last executing test programs: 18.126009253s ago: executing program 4 (id=3303): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x68041}, 0x18) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x18) preadv2(r1, &(0x7f0000001700)=[{&(0x7f0000000200)=""/177, 0xb1}], 0x1, 0x0, 0x0, 0x0) 17.956132177s ago: executing program 4 (id=3306): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={0x0, 0x70}, 0x20) 17.797415767s ago: executing program 4 (id=3308): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x16, 0x0, 0x0) 17.697955862s ago: executing program 4 (id=3311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 17.514986643s ago: executing program 4 (id=3314): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002b40), 0x1, 0x0) ioctl$TUNSETDEBUG(r0, 0x5450, 0x0) open$dir(0x0, 0x20041, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x5450, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) read$char_usb(r1, &(0x7f0000000840)=""/171, 0xab) close(0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xab, 0x0}, 0x0) close(r4) ioctl$GIO_FONTX(r2, 0x5450, 0x0) timer_create(0x0, &(0x7f0000533fa0), &(0x7f00000000c0)) 16.29259115s ago: executing program 4 (id=3320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) 4.409425631s ago: executing program 5 (id=3402): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) socket(0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) 4.080106678s ago: executing program 0 (id=3404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a00)={0x14, 0x0, 0x200, 0x70bd25, 0x1ee81cb}, 0x14}, 0x1, 0x0, 0x0, 0x48045}, 0x20000000) 3.174292561s ago: executing program 5 (id=3406): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 3.029307741s ago: executing program 0 (id=3407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000540)="402b801dbf1801444f3e2de5beb13cb286650aa9cf295a2d2d36665347495c89efdbd8bc17593bb8dcf560f8d4072de2d9236697398982460eec0884def609ed8c4b58349dc752e27fedee195c3de4376f6f29b2216720c037538e628fd31a7f32fbf1b2c404b57e5e1909b81aa3fd637de9599ab2e113bfa77ab63ffa3e7494ebacca9a8b2ad18007ec3770254aa803c8a6a21f580843039c5666ff0e0ea99a9ec5170fd5ab816bc6c5441560", 0xad}, {&(0x7f0000000780)="59c99668969c20a79aad77cd92a5796eea6895dbb0876ac9ac5a3dfe06bdb7b605b99043f8c1a78e26c32d21e905145995f39271ef9325e0c191431f801dcffdc2071f86514a3f4c6b41dd83a7e25d7fd929991b0a98cb83a3626ec3cc94ad85e30c52a55b12e329a28ce2e03dd1688147087295ec214d01588daa59081c0d6506b70371d4aa775506a3623a05e1d03113b7c7b8c7742973b65c8cb9b9540cd106ac9859f8a63c8a6c47b916cd31ff76600195e1b0a223beb52cd405b9a01a0cee5cacddf2bd3cda3c87f74100be816108d0368a0e01b6f8fa13de", 0xdb}, {&(0x7f0000000880)="e433ed6b54484f230393fbeef9ddb69102902f398ebe7840d7ee85f6fadd0c33521f4ce02664ad5ab7f3014f0b539423205fd1a8be0e0f495b89fa3273f9dbcbd9de304a18694f7b490a59673fda588a9c18b8e87ce4de7ca5f7fde265cf6c80b16e62eb9d098161bffba6000dbd45ce16def083c83bc28d2d", 0x79}, {&(0x7f0000000000)="17fb2fdfb50a4724cf477fc8eacdbb159343d10a94", 0x15}, {&(0x7f0000000900)="eefa7ecb828e6d2a38544751c43068b7fb36c461455b7a0eda681fcf6ea8c05c6c00c75574689cc303f99e121994211540f3a3a9cf9aa43165d311f4024dfc87ca5871f9ea8bc99a2c78c709e386dc6a", 0x50}, {&(0x7f0000000080)="0acf51f51b7f1c4e152a", 0xa}, {&(0x7f0000002b40)="a730474f19c089e9214b8cd54c4308bb7efd1914e773446f42566b11b5bfa47cbf94a4248694afe4256b2657207f6de9d646e07301c6bf0567396a67fa1b3ef1ec81fa4b5825de1b7f16661a7c03da562ecb984bd046d46df492844cb851d4489ecbeb5024ba2c8e03cc1fc0293809cf92de62b218181c9326f9d16a49a5ac59", 0x80}], 0x7}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc", 0x2a}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c6", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001140)="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", 0x5f9}], 0x1}}], 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002440)={0x14}, 0xc3ec}}, 0x0) 2.932299722s ago: executing program 5 (id=3409): setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) 2.741399395s ago: executing program 5 (id=3412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc32a1e1c81a85", 0x30}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c697b4f63ff06e8ef72792bc9e4d188015c40f05384741eea7303566305add", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001140)="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", 0x8d2}], 0x1}}], 0x2, 0x0) 2.741224984s ago: executing program 0 (id=3413): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = shmget(0x1, 0x14000, 0x200, &(0x7f0000002000/0x14000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000002540)=""/124) r2 = msgget$private(0x0, 0x407) msgrcv(r2, &(0x7f00000025c0)={0x0, ""/65}, 0x49, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002800)={'wlan0\x00'}) shmctl$IPC_RMID(r1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/address_bits', 0x200000, 0x80) 2.671019635s ago: executing program 3 (id=3415): ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000100)={0x0, 0x0, r0}) 2.570460246s ago: executing program 5 (id=3416): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x5ac}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa4, 0xd2, 0xff, 0x40, 0x5f3, 0x240, 0x1b24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4e, 0xaf, 0x32}}]}}]}}, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) 2.520248789s ago: executing program 3 (id=3418): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x111042, 0x0) write(r0, 0x0, 0x0) 2.397692014s ago: executing program 3 (id=3419): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 2.249412907s ago: executing program 2 (id=3420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 2.197392011s ago: executing program 3 (id=3421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @private}, {0x2, 0x0, @private}}) 1.443205722s ago: executing program 0 (id=3422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r2) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x5450, 0x0) 1.420094334s ago: executing program 2 (id=3423): r0 = openat$mixer(0xffffff9c, &(0x7f00000013c0), 0x40000, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001540)) 1.369178553s ago: executing program 3 (id=3424): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, 0x0) 1.221963046s ago: executing program 2 (id=3426): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x8000) 1.117439437s ago: executing program 3 (id=3427): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="0000010000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.061810286s ago: executing program 1 (id=3428): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) fdatasync(r2) 948.887708ms ago: executing program 2 (id=3429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x4040004) 869.774364ms ago: executing program 1 (id=3430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x28040) 801.160881ms ago: executing program 1 (id=3431): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x5450, 0x0) 783.873019ms ago: executing program 2 (id=3432): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sequencer(r1, 0x0, 0x0) 633.927983ms ago: executing program 2 (id=3433): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = dup(r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, 0x0) 633.755499ms ago: executing program 1 (id=3434): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 521.669554ms ago: executing program 1 (id=3435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55710c64e30cd8655910b3eb2d1451a6bf4b04dc0af703f4c87963ba8f24815f140290fb3f659193ae297fdcd50b6dc8d41d9568a55e58cc6514e272e53a081168e74d7189f0e655f66e08f0e108968d80ea3cac636aa60bea16f5e27d5761f66d99ca89adacf4e13a2013988c4222d7cf1ff8682043d3d6f16b20de6f1ea6691dcee8e86fa2109aa7898fe15f2c973463c482db5da9926d158ee55592221796e273ccf22a8ce8dd3674739087015098b80e9842e82aa484b0247773b358f02338ba5950707984fb201d101bfd1f78b0ea4f397c22d94b5a34491cf3f671af9dacdf409cc1f8d960358d99d506f9b3f52ce15d0cf72083819b4a3a6dfe62b510150dfe25ef1caf21e26954118b0c2dea8b744bed8de035a056fa2d0f73"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) vmsplice(r1, 0x0, 0x0, 0x5) 417.470785ms ago: executing program 1 (id=3436): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) socket(0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) 309.402175ms ago: executing program 0 (id=3437): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat6\x00') close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002700)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 47.348251ms ago: executing program 5 (id=3438): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) 0s ago: executing program 0 (id=3439): r0 = openat$pfkey(0xffffff9c, &(0x7f0000000340), 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) kernel console output (not intermixed with test programs): o 512 [ 1581.666172][T17207] FAT-fs (loop0): Directory bread(block 66) failed [ 1581.685649][T17213] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1581.714332][T17207] FAT-fs (loop0): Directory bread(block 67) failed [ 1581.753120][T17207] FAT-fs (loop0): Directory bread(block 68) failed [ 1581.793895][T17207] FAT-fs (loop0): Directory bread(block 69) failed [ 1581.815207][T17207] FAT-fs (loop0): Directory bread(block 70) failed [ 1581.851851][T17216] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2158'. [ 1582.147867][T17217] loop3: detected capacity change from 0 to 512 [ 1582.949635][T17207] FAT-fs (loop0): Directory bread(block 71) failed [ 1583.008979][T17207] FAT-fs (loop0): Directory bread(block 72) failed [ 1583.047986][T17207] FAT-fs (loop0): Directory bread(block 73) failed [ 1583.335367][T17231] loop1: detected capacity change from 0 to 512 [ 1583.363215][T17231] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1583.397013][T17217] EXT4-fs: Ignoring removed mblk_io_submit option [ 1583.415243][T17217] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1583.446634][T17217] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.2154: invalid block [ 1583.458587][T17217] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2154: couldn't read orphan inode 11 (err -117) [ 1583.472930][T17217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1583.501512][T17231] EXT4-fs (loop1): 1 truncate cleaned up [ 1583.537606][T17231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1583.757823][T15835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.118793][T15842] syz-executor: attempt to access beyond end of device [ 1584.118793][T15842] loop0: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1584.770878][T17247] can: request_module (can-proto-4) failed. [ 1584.781548][T17256] loop4: detected capacity change from 0 to 512 [ 1584.973403][T17256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.018054][T17256] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1585.170431][T15844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.268603][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 1585.294599][T17267] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2172'. [ 1585.342671][T16626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.644736][ T4578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.890357][ T4578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.291008][T17294] loop3: detected capacity change from 0 to 164 [ 1587.336203][ T4578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.367342][T17294] rock: directory entry would overflow storage [ 1587.393128][T17294] rock: sig=0x4f50, size=4, remaining=3 [ 1587.414598][T17294] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1587.645470][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1587.667626][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1587.668159][ T4578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.675802][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1587.707684][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1587.731619][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1587.740097][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1587.747209][T17308] loop5: detected capacity change from 0 to 512 [ 1587.763904][T17308] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1587.808893][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'. [ 1587.841591][T17308] EXT4-fs (loop5): blocks per group (3008) and clusters per group (32768) inconsistent [ 1587.870283][T17311] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1589.844645][ T5246] Bluetooth: hci3: command tx timeout [ 1590.063674][T17321] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2190'. [ 1590.112818][T17321] gretap0: entered promiscuous mode [ 1590.125265][T17325] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2190'. [ 1590.135730][T17325] 0XD: renamed from gretap0 [ 1590.190355][T17325] 0XD: left promiscuous mode [ 1590.195348][T17325] 0XD: entered allmulticast mode [ 1590.203366][T17325] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 1590.391070][T17327] loop0: detected capacity change from 0 to 2048 [ 1590.674708][ T4578] dummy0: left allmulticast mode [ 1590.764111][ T4578] dummy0: left promiscuous mode [ 1590.866134][ T4578] bridge0: port 3(dummy0) entered disabled state [ 1591.025939][T17327] loop0: p1 < > p4 [ 1591.182274][T17327] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1591.202972][ T4578] bridge_slave_1: left allmulticast mode [ 1591.209083][ T4578] bridge_slave_1: left promiscuous mode [ 1591.291906][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.392324][ T4578] bridge_slave_0: left allmulticast mode [ 1591.405690][ T4578] bridge_slave_0: left promiscuous mode [ 1591.417409][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.921808][ T5246] Bluetooth: hci3: command tx timeout [ 1592.637490][ T4578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.650315][ T4578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.662712][ T4578] bond0 (unregistering): Released all slaves [ 1592.741602][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 1593.063569][T17369] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2206'. [ 1594.021502][ T5246] Bluetooth: hci3: command tx timeout [ 1595.099507][T17394] loop5: detected capacity change from 0 to 16 [ 1595.142223][T17394] erofs: (device loop5): mounted with root inode @ nid 36. [ 1595.233075][T17305] chnl_net:caif_netlink_parms(): no params data found [ 1595.362879][T17398] syz.5.2216: attempt to access beyond end of device [ 1595.362879][T17398] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1595.383669][ T4578] hsr_slave_0: left promiscuous mode [ 1595.386052][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 205 @ nid 36 [ 1595.402126][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 204 @ nid 36 [ 1595.416585][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 197 @ nid 36 [ 1595.426068][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 196 @ nid 36 [ 1595.441230][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 192 @ nid 36 [ 1595.462007][T17402] syz.0.2215[17402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1595.472286][T17402] syz.0.2215[17402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1595.557000][T17402] loop0: detected capacity change from 0 to 512 [ 1595.583643][T17402] EXT4-fs: Ignoring removed mblk_io_submit option [ 1595.684961][T17402] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1595.754056][T17402] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 1: comm syz.0.2215: invalid block [ 1595.767062][T17402] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2215: couldn't read orphan inode 11 (err -117) [ 1595.796080][T17402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1596.049941][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 180 @ nid 36 [ 1596.069804][ T4578] hsr_slave_1: left promiscuous mode [ 1596.088302][ T5246] Bluetooth: hci3: command tx timeout [ 1596.121906][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 172 @ nid 36 [ 1596.160371][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1596.179426][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 168 @ nid 36 [ 1596.181112][T15842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.189539][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 160 @ nid 36 [ 1596.222143][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.242886][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1596.267064][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 149 @ nid 36 [ 