last executing test programs: 9.410477585s ago: executing program 2 (id=478): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) close(0x3) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.963495738s ago: executing program 2 (id=485): unshare(0x600) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x7a}, 0x0, 0x0, 0x0) 8.712738453s ago: executing program 2 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc4b80, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1c33b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(0x0, 0x0, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) tkill(r5, 0x13) socket(0x10, 0x3, 0x0) 7.179459908s ago: executing program 4 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x44}}, 0x0) 6.752968222s ago: executing program 4 (id=499): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 6.678637092s ago: executing program 3 (id=500): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24}, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='P'}, {&(0x7f0000000080)="6356c5cf1b3419574ea180a6d8edd7d1a07d86fc8085eed3d9d5"}]}}], 0x400020d, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000200), 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000019640)=[{0x0}, {&(0x7f00000195c0)="71b4bc8a602d41f92c4cd2f12f4690918da8509a8d26c601522d92fe55a03afae74cfcd720acf8a69e6a351139d59c6b45a78a4d9daafc6c0ade6b87995f6cee33d7973b8cdbba6f5379bbfc9579697b5581ca99c1608fb917f443643263eb9fae7cfe729b0e20f20e2b9c099ba3470000000000", 0x74}], 0x2}, 0x9b63dc011964690e) 4.496904768s ago: executing program 4 (id=504): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x1, r1}) 4.326004837s ago: executing program 2 (id=505): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 4.325464056s ago: executing program 3 (id=506): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000280)='ext4_alloc_da_blocks\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) 4.159443774s ago: executing program 4 (id=507): ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.153300101s ago: executing program 1 (id=508): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x49f, r0, &(0x7f00000000c0)="c7", 0x1, 0x7, 0x0, 0x1, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000340), 0x0, 0x9, 0x0, 0x2, r1}]) 3.581547599s ago: executing program 3 (id=511): syz_80211_inject_frame(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="80"], 0x404) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SG_EMULATED_HOST(r1, 0x1267, &(0x7f0000000000)) 3.524783629s ago: executing program 1 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000680)='./file1\x00', 0x0, 0x200468, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f00000000c0)={{0x2, 0x3, 0x4, 0x1, 0x101}, 0x8, 0x1}) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}}}, 0x10, 0x0}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2.338466412s ago: executing program 1 (id=515): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x42, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2.080914772s ago: executing program 0 (id=516): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x766, 0x92d, 0x7c, 0xfffffffc, 0x0, "d4f20100"}) r1 = dup(r0) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) 2.080571319s ago: executing program 1 (id=517): socket$packet(0x11, 0x3, 0x300) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESHEX, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x140, &(0x7f00000002c0)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) 1.903879869s ago: executing program 0 (id=518): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) 1.82431771s ago: executing program 4 (id=519): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x46, @local, @private0, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 1.758129249s ago: executing program 2 (id=520): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/40, 0x28) getdents(r1, 0xfffffffffffffffd, 0x58) 1.713241621s ago: executing program 1 (id=521): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = syz_io_uring_setup(0x4173, &(0x7f0000000780)={0x0, 0xb39a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 1.636913325s ago: executing program 3 (id=522): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x80000013) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.636464135s ago: executing program 0 (id=523): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x5c, r3, 0x1, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "700e62f69a00fdde"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="98181eea10de1cf2742f815a4dd06cd9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="96e08876c1da9900256f5cd4052036f9"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.472113819s ago: executing program 4 (id=524): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xf6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e61"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.437618313s ago: executing program 2 (id=525): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x41, "20854e8c4b94a5715f8227fd4236376e9708596b6fea1c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61ba4ffbb8c84e5b28"}, 0x0}) 1.363574472s ago: executing program 0 (id=526): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000540)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 1.165282014s ago: executing program 0 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000340)={0x24, r3, 0xa29, 0x70bd29, 0x5000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.070005381s ago: executing program 3 (id=528): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) userfaultfd(0x80001) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 929.008838ms ago: executing program 0 (id=529): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="e2", 0x8, 0x1, 0xb57, 0xfff9, 0x8b, 0x0, 0x4, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x100, 0x1, 0x9, 0x8, 0x25, "dae5da3a9871f5769c73c05b156799bfb0a4fa58366b64c985bceb74572cdaa31b8af9623d1ab2d33b37288cb6d9a4901d9e3257acd6e1be6b9db507cb1bd3f9b7ebf45d4ada2a4e426fd59892974db4ed304926708714774ed60068c81a0b4467ea4f22db843257de04f6a5daece5060a093ad6778d51fb9bc63f7ef4953c53"}) 56.268813ms ago: executing program 1 (id=530): syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x211, &(0x7f0000000880)="$eJzslbFvEzEUxj/7Lte0QhUMMLCEoRJFope7C6AuDGVHQmoRMEbUVAW3qdIMTSWkViwszIh/hKETAxtMzAyAhMRARyYkjOzzJb40l3A6EEPfT4rz2b73/Ox79wyCIE4tXz7/+PTi1vLaVQBnsIAZO/7NGz7Dnec/vvJqVr7dnn96NOqPAVBq2PenrB8AeLPiAQepW6Vca2ABwFkAa+BGa+6C44rV98AQZrGqobUAwwM7/HhHDXbTmbVCCvawI9cfbUoR6SbWTaKbFqBy8R8fMqwDqNslmBPfbn//SVsC3VRIkYmaytY5MVVWTDo/E98Kx03nCPT7uv/82aHuh3Y8cs4vBkdsdQsMq1YvYwZhGDZsV8TO/i/6Q/9e+tpSDsrspF7pIGplrc4tjZnSGT7ZfFYKvdtK78wVv9Tf8TMiglwK/pMl/ljoOMpb8QbQ9/IfSTDFj6geMxsdYW5KXDg+enfS6ut/Pd5qwhQuAO7US502H+akvD3W6nxu5FLBJ5NlYGFKpPWD+cBlpz75zq3Q7G3tNHf7+0ubW+0NsSG2k6R1I7oWRdeTpqnNaTuh/tVNfZpz/NcKng1YgL12r9eN94BeNx70k7R1Ku7q6853Y8NN/eNY/KlUdr2YbWcXJcuvweyPm3+tFr3C4AmCIAiCIAiCIAiCIAiCIErRAMP7+UFXjcdP7pjp3wEAAP//xbtYgA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x3) creat(&(0x7f0000000000)='./bus\x00', 0x0) 0s ago: executing program 3 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x28, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8852}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.30' (ED25519) to the list of known hosts. [ 81.716413][ T5822] cgroup: Unknown subsys name 'net' [ 81.852176][ T5822] cgroup: Unknown subsys name 'cpuset' [ 81.861206][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.528466][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.029921][ T974] cfg80211: failed to load regulatory.db [ 88.033849][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.049755][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.068430][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.074382][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.083618][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.085321][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.109399][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.126639][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.134044][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.135345][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.148400][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.150082][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.158650][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.164102][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.177789][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.186036][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.192995][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.194954][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.202061][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.215922][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.220262][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.223854][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.230915][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.242463][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.244822][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.251426][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.259559][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.274301][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.286320][ T5854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.298482][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.072465][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.086949][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.153332][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.214383][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.406783][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.452528][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.460595][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.469079][ T5837] bridge_slave_0: entered allmulticast mode [ 89.476116][ T5837] bridge_slave_0: entered promiscuous mode [ 89.507844][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.518132][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.525306][ T5838] bridge_slave_0: entered allmulticast mode [ 89.533321][ T5838] bridge_slave_0: entered promiscuous mode [ 89.567488][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.574740][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.582293][ T5837] bridge_slave_1: entered allmulticast mode [ 89.590096][ T5837] bridge_slave_1: entered promiscuous mode [ 89.605659][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.612940][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.620469][ T5838] bridge_slave_1: entered allmulticast mode [ 89.627468][ T5838] bridge_slave_1: entered promiscuous mode [ 89.718865][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.726090][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.733415][ T5844] bridge_slave_0: entered allmulticast mode [ 89.740843][ T5844] bridge_slave_0: entered promiscuous mode [ 89.793137][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.805563][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.815030][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.822305][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.829611][ T5844] bridge_slave_1: entered allmulticast mode [ 89.836552][ T5844] bridge_slave_1: entered promiscuous mode [ 89.843728][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.851480][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.858751][ T5835] bridge_slave_0: entered allmulticast mode [ 89.865773][ T5835] bridge_slave_0: entered promiscuous mode [ 89.876132][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.943672][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.952174][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.959789][ T5835] bridge_slave_1: entered allmulticast mode [ 89.966731][ T5835] bridge_slave_1: entered promiscuous mode [ 89.976617][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.004716][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.012252][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.019576][ T5836] bridge_slave_0: entered allmulticast mode [ 90.026509][ T5836] bridge_slave_0: entered promiscuous mode [ 90.103894][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.111443][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.118811][ T5836] bridge_slave_1: entered allmulticast mode [ 90.125792][ T5836] bridge_slave_1: entered promiscuous mode [ 90.157010][ T5838] team0: Port device team_slave_0 added [ 90.165947][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.178893][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.192190][ T5837] team0: Port device team_slave_0 added [ 90.215535][ T5838] team0: Port device team_slave_1 added [ 90.224409][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.236889][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.265640][ T5837] team0: Port device team_slave_1 added [ 90.274056][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.309252][ T5854] Bluetooth: hci2: command tx timeout [ 90.309727][ T5147] Bluetooth: hci1: command tx timeout [ 90.368304][ T5835] team0: Port device team_slave_0 added [ 90.392751][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.398879][ T5147] Bluetooth: hci0: command tx timeout [ 90.402484][ T5854] Bluetooth: hci3: command tx timeout [ 90.407307][ T5843] Bluetooth: hci4: command tx timeout [ 90.436287][ T5844] team0: Port device team_slave_0 added [ 90.445572][ T5835] team0: Port device team_slave_1 added [ 90.482825][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.490162][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.516690][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.560273][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.567253][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.593710][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.607653][ T5844] team0: Port device team_slave_1 added [ 90.644544][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.651612][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.677832][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.690162][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.697128][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.724627][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.746962][ T5836] team0: Port device team_slave_0 added [ 