last executing test programs: 17m21.597806569s ago: executing program 32 (id=37): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000f00)="9e"}) 16m30.615507756s ago: executing program 33 (id=209): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c757466383d312c757466383d312c636865636b3d72656c617865642c726f6469722c726f6469722c757466383d302c726f6469722c696f636861727365743d63703836392c757466383d302c696f636861727365743d6b6f69382d722c73686f72746e616d653d77696e39352c696f636861727365743d6575632d6a702c747a3d5554432c6e6f6e756d7461696c3d302c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e39352c0037e66f94a626f69f74340b0078494e6db1dd4c69a19c1cc35775d2ab9eb50bca69eeddf187a9dd44097d7a69a271f917439ca98ae8e7b56d063cb25005693152e151c469929f57ee28be9199b1ec3a73bc6c33523eec157bc68eeaab19c92f9a350bb71d33b9889dc81c41baf97578bed0bdb8726e216c96c40b53a8022ab12990272f9bee7731c9dcbcbfd7d0876ac6fa7fd543f4df7a0cbb843eea8be122f228160f636c4b85f4496825a31106b063aede34505cc9b54eafeee55b84f9c684df374efb9fabd22930a1f82aed4777883a6daa8287bf00000000"], 0x1, 0x275, &(0x7f00000003c0)="$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") setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)="17000000020001000003be8c5e687a8a6a003200020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197", 0x42) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2200000, 0x0, 0x0, 0x0, 0x0) 16m24.891294088s ago: executing program 34 (id=224): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 15m43.595126728s ago: executing program 35 (id=347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) shutdown(r0, 0x2) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 14m23.308261383s ago: executing program 36 (id=624): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 13m58.852694626s ago: executing program 37 (id=723): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 13m38.044708376s ago: executing program 38 (id=770): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x32, 0x0, 0x32, 0x61]}, &(0x7f0000000040)={0x0, "f713ce12c1fe3c9a2cd6b337dad1ce400cd698adfc4a6bee479ccd9b275e51e4121209972d25880c4f43648580c5c3893b826beb9a17136643db3077a0b7cf3f"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x4, r0, &(0x7f0000000240)="3f73be", 0x3) keyctl$setperm(0x5, r0, 0x18200117) keyctl$get_security(0x11, r0, 0x0, 0x0) 12m8.217213638s ago: executing program 39 (id=1083): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000192c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019300), 0x0, 0x5, 0x0, 0x0, r1}) 11m55.181498793s ago: executing program 40 (id=1115): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000002c0)=0x8001) 11m31.151851297s ago: executing program 41 (id=1197): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}}, 0x0) 11m29.993156587s ago: executing program 42 (id=1200): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x7, 0x4, 0x10, 0x4, 0xb, 0xfd, 0x7, 0x81}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x28, 0x26, 0x0, 0x1c, 0x3, 0x400004f, 0x100010, 0x2c, 0xffffffffffffffff}) 9m40.913115846s ago: executing program 3 (id=1716): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x20}, 0x1c) 9m40.276301242s ago: executing program 3 (id=1720): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x354, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2c0, 0x2a8, 0x2a8, 0x2c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x208, 0x4003, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6_vti0\x00', {0x9, 0x3, 0x13, 0x3ff, 0x8, 0x6, 0x80000001, 0x18, 0x8}, {0x7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x4, {0x100}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b0) 9m37.542103601s ago: executing program 43 (id=1721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0904000000000000000002000003240004800c000180080001006c6f6700140001800c000100636f756e74657200040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r0) 9m37.468700746s ago: executing program 3 (id=1727): mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000003c0)=0x6, 0x6, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000400)=0x1, 0x7, 0x3) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 9m37.049565179s ago: executing program 3 (id=1728): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2) 9m36.388371171s ago: executing program 3 (id=1732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000340)="a6", 0x58) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x34, 0x0, &(0x7f0000000480)) setsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0) 9m35.241982315s ago: executing program 3 (id=1737): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4604070003070028fadf06000002000300060000000903000038000200000000000e0000000000200001000500"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 9m32.77467919s ago: executing program 44 (id=1737): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4604070003070028fadf06000002000300060000000903000038000200000000000e0000000000200001000500"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 7m12.086754505s ago: executing program 8 (id=2341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x40}}, 0x0) 7m11.472159441s ago: executing program 8 (id=2345): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) 7m10.623452304s ago: executing program 8 (id=2350): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000440)=0xd, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000200)=0xe, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 7m9.976099306s ago: executing program 8 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0600000080211000001080211000000505050505050"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7m8.934160716s ago: executing program 8 (id=2360): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002780)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1f6, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 7m5.800747789s ago: executing program 8 (id=2366): r0 = userfaultfd(0x801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) close_range(r0, r0, 0x0) 7m3.942416253s ago: executing program 45 (id=2366): r0 = userfaultfd(0x801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) close_range(r0, r0, 0x0) 6m4.861881162s ago: executing program 4 (id=2616): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@abort}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nogrpid}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 6m3.792766993s ago: executing program 4 (id=2622): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x20000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6m2.924311094s ago: executing program 4 (id=2626): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="bdb3305248e60a68", 0x8}], 0x1}, 0x800) 6m2.444069735s ago: executing program 4 (id=2628): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89100a, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 6m2.009317235s ago: executing program 4 (id=2630): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) 6m1.447992641s ago: executing program 4 (id=2633): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 5m59.061909557s ago: executing program 46 (id=2633): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 5m47.994812041s ago: executing program 6 (id=2680): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420fb847000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) 5m47.362005475s ago: executing program 0 (id=2682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000030601080000000000000000050000000900020073797a31000000000500010007"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5m47.160336822s ago: executing program 6 (id=2683): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0xff, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r0}, 0x38) 5m46.434639147s ago: executing program 0 (id=2686): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 5m45.489690873s ago: executing program 0 (id=2689): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e25, 0x80000, @mcast1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dontfrag={{0x10, 0x29, 0x3e, 0x3}}], 0x10}, 0x4011) 5m44.504275549s ago: executing program 0 (id=2691): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89100a, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 5m43.570955232s ago: executing program 0 (id=2694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @local}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 5m42.392713707s ago: executing program 0 (id=2697): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) 5m39.770803625s ago: executing program 47 (id=2697): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) 5m39.704347539s ago: executing program 6 (id=2700): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x541b, 0x0) 5m38.819477502s ago: executing program 6 (id=2703): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89100a, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 5m38.077872456s ago: executing program 6 (id=2704): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1b, 0x55c, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 5m36.596505947s ago: executing program 6 (id=2708): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 5m33.411572417s ago: executing program 48 (id=2708): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 6.78912418s ago: executing program 5 (id=4360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x67) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfe, 0x579, &(0x7f0000001100)="$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") 5.424281562s ago: executing program 5 (id=4352): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001400)=""/18, 0x12) 4.835820831s ago: executing program 9 (id=4354): openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.236448317s ago: executing program 5 (id=4355): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200), r1}}, 0x18) 4.236199306s ago: executing program 2 (id=4357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 4.181046739s ago: executing program 9 (id=4358): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c0, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBn8meSO4uksBLBAS2sjttrbbLIHoiplBRqoYt3B5IE4Q4WPMVgZWtj6ScQBDu/hI3gBxD8AHZecfDKJDMkucufDVxu1fv9iuyz877P+z7vzGR3YZk3n7w6Hd8p4t43X/0R3W4WjUEM4lEW/WhELaWUYmnwXQAA/2WPUoq/0sIlUwblSxbR7R63NADgSA7+/f/z0UsCAI7s/Q8+fPd0ODx7ryi6cXv67cUoi4jy66L99F58FpO4GzejF48X/wuo/1ooX2+nlGatotSPN6azi1GZOf3412r803qik+hFfx6t578zPDspFlbyZ2Ud16v5B+X8t6IXL6/PH1X+rQ35McrjzddX6r8Rvfjt0/g8JnFnnrqc/+uTong7ff/3lx+V5ZX52exi1Jn3W0rN53dVAAAAAAAAAAAAAAAAAAAAAAD4v7tR7Z3Tifn+PeWhav+d5uPym3YUtf76/jyL/Kwe6In9gWYpfkip04oYnt0siiJVHZf5rXilFa2rWTUAAAAAAAAAAAAAAAAAAAD8uzz44uH4fDK5e39D8Pv1iC1NW4J6N4D6sf49Wc1tTYOVI6/Fw/F5Z/uAK02NKtwxaTTrPlnEzuVEq12P3D/oJBweXNtW848/HTpgd3+f9q7z82yC+u4an2exsU8n6iPd+pr+stonj0vOlW9rSvtvv5Ug39jUO3jt+UvzYLajT2S7Cnvrz8WZq45kT64in5/Vjentld04Nt8bm6/FtnfKU7L52zp/dj98AAAAAAAAAAAAAAAAAACANcuHfp9qurYntZE6RysLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6r5ef/HxDMquRLdM7j/oMrXiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgH8CAAD//4cGVUU=") mount$nfs(&(0x7f0000000100)='8..', 0x0, 0x0, 0xc0036, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80342, 0x0) 4.013688974s ago: executing program 7 (id=4359): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7002"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)) 3.515468974s ago: executing program 5 (id=4361): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 3.410786244s ago: executing program 1 (id=4362): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="147f", @ANYRES16=0x0, @ANYBLOB="02000000000000008000250000000600060002"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.410592449s ago: executing program 2 (id=4363): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) 3.408390669s ago: executing program 7 (id=4364): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008100)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.152575313s ago: executing program 9 (id=4366): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.913414829s ago: executing program 1 (id=4367): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x5c}}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001"], 0x48}}, 0x0) 2.800054199s ago: executing program 2 (id=4368): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 2.520510929s ago: executing program 7 (id=4369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.503001222s ago: executing program 9 (id=4370): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x10000000, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffe0e, 0x2, {{0x9, 0x9, 0x7, 0x40, 0x1, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x9, 0xad70, 0x4, 0xf88, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x5eca92899e5bdfc5}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x5, 0x1000}}]}}}]}, 0x94}}, 0x0) 2.224861694s ago: executing program 1 (id=4371): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) syz_clone(0x8200e411, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 2.100874089s ago: executing program 2 (id=4372): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.073510566s ago: executing program 5 (id=4373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x28}}, 0x0) 1.900568248s ago: executing program 7 (id=4374): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) 1.870624582s ago: executing program 9 (id=4375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0xecffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) 1.281330599s ago: executing program 1 (id=4376): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) 1.228514139s ago: executing program 7 (id=4377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0x3, 0x0) 1.228194681s ago: executing program 9 (id=4378): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 898.433349ms ago: executing program 5 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) brk(0x20001000) 753.974359ms ago: executing program 1 (id=4380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a310000000058"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25110000000800150001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) 636.526949ms ago: executing program 7 (id=4381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) 636.220875ms ago: executing program 2 (id=4382): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 286.762972ms ago: executing program 1 (id=4383): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) 0s ago: executing program 2 (id=4384): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x0, 0x3}, @my=0x0, 0x4, 0x9, 0x9, 0xb, 0x101, 0x7, 0x6}) kernel console output (not intermixed with test programs): 2-1:0.0: non-zero urb status (-71) [ 