last executing test programs: 4.62690915s ago: executing program 0 (id=569): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)={0x0, 0x9, 0xb50}) 3.636276828s ago: executing program 0 (id=578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 3.117400767s ago: executing program 3 (id=581): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x7, 0x6, 0x4, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @private=0xa010102, {[@cipso={0x86, 0x6, 0x2}]}}}}}) 2.838966126s ago: executing program 3 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 2.560226212s ago: executing program 3 (id=586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, r1, 0x909, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xa4}, 0x80) 2.208482657s ago: executing program 2 (id=589): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000d40)={0x4c, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000)}) 2.151308289s ago: executing program 4 (id=590): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x400) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x7c67c9a5346444f2, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="1a380000001f", 0x0, 0x5, 0x0, 0x1, 0x0}) 2.131536838s ago: executing program 2 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x2008040) 2.130242966s ago: executing program 3 (id=592): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 1.992904176s ago: executing program 4 (id=593): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f0000000280)='\x00', 0x1) close(r0) 1.943392565s ago: executing program 3 (id=594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001000)={0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="000551"], 0x0, 0x0, 0x0}, 0x0) 1.883689032s ago: executing program 2 (id=596): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.699609725s ago: executing program 2 (id=598): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 1.557097451s ago: executing program 0 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) 1.518360451s ago: executing program 2 (id=600): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x8844}, 0x0) 1.489022951s ago: executing program 1 (id=601): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r0, 0x303, 0xfffffffa, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.372678172s ago: executing program 0 (id=602): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.328962725s ago: executing program 1 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000010403000000000000000000020000000a000200000000cb91"], 0x20}, 0x1, 0x0, 0x0, 0x5020}, 0x40480cc) 1.113553465s ago: executing program 2 (id=604): r0 = syz_usbip_server_init(0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902"], 0x0) write$usbip_server(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000300000001f2b02f879b267082b99b6e7af376be2a67fc7e82621c18"], 0x35) 936.945595ms ago: executing program 4 (id=605): r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 905.511796ms ago: executing program 1 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @loopback}, 0x800}}}]}, 0x38}}, 0x4040) 632.122019ms ago: executing program 1 (id=607): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x4718, 0x0, 0x2002, 0x35b}, &(0x7f00000003c0), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180)=[0x1, 0x3], 0xfe) 615.853994ms ago: executing program 4 (id=608): r0 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000180)={0x2, 0x4e27, @remote}, 0x10, 0x0}, 0x1c880) sendmmsg$unix(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}, {{&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44800}}], 0x2, 0x0) 458.651939ms ago: executing program 4 (id=609): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40000, 0x10) lseek(r0, 0xab07, 0x1) 323.651352ms ago: executing program 1 (id=610): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="595a08cb169762af2dee6f1cf7ddba01994769111e854c8e7f1d8b1e378f5ec47714bd380505884bbdbc72ee0b400b7c2dadae0f06307cd9d6fd2567840e4efafef3", 0x42) 288.486164ms ago: executing program 0 (id=611): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x4812, &(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES64, @ANYBLOB="62241c0659a5e7c979c1b432e77fe2ba2608f0798b57e7b4d5286f87c846a965c0958b7d06fd1b933088c3ff827d122215a88fe4a231937ebb1140058a0c7cde818a10a362b5e401da12df84b1a3c915d2a73bc32cd51bd342f7e85b40eb90219fe9a7eb07cef392c73fce97b78818", @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES8=0x0, @ANYRESDEC], 0x3, 0x2ce, &(0x7f0000000c40)="$eJzs3b1rFEEYx/Hf7F2Siwlx8yIBy2jASjQ2YhMJ+SMsVNTcCSFHBI2gVsFa1E6xt7MWG0sbq6C1aGXlH5BuZWdnL5tk3+68zZL4/cAdqzvP7PPc7cvMwWYF4L+1svrz/ZXf4ctIDTUkXZM8SS2pKemM5luPN7fWt7qddl5HDRsRvoyiSHOozdpmJy00jLMRjh/+q6nJ5P+hGkEQBL++N/LbnD6ydFATe/Sn8KQxd3Ta9a0jz6wa23UnUDOzq1090VTdeQAA6uWu/567zk+68bvnSYvusn+irv+7dSdQs8T1386yAhN+v3agb/bme3YK1xyXFM8Sc3rMXDOqaM/aN8A0RbNKm4s3fn+927m49qDb9vRcy06i2Zx9b0e7bqwg24WcZFMU157FVuyNhDUsZeQ/O8gW3/SfSo/5anbMbePrndq98V8zsJ+I/aZ8m7ffC4jyv5Td44Tt1thWGVVO242cdVvQpw8lqmylz0h6eU5r/w8Efpzn69GcqJkDUVF1l7Ors1GzqVFLBVFzySh35nR7c3bk4DLKPsC8NDfMgv7oo1YT438v/LQXVebIDNvYlm7PyK2naVv6JRLzSqWPskZy177QPV3V1KOnzzbudrudh2UXPv/oo/GwFxr/Eh5XXkFiwVjUdVW1NyvrObkQ7zDD6PBVhZ9GxsJoDTvkoAvKXrVdrp+GxrQRnzOrSDXqOX2gND6UExTqlzg9zt+sOxnUITyHmGj+Z0fy0ajuul0XHv6+HaePKG2cHhR1bnt8e2snmj4k5gZ7g9UZ+36qrxncRPYMLlFD7pzr3AXpfM4Wv+zv1nd5nhBmVd90h9//AQAAAAAAAAAAAAAAAAAAjpty9wO421sGvKOj5hIBAAAAAAAAAAAAAAAAAAAAADj28p7/a5+RWfD83/jOgOzn/yb+qnfx83+XV+Lmh5//m/+QWgB9+xsAAP//5XNzJw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 219.285838ms ago: executing program 4 (id=612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x4000) 37.380301ms ago: executing program 3 (id=613): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e20, 0x4, 0x4e22, 0x8000, 0x2}, {0xfffffffffffffffc, 0x1, 0x0, 0x5, 0x5, 0x1ff, 0x3, 0x8}, {0x200, 0x6, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x20000401, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x5}, 0x1c) 8.750717ms ago: executing program 1 (id=614): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x101001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000500)="f5", 0x1}], 0x1) 0s ago: executing program 0 (id=615): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffff7da}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 76.083013][ T5577] cgroup: Unknown subsys name 'net' [ 76.316400][ T5577] cgroup: Unknown subsys name 'cpuset' [ 76.379451][ T5577] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.997990][ T5577] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.327727][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.341913][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.372350][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.373608][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.374257][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.374893][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.378174][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.381444][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.382100][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.397556][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.424883][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.429036][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.429036][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.429209][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.433864][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.440604][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.440810][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.442973][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.443240][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.453916][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.454482][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.466914][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.474802][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.532942][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.533643][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.570441][ T5604] Bluetooth: hci4: command tx timeout [ 82.810146][ T5604] Bluetooth: hci3: command tx timeout [ 82.810329][ T5604] Bluetooth: hci0: command tx timeout [ 82.810416][ T5604] Bluetooth: hci2: command tx timeout [ 82.812132][ T5602] Bluetooth: hci1: command tx timeout [ 83.267109][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.268439][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.271023][ T5590] bridge_slave_0: entered allmulticast mode [ 83.274207][ T5590] bridge_slave_0: entered promiscuous mode [ 83.303487][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.303629][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.307490][ T5589] bridge_slave_0: entered allmulticast mode [ 83.311796][ T5589] bridge_slave_0: entered promiscuous mode [ 83.353354][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.353616][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.354151][ T5590] bridge_slave_1: entered allmulticast mode [ 83.356284][ T5590] bridge_slave_1: entered promiscuous mode [ 83.397702][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.397938][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.398154][ T5589] bridge_slave_1: entered allmulticast mode [ 83.401965][ T5589] bridge_slave_1: entered promiscuous mode [ 83.403929][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.404223][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.404423][ T5591] bridge_slave_0: entered allmulticast mode [ 83.407667][ T5591] bridge_slave_0: entered promiscuous mode [ 83.415367][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.415611][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.416141][ T5588] bridge_slave_0: entered allmulticast mode [ 83.419615][ T5588] bridge_slave_0: entered promiscuous mode [ 83.456545][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.456788][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.457307][ T5593] bridge_slave_0: entered allmulticast mode [ 83.461259][ T5593] bridge_slave_0: entered promiscuous mode [ 83.504669][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.504904][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.505073][ T5591] bridge_slave_1: entered allmulticast mode [ 83.506842][ T5591] bridge_slave_1: entered promiscuous mode [ 83.508270][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.508410][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.508546][ T5588] bridge_slave_1: entered allmulticast mode [ 83.512876][ T5588] bridge_slave_1: entered promiscuous mode [ 83.537066][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.537303][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.537809][ T5593] bridge_slave_1: entered allmulticast mode [ 83.543859][ T5593] bridge_slave_1: entered promiscuous mode [ 83.618813][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.645890][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.717506][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.736665][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.743888][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.752071][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.784333][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.809749][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.813352][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.852364][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.897775][ T5590] team0: Port device team_slave_0 added [ 83.915815][ T5589] team0: Port device team_slave_0 added [ 83.958635][ T5590] team0: Port device team_slave_1 added [ 83.983238][ T5589] team0: Port device team_slave_1 added [ 83.985697][ T5591] team0: Port device team_slave_0 added [ 83.988680][ T5588] team0: Port device team_slave_0 added [ 84.020212][ T5593] team0: Port device team_slave_0 added [ 84.040613][ T5591] team0: Port device team_slave_1 added [ 84.042978][ T5588] team0: Port device team_slave_1 added [ 84.067740][ T5593] team0: Port device team_slave_1 added [ 84.130858][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.130874][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.130893][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.153406][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.153421][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.153451][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.199421][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.199446][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.199470][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.230398][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.230415][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.230438][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.232886][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.232899][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.232922][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.238558][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.238571][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.238595][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.262875][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.262891][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.262915][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.281274][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.281290][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.281313][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.286628][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.286642][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.286666][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.298678][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.298694][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.298717][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.534146][ T5590] hsr_slave_0: entered promiscuous mode [ 84.536475][ T5590] hsr_slave_1: entered promiscuous mode [ 84.593118][ T5589] hsr_slave_0: entered promiscuous mode [ 84.594305][ T5589] hsr_slave_1: entered promiscuous mode [ 84.595382][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 84.595467][ T5589] Cannot create hsr debugfs directory [ 84.638030][ T5591] hsr_slave_0: entered promiscuous mode [ 84.640359][ T5591] hsr_slave_1: entered promiscuous mode [ 84.643803][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 84.643827][ T5591] Cannot create hsr debugfs directory [ 84.649095][ T5602] Bluetooth: hci4: command tx timeout [ 84.664366][ T5588] hsr_slave_0: entered promiscuous mode [ 84.666382][ T5588] hsr_slave_1: entered promiscuous mode [ 84.668008][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 84.668032][ T5588] Cannot create hsr debugfs directory [ 84.681358][ T5593] hsr_slave_0: entered promiscuous mode [ 84.683295][ T5593] hsr_slave_1: entered promiscuous mode [ 84.684902][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 84.684922][ T5593] Cannot create hsr debugfs directory [ 84.889068][ T5602] Bluetooth: hci1: command tx timeout [ 84.889101][ T5602] Bluetooth: hci2: command tx timeout [ 84.889122][ T5602] Bluetooth: hci0: command tx timeout [ 84.889141][ T5602] Bluetooth: hci3: command tx timeout [ 85.877592][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.946447][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.964447][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.001510][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.016973][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.048242][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.070731][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.107324][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.204752][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.247518][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.271200][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.305309][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.317871][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.344063][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.368362][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.405279][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.555258][ T5588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.595579][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.605370][ T5588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.637315][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.644159][ T5588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.688017][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.718508][ T5588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.729016][ T5604] Bluetooth: hci4: command tx timeout [ 86.753572][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.858181][ T32] cfg80211: failed to load regulatory.db [ 86.970849][ T5604] Bluetooth: hci3: command tx timeout [ 86.970878][ T5604] Bluetooth: hci0: command tx timeout [ 86.970896][ T5604] Bluetooth: hci2: command tx timeout [ 86.970914][ T5604] Bluetooth: hci1: command tx timeout [ 86.973010][ T5591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.014209][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.036912][ T5591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.073195][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.085058][ T5591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.114905][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.146033][ T5591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.173396][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.320782][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.353557][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.358444][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.381395][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.413882][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.418270][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.456594][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.471504][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.514725][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.593457][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.613179][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.682419][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.682907][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.748141][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.759874][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.811504][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.850823][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.851747][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.886215][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.921472][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.921596][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.067232][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.150304][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.153666][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.153851][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.222667][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.222818][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.361413][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.405313][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.472060][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.472287][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.552951][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.553086][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.656582][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.809161][ T5602] Bluetooth: hci4: command tx timeout [ 88.809238][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.809383][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.884430][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.884583][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.053444][ T5602] Bluetooth: hci1: command tx timeout [ 89.053475][ T5602] Bluetooth: hci2: command tx timeout [ 89.053495][ T5602] Bluetooth: hci0: command tx timeout [ 89.053515][ T5602] Bluetooth: hci3: command tx timeout [ 89.225491][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.726331][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.733276][ T5590] veth0_vlan: entered promiscuous mode [ 89.834891][ T5590] veth1_vlan: entered promiscuous mode [ 90.169517][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.268618][ T5589] veth0_vlan: entered promiscuous mode [ 90.288522][ T5590] veth0_macvtap: entered promiscuous mode [ 90.354250][ T5590] veth1_macvtap: entered promiscuous mode [ 90.394075][ T5589] veth1_vlan: entered promiscuous mode [ 90.446308][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.616514][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.675722][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.691922][ T5588] veth0_vlan: entered promiscuous mode [ 90.723331][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.753186][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.765350][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.775682][ T5589] veth0_macvtap: entered promiscuous mode [ 90.797168][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.807907][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.836169][ T5588] veth1_vlan: entered promiscuous mode [ 90.844219][ T5589] veth1_macvtap: entered promiscuous mode [ 91.168576][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.306695][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.393849][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.428280][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.443208][ T5588] veth0_macvtap: entered promiscuous mode [ 91.448163][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.494223][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.494243][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.542350][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.568593][ T5588] veth1_macvtap: entered promiscuous mode [ 91.575323][ T5593] veth0_vlan: entered promiscuous mode [ 91.668591][ T5591] veth0_vlan: entered promiscuous mode [ 91.756030][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.756050][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.780843][ T5593] veth1_vlan: entered promiscuous mode [ 92.036807][ T5591] veth1_vlan: entered promiscuous mode [ 92.046479][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.113797][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.130342][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.130358][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.168406][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205326][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.235530][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.257513][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.375029][ T5593] veth0_macvtap: entered promiscuous mode [ 92.388793][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.388806][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.494690][ T5593] veth1_macvtap: entered promiscuous mode [ 92.607213][ T5591] veth0_macvtap: entered promiscuous mode [ 92.841670][ T5591] veth1_macvtap: entered promiscuous mode [ 93.013226][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.076724][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.076742][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.092687][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.175921][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.249124][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.361541][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.398692][ T71] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.407933][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.445282][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.445589][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.487227][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.487241][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.661115][ T161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.664024][ T161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.678213][ T161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.702314][ T161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.753399][ T5797] loop3: detected capacity change from 0 to 1024 [ 93.835123][ T5797] ======================================================= [ 93.835123][ T5797] WARNING: The mand mount option has been deprecated and [ 93.835123][ T5797] and is ignored by this kernel. Remove the mand [ 93.835123][ T5797] option from the mount to silence this warning. [ 93.835123][ T5797] ======================================================= [ 94.707569][ T5803] loop1: detected capacity change from 0 to 1024 [ 94.927284][ T5803] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 94.974444][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.974587][ T5797] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.055730][ T5803] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 95.178380][ T5803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.276142][ T5589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.506139][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.506158][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.564546][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 95.730543][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.730563][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.755201][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 96.112181][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.233577][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 96.328062][ T5818] loop3: detected capacity change from 0 to 4096 [ 96.406691][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.406710][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.447378][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 96.540175][ T5818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.679152][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 96.761968][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.761987][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.006510][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.006541][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.006575][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 97.006595][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.192087][ T9] usb 1-1: config 0 descriptor?? [ 98.105788][ T9] isku 0003:1E7D:319C.0001: item fetching failed at offset 5/7 [ 98.108149][ T9] isku 0003:1E7D:319C.0001: parse failed [ 98.108215][ T9] isku 0003:1E7D:319C.0001: probe with driver isku failed with error -22 [ 98.314334][ T5589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.342806][ T9] usb 1-1: USB disconnect, device number 2 [ 98.688136][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 99.067497][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 99.377092][ T5835] loop0: detected capacity change from 0 to 4096 [ 99.747231][ T5835] EXT4-fs: inline encryption not supported [ 99.888792][ T5835] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.888814][ T5835] EXT4-fs (loop0): Test dummy encryption mode enabled [ 100.161017][ T5847] loop4: detected capacity change from 0 to 128 [ 100.186066][ T5835] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 100.186191][ T5835] System zones: 0-5 [ 100.317847][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.686049][ T5844] syz.2.22 (5844) used greatest stack depth: 18488 bytes left [ 100.783889][ T5588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.103592][ T5693] Flush: task=udevd[5693] dev=loop0 state=2 [ 101.341416][ T5693] Teardown: task=udevd[5693] dev=loop0 state=2 [ 102.067469][ T5864] loop3: detected capacity change from 0 to 4096 [ 102.128692][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 102.235791][ T5872] loop1: detected capacity change from 0 to 1024 [ 102.301203][ T5872] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 102.466704][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 103.522220][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 103.584020][ T5864] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 103.763288][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 104.057927][ T5890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41'. [ 104.076869][ T5877] loop4: detected capacity change from 0 to 32768 [ 104.529025][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.848952][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 104.850978][ T11] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 104.851007][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.851038][ T11] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 104.851061][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.018005][ T11] usb 2-1: config 0 descriptor?? [ 105.215376][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 105.562409][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 105.688823][ T5881] Flush: task=udevd[5881] dev=loop4 state=2 [ 105.901578][ T5881] Teardown: task=udevd[5881] dev=loop4 state=2 [ 105.994082][ T5904] loop2: detected capacity change from 0 to 32768 [ 106.042346][ T11] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0 [ 106.042392][ T11] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0 [ 106.042418][ T11] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0 [ 106.042444][ T11] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0 [ 106.042469][ T11] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0 [ 106.042494][ T11] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0 [ 106.042519][ T11] logitech-djreceiver 0003:046D:C517.0002: unknown main item tag 0x0 [ 106.263907][ T11] usb 2-1: USB disconnect, device number 2 [ 106.652113][ T5917] loop0: detected capacity change from 0 to 2048 [ 107.054756][ T5917] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.373140][ T5785] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.525679][ T5904] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.551067][ T5934] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.633247][ T5785] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.633276][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.670583][ T5785] usb 5-1: config 0 descriptor?? [ 107.680357][ T5917] syz.0.51: attempt to access beyond end of device [ 107.680357][ T5917] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 107.700709][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.720138][ T5785] cp210x 5-1:0.0: cp210x converter detected [ 107.859033][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 107.867177][ T11] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 107.871343][ T11] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 107.871420][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.871437][ T11] usb 2-1: Product: syz [ 107.871450][ T11] usb 2-1: Manufacturer: syz [ 107.871463][ T11] usb 2-1: SerialNumber: syz [ 108.013348][ T11] usb 2-1: config 0 descriptor?? [ 108.077978][ T11] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 108.094667][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 108.274897][ T5932] cxusb: i2c wr: len=80 is too big! [ 108.274897][ T5932] [ 108.329296][ T5785] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 108.329345][ T5785] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 108.377994][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.416550][ T11] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 108.416652][ T11] usb 2-1: media controller created [ 108.462655][ T5785] usb 5-1: cp210x converter now attached to ttyUSB0 [ 108.654935][ T5785] usb 5-1: USB disconnect, device number 2 [ 108.696228][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.046293][ T11] usb 2-1: selecting invalid altsetting 7 [ 109.046312][ T11] cxusb: set interface failed [ 109.046324][ T11] dvb-usb: bulk message failed: -22 (1/0) [ 109.141868][ T5785] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.148460][ T5785] cp210x 5-1:0.0: device disconnected [ 109.189970][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 109.308014][ T5593] ocfs2: Unmounting device (7,2) on (node local) [ 109.372343][ T11] DVB: Unable to find symbol lgdt330x_attach() [ 109.372374][ T11] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 109.397861][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 109.465261][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 109.499001][ T11] rc_core: IR keymap rc-dvico-portable not found [ 109.499022][ T11] Registered IR keymap rc-empty [ 109.537276][ T11] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 109.568345][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 109.592926][ T11] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 109.624511][ T11] dvb-usb: schedule remote query interval to 100 msecs. [ 109.624535][ T11] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 109.675816][ T5936] loop3: detected capacity change from 0 to 32768 [ 109.732563][ T5785] dvb-usb: bulk message failed: -22 (1/0) [ 109.766138][ T11] usb 2-1: USB disconnect, device number 3 [ 110.337902][ T5936] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.882527][ T11] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 111.045972][ T5968] loop4: detected capacity change from 0 to 128 [ 111.114186][ T5968] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 111.114364][ T5968] hpfs: filesystem error: improperly stopped [ 111.114379][ T5968] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 111.114394][ T5968] hpfs: You really don't want any checks? You are crazy... [ 111.172576][ T5968] hpfs: hpfs_map_sector(): read error [ 111.172594][ T5968] hpfs: code page support is disabled [ 111.214493][ T5968] hpfs: hpfs_map_4sectors(): unaligned read [ 111.276267][ T5968] hpfs: hpfs_map_4sectors(): unaligned read [ 111.276286][ T5968] hpfs: filesystem error: unable to find root dir [ 111.446874][ T5936] (syz.3.59,5936,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 111.683569][ T5977] loop2: detected capacity change from 0 to 2048 [ 111.912352][ T5977] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.114923][ T5977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.227167][ T5589] ocfs2: Unmounting device (7,3) on (node local) [ 112.289118][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 112.295920][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 112.393815][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 112.393902][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 112.535203][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 112.619026][ T5707] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 112.645655][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.649905][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 112.702603][ T5995] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 112.780768][ T5707] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.780794][ T5707] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 112.780810][ T5707] usb 1-1: config 179 has no interface number 0 [ 112.780847][ T5707] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.780884][ T5707] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.780903][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.986971][ T6001] loop4: detected capacity change from 0 to 512 [ 113.122587][ T5700] usb 1-1: USB disconnect, device number 3 [ 113.287927][ T6001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.318091][ T6001] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.370487][ T6011] sit1: entered promiscuous mode [ 113.623447][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.795341][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 113.907124][ T6029] loop0: detected capacity change from 0 to 8 [ 114.032291][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 114.272466][ T6028] Process accounting resumed [ 114.508505][ T6029] SQUASHFS error: Failed to read block 0x71: -5 [ 114.518467][ T38] audit: type=1800 audit(1783691209.883:2): pid=6029 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.96" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 114.576403][ T6041] loop4: detected capacity change from 0 to 256 [ 114.950061][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 114.980856][ T5785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.049358][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 115.176638][ T5785] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 115.176666][ T5785] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 115.211205][ T5785] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 115.211225][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.211235][ T5785] usb 2-1: Product: syz [ 115.211242][ T5785] usb 2-1: Manufacturer: syz [ 115.211248][ T5785] usb 2-1: SerialNumber: syz [ 115.270804][ T5785] usb 2-1: config 0 descriptor?? [ 115.324420][ T5785] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 115.431599][ T6049] loop3: detected capacity change from 0 to 32768 [ 115.509872][ T6049] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.117333][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 116.128336][ T5785] gspca_sunplus: reg_r err -71 [ 116.128441][ T5785] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 116.191303][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 116.191391][ T5785] usb 2-1: USB disconnect, device number 4 [ 116.205354][ T5589] ocfs2: Unmounting device (7,3) on (node local) [ 116.255902][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 116.393798][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 116.572022][ T6073] loop4: detected capacity change from 0 to 256 [ 116.850209][ T6077] loop2: detected capacity change from 0 to 512 [ 116.856691][ T6073] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 117.081406][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.081521][ T6077] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.260697][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.455475][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 117.493920][ T6091] loop1: detected capacity change from 0 to 256 [ 117.499731][ T6091] exfat: Deprecated parameter 'utf8' [ 117.499751][ T6091] exfat: Deprecated parameter 'utf8' [ 117.499812][ T6091] exfat: Deprecated parameter 'utf8' [ 117.644989][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 117.725086][ T6093] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.859723][ T6091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 118.178273][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 118.280444][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 118.472023][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 118.606659][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 118.860152][ T6121] atomic_op ffff888038089a18 conn xmit_atomic 0000000000000000 [ 119.026845][ T6130] loop4: detected capacity change from 0 to 8 [ 119.306333][ T6130] SQUASHFS error: Failed to read block 0x29b: -5 [ 119.306356][ T6130] SQUASHFS error: Unable to read metadata cache entry [299] [ 119.469103][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 119.630514][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 119.918616][ T6155] loop2: detected capacity change from 0 to 2048 [ 119.938464][ T6155] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.076740][ T6153] loop4: detected capacity change from 0 to 32768 [ 120.108664][ T6157] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.166851][ T6153] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.317568][ T6153] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 120.346267][ T6153] XFS (loop4): Starting recovery (logdev: internal) [ 120.456330][ T6153] XFS (loop4): Ending recovery (logdev: internal) [ 120.467842][ T6153] XFS (loop4): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 [ 