90.753950][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.761587][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.787947][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.822930][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.829957][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.856112][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.881883][ T5836] team0: Port device team_slave_1 added [ 90.905792][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.913165][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.939380][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.953182][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.960793][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.986762][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.123632][ T5835] hsr_slave_0: entered promiscuous mode [ 91.130109][ T5835] hsr_slave_1: entered promiscuous mode [ 91.137904][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.145168][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.171160][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.187728][ T5838] hsr_slave_0: entered promiscuous mode [ 91.195308][ T5838] hsr_slave_1: entered promiscuous mode [ 91.202309][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.210300][ T5838] Cannot create hsr debugfs directory [ 91.239581][ T5837] hsr_slave_0: entered promiscuous mode [ 91.246183][ T5837] hsr_slave_1: entered promiscuous mode [ 91.252567][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.261044][ T5837] Cannot create hsr debugfs directory [ 91.267340][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.274406][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.300752][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.435391][ T5844] hsr_slave_0: entered promiscuous mode [ 91.442192][ T5844] hsr_slave_1: entered promiscuous mode [ 91.448919][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.456499][ T5844] Cannot create hsr debugfs directory [ 91.578475][ T5836] hsr_slave_0: entered promiscuous mode [ 91.585400][ T5836] hsr_slave_1: entered promiscuous mode [ 91.592108][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.600265][ T5836] Cannot create hsr debugfs directory [ 92.120791][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.139745][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.164395][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.176827][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.253138][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.269503][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.284352][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.313999][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.389506][ T5147] Bluetooth: hci1: command tx timeout [ 92.395020][ T5843] Bluetooth: hci2: command tx timeout [ 92.415897][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.431999][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.444231][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.457183][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.468173][ T5843] Bluetooth: hci4: command tx timeout [ 92.473601][ T5843] Bluetooth: hci0: command tx timeout [ 92.479277][ T5147] Bluetooth: hci3: command tx timeout [ 92.581045][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.593595][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.622806][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.635121][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.783087][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.795543][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.835914][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.853106][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.887570][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.931666][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.980225][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.027598][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.034994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.076331][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.083634][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.125554][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.146036][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.200160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.207693][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.249687][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.310885][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.318134][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.330004][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.337133][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.363726][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.370952][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.493753][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.569444][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.606264][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.684068][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.724135][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.774039][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.781289][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.842845][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.850085][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.874698][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.881977][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.927148][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.934407][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.056273][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.174747][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.204942][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.333177][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.364021][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.421432][ T5837] veth0_vlan: entered promiscuous mode [ 94.468663][ T5843] Bluetooth: hci2: command tx timeout [ 94.474135][ T5843] Bluetooth: hci1: command tx timeout [ 94.504870][ T5837] veth1_vlan: entered promiscuous mode [ 94.548443][ T5843] Bluetooth: hci4: command tx timeout [ 94.553936][ T5843] Bluetooth: hci0: command tx timeout [ 94.561019][ T5147] Bluetooth: hci3: command tx timeout [ 94.565790][ T5844] veth0_vlan: entered promiscuous mode [ 94.655050][ T5844] veth1_vlan: entered promiscuous mode [ 94.693820][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.742632][ T5835] veth0_vlan: entered promiscuous mode [ 94.761095][ T5837] veth0_macvtap: entered promiscuous mode [ 94.789456][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.828807][ T5837] veth1_macvtap: entered promiscuous mode [ 94.853700][ T5844] veth0_macvtap: entered promiscuous mode [ 94.885760][ T5835] veth1_vlan: entered promiscuous mode [ 94.893868][ T5844] veth1_macvtap: entered promiscuous mode [ 94.919933][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.965818][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.011491][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.031998][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.041505][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.050431][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.073466][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.087540][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.099271][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.151549][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.162841][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.174874][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.207855][ T5835] veth0_macvtap: entered promiscuous mode [ 95.230512][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.243485][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.252831][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.261680][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.286870][ T5836] veth0_vlan: entered promiscuous mode [ 95.311118][ T5835] veth1_macvtap: entered promiscuous mode [ 95.330753][ T5836] veth1_vlan: entered promiscuous mode [ 95.415049][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.426785][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.437489][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.449455][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.462340][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.476275][ T5838] veth0_vlan: entered promiscuous mode [ 95.530728][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.536719][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.538835][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.557822][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.568243][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.583447][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.594825][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.648296][ T5838] veth1_vlan: entered promiscuous mode [ 95.663512][ T5836] veth0_macvtap: entered promiscuous mode [ 95.677091][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.694015][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.703268][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712224][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.730826][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.738807][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.741249][ T5836] veth1_macvtap: entered promiscuous mode [ 95.812753][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.822612][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.880018][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.887888][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.903389][ T5838] veth0_macvtap: entered promiscuous mode [ 95.954806][ T5838] veth1_macvtap: entered promiscuous mode [ 95.974817][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.985485][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.997399][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.007936][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.020082][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.031018][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.043874][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.105117][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.123469][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.140115][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.152620][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.163446][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.173549][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.184089][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.195664][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.254846][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.273016][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.283417][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.298429][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.340892][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.359412][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.373892][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.387151][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.406002][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.416858][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.436538][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.447423][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.465364][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.555172][ T5843] Bluetooth: hci1: command tx timeout [ 96.561142][ T5843] Bluetooth: hci2: command tx timeout [ 96.644696][ T5147] Bluetooth: hci4: command tx timeout [ 96.648208][ T5843] Bluetooth: hci0: command tx timeout [ 96.650771][ T5147] Bluetooth: hci3: command tx timeout [ 96.681143][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.695370][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.703472][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.142445][ T5923] Bluetooth: MGMT ver 1.23 [ 97.227932][ T5923] loop2: detected capacity change from 0 to 4096 [ 97.708737][ T5923] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 98.689738][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.720520][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.726216][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.746842][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.761126][ T5923] ntfs3(loop2): failed to replay log file. Can't mount rw! [ 99.961810][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.972864][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.983699][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.125496][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.207247][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.229791][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.243786][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.267216][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.536757][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.565396][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.200373][ T5934] bridge0: port 3(syz_tun) entered blocking state [ 102.207101][ T5934] bridge0: port 3(syz_tun) entered disabled state [ 102.214395][ T5934] syz_tun: entered allmulticast mode [ 102.222025][ T5934] syz_tun: entered promiscuous mode [ 102.228463][ T5934] bridge0: port 3(syz_tun) entered blocking state [ 102.235184][ T5934] bridge0: port 3(syz_tun) entered forwarding state [ 102.658668][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.674233][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.729041][ T5886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.746295][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.762057][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.839586][ T5824] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 102.894351][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.916527][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.945574][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 102.978236][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.011982][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.080935][ T5886] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 103.121976][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.149373][ T5886] usb 1-1: config 0 descriptor?? [ 103.381188][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.402116][ T5949] loop1: detected capacity change from 0 to 1024 [ 103.999702][ T5951] fuse: Bad value for 'rootmode' [ 104.043465][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 104.308981][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.555713][ T5824] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 104.563662][ T5886] kye 0003:0458:5013.0001: control desc unexpectedly large [ 104.613296][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.647158][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.662613][ T5824] usb 3-1: config 0 descriptor?? [ 104.673144][ T5886] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input5 [ 104.754524][ T12] hfsplus: b-tree write err: -5, ino 4 [ 104.903135][ T5886] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 104.975492][ T5886] usb 1-1: USB disconnect, device number 2 [ 105.103397][ T5824] monterey 0003:0566:3004.0002: unknown main item tag 0x6 [ 105.174491][ T5824] monterey 0003:0566:3004.0002: report_id 29495 is invalid [ 105.211391][ T5824] monterey 0003:0566:3004.0002: item 0 2 1 8 parsing failed [ 105.535898][ T5824] monterey 0003:0566:3004.0002: probe with driver monterey failed with error -22 [ 107.309911][ T5824] usb 3-1: USB disconnect, device number 2 [ 107.342399][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.684614][ T5958] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.691185][ T5958] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.844936][ T5958] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.529070][ T5978] loop0: detected capacity change from 0 to 4096 [ 108.590454][ T5958] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.596810][ T5958] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.599306][ T5981] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.654318][ T5958] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.696487][ T5958] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.708999][ T5958] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.786539][ T5958] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.821089][ T5958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.827130][ T5958] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.929650][ T5958] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.991215][ T5958] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.997263][ T5958] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.016115][ T5958] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.024187][ T5147] Bluetooth: hci1: unexpected event for opcode 0x200f [ 109.508245][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.021881][ T5942] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.175438][ T5955] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.443944][ T5955] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 110.482687][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.531033][ T5955] usb 4-1: config 0 descriptor?? [ 110.554142][ T5955] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 110.603449][ T6009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.620209][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.638129][ T5942] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.638481][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.655664][ T5942] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 110.690337][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.731313][ T5942] usb 3-1: config 0 descriptor?? [ 110.791600][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.929993][ T5999] loop1: detected capacity change from 0 to 40427 [ 110.950422][ T5999] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 110.958568][ T5955] gspca_cpia1: usb_control_msg 03, error -32 [ 110.973676][ T5999] F2FS-fs (loop1): Image doesn't support compression [ 110.979460][ T5955] gspca_cpia1: usb_control_msg 03, error -71 [ 110.982130][ T5991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21'. [ 110.997638][ T5999] F2FS-fs (loop1): Image doesn't support compression [ 111.009806][ T5955] gspca_cpia1: usb_control_msg 01, error -71 [ 111.012411][ T5942] usb 3-1: USB disconnect, device number 3 [ 111.015799][ T5955] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 111.036732][ T5955] usb 4-1: USB disconnect, device number 2 [ 111.043430][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.077520][ T5999] F2FS-fs (loop1): invalid crc value [ 111.134402][ T5999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.228929][ T5999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.259198][ T5999] syz.1.24: attempt to access beyond end of device [ 111.259198][ T5999] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 111.388153][ T5836] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4e6/0x1f20 [ 111.400671][ T5836] F2FS-fs (loop1): invalid blkaddr: 516, type: 10, run fsck to fix. [ 111.428749][ T5917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.589186][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.590851][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 111.623876][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.679420][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.728904][ T5917] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 111.749511][ T6022] netlink: 'syz.2.32': attribute type 10 has an invalid length. [ 111.763074][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.764466][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.780134][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.790038][ T5917] usb 5-1: config 0 descriptor?? [ 111.814217][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 111.830729][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.838048][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.846337][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.853586][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.018353][ T5147] Bluetooth: hci1: unexpected event for opcode 0x043d [ 112.079330][ T6022] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 112.183767][ T6023] bridge_slave_1: left allmulticast mode [ 112.198455][ T6023] bridge_slave_1: left promiscuous mode [ 112.214789][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.226448][ T5917] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x1 [ 112.824692][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.869187][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.025843][ T5917] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 113.074730][ T5917] usb 5-1: USB disconnect, device number 2 [ 113.087454][ T6023] bridge_slave_0: left allmulticast mode [ 113.097958][ T6023] bridge_slave_0: left promiscuous mode [ 113.109224][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.190453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.223939][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.361949][ T6023] bond0: (slave bridge0): Releasing backup interface [ 113.374380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.421402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.433437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 113.581482][ T6036] loop1: detected capacity change from 0 to 4096 [ 113.589917][ T6036] EXT4-fs: Ignoring removed nobh option [ 113.669341][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.718766][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.751142][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 113.844313][ T6043] netlink: 'syz.4.37': attribute type 29 has an invalid length. [ 113.855818][ T6043] netlink: 'syz.4.37': attribute type 29 has an invalid length. [ 114.027104][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.038222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 114.078506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.162453][ T6047] loop4: detected capacity change from 0 to 512 [ 114.174162][ T6048] loop3: detected capacity change from 0 to 1024 [ 114.209140][ T6047] EXT4-fs: Ignoring removed orlov option [ 114.226581][ T6048] EXT4-fs: Ignoring removed oldalloc option [ 114.235951][ T6047] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.257937][ T6048] EXT4-fs: Ignoring removed bh option [ 114.305905][ T6044] loop0: detected capacity change from 0 to 4096 [ 114.350994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 114.360672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 114.371103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 114.388702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 114.404613][ T6047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.409144][ T6048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 114.427347][ T6044] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 114.491718][ T6047] EXT4-fs (loop4): 1 truncate cleaned up [ 114.618752][ T6047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.680147][ T6048] EXT4-fs: Ignoring removed orlov option [ 114.716780][ T6022] syz.2.32 (6022) used greatest stack depth: 17616 bytes left [ 114.732719][ T6048] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 114.765853][ T6048] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.40: Abort forced by user [ 114.809100][ T6048] EXT4-fs (loop3): Remounting filesystem read-only [ 114.826040][ T6048] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-001000000000 r/w. Quota mode: writeback. [ 114.849625][ T30] audit: type=1800 audit(1738940979.972:2): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 114.850457][ T6047] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 13: comm syz.4.39: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 114.898917][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.948442][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.968121][ T1952] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.069127][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 115.136165][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.161581][ T1952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.195288][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.215033][ T1952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.240233][ T1952] usb 2-1: New USB device found, idVendor=0463, idProduct=c537, bcdDevice=34.39 [ 115.251223][ T1952] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 115.259513][ T1952] usb 2-1: Manufacturer: syz [ 115.272110][ T1952] usb 2-1: config 0 descriptor?? [ 115.441372][ T6065] loop4: detected capacity change from 0 to 512 [ 115.479463][ T6065] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.560479][ T6065] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.46: corrupted in-inode xattr: invalid ea_ino [ 115.601302][ T6065] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.46: couldn't read orphan inode 15 (err -117) [ 115.632999][ T6065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.868259][ T1952] hid-generic 0003:0463:C537.0004: unknown main item tag 0x0 [ 115.878247][ T1952] hid-generic 0003:0463:C537.0004: unknown main item tag 0x0 [ 115.885675][ T1952] hid-generic 0003:0463:C537.0004: unknown main item tag 0x0 [ 115.893169][ T1952] hid-generic 0003:0463:C537.0004: unknown main item tag 0x0 [ 115.903474][ T1952] hid-generic 0003:0463:C537.0004: unknown main item tag 0x0 [ 116.121439][ T1952] hid-generic 0003:0463:C537.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 116.154878][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.190280][ T1952] usb 2-1: USB disconnect, device number 2 [ 116.515310][ T6078] netlink: 168 bytes leftover after parsing attributes in process `syz.4.50'. [ 116.877761][ T6067] loop2: detected capacity change from 0 to 32768 [ 116.889236][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.895157][ T6067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.47 (6067) [ 116.966026][ T6067] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.995748][ T6067] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 117.027618][ T6067] BTRFS info (device loop2): using free-space-tree [ 117.037949][ T6072] loop3: detected capacity change from 0 to 40427 [ 117.060934][ T25] usb 2-1: config 1 has an invalid interface number: 129 but max is 1 [ 117.075080][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.088571][ T25] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 117.097753][ T25] usb 2-1: config 1 has no interface number 2 [ 117.105662][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.122216][ T6072] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 117.150611][ T6072] F2FS-fs (loop3): invalid crc value [ 117.181873][ T6072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.196802][ T25] usb 2-1: config 1 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 117.218095][ T25] usb 2-1: config 1 interface 129 has no altsetting 0 [ 117.236243][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.248405][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.265240][ T25] usb 2-1: Product: syz [ 117.274082][ T25] usb 2-1: Manufacturer: syz [ 117.282751][ T25] usb 2-1: SerialNumber: syz [ 118.061033][ T25] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 118.121944][ T25] cdc_ncm 2-1:1.0: bind() failure [ 118.161246][ T6072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.268185][ T25] usb 2-1: USB disconnect, device number 3 [ 118.351133][ T5837] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.748006][ T5835] syz-executor: attempt to access beyond end of device [ 118.748006][ T5835] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.761455][ T5835] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 120.397702][ T6134] tipc: Enabling not permitted [ 120.428423][ T6134] tipc: Enabling of bearer rejected, failed to enable media [ 120.622302][ T6139] loop4: detected capacity change from 0 to 512 [ 120.728182][ T6139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.962549][ T6139] EXT4-fs (loop4): 1 orphan inode deleted [ 121.024311][ T6139] EXT4-fs (loop4): 1 truncate cleaned up [ 121.032538][ T6139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.130539][ T6139] netlink: 'syz.4.62': attribute type 10 has an invalid length. [ 121.443802][ T6151] loop2: detected capacity change from 0 to 4096 [ 121.645923][ T6152] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.782053][ T6139] netlink: 55 bytes leftover after parsing attributes in process `syz.4.62'. [ 122.948271][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.086287][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.128428][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 123.169876][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 123.208327][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 