last executing test programs: 2.79853556s ago: executing program 4 (id=645): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.67071805s ago: executing program 4 (id=647): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.451409033s ago: executing program 1 (id=653): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='M', 0x1}], 0x1, &(0x7f00000004c0)=[{0x10}], 0x10}}], 0x1, 0x0) 2.382691054s ago: executing program 1 (id=654): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa1b, &(0x7f0000001540)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lseek(r0, 0x7fff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x1f) write$P9_RLERROR(r0, 0x0, 0xa) ftruncate(r0, 0x1) 2.126727843s ago: executing program 1 (id=657): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 1.976588127s ago: executing program 1 (id=658): socket$packet(0x11, 0x0, 0x300) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20020008) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f00000002c0)='./file1\x00', 0x4) r2 = dup(r0) renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) 1.782317836s ago: executing program 3 (id=661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x1}) 1.750749081s ago: executing program 1 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x10, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 1.686700471s ago: executing program 2 (id=663): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @empty}}}], 0x20}}], 0x1, 0x0) 1.593031015s ago: executing program 2 (id=664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') ioctl$KVM_GET_MSRS(r4, 0x4018aee2, &(0x7f0000000100)) preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) 1.582189497s ago: executing program 3 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0xfd12}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000844, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_buf(r8, 0x29, 0x18, 0x0, &(0x7f00000000c0)) r9 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x0, r9}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000180)={0x0, r9}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.520989346s ago: executing program 1 (id=666): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0001d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 1.30277442s ago: executing program 0 (id=670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c90800", 0x280}], 0x1) 1.119705858s ago: executing program 3 (id=671): epoll_create1(0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2f10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.111069359s ago: executing program 2 (id=672): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x0, 0x48, 0x0, 0xa}, 0x20) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ffffffff060001000200000008000600a7"], 0x38}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000005c0)="e0b9547ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1, 0x7fff}, 0x20) 998.895857ms ago: executing program 0 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f0000000180), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x0, 0x0, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) 890.665053ms ago: executing program 2 (id=674): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 890.306333ms ago: executing program 2 (id=675): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x6, &(0x7f0000000500)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6f}, [@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0xffffffc1}, 0x90) pipe(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00b083df00001a00000000020014ff27000000000000000800100040000000"], 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x43}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4000051) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x3af4701e) sendfile(r9, r6, 0x0, 0x10000a007) 867.972097ms ago: executing program 3 (id=676): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}]}, 0x44}}, 0x0) 799.644437ms ago: executing program 3 (id=677): pipe(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 678.645116ms ago: executing program 0 (id=678): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000340050800800030005ac0f0011000100cabee339084eeef16f162471f4000000040005000500020091"], 0x5c}}, 0x0) 605.848927ms ago: executing program 0 (id=679): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 508.868272ms ago: executing program 0 (id=680): socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4, 0x0, 0x1000000000000) socket$inet6(0xa, 0x3, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "440aa37d"}}]}, 0x140}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000000c0)}, 0x700}], 0x1, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000004c001280110001006272696467655f736c61766500000000340005800500190002000000050009"], 0x98}}, 0x0) 374.665653ms ago: executing program 0 (id=681): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="0014d90000002f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 372.136603ms ago: executing program 4 (id=682): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x40}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0xc4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x91, 0x3, "21943526416b53b0f293a420b0a9394ff01634cb2c287bc55b1213b394944336119a739711cdcbbb8f24f8b3eb8d39ef40cc88b50f6a4a70bec1128c936bce8746e8719a09a3e9eeb0bb0e2a952c0a6d750137b25ec19bef2e20b468f73398bd5cc9dfcb1e3ab55628baba12c585e8969447345a2e016ece33ff832951866f0d73644a723927302d3c6ff381a9"}]}, @TIPC_NLA_NODE={0x4}]}, 0xc4}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 308.584512ms ago: executing program 4 (id=683): socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='H', 0x34000, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 171.504173ms ago: executing program 2 (id=684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c90800", 0x280}], 0x1) 164.784004ms ago: executing program 4 (id=685): syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @private0, @mcast2, {[], @echo_request}}}}}, 0x0) 94.478275ms ago: executing program 3 (id=686): epoll_create1(0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2f10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 4 (id=687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x4}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): omes ready [ 46.334272][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.342684][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.351465][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.364351][ T3505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.390141][ T3503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.400914][ T3503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.414283][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.422960][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.431274][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.439636][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.448231][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.456821][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.465429][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.499607][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.513454][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.522510][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.531420][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.541526][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.549400][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.562816][ T3504] device veth0_macvtap entered promiscuous mode [ 46.572558][ T3507] device veth0_vlan entered promiscuous mode [ 46.607775][ T3504] device veth1_macvtap entered promiscuous mode [ 46.632010][ T3506] device veth0_vlan entered promiscuous mode [ 46.653212][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.661963][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.670856][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.679453][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.690708][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.699810][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.710593][ T3507] device veth1_vlan entered promiscuous mode [ 46.721034][ T3506] device veth1_vlan entered promiscuous mode [ 46.753820][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.773862][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.792125][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.801098][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.809422][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.818025][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.826997][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.834396][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.854143][ T3505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.877256][ T3503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.891518][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.900319][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.908091][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.924542][ T3506] device veth0_macvtap entered promiscuous mode [ 46.933954][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.944355][ T3504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.954099][ T3504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.963392][ T3504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.972182][ T3504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.983462][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.992645][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.001323][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.010066][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.021515][ T3506] device veth1_macvtap entered promiscuous mode [ 47.040454][ T3507] device veth0_macvtap entered promiscuous mode [ 47.060477][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.069320][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.077343][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.086435][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.095046][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.103480][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.112019][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.120726][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.129822][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.153165][ T3507] device veth1_macvtap entered promiscuous mode [ 47.166883][ T3506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.182104][ T3506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.193443][ T3506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.230648][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.243585][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.253565][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.263090][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.271285][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.281073][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.288939][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.298029][ T3503] device veth0_vlan entered promiscuous mode [ 47.319000][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.328411][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.338019][ T3506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.348790][ T3506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.360297][ T3506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.371731][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.384034][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.394167][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.407862][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.419382][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.428790][ T3505] device veth0_vlan entered promiscuous mode [ 47.437776][ T3503] device veth1_vlan entered promiscuous mode [ 47.457258][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.468266][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.476118][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.483695][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.497843][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.506555][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.515262][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.527108][ T3506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.536697][ T3506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.546080][ T3506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.555459][ T3506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.570270][ T3505] device veth1_vlan entered promiscuous mode [ 47.589083][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.600581][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.610759][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.621511][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.633060][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.660637][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.673191][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.675008][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.682856][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.704770][ T3507] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.713476][ T3507] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.725106][ T3507] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.733815][ T3507] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.763147][ T3505] device veth0_macvtap entered promiscuous mode [ 47.770601][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.778944][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.787694][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.796280][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.804613][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.832505][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.838168][ T3503] device veth0_macvtap entered promiscuous mode [ 47.848665][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.858782][ T3505] device veth1_macvtap entered promiscuous mode [ 47.871559][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.880264][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.888880][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.896916][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.934243][ T3503] device veth1_macvtap entered promiscuous mode [ 47.956301][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.967755][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.981535][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.998332][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.017877][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.023588][ T3582] loop1: detected capacity change from 0 to 512 [ 48.029566][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.047831][ T3505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.056993][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.068466][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.077397][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.120904][ T3582] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 48.134002][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.151920][ T3582] EXT4-fs (loop1): journaled quota format not specified [ 48.152600][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.169801][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.181029][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.191254][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.202007][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.205746][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 48.216260][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.224849][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 48.228958][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.239189][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 48.246514][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.251018][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 48.265677][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.277000][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.284987][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 48.289120][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.303510][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.313656][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.326101][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.337549][ T3505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.351446][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.372967][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.396285][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.405529][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.416493][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.431091][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.433311][ T3584] loop1: detected capacity change from 0 to 8 [ 48.449625][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.461761][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.471678][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.482116][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.492327][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.502797][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.514261][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.536821][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.546278][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.562138][ T3503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.573442][ T3584] squashfs image failed sanity check [ 48.576532][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.589402][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.598254][ T3503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.617677][ T3505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.627894][ T3505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.636988][ T3505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.646029][ T3505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.665630][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.673631][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.686586][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.783117][ T3586] loop1: detected capacity change from 0 to 8 [ 48.805910][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.813911][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.824093][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.873037][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.883809][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.912546][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.920062][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.936611][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.946683][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.951620][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.959258][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.991052][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.029390][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.046820][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.059893][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.128159][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.142330][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.152074][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.182174][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.185438][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.232339][ T3593] loop3: detected capacity change from 0 to 1024 [ 49.253600][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.316899][ T3597] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 49.406154][ T3593] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 49.406201][ T3593] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 49.408463][ T3593] EXT4-fs error (device loop3): ext4_get_journal_inode:5159: inode #5: comm syz.3.4: unexpected bad inode w/o EXT4_IGET_BAD [ 49.409876][ T3593] EXT4-fs (loop3): no journal found [ 49.409893][ T3593] EXT4-fs (loop3): can't get journal size [ 49.421270][ T26] audit: type=1804 audit(1719604860.715:2): pid=3601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/root/syzkaller.9aSqr4/0/bus" dev="sda1" ino=1971 res=1 errno=0 [ 49.423793][ T3597] loop0: detected capacity change from 0 to 512 [ 49.477714][ C1] vkms_vblank_simulate: vblank timer overrun [ 49.493891][ T3593] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 49.642328][ T3597] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.680170][ T3597] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 49.691887][ T3597] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 49.702784][ T3597] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1: Failed to acquire dquot type 1 [ 49.723537][ T3597] EXT4-fs (loop0): 1 truncate cleaned up [ 49.770802][ T3597] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 49.788525][ T3614] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 49.858375][ T3597] 9pnet: Insufficient options for proto=fd [ 50.286855][ T1066] Bluetooth: hci0: command 0x0419 tx timeout [ 50.473333][ T1066] Bluetooth: hci2: command 0x0419 tx timeout [ 50.568553][ T1066] Bluetooth: hci3: command 0x0419 tx timeout [ 50.575934][ T1066] Bluetooth: hci4: command 0x0419 tx timeout [ 50.583307][ T2924] Bluetooth: hci1: command 0x0419 tx timeout [ 50.997628][ T3549] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 51.205122][ T3553] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.265527][ T3549] usb 3-1: Using ep0 maxpacket: 8 [ 52.098940][ T3549] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.112860][ T3549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 52.124601][ T3549] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 