1169.299273][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.306365][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.306982][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.313965][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.314600][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.321753][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.329748][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.345913][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.354770][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.355411][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.369258][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.369881][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.376936][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.377516][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.384479][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.385119][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.385744][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.392683][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.393302][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.400428][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.401086][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.408195][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.408766][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.415819][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.416451][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.423411][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.431479][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.453392][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.462354][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.463031][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.470240][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.470855][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.477897][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.478513][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.485481][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.492667][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.493258][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.500363][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.500973][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.508043][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.508696][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.515885][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.516524][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.523549][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.524203][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.532503][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.547019][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.557519][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.558252][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.565302][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.579352][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.580119][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.587276][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.587927][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.594930][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.595560][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.602870][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.603505][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.610714][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.611361][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.618520][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.619150][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.626309][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.626957][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.641443][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.659098][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.659730][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.666869][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.667502][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.674509][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.675146][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.689014][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.689657][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.696786][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.697388][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.704420][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.705080][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.705751][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.712728][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.713361][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.720592][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.721240][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.728314][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.728886][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.735925][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.756890][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.774184][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.774868][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.782111][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.782733][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.789902][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.790526][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.797501][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.798116][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.805065][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.805776][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.812781][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.813348][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.820521][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.821142][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.828195][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.828834][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.835985][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.850463][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.867417][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.868042][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.875058][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.875752][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.882768][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.883383][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.890520][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.891153][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.898255][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.898821][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.905893][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.906461][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.913385][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.914038][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.921200][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.921795][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.928836][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.929470][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.936542][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.944365][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.959632][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.968631][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.969244][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.989620][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.990269][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.997338][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1169.997958][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.004912][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.005508][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.012619][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.013227][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.020352][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.021021][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.028175][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.028780][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.035871][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.036473][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.050894][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.067942][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.074953][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.075542][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.089398][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.090019][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.097226][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.097891][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.104865][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.105479][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.112619][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.113182][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.120351][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.120981][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.128086][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.128697][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.135770][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.136367][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.143401][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.151487][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.173283][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.182314][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.182936][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.190078][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.190692][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.197754][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.198358][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.205322][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.219333][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.219986][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.227067][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.227658][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.234594][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.235242][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.242371][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.250303][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.273281][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.282479][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.283099][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.290247][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.290904][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.297960][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.298582][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.305520][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.319404][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.320016][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.327014][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.327607][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.334597][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.335249][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.349255][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.357141][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.373255][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.373928][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.381030][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.381648][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.388672][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.389260][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.396310][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.396903][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.403900][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.404547][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.411708][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.412292][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.419332][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.419953][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.426952][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.427544][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.434496][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.435127][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.449132][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.457260][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.472848][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.482114][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.482763][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.489907][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.490531][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.498459][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.499067][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.506141][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.506758][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.513712][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.514368][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.521555][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.522206][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.529298][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.529933][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.537104][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.537733][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.544711][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.545355][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.559174][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.581800][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.591024][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.591654][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.598747][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.599357][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.606482][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.607090][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.614039][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.614698][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.621832][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.622471][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.629629][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.630329][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.637428][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.638060][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.645073][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.659269][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.682481][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.691623][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.692276][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.699508][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.700149][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.707248][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.707875][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.714871][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.715507][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.729406][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.730041][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.737066][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.737714][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.744701][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.745360][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.759226][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.767321][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.777819][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.778458][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.785420][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.799401][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.800039][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.807113][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.807727][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.814742][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.815384][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.829226][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.829911][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.837027][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.837707][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.844806][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.845453][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.859498][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.867567][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.883142][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.892048][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.892698][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.899871][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.900522][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.907628][