120.467885][ T6153] XFS (loop4): Unmount and run xfs_repair [ 120.467897][ T6153] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 120.467914][ T6153] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 120.467926][ T6153] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 120.467937][ T6153] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 120.467947][ T6153] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 120.467957][ T6153] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 120.467969][ T6153] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.467979][ T6153] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.467990][ T6153] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.468210][ T6153] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 8 error 117 [ 120.469018][ T6153] loop4: lost filesystem error report for type 5 error -117 [ 120.469161][ T6153] XFS (loop4): Failed to initialize disk quotas, err -117. [ 120.610607][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 120.703100][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.711598][ T5591] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.764431][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 121.025577][ T5591] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 121.039094][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 121.051250][ T11] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 121.051279][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.051298][ T11] usb 2-1: Product: syz [ 121.051311][ T11] usb 2-1: Manufacturer: syz [ 121.051324][ T11] usb 2-1: SerialNumber: syz [ 121.210812][ T11] usb 2-1: config 0 descriptor?? [ 121.369125][ T11] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 121.448966][ T5726] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.619005][ T5726] usb 3-1: Using ep0 maxpacket: 32 [ 121.621215][ T5726] usb 3-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 121.678207][ T5726] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 121.678237][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.678256][ T5726] usb 3-1: Product: syz [ 121.678270][ T5726] usb 3-1: Manufacturer: syz [ 121.678283][ T5726] usb 3-1: SerialNumber: syz [ 121.708365][ T11] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 121.769890][ T11] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 121.792805][ T11] usb 2-1: USB disconnect, device number 5 [ 121.835187][ T6188] warning: `syz.3.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.898985][ T5726] usb 3-1: config 0 descriptor?? [ 121.926964][ T5726] cdc_ether 3-1:0.0: missing cdc header descriptor [ 121.957696][ T5726] usb 3-1: unsupported MDLM descriptors [ 122.127347][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 122.190226][ T201] usb 3-1: USB disconnect, device number 2 [ 122.270161][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 122.875496][ T6203] loop0: detected capacity change from 0 to 4096 [ 123.245834][ T6194] loop3: detected capacity change from 0 to 32768 [ 123.261303][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.282546][ T6194] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 123.320979][ T6194] JBD2: Ignoring recovery information on journal [ 123.439721][ T11] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 123.439751][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.439770][ T11] usb 2-1: Product: syz [ 123.439783][ T11] usb 2-1: Manufacturer: syz [ 123.439797][ T11] usb 2-1: SerialNumber: syz [ 123.621857][ T11] r8152-cfgselector 2-1: Unknown version 0x0000 [ 123.621885][ T11] r8152-cfgselector 2-1: config 0 descriptor?? [ 123.846169][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 123.871690][ T6194] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 124.049899][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 124.269715][ T5707] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 124.327167][ T5589] ocfs2: Unmounting device (7,3) on (node local) [ 124.471871][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 124.534029][ T6228] loop2: detected capacity change from 0 to 256 [ 124.551526][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 124.728805][ T5951] Flush: task=udevd[5951] dev=loop2 state=2 [ 124.829004][ T5951] Teardown: task=udevd[5951] dev=loop2 state=2 [ 125.066369][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 125.171193][ T6239] gretap0: entered promiscuous mode [ 125.258976][ T5707] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.338307][ T6224] loop0: detected capacity change from 0 to 32768 [ 125.409002][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 125.414668][ T5707] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.414699][ T5707] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.414722][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.414749][ T5707] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 125.414767][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.515468][ T5707] usb 5-1: config 0 descriptor?? [ 125.518274][ T6224] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.939721][ T6224] XFS (loop0): Ending clean mount [ 125.964302][ T5707] hid (null): unknown global tag 0xa3 [ 125.964346][ T5707] hid (null): unknown global tag 0xc [ 125.964360][ T5707] hid (null): unknown global tag 0xd [ 126.190374][ T5707] usb 5-1: string descriptor 0 read error: -71 [ 126.191063][ T5707] uclogic 0003:5543:006E.0003: failed retrieving string descriptor #200: -71 [ 126.191118][ T5707] uclogic 0003:5543:006E.0003: failed retrieving pen parameters: -71 [ 126.191134][ T5707] uclogic 0003:5543:006E.0003: failed probing pen v2 parameters: -71 [ 126.191182][ T5707] uclogic 0003:5543:006E.0003: failed probing parameters: -71 [ 126.191279][ T5707] uclogic 0003:5543:006E.0003: probe with driver uclogic failed with error -71 [ 126.258611][ T5707] usb 5-1: USB disconnect, device number 3 [ 126.480056][ T5588] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.032239][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 127.106153][ T6272] loop3: detected capacity change from 0 to 2048 [ 127.181400][ T6273] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.279055][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 127.546092][ T6268] Zero length message leads to an empty skb [ 127.572341][ T71] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.573992][ T71] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.574037][ T71] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.574069][ T71] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.812732][ T6273] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 127.812767][ T6273] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 128.074965][ T6273] Remounting filesystem read-only [ 128.152372][ T5589] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 128.338690][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 128.377605][ T6293] loop4: detected capacity change from 0 to 164 [ 128.432471][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 128.812766][ T6301] loop2: detected capacity change from 0 to 256 [ 128.869972][ T6275] loop1: detected capacity change from 0 to 32768 [ 129.061701][ T6275] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.250595][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 129.280847][ T5951] Flush: task=udevd[5951] dev=loop2 state=2 [ 129.321213][ T6275] XFS (loop1): Ending clean mount [ 129.347406][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 129.367723][ T5951] Teardown: task=udevd[5951] dev=loop2 state=2 [ 129.495065][ T5590] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.946541][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 130.086255][ T6340] loop4: detected capacity change from 0 to 128 [ 130.154060][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 130.294541][ T6340] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.308034][ T6340] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.548975][ T5591] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.561013][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 130.590321][ T5785] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 130.651029][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 130.758459][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.758486][ T5785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.758534][ T5785] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.758557][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.861692][ T5785] usb 1-1: config 0 descriptor?? [ 130.879486][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 130.879713][ T5785] dvb-usb: bulk message failed: -22 (3/0) [ 131.020127][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.020877][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.020924][ T5785] usb 1-1: media controller created [ 131.065818][ T6341] dibusb: i2c wr: len=61 is too big! [ 131.065818][ T6341] [ 131.136491][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.218058][ T5785] dvb-usb: bulk message failed: -22 (6/0) [ 131.218227][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.267863][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 131.286598][ T5785] dvb-usb: schedule remote query interval to 150 msecs. [ 131.286620][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 131.309282][ T5785] usb 1-1: USB disconnect, device number 4 [ 131.634257][ T5785] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 131.679428][ T6374] loop4: detected capacity change from 0 to 512 [ 131.716701][ T6374] EXT4-fs: Ignoring removed nobh option [ 131.743992][ T6375] loop2: detected capacity change from 0 to 1024 [ 131.745288][ T6375] EXT4-fs: Ignoring removed bh option [ 131.772616][ T6374] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.886442][ T6375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.006052][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #3: comm syz.4.233: corrupted inode contents [ 132.006291][ T6374] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.015020][ C1] EXT4-fs (loop4): initial error at time 1783691227: ext4_do_update_inode:5742: inode 3 [ 132.015069][ C1] EXT4-fs (loop4): last error at time 1783691227: ext4_do_update_inode:5742: inode 3 [ 132.048376][ T6385] loop0: detected capacity change from 0 to 256 [ 132.177592][ T6385] exfat: Deprecated parameter 'utf8' [ 132.177676][ T6385] exfat: Deprecated parameter 'namecase' [ 132.177699][ T6385] exfat: Deprecated parameter 'utf8' [ 132.311588][ T6374] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #3: comm syz.4.233: mark_inode_dirty error [ 132.311621][ T6374] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.368947][ T6385] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 132.662750][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.710574][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #3: comm syz.4.233: corrupted inode contents [ 132.710607][ T6374] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.724961][ T6374] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.233: mark_inode_dirty error [ 132.724991][ T6374] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.783561][ T6374] Quota error (device loop4): write_blk: dquota write failed [ 132.783751][ T6374] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 132.783805][ T6374] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.233: Failed to acquire dquot type 0 [ 132.783827][ T6374] loop4: lost filesystem error report for type 5 error -117 [ 132.839716][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839910][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.954576][ T5881] Flush: task=udevd[5881] dev=loop2 state=2 [ 133.053409][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 133.065073][ T5881] Teardown: task=udevd[5881] dev=loop2 state=2 [ 133.157705][ T6393] loop1: detected capacity change from 0 to 16 [ 133.213523][ T6393] erofs (device loop1): mounted with root inode @ nid 36. [ 133.238181][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 133.243913][ T6365] loop3: detected capacity change from 0 to 32768 [ 133.355194][ T6365] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.411069][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.233: corrupted inode contents [ 133.411104][ T6374] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.424087][ T6374] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.233: mark_inode_dirty error [ 133.424120][ T6374] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.469029][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 133.515117][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.233: corrupted inode contents [ 133.515148][ T6374] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.516232][ T6374] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.233: mark_inode_dirty error [ 133.516262][ T6374] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.525451][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.233: corrupted inode contents [ 133.525482][ T6374] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.548045][ T6374] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 133.548072][ T6374] loop4: lost filesystem error report for type 5 error -117 [ 133.548551][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.233: corrupted inode contents [ 133.548576][ T6374] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.549908][ T6374] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.233: mark_inode_dirty error [ 133.563450][ T6374] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 133.563476][ T6374] loop4: lost filesystem error report for type 5 error -117 [ 133.662083][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 133.667828][ T6407] loop2: detected capacity change from 0 to 64 [ 133.705442][ T6365] XFS (loop3): Ending clean mount [ 133.763275][ T6365] capability: warning: `syz.3.228' uses deprecated v2 capabilities in a way that may be insecure [ 133.820433][ T6374] EXT4-fs (loop4): 1 truncate cleaned up [ 133.854803][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.854882][ T6374] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.952948][ T6411] loop1: detected capacity change from 0 to 2048 [ 133.976942][ T6411] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 134.031397][ T5589] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.167977][ T6411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.453816][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.535688][ T6413] loop0: detected capacity change from 0 to 1024 [ 134.536929][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 134.603116][ T6415] netlink: 84 bytes leftover after parsing attributes in process `syz.3.246'. [ 134.603134][ T6415] netlink: 84 bytes leftover after parsing attributes in process `syz.3.246'. [ 134.644673][ T6413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.654786][ T6413] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.796009][ T5924] Flush: task=udevd[5924] dev=loop3 state=2 [ 134.809164][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 134.836557][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 135.009154][ T5924] Teardown: task=udevd[5924] dev=loop3 state=2 [ 135.018263][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 135.048976][ T6413] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.247: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.053112][ C0] EXT4-fs (loop0): initial error at time 1783691230: ext4_map_blocks:791: inode 3: block 2 [ 135.053149][ C0] EXT4-fs (loop0): last error at time 1783691230: ext4_map_blocks:791: inode 3: block 2 [ 135.093627][ T6413] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 135.093689][ T6413] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.247: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.095235][ T6413] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 135.095255][ T6413] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.247: Failed to acquire dquot type 0 [ 135.095278][ T6413] loop0: lost filesystem error report for type 5 error -117 [ 135.096741][ T6413] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 135.096764][ T6413] loop0: lost filesystem error report for type 5 error -117 [ 135.174973][ T6413] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.247: mark_inode_dirty error [ 135.175291][ T6413] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 135.175465][ T6413] EXT4-fs (loop0): 1 orphan inode deleted [ 135.226909][ T6413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.496965][ T12] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.585193][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 135.627187][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 135.829871][ T6432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.256'. [ 135.852461][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 135.933027][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 135.960314][ T5588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.001523][ T1296] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.106755][ T1296] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 136.106801][ T1296] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 0 [ 136.106820][ T1296] loop0: lost filesystem error report for type 5 error -117 [ 136.225968][ T5588] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 136.225999][ T5588] loop0: lost filesystem error report for type 5 error -117 [ 136.313647][ T5700] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.358098][ T5588] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 136.358119][ T5588] loop0: lost filesystem error report for type 5 error -117 [ 136.362048][ T5588] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 136.450165][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 136.469148][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 136.482547][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 136.486228][ T5700] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 136.488812][ T5700] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 136.488839][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.488857][ T5700] usb 3-1: Product: syz [ 136.488870][ T5700] usb 3-1: Manufacturer: syz [ 136.488883][ T5700] usb 3-1: SerialNumber: syz [ 136.576755][ T5700] usb 3-1: config 0 descriptor?? [ 136.580673][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 136.593951][ T6445] syz.1.261 (6445) used greatest stack depth: 18400 bytes left [ 136.597865][ T6455] netlink: 252 bytes leftover after parsing attributes in process `syz.4.267'. [ 136.604769][ T5700] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 136.604814][ T5700] dvb-usb: bulk message failed: -22 (2/0) [ 136.641439][ T5700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.645026][ T5700] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 136.645078][ T5700] usb 3-1: media controller created [ 136.830447][ T6440] cxusb: i2c wr: len=79 is too big! [ 136.830447][ T6440] [ 136.861037][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.043686][ T5700] usb 3-1: selecting invalid altsetting 7 [ 137.043706][ T5700] cxusb: set interface failed [ 137.043718][ T5700] dvb-usb: bulk message failed: -22 (1/0) [ 137.085444][ T5700] DVB: Unable to find symbol lgdt330x_attach() [ 137.085459][ T5700] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 137.265569][ T5700] rc_core: IR keymap rc-dvico-portable not found [ 137.265590][ T5700] Registered IR keymap rc-empty [ 137.267852][ T5700] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 137.271669][ T5700] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 137.642199][ T5700] dvb-usb: schedule remote query interval to 100 msecs. [ 137.642226][ T5700] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 137.649539][ T5700] usb 3-1: USB disconnect, device number 3 [ 138.174745][ T5700] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 138.274312][ T6498] use of bytesused == 0 is deprecated and will be removed in the future, [ 138.274327][ T6498] use the actual size instead. [ 138.354223][ T6504] loop4: detected capacity change from 0 to 1024 [ 138.688648][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 138.688668][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 138.781588][ T6504] hfsplus: bad catalog file entry [ 138.827748][ T6515] loop1: detected capacity change from 0 to 512 [ 138.835700][ T6515] EXT4-fs: inline encryption not supported [ 138.835719][ T6515] EXT4-fs: Ignoring removed orlov option [ 138.835741][ T6515] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.869330][ T6513] loop0: detected capacity change from 0 to 1024 [ 138.951058][ T6515] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.290: corrupted in-inode xattr: e_value size too large [ 138.951093][ T6515] fserror_report: 6 callbacks suppressed [ 138.951103][ T6515] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.961870][ C1] EXT4-fs (loop1): initial error at time 1783691234: ext4_iget_extra_inode:5180: inode 15 [ 138.961900][ C1] EXT4-fs (loop1): last error at time 1783691234: ext4_iget_extra_inode:5180: inode 15 [ 139.066543][ T6515] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.290: couldn't read orphan inode 15 (err -117) [ 139.066576][ T6515] loop1: lost filesystem error report for type 5 error -117 [ 139.156100][ T6515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.162114][ T6513] syz.0.289: attempt to access beyond end of device [ 139.162114][ T6513] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 139.204344][ T6513] Buffer I/O error on dev loop0, logical block 2889, async page read [ 139.204523][ T6513] syz.0.289: attempt to access beyond end of device [ 139.204523][ T6513] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 139.204611][ T6513] Buffer I/O error on dev loop0, logical block 2889, async page read [ 139.285131][ T38] audit: type=1800 audit(1783691234.822:3): pid=6513 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.289" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 139.355238][ T4850] hfsplus: bad catalog file entry [ 139.476825][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.561024][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 139.727167][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 139.747316][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 139.794835][ T6521] loop2: detected capacity change from 0 to 32768 [ 139.866865][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 139.941405][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 140.036740][ T6525] loop1: detected capacity change from 0 to 512 [ 140.097633][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 140.191891][ T6525] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 140.232474][ T6525] EXT4-fs (loop1): 1 truncate cleaned up [ 140.234880][ T6525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.272665][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 140.278995][ T6534] netlink: 'syz.0.295': attribute type 5 has an invalid length. [ 140.279017][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 140.467174][ T6534] geneve2: entered promiscuous mode [ 140.467199][ T6534] geneve2: entered allmulticast mode [ 140.500057][ T161] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 48556 - 0 [ 140.500323][ T161] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 48556 - 0 [ 140.500360][ T161] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 48556 - 0 [ 140.500391][ T161] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 48556 - 0 [ 140.546445][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.686022][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 140.929277][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 140.958393][ T6545] loop0: detected capacity change from 0 to 4096 [ 141.155038][ T6545] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 141.264728][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 141.434307][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 141.495540][ T6545] ntfs3(loop0): ino=b, mi_enum_attr [ 141.495653][ T6545] ntfs3(loop0): Failed to load $Extend (-22). [ 141.495670][ T6545] ntfs3(loop0): Failed to initialize $Extend. [ 141.515333][ T6559] openvswitch: netlink: Message has 8 unknown bytes. [ 141.515364][ T6559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.592200][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 141.659303][ T6566] loop3: detected capacity change from 0 to 64 [ 141.700102][ T6545] Flush: task=syz.0.303[6545] dev=loop0 state=2 [ 141.742224][ T6567] mmap: syz.1.313 (6567) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.891723][ T5785] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.053338][ T5785] usb 5-1: Using ep0 maxpacket: 16 [ 142.075503][ T5785] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.075537][ T5785] usb 5-1: config 1 interface 0 has no altsetting 0 [ 142.143564][ T6545] Teardown: task=syz.0.303[6545] dev=loop0 state=2 [ 142.189950][ T5785] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.40 [ 142.189979][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.189997][ T5785] usb 5-1: Product: syz [ 142.190010][ T5785] usb 5-1: Manufacturer: syz [ 142.190023][ T5785] usb 5-1: SerialNumber: syz [ 142.361137][ T6574] mmap: syz.2.316 (6574): VmData 37593088 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 142.427593][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 142.508632][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 142.576419][ T5785] usbhid 5-1:1.0: can't add hid device: -71 [ 142.576538][ T5785] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 142.654436][ T5785] usb 5-1: USB disconnect, device number 4 [ 143.285430][ T5785] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 143.448015][ T5785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.448050][ T5785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 143.448076][ T5785] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.448101][ T5785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.448132][ T5785] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 143.448153][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.588774][ T5785] usb 1-1: config 0 descriptor?? [ 143.599502][ T6585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.695057][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 143.722766][ T6596] loop3: detected capacity change from 0 to 4096 [ 143.734111][ T6596] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 143.992377][ T6596] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 143.993095][ T6596] ntfs3(loop3): ino=1a, mi_enum_attr [ 143.993307][ T6596] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 