T10] usb 3-1: unit 6 not found! [ 118.508786][ T10] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 119.460205][ T5887] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.450564][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 120.557015][ T5897] loop2: detected capacity change from 0 to 512 [ 120.750846][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.904302][ T5897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.904434][ T5897] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.908350][ T5906] loop0: detected capacity change from 0 to 128 [ 121.050270][ T10] usb 3-1: USB disconnect, device number 2 [ 121.100379][ T5906] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.189835][ T5906] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.497331][ T5897] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.37: bg 0: bad block bitmap checksum [ 121.612878][ T5897] Quota error (device loop2): write_blk: dquota write failed [ 121.613001][ T5897] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 121.613041][ T5897] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.37: Failed to acquire dquot type 1 [ 121.727325][ T5621] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.913849][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.960740][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.079439][ T5602] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.497483][ T5927] loop4: detected capacity change from 0 to 16 [ 123.159740][ T5927] erofs (device loop4): mounted with root inode @ nid 36. [ 123.342491][ T5602] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 123.342522][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.342541][ T5602] usb 4-1: Product: syz [ 123.342555][ T5602] usb 4-1: Manufacturer: syz [ 123.342569][ T5602] usb 4-1: SerialNumber: syz [ 123.629254][ T5602] usb 4-1: config 0 descriptor?? [ 123.736887][ T5936] fuse: Bad value for 'user_id' [ 123.736908][ T5936] fuse: Bad value for 'user_id' [ 123.870189][ T5602] ch341 4-1:0.0: ch341-uart converter detected [ 124.507348][ T5602] usb 4-1: failed to send control message: -71 [ 124.507402][ T5602] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 124.817479][ T5602] usb 4-1: USB disconnect, device number 3 [ 124.912596][ T5602] ch341 4-1:0.0: device disconnected [ 125.798451][ T5966] loop1: detected capacity change from 0 to 16 [ 126.255021][ T5966] erofs (device loop1): mounted with root inode @ nid 36. [ 126.858929][ T5978] xt_limit: Overflow, try lower: 324382443/0 [ 127.323868][ T5991] loop1: detected capacity change from 0 to 16 [ 128.028674][ T5991] erofs (device loop1): mounted with root inode @ nid 36. [ 128.910461][ T6003] loop4: detected capacity change from 0 to 1024 [ 128.940738][ T6003] EXT4-fs: Ignoring removed orlov option [ 129.151603][ T6003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.284377][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.658604][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'. [ 129.886004][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.336317][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 130.336342][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 130.589569][ T6042] loop4: detected capacity change from 0 to 16 [ 131.214349][ T6042] erofs (device loop4): mounted with root inode @ nid 36. [ 131.850841][ T6051] loop0: detected capacity change from 0 to 512 [ 131.877076][ T6051] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.877096][ T6051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.004259][ T6051] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.96: bad orphan inode 131083 [ 132.004438][ T6051] loop0: lost filesystem error report for type 5 error -117 [ 132.009436][ C0] EXT4-fs (loop0): initial error at time 1781098664: ext4_orphan_get:1425 [ 132.009491][ C0] EXT4-fs (loop0): last error at time 1781098664: ext4_orphan_get:1425 [ 132.054773][ T6051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.070618][ T6022] loop3: detected capacity change from 0 to 32768 [ 132.175004][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 132.285040][ T6051] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.96: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 132.355813][ T6067] loop1: detected capacity change from 0 to 8 [ 132.470860][ T6051] EXT4-fs error (device loop0) in ext4_delete_entry:2744: Corrupt filesystem [ 132.602457][ T6022] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 132.603279][ T6022] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 132.627361][ T6076] loop2: detected capacity change from 0 to 128 [ 132.663977][ T6022] XFS (loop3): log mount failed [ 132.668133][ T6067] SQUASHFS error: Failed to read block 0x2d0: -5 [ 132.668157][ T6067] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 132.690975][ T6067] SQUASHFS error: Unable to read directory block [2ce:0] [ 132.768773][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.065243][ T6081] loop4: detected capacity change from 0 to 16 [ 133.375455][ T6081] erofs (device loop4): mounted with root inode @ nid 36. [ 133.736805][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.876563][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.843743][ T6091] lo: entered promiscuous mode [ 134.844629][ T6091] tunl0: entered promiscuous mode [ 134.863723][ T6091] gre0: entered promiscuous mode [ 134.864852][ T6091] gretap0: entered promiscuous mode [ 134.884052][ T6091] erspan0: entered promiscuous mode [ 134.898738][ T6091] ip_vti0: entered promiscuous mode [ 134.905946][ T6091] ip6_vti0: entered promiscuous mode [ 134.908176][ T6091] sit0: entered promiscuous mode [ 134.935288][ T6091] ip6tnl0: entered promiscuous mode [ 134.936219][ T6091] ip6gre0: entered promiscuous mode [ 134.937048][ T6091] syz_tun: entered promiscuous mode [ 134.937926][ T6091] ip6gretap0: entered promiscuous mode [ 134.949881][ T6091] bridge0: entered promiscuous mode [ 134.987899][ T6093] loop0: detected capacity change from 0 to 1024 [ 135.034718][ T6093] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 135.092915][ T6091] vcan0: entered promiscuous mode [ 135.093832][ T6091] bond0: entered promiscuous mode [ 135.093848][ T6091] bond_slave_0: entered promiscuous mode [ 135.094019][ T6091] bond_slave_1: entered promiscuous mode [ 135.166203][ T6091] team0: entered promiscuous mode [ 135.166225][ T6091] team_slave_0: entered promiscuous mode [ 135.166446][ T6091] team_slave_1: entered promiscuous mode [ 135.228215][ T6091] dummy0: entered promiscuous mode [ 135.313332][ T6091] nlmon0: entered promiscuous mode [ 135.382590][ T6091] batadv0: entered promiscuous mode [ 135.398880][ T6091] vxcan0: entered promiscuous mode [ 135.405882][ T6091] vxcan1: entered promiscuous mode [ 135.408532][ T6091] veth0: entered promiscuous mode [ 135.431905][ T6093] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.111: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.432062][ T6093] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 135.435825][ T6091] veth1: entered promiscuous mode [ 135.436670][ T6091] wg0: entered promiscuous mode [ 135.437817][ T6091] wg1: entered promiscuous mode [ 135.439960][ C0] EXT4-fs (loop0): initial error at time 1781098668: ext4_map_blocks:791: inode 3: block 2 [ 135.440007][ C0] EXT4-fs (loop0): last error at time 1781098668: ext4_map_blocks:791: inode 3: block 2 [ 135.514310][ T6093] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 135.514376][ T6093] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.111: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.514411][ T6093] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 135.523291][ T6093] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 135.523356][ T6093] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.111: Failed to acquire dquot type 0 [ 135.523419][ T6093] loop0: lost filesystem error report for type 5 error -117 [ 135.532246][ T6093] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6434: Corrupt filesystem [ 135.532318][ T6093] loop0: lost filesystem error report for type 5 error -117 [ 135.615341][ T6091] wg2: entered promiscuous mode [ 135.650844][ T6093] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.111: mark_inode_dirty error [ 135.650893][ T6093] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 135.693034][ T6091] veth0_to_bridge: entered promiscuous mode [ 135.702492][ T6093] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 135.766550][ T6091] veth1_to_bridge: entered promiscuous mode [ 135.805032][ T6093] EXT4-fs (loop0): 1 orphan inode deleted [ 135.822655][ T6091] veth0_to_bond: entered promiscuous mode [ 135.834218][ T6091] veth1_to_bond: entered promiscuous mode [ 135.855502][ T6091] veth0_to_team: entered promiscuous mode [ 135.857393][ T6091] veth1_to_team: entered promiscuous mode [ 135.859109][ T6091] veth0_to_batadv: entered promiscuous mode [ 135.884879][ T6091] batadv_slave_0: entered promiscuous mode [ 135.885792][ T6091] veth1_to_batadv: entered promiscuous mode [ 135.897814][ T6091] batadv_slave_1: entered promiscuous mode [ 135.912500][ T6091] xfrm0: entered promiscuous mode [ 135.913317][ T1144] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.913474][ T6091] veth0_to_hsr: entered promiscuous mode [ 135.914836][ T6091] veth1_to_hsr: entered promiscuous mode [ 135.916250][ T6091] hsr0: entered promiscuous mode [ 135.917154][ T6091] veth1_virt_wifi: entered promiscuous mode [ 135.917964][ T6091] veth0_virt_wifi: entered promiscuous mode [ 135.952565][ T6091] virt_wifi0: entered promiscuous mode [ 135.988265][ T1144] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 136.004177][ T1144] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 136.004250][ T1144] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 0 [ 136.004274][ T1144] loop0: lost filesystem error report for type 5 error -117 [ 136.065052][ T6093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.106452][ T6091] vlan0: entered promiscuous mode [ 136.109560][ T6091] vlan1: entered promiscuous mode [ 136.110844][ T6091] macvlan0: entered promiscuous mode [ 136.132875][ T6091] macvlan1: entered promiscuous mode [ 136.134856][ T6091] ipvlan0: entered promiscuous mode [ 136.153924][ T6091] ipvlan1: entered promiscuous mode [ 136.192317][ T6091] macvtap0: entered promiscuous mode [ 136.194541][ T6091] macsec0: entered promiscuous mode [ 136.195669][ T6091] geneve0: entered promiscuous mode [ 136.196498][ T6091] geneve1: entered promiscuous mode [ 136.197394][ T6091] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 136.198747][ T6091] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 136.261243][ T6093] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 136.264874][ T6106] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 136.267838][ T6106] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.111: lblock 0 mapped to illegal pblock 48 (length 1) [ 136.274193][ T6106] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 136.274341][ T6106] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 136.365653][ T6091] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 136.387235][ T6091] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 136.404103][ T6091] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 136.420644][ T6091] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 136.534013][ T6096] loop1: detected capacity change from 0 to 32768 [ 136.687490][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 136.824981][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.194810][ T6128] vivid-003: ================= START STATUS ================= [ 140.194899][ T6128] vivid-003: Radio HW Seek Mode: Bounded [ 140.194950][ T6128] vivid-003: Radio Programmable HW Seek: false [ 140.194973][ T6128] vivid-003: RDS Rx I/O Mode: Block I/O [ 140.194994][ T6128] vivid-003: Generate RBDS Instead of RDS: false [ 140.195016][ T6128] vivid-003: RDS Reception: true [ 140.195036][ T6128] vivid-003: RDS Program Type: 0 inactive [ 140.195063][ T6128] vivid-003: RDS PS Name: inactive [ 140.195088][ T6128] vivid-003: RDS Radio Text: inactive [ 140.195113][ T6128] vivid-003: RDS Traffic Announcement: false inactive [ 140.195140][ T6128] vivid-003: RDS Traffic Program: false inactive [ 140.195166][ T6128] vivid-003: RDS Music: false inactive [ 140.195192][ T6128] vivid-003: ================== END STATUS ================== [ 140.464367][ T6134] loop3: detected capacity change from 0 to 2048 [ 140.621707][ T6134] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 140.862143][ T6134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.121606][ T6143] Bluetooth: MGMT ver 1.23 [ 141.730647][ T6150] 9p: Bad value for 'rfdno' [ 141.967565][ T6155] loop0: detected capacity change from 0 to 4096 [ 142.604920][ T6172] loop2: detected capacity change from 0 to 16 [ 143.562683][ T6172] erofs (device loop2): mounted with root inode @ nid 36. [ 143.634842][ T6155] ntfs3(loop0): Failed to initialize $Secure::$SII (-22). [ 143.634992][ T6155] ntfs3(loop0): Failed to initialize $Secure (-22). [ 143.728231][ T6177] loop3: detected capacity change from 0 to 128 [ 143.752432][ T6177] EXT4-fs: Ignoring removed i_version option [ 143.921516][ T6177] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.925844][ T6177] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.005973][ T6177] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.143: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 144.081966][ T6177] EXT4-fs (loop3): Remounting filesystem read-only [ 144.122661][ T6185] loop1: detected capacity change from 0 to 256 [ 144.138417][ T6185] exfat: Bad value for 'gid' [ 144.138442][ T6185] exfat: Bad value for 'gid' [ 144.168991][ T5620] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.241344][ T6187] team0: Port device xfrm0 added [ 144.335478][ T6189] loop2: detected capacity change from 0 to 256 [ 144.765198][ T6189] FAT-fs (loop2): Directory bread(block 64) failed [ 144.765239][ T6189] FAT-fs (loop2): Directory bread(block 65) failed [ 144.765377][ T6189] FAT-fs (loop2): Directory bread(block 66) failed [ 144.765403][ T6189] FAT-fs (loop2): Directory bread(block 67) failed [ 144.765514][ T6189] FAT-fs (loop2): Directory bread(block 68) failed [ 144.765540][ T6189] FAT-fs (loop2): Directory bread(block 69) failed [ 144.765640][ T6189] FAT-fs (loop2): Directory bread(block 70) failed [ 144.765664][ T6189] FAT-fs (loop2): Directory bread(block 71) failed [ 144.765782][ T6189] FAT-fs (loop2): Directory bread(block 72) failed [ 144.765806][ T6189] FAT-fs (loop2): Directory bread(block 73) failed [ 145.075326][ T6204] loop4: detected capacity change from 0 to 512 [ 145.180524][ T32] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 145.441282][ T6204] EXT4-fs (loop4): 1 orphan inode deleted [ 145.477373][ T6204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.484058][ T6204] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.533251][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 145.533289][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 145.533336][ T32] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 145.533362][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.545506][ T269] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 145.545619][ T269] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 145.618302][ T32] usb 4-1: config 0 descriptor?? [ 145.632000][ T6202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.992710][ T32] hid_parser_main: 30 callbacks suppressed [ 146.993360][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993399][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993428][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993474][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993503][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993531][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993560][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993588][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993616][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 146.993643][ T32] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 147.203600][ T32] greenasia 0003:0E8F:0012.0002: hidraw0: USB HID v0.09 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 147.203654][ T32] greenasia 0003:0E8F:0012.0002: no inputs found [ 147.246379][ T32] usb 4-1: USB disconnect, device number 4 [ 147.409827][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.411017][ T6226] loop0: detected capacity change from 0 to 4096 [ 147.483180][ T6226] NILFS (loop0): invalid segment: Checksum error in segment payload [ 147.483206][ T6226] NILFS (loop0): trying rollback from an earlier position [ 147.531757][ T6228] fido_id[6228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 147.612846][ T6232] loop3: detected capacity change from 0 to 512 [ 147.670030][ T6232] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.168: missing EA_INODE flag [ 147.670070][ T6232] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 147.681982][ C0] EXT4-fs (loop3): initial error at time 1781098680: ext4_xattr_inode_iget:441: inode 12 [ 147.682131][ C0] EXT4-fs (loop3): last error at time 1781098680: ext4_xattr_inode_iget:441: inode 12 [ 147.732589][ T6232] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.168: error while reading EA inode 12 err=-117 [ 147.732626][ T6232] loop3: lost filesystem error report for type 5 error -117 [ 147.784551][ T6226] NILFS (loop0): recovery complete [ 147.806372][ T6232] EXT4-fs (loop3): 1 orphan inode deleted [ 147.808188][ T6238] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.832651][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.864933][ T6232] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #2: comm syz.3.168: invalid size [ 148.004402][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.642752][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.814192][ T6256] loop2: detected capacity change from 0 to 8 [ 148.850865][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 148.861378][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.969999][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.994426][ T32] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 148.994459][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.994482][ T32] usb 5-1: Product: syz [ 148.994498][ T32] usb 5-1: Manufacturer: syz [ 148.994514][ T32] usb 5-1: SerialNumber: syz [ 149.115613][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.224146][ T38] audit: type=1326 audit(1781098682.016:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.224199][ T38] audit: type=1326 audit(1781098682.086:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.224238][ T38] audit: type=1326 audit(1781098682.086:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.228652][ T38] audit: type=1326 audit(1781098682.086:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.228707][ T38] audit: type=1326 audit(1781098682.086:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.228757][ T38] audit: type=1326 audit(1781098682.086:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.228806][ T38] audit: type=1326 audit(1781098682.086:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.228851][ T38] audit: type=1326 audit(1781098682.086:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.228898][ T38] audit: type=1326 audit(1781098682.086:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.178" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 149.319388][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 149.395664][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 149.395721][ T9] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 149.395748][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.554453][ T9] usb 4-1: config 0 descriptor?? [ 149.938958][ T32] snd-ua101 5-1:1.1: sample format descriptor not found [ 149.939000][ T32] snd-ua101 5-1:1.0: invalid num_altsetting [ 149.983770][ T6268] loop1: detected capacity change from 0 to 2048 [ 150.142160][ T9] greenasia 0003:0E8F:0012.0003: bogus close delimiter [ 150.142184][ T9] greenasia 0003:0E8F:0012.0003: item 0 0 2 10 parsing failed [ 150.144476][ T9] greenasia 0003:0E8F:0012.0003: parse failed [ 150.144559][ T9] greenasia 0003:0E8F:0012.0003: probe with driver greenasia failed with error -22 [ 150.357589][ T9] usb 4-1: USB disconnect, device number 5 [ 150.622010][ T32] usb 5-1: USB disconnect, device number 2 [ 150.820667][ T6285] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.156879][ T6285] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 151.156920][ T6285] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 151.201250][ T5602] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.354984][ T5602] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.366851][ T5602] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.366880][ T5602] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.399494][ T5602] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 151.399522][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.399539][ T5602] usb 1-1: Product: syz [ 151.399559][ T5602] usb 1-1: Manufacturer: syz [ 151.399613][ T5602] usb 1-1: SerialNumber: syz [ 151.461764][ T6285] Remounting filesystem read-only [ 151.547362][ T5602] usb 1-1: selecting invalid altsetting 1 [ 151.587988][ T5602] usb 1-1: unit 6 not found! [ 152.227976][ T5602] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 152.347138][ T6320] capability: warning: `syz.3.191' uses 32-bit capabilities (legacy support in use) [ 152.430966][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 152.505458][ T5602] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 152.536688][ T5602] usb 1-1: USB disconnect, device number 2 [ 152.612645][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.689949][ T6327] loop4: detected capacity change from 0 to 1024 [ 152.716008][ T6327] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.716118][ T6327] EXT4-fs: Ignoring removed bh option [ 152.788628][ T6331] capability: warning: `syz.2.196' uses deprecated v2 capabilities in a way that may be insecure [ 152.975636][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.105673][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.239223][ T6345] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 153.297509][ T6344] loop0: detected capacity change from 0 to 2048 [ 153.439494][ T6347] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.850180][ T6360] loop3: detected capacity change from 0 to 256 [ 153.980061][ T6360] exfat: Deprecated parameter 'utf8' [ 153.986558][ T6360] exfat: Deprecated parameter 'namecase' [ 155.143604][ T6360] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 155.430571][ T6375] loop1: detected capacity change from 0 to 16 [ 156.292671][ T6375] erofs (device loop1): mounted with root inode @ nid 36. [ 156.338447][ T5602] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.549419][ T5602] usb 1-1: Using ep0 maxpacket: 32 [ 156.558544][ T5602] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 156.558579][ T5602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 156.558607][ T5602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 156.558632][ T5602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 156.613234][ T5602] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 156.613267][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.613289][ T5602] usb 1-1: Product: syz [ 156.613305][ T5602] usb 1-1: Manufacturer: syz [ 156.613321][ T5602] usb 1-1: SerialNumber: syz [ 156.734211][ T5602] usb 1-1: config 0 descriptor?? [ 156.992372][ T37] usb 1-1: USB disconnect, device number 3 [ 157.515814][ T6397] loop2: detected capacity change from 0 to 512 [ 157.516967][ T6397] EXT4-fs: Ignoring removed oldalloc option [ 157.603026][ T6397] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 157.603526][ T6397] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.638572][ T6397] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 157.644297][ T6397] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 157.645858][ T6397] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.222: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 157.645984][ T6397] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 157.650395][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 157.650456][ C0] EXT4-fs (loop2): last error at time 1781098690: ext4_ext_check_inode:521: inode 13 [ 157.678805][ T6397] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.222: couldn't read orphan inode 13 (err -117) [ 157.678927][ T6397] loop2: lost filesystem error report for type 5 error -117 [ 157.733183][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.867353][ T6402] loop3: detected capacity change from 0 to 512 [ 157.883605][ T6397] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 157.883619][ T6397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.908518][ T6402] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.968734][ T6397] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 158.104100][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 158.104120][ T38] audit: type=1326 audit(1781098690.956:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104173][ T38] audit: type=1326 audit(1781098690.956:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104230][ T38] audit: type=1326 audit(1781098690.956:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104278][ T38] audit: type=1326 audit(1781098690.956:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104327][ T38] audit: type=1326 audit(1781098690.956:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104376][ T38] audit: type=1326 audit(1781098690.956:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104426][ T38] audit: type=1326 audit(1781098690.956:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104475][ T38] audit: type=1326 audit(1781098690.956:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104523][ T38] audit: type=1326 audit(1781098690.956:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.104573][ T38] audit: type=1326 audit(1781098690.966:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.4.230" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8558abce59 code=0x7ffc0000 [ 158.414251][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.451528][ T6402] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.489226][ T6402] EXT4-fs (loop3): 1 truncate cleaned up [ 158.564337][ T6402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.126604][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 159.149186][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.280323][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 159.284936][ T5885] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 159.285018][ T5885] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 159.285073][ T5885] usb 2-1: config 0 has no interface number 0 [ 159.285187][ T5885] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.285277][ T5885] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 159.285352][ T5885] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.378322][ T5885] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 159.378357][ T5885] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 159.378380][ T5885] usb 2-1: Product: syz [ 159.378396][ T5885] usb 2-1: Manufacturer: syz [ 159.413196][ T5885] usb 2-1: config 0 descriptor?? [ 159.430834][ T6423] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.616590][ T6438] loop2: detected capacity change from 0 to 64 [ 160.163401][ T5885] usb 2-1: USB disconnect, device number 2 [ 160.773499][ T6460] loop3: detected capacity change from 0 to 512 [ 160.853034][ T6460] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 160.876830][ T6460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 160.876963][ T6460] System zones: 1-12 [ 160.877342][ T6460] EXT4-fs (loop3): orphan cleanup on readonly fs [ 161.050398][ T6460] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.252: invalid indirect mapped block 12 (level 1) [ 161.050441][ T6460] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.060532][ C1] EXT4-fs (loop3): initial error at time 1781098693: ext4_free_branches:1023: inode 11 [ 161.060579][ C1] EXT4-fs (loop3): last error at time 1781098693: ext4_free_branches:1023: inode 11 [ 161.117747][ T6466] loop2: detected capacity change from 0 to 1024 [ 161.248668][ T6460] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.252: invalid indirect mapped block 2 (level 2) [ 161.248709][ T6460] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.285737][ T6460] EXT4-fs (loop3): 1 truncate cleaned up [ 161.290300][ T6466] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.336282][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 161.424779][ T6466] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 5: comm syz.2.254: lblock 5 mapped to illegal pblock 5 (length 1) [ 161.424821][ T6466] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.431253][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 161.431277][ C0] EXT4-fs (loop2): initial error at time 1781098694: ext4_map_blocks:833: inode 3: block 5 [ 161.431316][ C0] EXT4-fs (loop2): last error at time 1781098694: ext4_map_blocks:833: inode 3: block 5 [ 161.495510][ T6473] loop1: detected capacity change from 0 to 256 [ 161.496594][ T6473] exfat: Deprecated parameter 'utf8' [ 161.496711][ T6473] exfat: Deprecated parameter 'namecase' [ 161.496772][ T6473] exfat: Deprecated parameter 'namecase' [ 161.547281][ T6466] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.254: Failed to acquire dquot type 0 [ 161.547313][ T6466] loop2: lost filesystem error report for type 5 error -117 [ 161.550929][ T6466] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.254: lblock 5 mapped to illegal pblock 5 (length 1) [ 161.551135][ T6466] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.566615][ T6466] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.254: Failed to acquire dquot type 0 [ 161.566711][ T6466] loop2: lost filesystem error report for type 5 error -117 [ 161.584243][ T6466] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.254: Freeing blocks not in datazone - block = 0, count = 4096 [ 161.584339][ T6466] loop2: lost filesystem error report for type 5 error -117 [ 161.703014][ T6466] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.254: lblock 5 mapped to illegal pblock 5 (length 1) [ 161.703063][ T6466] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.777546][ T6473] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 161.828886][ T6466] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.254: Failed to acquire dquot type 0 [ 161.828922][ T6466] loop2: lost filesystem error report for type 5 error -117 [ 161.834092][ T6466] EXT4-fs (loop2): 1 orphan inode deleted [ 161.879832][ T6466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.923438][ T6466] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.254: lblock 5 mapped to illegal pblock 5 (length 1) [ 162.001566][ T6466] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.254: Failed to acquire dquot type 0 [ 162.155717][ T6480] loop4: detected capacity change from 0 to 2048 [ 162.172260][ T6480] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.172291][ T6480] NILFS (loop4): mounting unchecked fs [ 162.268379][ T5934] udevd[5934]: incorrect nilfs2 checksum on /dev/loop4 [ 162.348163][ T6480] NILFS (loop4): recovery complete [ 162.361111][ T6481] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.466970][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.467937][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 162.742846][ T6455] loop0: detected capacity change from 0 to 32768 [ 162.934728][ T6489] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 163.242012][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.269'. [ 