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.908242][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.915225][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.929210][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.929770][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.936787][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.937359][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.944316][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.944957][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.952082][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.952752][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.959886][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.967909][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.983406][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.992503][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1170.993162][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.000346][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.000964][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.008002][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.008576][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.015533][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.022726][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.023332][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.030470][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.031091][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.038203][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.038850][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.045992][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.046597][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.053566][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.054236][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.061416][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.069334][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.091348][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.100260][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.100904][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.108058][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.108699][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.115762][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.116322][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.123208][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.123858][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.131006][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.131603][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.138597][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.139183][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.146307][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.146921][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.153875][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.154535][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.161610][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.162183][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.169286][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.184045][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.201235][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.201857][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.208912][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.209518][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.216631][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.217291][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.224248][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.224878][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.232037][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.232629][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.239745][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.240359][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.247370][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.248010][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.254985][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.255727][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.262672][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.263242][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.270318][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.278197][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.294952][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.296008][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.302998][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.303591][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.310720][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.311350][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.318400][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.319018][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.326160][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.326805][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.333854][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.334496][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.341712][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.342339][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.349545][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.350182][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.357242][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.357829][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.364833][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.365443][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.379263][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.395734][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.411280][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.411985][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.425984][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.426694][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.433687][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.434317][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.441483][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.442160][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.449323][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.449958][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.457074][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.457673][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.464607][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.465239][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.479090][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.483019][ T4251] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1171.501834][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.510759][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.511417][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.518528][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.519106][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.526096][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.526702][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.533693][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.534348][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.541549][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.542213][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.549324][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.549954][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.557015][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.557664][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.565204][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.572503][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.573141][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.580362][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.596233][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.605437][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.620312][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.620997][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.628173][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.628810][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.635910][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.636530][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.643522][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.644168][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.651309][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.651960][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.659085][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.659702][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.666743][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.667347][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.674461][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.675076][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.675725][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.682677][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.698411][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.707414][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.708064][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.715095][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.722399][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.723010][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.730105][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.730750][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.737852][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.738466][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.745434][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.746162][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.746804][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.753809][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.754467][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.761697][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.762323][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.769452][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.770037][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.777150][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.777779][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.784768][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.800138][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.809016][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.809669][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.816822][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.817450][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.824418][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.825061][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.825711][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.832692][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.833380][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.840621][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.841210][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.848298][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.848912][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.856016][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.856581][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.863532][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.864169][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.871216][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.871815][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.878883][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.879521][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.886621][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.901321][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.910094][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.910711][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.917893][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.918559][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.925568][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.939600][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.940267][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.947389][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.948039][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.955099][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.969140][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.969792][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.976942][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.977575][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.984600][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.985316][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1171.999122][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.023079][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.023732][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.030935][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.031566][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.038707][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.039368][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.046413][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.047072][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.054062][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.054729][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.061872][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.062461][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.069550][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.070170][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.077187][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.077789][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.084731][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.085358][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.092515][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.107807][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.116666][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.117240][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.124235][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.124901][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.132007][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.132677][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.139792][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.140374][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.147458][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.148054][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.155020][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.155741][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.162724][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.163393][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.170582][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.171212][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.178213][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.178839][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.185929][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.186544][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.193647][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.207484][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.218380][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.219080][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.226218][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.226857][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.233842][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.234453][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.241679][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.242328][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