1596.281062][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.288364][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 148 @ nid 36 [ 1596.298287][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 144 @ nid 36 [ 1596.314578][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 140 @ nid 36 [ 1596.341799][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 92 @ nid 36 [ 1596.354537][ T4578] veth1_macvtap: left promiscuous mode [ 1596.360185][ T4578] veth0_macvtap: left promiscuous mode [ 1596.376204][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 77 @ nid 36 [ 1596.398187][ T4578] veth1_vlan: left promiscuous mode [ 1596.406161][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 1596.418551][T17417] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2222'. [ 1596.431523][ T4578] veth0_vlan: left promiscuous mode [ 1596.441594][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 69 @ nid 36 [ 1596.471821][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 68 @ nid 36 [ 1596.507938][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 1596.530664][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 60 @ nid 36 [ 1596.554773][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 1596.572204][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 1596.589976][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 1596.599866][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 1596.629431][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 1596.652029][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 1596.668450][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 17 @ nid 36 [ 1596.752403][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 1596.778650][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 1596.842914][T17394] erofs: (device loop5): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 1596.921727][T17394] syz.5.2216: attempt to access beyond end of device [ 1596.921727][T17394] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1596.996138][T17394] syz.5.2216: attempt to access beyond end of device [ 1596.996138][T17394] loop5: rw=524288, sector=1049272, nr_sectors = 16 limit=16 [ 1597.554950][T17394] syz.5.2216: attempt to access beyond end of device [ 1597.554950][T17394] loop5: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 1597.651519][T17394] syz.5.2216: attempt to access beyond end of device [ 1597.651519][T17394] loop5: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 1597.721602][T17394] syz.5.2216: attempt to access beyond end of device [ 1597.721602][T17394] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1597.793594][T17394] syz.5.2216: attempt to access beyond end of device [ 1597.793594][T17394] loop5: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 1597.836293][T17394] syz.5.2216: attempt to access beyond end of device [ 1597.836293][T17394] loop5: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 1597.850823][T17394] syz.5.2216: attempt to access beyond end of device [ 1597.850823][T17394] loop5: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 1597.889085][T17394] syz.5.2216: attempt to access beyond end of device [ 1597.889085][T17394] loop5: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 1597.893040][T17443] loop0: detected capacity change from 0 to 512 [ 1597.941913][T17443] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 1598.419664][ T4578] team0 (unregistering): Port device team_slave_1 removed [ 1598.484566][ T4578] team0 (unregistering): Port device team_slave_0 removed [ 1599.199996][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 1599.209321][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2227'. [ 1599.227815][T17441] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1599.523861][T17305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.531650][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.538942][T17305] bridge_slave_0: entered allmulticast mode [ 1599.555937][T17305] bridge_slave_0: entered promiscuous mode [ 1599.609794][T17305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.628246][T17305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.646736][T17305] bridge_slave_1: entered allmulticast mode [ 1599.657335][T17305] bridge_slave_1: entered promiscuous mode [ 1599.861419][T17465] @: renamed from veth0_vlan (while UP) [ 1599.906822][T17305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.952488][T17305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.152002][T17305] team0: Port device team_slave_0 added [ 1600.197194][T17305] team0: Port device team_slave_1 added [ 1600.219843][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 1600.244417][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'. [ 1600.319022][T17472] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1600.701571][T17305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1600.730616][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1600.999418][T17305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.070592][T17305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.081649][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.889491][T17305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.196765][T17305] hsr_slave_0: entered promiscuous mode [ 1602.240746][T17305] hsr_slave_1: entered promiscuous mode [ 1602.270570][T17305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1602.285255][T17305] Cannot create hsr debugfs directory [ 1602.296620][T17503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1602.541978][ T5299] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1602.883515][ T5299] usb 4-1: config 0 has no interfaces? [ 1602.889167][ T5299] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1602.904331][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.015074][ T5299] usb 4-1: config 0 descriptor?? [ 1603.551898][T12235] usb 4-1: USB disconnect, device number 20 [ 1603.585613][T10324] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1603.665289][T17305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1603.681795][T17305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1603.705530][T17305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1603.725313][T17305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1603.811373][T10324] usb 5-1: Using ep0 maxpacket: 16 [ 1603.822663][T10324] usb 5-1: too many configurations: 226, using maximum allowed: 8 [ 1603.843741][T10324] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1603.867067][T10324] usb 5-1: can't read configurations, error -61 [ 1603.912834][T17305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.950904][T17305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.968270][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.975454][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.029227][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.036484][T10461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.042742][T10324] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1604.251869][T10324] usb 5-1: Using ep0 maxpacket: 16 [ 1604.272110][T10324] usb 5-1: too many configurations: 226, using maximum allowed: 8 [ 1604.305834][T10324] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1604.325923][T10324] usb 5-1: can't read configurations, error -61 [ 1604.352295][T10324] usb usb5-port1: attempt power cycle [ 1604.549706][T17520] loop2: detected capacity change from 0 to 40427 [ 1604.561019][T17520] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1604.569887][T17520] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1604.582094][T17520] F2FS-fs (loop2): invalid crc value [ 1604.592545][T17520] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1604.679657][T17520] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1604.681236][T17305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.692006][T17520] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1604.779580][T17305] veth0_vlan: entered promiscuous mode [ 1604.787521][T10324] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1604.881655][T13675] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1604.895260][T17305] veth1_vlan: entered promiscuous mode [ 1604.998621][T17305] veth0_macvtap: entered promiscuous mode [ 1605.030313][T17305] veth1_macvtap: entered promiscuous mode [ 1605.071378][T10324] usb 5-1: Using ep0 maxpacket: 16 [ 1605.077565][T10324] usb 5-1: too many configurations: 226, using maximum allowed: 8 [ 1605.083427][T13675] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1605.096589][T10324] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1605.105146][T10324] usb 5-1: can't read configurations, error -61 [ 1605.140175][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.151392][T13675] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1605.201376][T13675] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1605.784777][T13675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1605.796083][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.809555][T13675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1605.823969][T13675] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1605.833664][T13675] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1605.842486][T13675] usb 4-1: Product: syz [ 1605.846751][T13675] usb 4-1: Manufacturer: syz [ 1605.860195][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.871549][T10324] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1605.894067][T13675] cdc_wdm 4-1:1.0: skipping garbage [ 1605.916299][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.931158][T13675] cdc_wdm 4-1:1.0: skipping garbage [ 1605.943758][T10324] usb 5-1: device descriptor read/8, error -71 [ 1605.944318][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.971455][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.977090][T13675] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1605.981749][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.987306][T13675] cdc_wdm 4-1:1.0: Unknown control protocol [ 1606.014045][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.029876][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.052775][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.068164][T10324] usb usb5-port1: unable to enumerate USB device [ 1606.089467][T16548] bio_check_eod: 26 callbacks suppressed [ 1606.089492][T16548] syz-executor: attempt to access beyond end of device [ 1606.089492][T16548] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1606.117263][T17305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.148903][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.176356][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.181453][T16548] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1606.186779][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.209248][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.219570][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.222518][ T5301] usb 4-1: USB disconnect, device number 21 [ 1606.237806][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.281781][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.313368][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.333162][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.361337][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.385449][T17305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.440774][T17305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.465774][T17305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.500263][T17305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.526148][T17305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.541711][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1606.573678][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1606.585710][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1606.608745][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1606.618310][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1606.625932][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1606.822356][T17556] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1606.911455][ T4578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.964741][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.971186][ T4578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.978592][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.164078][T15905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1607.189600][T17563] loop4: detected capacity change from 0 to 16 [ 1607.199459][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.217308][T17563] erofs: (device loop4): mounted with root inode @ nid 36. [ 1607.220258][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.345303][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 205 @ nid 36 [ 1607.357927][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 204 @ nid 36 [ 1607.378166][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 197 @ nid 36 [ 1607.391386][T15905] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1607.400809][T15905] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1607.412108][T15905] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1607.421708][T15905] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1607.437627][T15905] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1607.447712][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 196 @ nid 36 [ 1607.465595][T15905] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1607.485899][T15905] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1607.503927][T15905] usb 4-1: Product: syz [ 1607.508289][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 192 @ nid 36 [ 1607.508698][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 180 @ nid 36 [ 1607.563796][T15905] usb 4-1: Manufacturer: syz [ 1607.588715][T17552] chnl_net:caif_netlink_parms(): no params data found [ 1607.595332][T15905] cdc_wdm 4-1:1.0: skipping garbage [ 1607.600705][T15905] cdc_wdm 4-1:1.0: skipping garbage [ 1607.601764][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 172 @ nid 36 [ 1607.629332][T15905] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1607.648407][T15905] cdc_wdm 4-1:1.0: Unknown control protocol [ 1607.660009][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 168 @ nid 36 [ 1607.712060][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 160 @ nid 36 [ 1607.753038][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 149 @ nid 36 [ 1607.798518][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 148 @ nid 36 [ 1607.827873][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 144 @ nid 36 [ 1607.847642][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 140 @ nid 36 [ 1607.861917][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 92 @ nid 36 [ 1607.890264][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 77 @ nid 36 [ 1607.900558][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 1607.910240][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 69 @ nid 36 [ 1607.921463][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 68 @ nid 36 [ 1607.931069][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 1607.948009][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 60 @ nid 36 [ 1607.957811][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 1607.967153][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 1607.976568][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 1607.996480][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 1608.008081][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2278'. [ 1608.017458][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 1608.027593][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 1608.036993][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 17 @ nid 36 [ 1608.070662][T17552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.086484][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 1608.092037][T17552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.121129][T17552] bridge_slave_0: entered allmulticast mode [ 1608.141909][T17552] bridge_slave_0: entered promiscuous mode [ 1608.155866][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 1608.176709][T17563] erofs: (device loop4): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 