163.248212][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.269'. [ 163.306754][ T6499] loop1: detected capacity change from 0 to 512 [ 163.360480][ T6499] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 163.360565][ T6499] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 163.396261][ T6455] JBD2: Ignoring recovery information on journal [ 163.612508][ T6499] EXT4-fs (loop1): 1 truncate cleaned up [ 163.648583][ T6499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.746512][ T6499] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 163.906991][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.949961][ T6513] loop3: detected capacity change from 0 to 1024 [ 164.134156][ T6455] JBD2: journal reset failed [ 164.134188][ T6455] (syz.0.250,6455,0):ocfs2_journal_load:1159 ERROR: Failed to load journal! [ 164.134213][ T6455] (syz.0.250,6455,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 164.660986][ T5972] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.941641][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 164.965299][ T5972] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 164.965330][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.965351][ T5972] usb 2-1: Product: syz [ 164.965366][ T5972] usb 2-1: Manufacturer: syz [ 164.965381][ T5972] usb 2-1: SerialNumber: syz [ 165.035439][ T5972] r8152-cfgselector 2-1: Unknown version 0x0000 [ 165.035479][ T5972] r8152-cfgselector 2-1: config 0 descriptor?? [ 165.290565][ T5972] r8152-cfgselector 2-1: Needed 1 retries to read version [ 165.362085][ T6525] tipc: Enabling of bearer rejected, failed to enable media [ 165.438872][ T6529] loop3: detected capacity change from 0 to 512 [ 165.522335][ T37] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 165.808744][ T6532] loop2: detected capacity change from 0 to 16 [ 165.933803][ T6532] erofs (device loop2): mounted with root inode @ nid 36. [ 167.052554][ T6539] netlink: 64 bytes leftover after parsing attributes in process `syz.4.284'. [ 167.503577][ T6555] loop2: detected capacity change from 0 to 128 [ 167.543131][ T6555] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.547536][ T6555] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.020368][ T6567] loop4: detected capacity change from 0 to 16 [ 168.388314][ T6567] erofs (device loop4): mounted with root inode @ nid 36. [ 169.087369][ T6568] loop3: detected capacity change from 0 to 1024 [ 169.159683][ T5794] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 169.165733][ T6568] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.237943][ T6568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.361285][ T5794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.380321][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.386539][ T5794] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 169.386572][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.386595][ T5794] usb 2-1: Product: syz [ 169.386611][ T5794] usb 2-1: Manufacturer: syz [ 169.386626][ T5794] usb 2-1: SerialNumber: syz [ 169.487984][ T5623] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.506588][ T5794] usb 2-1: config 0 descriptor?? [ 169.537932][ T5794] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 169.538246][ T5794] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 169.538336][ T5794] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 169.574815][ T5794] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 169.575053][ T5794] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 169.575136][ T5794] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 169.575226][ T5794] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 169.575307][ T5794] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 169.636968][ T5794] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 169.717093][ T5794] usb 2-1: USB disconnect, device number 4 [ 169.768686][ T5794] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 169.785290][ T5794] keyspan 2-1:0.0: device disconnected [ 171.409566][ T5794] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.571934][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.572034][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.572074][ T5794] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 171.572101][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.754100][ T5794] usb 1-1: config 0 descriptor?? [ 171.948059][ T6609] comedi comedi3: 8255: I/O base address not correctly aligned [ 172.780640][ T6616] netlink: 'syz.2.313': attribute type 6 has an invalid length. [ 172.899507][ T5749] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.975336][ T6618] loop2: detected capacity change from 0 to 128 [ 173.034655][ T5794] hid_parser_main: 35 callbacks suppressed [ 173.034681][ T5794] razer 0003:1532:010E.0004: unknown main item tag 0x4 [ 173.067076][ T6618] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.067290][ T6618] hpfs: filesystem error: improperly stopped [ 173.067309][ T6618] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 173.067326][ T6618] hpfs: You really don't want any checks? You are crazy... [ 173.111042][ T5749] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 173.111074][ T5749] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 173.111097][ T5749] usb 4-1: config 220 has no interface number 2 [ 173.111394][ T5749] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 173.111425][ T5749] usb 4-1: config 220 interface 0 has no altsetting 0 [ 173.111842][ T5749] usb 4-1: config 220 interface 76 has no altsetting 0 [ 173.111865][ T5749] usb 4-1: config 220 interface 1 has no altsetting 0 [ 173.117606][ T5749] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 173.117637][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.118052][ T5749] usb 4-1: Product: syz [ 173.118070][ T5749] usb 4-1: Manufacturer: syz [ 173.118412][ T5749] usb 4-1: SerialNumber: syz [ 173.132399][ T6618] hpfs: hpfs_map_sector(): read error [ 173.132430][ T6618] hpfs: code page support is disabled [ 173.187774][ T6618] hpfs: hpfs_map_4sectors(): unaligned read [ 173.188434][ T6618] hpfs: hpfs_map_4sectors(): unaligned read [ 173.188448][ T6618] hpfs: filesystem error: unable to find root dir [ 173.271336][ T5794] razer 0003:1532:010E.0004: failed to enable macro keys: -71 [ 173.341302][ T5794] razer 0003:1532:010E.0004: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 173.398484][ T5794] usb 1-1: USB disconnect, device number 4 [ 173.719639][ T6623] netlink: 165 bytes leftover after parsing attributes in process `syz.1.316'. [ 173.727566][ T5749] usb 4-1: selecting invalid altsetting 0 [ 173.808213][ T6621] fido_id[6621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 173.808579][ T5749] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 173.808620][ T5749] uvcvideo 4-1:220.0: No valid video chain found. [ 173.864609][ T5749] usb 4-1: selecting invalid altsetting 0 [ 173.864650][ T5749] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 173.886586][ T5749] usb 4-1: USB disconnect, device number 6 [ 173.940688][ T6625] loop1: detected capacity change from 0 to 512 [ 173.998560][ T6625] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 173.998596][ T6625] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 173.998615][ T6625] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.317: Corrupt directory, running e2fsck is recommended [ 174.069250][ T6625] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 174.074968][ T6625] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.317: corrupted in-inode xattr: e_name out of bounds [ 174.075057][ T6625] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.079381][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 174.079402][ C0] EXT4-fs (loop1): initial error at time 1781098706: ext4_iget_extra_inode:5179: inode 15 [ 174.079434][ C0] EXT4-fs (loop1): last error at time 1781098706: ext4_iget_extra_inode:5179: inode 15 [ 174.200920][ T6625] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.317: couldn't read orphan inode 15 (err -117) [ 174.200957][ T6625] loop1: lost filesystem error report for type 5 error -117 [ 174.250238][ T6625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.444757][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.607699][ T6642] loop4: detected capacity change from 0 to 256 [ 174.810167][ T6642] FAT-fs (loop4): Directory bread(block 64) failed [ 174.810203][ T6642] FAT-fs (loop4): Directory bread(block 65) failed [ 174.810324][ T6642] FAT-fs (loop4): Directory bread(block 66) failed [ 174.810348][ T6642] FAT-fs (loop4): Directory bread(block 67) failed [ 174.810450][ T6642] FAT-fs (loop4): Directory bread(block 68) failed [ 174.810474][ T6642] FAT-fs (loop4): Directory bread(block 69) failed [ 174.810575][ T6642] FAT-fs (loop4): Directory bread(block 70) failed [ 174.810599][ T6642] FAT-fs (loop4): Directory bread(block 71) failed [ 174.810701][ T6642] FAT-fs (loop4): Directory bread(block 72) failed [ 174.810725][ T6642] FAT-fs (loop4): Directory bread(block 73) failed [ 175.159939][ T5794] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 175.266748][ T6653] loop2: detected capacity change from 0 to 1024 [ 175.289791][ T6653] hfsplus: invalid btree flag [ 175.324958][ T5794] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.324987][ T5794] usb 1-1: config 0 has no interface number 0 [ 175.325036][ T5794] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.325065][ T5794] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.325107][ T5794] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 175.325132][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.326561][ T6653] hfsplus: failed to load extents file [ 175.392452][ T5794] usb 1-1: config 0 descriptor?? [ 175.860457][ T5794] prodikeys 0003:041E:2801.0005: item fetching failed at offset 5/7 [ 175.864471][ T5794] prodikeys 0003:041E:2801.0005: hid parse failed [ 175.864588][ T5794] prodikeys 0003:041E:2801.0005: probe with driver prodikeys failed with error -22 [ 175.938619][ T6668] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.106195][ T9] usb 1-1: USB disconnect, device number 5 [ 177.799235][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 177.817143][ T6695] loop1: detected capacity change from 0 to 2048 [ 178.043957][ T6702] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.349'. [ 178.044009][ T6702] openvswitch: netlink: Key 0 has unexpected len 5 expected 0 [ 178.395523][ T6712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 179.339505][ T6737] mmap: syz.4.366 (6737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 179.404013][ T6739] loop3: detected capacity change from 0 to 512 [ 179.405084][ T6739] EXT4-fs: Ignoring removed oldalloc option [ 179.419655][ T6739] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.581069][ T6705] loop2: detected capacity change from 0 to 32768 [ 179.612014][ T6739] EXT4-fs (loop3): 1 truncate cleaned up [ 179.633434][ T6739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.681982][ T6705] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 179.993041][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.077302][ T6705] XFS (loop2): Ending clean mount [ 180.202252][ T6725] loop1: detected capacity change from 0 to 32768 [ 180.807981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.539140][ T5623] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 181.949503][ T5794] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.089527][ T5794] usb 1-1: device descriptor read/64, error -71 [ 182.241064][ T6784] loop4: detected capacity change from 0 to 64 [ 182.485003][ T5794] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.621451][ T5794] usb 1-1: device descriptor read/64, error -71 [ 182.729880][ T5794] usb usb1-port1: attempt power cycle [ 183.135322][ T5794] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.150394][ T5794] usb 1-1: device descriptor read/8, error -71 [ 183.410698][ T5794] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.430480][ T5794] usb 1-1: device descriptor read/8, error -71 [ 183.545782][ T6811] loop1: detected capacity change from 0 to 256 [ 183.585676][ T5794] usb usb1-port1: unable to enumerate USB device [ 183.771036][ T6817] loop4: detected capacity change from 0 to 512 [ 183.793460][ T6811] FAT-fs (loop1): Directory bread(block 64) failed [ 183.793493][ T6811] FAT-fs (loop1): Directory bread(block 65) failed [ 183.793606][ T6811] FAT-fs (loop1): Directory bread(block 66) failed [ 183.793632][ T6811] FAT-fs (loop1): Directory bread(block 67) failed [ 183.793732][ T6811] FAT-fs (loop1): Directory bread(block 68) failed [ 183.793756][ T6811] FAT-fs (loop1): Directory bread(block 69) failed [ 183.794054][ T6811] FAT-fs (loop1): Directory bread(block 70) failed [ 183.794081][ T6811] FAT-fs (loop1): Directory bread(block 71) failed [ 183.794181][ T6811] FAT-fs (loop1): Directory bread(block 72) failed [ 183.794204][ T6811] FAT-fs (loop1): Directory bread(block 73) failed [ 183.889916][ T6817] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.398: dx entry: limit 1024 != root limit 124 [ 183.889956][ T6817] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.398: Corrupt directory, running e2fsck is recommended [ 183.949990][ T6817] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 183.950088][ T6817] EXT4-fs error (device loop4): ext4_iget_extra_inode:5179: inode #15: comm syz.4.398: corrupted in-inode xattr: invalid ea_ino [ 183.950108][ T6817] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 183.951883][ T6817] EXT4-fs (loop4): Remounting filesystem read-only [ 183.957746][ T6817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.163377][ T6824] loop3: detected capacity change from 0 to 512 [ 184.347092][ T6824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.347233][ T6824] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.674000][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.758181][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.232354][ T6848] loop2: detected capacity change from 0 to 512 [ 185.316979][ T6848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.333896][ T6854] loop0: detected capacity change from 0 to 164 [ 185.549041][ T6852] loop1: detected capacity change from 0 to 4096 [ 185.799025][ T6860] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.882128][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.991955][ T6854] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 186.674010][ T6869] loop2: detected capacity change from 0 to 16 [ 186.719098][ T6869] erofs (device loop2): unidentified incompatible feature 1000, please upgrade kernel [ 186.859470][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 186.877272][ T6876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.425'. [ 186.877296][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 186.877333][ T6876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.425'. [ 186.877349][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 186.877371][ T6876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.425'. [ 187.004975][ T6879] loop1: detected capacity change from 0 to 512 [ 187.005826][ T6879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.019935][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 187.022370][ T5885] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 187.022397][ T5885] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 187.022479][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.022501][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 187.022523][ T5885] usb 1-1: config 1 has no interface number 0 [ 187.022570][ T5885] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 187.022595][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.106802][ T5972] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 187.163375][ T5885] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 187.277999][ T6879] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 187.281737][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 187.281758][ C1] EXT4-fs (loop1): initial error at time 1781098720: mb_free_blocks:2049: inode 11: block 64 [ 187.281792][ C1] EXT4-fs (loop1): last error at time 1781098720: mb_free_blocks:2049: inode 11: block 64 [ 187.294217][ T6879] EXT4-fs (loop1): Remounting filesystem read-only [ 187.413257][ T5972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.413287][ T5972] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.413355][ T5972] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 115 [ 187.466003][ T5972] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 187.466026][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.466060][ T5972] usb 3-1: Product: syz [ 187.466076][ T5972] usb 3-1: Manufacturer: syz [ 187.466092][ T5972] usb 3-1: SerialNumber: syz [ 187.523857][ T5885] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 187.524495][ T5885] snd_usb_pod 1-1:1.1: invalid control EP [ 187.524512][ T5885] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 187.525147][ T5885] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 187.560021][ T5885] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 187.593260][ T6879] EXT4-fs (loop1): 1 truncate cleaned up [ 187.643717][ T6879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.798194][ T5885] usb 1-1: USB disconnect, device number 10 [ 188.025525][ T5972] usb 3-1: 0:2 : does not exist [ 188.098503][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.536513][ T6897] netlink: 116 bytes leftover after parsing attributes in process `syz.4.433'. [ 188.623003][ T5972] usb 3-1: USB disconnect, device number 3 [ 189.782805][ T6915] loop4: detected capacity change from 0 to 32768 [ 189.905767][ T6915] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 189.905793][ T6915] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 190.189854][ T6915] gfs2: fsid=syz:syz.0: journal 0 mapped with 8 extents in 0ms [ 190.201808][ T5972] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 190.201825][ T5972] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 190.482955][ T6931] loop2: detected capacity change from 0 to 256 [ 190.620471][ T5972] kworker/1:7: attempt to access beyond end of device [ 190.620471][ T5972] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=32768 [ 190.931269][ T6939] loop1: detected capacity change from 0 to 256 [ 191.115055][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 191.341118][ T5972] gfs2: fsid=syz:syz.0: jid=0: Failed [ 191.487734][ T6915] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 191.963722][ T6954] loop0: detected capacity change from 0 to 128 [ 191.966064][ T6954] EXT4-fs: inline encryption not supported [ 191.968850][ T6954] EXT4-fs (loop0): Test dummy encryption mode enabled [ 192.064936][ T6954] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.093285][ T6954] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.144687][ T6954] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 192.223798][ T5621] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.499463][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 192.626673][ T6973] loop2: detected capacity change from 0 to 256 [ 192.651903][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 192.651934][ T9] usb 5-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 192.651957][ T9] usb 5-1: config 220 has no interface number 2 [ 192.652037][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 192.652068][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 192.652088][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 192.652108][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 192.708305][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 192.708335][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.708356][ T9] usb 5-1: Product: syz [ 192.708371][ T9] usb 5-1: Manufacturer: syz [ 192.708386][ T9] usb 5-1: SerialNumber: syz [ 192.829639][ T6973] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 192.904775][ T6973] exFAT-fs (loop2): error, data valid size is invalid(-281474976706560) [ 193.042519][ T9] usb 5-1: selecting invalid altsetting 0 [ 193.068880][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 193.068917][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 193.154410][ T9] usb 5-1: selecting invalid altsetting 0 [ 193.154450][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 193.185146][ T9] usb 5-1: USB disconnect, device number 3 [ 193.277484][ T6979] loop0: detected capacity change from 0 to 512 [ 193.378131][ T6979] EXT4-fs: Ignoring removed bh option [ 193.378158][ T6979] EXT4-fs: inline encryption not supported [ 193.393845][ T6979] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.515838][ T6987] process 'syz.2.470' launched '/dev/fd/3' with NULL argv: empty string added [ 193.638641][ T6979] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 193.865455][ T6979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.466: bg 0: block 248: padding at end of block bitmap is not set [ 193.865494][ T6979] loop0: lost filesystem error report for type 5 error -117 [ 193.872884][ C0] EXT4-fs (loop0): last error at time 1781098726: ext4_validate_block_bitmap:441 [ 193.948809][ T6979] __quota_error: 9 callbacks suppressed [ 193.948830][ T6979] Quota error (device loop0): write_blk: dquota write failed [ 193.948915][ T6979] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 193.948976][ T6979] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.466: Failed to acquire dquot type 1 [ 193.948998][ T6979] loop0: lost filesystem error report for type 5 error -28 [ 194.082304][ T6979] EXT4-fs (loop0): 1 truncate cleaned up [ 194.105340][ T6979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 194.220337][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.222297][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.260730][ T7000] Zero length message leads to an empty skb [ 194.352002][ T7006] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 194.352002][ T7006] program syz.2.479 not setting count and/or reply_len properly [ 194.428715][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 194.600621][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.600870][ T5625] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 194.995943][ T7021] loop0: detected capacity change from 0 to 1024 [ 194.997113][ T7021] EXT4-fs: inline encryption not supported [ 195.008964][ T7021] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.089197][ T7021] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.488: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.089237][ T7021] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 195.107382][ T7021] EXT4-fs (loop0): Remounting filesystem read-only [ 195.107409][ T7021] Quota error (device loop0): write_blk: dquota write failed [ 195.107447][ T7021] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 195.107640][ T7021] EXT4-fs (loop0): 1 orphan inode deleted [ 195.154638][ T7021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.299820][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.432861][ T7031] netlink: 7986 bytes leftover after parsing attributes in process `syz.4.492'. [ 195.667125][ T7043] loop3: detected capacity change from 0 to 1024 [ 195.800573][ T7047] atomic_op ffff88803178ba18 conn xmit_atomic 0000000000000000 [ 196.102705][ T7054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.501'. [ 196.211167][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 196.333501][ T7058] loop2: detected capacity change from 0 to 256 [ 196.502879][ T7057] loop0: detected capacity change from 0 to 4096 [ 196.695791][ T7057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.967494][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.190025][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.342990][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 197.347636][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.347682][ T9] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 197.347711][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.347745][ T9] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 197.347770][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.424103][ T9] usb 2-1: config 0 descriptor?? [ 197.672648][ T6173] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 197.697734][ T7087] loop2: detected capacity change from 0 to 16 [ 197.706384][ T7087] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 197.792241][ T5938] udevd[5938]: incorrect cramfs checksum on /dev/loop2 [ 197.836087][ T6173] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 197.836120][ T6173] usb 5-1: config 8 has no interface number 0 [ 197.836167][ T6173] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 197.836195][ T6173] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 197.836226][ T6173] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 197.836249][ T6173] usb 5-1: config 8 interface 177 has no altsetting 0 [ 197.836291][ T6173] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 197.836317][ T6173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.947677][ T5934] udevd[5934]: incorrect cramfs checksum on /dev/loop2 [ 197.970928][ T7081] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 198.076679][ T9] hid_mf 0003:0079:1803.0006: unknown main item tag 0x0 [ 198.082688][ T7090] loop0: detected capacity change from 0 to 128 [ 198.100632][ T7090] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.130791][ T7090] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.151967][ T9] hid_mf 0003:0079:1803.0006: hidraw0: USB HID v0.04 Device [HID 0079:1803] on usb-dummy_hcd.1-1/input0 [ 198.152005][ T9] hid_mf 0003:0079:1803.0006: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 198.184025][ T9] usb 2-1: USB disconnect, device number 5 [ 198.196197][ T5934] udevd[5934]: incorrect cramfs checksum on /dev/loop2 [ 198.536150][ T7091] fido_id[7091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 199.013047][ T7071] loop3: detected capacity change from 0 to 32768 [ 199.208408][ T7100] sg_write: data in/out 17181660/42 bytes for SCSI command 0x0-- guessing data in; [ 199.208408][ T7100] program syz.1.521 not setting count and/or reply_len properly [ 199.325990][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.330792][ T7079] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 199.346664][ T6173] usb 5-1: string descriptor 0 read error: -71 [ 199.384699][ T6173] ir_toy 5-1:8.177: required endpoints not found [ 199.431789][ T7071] [ 199.431789][ T7071] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.431789][ T7071] [ 199.474635][ T6173] usb 5-1: USB disconnect, device number 4 [ 200.078734][ T13] ERROR: (device loop3): diWrite: ixpxd invalid [ 200.078734][ T13] [ 200.093919][ T13] ERROR: (device loop3): txCommit: [ 200.093919][ T13] [ 200.190893][ T13] jfs_write_inode: jfs_commit_inode failed! [ 200.193984][ T5620] [ 200.193984][ T5620] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.193984][ T5620] [ 200.255775][ T5620] [ 200.255775][ T5620] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.255775][ T5620] [ 200.369943][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 200.419020][ T38] audit: type=1326 audit(1781098733.276:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.468279][ T38] audit: type=1326 audit(1781098733.286:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.468337][ T38] audit: type=1326 audit(1781098733.326:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.468773][ T38] audit: type=1326 audit(1781098733.326:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.471423][ T38] audit: type=1326 audit(1781098733.326:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.497545][ T38] audit: type=1326 audit(1781098733.336:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.514854][ T38] audit: type=1326 audit(1781098733.366:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.534186][ T38] audit: type=1326 audit(1781098733.376:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.534352][ T38] audit: type=1326 audit(1781098733.396:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 200.573154][ T38] audit: type=1326 audit(1781098733.436:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59774ce59 code=0x7ffc0000 [ 201.025989][ T7129] loop2: detected capacity change from 0 to 512 [ 201.065016][ T7129] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 201.065094][ T7129] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 201.066818][ T7129] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.535: inode has both inline data and extents flags [ 201.066847][ T7129] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 201.067422][ T7129] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.535: couldn't read orphan inode 13 (err -117) [ 201.067465][ T7129] loop2: lost filesystem error report for type 5 error -117 [ 201.069350][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 201.069369][ C0] EXT4-fs (loop2): initial error at time 1781098733: ext4_orphan_get:1399: inode 13 [ 201.069399][ C0] EXT4-fs (loop2): last error at time 1781098733: ext4_orphan_get:1404 [ 201.175127][ T7129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.202540][ T7129] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 201.336120][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.744414][ T7149] loop4: detected capacity change from 0 to 256 [ 201.834750][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.544'. [ 201.869490][ T7149] FAT-fs (loop4): Directory bread(block 64) failed [ 201.869524][ T7149] FAT-fs (loop4): Directory bread(block 65) failed [ 201.869627][ T7149] FAT-fs (loop4): Directory bread(block 66) failed [ 201.869652][ T7149] FAT-fs (loop4): Directory bread(block 67) failed [ 201.869753][ T7149] FAT-fs (loop4): Directory bread(block 68) failed [ 201.869777][ T7149] FAT-fs (loop4): Directory bread(block 69) failed [ 201.869880][ T7149] FAT-fs (loop4): Directory bread(block 70) failed [ 201.869904][ T7149] FAT-fs (loop4): Directory bread(block 71) failed [ 201.870014][ T7149] FAT-fs (loop4): Directory bread(block 72) failed [ 201.870038][ T7149] FAT-fs (loop4): Directory bread(block 73) failed [ 202.152318][ T7158] loop0: detected capacity change from 0 to 128 [ 202.186923][ T7158] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 202.245674][ T7158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.296363][ T7162] loop3: detected capacity change from 0 to 256 [ 202.435973][ T7162] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 202.721599][ T7175] loop1: detected capacity change from 0 to 256 [ 202.722912][ T7175] exfat: Deprecated parameter 'namecase' [ 202.722953][ T7175] exfat: Deprecated parameter 'namecase' [ 202.758872][ T7175] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 203.355260][ T7191] loop2: detected capacity change from 0 to 16 [ 203.427703][ T7191] erofs (device loop2): mounted with root inode @ nid 36. [ 203.833731][ T5625] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 203.996949][ T7191] erofs (device loop2): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 203.997047][ T7191] erofs (device loop2): read error -117 @ 1 of nid 89 [ 204.065175][ T7191] syz.2.561 (7191) used greatest stack depth: 18784 bytes left [ 204.084219][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084254][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084282][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084309][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084346][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084372][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084399][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084427][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084454][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.084482][ T5602] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 204.193527][ T5602] hid-generic 0000:0000:0004.0007: hidraw0: HID v0.03 Device [syz1] on