.249464][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.250114][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.257258][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.257869][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.264854][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.265454][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.279316][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.279985][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.287069][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.287728][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.294734][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.295319][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.309114][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.332468][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.333128][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.341227][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.341828][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.348899][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.349524][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.356600][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.357163][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.364154][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.364777][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.371937][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.372517][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.379554][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.380150][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.387175][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.387819][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.394841][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.395464][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.402685][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.418158][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.427369][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.428059][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.435101][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.442429][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.443074][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.450267][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.450910][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.458203][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.458828][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.466026][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.466683][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.473667][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.474336][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.481468][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.482058][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.489204][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.489845][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.496956][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.497566][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.504547][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.520192][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.529029][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.529684][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.536819][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.537437][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.544408][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.545060][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.552063][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.552691][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.559803][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.560417][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.567506][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.568144][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.575182][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.590073][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.590726][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.597835][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.598407][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.605386][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.621207][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.630354][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.630994][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.638152][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.638806][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.646089][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.646701][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.653692][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.654366][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.661526][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.662153][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.669273][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.669947][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.677069][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.677695][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.684679][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.685326][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.699255][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.699877][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.707014][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.723029][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.732069][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.732755][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.739952][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.740627][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.747755][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.748390][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.755404][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.769450][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.770113][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.777245][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.777904][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.784930][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.785563][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.799519][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.800112][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.807129][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.807774][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.828049][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.838830][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.839476][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.846613][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.847253][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.854224][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.854875][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.862014][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.862643][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.869746][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.870427][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.877562][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.878188][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.885218][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.899325][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.899986][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.907146][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.907804][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.914816][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.930215][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.939255][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.939899][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.947069][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.947729][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.955095][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.969075][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.969720][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.976888][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.977515][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.984532][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.985167][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.999101][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1172.999773][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.006915][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.007564][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.014546][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.029878][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.038820][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.039450][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.046648][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.047308][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.054400][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.055066][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.055803][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.062830][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.063460][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.070664][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.071261][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.078297][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.078970][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.086168][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.086794][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.093776][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.094439][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.101574][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.102172][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.103471][T15108] loop5: detected capacity change from 0 to 256 [ 1173.109329][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 1173.113892][ T5854] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1174.019589][T15108] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 1174.514290][ T5854] usb 2-1: USB disconnect, device number 11 [ 1176.152729][T15117] loop2: detected capacity change from 0 to 512 [ 1176.628451][T15119] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.730665][T15119] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1176.745745][T15119] bridge_slave_0: default FDB implementation only supports local addresses [ 1176.871079][T15117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.878178][T15123] loop9: detected capacity change from 0 to 512 [ 1176.886999][T15117] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.947131][T15123] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1177.060220][T15123] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.3426: corrupted in-inode xattr: invalid ea_ino [ 1177.064491][T15127] loop5: detected capacity change from 0 to 16 [ 1177.090251][T15127] erofs (device loop5): mounted with root inode @ nid 36. [ 1177.128593][T15123] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3426: couldn't read orphan inode 15 (err -117) [ 1177.165291][T15123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1177.511471][T13189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.791699][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.814406][ T4251] Bluetooth: hci5: Frame reassembly failed (-84) [ 1177.844041][T15133] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1178.968544][T15151] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1179.103713][T15154] loop1: detected capacity change from 0 to 256 [ 1179.216994][T15154] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 1179.856259][T12199] Bluetooth: hci5: command 0x1003 tx timeout [ 1179.857011][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1180.456989][T13333] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1180.472968][T15169] loop7: detected capacity change from 0 to 512 [ 1180.573144][T15169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.587026][T15169] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.726562][T13333] usb 3-1: Using ep0 maxpacket: 16 [ 1180.776067][T13333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.787796][T13333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.799656][T13333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1180.814334][T13333] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1180.826384][T13333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.968441][T13333] usb 3-1: config 0 descriptor?? [ 1181.076890][T10931] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.466697][T13333] hid-multitouch 0003:045E:9994.0015: unknown main item tag 0x2 [ 1181.475743][T13333] hid-multitouch 0003:045E:9994.0015: unknown main item tag 0x0 [ 1181.483843][T13333] hid-multitouch 0003:045E:9994.0015: unknown main item tag 0x0 [ 1181.494906][T13333] hid-multitouch 0003:045E:9994.0015: unknown main item tag 0x0 [ 1181.503956][T13333] hid-multitouch 0003:045E:9994.0015: item fetching failed at offset 30/34 [ 1181.536578][T15182] loop1: detected capacity change from 0 to 2048 [ 1181.607448][T15182] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1181.617544][T13333] hid-multitouch 0003:045E:9994.0015: probe with driver hid-multitouch failed with error -22 [ 1181.684810][T13333] usb 3-1: USB disconnect, device number 8 [ 1181.744680][T15182] syz.1.3447: attempt to access beyond end of device [ 1181.744680][T15182] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1181.764125][T15189] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1185.338643][T15231] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.351416][T15231] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1185.363973][T15231] bridge_slave_0: default FDB implementation only supports local addresses [ 1185.774757][T15239] loop1: detected capacity change from 0 to 16 [ 1185.841988][T15239] erofs (device loop1): mounted with root inode @ nid 36. [ 1186.147365][T15243] loop5: detected capacity change from 0 to 64 [ 1186.169221][T15243] minix: Unknown parameter '0xffffffffffffffff' [ 1186.882091][T15253] loop5: detected capacity change from 0 to 64 [ 1187.264444][T15257] loop2: detected capacity change from 0 to 1024 [ 1187.462030][T15257] hfsplus: bad catalog entry type [ 1187.830168][ T57] hfsplus: b-tree write err: -5, ino 4 [ 1188.489758][T15274] loop9: detected capacity change from 0 to 64 [ 1188.982967][T15280] loop1: detected capacity change from 0 to 1024 [ 1189.038811][T15280] EXT4-fs: Ignoring removed nobh option [ 1189.137305][T15280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.584121][T12501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.274719][T15313] random: crng reseeded on system resumption [ 1191.517724][T15321] loop7: detected capacity change from 0 to 1024 [ 1191.529046][T15321] EXT4-fs: Ignoring removed nobh option [ 1191.616535][T15321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.706165][ T5854] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1191.875793][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1191.890926][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.901724][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.913339][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1191.923503][ T5854] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1191.933692][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1191.983374][T15326] loop9: detected capacity change from 0 to 256 [ 1192.100991][ T5854] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1192.111199][ T5854] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1192.119884][ T5854] usb 3-1: Manufacturer: syz [ 1192.155968][T10931] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.206535][ T5854] usb 3-1: config 0 descriptor?? [ 