last executing test programs: 12.050463476s ago: executing program 3 (id=2533): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018e2ffff02000000000000000200000d0a00bbf61640a1ea621d000002000000000000"], &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0xfffd, 0x1005, @mcast2, 0x8676}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) sched_setscheduler(0x0, 0x2, 0x0) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', &(0x7f0000000380), 0x22000, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,smackfsfloor=\x00,fowner>']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x7, "78d7f29ce274"}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.985527932s ago: executing program 0 (id=2534): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 9.221532511s ago: executing program 1 (id=2539): r0 = fsopen(&(0x7f00000002c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, 0xffffffffffffffff) fsmount(r0, 0x0, 0xf) 8.136823407s ago: executing program 1 (id=2540): r0 = socket(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r0, &(0x7f0000000400), 0x2) write(r0, &(0x7f0000000140)="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", 0x148) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000002280)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@my=0x1}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @any, 0x0, 0x0, 0x5e, 0x0, 0x4}) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast2, @in=@initdev}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x6, 0x100001, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xd5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040040) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000037c00000400f6000c0001800600060086"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.135519367s ago: executing program 3 (id=2541): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r2, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = syz_open_dev$sg(0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {&(0x7f0000000180)="554573ca292366878e10d634e7a0b779488ce16d07", 0x15}], 0x3}, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700000dbdf25250000000a0001007770616e3000000005002a000700000058df7d675aa64f3bc1c385b69d3de9f782759d1902bd7fa4646c1d651efef5c512d3bbeee4ca3783cc3d0c36e08e382f1a458a774a15fa59"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) 8.057507875s ago: executing program 0 (id=2542): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 7.008245207s ago: executing program 3 (id=2543): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 6.379588579s ago: executing program 0 (id=2544): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a00000000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4080) syz_open_procfs(0x0, &(0x7f0000000100)='net/stat\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@dev}, &(0x7f0000000400)=0x14) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00'}, 0x10) r7 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000000)={0x18, "96ab8cb18a5722d2da3a03f39b5eaee25558f362e700"}}) write(r6, &(0x7f0000000340)="1b0000001a005f0400f9", 0xa) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000080)=0x0) prlimit64(r8, 0x4, 0x0, &(0x7f00000000c0)) 6.289489647s ago: executing program 1 (id=2545): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) 6.098853485s ago: executing program 1 (id=2546): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.483145756s ago: executing program 2 (id=2547): syz_open_procfs(0x0, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20080, 0x0) 5.374200946s ago: executing program 0 (id=2548): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x7, 0x7f, 0x5, 0x1, 0x6, 0x5f, 0x9, 0x15, 0xffff2d33, 0xff7fff01, 0x7, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x5, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129c32f6, 0xc8, 0x5, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xfffffffe, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x204, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93790, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x9, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x81, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x2c4ad71a, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x0, 0x938, 0x9, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x3, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf41, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r3, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x406, r5) write$FUSE_INIT(r6, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0xa0300f10, 0x9, 0x8, 0x8, 0xd9, 0x0, 0x0, 0x10, 0xf}}, 0x50) read$alg(r6, &(0x7f0000000000)=""/77, 0x4d) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ee85c8d0e3cb5869", 0x8, 0x10, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) 4.729964089s ago: executing program 2 (id=2549): r0 = syz_open_dev$video(&(0x7f0000001980), 0x8, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000019c0)={0x5, 0x0, 0x3}) 4.654531916s ago: executing program 0 (id=2550): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018e2ffff02000000000000000200000d0a00bbf61640a1ea621d000002000000000000"], &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0xfffd, 0x1005, @mcast2, 0x8676}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) sched_setscheduler(0x0, 0x2, 0x0) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', &(0x7f0000000380), 0x22000, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,smackfsfloor=\x00,fowner>', @ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x7, "78d7f29ce274"}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.41131402s ago: executing program 2 (id=2551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r2, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = syz_open_dev$sg(0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {&(0x7f0000000180)="554573ca292366878e10d634e7a0b779488ce16d07", 0x15}], 0x3}, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700000dbdf25250000000a0001007770616e3000000005002a000700000058df7d675aa64f3bc1c385b69d3de9f782759d1902bd7fa4646c1d651efef5c512d3bbeee4ca3783cc3d0c36e08e382f1a458a774a15fa59"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) 3.370037882s ago: executing program 2 (id=2552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3.002578547s ago: executing program 3 (id=2553): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000380)=[{r0}], 0x1, 0x20000080) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) 1.925798873s ago: executing program 1 (id=2554): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000090a0104000000050900010073797a3000000000080005400000000d0900020073797a320000000008000a40fffffffc2c0011800a0001006c696d69740000001c0002800c000140fffffffffffffffc0c000240000000010000000014000000110001000000000000000000ff00000a"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) r1 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) sendfile(r2, r3, 0x0, 0x110003) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000), &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) getpid() getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f00000007c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.859651259s ago: executing program 3 (id=2555): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req={0x2, 0x9, 0x1161, 0x3}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r5, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8400) 1.859267069s ago: executing program 2 (id=2556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a00000000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4080) syz_open_procfs(0x0, &(0x7f0000000100)='net/stat\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@dev}, &(0x7f0000000400)=0x14) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00'}, 0x10) r7 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000000)={0x18, "96ab8cb18a5722d2da3a03f39b5eaee25558f362e700"}}) write(r6, &(0x7f0000000340)="1b0000001a005f0400f9", 0xa) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000080)=0x0) prlimit64(r8, 0x4, 0x0, &(0x7f00000000c0)) 1.367988127s ago: executing program 3 (id=2557): syz_open_procfs(0x0, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20080, 0x0) 707.431561ms ago: executing program 0 (id=2558): ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x1, 0xa816}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000640)={0x2, 0xfc}, 0x2) 662.399336ms ago: executing program 2 (id=2559): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x7, 0x7f, 0x5, 0x1, 0x6, 0x5f, 0x9, 0x15, 0xffff2d33, 0xff7fff01, 0x7, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x5, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129c32f6, 0xc8, 0x5, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xfffffffe, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x204, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93790, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x9, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x81, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x2c4ad71a, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x0, 0x938, 0x9, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x3, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf41, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r3, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x406, r5) write$FUSE_INIT(r6, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0xa0300f10, 0x9, 0x8, 0x8, 0xd9, 0x0, 0x0, 0x10, 0xf}}, 0x50) read$alg(r6, &(0x7f0000000000)=""/77, 0x4d) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ee85c8d0e3cb5869", 0x8, 0x10, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) 0s ago: executing program 1 (id=2560): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r2, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = syz_open_dev$sg(0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {&(0x7f0000000180)="554573ca292366878e10d634e7a0b779488ce16d07", 0x15}], 0x3}, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700000dbdf25250000000a0001007770616e3000000005002a000700000058df7d675aa64f3bc1c385b69d3de9f782759d1902bd7fa4646c1d651efef5c512d3bbeee4ca3783cc3d0c36e08e382f1a458a774a15fa59"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) kernel console output (not intermixed with test programs): while loading super root [ 935.260715][ T5875] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 935.411464][T12101] sd 0:0:1:0: device reset [ 935.477774][T12103] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 935.883235][ T5875] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 935.910549][ T5875] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 935.931113][ T5875] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.964655][ T5875] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 935.989175][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.197570][ T5875] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 936.370030][ T5875] usb 1-1: invalid MIDI out EP 0 [ 939.137403][ T5875] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 939.239043][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.860868][ T5875] usb 1-1: USB disconnect, device number 29 [ 940.038324][T12122] autofs4:pid:12122:autofs_fill_super: called with bogus options [ 940.048581][T12121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'. [ 940.116307][T12118] syz.1.1564: attempt to access beyond end of device [ 940.116307][T12118] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 941.293094][T12134] sd 0:0:1:0: device reset [ 941.417520][T12135] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 942.321254][ T5857] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 942.597280][ T5857] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 942.697511][ T5857] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 942.809498][ T5857] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.945446][ T5857] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 943.043722][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.436954][ T5857] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 943.588043][ T5857] usb 2-1: invalid MIDI out EP 0 [ 944.190267][ T5857] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 946.453568][T12152] autofs4:pid:12152:autofs_fill_super: called with bogus options [ 946.484517][T12153] syz.3.1574: attempt to access beyond end of device [ 946.484517][T12153] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 946.500086][T12153] SQUASHFS error: Failed to read block 0x0: -5 [ 946.506569][T12153] unable to read squashfs_super_block [ 948.112113][ T5837] usb 2-1: USB disconnect, device number 29 [ 948.310872][T12160] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1577'. [ 948.351369][T12163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1578'. [ 948.361778][T12160] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1577'. [ 948.384048][T12160] netlink: 'syz.1.1577': attribute type 6 has an invalid length. [ 948.394980][T12160] netlink: 'syz.1.1577': attribute type 4 has an invalid length. [ 948.986378][T12176] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 949.335138][T12178] loop3: detected capacity change from 0 to 2048 [ 949.539550][T12178] NILFS (loop3): invalid segment: Checksum error in super root [ 949.579920][T12178] NILFS (loop3): error -22 while loading super root [ 952.068752][ T6829] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 952.428941][ T6829] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 952.541980][ T6829] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 952.682138][ T6829] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 952.713750][ T6829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.801605][ T6829] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 952.856882][ T6829] usb 2-1: invalid MIDI out EP 0 [ 954.431548][ T6829] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 954.742140][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.279456][T12216] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 957.643553][ T6829] usb 2-1: USB disconnect, device number 30 [ 962.392461][ T9449] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 962.437995][T12242] syz.3.1598: attempt to access beyond end of device [ 962.437995][T12242] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 962.451933][T12242] SQUASHFS error: Failed to read block 0x0: -5 [ 962.458164][T12242] unable to read squashfs_super_block [ 962.502453][T12228] loop0: detected capacity change from 0 to 2048 [ 962.579988][T12228] NILFS (loop0): invalid segment: Checksum error in super root [ 962.622847][T12228] NILFS (loop0): error -22 while loading super root [ 962.684114][T12244] syz.3.1600: attempt to access beyond end of device [ 962.684114][T12244] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 963.796747][T12250] Cannot find del_set index 4 as target [ 964.126872][T12260] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 964.250655][ T6829] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 965.208835][T12264] tty tty27: ldisc open failed (-12), clearing slot 26 [ 965.612616][ T6829] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 965.638596][ T6829] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 965.666061][ T6829] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 965.685628][ T6829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.720619][T12268] syz.2.1609: attempt to access beyond end of device [ 