123.254591][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.254620][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.254642][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 123.254662][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 123.254707][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 123.254727][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.262690][ T25] usb 3-1: config 0 descriptor?? [ 123.265060][ T6163] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.317321][ T5147] Bluetooth: hci5: urb ffff8880352bc300 submission failed (90) [ 123.361809][ T6168] tipc: Started in network mode [ 123.361845][ T6168] tipc: Node identity 2dff0000000000000080ffffffffffff, cluster identity 4711 [ 123.460141][ T6157] loop3: detected capacity change from 0 to 32768 [ 123.466364][ T6157] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.65 (6157) [ 123.479269][ T6157] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 123.479366][ T6157] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 123.479395][ T6157] BTRFS info (device loop3): using free-space-tree [ 123.486593][ T25] usb 3-1: USB disconnect, device number 4 [ 123.698312][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.728312][ T30] audit: type=1800 audit(1738940988.882:3): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 123.800932][ T9] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 123.806399][ T5835] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 123.857680][ T5917] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 123.857711][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.857729][ T5917] usb 2-1: Product: syz [ 123.857744][ T5917] usb 2-1: Manufacturer: syz [ 123.857758][ T5917] usb 2-1: SerialNumber: syz [ 123.878864][ T5917] usb 2-1: config 0 descriptor?? [ 123.960501][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.985808][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.033507][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 124.069054][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.129549][ T9] usb 5-1: config 0 descriptor?? [ 124.458104][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.474500][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.720411][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 124.772077][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.983355][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.061438][ T25] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 125.093828][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.108210][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.135534][ T5886] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 125.148850][ T25] usb 3-1: config 0 descriptor?? [ 125.166671][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.214167][ T5886] usb 1-1: config 0 descriptor?? [ 125.399797][ T5917] usb 2-1: Firmware version (0.0) predates our first public release. [ 125.407941][ T5917] usb 2-1: Please update to version 0.2 or newer [ 125.418985][ T9] aquacomputer_d5next 0003:0C70:F0BD.0005: unknown main item tag 0xe [ 125.438307][ T9] aquacomputer_d5next 0003:0C70:F0BD.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0 [ 125.611082][ T25] razer 0003:1532:010E.0006: item fetching failed at offset 2/5 [ 125.699150][ T25] razer 0003:1532:010E.0006: probe with driver razer failed with error -22 [ 125.739260][ T5886] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 125.845816][ T25] usb 3-1: USB disconnect, device number 5 [ 126.407283][ T5886] konepure 0003:1E7D:2DB4.0007: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 126.433298][ T5917] usb 2-1: USB disconnect, device number 4 [ 126.508058][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.528494][ T5886] usb 1-1: USB disconnect, device number 3 [ 126.630148][ T9] usb 5-1: USB disconnect, device number 3 [ 126.726607][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.760445][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.806388][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.865385][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 126.908100][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.954154][ T25] usb 4-1: config 0 descriptor?? [ 126.999472][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.129081][ T6204] loop1: detected capacity change from 0 to 32768 [ 127.171157][ T1952] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.213164][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 127.226543][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.235239][ T9] usb 5-1: Product: syz [ 127.247403][ T9] usb 5-1: Manufacturer: syz [ 127.255771][ T9] usb 5-1: SerialNumber: syz [ 127.274721][ T9] usb 5-1: config 0 descriptor?? [ 127.294815][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 127.352162][ T1952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 127.363755][ T1952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 127.373944][ T1952] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 127.385895][ T1952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.405805][ T25] kye 0003:0458:4018.0008: unknown main item tag 0x0 [ 127.412934][ T25] kye 0003:0458:4018.0008: unknown main item tag 0x0 [ 127.421308][ T25] kye 0003:0458:4018.0008: unbalanced collection at end of report description [ 127.432031][ T1952] usb 3-1: config 0 descriptor?? [ 127.443450][ T25] kye 0003:0458:4018.0008: parse failed [ 127.452521][ T25] kye 0003:0458:4018.0008: probe with driver kye failed with error -22 [ 127.606715][ T25] usb 4-1: USB disconnect, device number 3 [ 127.739001][ T5824] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.880184][ T1952] steelseries 0003:1038:12C2.0009: unknown main item tag 0x0 [ 127.899148][ T1952] steelseries 0003:1038:12C2.0009: unknown main item tag 0x0 [ 127.907922][ T1952] steelseries 0003:1038:12C2.0009: unknown main item tag 0x0 [ 127.908673][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.916138][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.930779][ T1952] steelseries 0003:1038:12C2.0009: unknown main item tag 0x0 [ 127.962732][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 127.981567][ T9] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 128.192234][ T5824] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 128.202027][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.233774][ T1952] usb 3-1: USB disconnect, device number 6 [ 128.252109][ T9] usb 5-1: USB disconnect, device number 4 [ 128.259484][ T5824] usb 1-1: config 0 descriptor?? [ 128.786833][ T6229] fuse: Bad value for 'rootmode' [ 129.073068][ T6232] warning: `syz.3.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.833089][ T5824] elan 0003:04F3:074D.000A: item fetching failed at offset 5/7 [ 129.842052][ T5824] elan 0003:04F3:074D.000A: Hid Parse failed [ 129.848277][ T5824] elan 0003:04F3:074D.000A: probe with driver elan failed with error -22 [ 129.860927][ T5824] usb 1-1: USB disconnect, device number 4 [ 131.118125][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.125794][ T5824] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.355699][ T6248] loop3: detected capacity change from 0 to 32768 [ 131.363157][ T6248] XFS: ikeep mount option is deprecated. [ 131.422262][ T6248] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.448097][ T1952] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.468202][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 131.473524][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 131.481559][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.492612][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.502735][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.516095][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.525504][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.536698][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.546774][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.558068][ T5824] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 131.567134][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.576590][ T9] usb 5-1: config 0 descriptor?? [ 131.586627][ T6248] XFS (loop3): Ending clean mount [ 131.588975][ T5824] usb 1-1: config 0 descriptor?? [ 131.612738][ T6248] XFS (loop3): Quotacheck needed: Please wait. [ 131.619675][ T1952] usb 2-1: Using ep0 maxpacket: 8 [ 131.627772][ T1952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 131.637921][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.660799][ T5888] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.672456][ T1952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.695927][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.707925][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.721485][ T1952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 131.722855][ T6248] XFS (loop3): Quotacheck: Done. [ 131.728990][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.729019][ T1952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.729041][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.729063][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.730635][ T1952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 131.796070][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.814954][ T1952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.826826][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.842697][ T1952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.867539][ T1952] usb 2-1: string descriptor 0 read error: -22 [ 131.876511][ T1952] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 131.885768][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 131.895726][ T1952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.903776][ T5835] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.928190][ T5888] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.939278][ T5888] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.955970][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.964020][ T5888] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 131.991084][ T1952] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 132.000269][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.026200][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.036526][ T5888] usb 3-1: config 0 descriptor?? [ 132.051526][ T5824] appleir 0003:05AC:8243.000C: collection stack underflow [ 132.078623][ T9] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 132.107414][ T5824] appleir 0003:05AC:8243.000C: item 0 2 0 12 parsing failed [ 132.129508][ T5824] appleir 0003:05AC:8243.000C: parse failed [ 132.135584][ T5824] appleir 0003:05AC:8243.000C: probe with driver appleir failed with error -22 [ 132.161806][ T9] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 132.198051][ T9] microsoft 0003:045E:07DA.000B: no inputs found [ 132.204463][ T9] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 132.227565][ T1952] usb 2-1: USB disconnect, device number 5 [ 132.289810][ T5824] usb 1-1: USB disconnect, device number 5 [ 132.301903][ T9] usb 5-1: USB disconnect, device number 5 [ 132.481246][ T5888] chicony 0003:04F2:1421.000D: unbalanced delimiter at end of report description [ 132.496310][ T5888] chicony 0003:04F2:1421.000D: Chicony hid parse failed: -22 [ 132.505022][ T5888] chicony 0003:04F2:1421.000D: probe with driver chicony failed with error -22 [ 133.142427][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.168036][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.231957][ T25] usb 3-1: USB disconnect, device number 7 [ 133.464404][ T6275] loop3: detected capacity change from 0 to 64 [ 133.493514][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.103'. [ 133.867940][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.694256][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 135.243805][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 135.290252][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.343732][ T25] usb 1-1: Product: syz [ 135.347943][ T25] usb 1-1: Manufacturer: syz [ 135.378040][ T25] usb 1-1: SerialNumber: syz [ 135.441407][ T25] r8152-cfgselector 1-1: Unknown version 0x0000 [ 135.485352][ T25] r8152-cfgselector 1-1: config 0 descriptor?? [ 135.576277][ T6294] loop1: detected capacity change from 0 to 256 [ 135.694950][ T6294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 135.838659][ T1952] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.006462][ T25] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 136.050231][ T1952] usb 4-1: Using ep0 maxpacket: 16 [ 136.058948][ T1952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.088793][ T1952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.169979][ T1952] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.190173][ T1952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.218066][ T1952] usb 4-1: Product: syz [ 136.229170][ T1952] usb 4-1: Manufacturer: syz [ 136.235820][ T6308] loop4: detected capacity change from 0 to 256 [ 136.245938][ T1952] usb 4-1: SerialNumber: syz [ 136.289390][ T6308] ======================================================= [ 136.289390][ T6308] WARNING: The mand mount option has been deprecated and [ 136.289390][ T6308] and is ignored by this kernel. Remove the mand [ 136.289390][ T6308] option from the mount to silence this warning. [ 136.289390][ T6308] ======================================================= [ 136.375848][ T6308] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 136.429739][ T30] audit: type=1800 audit(1738941001.592:4): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.115" name="file1" dev="loop4" ino=3 res=0 errno=0 [ 136.519869][ T1952] usb 4-1: 0:2 : does not exist [ 136.539488][ T6315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 136.546258][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 136.548036][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.600182][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 136.671253][ T1952] usb 4-1: USB disconnect, device number 4 [ 136.749993][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 136.801157][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 136.824882][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 136.841043][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.869314][ T25] usb 2-1: config 0 descriptor?? [ 136.944843][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.969078][ T5888] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 