1192.799194][ T5854] rc_core: IR keymap rc-hauppauge not found [ 1192.806893][ T5854] Registered IR keymap rc-empty [ 1192.812529][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1192.884605][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1192.918391][ T5854] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1192.933340][ T5854] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 1193.070725][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.194011][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.236090][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.256692][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.281360][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.325698][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.355208][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.388447][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.422716][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.453946][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1193.488490][ T5854] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1193.502844][ T5854] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1193.562909][ T5854] usb 3-1: USB disconnect, device number 9 [ 1193.576895][T13333] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1193.764427][T13333] usb 10-1: Using ep0 maxpacket: 16 [ 1193.797292][T13333] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.810774][T13333] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.821844][T13333] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1193.829077][T13333] usb 10-1: New USB device found, idVendor=056a, idProduct=02b3, bcdDevice= 0.00 [ 1193.838706][T13333] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.888053][T13333] usb 10-1: config 0 descriptor?? [ 1194.366360][T13333] wacom 0003:056A:02B3.0016: unknown main item tag 0x0 [ 1194.373921][T13333] wacom 0003:056A:02B3.0016: unknown main item tag 0x0 [ 1194.453897][T15357] tap0: tun_chr_ioctl cmd 1074025692 [ 1194.578741][ T5854] usb 10-1: USB disconnect, device number 5 [ 1194.897974][T15360] syz.2.3528 (15360): drop_caches: 2 [ 1194.913633][T15360] syz.2.3528 (15360): drop_caches: 2 [ 1195.847537][T15373] loop9: detected capacity change from 0 to 16 [ 1195.904729][T15373] erofs (device loop9): rootino(nid 36) is not a directory(i_mode 16700) [ 1196.805995][ T5854] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1197.005881][ T5854] usb 6-1: Using ep0 maxpacket: 16 [ 1197.006506][T15388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.020122][T15388] batadv_slave_1: entered promiscuous mode [ 1197.038827][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3540'. [ 1197.106366][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.118151][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.128484][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1197.142047][ T5854] usb 6-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1197.151713][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.188171][T15391] syz.1.3542 (15391): drop_caches: 2 [ 1197.233836][T15391] syz.1.3542 (15391): drop_caches: 2 [ 1197.269225][ T5854] usb 6-1: config 0 descriptor?? [ 1197.744600][ T5854] hid-multitouch 0003:045E:9994.0017: unknown main item tag 0x2 [ 1197.753792][ T5854] hid-multitouch 0003:045E:9994.0017: unknown main item tag 0x0 [ 1197.762200][ T5854] hid-multitouch 0003:045E:9994.0017: unknown main item tag 0x0 [ 1197.770504][ T5854] hid-multitouch 0003:045E:9994.0017: unknown main item tag 0x0 [ 1197.778875][ T5854] hid-multitouch 0003:045E:9994.0017: item fetching failed at offset 30/34 [ 1197.909215][ T5854] hid-multitouch 0003:045E:9994.0017: probe with driver hid-multitouch failed with error -22 [ 1197.994163][ T5854] usb 6-1: USB disconnect, device number 14 [ 1198.017430][T15400] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 1198.353956][T15399] loop9: detected capacity change from 0 to 2048 [ 1198.381532][T15399] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1198.466062][T15399] syz.9.3543: attempt to access beyond end of device [ 1198.466062][T15399] loop9: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1198.482018][T15402] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1199.358802][T15414] loop9: detected capacity change from 0 to 128 [ 1199.387409][T15413] loop7: detected capacity change from 0 to 16 [ 1199.422731][T15413] erofs (device loop7): rootino(nid 36) is not a directory(i_mode 16700) [ 1199.442279][T15414] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1199.689902][T15419] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1201.466453][ T5854] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1201.678106][ T5854] usb 10-1: Using ep0 maxpacket: 16 [ 1201.710782][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.722462][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.733230][ T5854] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1201.746823][ T5854] usb 10-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1201.756755][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.899014][ T5854] usb 10-1: config 0 descriptor?? [ 1202.356307][ T5854] hid-multitouch 0003:045E:9994.0018: unknown main item tag 0x2 [ 1202.364924][ T5854] hid-multitouch 0003:045E:9994.0018: unknown main item tag 0x0 [ 1202.373306][ T5854] hid-multitouch 0003:045E:9994.0018: unknown main item tag 0x0 [ 1202.382159][ T5854] hid-multitouch 0003:045E:9994.0018: unknown main item tag 0x0 [ 1202.390463][ T5854] hid-multitouch 0003:045E:9994.0018: item fetching failed at offset 30/34 [ 1202.572160][ T5854] hid-multitouch 0003:045E:9994.0018: probe with driver hid-multitouch failed with error -22 [ 1202.633645][T15457] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3569'. [ 1202.657335][ T5854] usb 10-1: USB disconnect, device number 6 [ 1203.442105][T15469] loop5: detected capacity change from 0 to 64 [ 1204.201724][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1204.211509][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1204.615250][T15485] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3586'. [ 1205.377360][ T4949] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1205.965905][T15504] loop2: detected capacity change from 0 to 1024 [ 1206.140004][T15503] loop9: detected capacity change from 0 to 4096 [ 1206.151474][T15504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.164708][T15504] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.205241][T15503] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1206.311726][T15503] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1206.320123][T15503] ntfs3(loop9): Failed to load $Extend (-22). [ 1206.327279][T15503] ntfs3(loop9): Failed to initialize $Extend. [ 1206.628954][T15510] loop1: detected capacity change from 0 to 1024 [ 1206.784179][T13189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.793812][T15510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.198475][T12501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.132356][T15528] loop5: detected capacity change from 0 to 512 [ 1208.275169][T15528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.288937][T15528] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.595187][T15528] EXT4-fs error (device loop5): __ext4_new_inode:1279: comm syz.5.3613: failed to insert inode 16: doubly allocated? [ 1208.709011][T15539] loop1: detected capacity change from 0 to 1024 [ 1208.802939][T15541] loop7: detected capacity change from 0 to 512 [ 1208.881288][T15539] hfsplus: bad catalog entry type [ 1208.984392][T13381] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.100803][T15544] macsec1: entered allmulticast mode [ 1209.107205][T15544] macvlan0: entered allmulticast mode [ 1209.112840][T15544] veth1_vlan: entered allmulticast mode [ 1209.187621][T15544] macvlan0: left allmulticast mode [ 1209.194852][T15544] veth1_vlan: left allmulticast mode [ 1209.210645][T12615] hfsplus: b-tree write err: -5, ino 4 [ 1210.347749][T15560] bond0: entered allmulticast mode [ 1210.353207][T15560] bond_slave_0: entered allmulticast mode [ 1210.359626][T15560] bond_slave_1: entered allmulticast mode [ 1210.950593][T15571] loop1: detected capacity change from 0 to 64 [ 1211.356954][T15573] loop2: detected capacity change from 0 to 512 [ 1211.443775][T15577] loop5: detected capacity change from 0 to 1024 [ 1211.929494][T12615] hfsplus: b-tree write err: -5, ino 4 [ 1213.002534][T15599] dummy0: entered promiscuous mode [ 1213.008424][T15599] macsec1: entered promiscuous mode [ 1213.015005][T15599] macsec1: entered allmulticast mode [ 1213.020737][T15599] dummy0: entered allmulticast mode [ 1213.097056][T15599] dummy0: left allmulticast mode [ 1213.103425][T15599] dummy0: left promiscuous mode [ 1214.011500][T15604] loop7: detected capacity change from 0 to 128 [ 1214.370274][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1214.377417][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1214.776698][T15612] random: crng reseeded on system resumption [ 1215.309146][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3642'. [ 1215.335929][ T5854] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1215.387208][T15619] loop5: detected capacity change from 0 to 2048 [ 1215.440285][T15619] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1215.448647][T15619] UDF-fs: Scanning with blocksize 512 failed [ 1215.500455][T15619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1215.527047][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 1215.563761][ T5854] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.575693][ T5854] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.586243][ T5854] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1215.593278][ T5854] usb 2-1: New USB device found, idVendor=056a, idProduct=02b3, bcdDevice= 0.00 [ 1215.603011][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.699451][ T5854] usb 2-1: config 0 descriptor?? [ 1215.876854][T15625] block nbd7: not configured, cannot reconfigure [ 1216.174945][ T5854] wacom 0003:056A:02B3.0019: unknown main item tag 0x0 [ 1216.183081][ T5854] wacom 0003:056A:02B3.0019: unknown main item tag 0x0 [ 1216.403892][T13333] usb 2-1: USB disconnect, device number 12 [ 1218.714257][T15654] loop1: detected capacity change from 0 to 64 [ 1218.862035][T15657] random: crng reseeded on system resumption [ 1218.912735][T15654] syz.1.3657: attempt to access beyond end of device [ 1218.912735][T15654] loop1: rw=0, sector=6106906642, nr_sectors = 2 limit=64 [ 1218.927883][T15654] Buffer I/O error on dev loop1, logical block 3053453321, async page read [ 1219.002653][T15654] syz.1.3657: attempt to access beyond end of device [ 1219.002653][T15654] loop1: rw=0, sector=6106906642, nr_sectors = 2 limit=64 [ 1219.017302][T15654] Buffer I/O error on dev loop1, logical block 3053453321, async page read [ 1219.104824][T15651] Trying to free block not in datazone [ 1220.349471][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'. [ 1220.766355][T15681] loop1: detected capacity change from 0 to 128 [ 1220.799279][T15681] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1220.862293][T15681] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1221.207778][T15687] random: crng reseeded on system resumption [ 1221.320987][ T4251] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1222.195763][T15693] trusted_key: encrypted_key: keyword 'uew' not recognized [ 1223.416953][T15711] loop9: detected capacity change from 0 to 128 [ 1223.491697][T15711] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1223.600212][T15711] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.881113][T15721] loop1: detected capacity change from 0 to 512 [ 1224.045719][T15721] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.3690: iget: bad i_size value: 38620345925642 [ 1224.068610][T13356] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1224.088787][T15726] loop5: detected capacity change from 0 to 16 [ 1224.147601][T15721] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3690: couldn't read orphan inode 15 (err -117) [ 1224.192776][T15721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1224.634528][T12501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.820817][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3694'. [ 1227.198673][T15764] loop2: detected capacity change from 0 to 16 [ 1227.896033][T13333] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1228.077902][T13333] usb 10-1: Using ep0 maxpacket: 32 [ 1228.129272][T13333] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1228.139493][T13333] usb 10-1: config 0 has no interface number 0 [ 1228.196085][T13333] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1228.206344][T13333] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.217217][T13333] usb 10-1: Product: syz [ 1228.221772][T13333] usb 10-1: Manufacturer: syz [ 1228.227369][T13333] usb 10-1: SerialNumber: syz [ 1228.312753][T13333] usb 10-1: config 0 descriptor?? [ 1228.350750][T13333] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1228.618920][T13333] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1228.668390][T15780] loop1: detected capacity change from 0 to 128 [ 1228.677502][T13333] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1228.731149][T15780] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1228.874869][T15780] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1229.036558][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1229.057663][ T5854] usb 10-1: USB disconnect, device number 7 [ 1229.097290][ T5854] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1229.177295][ T5854] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1229.190988][ T5854] quatech2 10-1:0.51: device disconnected [ 1229.224466][T15783] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 1229.449332][T15787] loop2: detected capacity change from 0 to 512 [ 1229.508302][T15787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 1229.568569][T15787] System zones: 1-12 [ 1229.600893][T15787] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3719: Directory hole found for htree index block 0 [ 1229.686824][T15787] EXT4-fs (loop2): Remounting filesystem read-only [ 1229.723023][T15787] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1229.785901][T15787] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1229.797708][T15787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.973500][T15787] EXT4-fs (loop2): shut down requested (1) [ 1230.333563][T13189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.873186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1231.658058][T15809] loop2: detected capacity change from 0 to 4096 [ 1231.702991][T15809] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1232.114640][T15819] loop5: detected capacity change from 0 to 1024 [ 1232.153429][T15823] loop9: detected capacity change from 0 to 64 [ 1232.237498][T15825] netlink: 'syz.1.3734': attribute type 1 has an invalid length. [ 1232.368380][T15819] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1232.375244][T15819] hfsplus: xattr searching failed [ 1232.420265][T15826] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1232.427269][T15826] hfsplus: xattr search failed [ 1232.764636][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1233.226268][T13333] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1233.456450][T13333] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.467793][T13333] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1233.479428][T13333] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1233.526022][T13333] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=4d.40 [ 1233.536653][T13333] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.546457][T13333] usb 10-1: Product: syz [ 1233.551018][T13333] usb 10-1: Manufacturer: syz [ 1233.556456][T13333] usb 10-1: SerialNumber: syz [ 1233.596754][T15834] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1234.496430][T13333] cdc_ncm 10-1:1.0: SET_CRC_MODE failed [ 1234.527537][T13333] cdc_ncm 10-1:1.0: bind() failure [ 1234.550031][T13333] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1234.558804][T13333] cdc_ncm 10-1:1.1: bind() failure [ 1234.677988][T13333] usb 10-1: USB disconnect, device number 8 [ 1234.945262][T15855] netlink: 