965.720619][T12268] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 965.734455][T12268] SQUASHFS error: Failed to read block 0x0: -5 [ 965.740820][T12268] unable to read squashfs_super_block [ 965.755003][ T6829] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 965.934342][ T6829] usb 2-1: invalid MIDI out EP 0 [ 966.491137][ T9449] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 966.500217][ T9449] Bluetooth: hci0: Injecting HCI hardware error event [ 966.511557][ T9449] Bluetooth: hci0: hardware error 0x00 [ 968.746282][ T6829] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 968.962428][ T6829] usb 2-1: USB disconnect, device number 31 [ 969.336012][T12297] syz.1.1614: attempt to access beyond end of device [ 969.336012][T12297] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 969.376381][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 970.500503][ T9449] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 972.697941][T12311] sp0: Synchronizing with TNC [ 975.490315][T12313] syz.2.1619: attempt to access beyond end of device [ 975.490315][T12313] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 975.503561][T12313] SQUASHFS error: Failed to read block 0x0: -5 [ 975.509780][T12313] unable to read squashfs_super_block [ 975.826754][T12319] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1620'. [ 977.782940][T12326] autofs4:pid:12326:autofs_fill_super: called with bogus options [ 979.745540][T12339] Cannot find del_set index 4 as target [ 980.139253][T12344] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 981.185546][T12357] loop0: detected capacity change from 0 to 512 [ 981.210995][T12357] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 981.535740][T12354] loop1: detected capacity change from 0 to 2048 [ 981.652355][T12354] NILFS (loop1): invalid segment: Checksum error in super root [ 981.811030][T12354] NILFS (loop1): error -22 while loading super root [ 982.012914][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 982.020081][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 982.090699][T12361] ceph: No mds server is up or the cluster is laggy [ 982.264686][T12368] Cannot find del_set index 4 as target [ 982.294066][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 982.300218][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 985.092337][T12385] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1640'. [ 986.871864][T12392] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 987.531722][ T5857] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 987.884851][T12399] loop2: detected capacity change from 0 to 512 [ 988.083932][T12399] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 988.100821][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 988.111107][ T5857] usb 2-1: no configurations [ 988.136625][ T5857] usb 2-1: can't read configurations, error -22 [ 988.172893][ T5805] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 988.320739][ T5857] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 988.714794][T12395] loop0: detected capacity change from 0 to 32768 [ 988.804664][T12395] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 988.894934][T12404] loop3: detected capacity change from 0 to 2048 [ 988.988808][T12404] NILFS (loop3): invalid segment: Checksum error in super root [ 989.004994][T12404] NILFS (loop3): error -22 while loading super root [ 989.230782][T12395] XFS (loop0): Ending clean mount [ 991.348575][ T5788] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 991.426165][ T5837] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 991.892217][ T5837] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 991.924499][ T5837] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 991.995522][ T5837] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 992.006858][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.118335][T12423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 992.476160][ T5837] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 993.405900][T12439] loop3: detected capacity change from 0 to 512 [ 993.433481][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.440107][T12439] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 993.451019][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.981563][T12443] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 995.196724][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 995.783691][ T5837] usb 3-1: USB disconnect, device number 22 [ 998.718345][ T9449] block nbd2: Receive control failed (result -32) [ 998.734876][T12458] block nbd2: shutting down sockets [ 998.940948][ T5857] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 999.258857][T12463] loop3: detected capacity change from 0 to 2048 [ 999.260621][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 1000.173044][T12463] NILFS (loop3): invalid segment: Checksum error in super root [ 1000.235660][T12463] NILFS (loop3): error -22 while loading super root [ 1002.053396][ T5857] usb 1-1: device descriptor read/all, error -71 [ 1002.483409][T12481] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1003.559499][T12485] sp0: Synchronizing with TNC [ 1006.397648][T12489] overlayfs: statfs failed on './file0' [ 1007.145355][T12487] loop0: detected capacity change from 0 to 32768 [ 1010.788622][T12518] sp0: Synchronizing with TNC [ 1011.890545][ T5875] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1012.180637][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 1012.208552][T12512] loop2: detected capacity change from 0 to 32768 [ 1012.294785][T12523] loop1: detected capacity change from 0 to 2048 [ 1012.334169][ T5875] usb 1-1: no configurations [ 1012.341340][T12523] NILFS (loop1): invalid segment: Checksum error in super root [ 1012.355986][T12523] NILFS (loop1): error -22 while loading super root [ 1012.413666][ T5875] usb 1-1: can't read configurations, error -22 [ 1012.475040][T12512] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1012.573711][ T5875] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1012.629729][T12512] XFS (loop2): Ending clean mount [ 1014.411120][ T5786] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1018.648762][T12549] loop2: detected capacity change from 0 to 512 [ 1019.398898][T12549] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1021.907611][T12551] loop1: detected capacity change from 0 to 32768 [ 1023.413775][T12582] loop1: detected capacity change from 0 to 512 [ 1023.720089][T12582] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1024.477544][T12586] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 1024.750524][T12586] bond1: entered promiscuous mode [ 1024.758481][T12586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1025.307863][T12588] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1027.654663][T12614] autofs4:pid:12614:autofs_fill_super: called with bogus options [ 1027.708247][T12614] syz.2.1699: attempt to access beyond end of device [ 1027.708247][T12614] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1027.741116][T12613] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1028.390772][T12625] loop0: detected capacity change from 0 to 512 [ 1029.950681][T12625] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1030.731560][T12631] autofs4:pid:12631:autofs_fill_super: called with bogus options [ 1031.339091][T12637] fuse: Bad value for 'fd' [ 1032.848120][T12653] autofs4:pid:12653:autofs_fill_super: called with bogus options [ 1032.916459][T12653] syz.0.1711: attempt to access beyond end of device [ 1032.916459][T12653] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1033.192678][T12659] autofs4:pid:12659:autofs_fill_super: called with bogus options [ 1033.297771][T12660] loop1: detected capacity change from 0 to 512 [ 1034.021675][T12660] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1034.570506][ T5875] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1034.725794][T12665] loop1: detected capacity change from 0 to 32768 [ 1034.796990][T12665] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1034.860474][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 1034.894961][ T5875] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1034.926415][ T5875] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1035.112034][T12665] XFS (loop1): Ending clean mount [ 1035.121249][ T5875] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1035.148174][T12676] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1716'. [ 1036.217393][ T5875] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1036.319350][ T5875] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1036.332907][ T5875] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1036.340015][ T5875] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1036.364074][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.414512][ T5875] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1036.628172][ T5875] scsi host1: usb-storage 1-1:1.0 [ 1036.845802][ T5875] usb 1-1: USB disconnect, device number 34 [ 1037.525124][T12687] sp0: Synchronizing with TNC [ 1037.583310][T12686] fuse: Bad value for 'fd' [ 1039.024994][T12701] autofs4:pid:12701:autofs_fill_super: called with bogus options [ 1039.674671][T12710] loop3: detected capacity change from 0 to 512 [ 1039.703384][T12710] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1040.935407][T12718] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1727'. [ 1041.315266][ T5787] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1041.606635][T12721] sd 0:0:1:0: device reset [ 1042.996692][T12727] sp0: Synchronizing with TNC [ 1044.256306][T12733] sd 0:0:1:0: device reset [ 1044.409274][T12739] fuse: Bad value for 'fd' [ 1045.117946][T12747] loop2: detected capacity change from 0 to 512 [ 1045.160953][T12747] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1046.850010][T12760] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1739'. [ 1051.228355][T12773] sp0: Synchronizing with TNC [ 1054.034027][T12784] syz.1.1747: attempt to access beyond end of device [ 1054.034027][T12784] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1054.052432][T12784] SQUASHFS error: Failed to read block 0x0: -5 [ 1054.072647][T12784] unable to read squashfs_super_block [ 1054.655631][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.662199][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.916978][T12795] sd 0:0:1:0: device reset [ 1055.935521][T12800] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1752'. [ 1057.859485][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1749'. [ 1058.082105][T12810] sp0: Synchronizing with TNC [ 1059.302722][T12814] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1757'. [ 1060.973455][T12819] syz.3.1759: attempt to access beyond end of device [ 1060.973455][T12819] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1061.543718][T12831] sd 0:0:1:0: device reset [ 1062.203188][T12822] syz.3.1761: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1062.276230][T12822] CPU: 1 PID: 12822 Comm: syz.3.1761 Not tainted syzkaller #0 [ 1062.283803][T12822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1062.293923][T12822] Call Trace: [ 1062.297253][T12822] [ 1062.300239][T12822] dump_stack_lvl+0x16c/0x230 [ 1062.304994][T12822] ? show_regs_print_info+0x20/0x20 [ 1062.310278][T12822] ? load_image+0x3b0/0x3b0 [ 1062.314873][T12822] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1062.321386][T12822] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1062.327948][T12822] warn_alloc+0x210/0x300 [ 1062.332340][T12822] ? zone_watermark_ok_safe+0x230/0x230 [ 1062.337943][T12822] ? _raw_spin_unlock+0x28/0x40 [ 1062.342846][T12822] ? __vb2_queue_alloc+0x794/0x1410 [ 1062.348120][T12822] __vmalloc_node_range+0x662/0x1320 [ 1062.353492][T12822] ? free_vm_area+0x50/0x50 [ 1062.358052][T12822] vmalloc_user+0x74/0x80 [ 1062.362454][T12822] ? vb2_vmalloc_alloc+0xef/0x330 [ 1062.367518][T12822] vb2_vmalloc_alloc+0xef/0x330 [ 1062.372444][T12822] ? __copy_timestamp+0x1f0/0x1f0 [ 1062.377700][T12822] __vb2_queue_alloc+0x794/0x1410 [ 1062.382879][T12822] vb2_core_reqbufs+0xa57/0x1140 [ 1062.387989][T12822] ? vb2_verify_memory_type+0x570/0x570 [ 1062.393603][T12822] ? vb2_reqbufs+0x360/0x5a0 [ 1062.398280][T12822] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 1062.403722][T12822] __video_do_ioctl+0xcbd/0xdd0 [ 1062.408679][T12822] ? video_ioctl2+0x30/0x30 [ 1062.413229][T12822] ? __might_fault+0xc6/0x120 [ 1062.417953][T12822] ? __might_fault+0xaa/0x120 [ 1062.422710][T12822] video_usercopy+0x838/0x1330 [ 1062.427535][T12822] ? video_ioctl2+0x30/0x30 [ 1062.432089][T12822] ? v4l_printk_ioctl+0x160/0x160 [ 1062.437173][T12822] v4l2_ioctl+0x18a/0x1e0 [ 1062.441550][T12822] ? v4l2_poll+0x2b0/0x2b0 [ 1062.446009][T12822] __se_sys_ioctl+0xfd/0x170 [ 1062.450665][T12822] do_syscall_64+0x55/0xb0 [ 1062.455128][T12822] ? clear_bhb_loop+0x40/0x90 [ 1062.459876][T12822] ? clear_bhb_loop+0x40/0x90 [ 1062.464653][T12822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1062.470628][T12822] RIP: 0033:0x7f476e78efc9 [ 1062.475102][T12822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.494775][T12822] RSP: 002b:00007f476f606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1062.503237][T12822] RAX: ffffffffffffffda RBX: 00007f476e9e5fa0 RCX: 00007f476e78efc9 [ 1062.511249][T12822] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1062.519271][T12822] RBP: 00007f476e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1062.527294][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.535309][T12822] R13: 00007f476e9e6038 R14: 00007f476e9e5fa0 R15: 00007ffeced7e038 [ 1062.543336][T12822] [ 1062.610798][T12822] Mem-Info: [ 1062.614027][T12822] active_anon:5682 inactive_anon:0 isolated_anon:0 [ 1062.614027][T12822] active_file:17171 inactive_file:40276 isolated_file:0 [ 1062.614027][T12822] unevictable:768 dirty:51 writeback:0 [ 1062.614027][T12822] slab_reclaimable:10840 slab_unreclaimable:91770 [ 1062.614027][T12822] mapped:24847 shmem:1361 pagetables:493 [ 1062.614027][T12822] sec_pagetables:0 bounce:0 [ 1062.614027][T12822] kernel_misc_reclaimable:0 [ 1062.614027][T12822] free:1348071 free_pcp:8226 free_cma:0 [ 1062.684282][T12822] Node 0 active_anon:24028kB inactive_anon:0kB active_file:68684kB inactive_file:160900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99388kB dirty:204kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11064kB pagetables:1972kB sec_pagetables:0kB all_unreclaimable? no [ 1062.726470][T12822] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1062.775453][T12822] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1062.809996][T12822] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1062.817716][T12822] Node 0 DMA32 free:1462532kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:23980kB inactive_anon:0kB active_file:68684kB inactive_file:159580kB unevictable:1536kB writepending:204kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:21872kB local_pcp:936kB free_cma:0kB [ 1062.854546][T12822] lowmem_reserve[]: 0 0 1 1 1 [ 1062.859375][T12822] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1062.893356][T12822] lowmem_reserve[]: 0 0 0 0 0 [ 1062.898287][T12822] Node 1 Normal free:3902940kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11844kB local_pcp:5956kB free_cma:0kB [ 1062.950154][T12822] lowmem_reserve[]: 0 0 0 0 0 [ 1062.959410][T12822] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1062.975219][T12822] Node 0 DMA32: 3*4kB (UME) 1135*8kB (UME) 973*16kB (M) 591*32kB (ME) 396*64kB (ME) 93*128kB (ME) 