136.976648][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.008868][ T5824] vhci_hcd: vhci_device speed not set [ 137.107695][ T5824] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 137.793998][ T25] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -22 [ 137.834771][ T25] usb 2-1: USB disconnect, device number 6 [ 137.880372][ T5888] usb 3-1: config 0 has no interfaces? [ 137.885922][ T5888] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.899521][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 137.915177][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.941264][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.958158][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.971218][ T5888] usb 3-1: config 0 descriptor?? [ 137.988037][ T5886] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.002478][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.023242][ T5886] usb 5-1: config 0 descriptor?? [ 138.044200][ T5886] hub 5-1:0.0: USB hub found [ 138.211487][ T6316] usbip_core: unknown command [ 138.232822][ T9] usb 3-1: USB disconnect, device number 8 [ 138.248044][ T6316] vhci_hcd: unknown pdu 0 [ 138.260779][ T5886] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 138.271536][ T6316] usbip_core: unknown command [ 138.303198][ T3507] vhci_hcd: stop threads [ 138.315855][ T3507] vhci_hcd: release socket [ 138.325877][ T3507] vhci_hcd: disconnect device [ 138.479052][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 138.488542][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 138.516235][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 138.550773][ T5886] usb 5-1: USB disconnect, device number 6 [ 138.720826][ T6341] loop1: detected capacity change from 0 to 1024 [ 138.847586][ T6341] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 138.855067][ T6343] loop0: detected capacity change from 0 to 2048 [ 138.865001][ T6341] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 138.979354][ T6343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.984211][ T3507] hfsplus: b-tree write err: -5, ino 4 [ 140.314986][ T6361] loop4: detected capacity change from 0 to 2048 [ 140.443995][ T6366] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.546536][ T6361] NILFS (loop4): error -2 truncating bmap (ino=16) [ 140.626225][ T6366] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 140.659882][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.678347][ T6366] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 140.717414][ T6372] tap0: tun_chr_ioctl cmd 2149094457 [ 140.728478][ T6366] Remounting filesystem read-only [ 140.745209][ T5838] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 140.778257][ T5886] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.828319][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 140.847395][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.875173][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.899960][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.918080][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.938807][ T5917] usb 3-1: Product: syz [ 140.943017][ T5917] usb 3-1: Manufacturer: syz [ 140.948645][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 140.953246][ T5917] usb 3-1: SerialNumber: syz [ 140.974466][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 140.985809][ T6378] netlink: 44 bytes leftover after parsing attributes in process `syz.0.144'. [ 140.995104][ T5886] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 141.010518][ T5886] usb 2-1: Product: syz [ 141.014717][ T5886] usb 2-1: Manufacturer: syz [ 141.021028][ T5886] usb 2-1: SerialNumber: syz [ 141.031274][ T5886] usb 2-1: config 0 descriptor?? [ 141.042123][ T5886] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 141.118157][ T5942] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 141.284776][ T5942] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 141.303492][ T5942] usb 5-1: config 4 has no interface number 0 [ 141.322059][ T5942] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 141.335396][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.346958][ T5942] usb 5-1: Product: syz [ 141.354338][ T5942] usb 5-1: Manufacturer: syz [ 141.364671][ T5942] usb 5-1: SerialNumber: syz [ 141.391767][ T5942] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 141.405507][ T5917] usb 3-1: 0:2 : does not exist [ 141.791752][ T5886] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 141.806822][ T5942] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 141.842432][ T5917] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 142.563484][ T1952] usb 2-1: USB disconnect, device number 7 [ 142.682941][ T5942] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 142.728344][ T5942] usb 5-1: USB disconnect, device number 7 [ 142.748173][ T5824] vhci_hcd: vhci_device speed not set [ 142.756050][ T5917] usb 3-1: USB disconnect, device number 9 [ 142.821444][ T5943] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.031384][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 143.070148][ T5943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 143.094399][ T5943] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 143.122338][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.132595][ T6208] udevd[6208]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.158209][ T5943] usb 4-1: Product: syz [ 143.198229][ T5943] usb 4-1: Manufacturer: syz [ 143.202869][ T5943] usb 4-1: SerialNumber: syz [ 143.221153][ T5943] usb 4-1: config 0 descriptor?? [ 143.235195][ T5943] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 143.260040][ T5943] usb 4-1: Detected FT232R [ 143.268139][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.300025][ T6395] netlink: 'syz.4.150': attribute type 21 has an invalid length. [ 143.326760][ T6395] netlink: 'syz.4.150': attribute type 20 has an invalid length. [ 143.335105][ T6395] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.438946][ T5943] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 143.467227][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.484039][ T6397] loop1: detected capacity change from 0 to 4096 [ 143.504929][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 143.534708][ T5917] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 143.561311][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.601934][ T5917] usb 1-1: config 0 descriptor?? [ 143.687126][ T5943] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 143.880433][ T5943] usb 4-1: USB disconnect, device number 5 [ 143.936673][ T6406] loop4: detected capacity change from 0 to 256 [ 143.965374][ T5943] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.003536][ T5943] ftdi_sio 4-1:0.0: device disconnected [ 144.049098][ T6406] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 144.228114][ T5917] Bluetooth: Can't get version to change to load ram patch err [ 144.257614][ T5917] Bluetooth: Loading sysconfig file failed [ 144.298080][ T5917] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 144.330875][ T5917] usb 1-1: USB disconnect, device number 7 [ 144.497236][ T6399] loop2: detected capacity change from 0 to 32768 [ 145.207123][ T6399] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 145.240591][ T6399] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 145.255353][ T6399] bcachefs (loop2): Version upgrade required: [ 145.255353][ T6399] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 145.255353][ T6399] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 145.255353][ T6399] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 145.503261][ T6399] bcachefs (loop2): dropping and reconstructing all alloc info [ 145.644485][ T6399] bcachefs (loop2): accounting_read... done [ 145.668122][ T6399] bcachefs (loop2): alloc_read... done [ 145.685945][ T6399] bcachefs (loop2): stripes_read... done [ 145.696568][ T6399] bcachefs (loop2): snapshots_read... done [ 145.729141][ T6399] bcachefs (loop2): done starting filesystem [ 145.864453][ T1952] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.879423][ T5886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.999252][ T5837] bcachefs (loop2): shutting down [ 146.048771][ T1952] usb 2-1: Using ep0 maxpacket: 32 [ 146.059643][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 146.082004][ T1952] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 146.102758][ T5886] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 146.114005][ T1952] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 146.128787][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.147047][ T1952] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 146.164461][ T5886] usb 5-1: Product: syz [ 146.169518][ T5837] bcachefs (loop2): shutdown complete [ 146.184259][ T5886] usb 5-1: Manufacturer: syz [ 146.190574][ T1952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.200582][ T5886] usb 5-1: SerialNumber: syz [ 146.206965][ T1952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 146.219850][ T5886] usb 5-1: config 0 descriptor?? [ 146.232666][ T1952] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.246088][ T1952] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 146.255526][ T1952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.275459][ T1952] usb 2-1: config 0 descriptor?? [ 146.375178][ T6428] loop0: detected capacity change from 0 to 32768 [ 146.406919][ T6428] XFS: ikeep mount option is deprecated. [ 146.414931][ T6428] XFS: noikeep mount option is deprecated. [ 146.471329][ T6428] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 146.506527][ T1952] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 146.529672][ T6443] loop3: detected capacity change from 0 to 4096 [ 146.622555][ T6428] XFS (loop0): Ending clean mount [ 146.634024][ T5886] airspy 5-1:0.0: Board ID: 00 [ 146.642760][ T5886] airspy 5-1:0.0: Firmware version: [ 146.643541][ T6428] XFS (loop0): Quotacheck needed: Please wait. [ 146.665219][ T30] audit: type=1800 audit(1738941011.822:5): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.168" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 146.749553][ T5942] usb 2-1: USB disconnect, device number 8 [ 146.761109][ T6428] XFS (loop0): Quotacheck: Done. [ 146.779284][ T5942] usblp0: removed [ 146.924556][ T5844] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 147.039360][ T5886] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 147.079196][ T5886] airspy 5-1:0.0: Registered as swradio24 [ 147.084970][ T5886] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 147.102279][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.132990][ T5886] usb 5-1: USB disconnect, device number 8 [ 147.258384][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 147.277303][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.308727][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.349264][ T5888] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 147.386500][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.633043][ T5888] usb 4-1: config 0 descriptor?? [ 148.581596][ T6464] netlink: 2 bytes leftover after parsing attributes in process `syz.1.172'. [ 148.782618][ T5888] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 148.794497][ T5888] nintendo 0003:057E:200E.000E: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 148.871753][ T5888] nintendo 0003:057E:200E.000E: Failed charging grip handshake [ 148.915949][ T5888] nintendo 0003:057E:200E.000E: Failed to initialize controller; ret=-110 [ 148.984382][ T5888] nintendo 0003:057E:200E.000E: probe - fail = -110 [ 148.997695][ T5888] nintendo 0003:057E:200E.000E: probe with driver nintendo failed with error -110 [ 149.056511][ T5888] usb 4-1: USB disconnect, device number 6 [ 149.060519][ T6473] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 149.270644][ T5824] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.678345][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 149.685981][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.708430][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.718593][ T5824] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 149.738321][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.758868][ T5824] usb 1-1: config 0 descriptor?? [ 150.435333][ T5824] usb 1-1: string descriptor 0 read error: -71 [ 150.464420][ T5824] uclogic 0003:256C:006E.000F: failed retrieving string descriptor #200: -71 [ 150.526020][ T5824] uclogic 0003:256C:006E.000F: failed retrieving pen parameters: -71 [ 150.574354][ T5824] uclogic 0003:256C:006E.000F: failed probing pen v2 parameters: -71 [ 150.638228][ T5824] uclogic 0003:256C:006E.000F: failed probing parameters: -71 [ 150.715574][ T5824] uclogic 0003:256C:006E.000F: probe with driver uclogic failed with error -71 [ 150.802307][ T5824] usb 1-1: USB disconnect, device number 8 [ 151.245464][ T6506] loop4: detected capacity change from 0 to 4096 [ 151.413180][ T6514] loop1: detected capacity change from 0 to 256 [ 151.502095][ T6506] ntfs3(loop4): ino=20, mi_enum_attr [ 151.541403][ T6506] ntfs3(loop4): failed to convert name for inode 1e. [ 151.580617][ T6506] ntfs3(loop4): ino=1f, mi_enum_attr [ 151.586219][ T6506] ntfs3(loop4): ino=1f, mi_enum_attr [ 151.978730][ T6526] loop3: detected capacity change from 0 to 512 [ 152.085593][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.113471][ T6531] ALSA: mixer_oss: invalid OSS volume 'зп' [ 152.178548][ T6526] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.450451][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.453950][ T6540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.673184][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 152.708632][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 152.817713][ T6546] gtp0: entered promiscuous mode [ 152.838273][ T6546] gtp0: entered allmulticast mode [ 153.963493][ T6568] loop4: detected capacity change from 0 to 128 [ 154.006685][ T6568] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 154.132034][ T6568] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.148304][ T5888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 154.167443][ T6568] ext2 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 154.200633][ T5887] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.308398][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 154.327420][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.360651][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 154.396631][ T5887] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.406898][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.435242][ T5887] usb 4-1: config 0 has no interface number 0 [ 154.462886][ T5887] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.474456][ T5888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 154.513990][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.532476][ T5887] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.560846][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.577012][ T5888] usb 3-1: config 0 descriptor?? [ 154.605201][ T5887] usb 4-1: config 0 descriptor?? [ 154.644234][ T5887] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 154.851179][ T5887] usb 4-1: USB disconnect, device number 7 [ 155.016751][ T5888] kone 0003:1E7D:2CED.0010: unknown main item tag 0x0 [ 155.037847][ T5888] kone 0003:1E7D:2CED.0010: unknown main item tag 0x0 [ 155.082250][ T5888] kone 0003:1E7D:2CED.0010: unknown main item tag 0x0 [ 155.121905][ T5888] kone 0003:1E7D:2CED.0010: unknown main item tag 0x0 [ 155.148147][ T5888] kone 0003:1E7D:2CED.0010: unknown main item tag 0x0 [ 155.235470][ T5888] kone 0003:1E7D:2CED.