'syz.2.3749': attribute type 1 has an invalid length. [ 1235.634340][T15860] loop2: detected capacity change from 0 to 512 [ 1235.678869][T15861] loop9: detected capacity change from 0 to 1024 [ 1235.704433][T15860] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1235.735993][T15860] EXT4-fs (loop2): invalid journal inode [ 1235.742054][T15860] EXT4-fs (loop2): can't get journal size [ 1235.767896][T15866] loop1: detected capacity change from 0 to 8 [ 1235.815317][T15860] EXT4-fs (loop2): 1 truncate cleaned up [ 1235.824286][T15860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.237436][T13189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.377848][T15114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1238.385171][T15903] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 1239.259839][ T5854] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1239.403443][T15918] loop1: detected capacity change from 0 to 128 [ 1239.476340][ T5854] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1239.486515][ T5854] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1239.497837][ T5854] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1239.507506][ T5854] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1239.515221][ T30] audit: type=1800 audit(2000000039.530:189): pid=15918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3779" name="file2" dev="loop1" ino=1048916 res=0 errno=0 [ 1239.519264][ T5854] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1239.539979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.633397][ T5854] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1239.643346][ T5854] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1239.652019][ T5854] usb 10-1: Product: syz [ 1239.656774][ T5854] usb 10-1: Manufacturer: syz [ 1239.729926][ T5854] cdc_wdm 10-1:1.0: skipping garbage [ 1239.735872][ T5854] cdc_wdm 10-1:1.0: skipping garbage [ 1239.756148][ T5854] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1239.762504][ T5854] cdc_wdm 10-1:1.0: Unknown control protocol [ 1241.027994][T15931] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 1241.035660][T15931] macsec2: entered promiscuous mode [ 1241.043006][T15931] macsec2: entered allmulticast mode [ 1241.048890][T15931] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 1241.837116][T15939] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 1241.845086][T15939] macsec1: entered promiscuous mode [ 1241.852027][T15939] macsec1: entered allmulticast mode [ 1241.857826][T15939] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 1242.276121][T13333] usb 10-1: USB disconnect, device number 9 [ 1242.540957][T15945] program syz.7.3789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1242.761672][ T30] audit: type=1804 audit(2000000042.780:190): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3792" name="/newroot/197/bus" dev="tmpfs" ino=1052 res=1 errno=0 [ 1243.154440][T15952] loop5: detected capacity change from 0 to 128 [ 1243.183291][T15952] ufs: You didn't specify the type of your ufs filesystem [ 1243.183291][T15952] [ 1243.183291][T15952] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1243.183291][T15952] [ 1243.183291][T15952] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1243.230189][T15953] loop1: detected capacity change from 0 to 1024 [ 1243.287979][T15952] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1243.652823][ T293] hfsplus: b-tree write err: -5, ino 4 [ 1244.297803][T15965] loop9: detected capacity change from 0 to 512 [ 1244.337644][T15965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1244.476372][T15965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.494943][T15965] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1245.024329][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.891987][T15985] loop9: detected capacity change from 0 to 2048 [ 1246.001833][T15985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1246.188415][T15993] overlay: filesystem on ./file0 not supported [ 1246.648330][T15997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3815'. [ 1247.094135][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3820'. [ 1247.827774][T16012] loop5: detected capacity change from 0 to 2048 [ 1247.980995][T16017] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1248.123264][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3826'. [ 1248.199627][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3826'. [ 1248.839620][T16030] loop1: detected capacity change from 0 to 64 [ 1249.029074][ T30] audit: type=1800 audit(2000000049.050:191): pid=16030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3830" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1249.108420][T16030] hfs: request for non-existent node 56 in B*Tree [ 1249.115296][T16030] hfs: request for non-existent node 56 in B*Tree [ 1249.122231][T16030] hfs: request for non-existent node 57 in B*Tree [ 1249.129191][T16030] hfs: request for non-existent node 57 in B*Tree [ 1249.324217][T16035] loop5: detected capacity change from 0 to 512 [ 1249.384085][T16035] EXT4-fs: Ignoring removed orlov option [ 1249.533942][T16035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1249.548612][T16035] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1249.621210][T16038] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1249.628523][T16038] syzkaller0: linktype set to 776 [ 1249.696995][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3833'. [ 1249.974627][T16046] loop1: detected capacity change from 0 to 16 [ 1250.047708][T16046] erofs (device loop1): mounted with root inode @ nid 36. [ 1250.100568][T13381] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.608849][T16055] loop5: detected capacity change from 0 to 1024 [ 1250.798517][T16055] hfsplus: b-tree write err: -5, ino 3 [ 1251.069561][T16059] loop1: detected capacity change from 0 to 2048 [ 1251.222867][T16062] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1251.692303][T16071] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 1251.694441][T16070] loop2: detected capacity change from 0 to 64 [ 1251.703093][T16068] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3842'. [ 1252.491728][T16080] loop1: detected capacity change from 0 to 1024 [ 1252.518688][T16081] loop7: detected capacity change from 0 to 512 [ 1252.531600][T16080] EXT4-fs: Ignoring removed nobh option [ 1252.538595][T16080] EXT4-fs: Ignoring removed bh option [ 1252.550033][T16081] EXT4-fs: Ignoring removed orlov option [ 1252.645007][T16081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.659109][T16081] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.720293][T16080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.911690][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3852'. [ 1253.150440][T12501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.242350][T16096] loop9: detected capacity change from 0 to 16 [ 1253.276625][T16096] erofs (device loop9): mounted with root inode @ nid 36. [ 1253.304911][T10931] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.399769][T16107] block nbd9: not configured, cannot reconfigure [ 1254.679321][T16104] loop7: detected capacity change from 0 to 32768 [ 1254.691560][T16104] (syz.7.3857,16104,1):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018 [ 1254.701440][T16104] (syz.7.3857,16104,1):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2 [ 1254.717442][T16104] (syz.7.3857,16104,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1254.727470][T16104] (syz.7.3857,16104,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1255.456745][T16116] loop9: detected capacity change from 0 to 128 [ 1255.518525][T16116] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1255.598402][T16116] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1256.046218][ T57] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1256.487130][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3869'. [ 1256.518607][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3869'. [ 1256.782298][T16124] loop5: detected capacity change from 0 to 4096 [ 1257.226140][T16134] loop9: detected capacity change from 0 to 512 [ 1257.279888][T16134] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.3875: iget: bad i_size value: 38620345925642 [ 1257.372092][T16134] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3875: couldn't read orphan inode 15 (err -117) [ 1257.394338][T16134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.664353][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.706901][ T5854] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1258.915696][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 1258.949259][ T5854] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1258.958244][ T5854] usb 3-1: config 0 has no interface number 0 [ 1259.010910][ T5854] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1259.021531][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.033801][ T5854] usb 3-1: Product: syz [ 1259.040375][ T5854] usb 3-1: Manufacturer: syz [ 1259.045792][ T5854] usb 3-1: SerialNumber: syz [ 1259.087108][ T5854] usb 3-1: config 0 descriptor?? [ 1259.121587][ T5854] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1259.356442][ T5854] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1259.364551][ T5854] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1259.437861][ T5854] usb 3-1: USB disconnect, device number 10 [ 1259.793625][T16176] netlink: 'syz.9.3891': attribute type 83 has an invalid length. [ 1259.810859][T16177] loop5: detected capacity change from 0 to 24 [ 1259.875905][T16177] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1260.019869][T16177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1260.213135][T16182] loop1: detected capacity change from 0 to 512 [ 1260.311946][T16182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 1260.331916][T16182] System zones: 1-12 [ 1260.347290][T16182] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3894: Directory hole found for htree index block 0 [ 1260.383514][T16182] EXT4-fs (loop1): Remounting filesystem read-only [ 1260.446054][T16182] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1260.454889][T16182] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1260.471515][T16182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1260.675998][T16182] EXT4-fs (loop1): shut down requested (1) [ 1260.819286][T16189] loop2: detected capacity change from 0 to 1024 [ 1260.895093][T12501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.930309][T16189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1261.084025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1261.269339][T16187] loop7: detected capacity change from 0 to 4096 [ 1261.307725][T16187] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1261.519752][T13189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.011591][T16199] loop9: detected capacity change from 0 to 1024 [ 1262.143252][T16199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1262.589406][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.979687][T16212] loop7: detected capacity change from 0 to 1024 [ 1263.046891][T16214] loop2: detected capacity change from 0 to 1024 [ 1263.078158][T16212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1263.253716][T16214] hfsplus: invalid extended attribute record [ 1263.416175][T15114] hfsplus: b-tree write err: -5, ino 4 [ 1263.560963][T10931] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.730879][T16222] loop1: detected capacity change from 0 to 512 [ 1263.812004][T16224] loop9: detected capacity change from 0 to 164 [ 1263.884508][T16222] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3906: bg 0: block 248: padding at end of block bitmap is not set [ 1263.929078][T16222] Quota error (device loop1): write_blk: dquota write failed [ 1263.939599][T16222] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1263.951454][T16222] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3906: Failed to acquire dquot type 1 [ 1263.984740][T16222] EXT4-fs (loop1): 1 truncate cleaned up [ 1263.993739][T16222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1264.007319][T16222] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.082808][ T5854] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1264.105661][T16224] syz.9.3905: attempt to access beyond end of device [ 1264.105661][T16224] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1264.120743][T16224] syz.9.3905: attempt to access beyond end of device [ 1264.120743][T16224] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1264.166881][ T30] audit: type=1800 audit(2000000064.160:192): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3905" name="file0" dev="overlay" ino=1862 res=0 errno=0 [ 1264.282645][T16222] EXT4-fs (loop1): shut down requested (2) [ 1264.306754][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.317365][ T5854] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1264.326886][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.373403][ T5854] usb 3-1: config 0 descriptor?? [ 1264.711626][T12501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.890993][ T5854] lg-g15 0003:046D:C222.001A: collection stack underflow [ 1264.901481][ T5854] lg-g15 0003:046D:C222.001A: item 0 1 0 12 parsing failed [ 1264.958972][ T5854] lg-g15 0003:046D:C222.001A: probe with driver lg-g15 failed with error -22 [ 1265.804946][ T5854] usb 3-1: USB disconnect, device number 11 [ 1266.277950][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3919'. [ 1266.311638][T16248] loop2: detected capacity change from 0 to 512 [ 1266.327624][T16249] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3919'. [ 1266.337552][T16249] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3919'. [ 1266.363815][T16248] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1266.885256][T16255] loop1: detected capacity change from 0 to 1024 [ 1267.073066][T16255] hfsplus: invalid extended attribute record [ 1267.320567][T16261] loop5: detected capacity change from 0 to 8 [ 1267.446088][ T4949] hfsplus: b-tree write err: -5, ino 4 [ 1267.618661][T16265] loop2: detected capacity change from 0 to 164 [ 1267.816424][T16265] syz.2.3923: attempt to access beyond end of device [ 1267.816424][T16265] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1267.831893][T16265] syz.2.3923: attempt to access beyond end of device [ 1267.831893][T16265] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1267.864767][ T30] audit: type=1800 audit(2000000067.870:193): pid=16265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3923" name="file0" dev="overlay" ino=1862 res=0 errno=0 [ 1269.387707][ T4251] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1269.655308][T16293] loop5: detected capacity change from 0 to 128 [ 1269.824239][ T30] audit: type=1800 audit(2000000069.840:194): pid=16293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3941" name="file2" dev="loop5" ino=1048919 res=0 errno=0 [ 1271.380338][T16319] loop1: detected capacity change from 0 to 1024 [ 1271.403643][T16319] EXT4-fs: Ignoring removed bh option [ 1271.510796][T16319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1271.538206][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1271.696832][T16319] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 1272.084830][T12501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.056583][T16344] loop5: detected capacity change from 0 to 2048 [ 1273.142306][T16351] loop9: detected capacity change from 0 to 64 [ 1273.171614][T16349] can0: slcan on ttyS3. [ 1273.191135][T16352] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1273.283256][T16353] can0 (unregistered): slcan off ttyS3. [ 1273.319459][T16349] can0: slcan on ttyS3. [ 1273.326164][ T30] audit: type=1800 audit(2000000073.320:195): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3974" name="file1" dev="loop9" ino=18 res=0 errno=0 [ 1273.363328][T16351] hfs: request for non-existent node 56 in B*Tree [ 1273.376682][T16351] hfs: request for non-existent node 56 in B*Tree [ 1273.383432][T16351] hfs: request for non-existent node 57 in B*Tree [ 1273.392998][T16351] hfs: request for non-existent node 57 in B*Tree [ 1273.508378][T16346] can0 (unregistered): slcan off ttyS3. [ 1274.194051][T16364] loop2: detected capacity change from 