35*256kB (UM) 25*512kB (UME) 12*1024kB (UM) 13*2048kB (UM) 320*4096kB (UM) = 1452212kB [ 1062.996828][T12822] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1063.015223][T12822] Node 1 Normal: 219*4kB (UME) 44*8kB (UME) 39*16kB (UME) 177*32kB (UME) 54*64kB (UE) 10*128kB (UME) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (UM) = 3902940kB [ 1063.037670][T12822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1063.050289][T12822] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1063.063991][T12822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1063.077493][T12822] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1063.103899][T12822] 58792 total pagecache pages [ 1063.108939][T12822] 0 pages in swap cache [ 1063.199222][T12822] Free swap = 124996kB [ 1063.233379][T12822] Total swap = 124996kB [ 1063.260292][T12822] 2097051 pages RAM [ 1063.291049][T12822] 0 pages HighMem/MovableOnly [ 1063.335576][T12822] 416136 pages reserved [ 1063.373975][T12822] 0 pages cma reserved [ 1064.793864][T12860] loop0: detected capacity change from 0 to 512 [ 1064.810727][T12858] syz.1.1770: attempt to access beyond end of device [ 1064.810727][T12858] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1065.116812][T12860] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1065.875400][T12867] sd 0:0:1:0: device reset [ 1067.302591][T12875] sp0: Synchronizing with TNC [ 1067.857692][T12877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1068.334893][T12877] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1068.456975][T12877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1068.478854][T12877] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1068.507368][T12877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1068.528551][T12877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1068.553155][T12877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1069.850794][ T9449] Bluetooth: hci1: command 0x0406 tx timeout [ 1069.936968][T12901] loop0: detected capacity change from 0 to 2048 [ 1069.983480][T12901] NILFS (loop0): invalid segment: Checksum error in super root [ 1070.173172][T12901] NILFS (loop0): error -22 while loading super root [ 1070.324944][T12907] loop3: detected capacity change from 0 to 512 [ 1070.490718][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1070.571123][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1070.706843][T12907] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1071.940989][ T9449] Bluetooth: hci1: command 0x0406 tx timeout [ 1072.351141][T12274] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1072.584775][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1072.662701][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1073.152342][T12274] usb 4-1: Using ep0 maxpacket: 32 [ 1073.164029][T12274] usb 4-1: config 0 has no interfaces? [ 1073.173332][T12274] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1073.184319][T12274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.192910][T12274] usb 4-1: Product: syz [ 1073.197310][T12274] usb 4-1: Manufacturer: syz [ 1073.205801][T12274] usb 4-1: SerialNumber: syz [ 1073.214460][T12274] usb 4-1: config 0 descriptor?? [ 1073.380645][ T6829] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1073.541974][T12274] usb 4-1: USB disconnect, device number 23 [ 1073.622541][ T6829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1073.634141][ T6829] usb 1-1: not running at top speed; connect to a high speed hub [ 1073.644883][ T6829] usb 1-1: config 129 has an invalid interface number: 28 but max is 0 [ 1073.653867][ T6829] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.675278][ T6829] usb 1-1: config 129 has no interface number 0 [ 1073.689300][ T6829] usb 1-1: config 129 interface 28 altsetting 250 has an invalid endpoint with address 0xFD, skipping [ 1073.767575][T12922] loop2: detected capacity change from 0 to 32768 [ 1073.774905][ T6829] usb 1-1: config 129 interface 28 has no altsetting 0 [ 1073.806983][ T6829] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1073.821241][ T6829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.829321][ T6829] usb 1-1: Product: syz [ 1073.830280][T12922] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1073.842626][ T6829] usb 1-1: Manufacturer: syz [ 1073.847302][ T6829] usb 1-1: SerialNumber: syz [ 1073.870498][ T5875] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1073.927288][T12922] XFS (loop2): Ending clean mount [ 1074.075270][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.096287][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 1074.108547][ T5875] usb 2-1: no configurations [ 1074.133456][ T5875] usb 2-1: can't read configurations, error -22 [ 1074.191073][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.281910][ T6829] etas_es58x 1-1:129.28: Starting syz syz (Serial Number syz) [ 1074.323000][T12937] autofs4:pid:12937:autofs_fill_super: called with bogus options [ 1074.332753][ T5875] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1074.354080][T12937] syz.3.1791: attempt to access beyond end of device [ 1074.354080][T12937] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1074.404694][ T6829] usb 1-1: USB disconnect, device number 35 [ 1074.640480][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 1074.647372][ T5875] usb 2-1: no configurations [ 1074.655479][ T5875] usb 2-1: can't read configurations, error -22 [ 1074.663044][ T5875] usb usb2-port1: attempt power cycle [ 1074.730881][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1075.286987][T12945] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1793'. [ 1075.320556][ T5875] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1077.174641][ T5786] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1077.700251][T12951] loop0: detected capacity change from 0 to 512 [ 1077.830910][T12951] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1079.633920][ T5805] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1079.911217][ T5875] usb 2-1: device descriptor read/8, error -71 [ 1080.824288][T12968] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1797'. [ 1083.521609][T12977] autofs4:pid:12977:autofs_fill_super: called with bogus options [ 1083.849695][T12977] syz.3.1800: attempt to access beyond end of device [ 1083.849695][T12977] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1084.503302][ T5857] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1084.659940][T12989] ubi31: attaching mtd0 [ 1084.670541][T12989] ubi31 error: ubi_attach_mtd_dev: bad VID header (7236529) or data offsets (7236593) [ 1084.800481][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 1084.809309][ T5857] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1084.826110][ T5857] usb 3-1: config 0 has no interface number 0 [ 1084.836159][ T5857] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1084.874471][ T5857] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1084.937253][ T5857] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1084.967321][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.988906][ T5857] usb 3-1: Product: syz [ 1084.993670][ T5857] usb 3-1: Manufacturer: syz [ 1084.998722][ T5857] usb 3-1: SerialNumber: syz [ 1085.020929][ T5857] usb 3-1: config 0 descriptor?? [ 1085.142959][T12998] loop3: detected capacity change from 0 to 512 [ 1085.206102][T12998] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1085.303353][ T5857] redrat3 3-1:0.83: Couldn't find all endpoints [ 1085.838628][ T5857] usb 3-1: USB disconnect, device number 23 [ 1086.347918][T13003] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1808'. [ 1088.301160][T12274] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1088.926792][T12274] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1089.041547][T12274] usb 4-1: config 0 has no interface number 0 [ 1089.047774][T12274] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1089.111315][T12274] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1089.144891][T13015] Cannot find del_set index 4 as target [ 1089.150689][T12274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.158781][T12274] usb 4-1: Product: syz [ 1089.182634][T12274] usb 4-1: Manufacturer: syz [ 1089.187334][T12274] usb 4-1: SerialNumber: syz [ 1089.362651][T12274] usb 4-1: config 0 descriptor?? [ 1090.683828][T13026] autofs4:pid:13026:autofs_fill_super: called with bogus options [ 1090.695077][T13026] syz.2.1815: attempt to access beyond end of device [ 1090.695077][T13026] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1090.824266][T12274] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1091.435346][T13034] loop2: detected capacity change from 0 to 512 [ 1091.461938][T13035] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1818'. [ 1092.097951][T13034] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1093.722522][T12274] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1093.750284][T12274] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1093.765021][T12274] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1094.226852][T12274] usb 4-1: USB disconnect, device number 24 [ 1094.334317][T13046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1094.343100][T13046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1094.377559][T13046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1095.825931][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'. [ 1096.252938][T13067] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1829'. [ 1097.655471][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1097.661696][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.667771][ T9449] Bluetooth: hci1: command 0x0406 tx timeout [ 1098.889293][T13078] loop0: detected capacity change from 0 to 512 [ 1098.932303][T13078] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1100.278682][T13086] Cannot find del_set index 4 as target [ 1100.558609][T13085] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1100.568371][T13088] sp0: Synchronizing with TNC [ 1100.617691][T13085] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1100.668547][T13085] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1101.467852][T13092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1837'. [ 1102.340992][T12286] Bluetooth: hci1: command 0x0406 tx timeout [ 1102.514461][T13107] loop1: detected capacity change from 0 to 512 [ 1102.537540][T13107] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1102.700728][T12286] Bluetooth: hci2: command 0x0406 tx timeout [ 1102.740468][T12286] Bluetooth: hci3: command 0x0406 tx timeout [ 1103.708286][T13100] loop0: detected capacity change from 0 to 32768 [ 1103.876701][T13100] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1104.144437][T13100] XFS (loop0): Ending clean mount [ 1104.355123][T13126] sp0: Synchronizing with TNC [ 1106.257030][ T5788] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1108.005583][T12286] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1109.366868][T13157] loop0: detected capacity change from 0 to 512 [ 1109.988281][T13157] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1111.720704][T13169] sch_fq: defrate 4294967295 ignored. [ 1112.065987][T12286] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1112.075633][T12286] Bluetooth: hci1: Injecting HCI hardware error event [ 1112.086597][ T9449] Bluetooth: hci1: hardware error 0x00 [ 1112.770626][ T787] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1113.000540][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 1113.021095][ T787] usb 4-1: no configurations [ 1113.032762][ T787] usb 4-1: can't read configurations, error -22 [ 1113.200498][ T787] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1113.474132][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 1113.539442][ T787] usb 4-1: no configurations [ 1113.586399][ T787] usb 4-1: can't read configurations, error -22 [ 1113.658906][ T787] usb usb4-port1: attempt power cycle [ 1113.803983][T13194] autofs4:pid:13194:autofs_fill_super: called with bogus options [ 1113.831373][T13194] syz.1.1863: attempt to access beyond end of device [ 1113.831373][T13194] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1114.195423][ T787] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1114.212104][ T9449] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1114.243526][T13197] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1114.786426][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 1114.798457][ T787] usb 4-1: no configurations [ 1114.803581][ T787] usb 4-1: can't read configurations, error -22 [ 1115.072657][ T787] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1115.226740][T13201] loop1: detected capacity change from 0 to 512 [ 1116.138849][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.147916][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.187501][T13201] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1116.735182][ T787] usb 4-1: device descriptor read/8, error -71 [ 1116.812944][T13207] sch_fq: defrate 4294967295 ignored. [ 1117.589312][ T787] usb usb4-port1: unable to enumerate USB device [ 1118.331478][T13221] autofs4:pid:13221:autofs_fill_super: called with bogus options [ 1118.385749][T13221] syz.2.1872: attempt to access beyond end of device [ 1118.385749][T13221] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1119.733480][T13226] loop1: detected capacity change from 0 to 2048 [ 1119.793425][T13226] NILFS (loop1): invalid segment: Checksum error in super root [ 1119.801287][T13226] NILFS (loop1): error -22 while loading super root [ 1119.891876][ T5805] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1120.488355][T13238] loop3: detected capacity change from 0 to 512 [ 1121.175651][T13238] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1122.100682][ T6829] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1122.300856][ T6829] usb 4-1: Using ep0 maxpacket: 32 [ 1122.337406][ T6829] usb 4-1: no configurations [ 1122.342342][ T6829] usb 4-1: can't read configurations, error -22 [ 1122.500548][ T6829] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1122.841671][ T6829] usb 4-1: Using ep0 maxpacket: 32 [ 1122.901744][T13249] sch_fq: defrate 4294967295 ignored. [ 1122.966132][ T6829] usb 4-1: no configurations [ 1123.028526][ T6829] usb 4-1: can't read configurations, error -22 [ 1123.173631][ T6829] usb usb4-port1: attempt power cycle [ 1123.878370][ T6829] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1123.941598][ T6829] usb 4-1: Using ep0 maxpacket: 32 [ 1123.947974][ T6829] usb 4-1: no configurations [ 1123.956362][ T6829] usb 4-1: can't read configurations, error -22 [ 1124.139748][ T6829] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1124.938727][T13259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.809795][ T6829] usb 4-1: device descriptor read/8, error -71 [ 1125.936255][ T6829] usb usb4-port1: unable to enumerate USB device [ 1126.301250][T13269] loop3: detected capacity change from 0 to 512 [ 1126.335873][T13269] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1127.711165][T13281] sch_fq: defrate 4294967295 ignored. [ 1128.728987][T13284] sp0: Synchronizing with TNC [ 1128.778344][T13274] loop0: detected capacity change from 0 to 2048 [ 1129.013297][T13274] NILFS (loop0): invalid segment: Checksum error in super root [ 1129.042348][T13274] NILFS (loop0): error -22 while loading super root [ 1129.320633][ T5875] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1129.530630][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 