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 155.250191][ T5838] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.261034][ T5888] kone 0003:1E7D:2CED.0010: couldn't init struct kone_device [ 155.283939][ T5888] kone 0003:1E7D:2CED.0010: couldn't install mouse [ 155.294151][ T5888] kone 0003:1E7D:2CED.0010: probe with driver kone failed with error -5 [ 155.386955][ T5888] usb 3-1: USB disconnect, device number 10 [ 155.645329][ T6578] loop1: detected capacity change from 0 to 4096 [ 155.947015][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.957465][ T6584] bond0: (slave bond1): Enslaving as an active interface with an up link [ 155.967337][ T6575] loop0: detected capacity change from 0 to 40427 [ 155.979825][ T6575] F2FS-fs (loop0): invalid crc value [ 156.041116][ T6587] mkiss: ax0: crc mode is auto. [ 156.066276][ T6575] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.251166][ T6594] Falling back ldisc for ttyS3. [ 156.852947][ T6600] bridge_slave_0: default FDB implementation only supports local addresses [ 156.994135][ T6575] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 157.067409][ T6607] loop4: detected capacity change from 0 to 512 [ 158.239002][ T6607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.260388][ T6610] loop2: detected capacity change from 0 to 32768 [ 158.276385][ T6619] loop1: detected capacity change from 0 to 1024 [ 158.326883][ T6607] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.331220][ T6610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.227 (6610) [ 158.441232][ T6610] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.480810][ T6610] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 158.509032][ T6610] BTRFS info (device loop2): using free-space-tree [ 158.521253][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.565365][ T11] hfsplus: b-tree write err: -5, ino 4 [ 159.027364][ T6637] loop1: detected capacity change from 0 to 4096 [ 159.188692][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.189028][ T5147] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.227728][ T6288] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 159.251275][ T5837] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.445811][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 159.461072][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.525656][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.545989][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.617293][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.661404][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.714744][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.015787][ T5888] usb 5-1: GET_CAPABILITIES returned 0 [ 160.046323][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 160.260295][ T5942] usb 5-1: USB disconnect, device number 9 [ 160.301740][ T6641] loop0: detected capacity change from 0 to 32768 [ 160.339563][ T6641] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.229 (6641) [ 160.380501][ T6641] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 160.403460][ T6641] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 160.426883][ T6641] BTRFS info (device loop0): using free-space-tree [ 161.007368][ T5844] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 161.845178][ T6712] loop3: detected capacity change from 0 to 1024 [ 162.017793][ T6716] loop1: detected capacity change from 0 to 2048 [ 162.080289][ T6716] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.134715][ T6722] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.277121][ T30] audit: type=1800 audit(1738941027.432:6): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.248" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 163.128193][ T5886] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 163.328908][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 163.370859][ T5886] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.393343][ T5886] usb 3-1: config 179 has no interface number 0 [ 163.420630][ T5886] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.449823][ T5886] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.482611][ T5886] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.513029][ T6751] Bluetooth: MGMT ver 1.23 [ 163.548620][ T5886] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 163.580225][ T5886] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.648062][ T5886] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.691880][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.723327][ T6736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.060794][ T5824] usb 3-1: USB disconnect, device number 11 [ 164.060849][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 164.076076][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 164.556602][ T6768] loop1: detected capacity change from 0 to 2048 [ 164.582650][ T6768] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 164.596124][ T6768] UDF-fs: Scanning with blocksize 512 failed [ 164.616752][ T6768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.626274][ T6771] loop0: detected capacity change from 0 to 1024 [ 164.749417][ T30] audit: type=1800 audit(1738941029.912:7): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.267" name="file0" dev="loop1" ino=801 res=0 errno=0 [ 164.886410][ T66] hfsplus: b-tree write err: -5, ino 4 [ 165.429599][ T5942] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.779416][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 165.818235][ T5942] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 165.858124][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.874823][ T5942] usb 4-1: Product: syz [ 165.884238][ T5942] usb 4-1: Manufacturer: syz [ 165.898277][ T5942] usb 4-1: SerialNumber: syz [ 165.925840][ T5942] usb 4-1: config 0 descriptor?? [ 165.945540][ T5942] gspca_main: se401-2.14.0 probing 047d:5003 [ 166.141154][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 166.155061][ T6788] ip6gretap0: entered promiscuous mode [ 166.218256][ T5917] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.378143][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 166.402305][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 166.426140][ T5917] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 166.455941][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.486867][ T5917] usb 5-1: Product: syz [ 166.506728][ T5917] usb 5-1: Manufacturer: syz [ 166.523988][ T5917] usb 5-1: SerialNumber: syz [ 166.542101][ T5917] usb 5-1: config 0 descriptor?? [ 166.553022][ T6787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 166.598739][ T5942] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 166.616588][ T5917] hub 5-1:0.0: bad descriptor, ignoring hub [ 166.642799][ T6801] loop2: detected capacity change from 0 to 512 [ 166.648348][ T5917] hub 5-1:0.0: probe with driver hub failed with error -5 [ 166.657580][ T6801] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.693413][ T5917] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 166.732410][ T6801] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.281: bad orphan inode 16 [ 166.819656][ T5942] usb 4-1: USB disconnect, device number 8 [ 166.840188][ T6801] EXT4-fs (loop2): Remounting filesystem read-only [ 166.846751][ T6801] ext4_test_bit(bit=15, block=4) = 0 [ 166.897312][ T6801] EXT4-fs (loop2): 1 orphan inode deleted [ 166.930682][ T5917] usb 5-1: USB disconnect, device number 10 [ 166.932233][ T6801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.936681][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 167.111103][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.429249][ T6810] loop2: detected capacity change from 0 to 4096 [ 167.593920][ T6812] netlink: 100 bytes leftover after parsing attributes in process `syz.3.284'. [ 167.629613][ T30] audit: type=1800 audit(1738941032.792:8): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.283" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 167.831251][ T6815] loop3: detected capacity change from 0 to 2048 [ 167.851046][ T6815] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.028102][ T5943] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 168.200049][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.241049][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.258437][ T5943] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 168.298548][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.355195][ T5943] usb 5-1: config 0 descriptor?? [ 168.688200][ T5917] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.805669][ T5943] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 168.851403][ T5943] arvo 0003:1E7D:30D4.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 168.887544][ T5917] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 168.906490][ T5917] usb 3-1: config 0 has no interface number 0 [ 168.936070][ T5917] usb 3-1: config 0 interface 98 has no altsetting 0 [ 168.970690][ T5917] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 169.009383][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.044306][ T5917] usb 3-1: Product: syz [ 169.049757][ T5917] usb 3-1: Manufacturer: syz [ 169.068070][ T5917] usb 3-1: SerialNumber: syz [ 169.117785][ T5917] usb 3-1: config 0 descriptor?? [ 169.235729][ T5943] usb 5-1: USB disconnect, device number 11 [ 170.082354][ T5917] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 170.178275][ T5147] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 170.492941][ T5917] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 170.504475][ T6838] loop3: detected capacity change from 0 to 32768 [ 170.520208][ T5917] usb 3-1: device reset changed ep0 maxpacket size! [ 170.535703][ T6838] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.296 (6838) [ 170.563296][ T5917] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 170.605158][ T5917] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 170.624029][ T6838] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.640185][ T5943] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 170.654031][ T5917] usb 3-1: USB disconnect, device number 12 [ 170.672052][ T6838] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 170.697492][ T5943] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 170.719285][ T5943] kobject: kobject_add_internal failed for firmware (error: -2 parent: 3-1) [ 170.735766][ T6838] BTRFS info (device loop3): using free-space-tree [ 170.758341][ T5943] firmware ueagle-atm!eagleII.fw: fw_load_sysfs_fallback: device_register failed [ 170.814297][ T5943] usb 3-1: [UEAGLE-ATM] firmware is not available [ 170.851221][ T5917] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.058445][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 171.089597][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.138089][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.180453][ T5917] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 171.212162][ T5835] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.238137][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.292254][ T5917] usb 3-1: config 0 descriptor?? [ 172.339142][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 172.345185][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.451148][ T5917] usb 3-1: USB disconnect, device number 13 [ 172.571115][ T6896] loop2: detected capacity change from 0 to 256 [ 172.864840][ T6896] vfat: Unknown parameter 'iocharoet' [ 173.181095][ T6896] loop2: detected capacity change from 0 to 128 [ 173.236570][ T6896] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.347111][ T6896] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.296822][ T6945] bond0: up delay (9) is not a multiple of miimon (4), value rounded to 8 ms [ 176.756163][ T6956] use of bytesused == 0 is deprecated and will be removed in the future, [ 176.823932][ T6956] use the actual size instead. [ 177.317078][ T6965] netlink: 136 bytes leftover after parsing attributes in process `syz.1.337'. [ 177.352638][ T6965] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 178.446258][ T6978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.090360][ T6997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.349'. [ 180.101329][ T6997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.349'. [ 180.455646][ T7007] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.534898][ T7003] syzkaller1: entered promiscuous mode [ 180.572539][ T7003] syzkaller1: entered allmulticast mode [ 181.323039][ T7019] syz.3.354 uses obsolete (PF_INET,SOCK_PACKET) [ 181.372138][ T7014] @: renamed from vlan0 (while UP) [ 181.488647][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 183.405182][ T7040] loop3: detected capacity change from 0 to 32768 [ 183.535747][ T7040] JBD2: Ignoring recovery information on journal [ 183.542863][ T5887] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.276121][ T7040] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 184.480176][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 184.489288][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.529244][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 184.550155][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 184.579327][ T5887] usb 2-1: SerialNumber: syz [ 184.596723][ T5887] usb 2-1: config 0 descriptor?? [ 184.612112][ T5887] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 184.621463][ T5887] usb 2-1: No valid video chain found. [ 184.774779][ T5835] ocfs2: Unmounting device (7,3) on (node local) [ 184.816982][ T5887] usb 2-1: USB disconnect, device number 9 [ 184.835427][ T7086] loop0: detected capacity change from 0 to 1024 [ 184.923470][ T7086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.943927][ T7086] EXT4-fs (loop0): shut down requested (0) [ 184.996662][ T7090] EXT4-fs (loop0): shut down requested (0) [ 185.123996][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.454300][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 185.536146][ T7094] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.545823][ T7094] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.554959][ T7094] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.564108][ T7094] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.627806][ T7084] loop4: detected capacity change from 0 to 40427 [ 185.665328][ T7099] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.685443][ T7099] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.732332][ T7084] F2FS-fs (loop4): invalid crc value [ 185.736058][ T7098] loop1: detected capacity change from 0 to 2048 [ 185.738072][ T7094] Zero length message leads to an empty skb [ 185.767780][ T7098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.769628][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 185.808310][ T7084] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.841012][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 185.857284][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 185.908052][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 185.936000][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 185.965462][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 185.976783][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 185.995844][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.007673][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.016280][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.028040][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.036964][ T7084] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 186.044598][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.062380][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.078013][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.098903][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.106324][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.259033][ T5838] syz-executor: attempt to access beyond end of device [ 186.259033][ T5838] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.311115][ T5838] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 186.334911][ T7111] input: syz1 as /devices/virtual/input/input11 [ 186.375698][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.386096][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.402413][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.410051][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.418341][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.426071][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.435266][ T25] usb 4-1: config 0 has no interfaces? [ 186.440862][ T25] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 186.450129][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.457660][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.465260][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.472878][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.481453][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.534706][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.544177][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.557144][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.691530][ T25] usb 4-1: config 0 descriptor?? [ 186.717550][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.825633][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 186.893233][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 187.033823][ T25] usb 4-1: USB disconnect, device number 9 [ 187.045068][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 187.079030][ T5887] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.569006][ T7096] loop0: detected capacity change from 0 to 32768 [ 187.666737][ T7096] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 187.725185][ T7121] loop2: detected capacity change from 0 to 4096 [ 187.738369][ T7096] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.777585][ T7121] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.793502][ T7121] EXT4-fs: Ignoring removed oldalloc option [ 187.804594][ T7121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.884282][ T7121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.339329][ T7096] XFS (loop0): Ending clean mount [ 189.356757][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.578660][ T5844] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.275299][ T7158] dummy0: entered promiscuous mode [ 190.285700][ T7158] macsec2: entered allmulticast mode [ 190.294305][ T7158] dummy0: entered allmulticast mode [ 190.319238][ T7158] dummy0: left allmulticast mode [ 190.335687][ T7158] dummy0: left promiscuous mode [ 190.659292][ T5147] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 190.793175][ T7147] loop2: detected capacity change from 0 to 32768 [ 190.922414][ T7147] [ 190.922414][ T7147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.922414][ T7147] [ 191.066933][ T7147] [ 191.066933][ T7147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.066933][ T7147] [ 191.144412][ T7147] [ 191.144412][ T7147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.144412][ T7147] [ 191.177184][ T7176] ERROR: (device loop2): diWrite: ixpxd invalid [ 191.177184][ T7176] [ 191.201483][ T7176] ERROR: (device loop2): txCommit: [ 191.201483][ T7176] [ 191.216357][ T7176] [ 191.216357][ T7176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.216357][ T7176] [ 191.330771][ T5837] [ 191.330771][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.330771][ T5837] [ 191.353471][ T5837] [ 191.353471][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.353471][ T5837] [ 191.397768][ T7182] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 191.413027][ T5824] IPVS: starting estimator thread 0... [ 191.530381][ T7185] IPVS: using max 24 ests per chain, 57600 per kthread [ 191.878954][ T7192] netlink: 64 bytes leftover after parsing attributes in process `syz.3.414'. [ 192.232932][ T7199] loop2: detected capacity change from 0 to 512 [ 192.334977][ T7175] loop1: detected capacity change from 0 to 40427 [ 192.379133][ T7175] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 192.386916][ T7175] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.479826][ T7175] F2FS-fs (loop1): invalid crc value [ 192.554778][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.586151][ T7175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.798165][ T7199] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.929403][ T30] audit: type=1800 audit(1738941058.092:9): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.416" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 193.049173][ T30] audit: type=1800 audit(1738941058.122:10): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.416" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 193.103743][ T7199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.113522][ T7175] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 193.117012][ T7189] loop0: detected capacity change from 0 to 32768 [ 193.163107][ T7175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 193.270504][ T30] audit: type=1800 audit(1738941058.432:11): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.413" name="file1" dev="loop0" ino=65 res=0 errno=0 [ 193.344223][ T7175] F2FS-fs (loop1): Can't flush 0 in 0 for SEGS_PER_SEC 1 != 1 [ 194.260900][ T7227] loop2: detected capacity change from 0 to 256 [ 194.300260][ T7227] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 194.359091][ T7227] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 194.554232][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.560816][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.601260][ T7232] syzkaller1: entered promiscuous mode [ 194.606880][ T7232] syzkaller1: entered allmulticast mode [ 194.637857][ T7235] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 194.650853][ T7235] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 194.715946][ T5147] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 194.727046][ T5147] Bluetooth: hci0: Injecting HCI hardware error event [ 194.736824][ T5843] Bluetooth: hci0: hardware error 0x00 [ 194.961793][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 196.773381][ T7290] loop0: detected capacity change from 0 to 64 [ 196.788367][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 197.392164][ T7300] loop0: detected capacity change from 0 to 2048 [ 197.457707][ T7300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.610466][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.807020][ T7281] loop3: detected capacity change from 0 to 40427 [ 197.853776][ T7281] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 197.869510][ T7281] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 197.947376][ T7281] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.092333][ T7320] loop2: detected capacity change from 0 to 1024 [ 198.137681][ T7281] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 198.186078][ T7281] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 198.195891][ T7294] loop1: detected capacity change from 0 to 32768 [ 198.213598][ T7294] btrfs: Deprecated parameter 'usebackuproot' [ 198.243277][ T7294] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 198.283136][ T7294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.452 (7294) [ 198.328496][ T7320] hfsplus: request for non-existent node 2048 in B*Tree [ 198.335745][ T7320] hfsplus: request for non-existent node 2048 in B*Tree [ 198.404995][ T7294] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.417438][ T7324] hfsplus: request for non-existent node 2048 in B*Tree [ 198.441381][ T7324] hfsplus: request for non-existent node 2048 in B*Tree [ 198.444893][ T7294] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 198.476230][ T7294] BTRFS info (device loop1): using free-space-tree [ 198.670750][ T6288] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 198.758539][ T7294] BTRFS error (device loop1): failed to load root extent [ 198.788541][ T7294] BTRFS warning (device loop1): try to load backup roots slot 1 [ 198.816858][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 198.831310][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 198.885474][ T7294] BTRFS warning (device loop1): couldn't read tree root [ 198.897761][ T7294] BTRFS warning (device loop1): try to load backup roots slot 2 [ 198.912082][ T11] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 198.927706][ T7294] BTRFS warning (device loop1): couldn't read tree root [ 198.935677][ T7294] BTRFS warning (device loop1): try to load backup roots slot 3 [ 198.975951][ T7294] BTRFS info (device loop1): rebuilding free space tree [ 199.018212][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 199.033708][ T25] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 199.062368][ T25] usb 1-1: config 0 has no interface number 0 [ 199.092229][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 199.107764][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.120667][ T7294] BTRFS info (device loop1): checking UUID tree [ 199.178065][ T25] usb 1-1: Product: syz [ 199.188701][ T25] usb 1-1: Manufacturer: syz [ 199.206147][ T25] usb 1-1: SerialNumber: syz [ 199.239594][ T25] usb 1-1: config 0 descriptor?? [ 199.260797][ T25] smsc95xx v2.0.0 [ 199.665520][ T5836] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.688394][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 199.719468][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 200.137610][ T7358] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.181302][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 200.186417][ T7356] loop1: detected capacity change from 0 to 4096 [ 200.220192][ T25] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 200.279976][ T25] usb 1-1: USB disconnect, device number 9 [ 200.665718][ T7352] loop4: detected capacity change from 0 to 40427 [ 200.748247][ T7352] F2FS-fs (loop4): invalid crc value [ 200.770964][ T7352] F2FS-fs (loop4): Found nat_bits in checkpoint [ 200.967694][ T7373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.005357][ T7352] F2FS-fs (loop4): Start checkpoint disabled! [ 201.108184][ T7352] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 201.334813][ T7383] loop1: detected capacity change from 0 to 512 [ 201.383501][ T7383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.489463][ T7383] EXT4-fs (loop1): 1 truncate cleaned up [ 201.544830][ T7383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.610942][ T6288] kworker/u8:12: attempt to access beyond end of device [ 201.610942][ T6288] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.672073][ T7383] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.481: corrupted in-inode xattr: overlapping e_value [ 201.698561][ T5824] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 201.700137][ T6288] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 201.766714][ T7383] EXT4-fs (loop1): Remounting filesystem read-only [ 201.803041][ T7383] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1772: inode #15: comm syz.1.481: unable to update i_inline_off [ 201.838140][ T7383] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 201.869077][ T5824] usb 1-1: config 8 has an invalid interface number: 207 but max is 0 [ 201.880828][ T5824] usb 1-1: config 8 has an invalid descriptor of length 53, skipping remainder of the config [ 201.904962][ T5824] usb 1-1: config 8 has no interface number 0 [ 202.045009][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.137360][ T5824] usb 1-1: config 8 interface 207 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 202.149169][ T5824] usb 1-1: config 8 interface 207 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.178546][ T5824] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 202.187626][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.210679][ T5824] usb 1-1: Product: syz [ 202.214900][ T5824] usb 1-1: Manufacturer: syz [ 202.226019][ T5824] usb 1-1: SerialNumber: syz [ 202.610874][ T7404] loop1: detected capacity change from 0 to 2048 [ 