1608.180158][T17552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.199631][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.199631][T17563] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1608.202898][T17552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.221212][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.221212][T17563] loop4: rw=524288, sector=1049272, nr_sectors = 16 limit=16 [ 1608.230596][T17552] bridge_slave_1: entered allmulticast mode [ 1608.235794][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.235794][T17563] loop4: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 1608.235910][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.235910][T17563] loop4: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 1608.236041][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.236041][T17563] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1608.312946][T17552] bridge_slave_1: entered promiscuous mode [ 1608.345330][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.345330][T17563] loop4: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 1608.376445][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.376445][T17563] loop4: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 1608.410367][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.410367][T17563] loop4: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 1608.431414][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1608.434905][T17552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.454594][T17563] syz.4.2273: attempt to access beyond end of device [ 1608.454594][T17563] loop4: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 1608.466260][T17552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.550204][T17552] team0: Port device team_slave_0 added [ 1608.566724][T17597] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1608.575097][T17552] team0: Port device team_slave_1 added [ 1608.621707][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1608.636211][ T25] usb 1-1: too many configurations: 226, using maximum allowed: 8 [ 1608.650480][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1608.658988][ T25] usb 1-1: can't read configurations, error -61 [ 1608.719248][ T5246] Bluetooth: hci4: command tx timeout [ 1608.745832][T17552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.776076][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.832621][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1608.878093][T17552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.935881][T17552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.956402][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.991553][T17552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.189659][T17552] hsr_slave_0: entered promiscuous mode [ 1609.205977][T17552] hsr_slave_1: entered promiscuous mode [ 1609.221096][T17552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1609.231705][T17552] Cannot create hsr debugfs directory [ 1609.261446][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1609.281468][ T25] usb 1-1: too many configurations: 226, using maximum allowed: 8 [ 1609.304905][T12235] usb 4-1: USB disconnect, device number 22 [ 1609.324157][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1609.362286][ T25] usb 1-1: can't read configurations, error -61 [ 1609.389759][ T25] usb usb1-port1: attempt power cycle [ 1610.792758][ T5246] Bluetooth: hci4: command tx timeout [ 1611.054827][T17633] binder: 17621:17633 ioctl 4018620d 0 returned -22 [ 1611.138670][T17635] loop3: detected capacity change from 0 to 1024 [ 1611.166565][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1611.362074][T17552] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.195226][ T25] usb 1-1: device descriptor read/8, error -71 [ 1612.309621][T17637] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1612.372493][T17645] loop3: detected capacity change from 0 to 1024 [ 1613.053011][ T5246] Bluetooth: hci4: command tx timeout [ 1613.253807][T17650] netlink: 'syz.0.2299': attribute type 1 has an invalid length. [ 1613.315683][T17653] serio: Serial port ptm0 [ 1613.328861][T17552] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.487645][T17660] loop2: detected capacity change from 0 to 512 [ 1613.529055][T17552] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.531586][T17660] EXT4-fs (loop2): blocks per group (8192) and clusters per group (32) inconsistent [ 1613.582623][T17664] loop0: detected capacity change from 0 to 512 [ 1613.590966][T17664] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1613.600336][T17664] EXT4-fs (loop0): blocks per group (3008) and clusters per group (32768) inconsistent [ 1613.956550][T17552] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.280518][T17682] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2305'. [ 1614.401023][T17682] gretap0: entered promiscuous mode [ 1615.106692][T17552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1615.117354][ T5246] Bluetooth: hci4: command tx timeout [ 1615.233711][T17552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1615.272698][T17698] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1615.319744][T17552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1615.353997][T17552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1615.581552][T12235] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1615.845646][T17552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.966265][T17552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.029700][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.037061][T10461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.152682][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.160045][T10461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.431125][T17552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1617.418603][ T5300] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1617.461374][T12235] usb 1-1: Using ep0 maxpacket: 16 [ 1617.682139][T12235] usb 1-1: too many configurations: 226, using maximum allowed: 8 [ 1617.691836][T17552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.723671][T12235] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1617.747079][T12235] usb 1-1: can't read configurations, error -61 [ 1617.881431][ T5300] usb 5-1: Using ep0 maxpacket: 16 [ 1617.892598][ T5300] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1617.931568][T12235] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1617.940748][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.002990][ T5300] usb 5-1: config 0 descriptor?? [ 1618.047553][ T5300] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1618.589152][T12235] usb 1-1: device not accepting address 24, error -71 [ 1618.745393][ T5300] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1619.421699][T12235] usb usb1-port1: attempt power cycle [ 1619.427453][ T5300] sq905c 5-1:0.0: Get version command failed [ 1619.441495][ T5300] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 1620.043649][T17739] tipc: Enabling of bearer rejected, failed to enable media [ 1620.296994][T17552] veth0_vlan: entered promiscuous mode [ 1620.427029][T17552] veth1_vlan: entered promiscuous mode [ 1620.504748][ T5299] usb 5-1: USB disconnect, device number 34 [ 1620.740294][T17552] veth0_macvtap: entered promiscuous mode [ 1620.792428][T17552] veth1_macvtap: entered promiscuous mode [ 1620.875045][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1620.905356][T17748] loop4: detected capacity change from 0 to 512 [ 1620.923720][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.940484][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1620.997569][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.030986][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1621.107464][T17748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.142381][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.206077][T17748] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1621.220213][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1621.281409][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.324129][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1621.324868][T17753] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1621.371653][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.399500][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1621.451392][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.493315][T17552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1621.553597][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.572955][T15844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.611400][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.651519][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.689558][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.700219][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.748579][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.797355][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.808124][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.822013][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.839265][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.859055][T17552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.907578][T17552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.037374][T17552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1622.868417][T17552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.906265][T17552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.928459][T17552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.961647][T17552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.005016][T17758] netlink: 'syz.0.2330': attribute type 10 has an invalid length. [ 1623.041214][T17758] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2330'. [ 1623.080693][T17741] loop3: detected capacity change from 0 to 40427 [ 1623.112613][T17741] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1623.139320][T17741] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1623.181523][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1623.200450][T17741] F2FS-fs (loop3): invalid crc value [ 1623.218045][T17741] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 1623.481465][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1624.441493][ T25] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 1624.515472][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1624.547214][ T25] usb 2-1: can't read configurations, error -61 [ 1624.641087][T17787] loop0: detected capacity change from 0 to 512 [ 1624.658873][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.692662][T17787] ext2: Unknown parameter 'smackfstransmute' [ 1624.698988][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.741694][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1625.048587][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.218335][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.131704][ T25] usb 2-1: device not accepting address 26, error -71 [ 1626.162355][ T25] usb usb2-port1: attempt power cycle [ 1626.349624][T17798] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1626.400042][T12235] libceph: connect (1)[c::]:6789 error -22 [ 1626.409030][T12235] libceph: mon0 (1)[c::]:6789 connect error [ 1626.428206][T12235] libceph: connect (1)[c::]:6789 error -22 [ 1626.437034][T12235] libceph: mon0 (1)[c::]:6789 connect error [ 1626.762166][T12235] libceph: connect (1)[c::]:6789 error -22 [ 1626.768242][T12235] libceph: mon0 (1)[c::]:6789 connect error [ 1626.902726][T17837] syz.5.2351[17837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1626.903749][T17837] syz.5.2351[17837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1627.400403][ T25] libceph: connect (1)[c::]:6789 error -22 [ 1627.424019][T12235] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1627.471542][T17818] ceph: No mds server is up or the cluster is laggy [ 1627.556588][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1627.793252][T12235] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1627.827863][T12235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.858921][T12235] usb 4-1: Product: syz [ 1627.889550][T12235] usb 4-1: Manufacturer: syz [ 1627.921467][T12235] usb 4-1: SerialNumber: syz [ 1627.958973][T12235] usb 4-1: config 0 descriptor?? [ 1627.997763][T12235] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 1628.303784][ T5300] usb 4-1: USB disconnect, device number 23 [ 1628.588967][T17825] loop4: detected capacity change from 0 to 40427 [ 1628.598095][T17825] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1628.605900][T17825] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1628.606007][T15905] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1628.627588][T17825] F2FS-fs (loop4): invalid crc value [ 1628.637800][T17825] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1628.699877][T12235] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1628.901450][T15905] usb 3-1: Using ep0 maxpacket: 16 [ 1629.587664][T15905] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 1629.685059][T15905] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1629.723804][T15905] usb 3-1: can't read configurations, error -61 [ 1629.775019][T12235] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 1629.800473][T12235] usb 1-1: config 0 has no interface number 0 [ 1629.879816][T12235] usb 1-1: New USB device found, idVendor=050d, idProduct=0128, bcdDevice=bc.ae [ 1629.911715][T15905] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1629.957054][T12235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.005928][T12235] usb 1-1: Product: syz [ 1630.010237][T12235] usb 1-1: Manufacturer: syz [ 1630.026857][T12235] usb 1-1: SerialNumber: syz [ 1630.038600][T12235] usb 1-1: config 0 descriptor?? [ 1630.052947][T12235] ax88179_178a 1-1:0.65: probe with driver ax88179_178a failed with error -22 [ 1630.112133][T15905] usb 3-1: Using ep0 maxpacket: 16 [ 1630.136707][T15905] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 1630.194057][T15905] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1630.211546][T15905] usb 3-1: can't read configurations, error -61 [ 1630.241960][T15905] usb usb3-port1: attempt power cycle [ 1630.315090][T17880] @: renamed from veth0_vlan (while UP) [ 1630.421049][T17884] loop1: detected capacity change from 0 to 512 [ 1630.449334][T17884] ext2: Unknown parameter 'smackfstransmute' [ 1630.571940][T17888] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2373'. [ 1630.760372][T12235] usb 1-1: USB disconnect, device number 26 [ 1630.898988][T15905] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1631.826666][T15905] usb 3-1: device descriptor read/8, error -71 [ 1631.941724][T12235] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1632.211490][T12235] usb 1-1: Using ep0 maxpacket: 32 [ 1632.236739][T12235] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1632.271398][T12235] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1632.290891][T12235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.311679][T12235] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1632.334422][T12235] usb 1-1: config 1 has no interface number 0 [ 1632.360623][T12235] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1632.376843][T12235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.401500][ T934] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1632.413430][T12235] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1632.687278][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1634.001564][ T934] usb 4-1: Using ep0 maxpacket: 16 [ 1634.056590][T17922] loop2: detected capacity change from 0 to 512 [ 1635.151167][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1635.158276][T12235] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 1635.248352][T12235] snd_usb_pod 1-1:1.1: invalid control EP [ 1635.272884][T17922] ext2: Unknown parameter 'smackfstransmute' [ 1635.340943][T12235] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 1635.406183][T12235] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1635.456222][ T25] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1635.504618][T12235] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1636.089682][ T25] usb 5-1: can't read configurations, error -71 [ 1636.139990][T12235] usb 1-1: USB disconnect, device number 27 [ 1636.219599][ T934] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1636.238165][T17927] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2387'. [ 1636.247373][ T934] usb 4-1: can't read configurations, error -71 [ 1637.371389][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1637.652446][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1637.663008][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1637.691659][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.724075][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.750225][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1637.774680][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1637.789693][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.810904][ T25] usb 5-1: config 0 descriptor?? [ 1638.043186][T17939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.065185][T17939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.077772][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 1638.088581][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1638.106787][ T25] usb 5-1: USB disconnect, device number 36 [ 1638.111539][ T5299] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1638.164943][ T934] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1638.173525][T17969] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1638.312455][ T5299] usb 2-1: Using ep0 maxpacket: 16 [ 1638.330409][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1638.351666][ T934] usb 4-1: Using ep0 maxpacket: 8 [ 1638.361090][ T934] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1638.370882][ T5299] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1638.378066][ T934] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.387899][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.404726][ T934] usb 4-1: config 179 has no interface number 0 [ 1638.411800][ T934] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1638.423682][ T934] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1638.429453][ T5299] usb 2-1: Product: syz [ 1638.435454][ T934] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1638.439262][ T5299] usb 2-1: Manufacturer: syz [ 1638.439285][ T5299] usb 2-1: SerialNumber: syz [ 1638.471243][ T5299] usb 2-1: config 0 descriptor?? [ 1638.473351][ T934] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1638.478670][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.506939][ T5299] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1638.512682][T17961] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1638.526527][ T5299] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1639.203822][ T5299] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1639.381667][T15905] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1639.422212][T17999] loop4: detected capacity change from 0 to 512 [ 1639.430833][T17999] ext2: Unknown parameter 'smackfstransmute' [ 1639.589570][T15905] usb 1-1: Using ep0 maxpacket: 16 [ 1639.621532][T15905] usb 1-1: config 0 has no interfaces? [ 1639.680541][T15905] usb 1-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 1639.718664][T15905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.762882][T15905] usb 1-1: Product: syz [ 1639.767125][T15905] usb 1-1: Manufacturer: syz [ 1639.778027][T18001] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2417'. [ 1639.810440][T15905] usb 1-1: SerialNumber: syz [ 1639.837754][T15905] usb 1-1: config 0 descriptor?? [ 1640.101584][ T5299] em28xx 2-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 1640.120378][ T5299] em28xx 2-1:0.0: failed to read eeprom (err=-5) [ 1640.140828][ T5299] em28xx 2-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1640.181478][ T5301] usb 1-1: USB disconnect, device number 28 [ 1640.351603][ T5299] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1640.375788][ T5299] em28xx 2-1:0.0: dvb set to bulk mode. [ 1640.389423][T13675] em28xx 2-1:0.0: Binding DVB extension [ 1640.407083][ T5299] usb 2-1: USB disconnect, device number 28 [ 1640.431960][ T5299] em28xx 2-1:0.0: Disconnecting em28xx [ 1640.589963][T13675] em28xx 2-1:0.0: Registering input extension [ 1640.630524][ T5299] em28xx 2-1:0.0: Closing input extension [ 1640.682019][ T5299] em28xx 2-1:0.0: Freeing device [ 1641.738398][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 1643.006358][ T25] usb 4-1: USB disconnect, device number 26 [ 1643.039604][T18022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2424'. [ 1643.635559][T18035] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2430'. [ 1645.091695][T15905] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1645.334425][T15905] usb 4-1: Using ep0 maxpacket: 16 [ 1645.501556][T15905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.513415][T15905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.525040][T15905] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1645.534456][T15905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.598564][T15905] usb 4-1: config 0 descriptor?? [ 1645.710340][T18068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2438'. [ 1646.225979][T15905] ntrig 0003:1B96:0008.0011: unbalanced collection at end of report description [ 1646.246939][T15905] ntrig 0003:1B96:0008.0011: parse failed [ 1646.258599][T15905] ntrig 0003:1B96:0008.0011: probe with driver ntrig failed with error -22 [ 1646.426019][ T934] usb 4-1: USB disconnect, device number 27 [ 1646.676344][T18081] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2444'. [ 1649.444150][ T5344] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1649.518234][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1649.530472][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1649.538415][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1649.554197][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1649.594461][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1649.613934][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1649.667760][ T5344] usb 6-1: Using ep0 maxpacket: 16 [ 1649.675903][ T5344] usb 6-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1649.685619][ T5344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.697297][ T5344] usb 6-1: config 0 descriptor?? [ 1649.709779][ T5344] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1650.223874][ T5344] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1650.232937][ T5344] sq905c 6-1:0.0: Get version command failed [ 1650.239115][ T5344] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 1651.154986][T18117] chnl_net:caif_netlink_parms(): no params data found [ 1651.307685][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 1651.439974][T18117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.470717][T18117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.491673][T18117] bridge_slave_0: entered allmulticast mode [ 1651.529677][T18117] bridge_slave_0: entered promiscuous mode [ 1651.565297][T18117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.599140][T18117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.640355][T18117] bridge_slave_1: entered allmulticast mode [ 1651.666769][T18117] bridge_slave_1: entered promiscuous mode [ 1651.682248][ T5238] Bluetooth: hci5: command tx timeout [ 1651.885116][T18117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.934654][T18117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.063837][ T5344] usb 6-1: USB disconnect, device number 17 [ 1652.067375][T18117] team0: Port device team_slave_0 added [ 1652.118391][T18117] team0: Port device team_slave_1 added [ 1652.285935][T18185] loop0: detected capacity change from 0 to 512 [ 1652.350948][T18117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.383892][T18117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.466222][T18185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1652.568212][T18117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.581690][T18117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.588659][T18117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.615762][T18117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.646883][T18185] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1652.672768][T18195] tipc: Started in network mode [ 1652.677698][T18195] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1652.687635][T18195] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1652.699492][T18195] tipc: Enabled bearer , priority 10 [ 1652.776805][ T29] audit: type=1804 audit(1725221288.787:245): pid=18185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2486" name="/newroot/157/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 1652.911603][ T5344] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1653.429470][T18194] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1653.551484][ T5344] usb 6-1: Using ep0 maxpacket: 8 [ 1653.595916][ T5344] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.613968][T15842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.628185][ T5344] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.640603][T18117] hsr_slave_0: entered promiscuous mode [ 1653.653681][T18117] hsr_slave_1: entered promiscuous mode [ 1653.685514][ T5344] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1653.743906][ T5344] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1653.753749][ T5238] Bluetooth: hci5: command tx timeout [ 1653.771329][ T5344] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1653.781438][ T5344] usb 6-1: Manufacturer: syz [ 1653.786057][ T5344] usb 6-1: SerialNumber: syz [ 1653.810685][T18117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1653.821542][ T934] tipc: Node number set to 1 [ 1653.831060][T18117] Cannot create hsr debugfs directory [ 1654.496283][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1654.693454][T18117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.711667][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1654.732791][ T25] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1654.766220][ T25] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1654.817883][ T5344] cdc_ncm 6-1:1.0: bind() failure [ 1654.825598][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.852454][ T5344] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1654.868968][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1654.893622][ T5344] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1654.910122][ T25] usb 4-1: config 1 has no interface number 0 [ 1654.926535][ T25] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1654.936049][ T5344] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1654.959798][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.178464][ T5344] usb 6-1: USB disconnect, device number 18 [ 1655.188658][T18117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.200804][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1655.271835][T18228] tipc: Started in network mode [ 1655.276837][T18228] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1655.286324][T18228] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1655.299401][T18228] tipc: Enabled bearer , priority 10 [ 1655.394827][T18117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.454333][ T25] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1655.488488][ T25] snd_usb_pod 4-1:1.1: invalid control EP [ 1655.518326][ T25] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1655.551137][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1655.598647][ T25] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1655.941528][ T5238] Bluetooth: hci5: command tx timeout [ 1656.019379][T18117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.045202][T18230] loop4: detected capacity change from 0 to 512 [ 1656.119515][T18230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1656.189970][T18230] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1656.411757][ T25] tipc: Node number set to 1 [ 1656.556720][T15844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.812041][T18117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1656.853426][T18117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1656.940554][T18117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1657.019159][T18117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1657.248860][ T5344] usb 4-1: USB disconnect, device number 28 [ 1657.764754][T18117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1657.927214][T18117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1657.993009][ T5238] Bluetooth: hci5: command tx timeout [ 1658.013397][T14839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.020587][T14839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.095122][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.102413][T14839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.302379][T18287] IPVS: length: 186 != 8 [ 1658.733450][T10357] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1658.847412][T18117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.968911][T10357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.009741][T10357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.028161][T18117] veth0_vlan: entered promiscuous mode [ 1659.057488][T10357] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1659.084812][T10357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.095713][T18117] veth1_vlan: entered promiscuous mode [ 1659.107851][T10357] usb 2-1: config 0 descriptor?? [ 1659.207516][T18117] veth0_macvtap: entered promiscuous mode [ 1659.275796][T18117] veth1_macvtap: entered promiscuous mode [ 1659.334940][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.371860][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.411963][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.437075][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.456779][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.473034][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.491101][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.530079][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.552277][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.563222][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.577707][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.594913][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.615288][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.639877][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.682785][T18117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.785867][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.892378][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.907738][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.918538][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.929364][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.940534][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.053633][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.300220][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.552986][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.790205][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.854976][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.866374][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.883363][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.916914][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.954531][T18117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.071376][T18117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.122277][T18117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.160724][T18117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.202996][T18117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.914591][T15905] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1661.974416][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.011464][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.115043][T10357] usbhid 2-1:0.0: can't add hid device: -71 [ 1662.139061][T10357] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1662.162284][T15905] usb 1-1: Using ep0 maxpacket: 16 [ 1662.212634][T15905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1662.224714][T10357] usb 2-1: USB disconnect, device number 29 [ 1662.257126][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.281718][T15905] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1662.301365][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.303758][T15905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.343448][T15905] usb 