144.138394][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138430][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138457][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138481][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138503][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138526][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138548][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138570][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138592][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.138614][ T5785] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 144.316862][ T6596] ntfs3(loop3): ino=5, "/" ntfs_readdir [ 144.369279][ T5785] ntrig 0003:1B96:0009.0004: hidraw0: USB HID v0.0c Device [HID 1b96:0009] on usb-dummy_hcd.0-1/input0 [ 144.406098][ T5785] usb 1-1: USB disconnect, device number 5 [ 144.592242][ T6613] atomic_op ffff888065d59218 conn xmit_atomic 0000000000000000 [ 144.594866][ T6610] fido_id[6610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 144.603617][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 144.717531][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 145.319289][ T5785] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.485362][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.485416][ T5785] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 145.485437][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.524550][ T5785] usb 1-1: config 0 descriptor?? [ 145.588735][ T5785] pwc: Askey VC010 type 2 USB webcam detected. [ 145.655682][ T11] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.758090][ T5785] pwc: send_video_command error -71 [ 145.758123][ T5785] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 145.758229][ T5785] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 145.798285][ T5785] usb 1-1: USB disconnect, device number 6 [ 145.834387][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 145.836820][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.836850][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 145.836890][ T11] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 145.836912][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.838108][ T6636] loop3: detected capacity change from 0 to 2048 [ 145.903758][ T11] usb 5-1: config 0 descriptor?? [ 146.203041][ T6636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.325658][ T11] hid (null): unknown global tag 0xa3 [ 146.409112][ T6642] loop2: detected capacity change from 0 to 512 [ 146.417274][ T11] hid-multitouch 0003:0EEF:72D0.0005: unexpected long global item [ 146.420637][ T11] hid-multitouch 0003:0EEF:72D0.0005: probe with driver hid-multitouch failed with error -22 [ 146.548641][ T6644] tipc: Started in network mode [ 146.548670][ T6644] tipc: Node identity 7f000001, cluster identity 4711 [ 146.592399][ T6644] tipc: Enabled bearer , priority 10 [ 146.630644][ T6642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.630772][ T6642] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.634936][ T11] usb 5-1: USB disconnect, device number 5 [ 146.793314][ T38] audit: type=1800 audit(1783691242.470:4): pid=6636 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.344" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 146.958916][ T6651] loop0: detected capacity change from 0 to 2048 [ 147.000047][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.010509][ T6651] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 147.107420][ T6654] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.128987][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 147.227514][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 147.310658][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 147.331679][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 147.593941][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 147.662410][ T5726] tipc: Node number set to 2130706433 [ 147.746470][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 147.874435][ T6677] block nbd0: NBD_DISCONNECT [ 148.051827][ T5707] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.219235][ T5707] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 148.219282][ T5707] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 148.219304][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.265008][ T5707] usb 2-1: config 0 descriptor?? [ 148.754997][ T5707] elecom 0003:056E:011C.0006: item fetching failed at offset 2/40 [ 148.757315][ T5707] elecom 0003:056E:011C.0006: probe with driver elecom failed with error -22 [ 148.938465][ T11] usb 2-1: USB disconnect, device number 7 [ 149.267134][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 149.267157][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 149.267181][ T6711] netlink: 'syz.2.376': attribute type 18 has an invalid length. [ 149.267193][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 149.511415][ T6717] loop2: detected capacity change from 0 to 64 [ 150.028147][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 150.104227][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 150.478589][ T6743] loop0: detected capacity change from 0 to 128 [ 150.493334][ T5785] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.595573][ T6743] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.595611][ T6743] hpfs: filesystem error: improperly stopped [ 150.595619][ T6743] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.595626][ T6743] hpfs: You really don't want any checks? You are crazy... [ 150.595843][ T6743] hpfs: hpfs_map_sector(): read error [ 150.595848][ T6743] hpfs: code page support is disabled [ 150.595920][ T6743] hpfs: hpfs_map_4sectors(): unaligned read [ 150.595963][ T6743] hpfs: hpfs_map_4sectors(): unaligned read [ 150.595968][ T6743] hpfs: filesystem error: unable to find root dir [ 150.727881][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 150.751100][ T5785] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 150.751131][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.751150][ T5785] usb 4-1: Product: syz [ 150.751163][ T5785] usb 4-1: Manufacturer: syz [ 150.751176][ T5785] usb 4-1: SerialNumber: syz [ 150.815093][ T5785] usb 4-1: config 0 descriptor?? [ 150.819820][ T6749] loop2: detected capacity change from 0 to 256 [ 150.847231][ T5785] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 150.870664][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 150.973849][ T6752] loop0: detected capacity change from 0 to 512 [ 151.008624][ T6752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.292460][ T6752] EXT4-fs (loop0): 1 truncate cleaned up [ 151.321583][ T6752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.474660][ T5785] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 151.474740][ T5785] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 151.532241][ T5785] usb 4-1: USB disconnect, device number 2 [ 151.611881][ T6761] loop1: detected capacity change from 0 to 1024 [ 151.680804][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 151.714462][ T5588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.807593][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 151.841482][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 151.930966][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 152.182798][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 152.320910][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 152.720520][ T6786] Illegal XDP return value 4294967274 on prog (id 26) dev N/A, expect packet loss! [ 153.102645][ T5785] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.117522][ T6768] loop0: detected capacity change from 0 to 32768 [ 153.261362][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 153.263985][ T5785] usb 3-1: config 32 has an invalid interface number: 85 but max is 0 [ 153.264021][ T5785] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 153.264039][ T5785] usb 3-1: config 32 has no interface number 0 [ 153.264076][ T5785] usb 3-1: config 32 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.264100][ T5785] usb 3-1: config 32 interface 85 has no altsetting 0 [ 153.323350][ T5785] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 153.323378][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.323395][ T5785] usb 3-1: Product: syz [ 153.323407][ T5785] usb 3-1: Manufacturer: syz [ 153.323419][ T5785] usb 3-1: SerialNumber: syz [ 153.384580][ T6810] loop1: detected capacity change from 0 to 512 [ 153.401846][ T6768] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 153.434566][ T5785] appletouch 3-1:32.85: Could not find int-in endpoint [ 153.434599][ T5785] appletouch 3-1:32.85: probe with driver appletouch failed with error -5 [ 153.439240][ T5785] usbhid 3-1:32.85: couldn't find an input interrupt endpoint [ 153.497028][ T6768] XFS (loop0): Ending clean mount [ 153.733398][ T6810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.839376][ T5588] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 153.959445][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.031251][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 154.153161][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 154.212200][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 154.380361][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 154.574244][ T6817] loop4: detected capacity change from 0 to 32768 [ 155.169197][ T201] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.306265][ T6847] loop3: detected capacity change from 0 to 512 [ 155.309427][ T6847] EXT4-fs: Ignoring removed orlov option [ 155.309455][ T6847] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.348454][ T6847] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.432: corrupted in-inode xattr: e_value size too large [ 155.348488][ T6847] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.359824][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 155.359856][ C1] EXT4-fs (loop3): initial error at time 1783691251: ext4_iget_extra_inode:5180: inode 15 [ 155.359876][ C1] EXT4-fs (loop3): last error at time 1783691251: ext4_iget_extra_inode:5180: inode 15 [ 155.453247][ T6847] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.432: couldn't read orphan inode 15 (err -117) [ 155.453279][ T6847] loop3: lost filesystem error report for type 5 error -117 [ 155.456074][ T201] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 155.456102][ T201] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 155.456120][ T201] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 155.456227][ T201] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 155.456246][ T201] usb 2-1: config 220 has no interface number 2 [ 155.456311][ T201] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.456346][ T201] usb 2-1: config 220 interface 0 has no altsetting 0 [ 155.456363][ T201] usb 2-1: config 220 interface 76 has no altsetting 0 [ 155.456380][ T201] usb 2-1: config 220 interface 1 has no altsetting 0 [ 155.463955][ T6847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.464787][ T201] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 155.464817][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.464835][ T201] usb 2-1: Product: syz [ 155.464847][ T201] usb 2-1: Manufacturer: syz [ 155.464859][ T201] usb 2-1: SerialNumber: syz [ 155.535714][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 155.704573][ T5589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.844045][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 155.908604][ T201] usb 2-1: selecting invalid altsetting 0 [ 155.909332][ T201] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 155.909367][ T201] uvcvideo 2-1:220.0: No valid video chain found. [ 155.980168][ T201] usb 2-1: selecting invalid altsetting 0 [ 155.980205][ T201] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 156.035175][ T201] usb 2-1: USB disconnect, device number 8 [ 156.288396][ T9] usb 3-1: USB disconnect, device number 4 [ 156.297678][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 156.620678][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 156.711103][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 157.391024][ T6881] loop4: detected capacity change from 0 to 512 [ 157.532604][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.532694][ T6881] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.769778][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.890066][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 157.985478][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 158.053948][ T5700] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.114270][ T6902] loop3: detected capacity change from 0 to 512 [ 158.257752][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.257787][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.257825][ T5700] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 158.257846][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.264265][ T6902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.266414][ T5700] usb 1-1: config 0 descriptor?? [ 158.266662][ T6902] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.412183][ T6911] loop4: detected capacity change from 0 to 4096 [ 158.568458][ T5700] usbhid 1-1:0.0: can't add hid device: -71 [ 158.568573][ T5700] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 158.614305][ T5700] usb 1-1: USB disconnect, device number 