202.693606][ T7404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.733485][ T5824] usb 1-1: USB disconnect, device number 10 [ 202.744857][ T7404] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 202.823804][ T7404] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 202.857744][ T7404] EXT4-fs (loop1): This should not happen!! Data will be lost [ 202.857744][ T7404] [ 202.882223][ T7404] EXT4-fs (loop1): Total free blocks count 0 [ 202.894966][ T7404] EXT4-fs (loop1): Free/Dirty block details [ 202.916361][ T7404] EXT4-fs (loop1): free_blocks=66060288 [ 202.941522][ T7404] EXT4-fs (loop1): dirty_blocks=16 [ 202.947232][ T7404] EXT4-fs (loop1): Block reservation details [ 202.955764][ T7404] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 203.051603][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.121079][ T7415] Illegal XDP return value 4294967283 on prog (id 55) dev syz_tun, expect packet loss! [ 203.385183][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 204.438852][ T30] audit: type=1326 audit(1738941069.562:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.4.499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5abd8cde9 code=0x0 [ 206.315861][ T7453] loop3: detected capacity change from 0 to 512 [ 206.418127][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 206.530402][ T7453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.556923][ T7453] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.587471][ T7462] capability: warning: `syz.0.509' uses 32-bit capabilities (legacy support in use) [ 206.605453][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 206.620901][ T5886] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 206.636323][ T5886] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.648055][ T5943] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 206.672734][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.699131][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.740547][ T5886] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.788441][ T5886] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.806956][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.818293][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 206.843275][ T5943] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 206.846026][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.861444][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.920790][ T5943] usb 5-1: config 0 descriptor?? [ 206.947402][ T5943] gspca_main: sq930x-2.14.0 probing 041e:403c [ 207.099408][ T5886] usb 3-1: usb_control_msg returned -32 [ 207.105056][ T5886] usbtmc 3-1:16.0: can't read capabilities [ 207.963489][ T7476] loop0: detected capacity change from 0 to 64 [ 207.970893][ T7469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.981532][ T5943] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 207.993049][ T7474] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 208.010337][ T5824] usb 3-1: USB disconnect, device number 14 [ 208.048271][ T5943] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 208.109164][ T5943] usb 5-1: USB disconnect, device number 12 [ 208.325150][ T5844] hfs: node 4:3 still has 2 user(s)! [ 208.446671][ T7480] loop1: detected capacity change from 0 to 128 [ 208.536212][ T7480] netlink: 'syz.1.517': attribute type 6 has an invalid length. [ 209.088157][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 209.326167][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.338128][ T5943] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 209.345902][ T5824] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.355916][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.399716][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.421722][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.441902][ T7491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.493919][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.537486][ T5824] usb 5-1: Using ep0 maxpacket: 8 [ 209.547481][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.572756][ T5824] usb 5-1: config index 0 descriptor too short (expected 36, got 18) [ 209.594249][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.604536][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.617823][ T5943] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 209.629009][ T5824] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice= 0.00 [ 209.638327][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.647801][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.662876][ T5943] usb 3-1: config 0 descriptor?? [ 209.672693][ T5824] usb 5-1: config 0 descriptor?? [ 209.713862][ T5824] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 209.763987][ T5942] usb 2-1: USB disconnect, device number 10 [ 210.117042][ T5943] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 210.130619][ T5943] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 210.142209][ T5943] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 210.153888][ T5943] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 210.161627][ T5943] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 210.175993][ T5943] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 210.392385][ T7508] non-paged memory [ 210.396552][ T7508] list_del corruption, ffff888033a75900->prev is LIST_POISON2 (dead000000000122) [ 210.437583][ T7508] ------------[ cut here ]------------ [ 210.443324][ T7508] kernel BUG at lib/list_debug.c:61! [ 210.465700][ T7511] loop1: detected capacity change from 0 to 16 [ 210.478026][ T7508] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 210.485008][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: syz.0.529 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 210.495084][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 210.505167][ T7508] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x190 [ 210.512216][ T7508] Code: 8c 4c 89 fe 48 89 da e8 a2 63 36 fc 90 0f 0b 48 89 df e8 27 e0 13 fd 48 c7 c7 60 ce 60 8c 4c 89 fe 48 89 da e8 85 63 36 fc 90 <0f> 0b 4c 89 e7 e8 0a e0 13 fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 db [ 210.514704][ T7511] erofs (device loop1): mounted with root inode @ nid 36. [ 210.531821][ T7508] RSP: 0018:ffffc9000c99f878 EFLAGS: 00010246 [ 210.531844][ T7508] RAX: 000000000000004e RBX: dead000000000122 RCX: 165877d194e62f00 [ 210.531857][ T7508] RDX: ffffc90004c42000 RSI: 0000000000004ae6 RDI: 0000000000004ae7 [ 210.531879][ T7508] RBP: dffffc0000000000 R08: ffffffff819f3f6c R09: 1ffff92001933eac [ 210.531892][ T7508] R10: dffffc0000000000 R11: fffff52001933ead R12: dead000000000122 [ 210.531905][ T7508] R13: dffffc0000000000 R14: ffff888029a0c8d8 R15: ffff888033a75900 [ 210.531919][ T7508] FS: 00007f78617f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 210.593754][ T7508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.600340][ T7508] CR2: 00007f7517377d38 CR3: 000000004dd5a000 CR4: 00000000003526f0 [ 210.608306][ T7508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.616267][ T7508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.624232][ T7508] Call Trace: [ 210.627501][ T7508] [ 210.630433][ T7508] ? __die_body+0x5f/0xb0 [ 210.634763][ T7508] ? die+0x9e/0xc0 [ 210.638480][ T7508] ? do_trap+0x15a/0x3a0 [ 210.642717][ T7508] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 210.649134][ T7508] ? do_error_trap+0x1dc/0x2c0 [ 210.653895][ T7508] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 210.660305][ T7508] ? __pfx_do_error_trap+0x10/0x10 [ 210.665409][ T7508] ? handle_invalid_op+0x34/0x40 [ 210.670337][ T7508] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 210.676752][ T7508] ? exc_invalid_op+0x38/0x50 [ 210.681427][ T7508] ? asm_exc_invalid_op+0x1a/0x20 [ 210.686450][ T7508] ? __wake_up_klogd+0xcc/0x110 [ 210.691296][ T7508] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 210.697704][ T7508] ? __list_del_entry_valid_or_report+0x12b/0x190 [ 210.704112][ T7508] hci_chan_del+0x70/0x1b0 [ 210.708528][ T7508] l2cap_conn_put+0x70/0xe0 [ 210.713027][ T7508] l2cap_sock_shutdown+0xa8a/0x1020 [ 210.718229][ T7508] ? l2cap_sock_release+0x6c/0x1d0 [ 210.723332][ T7508] ? __pfx_lock_release+0x10/0x10 [ 210.728352][ T7508] ? __pfx_l2cap_sock_shutdown+0x10/0x10 [ 210.733982][ T7508] ? bt_accept_dequeue+0x3ac/0x570 [ 210.739108][ T7508] l2cap_sock_release+0x79/0x1d0 [ 210.744057][ T7508] sock_close+0xbc/0x240 [ 210.748563][ T7508] ? __pfx_sock_close+0x10/0x10 [ 210.753405][ T7508] __fput+0x3e9/0x9f0 [ 210.757384][ T7508] task_work_run+0x24f/0x310 [ 210.761963][ T7508] ? __pfx_task_work_run+0x10/0x10 [ 210.767078][ T7508] get_signal+0x15f7/0x1750 [ 210.771581][ T7508] ? __pfx_task_work_add+0x10/0x10 [ 210.776692][ T7508] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 210.782239][ T7508] ? __pfx_get_signal+0x10/0x10 [ 210.787088][ T7508] arch_do_signal_or_restart+0x96/0x860 [ 210.792639][ T7508] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 210.798787][ T7508] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 210.804772][ T7508] ? syscall_exit_to_user_mode+0xa3/0x340 [ 210.810490][ T7508] syscall_exit_to_user_mode+0xce/0x340 [ 210.816045][ T7508] do_syscall_64+0x100/0x230 [ 210.820630][ T7508] ? clear_bhb_loop+0x35/0x90 [ 210.825304][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.831206][ T7508] RIP: 0033:0x7f786398cde9 [ 210.835616][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.855216][ T7508] RSP: 002b:00007f78617f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 210.863621][ T7508] RAX: fffffffffffffffc RBX: 00007f7863ba5fa0 RCX: 00007f786398cde9 [ 210.871586][ T7508] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004 [ 210.879547][ T7508] RBP: 00007f7863a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.887505][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.895465][ T7508] R13: 0000000000000000 R14: 00007f7863ba5fa0 R15: 00007fff805ad618 [ 210.903431][ T7508] [ 210.906439][ T7508] Modules linked in: [ 210.911031][ T7508] ---[ end trace 0000000000000000 ]--- [ 210.911134][ T5824] gspca_sonixj: reg_r err -110 [ 210.949167][ T7511] syz.1.530: attempt to access beyond end of device [ 210.949167][ T7511] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 210.979589][ T7511] erofs (device loop1): read error -5 @ 43 of nid 36 [ 210.981052][ T5824] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 210.987774][ T7511] erofs (device loop1): readahead error at folio 40 @ nid 36 [ 210.997114][ T5824] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 211.008153][ T7511] erofs (device loop1): readahead error at folio 39 @ nid 36 [ 211.010581][ T7508] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x190 [ 211.016771][ T7511] erofs (device loop1): readahead error at folio 38 @ nid 36 [ 211.032935][ T7511] erofs (device loop1): readahead error at folio 34 @ nid 36 [ 211.040694][ T7508] Code: 8c 4c 89 fe 48 89 da e8 a2 63 36 fc 90 0f 0b 48 89 df e8 27 e0 13 fd 48 c7 c7 60 ce 60 8c 4c 89 fe 48 89 da e8 85 63 36 fc 90 <0f> 0b 4c 89 e7 e8 0a e0 13 fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 db [ 211.041227][ T7511] erofs (device loop1): readahead error at folio 32 @ nid 36 [ 211.061245][ T7514] syz.1.530: attempt to access beyond end of device [ 211.061245][ T7514] loop1: rw=0, sector=14546590688, nr_sectors = 8 limit=16 [ 211.068117][ T7511] erofs (device loop1): readahead error at folio 30 @ nid 36 [ 211.089171][ T7511] erofs (device loop1): readahead error at folio 27 @ nid 36 [ 211.096579][ T7511] erofs (device loop1): readahead error at folio 26 @ nid 36 [ 211.104005][ T7511] erofs (device loop1): readahead error at folio 25 @ nid 36 [ 211.109464][ T7508] RSP: 0018:ffffc9000c99f878 EFLAGS: 00010246 [ 211.117756][ T7511] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 211.123811][ T5824] usb 5-1: USB disconnect, device number 13 [ 211.132782][ T7511] erofs (device loop1): readahead error at folio 23 @ nid 36 [ 211.138038][ T5943] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 5: -71 [ 211.166954][ T7508] RAX: 000000000000004e RBX: dead000000000122 RCX: 165877d194e62f00 [ 211.175460][ T5943] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense calibration info: -71 [ 211.181585][ T7511] erofs (device loop1): readahead error at folio 22 @ nid 36 [ 211.195638][ T7508] RDX: ffffc90004c42000 RSI: 0000000000004ae6 RDI: 0000000000004ae7 [ 211.210787][ T7514] erofs (device loop1): read error -5 @ 43 of nid 36 [ 211.212483][ T5943] playstation 0003:054C:0DF2.0013: Failed to get calibration data from DualSense [ 211.219958][ T7511] erofs (device loop1): readahead error at folio 21 @ nid 36 [ 211.234326][ T7511] erofs (device loop1): readahead error at folio 20 @ nid 36 [ 211.238626][ T7508] RBP: dffffc0000000000 R08: ffffffff819f3f6c R09: 1ffff92001933eac [ 211.246402][ T7511] erofs (device loop1): readahead error at folio 18 @ nid 36 [ 211.259604][ T5943] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 211.259928][ T7511] erofs (device loop1): readahead error at folio 12 @ nid 36 [ 211.274730][ T7508] R10: dffffc0000000000 R11: fffff52001933ead R12: dead000000000122 [ 211.277099][ T7511] erofs (device loop1): readahead error at folio 10 @ nid 36 [ 211.293388][ T7508] R13: dffffc0000000000 R14: ffff888029a0c8d8 R15: ffff888033a75900 [ 211.302487][ T5943] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -71 [ 211.307373][ T7511] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 211.322151][ T7511] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 211.323942][ T5943] usb 3-1: USB disconnect, device number 15 [ 211.333960][ T7511] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 211.346865][ T7508] FS: 00007f78617f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 211.368917][ T7508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.376934][ T7511] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 211.379965][ T7508] CR2: 00007f267dead78a CR3: 000000004dd5a000 CR4: 00000000003526f0 [ 211.389039][ T7511] syz.1.530: attempt to access beyond end of device [ 211.389039][ T7511] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 211.395086][ T7508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.407185][ T7511] syz.1.530: attempt to access beyond end of device [ 211.407185][ T7511] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 211.416497][ T7508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.436090][ T7508] Kernel panic - not syncing: Fatal exception [ 211.442494][ T7508] Kernel Offset: disabled [ 211.446828][ T7508] Rebooting in 86400 seconds..