1-1: Product: syz [ 1662.347777][T15905] usb 1-1: Manufacturer: syz [ 1662.374906][T15905] usb 1-1: SerialNumber: syz [ 1662.389758][T15905] usb 1-1: config 0 descriptor?? [ 1662.408915][T15905] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1662.421035][T15905] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1662.559507][T18365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1663.014219][T15905] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1663.866485][T15905] em28xx 1-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 1663.941383][T15905] em28xx 1-1:0.0: failed to read eeprom (err=-5) [ 1663.971394][T15905] em28xx 1-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1664.091396][T15905] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1664.138572][T15905] em28xx 1-1:0.0: dvb set to bulk mode. [ 1664.147171][T16021] em28xx 1-1:0.0: Binding DVB extension [ 1664.269819][T15905] usb 1-1: USB disconnect, device number 29 [ 1664.366032][T15905] em28xx 1-1:0.0: Disconnecting em28xx [ 1665.064531][T16021] em28xx 1-1:0.0: Registering input extension [ 1665.081543][T15905] em28xx 1-1:0.0: Closing input extension [ 1665.146917][T15905] em28xx 1-1:0.0: Freeing device [ 1665.479570][T18420] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1665.871648][T18437] loop0: detected capacity change from 0 to 512 [ 1666.065828][T18437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.159650][T18437] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1666.321464][T18437] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1666.351562][ T29] audit: type=1804 audit(1725221302.327:246): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2584" name="/newroot/170/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 1666.384057][T18437] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1666.407117][T18437] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1666.407117][T18437] [ 1666.429703][T18437] EXT4-fs (loop0): Total free blocks count 0 [ 1666.539730][T18437] EXT4-fs (loop0): Free/Dirty block details [ 1666.550970][T18437] EXT4-fs (loop0): free_blocks=65280 [ 1666.617721][T18437] EXT4-fs (loop0): dirty_blocks=32 [ 1667.264900][T18437] EXT4-fs (loop0): Block reservation details [ 1667.289205][T18437] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 1667.314939][T18450] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 11 with error 28 [ 1667.867468][T18472] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1668.395182][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.411669][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.457549][T18500] tipc: Started in network mode [ 1668.462512][T18500] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1668.471949][T18500] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1668.480245][T18500] tipc: Enabled bearer , priority 10 [ 1669.534140][T18532] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1669.603985][T15905] tipc: Node number set to 1 [ 1669.613331][T18536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2625'. [ 1669.643598][T18536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1669.651877][T18536] IPv6: NLM_F_CREATE should be set when creating new route [ 1670.065144][T18549] tipc: Enabling of bearer rejected, already enabled [ 1670.259582][T18553] loop4: detected capacity change from 0 to 512 [ 1670.320806][T18553] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 1671.565596][T18597] loop4: detected capacity change from 0 to 512 [ 1671.626464][T18597] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 1671.824757][T18603] tipc: Enabling of bearer rejected, already enabled [ 1672.876121][T18637] loop1: detected capacity change from 0 to 512 [ 1672.897970][T18637] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 1673.437770][T18647] tipc: Enabling of bearer rejected, already enabled [ 1674.015151][T18674] loop0: detected capacity change from 0 to 512 [ 1674.030289][T18674] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 1674.261654][T10357] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1674.271457][T15905] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1674.479274][T15905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.490583][T10357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.539229][T15905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.559875][T10357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.593257][T18685] tipc: Started in network mode [ 1674.598346][T18685] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1674.607621][T18685] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1674.616536][T18685] tipc: Enabled bearer , priority 10 [ 1674.619547][T15905] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1674.768539][T10357] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1674.778133][T10357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.788294][T15905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.804832][T10357] usb 2-1: config 0 descriptor?? [ 1674.817299][T15905] usb 6-1: config 0 descriptor?? [ 1675.270610][T18701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2700'. [ 1675.307894][T18701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1675.315411][T18701] IPv6: NLM_F_CREATE should be set when creating new route [ 1675.671656][ T934] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1675.768433][ T5344] tipc: Node number set to 1 [ 1675.966417][ T934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.140246][ T934] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1676.326730][ T934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.635349][ T934] usb 1-1: config 0 descriptor?? [ 1676.845453][T18713] loop4: detected capacity change from 0 to 512 [ 1676.898827][T18713] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 1677.093845][T15905] usbhid 6-1:0.0: can't add hid device: -71 [ 1677.108058][T15905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1677.144620][T15905] usb 6-1: USB disconnect, device number 19 [ 1677.182572][ T934] usbhid 1-1:0.0: can't add hid device: -71 [ 1677.213809][ T934] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1677.249339][ T934] usb 1-1: USB disconnect, device number 30 [ 1677.658034][T18736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2716'. [ 1677.692865][T18736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1677.700183][T18736] IPv6: NLM_F_CREATE should be set when creating new route [ 1677.895604][T10357] usbhid 2-1:0.0: can't add hid device: -71 [ 1677.944766][T10357] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1678.041384][T10357] usb 2-1: USB disconnect, device number 30 [ 1678.079480][T18752] loop3: detected capacity change from 0 to 512 [ 1678.122392][T18752] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 1678.294347][T18752] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2721'. [ 1678.614564][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1678.875558][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1679.181792][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1679.271864][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1679.321430][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.379175][ T25] usb 3-1: Product: syz [ 1679.419745][ T25] usb 3-1: Manufacturer: syz [ 1679.440030][ T25] usb 3-1: SerialNumber: syz [ 1679.493882][ T25] usb 3-1: config 0 descriptor?? [ 1679.518593][T18779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2735'. [ 1679.542132][ T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1679.562172][T18779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1679.598701][ T25] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1679.681887][T18403] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1679.920752][T18403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.946125][T18403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.964317][T18403] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1679.979581][T18403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.997404][T18797] loop4: detected capacity change from 0 to 512 [ 1680.013594][T18403] usb 2-1: config 0 descriptor?? [ 1680.033171][T18797] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 1680.114429][T18797] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2744'. [ 1680.150735][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1681.028766][ T25] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1681.283621][ T25] em28xx 3-1:0.0: board has no eeprom [ 1681.772534][ T25] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1681.812906][ T25] em28xx 3-1:0.0: dvb set to bulk mode. [ 1681.844119][ T5300] em28xx 3-1:0.0: Binding DVB extension [ 1681.860967][ T25] usb 3-1: USB disconnect, device number 19 [ 1681.890191][ T25] em28xx 3-1:0.0: Disconnecting em28xx [ 1681.893431][T18818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2753'. [ 1681.956575][T18818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1682.049003][ T5300] em28xx 3-1:0.0: Registering input extension [ 1682.078063][ T25] em28xx 3-1:0.0: Closing input extension [ 1682.134327][ T25] em28xx 3-1:0.0: Freeing device [ 1682.247492][T18830] loop2: detected capacity change from 0 to 512 [ 1682.281423][T18830] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 1682.362387][ T5300] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1682.362983][T18830] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2759'. [ 1682.581506][ T5300] usb 6-1: Using ep0 maxpacket: 16 [ 1682.600680][ T5300] usb 6-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1682.634188][ T5300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.688746][ T5300] usb 6-1: config 0 descriptor?? [ 1682.720981][ T5300] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1682.848104][T18403] usbhid 2-1:0.0: can't add hid device: -71 [ 1682.866540][T18403] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1682.877174][T18403] usb 2-1: USB disconnect, device number 31 [ 1682.931545][T18841] loop0: detected capacity change from 0 to 512 [ 1682.953145][T18841] ext2: Unknown parameter 'smackfstransmute' [ 1683.254976][ T5300] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1683.738599][ T5300] sq905c 6-1:0.0: Get version command failed [ 1683.818313][ T5300] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 1684.230102][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'. [ 1684.239642][T18854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1684.361766][ T937] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1684.477136][T18863] IPVS: length: 186 != 8 [ 1684.571834][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 1684.592061][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1684.620935][ T937] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1684.637562][T18867] loop0: detected capacity change from 0 to 512 [ 1684.651589][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.662334][ T937] usb 2-1: Product: syz [ 1684.666525][ T937] usb 2-1: Manufacturer: syz [ 1684.679120][ T937] usb 2-1: SerialNumber: syz [ 1684.698687][ T937] usb 2-1: config 0 descriptor?? [ 1684.713860][T18867] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 1684.735934][ T937] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1684.755852][ T937] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1684.779481][T18867] netlink: 'syz.0.2775': attribute type 72 has an invalid length. [ 1685.224025][T18403] usb 6-1: USB disconnect, device number 20 [ 1685.322564][T18879] fuse: Bad value for 'fd' [ 1685.432186][ T937] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1685.549374][T18886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2784'. [ 1685.604900][T18886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1685.791420][T18897] netlink: 'syz.5.2790': attribute type 72 has an invalid length. [ 1685.817429][T18900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.069558][ T937] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1686.100635][ T937] em28xx 2-1:0.0: board has no eeprom [ 1686.154329][T18914] fuse: Bad value for 'fd' [ 1686.175696][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1686.201369][ T937] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1686.224648][ T937] em28xx 2-1:0.0: dvb set to bulk mode. [ 1686.230311][T18403] em28xx 2-1:0.0: Binding DVB extension [ 1686.281897][ T937] usb 2-1: USB disconnect, device number 32 [ 1686.289057][ T937] em28xx 2-1:0.0: Disconnecting em28xx [ 1686.369465][T18403] em28xx 2-1:0.0: Registering input extension [ 1686.388199][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1686.394564][ T937] em28xx 2-1:0.0: Closing input extension [ 1686.399051][ T25] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1686.423268][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.442716][ T937] em28xx 2-1:0.0: Freeing device [ 1686.449686][ T25] usb 3-1: config 0 descriptor?? [ 1686.485460][ T25] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1686.588097][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2805'. [ 1686.618324][T18934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1686.625754][T18934] IPv6: NLM_F_CREATE should be set when creating new route [ 1687.017123][T18943] loop1: detected capacity change from 0 to 512 [ 1687.046053][ T25] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1687.055926][ T25] sq905c 3-1:0.0: Get version command failed [ 1687.062126][T18943] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 1687.071893][ T25] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 1687.921314][T18953] fuse: Bad value for 'fd' [ 1688.454865][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 1688.639586][T18977] tipc: Enabling of bearer rejected, already enabled [ 1688.964911][T18989] fuse: Bad value for 'fd' [ 1689.054555][T18403] usb 3-1: USB disconnect, device number 20 [ 1689.260678][T18995] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2831'. [ 1689.301905][T18995] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2831'. [ 1689.597425][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 1689.867157][T19022] fuse: Bad value for 'fd' [ 1690.041358][T13675] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1690.255230][T13675] usb 4-1: Using ep0 maxpacket: 8 [ 1690.275344][T13675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.295943][T13675] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1690.311567][T13675] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1690.341987][T13675] usb 4-1: Manufacturer: syz [ 1690.346633][T13675] usb 4-1: SerialNumber: syz [ 1690.709612][T19051] fuse: Bad value for 'fd' [ 1691.130995][T19070] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1691.513445][T13675] cdc_ncm 4-1:1.0: failed to get mac address [ 1691.574234][T13675] cdc_ncm 4-1:1.0: bind() failure [ 1691.636465][T13675] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1691.681561][T13675] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1691.689016][T19090] loop4: detected capacity change from 0 to 512 [ 1691.704996][T19090] ext2: Unknown parameter 'smackfstransmute' [ 1691.712448][T13675] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1691.781566][T13675] usb 4-1: USB disconnect, device number 29 [ 1691.803594][T19093] tipc: Enabling of bearer rejected, already enabled [ 1692.059684][T19099] loop4: detected capacity change from 0 to 512 [ 1692.122631][T19099] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 1692.251427][T19099] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2877'. [ 1692.698789][T19113] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1693.657719][ T29] audit: type=1400 audit(1725221329.667:247): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=19140 comm="syz.4.2897" [ 1693.679231][T19141] loop4: detected capacity change from 0 to 512 [ 1693.743046][T19141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1693.756745][T19141] ext4 filesystem being mounted at /218/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 1693.814441][T19141] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2897: Directory hole found for htree leaf block 0 [ 1693.990660][T15844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.595375][T19181] loop2: detected capacity change from 0 to 512 [ 1694.629110][T19181] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 1694.994432][T19186] loop1: detected capacity change from 0 to 512 [ 1695.021335][ T29] audit: type=1400 audit(1725221330.997:248): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=19185 comm="syz.1.2916" [ 1695.100462][T19186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1695.113365][T19186] ext4 filesystem being mounted at /102/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 1695.163203][T19186] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.2916: Directory hole found for htree leaf block 0 [ 1695.625255][T17305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.682538][T18403] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1695.702893][T19203] tipc: Enabling of bearer rejected, already enabled [ 1695.779126][T19208] loop2: detected capacity change from 0 to 512 [ 1695.786555][T19208] ext2: Unknown parameter 'smackfstransmute' [ 1695.922450][T18403] usb 1-1: Using ep0 maxpacket: 16 [ 1695.952813][T18403] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1695.995374][T18403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1696.037469][T19215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2930'. [ 1696.041303][T18403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1696.081310][T18403] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1696.088381][T19215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2930'. [ 1696.110862][T18403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.148067][T19220] loop3: detected capacity change from 0 to 512 [ 1696.159796][T18403] usb 1-1: config 0 descriptor?? [ 1696.182056][T19220] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 1696.568374][T19232] fuse: Bad value for 'rootmode' [ 1696.643871][T18403] input: HID 0458:5005 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5005.0012/input/input21 [ 1696.686373][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1696.773863][T18403] input: HID 0458:5005 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5005.0012/input/input22 [ 1696.922787][T18403] kye 0003:0458:5005.