syz0 [ 204.541590][ T7200] fido_id[7200]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.718131][ T7185] loop3: detected capacity change from 0 to 32768 [ 204.888792][ T7206] vlan2: entered promiscuous mode [ 204.888815][ T7206] bridge0: entered promiscuous mode [ 204.962164][ T7185] read_mapping_page failed! [ 204.982046][ T7185] ERROR: (device loop3): txCommit: [ 204.982046][ T7185] [ 205.059777][ T7206] bridge0: port 3(vlan2) entered blocking state [ 205.060171][ T7206] bridge0: port 3(vlan2) entered disabled state [ 205.060531][ T7206] vlan2: entered allmulticast mode [ 205.060549][ T7206] bridge0: entered allmulticast mode [ 205.230485][ T7206] vlan2: left allmulticast mode [ 205.230501][ T7206] bridge0: left allmulticast mode [ 205.318703][ T7211] jfs_mkdir: dtSearch returned -17 [ 205.771873][ T7220] loop1: detected capacity change from 0 to 512 [ 205.956009][ T7229] use of bytesused == 0 is deprecated and will be removed in the future, [ 205.956023][ T7229] use the actual size instead. [ 206.302778][ T7233] loop2: detected capacity change from 0 to 256 [ 206.504934][ T7236] loop4: detected capacity change from 0 to 256 [ 206.553288][ T7236] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 206.706000][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 207.210001][ T7256] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 207.291919][ T7258] loop3: detected capacity change from 0 to 256 [ 207.292742][ T7258] exfat: Deprecated parameter 'namecase' [ 207.292769][ T7258] exfat: Deprecated parameter 'namecase' [ 207.385407][ T7258] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 207.584572][ T5885] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.743254][ T5885] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 207.743285][ T5885] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 207.743307][ T5885] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 207.743328][ T5885] usb 2-1: config 220 has no interface number 2 [ 207.743401][ T5885] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 207.743430][ T5885] usb 2-1: config 220 interface 0 has no altsetting 0 [ 207.743450][ T5885] usb 2-1: config 220 interface 76 has no altsetting 0 [ 207.743470][ T5885] usb 2-1: config 220 interface 1 has no altsetting 0 [ 207.824362][ T5885] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 207.824398][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.824421][ T5885] usb 2-1: Product: syz [ 207.824477][ T5885] usb 2-1: Manufacturer: syz [ 207.824494][ T5885] usb 2-1: SerialNumber: syz [ 208.098250][ T5885] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 208.098287][ T5885] uvcvideo 2-1:220.0: No valid video chain found. [ 208.098349][ T5885] usb 2-1: selecting invalid altsetting 0 [ 208.201169][ T5885] usb 2-1: selecting invalid altsetting 0 [ 208.201205][ T5885] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 208.226351][ T5885] usb 2-1: USB disconnect, device number 6 [ 208.313518][ T6173] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 208.476998][ T6173] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.499188][ T6173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.499217][ T6173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.527410][ T6173] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 208.527450][ T6173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.527472][ T6173] usb 1-1: Product: syz [ 208.527488][ T6173] usb 1-1: Manufacturer: syz [ 208.527504][ T6173] usb 1-1: SerialNumber: syz [ 208.649131][ T6173] usb 1-1: selecting invalid altsetting 1 [ 208.813656][ T7286] loop2: detected capacity change from 0 to 164 [ 209.034195][ T7288] loop1: detected capacity change from 0 to 512 [ 209.054370][ T7288] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (43205!=18645) [ 209.115431][ T7288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.145222][ T7288] netlink: 96 bytes leftover after parsing attributes in process `syz.1.605'. [ 209.145258][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 209.145268][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.605'. [ 209.227644][ T7293] xt_l2tp: invalid flags combination: c [ 209.259152][ T6173] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 209.376356][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.497773][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.601813][ T7299] loop4: detected capacity change from 0 to 512 [ 209.606351][ T7299] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.671213][ T7299] EXT4-fs (loop4): 1 truncate cleaned up [ 209.676135][ T7299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.775653][ T7299] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 209.790067][ T7306] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 210.039057][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.138011][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 210.160723][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 210.311063][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 210.319217][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.321345][ T9] usb 3-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 210.321415][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.415284][ T9] usb 3-1: config 0 descriptor?? [ 210.459071][ T9] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 210.512946][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 210.512965][ T38] audit: type=1326 audit(1781098743.376:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.513792][ T38] audit: type=1326 audit(1781098743.376:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.518663][ T38] audit: type=1326 audit(1781098743.376:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.558049][ T38] audit: type=1326 audit(1781098743.376:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.558202][ T38] audit: type=1326 audit(1781098743.376:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.558322][ T38] audit: type=1326 audit(1781098743.416:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.558442][ T38] audit: type=1326 audit(1781098743.416:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.593135][ T38] audit: type=1326 audit(1781098743.436:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.633510][ T38] audit: type=1326 audit(1781098743.486:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.633656][ T38] audit: type=1326 audit(1781098743.486:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.1.620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f514c44ce59 code=0x7ffc0000 [ 210.844779][ T5602] usb 3-1: USB disconnect, device number 4 [ 210.963341][ T6173] usb 1-1: USB disconnect, device number 11 [ 211.074602][ T7331] hugetlbfs: Bad value for 'nr_inodes' [ 211.173888][ T7332] netlink: 'syz.3.622': attribute type 66 has an invalid length. [ 211.797915][ T6173] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 211.973336][ T6173] usb 4-1: Using ep0 maxpacket: 16 [ 211.987791][ T6173] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.997325][ T6173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.997420][ T6173] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.056587][ T6173] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 212.056621][ T6173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.056642][ T6173] usb 4-1: Product: syz [ 212.056658][ T6173] usb 4-1: Manufacturer: syz [ 212.056674][ T6173] usb 4-1: SerialNumber: syz [ 212.141004][ T5602] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 212.330892][ T5602] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.332478][ T5602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.332504][ T5602] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.383032][ T5602] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 212.383061][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.383081][ T5602] usb 5-1: Product: syz [ 212.383103][ T5602] usb 5-1: Manufacturer: syz [ 212.383116][ T5602] usb 5-1: SerialNumber: syz [ 212.449343][ T6173] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 212.449853][ T6173] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 212.461289][ T7363] loop0: detected capacity change from 0 to 1024 [ 212.562493][ T5602] usb 5-1: selecting invalid altsetting 1 [ 213.173880][ T6173] usb 4-1: USB disconnect, device number 7 [ 213.217511][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.397799][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 213.412824][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.412860][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.412922][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 213.412965][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.620961][ T9] usb 2-1: config 0 descriptor?? [ 213.624345][ T5602] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 214.254248][ T7380] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 214.323413][ T7383] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 214.949798][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 318.329287][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 318.329311][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7372 [ 318.329336][ C1] rcu: (detected by 1, t=10502 jiffies, g=23845, q=988 ncpus=2) [ 318.329356][ C1] task:syz.2.642 state:R running task stack:25792 pid:7372 tgid:7371 ppid:5623 task_flags:0x400140 flags:0x00080000 [ 318.329415][ C1] Call Trace: [ 318.329427][ C1] [ 318.329435][ C1] sched_show_task+0x4aa/0x5f0 [ 318.329460][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 318.329475][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 318.329502][ C1] ? wq_watchdog_touch+0x100/0x160 [ 318.329528][ C1] print_other_cpu_stall+0xfca/0x1380 [ 318.329560][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 318.329583][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 318.329619][ C1] rcu_sched_clock_irq+0x939/0x1050 [ 318.329642][ C1] update_process_times+0x234/0x2d0 [ 318.329668][ C1] tick_nohz_handler+0x3c6/0x6f0 [ 318.329701][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 318.329730][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 318.329755][ C1] __hrtimer_run_queues+0x3bc/0xb10 [ 318.329788][ C1] hrtimer_interrupt+0x455/0x950 [ 318.329827][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 318.329854][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 318.329874][ C1] [ 318.329879][ C1] [ 318.329886][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.329903][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x54/0x80 [ 318.329928][ C1] Code: 09 f7 74 11 85 f6 75 39 85 d2 74 35 83 b9 0c 17 00 00 00 74 