1129.538065][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.578886][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.610876][ T5875] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1129.630567][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.642427][ T5875] usb 4-1: config 0 descriptor?? [ 1130.103012][ T5875] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 1130.299578][ T5875] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 1130.500591][ T5875] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1130.714262][ T5875] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 1130.744284][ T5875] ft260 0003:0403:6030.0002: failed to retrieve status: -71 [ 1130.758446][ T5875] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 1130.985123][ T5875] usb 4-1: USB disconnect, device number 33 [ 1131.272383][T13301] sd 0:0:1:0: device reset [ 1131.680534][ T5875] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1131.940505][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 1131.957425][ T5875] usb 2-1: no configurations [ 1131.965926][ T5875] usb 2-1: can't read configurations, error -22 [ 1132.085841][T13307] loop3: detected capacity change from 0 to 512 [ 1132.150521][T13307] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1132.194270][ T5875] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1132.900552][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 1132.925461][ T5875] usb 2-1: device descriptor read/all, error -71 [ 1132.949609][ T5875] usb usb2-port1: attempt power cycle [ 1134.116619][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 1134.378000][T13315] Process accounting resumed [ 1135.649102][T13341] loop0: detected capacity change from 0 to 512 [ 1136.407443][T13341] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1138.660422][ T787] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1138.770113][T13362] sd 0:0:1:0: device reset [ 1138.872632][ T787] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1138.887879][ T787] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1138.921103][ T787] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1138.960458][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.976067][T13354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1139.040226][ T787] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1141.500155][T12274] usb 2-1: USB disconnect, device number 41 [ 1142.116353][T13378] loop2: detected capacity change from 0 to 512 [ 1142.504815][T13378] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1142.881541][ T5875] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1143.240726][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 1143.469599][ T5875] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 1143.478330][ T5875] usb 2-1: config 0 has no interface number 0 [ 1143.485436][ T5875] usb 2-1: config 0 interface 18 has no altsetting 0 [ 1143.498720][ T5875] usb 2-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=7a.1a [ 1143.516880][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.527141][ T5875] usb 2-1: Product: syz [ 1143.539816][ T5875] usb 2-1: Manufacturer: syz [ 1143.560198][ T5875] usb 2-1: SerialNumber: syz [ 1143.586479][ T5875] usb 2-1: config 0 descriptor?? [ 1143.606129][ T5875] ums-sddr55 2-1:0.18: USB Mass Storage device detected [ 1143.785085][T13395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1143.810626][T13381] Bluetooth: MGMT ver 1.22 [ 1143.816002][T13395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1143.825047][ T5875] usb 2-1: USB disconnect, device number 42 [ 1144.980512][ T5875] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1145.284923][T13412] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1924'. [ 1145.930446][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1145.936600][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1147.123741][ T5875] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1147.155629][ T5875] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1147.184471][ T5875] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1147.210836][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.256778][T13407] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1147.285377][ T5875] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1149.373129][T13420] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1149.808630][ T787] usb 3-1: USB disconnect, device number 24 [ 1150.132293][T13422] sp0: Synchronizing with TNC [ 1150.736736][T13438] loop3: detected capacity change from 0 to 512 [ 1150.767804][T13438] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1151.722580][T13441] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1151.797167][T13444] syz.0.1933: attempt to access beyond end of device [ 1151.797167][T13444] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1151.885538][T13444] SQUASHFS error: Failed to read block 0x0: -5 [ 1151.909231][T13444] unable to read squashfs_super_block [ 1152.245191][T11837] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1152.382021][T13439] sd 0:0:1:0: device reset [ 1152.503075][T11837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1152.518350][T11837] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1152.688921][T13456] lo speed is unknown, defaulting to 1000 [ 1153.454051][T11837] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1153.464082][T11837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.530113][T13446] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1153.596434][T11837] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1155.702474][T11837] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1155.726714][ T6829] usb 4-1: USB disconnect, device number 34 [ 1155.983257][T11837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.015043][T11837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.032184][T11837] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1156.052904][T11837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.078057][T11837] usb 2-1: config 0 descriptor?? [ 1157.183946][T13482] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1158.411260][T13484] Falling back ldisc for ptm1. [ 1158.988659][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.998218][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.665480][T13476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.730172][T13476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.294901][T13476] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.303999][T13476] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.313224][T13476] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.322226][T13476] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.625150][T11837] usbhid 2-1:0.0: can't add hid device: -71 [ 1160.642144][T11837] usbhid: probe of 2-1:0.0 failed with error -71 [ 1160.663390][T11837] usb 2-1: USB disconnect, device number 43 [ 1160.921192][T13493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1160.937071][T13493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1161.528533][T13521] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1161.867156][T13528] sch_fq: defrate 4294967295 ignored. [ 1162.402452][T13529] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1163.000637][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1163.006840][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1163.183293][T13532] sp0: Synchronizing with TNC [ 1163.486510][T13540] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1165.616951][T13557] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1165.909041][T13561] sch_fq: defrate 4294967295 ignored. [ 1166.798818][T13566] sp0: Synchronizing with TNC [ 1166.891579][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1962'. [ 1167.225095][T13570] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1167.777526][T13577] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1170.736868][T13596] sch_fq: defrate 4294967295 ignored. [ 1172.209825][T13601] sp0: Synchronizing with TNC [ 1172.744455][T13608] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1172.831729][T13611] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1175.462685][T13629] sch_fq: defrate 4294967295 ignored. [ 1177.472026][T13643] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1177.533244][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.539884][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.187880][T13647] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1180.103539][T13667] sch_fq: defrate 4294967295 ignored. [ 1180.784854][T13668] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1182.667093][T13680] sp0: Synchronizing with TNC [ 1182.715609][T13683] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1185.309040][T13709] kvm: emulating exchange as write [ 1186.341978][T13715] syz.3.2015: attempt to access beyond end of device [ 1186.341978][T13715] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1186.360352][T13715] SQUASHFS error: Failed to read block 0x0: -5 [ 1186.370379][T13715] unable to read squashfs_super_block [ 1187.015736][T13719] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1188.651519][T13741] loop2: detected capacity change from 0 to 1 [ 1188.662703][T13741] syz.2.2024: attempt to access beyond end of device [ 1188.662703][T13741] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1188.693972][T13741] SQUASHFS error: Failed to read block 0x0: -5 [ 1188.704400][T13741] unable to read squashfs_super_block [ 1189.506617][T13755] sch_fq: defrate 4294967295 ignored. [ 1190.193413][T13752] syz.3.2028: attempt to access beyond end of device [ 1190.193413][T13752] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1190.226251][T13752] SQUASHFS error: Failed to read block 0x0: -5 [ 1190.250358][T13752] unable to read squashfs_super_block [ 1190.753024][T13760] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1191.081717][T13765] autofs4:pid:13765:autofs_fill_super: called with bogus options [ 1191.097135][T13765] syz.3.2030: attempt to access beyond end of device [ 1191.097135][T13765] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1191.325265][T13769] sd 0:0:1:0: device reset [ 1193.050532][T13776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1193.082019][T13776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1194.642857][T13791] sp0: Synchronizing with TNC [ 1194.994136][T13795] syz.3.2039: attempt to access beyond end of device [ 1194.994136][T13795] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1195.017429][T13795] SQUASHFS error: Failed to read block 0x0: -5 [ 1195.024798][T13795] unable to read squashfs_super_block [ 1195.067976][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1195.170628][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1195.797606][T13801] sd 0:0:1:0: device reset [ 1196.488358][T13806] loop3: detected capacity change from 0 to 1 [ 1196.611013][T13806] syz.3.2044: attempt to access beyond end of device [ 1196.611013][T13806] loop3: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1196.744897][T13809] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2043'. [ 1198.230579][T13806] SQUASHFS error: Failed to read block 0x0: -5 [ 1198.236948][T13806] unable to read squashfs_super_block [ 1198.914863][ T5805] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1200.619392][T13826] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1202.557482][T13843] sd 0:0:1:0: device reset [ 1203.525293][T13841] syz.3.2052: attempt to access beyond end of device [ 1203.525293][T13841] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1203.787748][T13852] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2055'. [ 1204.940448][T13841] SQUASHFS error: Failed to read block 0x0: -5 [ 1204.979166][T13841] unable to read squashfs_super_block [ 1206.697190][T13865] loop0: detected capacity change from 0 to 1 [ 1206.707018][T13865] syz.0.2060: attempt to access beyond end of device [ 1206.707018][T13865] loop0: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1206.721021][T13865] SQUASHFS error: Failed to read block 0x0: -5 [ 1206.727428][T13865] unable to read squashfs_super_block [ 1206.760934][T13867] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1207.609249][ T5805] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1208.505876][T13871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1208.512285][T13871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1208.611476][T13883] sd 0:0:1:0: device reset [ 1210.047626][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1210.570784][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1210.731559][T13893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1211.932746][T13893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1212.027078][T13897] syz.3.2067: attempt to access beyond end of device [ 1212.027078][T13897] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1212.058572][T13897] SQUASHFS error: Failed to read block 0x0: -5 [ 1212.084369][T13897] unable to read squashfs_super_block [ 1212.372952][ T5837] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1212.434133][ T5837] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1212.575140][ T6829] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1212.633264][T13904] fido_id[13904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1212.695407][T13906] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1213.447119][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1213.452276][ T6829] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 1213.509403][ T6829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1213.717803][ T6829] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1213.727843][ T6829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.831209][ T6829] usb 3-1: config 0 descriptor?? [ 1214.035213][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1214.336627][ T6829] samsung 0003:0419:0001.0004: hidraw0: USB HID v0.01 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 1214.580547][T13920] sd 0:0:1:0: device reset [ 1215.407889][T13914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1215.414151][T13914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1215.927345][ T6829] usb 3-1: USB disconnect, device number 25 [ 1216.170454][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1216.883340][T13928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1216.889714][T13928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1218.390497][ T9449] Bluetooth: hci2: command 0x0406 tx timeout [ 1218.570498][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2078'. [ 1219.717231][T12286] Bluetooth: hci3: command 0x0406 tx timeout [ 1219.730248][T13950] sp0: Synchronizing with TNC [ 1220.284467][T13945] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1220.727500][T13954] loop0: detected capacity change from 0 to 1 [ 1220.750943][T13954] syz.0.2082: attempt to access beyond end of device [ 1220.750943][T13954] loop0: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1220.826833][T13954] SQUASHFS error: Failed to read block 0x0: -5 [ 1220.868392][T13954] unable to read squashfs_super_block [ 1221.208061][T13961] sd 0:0:1:0: device reset [ 1221.858476][T13956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1221.864844][T13956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1222.230515][T13947] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1223.000335][T12286] Bluetooth: hci2: command 0x0406 tx timeout [ 1223.514034][T13974] loop3: detected