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0 [ 1697.002777][T18403] usb 1-1: USB disconnect, device number 31 [ 1697.206611][T19255] loop3: detected capacity change from 0 to 512 [ 1697.237984][T19249] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1697.306304][T19255] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 1697.621695][T19267] fuse: Bad value for 'rootmode' [ 1697.926824][ T934] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1698.614688][ T934] usb 5-1: Using ep0 maxpacket: 8 [ 1698.645478][ T934] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.670287][ T934] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1698.690274][ T934] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1698.719943][ T934] usb 5-1: Manufacturer: syz [ 1698.730094][ T934] usb 5-1: SerialNumber: syz [ 1699.362547][ T934] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1699.378913][ T934] cdc_ncm 5-1:1.0: bind() failure [ 1699.391627][T19301] fuse: Bad value for 'rootmode' [ 1699.397215][ T934] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1699.434583][ T934] cdc_ncm 5-1:1.1: bind() failure [ 1700.395425][T19336] loop3: detected capacity change from 0 to 512 [ 1700.469564][T19336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1700.484819][T19336] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.564421][ T29] audit: type=1804 audit(1725221336.577:249): pid=19336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2983" name="/newroot/251/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 1700.613466][T13675] usb 5-1: USB disconnect, device number 37 [ 1700.753915][T15835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.662199][T13675] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1701.760398][T19382] loop1: detected capacity change from 0 to 512 [ 1701.810106][T19382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1701.855100][T19382] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1701.904796][T13675] usb 4-1: Using ep0 maxpacket: 8 [ 1701.935850][T13675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.992757][T13675] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1702.021741][T13675] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1702.061559][T13675] usb 4-1: Manufacturer: syz [ 1702.076766][ T29] audit: type=1804 audit(1725221338.087:250): pid=19382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3001" name="/newroot/123/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 1702.101871][T13675] usb 4-1: SerialNumber: syz [ 1702.239296][T17305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1702.778943][T13675] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1702.790416][T13675] cdc_ncm 4-1:1.0: bind() failure [ 1702.819535][T13675] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1702.848320][T13675] cdc_ncm 4-1:1.1: bind() failure [ 1704.373580][T19459] "syz.2.3033" (19459) uses obsolete ecb(arc4) skcipher [ 1704.433580][ T934] usb 4-1: USB disconnect, device number 30 [ 1704.581347][T13675] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1704.591399][T19481] misc userio: Invalid payload size [ 1704.792008][T13675] usb 1-1: Using ep0 maxpacket: 16 [ 1704.831824][T13675] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1704.858682][T13675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.902552][T13675] usb 1-1: config 0 descriptor?? [ 1704.925547][T13675] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1705.474144][T13675] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1705.485020][T13675] sq905c 1-1:0.0: Get version command failed [ 1705.495210][T13675] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 1705.512427][T19510] loop1: detected capacity change from 0 to 64 [ 1705.551356][ T25] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1705.851573][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1706.035800][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1706.294754][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1706.324482][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.348883][ T25] usb 3-1: Product: syz [ 1706.363970][ T25] usb 3-1: Manufacturer: syz [ 1706.377895][ T25] usb 3-1: SerialNumber: syz [ 1706.400655][ T25] usb 3-1: config 0 descriptor?? [ 1706.420632][ T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1706.440311][ T25] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1707.174983][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1707.379295][ T5344] usb 1-1: USB disconnect, device number 32 [ 1707.835255][T19498] loop3: detected capacity change from 0 to 40427 [ 1707.862429][T19498] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1707.881496][T19498] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1707.916531][T19498] F2FS-fs (loop3): invalid crc value [ 1707.978653][T19498] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1708.111405][ T25] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1708.121392][ T25] em28xx 3-1:0.0: board has no eeprom [ 1708.226576][ T25] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1708.263102][ T25] em28xx 3-1:0.0: dvb set to bulk mode. [ 1708.268868][ T5344] em28xx 3-1:0.0: Binding DVB extension [ 1708.329694][ T25] usb 3-1: USB disconnect, device number 21 [ 1708.344557][ T25] em28xx 3-1:0.0: Disconnecting em28xx [ 1708.482791][ T5344] em28xx 3-1:0.0: Registering input extension [ 1708.489446][ T25] em28xx 3-1:0.0: Closing input extension [ 1708.534879][ T25] em28xx 3-1:0.0: Freeing device [ 1709.114382][ T5344] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1709.524194][ T5344] usb 2-1: Using ep0 maxpacket: 16 [ 1709.661906][T19562] IPVS: length: 186 != 8 [ 1709.666365][ T5344] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1709.731462][ T5344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.794207][ T5344] usb 2-1: config 0 descriptor?? [ 1709.824276][ T5344] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1709.885181][T19567] loop3: detected capacity change from 0 to 64 [ 1710.354668][ T5344] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1710.407997][ T5344] sq905c 2-1:0.0: Get version command failed [ 1710.562144][ T5344] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1711.435532][ T5246] Bluetooth: hci3: command 0x0406 tx timeout [ 1711.589519][T13675] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1711.881432][T13675] usb 4-1: Using ep0 maxpacket: 16 [ 1711.931742][T13675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1712.142653][T13675] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1712.181468][ T5344] usb 2-1: USB disconnect, device number 33 [ 1712.291877][T19603] IPVS: length: 186 != 8 [ 1712.313022][T13675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.381323][T13675] usb 4-1: Product: syz [ 1712.391340][T13675] usb 4-1: Manufacturer: syz [ 1712.406233][T13675] usb 4-1: SerialNumber: syz [ 1712.425538][T13675] usb 4-1: config 0 descriptor?? [ 1712.444753][T13675] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1712.490279][T13675] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1712.632915][T19607] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1713.069455][T13675] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1713.436696][ T937] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1713.752441][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 1713.831694][T19642] IPVS: length: 186 != 8 [ 1713.860033][ T937] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1713.872114][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.945026][ T937] usb 1-1: config 0 descriptor?? [ 1713.956496][ T937] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1714.140372][T13675] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1714.159159][T13675] em28xx 4-1:0.0: board has no eeprom [ 1714.274362][T13675] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1714.325906][T13675] em28xx 4-1:0.0: dvb set to bulk mode. [ 1714.356363][T18403] em28xx 4-1:0.0: Binding DVB extension [ 1714.419089][T13675] usb 4-1: USB disconnect, device number 31 [ 1714.471015][T13675] em28xx 4-1:0.0: Disconnecting em28xx [ 1714.495410][ T937] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1714.516826][T18403] em28xx 4-1:0.0: Registering input extension [ 1714.524091][ T937] sq905c 1-1:0.0: Get version command failed [ 1714.535984][T13675] em28xx 4-1:0.0: Closing input extension [ 1714.542860][ T937] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 1715.180189][T13675] em28xx 4-1:0.0: Freeing device [ 1715.645508][T19662] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1716.309107][ T25] usb 1-1: USB disconnect, device number 33 [ 1716.682966][T19686] IPVS: length: 186 != 8 [ 1717.071501][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1717.096181][T19709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3138'. [ 1717.303332][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.314635][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.338740][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1717.379848][T19724] IPVS: length: 186 != 8 [ 1717.380447][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.420853][ T25] usb 2-1: config 0 descriptor?? [ 1717.431668][T10324] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1717.622502][T10324] usb 3-1: Using ep0 maxpacket: 16 [ 1717.633177][T10324] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1717.651497][T10324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.694921][T10324] usb 3-1: config 0 descriptor?? [ 1717.725329][T10324] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1717.774213][ C1] hrtimer: interrupt took 154321 ns [ 1717.890858][T19743] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3155'. [ 1718.248919][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1718.265077][T19751] IPVS: length: 186 != 8 [ 1718.323269][T10324] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1718.331924][T10324] sq905c 3-1:0.0: Get version command failed [ 1718.340319][T10324] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 1719.261906][ T25] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0013/input/input25 [ 1719.348970][ T25] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0013/input/input26 [ 1719.410428][ T25] uclogic 0003:256C:006D.0013: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1719.479916][T13675] usb 2-1: USB disconnect, device number 34 [ 1719.700714][T19776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3169'. [ 1719.779622][T19779] serio: Serial port pts1 [ 1720.289771][ T25] usb 3-1: USB disconnect, device number 22 [ 1720.310592][T19794] tipc: Enabling of bearer rejected, already enabled [ 1720.810352][T19809] syz.4.3182 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1721.534683][ T937] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1721.756758][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 1721.773728][ T937] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1721.801435][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.832392][ T937] usb 5-1: config 0 descriptor?? [ 1721.851703][ T937] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1721.944549][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1722.407278][ T937] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1722.420891][ T937] sq905c 5-1:0.0: Get version command failed [ 1722.427062][ T937] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 1724.266223][ T25] usb 5-1: USB disconnect, device number 38 [ 1724.301402][T15905] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1724.534585][T15905] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1724.541817][T10324] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1724.555368][T15905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1724.586983][T15905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1724.621087][T15905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1724.654893][T15905] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1724.681312][T15905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.704521][T15905] usb 3-1: config 0 descriptor?? [ 1724.771693][T10324] usb 2-1: Using ep0 maxpacket: 16 [ 1724.779412][T10324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1724.818453][T10324] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1724.850773][T10324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.891467][T10324] usb 2-1: Product: syz [ 1724.895686][T10324] usb 2-1: Manufacturer: syz [ 1724.900312][T10324] usb 2-1: SerialNumber: syz [ 1724.936065][T10324] usb 2-1: config 0 descriptor?? [ 1724.975178][T10324] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1725.012158][T10324] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1725.136343][T15905] usbhid 3-1:0.0: can't add hid device: -71 [ 1725.147270][T15905] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1725.186166][T15905] usb 3-1: USB disconnect, device number 23 [ 1725.449428][T19896] tipc: Enabling of bearer rejected, already enabled [ 1725.942111][T10324] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1726.470780][ T937] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1726.673015][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 1726.729293][ T937] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1726.915145][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.191945][ T937] usb 1-1: config 0 descriptor?? [ 1727.238012][ T937] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1727.398396][T10324] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1727.421361][T10324] em28xx 2-1:0.0: board has no eeprom [ 1727.719223][T10324] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1727.728721][T10324] em28xx 2-1:0.0: dvb set to bulk mode. [ 1727.735270][ T25] em28xx 2-1:0.0: Binding DVB extension [ 1727.751851][T10324] usb 2-1: USB disconnect, device number 35 [ 1727.759232][T10324] em28xx 2-1:0.0: Disconnecting em28xx [ 1727.781369][ T937] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1727.915403][ T937] sq905c 1-1:0.0: Get version command failed [ 1728.099034][ T937] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 1728.632843][ T25] em28xx 2-1:0.0: Registering input extension [ 1728.639549][T10324] em28xx 2-1:0.0: Closing input extension [ 1728.655274][T10324] em28xx 2-1:0.0: Freeing device [ 1729.869487][ T25] usb 1-1: USB disconnect, device number 34 [ 