2c 8b 91 e0 16 00 00 83 fa 02 75 21 48 8b 91 e8 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 e4 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 318.329941][ C1] RSP: 0018:ffffc9001e857438 EFLAGS: 00000246 [ 318.329954][ C1] RAX: ffffffff81f67c1d RBX: 1ffff92003d0ae9c RCX: ffff88802e993e00 [ 318.329966][ C1] RDX: ffffc90006801000 RSI: 000000000007ffff RDI: 0000000000000000 [ 318.329976][ C1] RBP: ffffc9001e8575c0 R08: 0000000000000000 R09: 0000000000000000 [ 318.329986][ C1] R10: ffffc9001e857500 R11: fffff52003d0aea4 R12: ffff888036193a40 [ 318.330006][ C1] R13: dffffc0000000000 R14: fffffffffffffff8 R15: ffff8880369f6000 [ 318.330025][ C1] ? dev_map_enqueue_multi+0xa0d/0x1220 [ 318.330056][ C1] dev_map_enqueue_multi+0xa0d/0x1220 [ 318.330091][ C1] ? sched_balance_domains+0x7ea/0x900 [ 318.330114][ C1] ? __pfx_dev_map_enqueue_multi+0x10/0x10 [ 318.330142][ C1] ? pfn_valid+0x125/0x4c0 [ 318.330162][ C1] ? lock_acquire+0x106/0x350 [ 318.330185][ C1] ? pfn_valid+0x125/0x4c0 [ 318.330212][ C1] xdp_do_redirect_frame+0x4ec/0x670 [ 318.330238][ C1] bpf_test_run_xdp_live+0xe34/0x1cf0 [ 318.330274][ C1] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 318.330302][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 318.330361][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 318.330388][ C1] ? _copy_from_user+0x94/0xb0 [ 318.330410][ C1] ? bpf_test_init+0x113/0x150 [ 318.330428][ C1] ? xdp_convert_md_to_buff+0x5b/0x340 [ 318.330450][ C1] bpf_prog_test_run_xdp+0x81c/0x1160 [ 318.330483][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 318.330507][ C1] ? __fget_files+0x2a/0x420 [ 318.330529][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 318.330551][ C1] bpf_prog_test_run+0x2cd/0x340 [ 318.330578][ C1] __sys_bpf+0xa20/0xd90 [ 318.330607][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 318.330632][ C1] ? do_futex+0x43d/0x4f0 [ 318.330670][ C1] ? rcu_is_watching+0x15/0xb0 [ 318.330691][ C1] __x64_sys_bpf+0xba/0xd0 [ 318.330712][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.330729][ C1] do_syscall_64+0x174/0x580 [ 318.330748][ C1] ? trace_irq_disable+0x3b/0x140 [ 318.330770][ C1] ? clear_bhb_loop+0x40/0x90 [ 318.330790][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.330806][ C1] RIP: 0033:0x7f6323d9ce59 [ 318.330826][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.330840][ C1] RSP: 002b:00007f6321ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.330855][ C1] RAX: ffffffffffffffda RBX: 00007f6324015fa0 RCX: 00007f6323d9ce59 [ 318.330867][ C1] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 318.330877][ C1] RBP: 00007f6323e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 318.330887][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.330896][ C1] R13: 00007f6324016038 R14: 00007f6324015fa0 R15: 00007fffda827968 [ 318.330921][ C1] [ 318.330927][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10451 jiffies! g23845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 318.330944][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=10604 [ 318.330952][ C1] rcu: rcu_preempt kthread starved for 10452 jiffies! g23845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 318.330968][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 318.330976][ C1] rcu: RCU grace-period kthread stack dump: [ 318.330981][ C1] task:rcu_preempt state:I stack:27736 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 318.331036][ C1] Call Trace: [ 318.331040][ C1] [ 318.331049][ C1] __schedule+0x172b/0x5550 [ 318.331068][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 318.331108][ C1] ? __pfx___schedule+0x10/0x10 [ 318.331132][ C1] ? schedule+0x90/0x360 [ 318.331152][ C1] schedule+0x164/0x360 [ 318.331170][ C1] schedule_timeout+0x158/0x2c0 [ 318.331189][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 318.331207][ C1] ? __pfx_process_timeout+0x10/0x10 [ 318.331231][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.331250][ C1] ? prepare_to_swait_event+0x340/0x370 [ 318.331274][ C1] rcu_gp_fqs_loop+0x312/0x11b0 [ 318.331299][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 318.331320][ C1] ? rcu_gp_init+0x136b/0x1610 [ 318.331345][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 318.331370][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 318.331392][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 318.331414][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 318.331437][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 318.331462][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.331483][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 318.331504][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 318.331521][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 318.331543][ C1] kthread+0x388/0x470 [ 318.331563][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.331585][ C1] ? __pfx_kthread+0x10/0x10 [ 318.331606][ C1] ret_from_fork+0x514/0xb70 [ 318.331630][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 318.331651][ C1] ? __switch_to+0xc79/0x1410 [ 318.331671][ C1] ? __pfx_kthread+0x10/0x10 [ 318.331692][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.331728][ C1] [ 318.331733][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 318.331758][ C1] CPU: 1 UID: 0 PID: 7372 Comm: syz.2.642 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.331788][ C1] Tainted: [L]=SOFTLOCKUP [ 318.331796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.331808][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x54/0x80 [ 318.331834][ C1] Code: 09 f7 74 11 85 f6 75 39 85 d2 74 35 83 b9 0c 17 00 00 00 74 2c 8b 91 e0 16 00 00 83 fa 02 75 21 48 8b 91 e8 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 e4 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 318.331852][ C1] RSP: 0018:ffffc9001e857438 EFLAGS: 00000246 [ 318.331870][ C1] RAX: ffffffff81f67c1d RBX: 1ffff92003d0ae9c RCX: ffff88802e993e00 [ 318.331887][ C1] RDX: ffffc90006801000 RSI: 000000000007ffff RDI: 0000000000000000 [ 318.331902][ C1] RBP: ffffc9001e8575c0 R08: 0000000000000000 R09: 0000000000000000 [ 318.331916][ C1] R10: ffffc9001e857500 R11: fffff52003d0aea4 R12: ffff888036193a40 [ 318.331932][ C1] R13: dffffc0000000000 R14: fffffffffffffff8 R15: ffff8880369f6000 [ 318.331949][ C1] FS: 00007f6321ff66c0(0000) GS:ffff888125fbb000(0000) knlGS:0000000000000000 [ 318.331969][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.331984][ C1] CR2: 00007f514c49a540 CR3: 000000003a122000 CR4: 00000000003526f0 [ 318.332006][ C1] Call Trace: [ 318.332012][ C1] [ 318.332016][ C1] dev_map_enqueue_multi+0xa0d/0x1220 [ 318.332051][ C1] ? sched_balance_domains+0x7ea/0x900 [ 318.332073][ C1] ? __pfx_dev_map_enqueue_multi+0x10/0x10 [ 318.332101][ C1] ? pfn_valid+0x125/0x4c0 [ 318.332120][ C1] ? lock_acquire+0x106/0x350 [ 318.332142][ C1] ? pfn_valid+0x125/0x4c0 [ 318.332168][ C1] xdp_do_redirect_frame+0x4ec/0x670 [ 318.332193][ C1] bpf_test_run_xdp_live+0xe34/0x1cf0 [ 318.332240][ C1] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 318.332267][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 318.332322][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 318.332348][ C1] ? _copy_from_user+0x94/0xb0 [ 318.332368][ C1] ? bpf_test_init+0x113/0x150 [ 318.332385][ C1] ? xdp_convert_md_to_buff+0x5b/0x340 [ 318.332406][ C1] bpf_prog_test_run_xdp+0x81c/0x1160 [ 318.332437][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 318.332460][ C1] ? __fget_files+0x2a/0x420 [ 318.332480][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 318.332500][ C1] bpf_prog_test_run+0x2cd/0x340 [ 318.332526][ C1] __sys_bpf+0xa20/0xd90 [ 318.332553][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 318.332577][ C1] ? do_futex+0x43d/0x4f0 [ 318.332612][ C1] ? rcu_is_watching+0x15/0xb0 [ 318.332631][ C1] __x64_sys_bpf+0xba/0xd0 [ 318.332651][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.332667][ C1] do_syscall_64+0x174/0x580 [ 318.332684][ C1] ? trace_irq_disable+0x3b/0x140 [ 318.332705][ C1] ? clear_bhb_loop+0x40/0x90 [ 318.332724][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.332738][ C1] RIP: 0033:0x7f6323d9ce59 [ 318.332750][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.332763][ C1] RSP: 002b:00007f6321ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.332777][ C1] RAX: ffffffffffffffda RBX: 00007f6324015fa0 RCX: 00007f6323d9ce59 [ 318.332788][ C1] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 318.332798][ C1] RBP: 00007f6323e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 318.332807][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.332815][ C1] R13: 00007f6324016038 R14: 00007f6324015fa0 R15: 00007fffda827968 [ 318.332839][ C1] [ 318.572293][ T4978] udevd[4978]: worker [5934] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 318.572352][ T4978] udevd[4978]: worker [5938] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 318.599523][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 318.599666][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 320.701508][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.701550][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 320.701682][ T5632] Bluetooth: hci4: command 0x0406 tx timeout SYZFAIL: failed to send rpc fd=3 want=3840 sent=0 n=-1 (errno 32: Broken pipe) [ 321.032970][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.873582][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.873691][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.918805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.056362][ T32] usb 5-1: USB disconnect, device number 5 [ 323.158445][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.175158][ T7380] team0: Port device netdevsim1 added [ 323.370604][ T7383] team0: Port device netdevsim1 removed [ 323.387150][ T7383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.431343][ T7383] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 323.959357][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 325.003516][ T7392] usb 2-1: USB disconnect, device number 7 [ 325.738403][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.004125][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.315652][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.551907][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.170739][ T1142] bridge_slave_1: left allmulticast mode [ 327.181690][ T1142] bridge_slave_1: left promiscuous mode [ 327.196063][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.476609][ T1142] bridge_slave_0: left allmulticast mode [ 327.476645][ T1142] bridge_slave_0: left promiscuous mode [ 327.482315][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state