52.174860][ T3553] usb 5-1: Using ep0 maxpacket: 16 [ 52.445663][ T3553] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.457313][ T3549] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 52.466874][ T3549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.479501][ T3663] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 52.490716][ T3663] qnx6: wrong signature (magic) in superblock #1. [ 52.497294][ T3663] qnx6: unable to read the first superblock [ 52.504007][ T3553] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.514146][ T3549] usb 3-1: Product: syz [ 52.518392][ T3549] usb 3-1: Manufacturer: syz [ 52.522989][ T3549] usb 3-1: SerialNumber: syz [ 52.528248][ T3553] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.545351][ T3549] usb 3-1: config 0 descriptor?? [ 52.551738][ T3553] usb 5-1: config 0 interface 0 has no altsetting 0 [ 52.558442][ T3553] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 52.568438][ T3553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.593520][ T3553] usb 5-1: config 0 descriptor?? [ 52.602806][ T3549] usbtest 3-1:0.0: couldn't get endpoints, -22 [ 52.621610][ T3549] usbtest: probe of 3-1:0.0 failed with error -22 [ 52.807680][ T3549] usb 3-1: USB disconnect, device number 2 [ 53.112474][ T3553] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 53.162982][ T3553] hid-generic 0003:045E:05DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.4-1/input0 [ 53.314665][ T3549] usb 5-1: USB disconnect, device number 2 [ 53.396344][ T3694] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 54.369387][ T3587] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.384853][ T1066] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 54.773740][ T1066] usb 4-1: Using ep0 maxpacket: 16 [ 54.779253][ T3587] usb 5-1: Using ep0 maxpacket: 16 [ 54.904889][ T1066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.918212][ T1066] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 55.004897][ T3548] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 55.055002][ T3587] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 55.064328][ T3587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.072602][ T3587] usb 5-1: Product: syz [ 55.076900][ T3587] usb 5-1: Manufacturer: syz [ 55.081618][ T3587] usb 5-1: SerialNumber: syz [ 55.086636][ T1066] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 55.096542][ T1066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.104675][ T1066] usb 4-1: Product: syz [ 55.110007][ T3587] usb 5-1: config 0 descriptor?? [ 55.115203][ T1066] usb 4-1: Manufacturer: syz [ 55.119809][ T1066] usb 4-1: SerialNumber: syz [ 55.130749][ T1066] usb 4-1: config 0 descriptor?? [ 55.156575][ T3587] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 55.170909][ T3587] usb 5-1: Detected FT232H [ 55.176791][ T1066] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 55.183827][ T1066] pegasus_notetaker: probe of 4-1:0.0 failed with error -22 [ 55.275001][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 55.364988][ T3587] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 55.378911][ T23] usb 4-1: USB disconnect, device number 2 [ 55.415086][ T3548] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.426307][ T3548] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.436343][ T3548] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.449851][ T3548] usb 3-1: config 0 interface 0 has no altsetting 0 [ 55.456591][ T3548] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 55.466357][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.482266][ T3548] usb 3-1: config 0 descriptor?? [ 55.855282][ T3587] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 55.887119][ T3587] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 55.920824][ T3587] usb 5-1: USB disconnect, device number 3 [ 55.964387][ T3587] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 56.047023][ T3587] ftdi_sio 5-1:0.0: device disconnected [ 56.217825][ T3548] hid-generic 0003:045E:05DA.0002: unknown main item tag 0x0 [ 56.237424][ T3548] hid-generic 0003:045E:05DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.2-1/input0 [ 56.479445][ T3587] usb 3-1: USB disconnect, device number 3 [ 57.285572][ T3553] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.565040][ T3553] usb 5-1: Using ep0 maxpacket: 16 [ 57.705222][ T3553] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.776019][ T3553] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 58.019032][ T3789] process 'syz.3.77' launched './file0' with NULL argv: empty string added [ 58.229830][ T3553] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 58.239894][ T3553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.253526][ T3553] usb 5-1: Product: syz [ 58.257848][ T3553] usb 5-1: Manufacturer: syz [ 58.263599][ T3553] usb 5-1: SerialNumber: syz [ 58.276367][ T3553] usb 5-1: config 0 descriptor?? [ 58.316398][ T3553] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 58.329050][ T3553] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 58.603566][ T3553] usb 5-1: USB disconnect, device number 4 [ 58.671510][ T3808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.689235][ T3808] overlayfs: failed to set xattr on upper [ 58.712621][ T3808] overlayfs: ...falling back to index=off,metacopy=off. [ 58.749661][ T3808] overlayfs: failed to resolve './file0': -2 [ 60.914828][ T3553] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.983047][ T3835] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 61.174822][ T3553] usb 1-1: Using ep0 maxpacket: 16 [ 61.184997][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.305143][ T3553] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.316418][ T3553] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.326928][ T3553] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.340224][ T3553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.345009][ T3587] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.352578][ T3553] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 61.377683][ T3553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.408566][ T3553] usb 1-1: config 0 descriptor?? [ 61.416397][ T3845] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.439753][ T3845] overlayfs: failed to set xattr on upper [ 61.450391][ T3845] overlayfs: ...falling back to index=off,metacopy=off. [ 61.452503][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 61.473427][ T3845] overlayfs: failed to resolve './file0': -2 [ 61.704990][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 61.969818][ T3553] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 62.128440][ T3553] hid-generic 0003:045E:05DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.0-1/input0 [ 62.397222][ T3553] usb 1-1: USB disconnect, device number 2 [ 62.495016][ T3587] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 62.505739][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7 [ 62.522554][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.531715][ T3587] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.545142][ T23] usb 2-1: Product: syz [ 62.549313][ T23] usb 2-1: Manufacturer: syz [ 62.553904][ T23] usb 2-1: SerialNumber: syz [ 62.560350][ T3587] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.576041][ T23] usb 2-1: config 0 descriptor?? [ 62.581164][ T3587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.620309][ T3587] usb 5-1: config 0 descriptor?? [ 62.666889][ T3587] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 63.203824][ T23] usb 2-1: USB disconnect, device number 2 [ 63.234539][ T3495] udevd[3495]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 63.393547][ T3868] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.888306][ T23] usb 5-1: USB disconnect, device number 5 [ 65.313289][ T3902] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 65.395090][ T3552] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.432852][ T3908] tmpfs: Unknown parameter 'usrquota' [ 65.555021][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 65.794868][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 65.914997][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.925723][ T3552] usb 4-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=a1.c0 [ 65.949331][ T3552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.958042][ T23] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 65.975489][ T3552] usb 4-1: Product: syz [ 65.992300][ T3552] usb 4-1: Manufacturer: syz [ 66.010122][ T3552] usb 4-1: SerialNumber: syz [ 66.022204][ T3552] usb 4-1: config 0 descriptor?? [ 66.144988][ T23] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 66.159448][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.177770][ T23] usb 5-1: Product: syz [ 66.190910][ T23] usb 5-1: Manufacturer: syz [ 66.204972][ T23] usb 5-1: SerialNumber: syz [ 66.230302][ T23] usb 5-1: config 0 descriptor?? [ 66.276483][ T23] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 66.314889][ T3552] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in warm state. [ 66.328411][ T23] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 66.345796][ T3552] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 66.395342][ T3552] dvbdev: DVB: registering new adapter (AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)) [ 66.408557][ T3552] usb 4-1: media controller created [ 66.443498][ T3552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.536657][ T23] usb 5-1: USB disconnect, device number 6 [ 67.014847][ T3552] az6027: usb out operation failed. (-71) [ 67.040921][ T3552] stb0899_attach: Driver disabled by Kconfig [ 67.062352][ T3947] 9pnet: Insufficient options for proto=fd [ 67.064817][ T3552] az6027: no front-end attached [ 67.064817][ T3552] [ 67.114881][ T3552] az6027: usb out operation failed. (-71) [ 67.121134][ T3552] dvb-usb: no frontend was attached by 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' [ 67.156648][ T3552] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 67.187076][ T3552] dvb-usb: schedule remote query interval to 400 msecs. [ 67.194053][ T3552] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully initialized and connected. [ 67.296537][ T3552] usb 4-1: USB disconnect, device number 3 [ 67.508215][ T3552] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully deinitialized and disconnected. [ 68.094820][ T3553] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.485116][ T3553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.514768][ T3553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.539780][ T3553] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.589895][ T3553] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 68.625354][ T3553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.660353][ T3968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.138'. [ 68.906546][ T3553] usb 2-1: config 0 descriptor?? [ 69.297966][ T3975] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.324766][ T3975] overlayfs: failed to set xattr on upper [ 69.355402][ T3975] overlayfs: ...falling back to index=off,metacopy=off. [ 69.426970][ T3553] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 69.433974][ T3553] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 69.468983][ T3553] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 69.477953][ T3553] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 69.495116][ T3553] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 69.515464][ T3553] saitek 0003:06A3:0621.0004: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 69.628815][ T3553] usb 2-1: USB disconnect, device number 3 [ 69.694899][ T3552] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.864910][ T3987] netlink: 'syz.4.143': attribute type 10 has an invalid length. [ 69.908393][ T3987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.927378][ T3987] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 69.965281][ T3552] usb 3-1: Using ep0 maxpacket: 32 [ 70.085125][ T3552] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 70.098286][ T3552] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 70.131718][ T3552] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 70.150710][ T3552] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 70.306621][ T3552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.419527][ T3987] syz.4.143 (3987) used greatest stack depth: 19448 bytes left [ 70.485304][ T4004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.150'. [ 71.085045][ T3552] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 71.095206][ T3552] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 71.103665][ T3552] usb 3-1: Product: syz [ 71.195659][ T4011] vivid-001: ================= START STATUS ================= [ 71.212651][ T4011] vivid-001: Test Pattern: 75% Colorbar [ 71.251731][ T4011] vivid-001: Fill Percentage of Frame: 100 [ 71.291088][ T4011] vivid-001: Horizontal Movement: No Movement [ 71.306108][ T3552] usb 3-1: Manufacturer: syz [ 71.311173][ T3552] usb 3-1: SerialNumber: syz [ 71.329055][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335701][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.344551][ T3552] usb 3-1: config 0 descriptor?? [ 71.363918][ T4011] vivid-001: Vertical Movement: No Movement [ 71.375312][ T4011] vivid-001: OSD Text Mode: All [ 71.380219][ T4011] vivid-001: Show Border: false [ 71.398689][ T3552] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 71.439306][ T3552] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 71.448908][ T4011] vivid-001: Show Square: false [ 71.468704][ T4011] vivid-001: Sensor Flipped Horizontally: false [ 71.555386][ T4011] vivid-001: Sensor Flipped Vertically: false [ 71.590402][ T4011] vivid-001: Insert SAV Code in Image: false [ 71.610200][ T4011] vivid-001: Insert EAV Code in Image: false [ 71.640725][ T4011] vivid-001: Reduced Framerate: false [ 71.673877][ T4011] vivid-001: Enable Capture Cropping: true grabbed [ 71.684854][ T4011] vivid-001: Enable Capture Composing: true grabbed [ 71.691506][ T4011] vivid-001: Enable Capture Scaler: true grabbed [ 71.705551][ T23] usb 3-1: USB disconnect, device number 4 [ 71.731308][ T23] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 71.737981][ T4011] vivid-001: Timestamp Source: End of Frame [ 71.744049][ T4011] vivid-001: Colorspace: sRGB [ 71.774797][ T4011] vivid-001: Transfer Function: Default [ 71.780456][ T4011] vivid-001: Y'CbCr Encoding: Default [ 71.786171][ T4011] vivid-001: HSV Encoding: Hue 0-179 [ 71.791487][ T4011] vivid-001: Quantization: Default [ 71.814946][ T4011] vivid-001: Apply Alpha To Red Only: false [ 71.820983][ T4011] vivid-001: Standard Aspect Ratio: 4x3 [ 71.844767][ T4011] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 71.844827][ T3553] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.852898][ T4011] vivid-001: DV Timings: 640x480p59 inactive [ 71.852960][ T4011] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 71.852981][ T4011] vivid-001: Maximum EDID Blocks: 2 [ 71.853003][ T4011] vivid-001: Limited RGB Range (16-235): false [ 71.853024][ T4011] vivid-001: Rx RGB Quantization Range: Automatic [ 71.944983][ T4011] vivid-001: Power Present: 0x00000001 [ 71.950487][ T4011] tpg source WxH: 640x360 (Y'CbCr) [ 71.974803][ T4011] tpg field: 1 [ 71.978415][ T4011] tpg crop: 640x360@0x0 [ 72.033902][ T4011] tpg compose: 640x360@0x0 [ 72.039477][ T4011] tpg colorspace: 8 [ 72.046016][ T4011] tpg transfer function: 0/2 [ 72.050624][ T4011] tpg Y'CbCr encoding: 0/1 [ 72.095293][ T4011] tpg quantization: 0/2 [ 72.099479][ T4011] tpg RGB range: 0/2 [ 72.124907][ T4011] vivid-001: ================== END STATUS ================== [ 72.984917][ T3552] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 73.075054][ T3553] usb 1-1: config 0 has an invalid interface number: 102 but max is 0 [ 73.101441][ T3553] usb 1-1: config 0 has no interface number 0 [ 73.323316][ T4037] user requested TSC rate below hardware speed [ 73.435032][ T3553] usb 1-1: Dual-Role OTG device on HNP port [ 73.435032][ T3552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.435062][ T3552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.461794][ T3552] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.464951][ T3553] usb 1-1: New USB device found, idVendor=0553, idProduct=0202, bcdDevice=f8.d2 [ 73.475179][ T3552] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 73.493958][ T3552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.499727][ T3553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.516512][ T3552] usb 3-1: config 0 descriptor?? [ 73.517380][ T3553] usb 1-1: Product: syz [ 73.529555][ T3553] usb 1-1: Manufacturer: syz [ 73.538264][ T3553] usb 1-1: SerialNumber: syz [ 73.547188][ T3553] usb 1-1: config 0 descriptor?? [ 73.596930][ T3553] gspca_main: stv0680-2.14.0 probing 0553:0202 [ 73.603254][ T3549] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.656349][ T3548] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 73.674512][ T3548] Bluetooth: hci4: Injecting HCI hardware error event [ 73.692021][ T3519] Bluetooth: hci4: hardware error 0x00 [ 73.996587][ T3552] saitek 0003:06A3:0621.0005: unknown main item tag 0x0 [ 74.003572][ T3552] saitek 0003:06A3:0621.0005: unknown main item tag 0x0 [ 74.017954][ T3552] saitek 0003:06A3:0621.0005: unknown main item tag 0x0 [ 74.035438][ T3552] saitek 0003:06A3:0621.0005: unknown main item tag 0x0 [ 74.042516][ T3552] saitek 0003:06A3:0621.0005: unknown main item tag 0x0 [ 74.072339][ T3552] saitek 0003:06A3:0621.0005: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 74.205040][ T3549] usb 2-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 74.219959][ T3552] usb 3-1: USB disconnect, device number 5 [ 74.240661][ T3549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.278225][ T3549] usb 2-1: Product: syz [ 74.290675][ T3549] usb 2-1: Manufacturer: syz [ 74.298942][ T3549] usb 2-1: SerialNumber: syz [ 74.314355][ T3549] usb 2-1: config 0 descriptor?? [ 74.361331][ T3549] qmi_wwan 2-1:0.0: More than one union descriptor, skipping ... [ 74.380374][ T3549] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 74.434347][ T4059] vivid-001: ================= START STATUS ================= [ 74.443258][ T4059] vivid-001: Test Pattern: 75% Colorbar [ 74.450829][ T4059] vivid-001: Fill Percentage of Frame: 100 [ 74.461031][ T4059] vivid-001: Horizontal Movement: No Movement [ 74.484883][ T4059] vivid-001: Vertical Movement: No Movement [ 74.497758][ T4059] vivid-001: OSD Text Mode: All [ 74.508144][ T4059] vivid-001: Show Border: false [ 74.516335][ T4059] vivid-001: Show Square: false [ 74.524441][ T4059] vivid-001: Sensor Flipped Horizontally: false [ 74.549369][ T4059] vivid-001: Sensor Flipped Vertically: false [ 74.559716][ T4059] vivid-001: Insert SAV Code in Image: [ 74.566156][ T3552] usb 2-1: USB disconnect, device number 4 [ 74.579404][ T4059] false [ 74.582463][ T4059] vivid-001: Insert EAV Code in Image: false [ 74.595126][ T4059] vivid-001: Reduced Framerate: false [ 74.605242][ T4059] vivid-001: Enable Capture Cropping: true grabbed [ 74.617473][ T4059] vivid-001: Enable Capture Composing: true grabbed [ 74.628264][ T4059] vivid-001: Enable Capture Scaler: true grabbed [ 74.638677][ T4059] vivid-001: Timestamp Source: End of Frame [ 74.648683][ T4059] vivid-001: Colorspace: sRGB [ 74.653504][ T4059] vivid-001: Transfer Function: Default [ 74.686721][ T4059] vivid-001: Y'CbCr Encoding: Default [ 74.701164][ T4059] vivid-001: HSV Encoding: Hue 0-179 [ 74.712555][ T4059] vivid-001: Quantization: Default [ 74.728549][ T4059] vivid-001: Apply Alpha To Red Only: false [ 74.734484][ T4059] vivid-001: Standard Aspect Ratio: 4x3 [ 74.744978][ T3553] stv0680 1-1:0.102: STV(e): camera ping failed!! [ 74.759167][ T4059] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 74.784778][ T4059] vivid-001: DV Timings: 640x480p59 inactive [ 74.791082][ T4059] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 74.809220][ T4059] vivid-001: Maximum EDID Blocks: 2 [ 74.832105][ T4059] vivid-001: Limited RGB Range (16-235): false [ 74.838869][ T3553] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 74.852935][ T3553] stv0680 1-1:0.102: last error: 0, command = 0x0 [ 74.883151][ T4059] vivid-001: Rx RGB Quantization Range: Automatic [ 74.898299][ T3553] usb 1-1: USB disconnect, device number 3 [ 74.911619][ T4059] vivid-001: Power Present: 0x00000001 [ 74.944473][ T4059] tpg source WxH: 640x360 (Y'CbCr) [ 74.965731][ T4059] tpg field: 1 [ 74.978622][ T4059] tpg crop: 640x360@0x0 [ 75.014104][ T4059] tpg compose: 640x360@0x0 [ 75.040588][ T4059] tpg colorspace: 8 [ 75.058834][ T4059] tpg transfer function: 0/2 [ 75.090628][ T4059] tpg Y'CbCr encoding: 0/1 [ 75.134081][ T4059] tpg quantization: 0/2 [ 75.214914][ T4059] tpg RGB range: 0/2 [ 75.225154][ T4059] vivid-001: ================== END STATUS ================== [ 76.234838][ T3548] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 76.459656][ T7] cfg80211: failed to load regulatory.db [ 76.554783][ T3548] usb 2-1: Using ep0 maxpacket: 16 [ 76.675062][ T3548] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.708061][ T3548] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 76.914886][ T3548] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 76.924035][ T3548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.932087][ T3548] usb 2-1: Product: syz [ 76.936376][ T3548] usb 2-1: Manufacturer: syz [ 76.940976][ T3548] usb 2-1: SerialNumber: syz [ 76.948597][ T3548] usb 2-1: config 0 descriptor?? [ 76.964851][ T3552] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.006467][ T3548] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 77.013538][ T3548] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 77.134875][ T3553] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.210850][ T23] usb 2-1: USB disconnect, device number 5 [ 77.345019][ T3552] usb 1-1: config 0 has an invalid interface number: 102 but max is 0 [ 77.353487][ T3552] usb 1-1: config 0 has no interface number 0 [ 77.369179][ T4080] loop4: detected capacity change from 0 to 131072 [ 77.470136][ T4080] F2FS-fs (loop4): Invalid segment count (0) [ 77.479794][ T4080] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 77.502682][ T4080] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.524909][ T3552] usb 1-1: Dual-Role OTG device on HNP port [ 77.535548][ T3553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.546496][ T3553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.546548][ T3552] usb 1-1: New USB device found, idVendor=0553, idProduct=0202, bcdDevice=f8.d2 [ 77.556532][ T3553] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.579156][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 77.579811][ T4080] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 77.586799][ T3553] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 77.598198][ T3552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.604996][ T3553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.611621][ T3552] usb 1-1: Product: syz [ 77.627848][ T3552] usb 1-1: Manufacturer: syz [ 77.627906][ T3553] usb 4-1: config 0 descriptor?? [ 77.632459][ T3552] usb 1-1: SerialNumber: syz [ 77.644328][ T4080] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 77.655559][ T3552] usb 1-1: config 0 descriptor?? [ 77.657748][ T4080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.697768][ T3552] gspca_main: stv0680-2.14.0 probing 0553:0202 [ 77.797483][ T4107] vivid-001: ================= START STATUS ================= [ 77.809910][ T4107] vivid-001: Test Pattern: 75% Colorbar [ 77.822354][ T4107] vivid-001: Fill Percentage of Frame: 100 [ 77.834944][ T4107] vivid-001: Horizontal Movement: No Movement [ 77.848189][ T4107] vivid-001: Vertical Movement: No Movement [ 77.860715][ T4107] vivid-001: OSD Text Mode: All [ 77.872301][ T4107] vivid-001: Show Border: false [ 77.882880][ T4107] vivid-001: Show Square: false [ 77.893417][ T4107] vivid-001: Sensor Flipped Horizontally: false [ 77.911428][ T4107] vivid-001: Sensor Flipped Vertically: false [ 77.921913][ T4107] vivid-001: Insert SAV Code in Image: false [ 77.935072][ T4107] vivid-001: Insert EAV Code in Image: false [ 77.941119][ T4107] vivid-001: Reduced Framerate: false [ 77.951477][ T4107] vivid-001: Enable Capture Cropping: true grabbed [ 77.959226][ T4107] vivid-001: Enable Capture Composing: true grabbed [ 77.999062][ T4107] vivid-001: Enable Capture Scaler: true grabbed [ 78.019184][ T4107] vivid-001: Timestamp Source: End of Frame [ 78.039272][ T4107] vivid-001: Colorspace: sRGB [ 78.043991][ T4107] vivid-001: Transfer Function: Default [ 78.054809][ T4107] vivid-001: Y'CbCr Encoding: Default [ 78.060532][ T4107] vivid-001: HSV Encoding: Hue 0-179 [ 78.071301][ T4107] vivid-001: Quantization: Default [ 78.083027][ T4107] vivid-001: Apply Alpha To Red Only: false [ 78.102686][ T3553] saitek 0003:06A3:0621.0006: unknown main item tag 0x0 [ 78.109875][ T4107] vivid-001: Standard Aspect Ratio: 4x3 [ 78.135010][ T4107] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 78.142776][ T4107] vivid-001: DV Timings: 640x480p59 inactive [ 78.148884][ T3553] saitek 0003:06A3:0621.0006: unknown main item tag 0x0 [ 78.156193][ T7] usb 3-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 78.165308][ T3553] saitek 0003:06A3:0621.0006: unknown main item tag 0x0 [ 78.172266][ T3553] saitek 0003:06A3:0621.0006: unknown main item tag 0x0 [ 78.180731][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.204824][ T7] usb 3-1: Product: syz [ 78.206992][ T4107] vivid-001: DV Timings Aspect Ratio: [ 78.209010][ T7] usb 3-1: Manufacturer: syz [ 78.209029][ T7] usb 3-1: SerialNumber: syz [ 78.209797][ T3553] saitek 0003:06A3:0621.0006: unknown main item tag 0x0 [ 78.218529][ T4107] Source Width x Height [ 78.220078][ T7] usb 3-1: config 0 descriptor?? [ 78.244825][ T4107] [ 78.247169][ T4107] vivid-001: Maximum EDID Blocks: 2 [ 78.252658][ T4107] vivid-001: Limited RGB Range (16-235): false [ 78.266247][ T3553] saitek 0003:06A3:0621.0006: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0 [ 78.299960][ T4107] vivid-001: Rx RGB Quantization Range: Automatic [ 78.308046][ T4107] vivid-001: Power Present: 0x00000001 [ 78.312420][ T3553] usb 4-1: USB disconnect, device number 4 [ 78.323991][ T4107] tpg source WxH: 640x360 (Y'CbCr) [ 78.335778][ T7] qmi_wwan 3-1:0.0: More than one union descriptor, skipping ... [ 78.340421][ T4107] tpg field: 1 [ 78.343718][ T7] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 78.359861][ T4107] tpg crop: 640x360@0x0 [ 78.377567][ T4107] tpg compose: 640x360@0x0 [ 78.393662][ T4107] tpg colorspace: 8 [ 78.418209][ T4107] tpg transfer function: 0/2 [ 78.438022][ T4107] tpg Y'CbCr encoding: 0/1 [ 78.453924][ T4107] tpg quantization: 0/2 [ 78.468370][ T4107] tpg RGB range: 0/2 [ 78.483027][ T4107] vivid-001: ================== END STATUS ================== [ 78.534903][ T7] Bluetooth: hci1: command 0x0405 tx timeout [ 78.573663][ T1066] usb 3-1: USB disconnect, device number 6 [ 78.854898][ T3552] stv0680 1-1:0.102: STV(e): camera ping failed!! [ 79.533312][ T3552] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 79.541855][ T3552] stv0680 1-1:0.102: last error: 0, command = 0x0 [ 79.619582][ T3552] usb 1-1: USB disconnect, device number 4 [ 79.904202][ T4143] vivid-001: ================= START STATUS ================= [ 79.954049][ T4143] vivid-001: Test Pattern: 75% Colorbar [ 79.973059][ T4143] vivid-001: Fill Percentage of Frame: 100 [ 80.000743][ T4143] vivid-001: Horizontal Movement: No Movement [ 80.037557][ T4143] vivid-001: Vertical Movement: No Movement [ 80.070571][ T4143] vivid-001: OSD Text Mode: All [ 80.085231][ T4143] vivid-001: Show Border: false [ 80.111341][ T4143] vivid-001: Show Square: false [ 80.144936][ T4143] vivid-001: Sensor Flipped Horizontally: false [ 80.161644][ T4143] vivid-001: Sensor Flipped Vertically: false [ 80.175677][ T4143] vivid-001: Insert SAV Code in Image: false [ 80.211118][ T4143] vivid-001: Insert EAV Code in Image: false [ 80.225063][ T4143] vivid-001: Reduced Framerate: false [ 80.242706][ T4143] vivid-001: Enable Capture Cropping: true grabbed [ 80.291761][ T4143] vivid-001: Enable Capture Composing: true grabbed [ 80.314944][ T4143] vivid-001: Enable Capture Scaler: true grabbed [ 80.364842][ T1066] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 80.364914][ T4143] vivid-001: Timestamp Source: End of Frame [ 80.414767][ T4143] vivid-001: Colorspace: sRGB [ 80.419528][ T4143] vivid-001: Transfer Function: Default [ 80.446918][ T4143] vivid-001: Y'CbCr Encoding: Default [ 80.452336][ T4143] vivid-001: HSV Encoding: Hue 0-179 [ 80.494982][ T4143] vivid-001: Quantization: Default [ 80.500707][ T4143] vivid-001: Apply Alpha To Red Only: false [ 80.512291][ T4143] vivid-001: Standard Aspect Ratio: 4x3 [ 80.525956][ T4143] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 80.542763][ T4143] vivid-001: DV Timings: 640x480p59 inactive [ 80.555372][ T4143] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 80.570561][ T4143] vivid-001: Maximum EDID Blocks: 2 [ 80.584026][ T4143] vivid-001: Limited RGB Range (16-235): false [ 80.597674][ T4143] vivid-001: Rx RGB Quantization Range: Automatic [ 80.611666][ T4143] vivid-001: Power Present: 0x00000001 [ 80.623649][ T4143] tpg source WxH: 640x360 (Y'CbCr) [ 80.646227][ T4143] tpg field: 1 [ 80.653847][ T4143] tpg crop: 640x360@0x0 [ 80.663625][ T4143] tpg compose: 640x360@0x0 [ 80.673268][ T4143] tpg colorspace: 8 [ 80.681755][ T4143] tpg transfer function: 0/2 [ 80.713926][ T4143] tpg Y'CbCr encoding: 0/1 [ 80.725340][ T4143] tpg quantization: 0/2 [ 80.735180][ T1066] usb 3-1: config 0 has an invalid interface number: 102 but max is 0 [ 80.746806][ T1066] usb 3-1: config 0 has no interface number 0 [ 80.762676][ T4143] tpg RGB range: 0/2 [ 80.784075][ T4143] vivid-001: ================== END STATUS ================== [ 80.935038][ T1066] usb 3-1: Dual-Role OTG device on HNP port [ 80.954909][ T1066] usb 3-1: New USB device found, idVendor=0553, idProduct=0202, bcdDevice=f8.d2 [ 81.000403][ T1066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.009689][ T1066] usb 3-1: Product: syz [ 81.013868][ T1066] usb 3-1: Manufacturer: syz [ 81.023844][ T1066] usb 3-1: SerialNumber: syz [ 81.055963][ T1066] usb 3-1: config 0 descriptor?? [ 81.096733][ T1066] gspca_main: stv0680-2.14.0 probing 0553:0202 [ 81.210343][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 81.753362][ T4131] loop4: detected capacity change from 0 to 131072 [ 81.755048][ T23] usb 2-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 81.771418][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.779579][ T23] usb 2-1: Product: syz [ 81.783741][ T23] usb 2-1: Manufacturer: syz [ 81.788439][ T23] usb 2-1: SerialNumber: syz [ 81.794192][ T23] usb 2-1: config 0 descriptor?? [ 81.832466][ T4131] F2FS-fs (loop4): Invalid segment count (0) [ 81.835743][ T23] qmi_wwan 2-1:0.0: More than one union descriptor, skipping ... [ 81.838763][ T4131] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 81.870669][ T4131] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.871699][ T23] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 81.926636][ T4131] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 81.939777][ T4131] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.947287][ T4131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 82.099736][ T2924] usb 2-1: USB disconnect, device number 6 [ 82.244907][ T1066] stv0680 3-1:0.102: STV(e): camera ping failed!! [ 82.463050][ T1066] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 82.492847][ T1066] stv0680 3-1:0.102: last error: 0, command = 0x0 [ 82.518110][ T1066] usb 3-1: USB disconnect, device number 7 [ 82.755098][ T3553] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.185319][ T3553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.217144][ T3553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.248078][ T3553] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.291701][ T3553] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 83.302253][ T3553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.341098][ T3553] usb 5-1: config 0 descriptor?? [ 84.021908][ T4215] kvm: emulating exchange as write [ 84.041565][ T3553] holtek_mouse 0003:04D9:A070.0007: item fetching failed at offset 1/5 [ 84.082985][ T3553] holtek_mouse 0003:04D9:A070.0007: hid parse failed: -22 [ 84.092519][ T3553] holtek_mouse: probe of 0003:04D9:A070.0007 failed with error -22 [ 84.315205][ T3553] usb 5-1: USB disconnect, device number 7 [ 85.089513][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 85.600032][ T4373] loop2: detected capacity change from 0 to 512 [ 85.742924][ T4373] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.785242][ T4373] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 85.839854][ T4373] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.292: Corrupt directory, running e2fsck is recommended [ 85.956045][ T4373] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 86.037877][ T4373] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.292: corrupted in-inode xattr [ 86.671388][ T4373] EXT4-fs (loop2): Remounting filesystem read-only [ 86.717347][ T4373] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.292: couldn't read orphan inode 15 (err -117) [ 86.735173][ T4373] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 86.883636][ T4373] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.915181][ T4373] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 86.943080][ T4373] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.292: Corrupt directory, running e2fsck is recommended [ 87.003790][ T4407] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.028458][ T3830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.060545][ T4407] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 87.071027][ T4407] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.292: Corrupt directory, running e2fsck is recommended [ 87.085794][ T4408] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.101056][ T4408] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 87.121135][ T4408] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.292: Corrupt directory, running e2fsck is recommended [ 87.147180][ T3830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.162754][ T4373] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.196406][ T4384] chnl_net:caif_netlink_parms(): no params data found [ 87.328553][ T3830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.478777][ T3830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.546603][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.572058][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.612929][ T4384] device bridge_slave_0 entered promiscuous mode [ 87.659665][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.682288][ T4403] loop0: detected capacity change from 0 to 40427 [ 87.689246][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.698917][ T4384] device bridge_slave_1 entered promiscuous mode [ 87.776227][ T4403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.795991][ T4384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.842944][ T4384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.885182][ T2924] Bluetooth: hci5: command 0x0409 tx timeout [ 87.917787][ T4403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.997419][ T4384] team0: Port device team_slave_0 added [ 88.048043][ T4417] attempt to access beyond end of device [ 88.048043][ T4417] loop0: rw=2049, want=45104, limit=40427 [ 88.055526][ T4384] team0: Port device team_slave_1 added [ 88.250701][ T4384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.277154][ T4384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.395269][ T4384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.421720][ T4384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.470694][ T4384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.562388][ T4384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.713588][ T4384] device hsr_slave_0 entered promiscuous mode [ 88.742941][ T4384] device hsr_slave_1 entered promiscuous mode [ 88.774416][ T4384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.802783][ T4384] Cannot create hsr debugfs directory [ 89.205150][ T3549] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 89.964964][ T1066] Bluetooth: hci5: command 0x041b tx timeout [ 89.984868][ T2924] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.027061][ T3549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.058083][ T3549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.081465][ T3549] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 90.101770][ T3549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.136103][ T3549] usb 3-1: config 0 descriptor?? [ 90.244972][ T2924] usb 1-1: Using ep0 maxpacket: 8 [ 90.475110][ T2924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.636504][ T2924] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 90.955486][ T2924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=00f2, bcdDevice= 0.40 [ 91.026010][ T2924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.077767][ T2924] usb 1-1: Product: syz [ 91.094827][ T2924] usb 1-1: Manufacturer: syz [ 91.112593][ T4384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.119447][ T2924] usb 1-1: SerialNumber: syz [ 91.356966][ T4384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.560123][ T4384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.832713][ T4384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.044879][ T1066] Bluetooth: hci5: command 0x040f tx timeout [ 92.072431][ T3830] device hsr_slave_0 left promiscuous mode [ 92.089465][ T3830] device hsr_slave_1 left promiscuous mode [ 92.097839][ T3549] uclogic 0003:256C:006D.0008: interface is invalid, ignoring [ 92.154933][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.162415][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.190019][ T3830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.198625][ T3830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.209746][ T3830] device bridge_slave_1 left promiscuous mode [ 92.218334][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.242507][ T3830] device bridge_slave_0 left promiscuous mode [ 92.256041][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.304032][ T3830] device veth1_macvtap left promiscuous mode [ 92.312984][ T3830] device veth0_macvtap left promiscuous mode [ 92.320467][ T3830] device veth1_vlan left promiscuous mode [ 92.325028][ T2924] usb 1-1: 0:2 : does not exist [ 92.327669][ T3830] device veth0_vlan left promiscuous mode [ 92.385943][ T2924] usb 1-1: USB disconnect, device number 5 [ 92.422909][ T3951] udevd[3951]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.711613][ T3830] team0 (unregistering): Port device team_slave_1 removed [ 92.744498][ T3830] team0 (unregistering): Port device team_slave_0 removed [ 92.790736][ T3830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.859575][ T3830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.988729][ T3830] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 93.132433][ T3830] bond0 (unregistering): Released all slaves [ 93.411833][ T3552] usb 3-1: USB disconnect, device number 8 [ 93.618694][ T4384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.709591][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.725655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.766196][ T4384] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.790008][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.807203][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.835295][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.837781][ T4511] loop2: detected capacity change from 0 to 1024 [ 93.842377][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.939391][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.949518][ T4511] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 93.966183][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.991296][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.014363][ T4511] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 94.019425][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.039674][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.085132][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.094481][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.125002][ T2924] Bluetooth: hci5: command 0x0419 tx timeout [ 94.143814][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.166268][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.215054][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.238209][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.281649][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.331180][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.352498][ T4384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.415590][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.547884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.585615][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.305461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.412239][ T4500] loop0: detected capacity change from 0 to 40427 [ 95.546360][ T4500] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.584322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.603055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.638448][ T4384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.734866][ T4500] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.187443][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.204094][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.276837][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.302066][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.331977][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.356153][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.375618][ T4384] device veth0_vlan entered promiscuous mode [ 96.428458][ T4384] device veth1_vlan entered promiscuous mode [ 96.585665][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.593825][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.630997][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.672621][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.739251][ T4384] device veth0_macvtap entered promiscuous mode [ 96.792325][ T4384] device veth1_macvtap entered promiscuous mode [ 96.873668][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.940142][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.968478][ T4533] loop2: detected capacity change from 0 to 40427 [ 96.981612][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.063112][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.091277][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.103690][ T4533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.119784][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.130466][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.144060][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.161827][ T4384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.190101][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.210976][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.227138][ T4533] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 97.248555][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.268284][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.293304][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.303368][ T4533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.334427][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.355274][ T3549] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.365277][ T26] audit: type=1800 audit(1719604908.665:3): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.322" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 97.367153][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.463937][ T4588] loop0: detected capacity change from 0 to 1024 [ 97.503364][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.548413][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.558419][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.569776][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.581147][ T4384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.599089][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.604544][ T4588] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 97.608519][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.923605][ T4384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.945131][ T4384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.964214][ T4384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.984546][ T4384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.198371][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 98.243432][ T3505] attempt to access beyond end of device [ 98.243432][ T3505] loop2: rw=2049, want=45112, limit=40427 [ 98.341093][ T4077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.378233][ T3549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.379842][ T4077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.389200][ T3549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.389244][ T3549] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.415434][ T3549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.425626][ T3549] usb 4-1: config 0 descriptor?? [ 98.434682][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.572888][ T3783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.604201][ T3783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.632362][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.663091][ T4577] chnl_net:caif_netlink_parms(): no params data found [ 98.867222][ T4577] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.874297][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.936274][ T4577] device bridge_slave_0 entered promiscuous mode [ 98.980023][ T4577] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.075061][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.085544][ T3552] Bluetooth: hci4: command 0x0409 tx timeout [ 99.105856][ T4577] device bridge_slave_1 entered promiscuous mode [ 99.281081][ T4577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.323181][ T4577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.498344][ T4577] team0: Port device team_slave_0 added [ 99.545014][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 99.560260][ T4577] team0: Port device team_slave_1 added [ 99.605046][ T3549] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 99.675904][ T4577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.704515][ T4577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.826240][ T4577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.845264][ T4621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 99.936030][ T4621] device bond1 entered promiscuous mode [ 99.946214][ T4577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.963665][ T4577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.108478][ T4577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.170842][ T4624] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 100.315997][ T4577] device hsr_slave_0 entered promiscuous mode [ 100.334309][ T4628] loop2: detected capacity change from 0 to 1024 [ 100.351360][ T4577] device hsr_slave_1 entered promiscuous mode [ 100.415161][ T4628] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 100.468456][ T4628] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 100.732489][ T4577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.894449][ T4577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.954102][ T3551] usb 4-1: USB disconnect, device number 5 [ 101.047414][ T4623] loop4: detected capacity change from 0 to 40427 [ 101.060145][ T4577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.159795][ T4577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.174910][ T3548] Bluetooth: hci4: command 0x041b tx timeout [ 101.206159][ T4623] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.367008][ T4623] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 101.394952][ T4623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.414640][ T4577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.449922][ T4577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.476182][ T26] audit: type=1800 audit(1719604912.775:4): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.339" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 101.654170][ T4577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.719680][ T4577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.449299][ T4384] attempt to access beyond end of device [ 102.449299][ T4384] loop4: rw=2049, want=45112, limit=40427 [ 102.626201][ T4661] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 102.700961][ T4662] Zero length message leads to an empty skb [ 102.749271][ T4577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.825611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.842479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.899726][ T4577] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.916756][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.930349][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.946771][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.953915][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.172792][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.191494][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.260369][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.311925][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.319098][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.403761][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.416800][ T3551] Bluetooth: hci4: command 0x040f tx timeout [ 103.546148][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.557495][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.591468][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.609292][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.636219][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.659496][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.697557][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.749648][ T4577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.795398][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.814771][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.822684][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.994548][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.804965][ T26] audit: type=1804 audit(1719604916.075:5): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.361" name="/root/syzkaller.C97WRT/84/file0" dev="sda1" ino=1972 res=1 errno=0 [ 105.109346][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.135280][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.149017][ T4577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.240566][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.255996][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.360942][ T4577] device veth0_vlan entered promiscuous mode [ 105.382594][ T26] audit: type=1804 audit(1719604916.685:6): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.373" name="/root/syzkaller.tnEhcL/106/file0" dev="sda1" ino=1968 res=1 errno=0 [ 105.405534][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.426651][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.478409][ T4577] device veth1_vlan entered promiscuous mode [ 105.485152][ T3551] Bluetooth: hci4: command 0x0419 tx timeout [ 105.503920][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.530121][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.576282][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.663948][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.682596][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.699732][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.727527][ T4577] device veth0_macvtap entered promiscuous mode [ 105.764335][ T4577] device veth1_macvtap entered promiscuous mode [ 105.806091][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.846608][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.881327][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.923556][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.954208][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.013441][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.044203][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.045756][ T4753] netlink: 40 bytes leftover after parsing attributes in process `syz.2.379'. [ 106.081403][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.105092][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.141794][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.173505][ T4577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.188939][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.201249][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.213613][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.255519][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.278906][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.307892][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.325059][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.343170][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.353196][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.378333][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.434215][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.461318][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.521472][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.585356][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.631407][ T4577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.659424][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.672191][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.686025][ T4577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.696153][ T4577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.712847][ T4577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.724101][ T4577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.892291][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.915003][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.943936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.970564][ T3830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.984404][ T3830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.017309][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.504218][ T4770] loop0: detected capacity change from 0 to 40427 [ 107.601366][ T4770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.694333][ T4795] can: request_module (can-proto-0) failed. [ 107.750653][ T4770] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 107.798934][ T4799] loop3: detected capacity change from 0 to 2048 [ 107.814508][ T4770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.869413][ T4799] loop3: p2 < > [ 107.879851][ T4804] capability: warning: `syz.4.397' uses 32-bit capabilities (legacy support in use) [ 107.966008][ T26] audit: type=1800 audit(1719604919.275:7): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.385" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 108.983291][ T3503] attempt to access beyond end of device [ 108.983291][ T3503] loop0: rw=2049, want=45112, limit=40427 [ 108.991248][ T4815] loop4: detected capacity change from 0 to 2048 [ 109.167596][ T4815] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 109.195781][ T4820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.405'. [ 109.272007][ T4826] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.441868][ T4815] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,norecovery,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 110.124927][ T4864] loop2: detected capacity change from 0 to 128 [ 110.168971][ T4863] syz.3.420 (pid 4863) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 110.202834][ T4858] loop4: detected capacity change from 0 to 8192 [ 110.259869][ T4870] loop0: detected capacity change from 0 to 512 [ 110.317077][ T4864] FAT-fs (loop2): Unrecognized mount option "iocharset, priority 10 [ 137.258278][ T3549] usb 3-1: USB disconnect, device number 10 [ 137.362385][ T1066] kye 0003:0458:5015.000A: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 137.367029][ T5603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.404556][ T1066] kye 0003:0458:5015.000A: tablet-enabling feature report not found [ 137.427727][ T1066] kye 0003:0458:5015.000A: tablet enabling failed [ 137.565484][ T3549] usb 4-1: USB disconnect, device number 8 [ 137.735318][ T3553] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.749776][ T5621] loop1: detected capacity change from 0 to 1024 [ 137.883530][ T5621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.950049][ T5623] loop2: detected capacity change from 0 to 512 [ 137.992176][ T5623] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.057365][ T5623] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #16: comm syz.2.655: casefold flag without casefold feature [ 138.086321][ T5623] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #3: comm syz.2.655: corrupted inode contents [ 138.120087][ T5623] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #3: comm syz.2.655: mark_inode_dirty error [ 138.131962][ T3553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.143315][ T3553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.157304][ T3553] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.170402][ T5623] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.655: bg 0: block 64: padding at end of block bitmap is not set [ 138.186066][ T3553] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 138.196287][ T5623] Quota error (device loop2): write_blk: dquota write failed [ 138.204208][ T5623] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 138.234406][ T5623] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.655: Failed to acquire dquot type 0 [ 138.234758][ T3553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.275113][ T3548] tipc: Node number set to 2886997162 [ 138.281122][ T5623] EXT4-fs (loop2): 1 truncate cleaned up [ 138.295351][ T3553] usb 5-1: config 0 descriptor?? [ 138.322791][ T5623] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.365298][ T5623] ext4 filesystem being mounted at /root/syzkaller.9aSqr4/134/file1 supports timestamps until 2038 (0x7fffffff) [ 138.463499][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 138.611231][ T5649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.665'. [ 138.789769][ T5649] device batadv0 entered promiscuous mode [ 138.797351][ T3553] betop 0003:11C0:5506.000B: unknown main item tag 0x0 [ 138.849608][ T3553] betop 0003:11C0:5506.000B: unknown main item tag 0x0 [ 138.878802][ T3553] betop 0003:11C0:5506.000B: unknown main item tag 0x0 [ 138.886374][ T3548] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.899113][ T3553] betop 0003:11C0:5506.000B: unknown main item tag 0x0 [ 138.907415][ T3553] betop 0003:11C0:5506.000B: unknown main item tag 0x0 [ 138.916856][ T3553] betop 0003:11C0:5506.000B: unknown main item tag 0x0 [ 138.923748][ T3553] betop 0003:11C0:5506.000B: unknown main item tag 0x0 [ 138.938201][ T3553] betop 0003:11C0:5506.000B: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.4-1/input0 [ 138.950178][ T3553] betop 0003:11C0:5506.000B: no inputs found [ 139.028405][ T3553] usb 5-1: USB disconnect, device number 8 [ 139.110895][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 139.305092][ T3548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.332576][ T3548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.348147][ T3548] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.358892][ T3548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.369279][ T3548] usb 2-1: config 0 descriptor?? [ 139.496148][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 139.651907][ T5693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.680'. [ 139.662912][ T5693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.680'. [ 139.850879][ T3548] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 139.881381][ T3548] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input6 [ 140.004997][ T3548] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 140.065166][ T3553] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 140.116679][ T3548] keytouch 0003:0926:3333.000C: implement() called with too large value 12 (n: 1)! (kworker/0:5) [ 140.128120][ T3548] ------------[ cut here ]------------ [ 140.133603][ T3548] WARNING: CPU: 0 PID: 3548 at drivers/hid/hid-core.c:1449 hid_output_report+0x541/0x750 [ 140.143439][ T3548] Modules linked in: [ 140.147354][ T3548] CPU: 0 PID: 3548 Comm: kworker/0:5 Not tainted 5.15.161-syzkaller #0 [ 140.155600][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.165837][ T3548] Workqueue: events hidinput_led_worker [ 140.171428][ T3548] RIP: 0010:hid_output_report+0x541/0x750 [ 140.177600][ T3548] Code: c1 c0 08 00 00 48 8b 44 24 40 48 8d b8 38 19 00 00 48 c7 c6 a0 a6 64 8b 48 c7 c2 a2 f2 2c 8c 44 89 f1 45 89 e8 e8 df 49 70 02 <0f> 0b 44 23 74 24 18 e9 bb fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 [ 140.197442][ T3548] RSP: 0018:ffffc90003067b30 EFLAGS: 00010046 [ 140.198160][ T5709] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.203520][ T3548] RAX: e5123bfa8be0c300 RBX: 0000000000000001 RCX: e5123bfa8be0c300 [ 140.203576][ T3548] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 140.203588][ T3548] RBP: 0000000000000000 R08: ffffffff8166835c R09: ffffed10173467a8 [ 140.203599][ T3548] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 140.203609][ T3548] R13: 0000000000000001 R14: 000000000000000c R15: 0000000000000000 [ 140.254253][ T3548] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 140.263194][ T3548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.269817][ T3548] CR2: 0000000020002000 CR3: 000000006a75a000 CR4: 00000000003506f0 [ 140.277815][ T3548] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.285805][ T3548] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.293873][ T3548] Call Trace: [ 140.297159][ T3548] [ 140.300093][ T3548] ? __warn+0x15b/0x300 [ 140.304260][ T3548] ? hid_output_report+0x541/0x750 [ 140.309376][ T3548] ? report_bug+0x1b7/0x2e0 [ 140.313916][ T3548] ? handle_bug+0x3d/0x70 [ 140.318263][ T3548] ? exc_invalid_op+0x16/0x40 [ 140.322960][ T3548] ? asm_exc_invalid_op+0x16/0x20 [ 140.328007][ T3548] ? __wake_up_klogd+0xcc/0x100 [ 140.332881][ T3548] ? hid_output_report+0x541/0x750 [ 140.338027][ T3548] usbhid_submit_report+0x43d/0x9e0 [ 140.343251][ T3548] process_one_work+0x8a1/0x10c0 [ 140.348228][ T3548] ? worker_detach_from_pool+0x260/0x260 [ 140.353881][ T3548] ? _raw_spin_lock_irqsave+0x120/0x120 [ 140.359438][ T3548] ? kthread_data+0x4e/0xc0 [ 140.363960][ T3548] ? wq_worker_running+0x97/0x170 [ 140.369007][ T3548] worker_thread+0xaca/0x1280 [ 140.373729][ T3548] kthread+0x3f6/0x4f0 [ 140.377824][ T3548] ? rcu_lock_release+0x20/0x20 [ 140.382683][ T3548] ? kthread_blkcg+0xd0/0xd0 [ 140.387280][ T3548] ret_from_fork+0x1f/0x30 [ 140.391727][ T3548] [ 140.394861][ T3548] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.402150][ T3548] CPU: 0 PID: 3548 Comm: kworker/0:5 Not tainted 5.15.161-syzkaller #0 [ 140.410405][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.420477][ T3548] Workqueue: events hidinput_led_worker [ 140.426063][ T3548] Call Trace: [ 140.429359][ T3548] [ 140.432303][ T3548] dump_stack_lvl+0x1e3/0x2d0 [ 140.436995][ T3548] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 140.442664][ T3548] ? panic+0x860/0x860 [ 140.446750][ T3548] ? hid_output_report+0x500/0x750 [ 140.451858][ T3548] ? hid_output_report+0x500/0x750 [ 140.456962][ T3548] panic+0x318/0x860 [ 140.460944][ T3548] ? __warn+0x16a/0x300 [ 140.465090][ T3548] ? fb_is_primary_device+0xd0/0xd0 [ 140.470274][ T3548] ? ret_from_fork+0x1f/0x30 [ 140.474852][ T3548] ? hid_output_report+0x541/0x750 [ 140.479960][ T3548] __warn+0x2b2/0x300 [ 140.483954][ T3548] ? hid_output_report+0x541/0x750 [ 140.489073][ T3548] report_bug+0x1b7/0x2e0 [ 140.493390][ T3548] handle_bug+0x3d/0x70 [ 140.497547][ T3548] exc_invalid_op+0x16/0x40 [ 140.502057][ T3548] asm_exc_invalid_op+0x16/0x20 [ 140.506920][ T3548] RIP: 0010:hid_output_report+0x541/0x750 [ 140.512625][ T3548] Code: c1 c0 08 00 00 48 8b 44 24 40 48 8d b8 38 19 00 00 48 c7 c6 a0 a6 64 8b 48 c7 c2 a2 f2 2c 8c 44 89 f1 45 89 e8 e8 df 49 70 02 <0f> 0b 44 23 74 24 18 e9 bb fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 [ 140.532236][ T3548] RSP: 0018:ffffc90003067b30 EFLAGS: 00010046 [ 140.538288][ T3548] RAX: e5123bfa8be0c300 RBX: 0000000000000001 RCX: e5123bfa8be0c300 [ 140.546247][ T3548] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 140.554217][ T3548] RBP: 0000000000000000 R08: ffffffff8166835c R09: ffffed10173467a8 [ 140.562183][ T3548] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 140.570143][ T3548] R13: 0000000000000001 R14: 000000000000000c R15: 0000000000000000 [ 140.578108][ T3548] ? __wake_up_klogd+0xcc/0x100 [ 140.582959][ T3548] usbhid_submit_report+0x43d/0x9e0 [ 140.588152][ T3548] process_one_work+0x8a1/0x10c0 [ 140.593188][ T3548] ? worker_detach_from_pool+0x260/0x260 [ 140.598832][ T3548] ? _raw_spin_lock_irqsave+0x120/0x120 [ 140.604372][ T3548] ? kthread_data+0x4e/0xc0 [ 140.608867][ T3548] ? wq_worker_running+0x97/0x170 [ 140.613890][ T3548] worker_thread+0xaca/0x1280 [ 140.618583][ T3548] kthread+0x3f6/0x4f0 [ 140.622897][ T3548] ? rcu_lock_release+0x20/0x20 [ 140.627731][ T3548] ? kthread_blkcg+0xd0/0xd0 [ 140.632305][ T3548] ret_from_fork+0x1f/0x30 [ 140.636708][ T3548] [ 140.639819][ T3548] Kernel Offset: disabled [ 140.644396][ T3548] Rebooting in 86400 seconds..