0 to 1024 [ 1274.233618][T16364] EXT4-fs: Ignoring removed bh option [ 1274.337273][T16364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.548995][T16364] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 1274.973399][T13189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.659749][T16387] loop7: detected capacity change from 0 to 1024 [ 1275.689328][T16387] EXT4-fs: Ignoring removed nobh option [ 1275.761117][T16387] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1275.796986][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1275.803939][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.878796][T16391] can0: slcan on ttyS3. [ 1275.903673][T16387] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.3977: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1275.966496][T16387] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3977: couldn't read orphan inode 11 (err -117) [ 1276.003932][T16391] can0 (unregistered): slcan off ttyS3. [ 1276.017441][T16387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1276.046945][T16396] can0: slcan on ttyS3. [ 1276.186313][T16390] can0 (unregistered): slcan off ttyS3. [ 1276.226659][T16387] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3977: Invalid block bitmap block 0 in block_group 0 [ 1276.301723][T16387] Quota error (device loop7): write_blk: dquota write failed [ 1276.310134][T16387] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1276.324196][T16387] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3977: Failed to acquire dquot type 0 [ 1276.474727][T16399] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz.7.3977: Invalid inode table block 8589934593 in block_group 0 [ 1276.838535][ T4949] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm kworker/u8:23: Invalid inode table block 8589934593 in block_group 0 [ 1276.875790][T10931] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.993129][T16408] loop2: detected capacity change from 0 to 64 [ 1277.110234][T16410] loop5: detected capacity change from 0 to 1024 [ 1277.163515][T16410] EXT4-fs: Ignoring removed bh option [ 1277.241192][T16410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.342134][T16410] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 1277.607272][T16419] program syz.9.3989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1277.801566][T13381] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.904416][T16438] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3996'. [ 1279.147040][T16445] loop9: detected capacity change from 0 to 1024 [ 1279.157922][T16445] EXT4-fs: Ignoring removed nobh option [ 1279.168184][T16445] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1279.275317][T16445] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3999: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1279.347577][T16445] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3999: couldn't read orphan inode 11 (err -117) [ 1279.388763][T16445] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.557172][T16445] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3999: Invalid block bitmap block 0 in block_group 0 [ 1279.672410][T16445] Quota error (device loop9): write_blk: dquota write failed [ 1279.684491][T16445] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1279.695600][T16445] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3999: Failed to acquire dquot type 0 [ 1279.786692][T16454] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz.9.3999: Invalid inode table block 8589934593 in block_group 0 [ 1280.072380][ T57] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm kworker/u8:3: Invalid inode table block 8589934593 in block_group 0 [ 1280.229547][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.627095][T16476] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4012'. [ 1282.321547][T16490] loop5: detected capacity change from 0 to 1024 [ 1282.333194][T16490] EXT4-fs: Ignoring removed nobh option [ 1282.343196][T16490] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1282.410322][T16490] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.4018: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1282.431789][T16490] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.4018: couldn't read orphan inode 11 (err -117) [ 1282.457468][T16490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1282.511803][T16490] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4018: Invalid block bitmap block 0 in block_group 0 [ 1282.601966][T16490] Quota error (device loop5): write_blk: dquota write failed [ 1282.610544][T16490] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1282.621143][T16490] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4018: Failed to acquire dquot type 0 [ 1282.736260][T16496] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.4018: Invalid inode table block 8589934593 in block_group 0 [ 1282.956764][ T35] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm kworker/u8:2: Invalid inode table block 8589934593 in block_group 0 [ 1283.079289][T13381] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.172624][T16535] loop7: detected capacity change from 0 to 2048 [ 1285.226710][T16538] @: renamed from vlan0 (while UP) [ 1285.238790][T16535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1285.428853][T16534] loop5: detected capacity change from 0 to 4096 [ 1285.486304][T16534] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1289.259805][T16590] macsec4: entered promiscuous mode [ 1289.266640][T16590] macsec4: entered allmulticast mode [ 1289.401474][T16585] loop2: detected capacity change from 0 to 4096 [ 1289.449675][T16585] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1293.434091][T16645] loop9: detected capacity change from 0 to 64 [ 1293.857773][T13356] hfs: node 4:3 still has 1 user(s)! [ 1294.000618][T16653] loop1: detected capacity change from 0 to 256 [ 1294.951946][T16665] loop1: detected capacity change from 0 to 2048 [ 1295.042382][T16665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1295.262660][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4101'. [ 1295.615201][T16673] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1295.659593][T16673] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1296.752378][T16689] loop1: detected capacity change from 0 to 128 [ 1296.886897][T16689] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1296.897006][T16689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1297.644483][T16701] loop1: detected capacity change from 0 to 64 [ 1297.657372][T16701] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 1297.983531][T16706] loop7: detected capacity change from 0 to 16 [ 1298.802005][T16719] loop7: detected capacity change from 0 to 64 [ 1299.076296][T16723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4127'. [ 1299.282345][T10931] hfs: node 4:3 still has 1 user(s)! [ 1299.419469][T16726] loop2: detected capacity change from 0 to 1024 [ 1299.667943][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4133'. [ 1300.436896][T16743] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4138'. [ 1301.051101][T16749] loop1: detected capacity change from 0 to 1024 [ 1301.173896][T16749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1301.262565][T16749] EXT4-fs error (device loop1): ext4_get_first_dir_block:3547: inode #11: comm syz.1.4141: directory missing '..' [ 1301.397538][T15114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1301.601364][T12501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.772104][T16767] loop9: detected capacity change from 0 to 1024 [ 1302.306698][T15114] hfsplus: b-tree write err: -5, ino 4 [ 1304.257163][T16796] syz.5.4162: attempt to access beyond end of device [ 1304.257163][T16796] loop11: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1304.273524][T16796] syz.5.4162: attempt to access beyond end of device [ 1304.273524][T16796] loop11: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1304.306256][T16795] loop2: detected capacity change from 0 to 256 [ 1304.352100][T16798] loop9: detected capacity change from 0 to 1024 [ 1304.408881][T16798] EXT4-fs: Ignoring removed oldalloc option [ 1304.518968][T16798] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1305.060132][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.265806][ T11] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1305.442086][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 1305.507545][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.518681][ T11] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1305.577215][ T11] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1305.587071][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.595571][ T11] usb 6-1: Product: syz [ 1305.600044][ T11] usb 6-1: Manufacturer: syz [ 1305.604918][ T11] usb 6-1: SerialNumber: syz [ 1305.622705][ T11] usb 6-1: config 0 descriptor?? [ 1305.961344][ T11] usb 6-1: USB disconnect, device number 15 [ 1306.229362][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4173'. [ 1306.489827][T16824] loop7: detected capacity change from 0 to 4096 [ 1306.571738][T16824] NILFS (loop7): invalid segment: Checksum error in segment payload [ 1306.580640][T16824] NILFS (loop7): trying rollback from an earlier position [ 1306.727398][T16824] NILFS (loop7): recovery complete [ 1306.763525][T16831] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1307.124969][T16838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4179'. [ 1307.177430][T16838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4179'. [ 1308.005009][T16842] loop1: detected capacity change from 0 to 4096 [ 1308.046836][T16842] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1308.578185][T16849] loop7: detected capacity change from 0 to 8192 [ 1308.658197][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4187'. [ 1308.744293][ T30] audit: type=1800 audit(2000000108.740:196): pid=16849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4182" name="file2" dev="loop7" ino=1048920 res=0 errno=0 [ 1309.684395][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4193'. [ 1310.649811][T16879] loop4: detected capacity change from 0 to 524255232 [ 1310.822085][T16883] input: syz0 as /devices/virtual/input/input28 [ 1311.511064][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4204'. [ 1312.722537][T16912] loop9: detected capacity change from 0 to 512 [ 1312.743952][T16912] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 1313.881608][T16924] loop9: detected capacity change from 0 to 512 [ 1313.962572][T16924] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1313.975867][T16924] EXT4-fs (loop9): Couldn't mount because of unsupported optional features (800) [ 1315.301516][T16939] loop1: detected capacity change from 0 to 2048 [ 1315.408850][T16939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1315.524561][ T30] audit: type=1800 audit(2000000115.530:197): pid=16939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4224" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 1315.722072][T16943] loop7: detected capacity change from 0 to 4096 [ 1315.757061][T16943] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1315.797413][T16944] loop9: detected capacity change from 0 to 4096 [ 1315.826580][T13333] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1315.849372][T16944] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1316.066918][T16946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.078123][T16946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.109607][T16943] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1316.124105][ T5808] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1316.124309][ T5808] Bluetooth: hci0: adv larger than maximum supported [ 1316.132202][T13333] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1316.132231][ T5808] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1316.286239][T13333] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1316.294422][T13333] usb 3-1: can't read configurations, error -71 [ 1316.342372][T16944] ntfs3(loop9): ino=1b, "file0" indx_read [ 1316.506675][ T11] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1316.688029][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 1316.726806][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.741868][ T11] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1316.753021][ T11] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1316.763394][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1316.800435][ T11] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1316.810185][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1316.818806][ T11] usb 2-1: SerialNumber: syz [ 1316.832226][T16952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.882385][T16952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.896668][ T11] hub 2-1:1.0: bad descriptor, ignoring hub [ 1316.902959][ T11] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1317.132361][T16952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1317.187006][T16952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1317.673176][ T11] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1317.780969][ T5854] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1317.954506][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 1317.987129][ T5854] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1317.994224][ T5854] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1318.003996][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.020282][T13333] usb 2-1: USB disconnect, device number 13 [ 1318.057194][T13333] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 1318.062003][ T5854] usb 3-1: config 0 descriptor?? [ 1318.736673][T13333] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1318.914308][ T5854] corsair-cpro 0003:1B1C:0C10.001B: unknown main item tag 0x0 [ 1318.922840][ T5854] corsair-cpro 0003:1B1C:0C10.001B: unknown main item tag 0x0 [ 1318.929995][T13333] usb 6-1: Using ep0 maxpacket: 32 [ 1318.931570][ T5854] corsair-cpro 0003:1B1C:0C10.001B: unknown main item tag 0x0 [ 1318.947934][ T5854] corsair-cpro 0003:1B1C:0C10.001B: unknown main item tag 0x0 [ 1318.956448][ T5854] corsair-cpro 0003:1B1C:0C10.001B: unknown main item tag 0x0 [ 1318.973690][T13333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.988563][T13333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.998688][ T5854] corsair-cpro 0003:1B1C:0C10.001B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1319.013561][T13333] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1319.023943][T13333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.054117][T13333] usb 6-1: config 0 descriptor?? [ 1319.395745][T16982] loop1: detected capacity change from 0 to 1024 [ 1319.540734][T16982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1319.558187][ T5854] corsair-cpro 0003:1B1C:0C10.001B: probe with driver corsair-cpro failed with error -110 [ 1319.576351][ T5854] usb 3-1: USB disconnect, device number 14 [ 1319.666237][T16982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.827247][T13333] ft260 0003:0403:6030.001C: failed to retrieve chip version [ 1319.840604][T13333] ft260 0003:0403:6030.001C: probe with driver ft260 failed with error -32 [ 1319.870803][T13333] usb 6-1: USB disconnect, device number 16 [ 1320.619976][T16997] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 1321.321714][T17008] loop1: detected capacity change from 0 to 256 [ 1322.352809][T17017] loop7: detected capacity change from 0 to 4096 [ 1322.491137][T17027] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1322.575901][ T5854] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1322.785238][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1322.797467][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1322.809506][ T5854] usb 10-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1322.819364][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.873509][ T5854] usb 10-1: config 0 descriptor?? [ 1322.882683][T17026] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1323.114199][T17035] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1323.400269][ T5854] hid-rmi 0003:0461:4E72.001D: unknown main item tag 0x0 [ 1323.413631][ T5854] hid-rmi 0003:0461:4E72.001D: unknown main item tag 0x0 [ 1323.421501][ T5854] hid-rmi 0003:0461:4E72.001D: unknown main item tag 0x0 [ 1323.429643][ T5854] hid-rmi 0003:0461:4E72.001D: unknown main item tag 0x0 [ 1323.437440][ T5854] hid-rmi 0003:0461:4E72.001D: unknown main item tag 0x0 [ 1323.483765][ T5854] hid-rmi 0003:0461:4E72.001D: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.9-1/input0 [ 1323.625773][T13333] usb 10-1: USB disconnect, device number 10 [ 1324.730990][T17054] loop1: detected capacity change from 0 to 512 [ 1325.688950][T17066] mkiss: ax0: crc mode is auto. [ 1326.207617][T17075] loop5: detected capacity change from 0 to 256 [ 1326.355579][T17075] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1326.407783][T17080] tun0: tun_chr_ioctl cmd 1074025677 [ 1326.414005][T17080] tun0: linktype set to 778 [ 1326.461787][ T30] audit: type=1800 audit(2000000126.480:198): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4285" name="file1" dev="loop5" ino=1048921 res=0 errno=0 [ 1326.513708][T17084] loop9: detected capacity change from 0 to 16 [ 1328.129021][ T5854] kernel write not supported for file /668/attr/exec (pid: 5854 comm: kworker/0:3) [ 1329.114164][ T1659] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1329.123266][T13333] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1329.405706][ T1659] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1329.416240][ T1659] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 1329.426052][ T1659] usb 2-1: Product: syz [ 1329.430968][ T1659] usb 2-1: Manufacturer: syz [ 1329.436238][ T1659] usb 2-1: SerialNumber: syz [ 1329.454127][T17112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.464557][T17112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.521419][ T1659] usb 2-1: config 0 descriptor?? [ 1329.588148][ T5808] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1329.588479][ T5808] Bluetooth: hci3: adv larger than maximum supported [ 1329.597374][ T5808] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1329.614168][T13333] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1329.629643][T13333] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1329.638174][T13333] usb 10-1: can't read configurations, error -71 [ 1329.748780][ T1659] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1329.760176][ T1659] asix 2-1:0.0: probe with driver asix failed with error -61 [ 1329.986577][T17124] loop7: detected capacity change from 0 to 64 [ 1330.014633][T17124] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 1330.323368][T17126] loop5: detected capacity change from 0 to 512 [ 1330.401226][T17126] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1330.457279][T17131] loop7: detected capacity change from 0 to 64 [ 1330.485838][T17131] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 1331.307452][T17140] loop7: detected capacity change from 0 to 1024 [ 1331.478539][T17140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.573641][T17126] loop5: detected capacity change from 0 to 512 [ 1331.650571][T17126] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1331.660771][T17126] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (800) [ 1331.681522][T17140] EXT4-fs error (device loop7): ext4_xattr_set_entry:1660: inode #15: comm syz.7.4311: corrupted xattr entries [ 1331.747445][T17140] EXT4-fs error (device loop7): ext4_xattr_block_set:2210: inode #15: comm syz.7.4311: bad block 129 [ 1332.025062][T13333] usb 2-1: USB disconnect, device number 14 [ 1332.090487][T10931] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.169586][T17149] loop2: detected capacity change from 0 to 512 [ 1333.378631][ T293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1333.445933][ T5854] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1333.714157][T17161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.724048][T17161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.841107][ T5854] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1333.841801][ T5808] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1333.849456][ T5808] Bluetooth: hci4: adv larger than maximum supported [ 1333.857055][ T5808] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1333.919406][ T5854] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1333.927767][ T5854] usb 2-1: can't read configurations, error -71 [ 1334.692786][T17173] loop2: detected capacity change from 0 to 4096 [ 1334.882447][T17184] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1335.249079][T17187] loop9: detected capacity change from 0 to 512 [ 1335.271273][T17189] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.375914][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.383367][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.390781][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.398248][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.405692][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.413037][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.420553][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.428013][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.435504][T17188] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.882783][T17195] loop2: detected capacity change from 0 to 256 [ 1336.131550][T17195] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1336.217258][ T30] audit: type=1800 audit(2000000136.230:199): pid=17195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4332" name="file1" dev="loop2" ino=1048922 res=0 errno=0 [ 1337.242514][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1337.249613][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1337.356680][T17205] loop2: detected capacity change from 0 to 4096 [ 1337.375932][T17205] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1337.627909][T17205] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1338.237298][T17219] input: syz1 as /devices/virtual/input/input29 [ 1338.319048][T17217] loop1: detected capacity change from 0 to 4096 [ 1338.356134][T17217] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1338.506897][T13333] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1338.696545][T13333] usb 3-1: Using ep0 maxpacket: 16 [ 1338.719985][T17217] ntfs3(loop1): ino=1b, "file0" indx_read [ 1338.722424][T13333] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.739067][T13333] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1338.749566][T13333] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1338.759675][T13333] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1338.888738][T13333] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1338.901529][T13333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1338.911041][T13333] usb 3-1: SerialNumber: syz [ 1338.956846][T17221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1338.969269][T17221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1338.987866][T13333] hub 3-1:1.0: bad descriptor, ignoring hub [ 1338.994283][T13333] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1339.106170][ T1659] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1339.275999][ T1659] usb 10-1: Using ep0 maxpacket: 32 [ 1339.280651][T17221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1339.300549][ T1659] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.312414][ T1659] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.323862][ T1659] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1339.334045][ T1659] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.342519][T17221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1339.398951][ T1659] usb 10-1: config 0 descriptor?? [ 1339.576068][T17229] loop5: detected capacity change from 0 to 1024 [ 1339.700329][T17229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1339.790693][T13333] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1339.838615][T17229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.053958][ T1659] ft260 0003:0403:6030.001E: failed to retrieve chip version [ 1340.064840][ T1659] ft260 0003:0403:6030.001E: probe with driver ft260 failed with error -32 [ 1340.091013][ T1659] usb 10-1: USB disconnect, device number 13 [ 1340.113104][ T5854] usb 3-1: USB disconnect, device number 15 [ 1340.124246][ T5854] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1340.484766][T17239] loop7: detected capacity change from 0 to 512 [ 1340.639023][ T1659] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1340.844598][ T1659] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1340.854463][ T1659] usb 2-1: config 0 has no interface number 0 [ 1340.897268][ T1659] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1340.907123][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.915551][ T1659] usb 2-1: Product: syz [ 1340.920031][ T1659] usb 2-1: Manufacturer: syz [ 1340.926733][ T1659] usb 2-1: SerialNumber: syz [ 1340.966037][ T1659] usb 2-1: config 0 descriptor?? [ 1341.226056][ T1659] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1341.241324][ T1659] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1341.250239][ T1659] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1341.259054][ T1659] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1341.303237][ T1659] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1341.691718][ T1659] usb 2-1: USB disconnect, device number 17 [ 1341.731985][ T1659] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1341.743867][ T1659] keyspan 2-1:0.133: device disconnected [ 1342.052533][T17255] Falling back ldisc for ptm0. [ 1342.103916][T17253] loop9: detected capacity change from 0 to 256 [ 1342.141291][T17253] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1342.176300][T17253] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1342.923589][T17264] mkiss: ax0: crc mode is auto. [ 1343.322674][T17270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4367'. [ 1343.658901][T17276] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4370'. [ 1344.258925][T17285] netem: incorrect gi model size [ 1344.264298][T17285] netem: change failed [ 1345.116621][ T5854] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1345.296368][ T5854] usb 10-1: Using ep0 maxpacket: 32 [ 1345.337776][ T5854] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1345.347752][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.425622][ T5854] usb 10-1: config 0 descriptor?? [ 1345.718768][ T5854] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1345.742395][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1345.788174][ T5854] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1345.795862][ T5854] usb 10-1: media controller created [ 1345.896617][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1345.942868][T17293] ===================================================== [ 1345.950508][T17293] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1345.958327][T17293] _copy_to_user+0xcc/0x120 [ 1345.963085][T17293] i2cdev_ioctl_smbus+0x586/0x660 [ 1345.969585][T17293] compat_i2cdev_ioctl+0x48f/0xb40 [ 1345.976198][T17293] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1345.982008][T17293] ia32_sys_call+0x2d07/0x42c0 [ 1345.987700][T17293] __do_fast_syscall_32+0xb0/0x150 [ 1345.993196][T17293] do_fast_syscall_32+0x38/0x80 [ 1345.998457][T17293] do_SYSENTER_32+0x1f/0x30 [ 1346.003236][T17293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1346.010094][T17293] [ 1346.012634][T17293] Uninit was stored to memory at: [ 1346.018305][T17293] __i2c_smbus_xfer+0x254d/0x2f60 [ 1346.023602][T17293] i2c_smbus_xfer+0x31d/0x4d0 [ 1346.028770][T17293] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1346.034053][T17293] compat_i2cdev_ioctl+0x48f/0xb40 [ 1346.039598][T17293] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1346.046194][T17293] ia32_sys_call+0x2d07/0x42c0 [ 1346.051189][T17293] __do_fast_syscall_32+0xb0/0x150 [ 1346.056792][T17293] do_fast_syscall_32+0x38/0x80 [ 1346.061938][T17293] do_SYSENTER_32+0x1f/0x30 [ 1346.066926][T17293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1346.074783][T17293] [ 1346.078524][T17293] Local variable msgbuf1.i created at: [ 1346.084559][T17293] __i2c_smbus_xfer+0x86a/0x2f60 [ 1346.089966][T17293] i2c_smbus_xfer+0x31d/0x4d0 [ 1346.094909][T17293] [ 1346.097754][T17293] Bytes 0-1 of 2 are uninitialized [ 1346.103027][T17293] Memory access of size 2 starts at ffff8880434a3c86 [ 1346.110018][T17293] Data copied to user address 0000000080000040 [ 1346.116447][T17293] [ 1346.118968][T17293] CPU: 0 UID: 0 PID: 17293 Comm: syz.9.4378 Tainted: G W 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(none) [ 1346.133072][T17293] Tainted: [W]=WARN [ 1346.137437][T17293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1346.147964][T17293] ===================================================== [ 1346.155137][T17293] Disabling lock debugging due to kernel taint [ 1346.161608][T17293] Kernel panic - not syncing: kmsan.panic set ... [ 1346.168200][T17293] CPU: 0 UID: 0 PID: 17293 Comm: syz.9.4378 Tainted: G B W 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(none) [ 1346.182083][T17293] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1346.187225][T17293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1346.197524][T17293] Call Trace: [ 1346.200985][T17293] [ 1346.204046][T17293] __dump_stack+0x26/0x30 [ 1346.208629][T17293] dump_stack_lvl+0x53/0x270 [ 1346.213440][T17293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1346.219518][T17293] dump_stack+0x1e/0x25 [ 1346.223917][T17293] panic+0x4bd/0xd50 [ 1346.228087][T17293] kmsan_report+0x31c/0x320 [ 1346.232795][T17293] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1346.238964][T17293] ? kmsan_copy_to_user+0xf1/0x190 [ 1346.244275][T17293] ? _copy_to_user+0xcc/0x120 [ 1346.249149][T17293] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1346.254554][T17293] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1346.260071][T17293] ? __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1346.266035][T17293] ? ia32_sys_call+0x2d07/0x42c0 [ 1346.271143][T17293] ? __do_fast_syscall_32+0xb0/0x150 [ 1346.276638][T17293] ? do_fast_syscall_32+0x38/0x80 [ 1346.281881][T17293] ? do_SYSENTER_32+0x1f/0x30 [ 1346.286796][T17293] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1346.293545][T17293] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1346.299022][T17293] ? __i2c_transfer+0x11cd/0x3110 [ 1346.304243][T17293] ? kmsan_get_metadata+0xfb/0x160 [ 1346.309610][T17293] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1346.316166][T17293] ? kmsan_get_metadata+0xfb/0x160 [ 1346.321483][T17293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1346.327533][T17293] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1346.332955][T17293] ? kmsan_get_metadata+0xfb/0x160 [ 1346.338280][T17293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1346.344355][T17293] kmsan_internal_check_memory+0x1e1/0x230 [ 1346.350436][T17293] kmsan_copy_to_user+0xf1/0x190 [ 1346.355611][T17293] _copy_to_user+0xcc/0x120 [ 1346.360314][T17293] i2cdev_ioctl_smbus+0x586/0x660 [ 1346.365557][T17293] compat_i2cdev_ioctl+0x48f/0xb40 [ 1346.370869][T17293] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1346.376686][T17293] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1346.382506][T17293] ? kmsan_get_metadata+0xfb/0x160 [ 1346.387892][T17293] ? kmsan_get_metadata+0xfb/0x160 [ 1346.393290][T17293] ia32_sys_call+0x2d07/0x42c0 [ 1346.398266][T17293] __do_fast_syscall_32+0xb0/0x150 [ 1346.403654][T17293] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1346.409635][T17293] do_fast_syscall_32+0x38/0x80 [ 1346.414756][T17293] do_SYSENTER_32+0x1f/0x30 [ 1346.419520][T17293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1346.426101][T17293] RIP: 0023:0xf7f74539 [ 1346.430335][T17293] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1346.450178][T17293] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1346.458834][T17293] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1346.466988][T17293] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.475118][T17293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.483261][T17293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1346.491384][T17293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.499552][T17293] [ 1346.503093][T17293] Kernel Offset: disabled [ 1346.507543][T17293] Rebooting in 86400 seconds..