capacity change from 0 to 2048 [ 1223.548162][T13974] NILFS (loop3): invalid segment: Checksum error in super root [ 1223.589538][T13974] NILFS (loop3): error -22 while loading super root [ 1224.189682][T12286] Bluetooth: hci3: command 0x0406 tx timeout [ 1224.633263][T13979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1224.640704][T13979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1226.263866][T12286] Bluetooth: hci2: command 0x0406 tx timeout [ 1226.650398][T12286] Bluetooth: hci3: command 0x0406 tx timeout [ 1226.798743][T13992] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1227.813755][T13998] sd 0:0:1:0: device reset [ 1230.131596][T14008] sp0: Synchronizing with TNC [ 1231.308391][T14014] loop3: detected capacity change from 0 to 1 [ 1231.808499][T14014] syz.3.2099: attempt to access beyond end of device [ 1231.808499][T14014] loop3: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1231.919157][T14014] SQUASHFS error: Failed to read block 0x0: -5 [ 1231.990593][T14014] unable to read squashfs_super_block [ 1232.315458][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 1234.944432][T14028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1234.965262][T14028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1235.058456][T14035] sd 0:0:1:0: device reset [ 1236.058741][T14043] sp0: Synchronizing with TNC [ 1237.979900][T12286] Bluetooth: hci2: command 0x0406 tx timeout [ 1237.980024][ T9449] Bluetooth: hci3: command 0x0406 tx timeout [ 1238.980932][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.981424][T14065] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1241.064630][T14067] loop3: detected capacity change from 0 to 1 [ 1241.099464][T14067] syz.3.2113: attempt to access beyond end of device [ 1241.099464][T14067] loop3: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1241.120429][T14067] SQUASHFS error: Failed to read block 0x0: -5 [ 1241.128663][T14067] unable to read squashfs_super_block [ 1242.273309][T14077] sd 0:0:1:0: device reset [ 1244.174178][T14085] syz.1.2117: attempt to access beyond end of device [ 1244.174178][T14085] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1244.188181][T14085] SQUASHFS error: Failed to read block 0x0: -5 [ 1244.194591][T14085] unable to read squashfs_super_block [ 1247.792843][T14114] sd 0:0:1:0: device reset [ 1248.422720][T14102] loop0: detected capacity change from 0 to 2048 [ 1248.469562][T14102] NILFS (loop0): invalid segment: Checksum error in super root [ 1248.477898][T14102] NILFS (loop0): error -22 while loading super root [ 1250.111128][T14132] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1253.270998][ T5891] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1253.548881][ T5891] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1253.559608][ T5891] usb 3-1: config 1 has no interface number 0 [ 1254.231133][ T5891] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 30768, setting to 64 [ 1254.242416][ T5891] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1254.253519][ T5891] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 1254.270442][ T5891] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 1254.289674][ T5891] usb 3-1: Product: syz [ 1254.296122][ T5891] usb 3-1: Manufacturer: syz [ 1254.303543][ T5891] usb 3-1: SerialNumber: syz [ 1254.314199][T14146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1254.731077][T14146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1255.697016][ T5891] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1255.711626][ T5891] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1255.739168][ T5891] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f0:37:27:51:fe:62 [ 1256.122279][ T5891] usb 3-1: USB disconnect, device number 26 [ 1256.188285][T14162] loop1: detected capacity change from 0 to 2048 [ 1256.217927][ T5891] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1256.277121][T14162] NILFS (loop1): invalid segment: Checksum error in super root [ 1256.300448][T14162] NILFS (loop1): error -22 while loading super root [ 1256.552088][ T5891] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1256.567645][ T5891] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1256.613129][ T5891] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1258.873114][T14189] syz.0.2143: attempt to access beyond end of device [ 1258.873114][T14189] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1258.887618][T14189] SQUASHFS error: Failed to read block 0x0: -5 [ 1258.895024][T14189] unable to read squashfs_super_block [ 1259.315781][T14199] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2146'. [ 1259.431186][T14200] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1259.730079][T14204] netlink: 'syz.1.2148': attribute type 29 has an invalid length. [ 1259.739746][T14204] netlink: 'syz.1.2148': attribute type 3 has an invalid length. [ 1259.750217][T14204] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2148'. [ 1260.147704][T14203] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2148'. [ 1261.011757][ T5891] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1261.240570][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 1261.268555][ T5891] usb 2-1: no configurations [ 1261.280374][ T5891] usb 2-1: can't read configurations, error -22 [ 1261.620885][ T5891] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1262.740290][T14226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2153'. [ 1262.749422][T14226] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2153'. [ 1262.760271][T14226] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2153'. [ 1262.800882][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 1262.922798][ T5891] usb 2-1: no configurations [ 1263.060110][ T5891] usb 2-1: can't read configurations, error -22 [ 1263.094441][ T5891] usb usb2-port1: attempt power cycle [ 1263.510374][ T5891] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1264.176686][T14225] loop0: detected capacity change from 0 to 2048 [ 1264.318511][T14233] sp0: Synchronizing with TNC [ 1264.324476][T14225] NILFS (loop0): invalid segment: Checksum error in super root [ 1264.381717][T14225] NILFS (loop0): error -22 while loading super root [ 1264.655923][ T5891] usb 2-1: device descriptor read/8, error -71 [ 1266.418775][T14249] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1266.804842][T14253] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1268.710349][T14263] netlink: 'syz.0.2164': attribute type 29 has an invalid length. [ 1268.718274][T14263] netlink: 'syz.0.2164': attribute type 3 has an invalid length. [ 1268.731794][T14263] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2164'. [ 1270.139559][T14271] sp0: Synchronizing with TNC [ 1272.295811][T14291] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1272.784884][T14300] loop0: detected capacity change from 0 to 512 [ 1273.870469][T14300] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1276.577537][T14312] sp0: Synchronizing with TNC [ 1276.807191][T14314] fuse: Bad value for 'rootmode' [ 1277.098135][T14322] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1277.115943][T14316] sch_fq: defrate 4294967295 ignored. [ 1277.715680][T14331] netlink: 'syz.3.2188': attribute type 29 has an invalid length. [ 1277.725843][T14331] netlink: 'syz.3.2188': attribute type 3 has an invalid length. [ 1277.734245][T14331] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2188'. [ 1277.861284][T14333] loop1: detected capacity change from 0 to 512 [ 1278.456594][T14333] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1278.545835][ T5805] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1279.735094][T14345] sp0: Synchronizing with TNC [ 1280.554100][T14347] fuse: Unknown parameter 'use00000000000000000000' [ 1281.109670][T14356] netlink: 'syz.1.2197': attribute type 29 has an invalid length. [ 1281.158229][T14356] netlink: 'syz.1.2197': attribute type 3 has an invalid length. [ 1281.170506][T14356] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2197'. [ 1281.725212][T14354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1281.745236][T14354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1281.840908][T14349] loop3: detected capacity change from 0 to 32768 [ 1281.888386][T14349] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1281.950168][T14349] XFS (loop3): Ending clean mount [ 1283.450403][T14045] Bluetooth: hci2: command 0x0406 tx timeout [ 1283.482378][ T5793] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1283.705089][T14382] sp0: Synchronizing with TNC [ 1283.780512][T14045] Bluetooth: hci3: command 0x0406 tx timeout [ 1286.945329][T14389] fuse: Unknown parameter 'use00000000000000000000' [ 1287.238706][T14396] sp0: Synchronizing with TNC [ 1288.222546][T14400] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1289.480056][ T5891] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1289.672142][ T5891] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1289.684399][ T5891] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1289.710575][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1289.741145][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.765592][T14402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1289.778021][ T5891] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1289.889056][T14411] sp0: Synchronizing with TNC [ 1292.869668][T12274] usb 2-1: USB disconnect, device number 48 [ 1295.383145][T14432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1295.401526][T14432] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1295.450202][T14446] sp0: Synchronizing with TNC [ 1296.257285][T14449] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2223'. [ 1296.271923][T14449] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2223'. [ 1296.318673][T14449] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2223'. [ 1297.050910][T14045] Bluetooth: hci2: command 0x0406 tx timeout [ 1297.450449][T14045] Bluetooth: hci3: command 0x0406 tx timeout [ 1297.675464][ T5891] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1297.890802][ T5891] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1297.910365][ T5891] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1297.942315][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1297.970294][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.007082][T14455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1298.281451][ T5891] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1300.415514][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.510676][T12274] usb 2-1: USB disconnect, device number 49 [ 1302.208161][T14481] sp0: Synchronizing with TNC [ 1302.241353][T14472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1302.317312][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.317312][T14485] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1302.334174][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.334174][T14485] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1302.347421][T14485] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1302.359333][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.359333][T14485] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1302.372612][T14485] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1302.387412][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.387412][T14485] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1302.401635][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.401635][T14485] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1302.414928][T14485] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1302.426551][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.426551][T14485] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1302.440129][T14485] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1302.453127][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.453127][T14485] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1302.467123][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.467123][T14485] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1302.480478][T14485] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1302.490950][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.490950][T14485] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1302.504334][T14485] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1302.516591][T14485] syz.0.2234: attempt to access beyond end of device [ 1302.516591][T14485] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1302.531357][T14485] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1302.541934][T14485] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1302.551781][T14485] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1302.727124][T14472] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1302.832988][T14487] sch_fq: defrate 4294967295 ignored. [ 1304.134743][T14499] loop3: detected capacity change from 0 to 512 [ 1304.328935][T14499] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1304.338081][T14045] Bluetooth: hci2: command 0x0406 tx timeout [ 1304.810573][T14045] Bluetooth: hci3: command 0x0406 tx timeout [ 1305.790682][T12274] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1306.182447][T12274] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1306.256538][T12274] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1306.932746][T12274] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1306.942115][T12274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.979914][T14505] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1307.010087][T12274] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1308.419222][T14520] sp0: Synchronizing with TNC [ 1308.970409][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 1308.987400][T14522] sch_fq: defrate 4294967295 ignored. [ 1309.508278][ T5837] usb 4-1: USB disconnect, device number 35 [ 1310.805752][T14540] loop2: detected capacity change from 0 to 512 [ 1310.973611][T14540] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1312.518395][T14542] netlink: 'syz.2.2252': attribute type 5 has an invalid length. [ 1312.526526][T14542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1312.688961][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2255'. [ 1312.995499][T14551] sp0: Synchronizing with TNC [ 1313.750550][T12274] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1313.962258][T12274] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1313.983844][T12274] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1314.004686][T12274] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1314.080512][T12274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.107481][T14546] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1314.130775][T12274] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1317.352747][ T5891] usb 1-1: USB disconnect, device number 36 [ 1319.162724][T14591] sp0: Synchronizing with TNC [ 1319.880617][T14590] sch_fq: defrate 4294967295 ignored. [ 1320.371456][T14594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2267'. [ 1323.380532][ T5891] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1323.572535][ T5891] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1324.575751][ T5891] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1324.587060][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1324.597774][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.616965][T14612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1324.657965][ T5891] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1326.839665][ T5891] usb 3-1: USB disconnect, device number 27 [ 1326.863332][T14640] sch_fq: defrate 4294967295 ignored. [ 1336.249831][T14720] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2303'. [ 1336.336790][T14045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1336.348771][T14045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1336.357076][T14045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1336.365107][T14045] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1336.377559][T14045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1336.390738][T14045] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1337.065379][ T2962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.563385][ T2962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.698932][T14722] lo speed is unknown, defaulting to 1000 [ 1337.955059][ T2962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.213010][ T2962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.497692][T14722] chnl_net:caif_netlink_parms(): no params data found [ 1338.505180][ T5802] Bluetooth: hci0: command tx timeout [ 1339.635420][T14722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.652239][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.659515][T14722] bridge_slave_0: entered allmulticast mode [ 1339.719635][T14761] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1340.092764][T14722] bridge_slave_0: entered promiscuous mode [ 1340.559050][T14722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.571572][ T5802] Bluetooth: hci0: command tx timeout [ 1340.583839][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.618264][T14722] bridge_slave_1: entered allmulticast mode [ 1340.630084][T14722] bridge_slave_1: entered promiscuous mode [ 1342.730387][ T5802] Bluetooth: hci0: command tx timeout [ 1342.766458][T14722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.079130][T14722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.728527][T14722] team0: Port device team_slave_0 added [ 1343.801270][T14722] team0: Port device team_slave_1 added [ 1344.127172][T14722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.134754][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.165260][T14722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.209723][T14722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.216918][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.243588][T14722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.429013][T14722] hsr_slave_0: entered promiscuous mode [ 1344.523563][T14722] hsr_slave_1: entered promiscuous mode [ 1344.536805][T14722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1344.546715][T14722] Cannot create hsr debugfs directory [ 1344.671119][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2318'. [ 1344.960954][T14045] Bluetooth: hci0: command tx timeout [ 1345.406737][ T2962] hsr_slave_0: left promiscuous mode [ 1345.420021][ T2962] hsr_slave_1: left promiscuous mode [ 1345.429763][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.474615][T14795] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1346.676911][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.838609][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.891183][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.960326][ T2962] bridge_slave_1: left allmulticast mode [ 1346.972934][ T2962] bridge_slave_1: left promiscuous mode [ 1346.999791][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.122667][ T2962] bridge_slave_0: left allmulticast mode [ 1347.128377][ T2962] bridge_slave_0: left promiscuous mode [ 1347.134556][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.197181][ T2962] veth1_macvtap: left promiscuous mode [ 1347.212667][ T2962] veth0_macvtap: left promiscuous mode [ 1347.218451][ T2962] veth1_vlan: left promiscuous mode [ 1347.229870][ T2962] veth0_vlan: left promiscuous mode [ 1347.430763][T14803] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1351.011060][ T6829] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1351.224858][ T6829] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1351.237891][ T6829] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1351.249194][ T6829] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1351.258595][ T6829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.279567][T14821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1351.293475][ T6829] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1351.503678][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 1351.555759][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 1351.609193][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.679150][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.907138][ T2962] bond0 (unregistering): Released all slaves [ 1354.278006][ T6829] usb 2-1: USB disconnect, device number 50 [ 1354.527837][ T2962] IPVS: stop unused estimator thread 0... [ 1354.586799][T14834] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1356.206567][T14843] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2332'. [ 1358.164325][T14848] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1358.363078][T14722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1358.885305][T14722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1358.899472][T14722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1358.921161][T14722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1359.054656][T14722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.076881][T14722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.108947][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.116206][ T8890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.283323][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.290674][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.670803][T14722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.780013][T14880] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1360.950586][ T5891] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1361.240481][ T5891] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1361.287112][ T5891] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1361.429975][ T5891] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1361.456078][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.482902][T14878] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1361.511337][ T5891] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1361.945800][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.638833][T14722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.908387][T14722] veth0_vlan: entered promiscuous mode [ 1362.926437][T14722] veth1_vlan: entered promiscuous mode [ 1362.983388][T14722] veth0_macvtap: entered promiscuous mode [ 1363.003849][T14722] veth1_macvtap: entered promiscuous mode [ 1363.047894][T14722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.065064][T14722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.078513][T14722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.107837][T14722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.133901][T14722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.250904][T14722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.266490][T14722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.276142][T14722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.285475][T14722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.294432][T14722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.469498][ T8880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.486402][ T8880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.584939][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.607079][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.779371][ T5891] usb 1-1: USB disconnect, device number 37 [ 1366.080403][ T5891] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1366.126879][T14931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2355'. [ 1366.404185][ T5891] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1366.436281][ T5891] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1366.447302][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1366.466010][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.476577][T14938] fuse: Unknown parameter '0x0000000000000003' [ 1366.562734][T14924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1366.593699][ T5891] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1368.950390][ T6829] usb 2-1: USB disconnect, device number 51 [ 1369.529143][T14974] tmpfs: Bad value for 'nr_blocks' [ 1369.860465][ T6829] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1369.982128][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1369.994331][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1370.003734][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1370.012583][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1370.040481][ T5802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1370.053791][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1370.110738][ T6829] usb 4-1: Using ep0 maxpacket: 16 [ 1370.152915][ T6829] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1370.190622][ T6829] usb 4-1: config 0 has no interface number 0 [ 1370.196970][ T6829] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1370.211469][ T6829] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1370.230348][ T6829] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1370.248839][ T6829] usb 4-1: Product: syz [ 1370.269146][ T6829] usb 4-1: Manufacturer: syz [ 1370.289452][ T6829] usb 4-1: SerialNumber: syz [ 1370.297164][ T6829] usb 4-1: config 0 descriptor?? [ 1370.325822][ T6829] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1370.348219][ T6829] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1370.384586][ T6829] keyspan 4-1:0.107: unsupported endpoint type 0 [ 1370.394162][ T6829] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1370.398149][T14981] lo speed is unknown, defaulting to 1000 [ 1370.421181][ T6829] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1370.464627][ T6829] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1370.485942][ T6829] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1370.500578][ T6829] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1370.523880][ T6829] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1370.574764][ T6829] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1370.588861][ T6829] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1370.734102][ T6829] usb 4-1: USB disconnect, device number 36 [ 1370.784546][ T6829] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1370.814472][ T6829] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1370.832565][ T6829] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1370.858026][ T6829] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1370.883413][ T6829] keyspan 4-1:0.107: device disconnected [ 1372.170558][T14045] Bluetooth: hci4: command tx timeout [ 1372.887232][T15004] sd 0:0:1:0: device reset [ 1374.251733][T14045] Bluetooth: hci4: command tx timeout [ 1374.650826][T15013] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2379'. [ 1375.155637][T14981] chnl_net:caif_netlink_parms(): no params data found [ 1375.647093][T14981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.671210][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.687629][T14981] bridge_slave_0: entered allmulticast mode [ 1375.701567][T14981] bridge_slave_0: entered promiscuous mode [ 1375.740517][T14981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.747793][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.765889][T14981] bridge_slave_1: entered allmulticast mode [ 1375.780726][T14981] bridge_slave_1: entered promiscuous mode [ 1375.916541][T14981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.042946][T14981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.138457][T14981] team0: Port device team_slave_0 added [ 1376.154101][T14981] team0: Port device team_slave_1 added [ 1376.259075][T14981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.277247][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.303744][T14981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.441246][T14045] Bluetooth: hci4: command tx timeout [ 1376.466692][T14981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.474433][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.500555][T14981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.401542][T14981] hsr_slave_0: entered promiscuous mode [ 1377.412109][T14981] hsr_slave_1: entered promiscuous mode [ 1377.418579][T14981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1377.431531][T14981] Cannot create hsr debugfs directory [ 1378.055499][ T8882] hsr_slave_0: left promiscuous mode [ 1378.072466][ T8882] hsr_slave_1: left promiscuous mode [ 1378.089826][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.099384][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.123395][ T8882] bridge_slave_1: left allmulticast mode [ 1378.136601][ T8882] bridge_slave_1: left promiscuous mode [ 1378.144426][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.157556][ T8882] bridge_slave_0: left allmulticast mode [ 1378.164168][ T8882] bridge_slave_0: left promiscuous mode [ 1378.277580][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.498341][T14045] Bluetooth: hci4: command tx timeout [ 1378.547588][ T8882] bond1 (unregistering): Released all slaves [ 1378.860083][T15047] sd 0:0:1:0: device reset [ 1379.257820][ T8882] team_slave_1 (unregistering): left promiscuous mode [ 1379.265621][ T8882] team_slave_1 (unregistering): left allmulticast mode [ 1379.279205][ T8882] team0 (unregistering): Port device team_slave_1 removed [ 1379.337117][ T8882] team_slave_0 (unregistering): left promiscuous mode [ 1379.344169][ T8882] team_slave_0 (unregistering): left allmulticast mode [ 1379.355824][ T8882] team0 (unregistering): Port device team_slave_0 removed [ 1379.409481][ T8882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.425827][ T8882] bond_slave_1 (unregistering): left promiscuous mode [ 1379.433237][ T8882] bond_slave_1 (unregistering): left allmulticast mode [ 1379.517328][ T8882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.531098][ T8882] bond_slave_0 (unregistering): left promiscuous mode [ 1379.548157][ T8882] bond_slave_0 (unregistering): left allmulticast mode [ 1380.285837][ T8882] bond0 (unregistering): Released all slaves [ 1381.025723][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2390'. [ 1381.034869][T15057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2390'. [ 1381.043957][T15057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2390'. [ 1381.331960][ T8882] IPVS: stop unused estimator thread 0... [ 1381.374654][T14981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1381.408982][T14981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1381.422518][T14981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1381.461757][T14981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1381.980549][ T5837] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1382.192795][T14981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.226519][T14981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.245375][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.252554][ T8890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.266988][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1382.278085][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1382.331000][ T5837] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1382.368257][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.375479][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.384620][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.415392][ T5837] usb 4-1: config 0 descriptor?? [ 1382.441870][ T5837] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1382.909753][T15079] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2395'. [ 1383.681778][T15084] loop0: detected capacity change from 0 to 1 [ 1383.703844][T15084] bio_check_eod: 2 callbacks suppressed [ 1383.703860][T15084] syz.0.2397: attempt to access beyond end of device [ 1383.703860][T15084] loop0: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1383.776627][T15084] SQUASHFS error: Failed to read block 0x0: -5 [ 1383.790672][T15086] fuse: Unknown parameter 'fd0x0000000000000003' [ 1383.807370][T15084] unable to read squashfs_super_block [ 1383.916714][T14981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.097767][ T5891] usb 4-1: USB disconnect, device number 37 [ 1385.124089][T14981] veth0_vlan: entered promiscuous mode [ 1385.552255][T14981] veth1_vlan: entered promiscuous mode [ 1385.743171][T14981] veth0_macvtap: entered promiscuous mode [ 1385.814928][T14981] veth1_macvtap: entered promiscuous mode [ 1386.862102][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.882476][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.892528][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.904608][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.916782][T14981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.940845][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.005797][T15106] sd 0:0:1:0: device reset [ 1387.126370][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.147100][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.167435][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.412623][T14981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.438884][T14981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.461262][ T5891] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1387.482931][T14981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.498971][T14981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.524059][T14981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.662586][ T5891] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1387.704220][ T5891] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1387.737791][ T5891] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1387.760386][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.760584][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.792294][T15097] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1387.806297][ T5891] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1387.823555][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.916297][ T8884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.935443][ T8884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.218550][T15124] loop1: detected capacity change from 0 to 1 [ 1389.238072][T15124] syz.1.2408: attempt to access beyond end of device [ 1389.238072][T15124] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1389.314013][T15124] SQUASHFS error: Failed to read block 0x0: -5 [ 1389.353661][T15124] unable to read squashfs_super_block [ 1390.321742][ T5837] usb 4-1: USB disconnect, device number 38 [ 1392.784561][T15148] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1394.486822][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1394.510467][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1394.558947][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1394.570716][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1394.584816][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1394.597182][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1394.654219][T15163] loop2: detected capacity change from 0 to 1 [ 1394.671351][T15163] syz.2.2419: attempt to access beyond end of device [ 1394.671351][T15163] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1394.688388][T15163] SQUASHFS error: Failed to read block 0x0: -5 [ 1394.695090][T15163] unable to read squashfs_super_block [ 1394.853109][ T5793] syz_tun (unregistering): left allmulticast mode [ 1395.670607][T15158] lo speed is unknown, defaulting to 1000 [ 1395.897332][ T2989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.157572][ T2989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.885485][ T5802] Bluetooth: hci3: command tx timeout [ 1397.136661][ T2989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.547202][ T2989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.589888][T15158] chnl_net:caif_netlink_parms(): no params data found [ 1397.818059][T15158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.871339][T15158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.894204][T15158] bridge_slave_0: entered allmulticast mode [ 1397.931871][T15158] bridge_slave_0: entered promiscuous mode [ 1398.003559][T15158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.028473][T15158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.046120][T15158] bridge_slave_1: entered allmulticast mode [ 1398.091118][T15158] bridge_slave_1: entered promiscuous mode [ 1398.449801][T15158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.483530][T15158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.826876][T15158] team0: Port device team_slave_0 added [ 1398.853650][T15158] team0: Port device team_slave_1 added [ 1398.972922][ T5802] Bluetooth: hci3: command tx timeout [ 1399.570907][T15158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.596881][T15158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.668379][T15158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.781385][T15158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.788383][T15158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.825675][T15158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.506520][T15158] hsr_slave_0: entered promiscuous mode [ 1400.524583][T15158] hsr_slave_1: entered promiscuous mode [ 1400.593685][T15158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1400.610423][T15158] Cannot create hsr debugfs directory [ 1400.686209][T15220] tipc: Started in network mode [ 1400.691596][T15220] tipc: Node identity ac14140f, cluster identity 4711 [ 1400.698937][T15220] tipc: New replicast peer: 255.255.255.255 [ 1400.707127][T15220] tipc: Enabled bearer , priority 10 [ 1401.051406][ T5802] Bluetooth: hci0: command tx timeout [ 1401.058191][T14045] Bluetooth: hci3: command tx timeout [ 1401.063819][ T787] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1401.261116][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 1401.278800][ T787] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1401.293140][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.324969][ T787] usb 2-1: Product: syz [ 1401.329180][ T787] usb 2-1: Manufacturer: syz [ 1401.344131][ T787] usb 2-1: SerialNumber: syz [ 1401.381166][ T787] r8152-cfgselector 2-1: config 0 descriptor?? [ 1401.824356][T11837] tipc: Node number set to 2886997007 [ 1401.981032][ T787] r8152-cfgselector 2-1: Needed 2 retries to read version [ 1402.322427][ T787] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1402.367287][ T2989] hsr_slave_0: left promiscuous mode [ 1402.375970][ T787] r8152-cfgselector 2-1: USB disconnect, device number 52 [ 1402.416791][ T2989] hsr_slave_1: left promiscuous mode [ 1402.453060][ T2989] bridge_slave_1: left allmulticast mode [ 1402.488056][ T2989] bridge_slave_1: left promiscuous mode [ 1402.497251][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.507528][ T2989] bridge_slave_0: left allmulticast mode [ 1402.516832][ T2989] bridge_slave_0: left promiscuous mode [ 1402.522771][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.555504][ T2989] veth1_macvtap: left promiscuous mode [ 1402.561279][ T2989] veth0_macvtap: left promiscuous mode [ 1402.567453][ T2989] veth1_vlan: left promiscuous mode [ 1402.573533][ T2989] veth0_vlan: left promiscuous mode [ 1403.161335][T14045] Bluetooth: hci3: command tx timeout [ 1403.453231][T15246] loop1: detected capacity change from 0 to 512 [ 1403.661410][T15246] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1405.732081][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 1405.877591][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 1406.075322][T15257] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2447'. [ 1406.908256][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.161769][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.708964][ T2989] bond0 (unregistering): Released all slaves [ 1410.018877][T15269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2450'. [ 1410.028417][T15269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2450'. [ 1410.037718][T15269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2450'. [ 1410.205433][T15158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1410.247123][T15158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1410.283944][T15158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1410.313715][T15158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1410.447609][ T2989] IPVS: stop unused estimator thread 0... [ 1410.707120][T15158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.798503][T15158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.839168][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.846393][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.936020][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.943310][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.240655][T15283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2454'. [ 1411.311147][T15283] input: syz1 as /devices/virtual/input/input6 [ 1412.047241][T15158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.181325][T15158] veth0_vlan: entered promiscuous mode [ 1412.208764][T15158] veth1_vlan: entered promiscuous mode [ 1412.296982][T15158] veth0_macvtap: entered promiscuous mode [ 1412.504680][T15158] veth1_macvtap: entered promiscuous mode [ 1412.925293][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.940378][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.951056][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.966135][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.976289][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.987177][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.000098][T15158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.021577][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.032351][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.042469][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.054775][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.079412][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.090281][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.113607][T15158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.495715][T15158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.504690][T15158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.518241][T15158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.530277][T15158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.812346][ T8884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.841825][ T8884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.926420][ T8890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.971268][ T8890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.551549][T15310] sd 0:0:1:0: device reset [ 1415.766266][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1415.779935][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1415.798233][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1415.807017][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1415.824749][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1415.836841][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1415.918176][T15321] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 1415.926464][T15321] netlink: 'syz.2.2462': attribute type 3 has an invalid length. [ 1415.934403][T15321] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2462'. [ 1415.981863][T15320] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1416.501513][T15315] lo speed is unknown, defaulting to 1000 [ 1417.428929][T15336] sd 0:0:1:0: device reset [ 1417.477436][ T2989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.638042][ T2989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.732397][T15315] chnl_net:caif_netlink_parms(): no params data found [ 1417.855708][ T2989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.217054][ T2989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.277630][T15315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.317029][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.324832][T15315] bridge_slave_0: entered allmulticast mode [ 1418.340099][T15315] bridge_slave_0: entered promiscuous mode [ 1418.349133][T15348] tipc: Started in network mode [ 1418.360600][T15348] tipc: Node identity ac14140f, cluster identity 4711 [ 1418.394999][T15348] tipc: New replicast peer: 255.255.255.255 [ 1418.418773][T15348] tipc: Enabled bearer , priority 10 [ 1418.460483][T15315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.507318][ T5802] Bluetooth: hci2: command tx timeout [ 1418.542825][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.760678][T15315] bridge_slave_1: entered allmulticast mode [ 1418.768676][T15315] bridge_slave_1: entered promiscuous mode [ 1418.828060][T15358] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1418.907134][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.933969][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.013812][T15315] team0: Port device team_slave_0 added [ 1419.044170][T15315] team0: Port device team_slave_1 added [ 1420.059959][ T5837] tipc: Node number set to 2886997007 [ 1420.069650][T15366] loop2: detected capacity change from 0 to 512 [ 1420.085484][T15366] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1420.355213][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.362892][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.460484][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.678261][ T5802] Bluetooth: hci2: command tx timeout [ 1420.873134][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.913954][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.553476][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.018008][T15315] hsr_slave_0: entered promiscuous mode [ 1422.073245][T15315] hsr_slave_1: entered promiscuous mode [ 1422.584461][T15386] sd 0:0:1:0: device reset [ 1423.189082][ T5802] Bluetooth: hci2: command tx timeout [ 1423.302771][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.886940][T15387] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1423.904039][T15387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1424.064122][T15387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1424.223016][T15395] loop1: detected capacity change from 0 to 512 [ 1424.868007][T15395] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1425.222228][ T5802] Bluetooth: hci2: command tx timeout [ 1425.455272][ T2989] bond1: (slave gretap2): Releasing active interface [ 1426.084581][T14895] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1426.270362][T14895] usb 