1729.908997][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.921376][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.472077][ T5300] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1730.541459][T10324] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1730.584549][T20001] raw_sendmsg: syz.4.3263 forgot to set AF_INET. Fix it! [ 1730.667071][ T5300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.678503][ T5300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.711634][ T5300] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1730.746212][ T5300] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.755931][T10324] usb 4-1: Using ep0 maxpacket: 16 [ 1730.770470][T10324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1730.789218][ T5300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.802345][T10324] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1730.811809][T10324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.819823][T10324] usb 4-1: Product: syz [ 1730.826969][ T5300] usb 6-1: config 0 descriptor?? [ 1730.830301][T20011] fuse: Unknown parameter '00000000000000000000004' [ 1730.833053][T10324] usb 4-1: Manufacturer: syz [ 1730.861452][T10324] usb 4-1: SerialNumber: syz [ 1730.890308][T10324] usb 4-1: config 0 descriptor?? [ 1730.920750][T10324] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1730.933544][T10324] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1731.011750][T18403] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1731.211410][T18403] usb 2-1: Using ep0 maxpacket: 16 [ 1731.219941][T18403] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1731.229685][T18403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.250580][T18403] usb 2-1: config 0 descriptor?? [ 1731.255226][ T5300] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1731.268311][T18403] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1731.268390][ T5300] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1731.288680][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1731.304400][ T5300] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 1731.334129][ T5300] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1731.484559][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1731.814043][T10324] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1731.826952][T18403] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1731.834683][ T25] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 1731.844509][T18403] sq905c 2-1:0.0: Get version command failed [ 1731.850609][T18403] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1732.037489][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 1732.551030][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1732.573802][ T25] usb 3-1: can't read configurations, error -61 [ 1732.598593][T18403] usb 6-1: USB disconnect, device number 21 [ 1732.624194][ T937] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1732.731406][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1732.829197][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.840910][ T937] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1732.862772][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.883565][ T937] usb 5-1: config 0 descriptor?? [ 1732.911449][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1732.927027][ T25] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 1732.937893][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1732.946052][ T25] usb 3-1: can't read configurations, error -61 [ 1732.953430][ T25] usb usb3-port1: attempt power cycle [ 1732.972122][T10324] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1732.988788][T10324] em28xx 4-1:0.0: board has no eeprom [ 1733.074834][T10324] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1733.098394][T10324] em28xx 4-1:0.0: dvb set to bulk mode. [ 1733.112409][T12235] em28xx 4-1:0.0: Binding DVB extension [ 1733.138677][T10324] usb 4-1: USB disconnect, device number 32 [ 1733.160559][T10324] em28xx 4-1:0.0: Disconnecting em28xx [ 1733.211928][T12235] em28xx 4-1:0.0: Registering input extension [ 1733.231605][T10324] em28xx 4-1:0.0: Closing input extension [ 1733.260385][T10324] em28xx 4-1:0.0: Freeing device [ 1733.371092][ T25] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1733.413204][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1733.419737][ T25] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 1733.460048][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1733.471180][ T25] usb 3-1: can't read configurations, error -61 [ 1733.499075][T20052] fuse: Unknown parameter '00000000000000000000004' [ 1733.653250][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1733.667865][ T937] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 1733.697492][ T937] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0015/input/input29 [ 1733.748623][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1733.756754][ T25] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 1733.757007][T18403] usb 2-1: USB disconnect, device number 36 [ 1733.964938][T15905] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1734.030841][ T937] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1734.067279][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1734.093548][ T937] usb 5-1: USB disconnect, device number 39 [ 1734.107054][ T25] usb 3-1: can't read configurations, error -71 [ 1734.127737][ T25] usb usb3-port1: unable to enumerate USB device [ 1734.157253][T15905] usb 6-1: device descriptor read/64, error -71 [ 1734.451631][T15905] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1734.611468][T15905] usb 6-1: device descriptor read/64, error -71 [ 1734.620778][T20092] fuse: Unknown parameter '00000000000000000000004' [ 1734.731860][T15905] usb usb6-port1: attempt power cycle [ 1734.862770][ T937] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1735.011569][T12235] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1735.097254][ T937] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1735.127187][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.153243][ T937] usb 2-1: Product: syz [ 1735.157449][ T937] usb 2-1: Manufacturer: syz [ 1735.163760][ T937] usb 2-1: SerialNumber: syz [ 1735.174797][ T937] usb 2-1: config 0 descriptor?? [ 1735.181675][T15905] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1735.191538][ T937] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 1735.212727][T12235] usb 1-1: Using ep0 maxpacket: 16 [ 1735.233561][T12235] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1735.235860][T15905] usb 6-1: device descriptor read/8, error -71 [ 1735.260230][T12235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.287737][T12235] usb 1-1: config 0 descriptor?? [ 1735.306992][T12235] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1735.406171][ T937] usb 2-1: USB disconnect, device number 37 [ 1735.564585][T15905] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1735.624287][T15905] usb 6-1: device descriptor read/8, error -71 [ 1735.764275][T15905] usb usb6-port1: unable to enumerate USB device [ 1735.824029][T20134] ALSA: seq fatal error: cannot create timer (-22) [ 1735.904638][T12235] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1735.919146][T12235] sq905c 1-1:0.0: Get version command failed [ 1735.926074][T12235] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 1737.734573][T15905] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1737.757376][T12235] usb 1-1: USB disconnect, device number 35 [ 1737.949531][T15905] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1737.989801][T15905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.029449][T15905] usb 6-1: Product: syz [ 1738.056089][T15905] usb 6-1: Manufacturer: syz [ 1738.060712][T15905] usb 6-1: SerialNumber: syz [ 1738.071548][ T937] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1738.100338][T15905] usb 6-1: config 0 descriptor?? [ 1738.109290][T15905] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 1738.251398][ T937] usb 4-1: device descriptor read/64, error -71 [ 1738.324509][T18403] usb 6-1: USB disconnect, device number 26 [ 1738.552052][ T937] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1738.722167][ T937] usb 4-1: device descriptor read/64, error -71 [ 1738.881903][ T937] usb usb4-port1: attempt power cycle [ 1739.031748][T13675] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1739.254823][T13675] usb 3-1: Using ep0 maxpacket: 16 [ 1739.277337][T13675] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1739.296894][T13675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.307845][ T937] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1739.337919][T13675] usb 3-1: config 0 descriptor?? [ 1739.350925][T13675] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1739.378025][ T937] usb 4-1: device descriptor read/8, error -71 [ 1739.582506][T20237] netlink: 'syz.1.3362': attribute type 27 has an invalid length. [ 1739.904062][T13675] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1739.918033][T13675] sq905c 3-1:0.0: Get version command failed [ 1739.924224][T13675] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 1740.727669][ T937] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1740.868585][T20237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.877063][T20237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.885967][ T937] usb 4-1: device descriptor read/8, error -71 [ 1741.032561][ T937] usb usb4-port1: unable to enumerate USB device [ 1741.411314][T20263] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1741.572102][T20237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.636066][T20237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1741.666876][T20263] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1741.694634][T20263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.722745][T20263] usb 6-1: Product: syz [ 1741.735816][T20263] usb 6-1: Manufacturer: syz [ 1741.891903][T20263] usb 6-1: SerialNumber: syz [ 1741.906736][ T8] usb 3-1: USB disconnect, device number 28 [ 1741.914104][T20263] usb 6-1: config 0 descriptor?? [ 1741.933654][T20263] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 1742.038912][T20284] loop2: detected capacity change from 0 to 64 [ 1742.209476][T20237] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.225436][ T5344] usb 6-1: USB disconnect, device number 27 [ 1742.271385][T20237] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.280314][T20237] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.341443][T20237] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.877873][T20238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1742.907664][T20238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1742.965999][T20238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1743.201342][T13675] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1743.371343][T13675] usb 6-1: device descriptor read/64, error -71 [ 1743.501492][T18403] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1743.651427][T13675] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1743.703473][T18403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.739077][T18403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1743.775670][T18403] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1743.808683][T18403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.831509][T13675] usb 6-1: device descriptor read/64, error -71 [ 1743.848115][T18403] usb 1-1: config 0 descriptor?? [ 1743.972165][T13675] usb usb6-port1: attempt power cycle [ 1744.741463][T13675] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1747.021635][T13675] usb 6-1: device descriptor read/8, error -71 [ 1747.542956][T20251] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1747.780436][T20251] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1747.827780][T20251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.867927][T20251] usb 2-1: Product: syz [ 1747.884037][T20251] usb 2-1: Manufacturer: syz [ 1747.899291][T20251] usb 2-1: SerialNumber: syz [ 1747.923006][T20251] usb 2-1: config 0 descriptor?? [ 1747.975382][T20251] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 1748.041776][T15905] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1748.144833][T18403] usbhid 1-1:0.0: can't add hid device: -71 [ 1748.159928][T18403] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1748.170284][T18403] usb 1-1: USB disconnect, device number 36 [ 1748.242378][T20251] usb 2-1: USB disconnect, device number 38 [ 1748.359587][T15905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1748.383419][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1748.397771][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1748.407059][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1748.414969][T15905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.444778][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1748.451280][T15905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1748.463860][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1748.473037][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1748.505181][T15905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1748.799334][T15905] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1748.812469][T15905] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1748.821641][T15905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.837299][T15905] usb 3-1: config 0 descriptor?? [ 1749.670935][T15905] ntrig 0003:1B96:000A.0016: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 1749.809418][T20349] chnl_net:caif_netlink_parms(): no params data found [ 1749.869602][T15905] usb 3-1: USB disconnect, device number 29 [ 1750.195025][T20349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.229225][T20349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.252173][T20349] bridge_slave_0: entered allmulticast mode [ 1750.278791][T20349] bridge_slave_0: entered promiscuous mode [ 1750.295083][T20349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.324020][T20349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.339090][T20349] bridge_slave_1: entered allmulticast mode [ 1750.350170][T20349] bridge_slave_1: entered promiscuous mode [ 1750.553347][ T5246] Bluetooth: hci1: command tx timeout [ 1750.712888][ T47] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1750.722802][T20349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.284753][T20349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.652845][T20349] team0: Port device team_slave_0 added [ 1751.689368][T20349] team0: Port device team_slave_1 added [ 1751.786650][ T47] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1751.814258][T20349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.821637][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.829940][ T47] usb 6-1: Product: syz [ 1751.842177][T20349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.868120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.878727][ T47] usb 6-1: Manufacturer: syz [ 1751.890232][ T47] usb 6-1: SerialNumber: syz [ 1751.899352][ T47] usb 6-1: config 0 descriptor?? [ 1751.904765][T20349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.918550][ T47] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 1751.932241][T20349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.939207][T20349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.965736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.989194][T20349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1752.061670][T15905] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1752.124728][T13675] usb 6-1: USB disconnect, device number 32 [ 1752.148088][T20349] hsr_slave_0: entered promiscuous mode [ 1752.183348][T20349] hsr_slave_1: entered promiscuous mode [ 1752.202435][T20349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1752.210642][T20349] Cannot create hsr debugfs directory [ 1752.278650][T20438] serio: Serial port pts0 [ 1752.283688][T15905] usb 4-1: Using ep0 maxpacket: 16 [ 1752.295417][T15905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1752.320856][T15905] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1752.340473][T15905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.352910][T15905] usb 4-1: Product: syz [ 1752.357268][T15905] usb 4-1: Manufacturer: syz [ 1752.377247][T15905] usb 4-1: SerialNumber: syz [ 1752.395766][T15905] usb 