7 [ 158.729240][ T6911] ntfs3(loop4): Failed to load $Extend (-22). [ 158.729266][ T6911] ntfs3(loop4): Failed to initialize $Extend. [ 158.939089][ T5589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.045161][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 159.067692][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 159.119041][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 159.158690][ T5700] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 159.228925][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 159.308337][ T6921] loop4: detected capacity change from 0 to 1024 [ 159.320219][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.320250][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.320286][ T5700] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 159.320307][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.330358][ T5700] usb 1-1: config 0 descriptor?? [ 159.540927][ T5700] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 159.630166][ T5700] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 159.651014][ T6931] loop3: detected capacity change from 0 to 64 [ 159.798325][ T5700] input: failed to attach handler kbd to device input8, error: -5 [ 159.901543][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 160.002045][ T5700] usb 1-1: USB disconnect, device number 8 [ 160.164968][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 160.275612][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 160.297721][ T6939] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 160.297743][ T6939] netlink: 232 bytes leftover after parsing attributes in process `syz.2.474'. [ 160.297758][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 160.384304][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 160.537122][ T6944] loop4: detected capacity change from 0 to 512 [ 160.605006][ T6944] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.636588][ T6944] EXT4-fs (loop4): 1 truncate cleaned up [ 160.742855][ T6944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.979716][ T6962] sctp: [Deprecated]: syz.2.480 (pid 6962) Use of int in max_burst socket option. [ 160.979716][ T6962] Use struct sctp_assoc_value instead [ 161.374542][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.412479][ T5726] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.460509][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 161.581310][ T201] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 161.599577][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 161.599738][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 161.615435][ T5726] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 161.615466][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.615497][ T5726] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 161.615518][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.666546][ T5726] usb 4-1: config 0 descriptor?? [ 161.761115][ T6979] bridge_slave_0: default FDB implementation only supports local addresses [ 161.787874][ T201] usb 1-1: Using ep0 maxpacket: 8 [ 161.789938][ T201] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.789970][ T201] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.789999][ T201] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 161.790019][ T201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.795393][ T201] usb 1-1: config 0 descriptor?? [ 162.251648][ T5726] hid_parser_main: 30 callbacks suppressed [ 162.251670][ T5726] lenovo 0003:17EF:60A4.0007: unknown main item tag 0x4 [ 162.251953][ T5726] lenovo 0003:17EF:60A4.0007: reserved main item tag 0xd [ 162.274719][ T6986] tipc: Started in network mode [ 162.274748][ T6986] tipc: Node identity e0000001, cluster identity 4711 [ 162.274797][ T6986] tipc: Enabling of bearer rejected, failed to enable media [ 162.400087][ T201] uclogic 0003:2179:0077.0008: interface is invalid, ignoring [ 162.416701][ T5726] lenovo 0003:17EF:60A4.0007: hidraw0: USB HID v0.7f Device [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 162.486795][ T9] usb 1-1: USB disconnect, device number 9 [ 162.586561][ T5726] usb 4-1: USB disconnect, device number 3 [ 162.685289][ T6990] fido_id[6990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 162.798011][ T6993] loop1: detected capacity change from 0 to 1024 [ 162.829216][ T6993] EXT4-fs: Ignoring removed bh option [ 162.833413][ T6993] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.861822][ T6993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 162.861939][ T6993] System zones: 0-1, 3-12 [ 162.938184][ T6977] loop2: detected capacity change from 0 to 32768 [ 162.965667][ T6993] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.494: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.965694][ T6993] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 162.973616][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 162.973638][ C1] EXT4-fs (loop1): initial error at time 1783691258: ext4_map_blocks:833: inode 3: block 1 [ 162.973667][ C1] EXT4-fs (loop1): last error at time 1783691258: ext4_map_blocks:833: inode 3: block 1 [ 162.977470][ T6993] EXT4-fs (loop1): Remounting filesystem read-only [ 162.977496][ T6993] Quota error (device loop1): write_blk: dquota write failed [ 162.977532][ T6993] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 162.977692][ T6993] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 162.977826][ T6993] EXT4-fs (loop1): 1 orphan inode deleted [ 163.177611][ T6993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.329693][ T6993] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 163.384604][ T7000] loop0: detected capacity change from 0 to 512 [ 163.457132][ T7000] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.492053][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.624517][ T7000] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.495: Allocating blocks 41-42 which overlap fs metadata [ 163.624552][ T7000] loop0: lost filesystem error report for type 5 error -117 [ 163.634363][ C0] EXT4-fs (loop0): initial error at time 1783691259: ext4_mb_mark_diskspace_used:4222 [ 163.634390][ C0] EXT4-fs (loop0): last error at time 1783691259: ext4_mb_mark_diskspace_used:4222 [ 163.714925][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 163.718484][ T7000] EXT4-fs (loop0): Remounting filesystem read-only [ 163.718637][ T7000] Quota error (device loop0): write_blk: dquota write failed [ 163.718652][ T7000] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 163.719025][ T7000] Quota error (device loop0): write_blk: dquota write failed [ 163.719134][ T7000] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 163.719318][ T7000] EXT4-fs (loop0): 1 truncate cleaned up [ 163.819210][ T7000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.822311][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 163.990896][ T7014] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 163.990929][ T7014] CIFS: Unable to determine destination address [ 164.115100][ T5588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.133401][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.230720][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 164.267225][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 164.303293][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.303324][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 164.303346][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.303372][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 164.303390][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.313596][ T9] usb 5-1: config 0 descriptor?? [ 164.394680][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 164.497323][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 164.595637][ T7026] CUSE: unknown device info "" [ 164.595652][ T7026] CUSE: unknown device info "" [ 164.595660][ T7026] CUSE: unknown device info "ÿ" [ 164.595672][ T7026] CUSE: unknown device info "" [ 164.595678][ T7026] CUSE: unknown device info "ÿ" [ 164.595685][ T7026] CUSE: unknown device info "" [ 164.595693][ T7026] CUSE: zero length info key specified [ 164.815151][ T9] logitech 0003:046D:C293.0009: global environment stack underflow [ 164.815172][ T9] logitech 0003:046D:C293.0009: item 0 2 1 11 parsing failed [ 164.816361][ T9] logitech 0003:046D:C293.0009: parse failed [ 164.841409][ T9] logitech 0003:046D:C293.0009: probe with driver logitech failed with error -22 [ 165.038391][ T37] usb 5-1: USB disconnect, device number 6 [ 165.252496][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 165.458314][ T7046] loop3: detected capacity change from 0 to 512 [ 165.576630][ T7045] loop0: detected capacity change from 0 to 4096 [ 165.607118][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.607248][ T7046] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.663084][ T7045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.749648][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.514'. [ 165.779886][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 165.779919][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.517'. [ 165.963160][ T5589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.100335][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 166.213879][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 166.329849][ T5588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.530734][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 166.656762][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 166.799845][ T7085] loop0: detected capacity change from 0 to 1024 [ 166.954159][ T201] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 166.970021][ T7091] capability: warning: `syz.3.535' uses 32-bit capabilities (legacy support in use) [ 167.112937][ T201] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.112963][ T201] usb 5-1: config 0 has no interface number 0 [ 167.133251][ T201] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 167.133279][ T201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.133297][ T201] usb 5-1: Product: syz [ 167.133309][ T201] usb 5-1: Manufacturer: syz [ 167.133322][ T201] usb 5-1: SerialNumber: syz [ 167.194147][ T201] usb 5-1: config 0 descriptor?? [ 167.206037][ T37] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.278907][ T201] usb 5-1: selecting invalid altsetting 1 [ 167.293870][ T201] dvb_ttusb_budget: ttusb_init_controller: error [ 167.293888][ T201] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 167.305436][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 167.382393][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 167.386786][ T37] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 167.386813][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.387108][ T37] usb 2-1: config 0 has no interface number 0 [ 167.420483][ T37] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 167.420512][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.420530][ T37] usb 2-1: Product: syz [ 167.420543][ T37] usb 2-1: Manufacturer: syz [ 167.420557][ T37] usb 2-1: SerialNumber: syz [ 167.456197][ T37] usb 2-1: config 0 descriptor?? [ 167.477927][ T201] DVB: Unable to find symbol stv0299_attach() [ 167.490105][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 167.531376][ T7103] loop0: detected capacity change from 0 to 64 [ 167.591083][ T37] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 167.646238][ T7107] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.542'. [ 167.693271][ T201] DVB: Unable to find symbol tda8083_attach() [ 167.693286][ T201] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 167.710890][ T201] usb 5-1: USB disconnect, device number 7 [ 167.892110][ T5707] usb 2-1: USB disconnect, device number 9 [ 168.174084][ T5588] Flush: task=syz-executor[5588] dev=loop0 state=2 [ 168.191809][ T38] audit: type=1326 audit(1783691264.006:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7115 comm="syz.4.547" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7286de59 code=0x7ffc0000 [ 168.193643][ T38] audit: type=1326 audit(1783691264.026:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7115 comm="syz.4.547" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7286de59 code=0x7ffc0000 [ 168.194788][ T38] audit: type=1326 audit(1783691264.026:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7115 comm="syz.4.547" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0f7286de59 code=0x7ffc0000 [ 168.196139][ T38] audit: type=1326 audit(1783691264.026:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7115 comm="syz.4.547" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7286de59 code=0x7ffc0000 [ 168.222450][ T38] audit: type=1326 audit(1783691264.026:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7115 comm="syz.4.547" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f0f7286de59 code=0x7ffc0000 [ 168.340560][ T38] audit: type=1326 audit(1783691264.177:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7115 comm="syz.4.547" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7286de59 code=0x7ffc0000 [ 168.342770][ T38] audit: type=1326 audit(1783691264.177:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7115 comm="syz.4.547" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7286de59 code=0x7ffc0000 [ 168.442838][ T5588] Teardown: task=syz-executor[5588] dev=loop0 state=2 [ 