3-1: Using ep0 maxpacket: 16 [ 1426.296131][T14895] usb 3-1: unable to get BOS descriptor set [ 1426.329405][T14895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.353060][T14895] usb 3-1: config 0 has no interfaces? [ 1426.400879][T14895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1426.427004][T14895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.454404][T14895] usb 3-1: Product: syz [ 1426.467849][T14895] usb 3-1: Manufacturer: syz [ 1426.491528][T14895] usb 3-1: SerialNumber: syz [ 1426.511977][T14895] usb 3-1: config 0 descriptor?? [ 1426.728641][T14895] usb 3-1: USB disconnect, device number 28 [ 1426.809405][T15315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1426.845247][ T2989] hsr_slave_0: left promiscuous mode [ 1426.851708][ T2989] hsr_slave_1: left promiscuous mode [ 1426.858238][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.866392][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.876069][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.885363][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.898848][ T2989] bridge_slave_1: left allmulticast mode [ 1426.905407][ T2989] bridge_slave_1: left promiscuous mode [ 1426.912350][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.928668][ T2989] bridge_slave_0: left allmulticast mode [ 1426.935753][ T2989] bridge_slave_0: left promiscuous mode [ 1426.943568][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.993165][ T2989] veth1_macvtap: left promiscuous mode [ 1426.999009][ T2989] veth0_macvtap: left promiscuous mode [ 1427.010585][ T2989] veth1_vlan: left promiscuous mode [ 1427.016084][ T2989] veth0_vlan: left promiscuous mode [ 1427.413008][ T2989] bond1 (unregistering): Released all slaves [ 1427.991959][T15412] loop2: detected capacity change from 0 to 512 [ 1428.382672][T15412] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1429.019051][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 1429.074483][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 1429.128551][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.184639][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.742441][ T2989] bond0 (unregistering): Released all slaves [ 1429.819645][T15315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1429.838570][T15406] tipc: Enabling of bearer rejected, already enabled [ 1429.853084][T14895] lo speed is unknown, defaulting to 1000 [ 1429.972961][T15315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1430.037791][T15419] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2490'. [ 1430.068566][T15315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1432.639630][T15315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.692062][ T2989] IPVS: stop unused estimator thread 0... [ 1432.693412][T15315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.756436][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.763740][T12116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.847320][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.854539][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.960547][ T6829] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1433.094771][T15451] tipc: Started in network mode [ 1433.099695][T15451] tipc: Node identity ac14140f, cluster identity 4711 [ 1433.106674][T15451] tipc: New replicast peer: 255.255.255.255 [ 1433.113182][T15451] tipc: Enabled bearer , priority 10 [ 1433.205592][ T6829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.227698][ T6829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1433.243762][ T6829] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1433.256650][ T6829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1433.265300][ T6829] usb 2-1: SerialNumber: syz [ 1433.486555][T15315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.506347][ T6829] usb 2-1: 0:2 : does not exist [ 1433.620023][T15458] loop3: detected capacity change from 0 to 512 [ 1433.699370][T15458] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1433.804509][ T6829] usb 2-1: USB disconnect, device number 53 [ 1434.229590][T14895] tipc: Node number set to 2886997007 [ 1434.289302][T15315] veth0_vlan: entered promiscuous mode [ 1434.314924][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.382682][T15315] veth1_vlan: entered promiscuous mode [ 1434.427778][T15315] veth0_macvtap: entered promiscuous mode [ 1434.456082][T15315] veth1_macvtap: entered promiscuous mode [ 1434.548735][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.609531][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.840260][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.865187][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.875519][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.887544][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.117036][T15315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.614368][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.660237][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.680548][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.713877][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.733726][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.746056][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.778787][T15315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.801273][T15469] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2504'. [ 1435.857558][T15315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.920374][T15315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.949428][T15315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.967016][T15315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.020304][ T5891] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1437.118778][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.142628][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.212129][ T5891] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1437.213522][T12116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.241928][ T5891] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1437.250318][T12116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.275342][ T5891] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1437.298795][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.461912][T15474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1437.483694][ T5891] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1439.932631][T15496] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2509'. [ 1440.144544][T15498] loop0: detected capacity change from 0 to 512 [ 1440.736429][T15498] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1442.318697][T15501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1442.389021][ T6829] usb 4-1: USB disconnect, device number 39 [ 1443.839312][T15515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1443.858445][T15515] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1443.880410][T15515] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1446.415543][T15536] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1446.726884][T15539] loop1: detected capacity change from 0 to 512 [ 1447.210360][ T6829] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1447.921973][T15539] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1448.492549][ T6829] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1448.644675][ T6829] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1448.697313][ T6829] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1448.798193][ T6829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.486584][ T6829] usb 1-1: can't set config #27, error -71 [ 1449.520820][ T6829] usb 1-1: USB disconnect, device number 38 [ 1449.599540][T15552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2524'. [ 1449.642672][T15552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2524'. [ 1449.798604][T15552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2524'. [ 1451.001294][T15565] syz.0.2527: attempt to access beyond end of device [ 1451.001294][T15565] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1451.019082][T15565] SQUASHFS error: Failed to read block 0x0: -5 [ 1451.030345][T15565] unable to read squashfs_super_block [ 1451.315017][T15550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2523'. [ 1451.590238][T15572] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2529'. [ 1453.515590][T15579] loop3: detected capacity change from 0 to 512 [ 1453.583092][T15579] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1454.189072][ T5805] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1455.863653][ T5891] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1455.913118][T15594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1456.435105][ T5891] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1456.456472][ T5891] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1456.467521][ T5891] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1456.490761][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.972510][T15590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1456.996027][ T5891] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1458.165049][T15602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2537'. [ 1458.196371][T15602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2537'. [ 1458.209586][T15602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2537'. [ 1458.530028][ T6829] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1458.904367][ T6829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1458.962565][ T6829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1459.054895][ T6829] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1459.188723][ T6829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.288156][ T788] usb 4-1: USB disconnect, device number 40 [ 1459.294580][ T6829] usb 3-1: config 0 descriptor?? [ 1459.315363][T15604] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1460.506630][ T6829] hid-generic 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 1460.670644][T15622] netlink: 'syz.1.2540': attribute type 29 has an invalid length. [ 1460.679760][T15622] netlink: 'syz.1.2540': attribute type 3 has an invalid length. [ 1460.691571][T15622] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2540'. [ 1461.029694][ T6829] usb 3-1: USB disconnect, device number 29 [ 1461.060816][T15612] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2540'. [ 1461.151851][T15625] fido_id[15625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1461.215425][T14045] Bluetooth: hci0: command 0x0406 tx timeout [ 1461.262539][T15629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2544'. [ 1462.697358][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2543'. [ 1463.330054][ T5837] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1464.192158][ T5837] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1464.214091][ T5837] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1464.224550][ T5837] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1464.233959][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.246676][T15646] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1464.259263][ T5837] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1465.365920][T15660] vivid-000: disconnect [ 1465.395648][T15657] vivid-000: reconnect [ 1465.632311][T15662] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2554'. [ 1465.708980][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1466.740920][ T5891] usb 1-1: USB disconnect, device number 39 [ 1467.956928][T15679] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 1467.968715][T15679] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 1467.977150][T15679] CPU: 0 PID: 15679 Comm: syz.0.2558 Not tainted syzkaller #0 [ 1467.984650][T15679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1467.994729][T15679] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1468.000320][T15679] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 cb df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 cb df f9 4d 8b 24 24 48 83 c3 [ 1468.019967][T15679] RSP: 0018:ffffc90004d07a80 EFLAGS: 00010206 [ 1468.026071][T15679] RAX: 0000000000000005 RBX: ffff88802cbf6d80 RCX: 0000000000080000 [ 1468.034071][T15679] RDX: ffffc900145d2000 RSI: 000000000000083c RDI: 000000000000083d [ 1468.042071][T15679] RBP: 0000000000000001 R08: ffff88814c34a92f R09: 1ffff11029869525 [ 1468.050065][T15679] R10: dffffc0000000000 R11: ffffed1029869526 R12: 0000000000000028 [ 1468.058060][T15679] R13: dffffc0000000000 R14: ffff88814c34a800 R15: dffffc0000000000 [ 1468.066058][T15679] FS: 00007fb8480a86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1468.075011][T15679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1468.081610][T15679] CR2: 0000001b31e16ff8 CR3: 0000000061a81000 CR4: 00000000003506f0 [ 1468.089606][T15679] Call Trace: [ 1468.092910][T15679] [ 1468.095861][T15679] pcl818_detach+0x66/0xd0 [ 1468.100311][T15679] comedi_device_detach_locked+0x172/0x710 [ 1468.106175][T15679] comedi_unlocked_ioctl+0xccc/0xfe0 [ 1468.111500][T15679] ? comedi_poll+0x8c0/0x8c0 [ 1468.116146][T15679] ? __fget_files+0x28/0x4d0 [ 1468.120777][T15679] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1468.125737][T15679] ? security_file_ioctl+0x80/0xa0 [ 1468.130884][T15679] ? comedi_poll+0x8c0/0x8c0 [ 1468.135500][T15679] __se_sys_ioctl+0xfd/0x170 [ 1468.140125][T15679] do_syscall_64+0x55/0xb0 [ 1468.144569][T15679] ? clear_bhb_loop+0x40/0x90 [ 1468.149265][T15679] ? clear_bhb_loop+0x40/0x90 [ 1468.153971][T15679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1468.159892][T15679] RIP: 0033:0x7fb84718efc9 [ 1468.164331][T15679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.184401][T15679] RSP: 002b:00007fb8480a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.192839][T15679] RAX: ffffffffffffffda RBX: 00007fb8473e6090 RCX: 00007fb84718efc9 [ 1468.200836][T15679] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000b [ 1468.209799][T15679] RBP: 00007fb847211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1468.217815][T15679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1468.225808][T15679] R13: 00007fb8473e6128 R14: 00007fb8473e6090 R15: 00007ffc24869d98 [ 1468.233814][T15679] [ 1468.236860][T15679] Modules linked in: [ 1468.246607][T15679] ---[ end trace 0000000000000000 ]--- [ 1468.252269][T15679] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1468.257945][T15679] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 cb df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 cb df f9 4d 8b 24 24 48 83 c3 [ 1468.277735][T15679] RSP: 0018:ffffc90004d07a80 EFLAGS: 00010206 [ 1468.283939][T15679] RAX: 0000000000000005 RBX: ffff88802cbf6d80 RCX: 0000000000080000 [ 1468.292010][T15679] RDX: ffffc900145d2000 RSI: 000000000000083c RDI: 000000000000083d [ 1468.323305][T15679] RBP: 0000000000000001 R08: ffff88814c34a92f R09: 1ffff11029869525 [ 1468.332136][T15679] R10: dffffc0000000000 R11: ffffed1029869526 R12: 0000000000000028 [ 1468.340473][T15679] R13: dffffc0000000000 R14: ffff88814c34a800 R15: dffffc0000000000 [ 1468.348587][T15679] FS: 00007fb8480a86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1468.358112][T15679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1468.364936][T15679] CR2: 0000001b31e14ff8 CR3: 0000000061a81000 CR4: 00000000003506f0 [ 1468.373098][T15679] Kernel panic - not syncing: Fatal exception [ 1468.379517][T15679] Kernel Offset: disabled [ 1468.383846][T15679] Rebooting in 86400 seconds..