4-1: config 0 descriptor?? [ 1752.411517][T15905] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1752.444618][T15905] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1752.632276][ T5246] Bluetooth: hci1: command tx timeout [ 1752.810858][T20349] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.473422][T20349] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.551698][ T30] INFO: task syz.5.2216:17394 blocked for more than 143 seconds. [ 1753.559489][ T30] Not tainted 6.11.0-rc6-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1753.622305][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1753.638525][T15905] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1753.663964][ T30] task:syz.5.2216 state:D stack:25008 pid:17394 tgid:17392 ppid:16489 flags:0x00004006 [ 1753.711435][ T30] Call Trace: [ 1753.715153][ T30] [ 1753.732226][ T30] __schedule+0x1800/0x4a60 [ 1753.736939][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1753.815448][ T30] ? __pfx___schedule+0x10/0x10 [ 1753.820487][ T30] ? __blk_flush_plug+0x449/0x500 [ 1753.881262][ T30] ? __pfx_lock_release+0x10/0x10 [ 1753.886394][ T30] ? __blk_flush_plug+0x449/0x500 [ 1754.001641][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1754.007704][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1754.030516][ T30] ? schedule+0x90/0x320 [ 1754.034920][ T30] schedule+0x14b/0x320 [ 1754.039124][ T30] io_schedule+0x8d/0x110 [ 1754.048169][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1754.060074][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1754.067047][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1754.081302][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1754.086590][ T30] z_erofs_runqueue+0xa8c/0x2010 [ 1754.100809][ T30] ? __pfx_z_erofs_runqueue+0x10/0x10 [ 1754.106477][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1754.115995][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1754.120890][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1754.139543][ T30] ? lockref_put_or_lock+0x75/0xc0 [ 1754.145919][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1754.152535][ T30] z_erofs_readahead+0xbae/0xf00 [ 1754.157577][ T30] ? __pfx_z_erofs_readahead+0x10/0x10 [ 1754.174317][ T30] ? __pfx_lock_release+0x10/0x10 [ 1754.179471][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1754.191364][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1754.197036][ T30] ? blk_start_plug+0x70/0x1b0 [ 1754.206277][ T30] read_pages+0x180/0x840 [ 1754.210652][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 1754.216649][ T30] ? __pfx_read_pages+0x10/0x10 [ 1754.221646][ T30] ? filemap_add_folio+0x26d/0x650 [ 1754.226788][ T30] ? __pfx_filemap_add_folio+0x10/0x10 [ 1754.232428][ T30] page_cache_ra_unbounded+0x6ce/0x7f0 [ 1754.237921][ T30] force_page_cache_ra+0x280/0x2f0 [ 1754.243351][ T30] generic_fadvise+0x528/0x840 [ 1754.248170][ T30] ? __pfx_generic_fadvise+0x10/0x10 [ 1754.253608][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1754.259269][ T30] ? __fget_files+0x3f6/0x470 [ 1754.263385][T15905] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1754.264053][ T30] ? __fget_files+0x29/0x470 [ 1754.272525][T15905] em28xx 4-1:0.0: board has no eeprom [ 1754.276552][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1754.293251][ T30] __x64_sys_fadvise64+0x145/0x190 [ 1754.298505][ T30] do_syscall_64+0xf3/0x230 [ 1754.304861][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1754.310544][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.321773][ T30] RIP: 0033:0x7faa5f979eb9 [ 1754.326216][ T30] RSP: 002b:00007faa606c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 1754.334907][ T30] RAX: ffffffffffffffda RBX: 00007faa5fb15f80 RCX: 00007faa5f979eb9 [ 1754.342980][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1754.350957][ T30] RBP: 00007faa5f9e793e R08: 0000000000000000 R09: 0000000000000000 [ 1754.359010][ T30] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1754.367058][ T30] R13: 0000000000000000 R14: 00007faa5fb15f80 R15: 00007ffd39614ca8 [ 1754.375145][T15905] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1754.383029][T15905] em28xx 4-1:0.0: dvb set to bulk mode. [ 1754.387901][ T30] [ 1754.388619][T13675] em28xx 4-1:0.0: Binding DVB extension [ 1754.400826][ T30] [ 1754.400826][ T30] Showing all locks held in the system: [ 1754.403167][T15905] usb 4-1: USB disconnect, device number 37 [ 1754.463828][ T30] 1 lock held by khungtaskd/30: [ 1754.468763][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1754.531715][ T30] 3 locks held by kworker/1:1/47: [ 1754.536822][ T30] 2 locks held by kworker/u8:9/4578: [ 1754.601325][ T30] #0: ffff8880b893e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1754.681318][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 1754.746352][ T30] 2 locks held by getty/4985: [ 1754.751092][ T30] #0: ffff8880307c40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1754.781052][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1754.791736][ T5246] Bluetooth: hci1: command tx timeout [ 1754.804074][T13675] em28xx 4-1:0.0: Registering input extension [ 1754.822508][T15905] em28xx 4-1:0.0: Disconnecting em28xx [ 1754.829196][T15905] em28xx 4-1:0.0: Closing input extension [ 1754.857537][T15905] em28xx 4-1:0.0: Freeing device [ 1754.874080][ T30] 2 locks held by kworker/0:8/13675: [ 1754.879407][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1754.936068][ T30] #1: ffffc90004387d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1754.981506][ T30] 2 locks held by kworker/u8:2/14839: [ 1754.986943][ T30] 4 locks held by kworker/0:6/15905: [ 1755.011393][ T30] #0: ffff8880226ba548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1755.041325][ T30] #1: ffffc9000334fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1755.071796][ T30] #2: ffff888029852190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1755.080807][ T30] #3: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1755.115389][ T30] 1 lock held by syz.3.2073/16939: [ 1755.120545][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1755.129739][ T30] 1 lock held by syz.5.2216/17394: [ 1755.138538][ T30] #0: ffff8880600ec880 (mapping.invalidate_lock#10){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 1755.150866][ T30] 3 locks held by syz.1.2509/18249: [ 1755.156220][ T30] #0: ffff88806b918d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1755.166311][ T30] #1: ffff88806b918078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1755.179847][ T30] #2: ffffffff8fdf7828 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1755.190028][ T30] 2 locks held by syz.0.2537/18314: [ 1755.201304][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1755.212839][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1755.223915][ T30] 7 locks held by syz-executor/20349: [ 1755.229390][ T30] #0: ffff88802f0e8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1755.239404][ T30] #1: ffff8880605ad488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1755.249282][ T30] #2: ffff888028f230f8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1755.259445][ T30] #3: ffffffff8f526348 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1755.269822][ T30] #4: ffff88807a6b20e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1755.280665][ T30] #5: ffff88807a6b1250 (&devlink->lock_key#97){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1755.291462][ T30] #6: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 1755.301572][ T30] 3 locks held by syz.2.3433/20435: [ 1755.306788][ T30] #0: ffff888034d18d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1755.316879][ T30] #1: ffff888034d18078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1755.326671][ T30] #2: ffffffff8fdf7828 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1755.336807][ T30] 1 lock held by syz.5.3438/20452: [ 1755.345539][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1755.391299][ T30] [ 1755.393940][ T30] ============================================= [ 1755.393940][ T30] [ 1755.454247][ T30] NMI backtrace for cpu 1 [ 1755.458640][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller #0 [ 1755.467424][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1755.477504][ T30] Call Trace: [ 1755.480795][ T30] [ 1755.483746][ T30] dump_stack_lvl+0x241/0x360 [ 1755.488813][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1755.494127][ T30] ? __pfx__printk+0x10/0x10 [ 1755.498731][ T30] ? vprintk_emit+0x667/0x7c0 [ 1755.503450][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1755.508505][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1755.513564][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1755.519162][ T30] ? _printk+0xd5/0x120 [ 1755.523515][ T30] ? __pfx__printk+0x10/0x10 [ 1755.528112][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1755.533153][ T30] ? __pfx__printk+0x10/0x10 [ 1755.537751][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.543402][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1755.548444][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1755.554446][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1755.560448][ T30] watchdog+0xff4/0x1040 [ 1755.564713][ T30] ? watchdog+0x1ea/0x1040 [ 1755.569150][ T30] ? __pfx_watchdog+0x10/0x10 [ 1755.573840][ T30] kthread+0x2f2/0x390 [ 1755.577925][ T30] ? __pfx_watchdog+0x10/0x10 [ 1755.582617][ T30] ? __pfx_kthread+0x10/0x10 [ 1755.587229][ T30] ret_from_fork+0x4d/0x80 [ 1755.591662][ T30] ? __pfx_kthread+0x10/0x10 [ 1755.596447][ T30] ret_from_fork_asm+0x1a/0x30 [ 1755.601245][ T30] [ 1755.604681][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1755.609909][ C0] NMI backtrace for cpu 0 [ 1755.609925][ C0] CPU: 0 UID: 0 PID: 10357 Comm: kworker/0:3 Not tainted 6.11.0-rc6-syzkaller #0 [ 1755.609950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1755.609966][ C0] Workqueue: events delayed_fput [ 1755.610004][ C0] RIP: 0010:check_preemption_disabled+0x19/0x120 [ 1755.610036][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 1d bc 1e 4a 74 65 8b 05 b1 1e 4a 74 a9 ff ff ff 7f 74 26 65 [ 1755.610055][ C0] RSP: 0018:ffffc9000353f2b0 EFLAGS: 00000082 [ 1755.610075][ C0] RAX: 9085a47119e60500 RBX: 0000000000000000 RCX: ffffffff819af15c [ 1755.610091][ C0] RDX: 0000000000000000 RSI: ffffffff8c608ce0 RDI: ffffffff8c608ca0 [ 1755.610108][ C0] RBP: ffffc9000353f3b8 R08: ffffffff90186f2f R09: 1ffffffff2030de5 [ 1755.610127][ C0] R10: dffffc0000000000 R11: fffffbfff2030de6 R12: ffff8880618ad890 [ 1755.610152][ C0] R13: 1ffff920006a7e64 R14: ffffc9000353f340 R15: dffffc0000000000 [ 1755.610173][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1755.610192][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1755.610209][ C0] CR2: 00007f51ebe47d60 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 1755.610228][ C0] Call Trace: [ 1755.610237][ C0] [ 1755.610246][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1755.610277][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1755.610313][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1755.610343][ C0] ? nmi_handle+0x2a/0x5a0 [ 1755.610379][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1755.610410][ C0] ? nmi_handle+0x151/0x5a0 [ 1755.610432][ C0] ? nmi_handle+0x2a/0x5a0 [ 1755.610456][ C0] ? check_preemption_disabled+0x19/0x120 [ 1755.610482][ C0] ? default_do_nmi+0x63/0x160 [ 1755.610514][ C0] ? exc_nmi+0x123/0x1f0 [ 1755.610544][ C0] ? end_repeat_nmi+0xf/0x53 [ 1755.610581][ C0] ? trace_irq_disable+0x2c/0x120 [ 1755.610613][ C0] ? check_preemption_disabled+0x19/0x120 [ 1755.610640][ C0] ? check_preemption_disabled+0x19/0x120 [ 1755.610669][ C0] ? check_preemption_disabled+0x19/0x120 [ 1755.610696][ C0] [ 1755.610704][ C0] [ 1755.610716][ C0] rcu_is_watching+0x15/0xb0 [ 1755.610751][ C0] trace_irq_disable+0x3b/0x120 [ 1755.610781][ C0] _raw_spin_lock_irq+0xad/0x120 [ 1755.610817][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1755.610852][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.610885][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1755.610920][ C0] filemap_remove_folio+0xfe/0x2e0 [ 1755.610951][ C0] truncate_inode_folio+0x5d/0x70 [ 1755.610977][ C0] shmem_undo_range+0x45d/0x1df0 [ 1755.611013][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.611055][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.611088][ C0] ? validate_chain+0x11e/0x5900 [ 1755.611113][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1755.611198][ C0] ? inode_wait_for_writeback+0x224/0x290 [ 1755.611234][ C0] ? __pfx_lock_release+0x10/0x10 [ 1755.611266][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1755.611296][ C0] ? percpu_counter_add_batch+0xff/0x1f0 [ 1755.611340][ C0] shmem_evict_inode+0x29b/0xa80 [ 1755.611378][ C0] ? inode_wait_for_writeback+0x224/0x290 [ 1755.611409][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1755.611440][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1755.611476][ C0] ? __pfx_wake_bit_function+0x10/0x10 [ 1755.611509][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.611544][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1755.611577][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1755.611610][ C0] evict+0x534/0x950 [ 1755.611640][ C0] ? __pfx_evict+0x10/0x10 [ 1755.611665][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.611697][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1755.611734][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.611767][ C0] ? iput+0x6ed/0x930 [ 1755.611806][ C0] __dentry_kill+0x20d/0x630 [ 1755.611844][ C0] ? dput+0x37/0x2b0 [ 1755.611876][ C0] dput+0x19f/0x2b0 [ 1755.611910][ C0] __fput+0x5f8/0x8a0 [ 1755.611958][ C0] delayed_fput+0x59/0x80 [ 1755.611995][ C0] ? process_scheduled_works+0x945/0x1830 [ 1755.612028][ C0] process_scheduled_works+0xa2e/0x1830 [ 1755.612085][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1755.612127][ C0] ? assign_work+0x364/0x3d0 [ 1755.612170][ C0] worker_thread+0x86d/0xd10 [ 1755.612212][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1755.612255][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1755.612294][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1755.612328][ C0] kthread+0x2f2/0x390 [ 1755.612365][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1755.612398][ C0] ? __pfx_kthread+0x10/0x10 [ 1755.612438][ C0] ret_from_fork+0x4d/0x80 [ 1755.612472][ C0] ? __pfx_kthread+0x10/0x10 [ 1755.612510][ C0] ret_from_fork_asm+0x1a/0x30 [ 1755.612560][ C0] [ 1755.633285][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1755.633306][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller #0 [ 1755.633336][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1755.633353][ T30] Call Trace: [ 1755.633365][ T30] [ 1755.633377][ T30] dump_stack_lvl+0x241/0x360 [ 1755.633421][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1755.633454][ T30] ? __pfx__printk+0x10/0x10 [ 1755.633479][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1755.633525][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.633564][ T30] ? vscnprintf+0x5d/0x90 [ 1755.633602][ T30] panic+0x349/0x860 [ 1755.633626][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.633667][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1755.633705][ T30] ? __pfx_panic+0x10/0x10 [ 1755.633743][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1755.633776][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.633813][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1755.633853][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.633890][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1755.633921][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1755.633956][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1755.633994][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1755.634031][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1755.634071][ T30] watchdog+0x1033/0x1040 [ 1755.634113][ T30] ? watchdog+0x1ea/0x1040 [ 1755.634158][ T30] ? __pfx_watchdog+0x10/0x10 [ 1755.634197][ T30] kthread+0x2f2/0x390 [ 1755.634238][ T30] ? __pfx_watchdog+0x10/0x10 [ 1755.634276][ T30] ? __pfx_kthread+0x10/0x10 [ 1755.634318][ T30] ret_from_fork+0x4d/0x80 [ 1755.634356][ T30] ? __pfx_kthread+0x10/0x10 [ 1755.634401][ T30] ret_from_fork_asm+0x1a/0x30 [ 1755.634457][ T30] [ 1755.636310][ T30] Kernel Offset: disabled [ 1756.263720][ T30] Rebooting in 86400 seconds..