168.610123][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.550'. [ 168.616629][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.550'. [ 168.781616][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 168.857415][ T7112] loop2: detected capacity change from 0 to 32768 [ 168.880879][ T7112] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.544 (7112) [ 169.107207][ T5707] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.215724][ T7112] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 169.215767][ T7112] BTRFS info (device loop2): using sha256 checksum algorithm [ 169.276365][ T5707] usb 1-1: Using ep0 maxpacket: 16 [ 169.325813][ T5707] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 169.348879][ T5707] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 169.348907][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.348925][ T5707] usb 1-1: Product: syz [ 169.348937][ T5707] usb 1-1: Manufacturer: syz [ 169.348950][ T5707] usb 1-1: SerialNumber: syz [ 169.386195][ T5707] r8152-cfgselector 1-1: Unknown version 0x0000 [ 169.386220][ T5707] r8152-cfgselector 1-1: config 0 descriptor?? [ 169.474143][ T7148] loop1: detected capacity change from 0 to 512 [ 169.488383][ T7148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.851316][ T11] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 169.893896][ T7148] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.555: invalid indirect mapped block 32768 (level 2) [ 169.893934][ T7148] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 169.903745][ C1] EXT4-fs (loop1): initial error at time 1783691265: ext4_free_branches:1023: inode 16 [ 169.903778][ C1] EXT4-fs (loop1): last error at time 1783691265: ext4_free_branches:1023: inode 16 [ 169.955376][ T7148] EXT4-fs (loop1): Remounting filesystem read-only [ 169.992013][ T7148] EXT4-fs (loop1): 1 orphan inode deleted [ 169.992042][ T7148] EXT4-fs (loop1): 1 truncate cleaned up [ 170.074650][ T7160] loop3: detected capacity change from 0 to 128 [ 170.091244][ T7160] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 170.129185][ T7148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.175684][ T7160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.262430][ T7112] BTRFS info (device loop2): turning off barriers [ 170.262452][ T7112] BTRFS info (device loop2): enabling free space tree [ 170.294019][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.346369][ T5590] Flush: task=syz-executor[5590] dev=loop1 state=2 [ 170.501249][ T7162] loop4: detected capacity change from 0 to 4096 [ 170.568034][ T5590] Teardown: task=syz-executor[5590] dev=loop1 state=2 [ 170.600795][ T7164] process 'syz.1.559' launched './file1' with NULL argv: empty string added [ 170.806417][ T5589] Flush: task=syz-executor[5589] dev=loop3 state=2 [ 170.867043][ T7173] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.991549][ T5589] Teardown: task=syz-executor[5589] dev=loop3 state=2 [ 171.158256][ T38] audit: type=1326 audit(1783691266.993:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7182 comm="syz.0.569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88ffaede59 code=0x0 [ 171.256145][ T5593] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 171.287545][ T5951] Flush: task=udevd[5951] dev=loop4 state=2 [ 171.331958][ T37] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.435986][ T5951] Teardown: task=udevd[5951] dev=loop4 state=2 [ 171.500388][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 171.528576][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.529684][ T37] usb 2-1: config 1 has an invalid interface number: 185 but max is 0 [ 171.529708][ T37] usb 2-1: config 1 has no interface number 0 [ 171.529736][ T37] usb 2-1: config 1 interface 185 has no altsetting 0 [ 171.537204][ T37] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=29.5b [ 171.537233][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.537251][ T37] usb 2-1: Product: syz [ 171.537264][ T37] usb 2-1: Manufacturer: syz [ 171.537276][ T37] usb 2-1: SerialNumber: syz [ 171.607706][ T7190] overlayfs: missing 'lowerdir' [ 172.235375][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 172.398615][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 172.414008][ T37] usb 2-1: selecting invalid altsetting 1 [ 172.414029][ T37] comedi comedi5: could not switch to alternate setting 1 [ 172.414043][ T37] usbduxfast 2-1:1.185: driver 'usbduxfast' failed to auto-configure device. [ 172.552866][ T37] usb 2-1: USB disconnect, device number 10 [ 172.603785][ T11] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.747934][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 172.750003][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.750034][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.750067][ T11] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 172.750088][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.824333][ T11] usb 1-1: config 0 descriptor?? [ 173.180064][ T7215] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 173.313705][ T11] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 173.313741][ T11] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 173.313765][ T11] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 173.313788][ T11] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 173.313812][ T11] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 173.313849][ T11] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 173.313874][ T11] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 173.313899][ T11] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 173.454527][ T11] savu 0003:1E7D:2D5A.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 173.497103][ T11] usb 1-1: USB disconnect, device number 11 [ 173.805450][ T7230] fido_id[7230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 174.058213][ T7243] loop1: detected capacity change from 0 to 256 [ 174.208183][ T201] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 174.325802][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 174.330053][ T5951] Flush: task=udevd[5951] dev=loop1 state=2 [ 174.375190][ T201] usb 4-1: Using ep0 maxpacket: 32 [ 174.377365][ T201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.377392][ T201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.377423][ T201] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 174.377441][ T201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.440644][ T201] usb 4-1: config 0 descriptor?? [ 174.451855][ T201] hub 4-1:0.0: USB hub found [ 174.501887][ T5951] Teardown: task=udevd[5951] dev=loop1 state=2 [ 174.691103][ T201] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 174.901006][ T201] usbhid 4-1:0.0: can't add hid device: -71 [ 174.901127][ T201] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.041047][ T7259] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 175.041072][ T7259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 175.105832][ T201] usb 4-1: USB disconnect, device number 4 [ 175.130732][ T11] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.371277][ T7259] vhci_hcd vhci_hcd.0: Device attached [ 175.433313][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 175.467848][ T11] usb 3-1: config 0 has no interfaces? [ 175.470969][ T11] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 175.470999][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.471018][ T11] usb 3-1: Product: syz [ 175.471031][ T11] usb 3-1: Manufacturer: syz [ 175.471044][ T11] usb 3-1: SerialNumber: syz [ 175.519489][ T11] usb 3-1: config 0 descriptor?? [ 175.558035][ T7277] loop0: detected capacity change from 0 to 64 [ 175.581225][ T37] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 175.633059][ T37] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 175.800648][ T5707] usb 3-1: USB disconnect, device number 5 [ 175.816161][ T7265] usb 37-1: recv xbuf, 0 [ 175.828643][ T7267] ================================================================== [ 175.828658][ T7267] BUG: KASAN: slab-use-afte[ 175.828658][ T7267] BUG: KASAN: slab-use-after-free in vhci_tx_loop+0x3e9/0x1c70 [ 175.828683][ T7267] Read of size 8 at addr ffff888021fa6920 by task vhci_tx/7267 [ 175.828697][ T7267] [ 175.828718][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 175.828742][ T7267] Tainted: [L]=SOFTLOCKUP [ 175.828748][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.828767][ T7267] Call Trace: [ 175.828775][ T7267] [ 175.828783][ T7267] dump_stack_lvl+0xe8/0x150 [ 175.828807][ T7267] print_address_description+0x55/0x1e0 [ 175.828831][ T7267] ? vhci_tx_loop+0x3e9/0x1c70 [ 175.828847][ T7267] print_report+0x58/0x70 [ 175.828868][ T7267] kasan_report+0x117/0x150 [ 175.828887][ T7267] ? vhci_tx_loop+0x3e9/0x1c70 [ 175.828906][ T7267] vhci_tx_loop+0x3e9/0x1c70 [ 175.828931][ T7267] ? __pfx_vhci_tx_loop+0x10/0x10 [ 175.828950][ T7267] ? __lock_acquire+0x6df/0x2e40 [ 175.828973][ T7267] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 175.829015][ T7267] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.829040][ T7267] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.829060][ T7267] ? __pfx_autoremove_wake_function+0x10/0x10 [ 175.829085][ T7267] ? __kthread_parkme+0x71/0x1f0 [ 175.829107][ T7267] ? __kthread_parkme+0x196/0x1f0 [ 175.829129][ T7267] kthread+0x388/0x470 [ 175.829143][ T7267] ? __pfx_vhci_tx_loop+0x10/0x10 [ 175.829158][ T7267] ? __pfx_kthread+0x10/0x10 [ 175.829172][ T7267] ret_from_fork+0x514/0xb70 [ 175.829189][ T7267] ? __pfx_ret_from_fork+0x10/0x10 [ 175.829204][ T7267] ? __switch_to+0xc89/0x1420 [ 175.829228][ T7267] ? __pfx_kthread+0x10/0x10 [ 175.829243][ T7267] ret_from_fork_asm+0x1a/0x30 [ 175.829266][ T7267] [ 175.829272][ T7267] [ 175.829276][ T7267] Allocated by task 37: [ 175.829292][ T7267] kasan_save_track+0x3e/0x80 [ 175.829307][ T7267] __kasan_kmalloc+0x93/0xb0 [ 175.829321][ T7267] __kmalloc_cache_noprof+0x3cd/0x670 [ 175.829337][ T7267] vhci_urb_enqueue+0x5c2/0xe00 [ 175.829352][ T7267] usb_hcd_submit_urb+0x322/0x1b40 [ 175.829374][ T7267] usb_start_wait_urb+0x13f/0x5b0 [ 175.829391][ T7267] usb_control_msg+0x234/0x3e0 [ 175.829407][ T7267] hub_port_init+0xb0b/0x28b0 [ 175.829426][ T7267] hub_event+0x24e2/0x4cf0 [ 175.829443][ T7267] process_one_work+0xaaf/0x1480 [ 175.829461][ T7267] worker_thread+0xb05/0x10d0 [ 175.829478][ T7267] kthread+0x388/0x470 [ 175.829491][ T7267] ret_from_fork+0x514/0xb70 [ 175.829503][ T7267] ret_from_fork_asm+0x1a/0x30 [ 175.829516][ T7267] [ 175.829520][ T7267] Freed by task 7265: [ 175.829527][ T7267] kasan_save_track+0x3e/0x80 [ 175.829541][ T7267] kasan_save_free_info+0x40/0x50 [ 175.829559][ T7267] __kasan_slab_free+0x5c/0x80 [ 175.829573][ T7267] kfree+0x1c5/0x6c0 [ 175.829592][ T7267] pickup_urb_and_free_priv+0x225/0x3f0 [ 175.829607][ T7267] vhci_rx_loop+0x3c5/0xa00 [ 175.829621][ T7267] kthread+0x388/0x470 [ 175.829633][ T7267] ret_from_fork+0x514/0xb70 [ 175.829646][ T7267] ret_from_fork_asm+0x1a/0x30 [ 175.829659][ T7267] [ 175.829663][ T7267] The buggy address belongs to the object at ffff888021fa6900 [ 175.829663][ T7267] which belongs to the cache kmalloc-64 of size 64 [ 175.829677][ T7267] The buggy address is located 32 bytes inside of [ 175.829677][ T7267] freed 64-byte region [ffff888021fa6900, ffff888021fa6940) [ 175.829695][ T7267] [ 175.829699][ T7267] The buggy address belongs to the physical page: [ 175.829718][ T7267] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21fa6 [ 175.829735][ T7267] flags: 0x80000000000000(node=0|zone=1) [ 175.829752][ T7267] page_type: f5(slab) [ 175.829767][ T7267] raw: 0080000000000000 ffff88813feb48c0 dead000000000100 dead000000000122 [ 175.829781][ T7267] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 175.829788][ T7267] page dumped because: kasan: bad access detected [ 175.829800][ T7267] page_owner tracks the page as allocated [ 175.829806][ T7267] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4957, tgid 4957 (udevd), ts 25813873934 [ 175.829833][ T7267] post_alloc_hook+0x1f9/0x250 [ 175.829854][ T7267] get_page_from_freelist+0x264c/0x26c0 [ 175.829872][ T7267] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 175.829887][ T7267] allocate_slab+0x7c/0x5e0 [ 175.829906][ T7267] refill_objects+0x2d8/0x350 [ 175.829925][ T7267] __pcs_replace_empty_main+0x330/0x690 [ 175.829942][ T7267] __kmalloc_noprof+0x543/0x790 [ 175.829957][ T7267] tomoyo_encode+0x2ad/0x570 [ 175.829976][ T7267] tomoyo_realpath_from_path+0x5fa/0x640 [ 175.830000][ T7267] tomoyo_path_perm+0x283/0x560 [ 175.830018][ T7267] security_inode_getattr+0x121/0x2d0 [ 175.830032][ T7267] __x64_sys_newfstat+0x133/0x270 [ 175.830048][ T7267] do_syscall_64+0x174/0x580 [ 175.830064][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.830078][ T7267] page last free pid 1 tgid 1 ts 22328061794 stack trace: [ 175.830090][ T7267] __free_frozen_pages+0x117d/0x1260 [ 175.830104][ T7267] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 175.830125][ T7267] __apply_to_page_range+0xbd8/0x1420 [ 175.830144][ T7267] __kasan_release_vmalloc+0xa2/0xd0 [ 175.830165][ T7267] purge_vmap_node+0x220/0x960 [ 175.830179][ T7267] __purge_vmap_area_lazy+0x783/0xb40 [ 175.830195][ T7267] _vm_unmap_aliases+0x73b/0x7f0 [ 175.830215][ T7267] change_page_attr_set_clr+0x307/0xf60 [ 175.830229][ T7267] set_memory_nx+0xd6/0x110 [ 175.830243][ T7267] free_kernel_image_pages+0x85/0x100 [ 175.830262][ T7267] kernel_init+0x36/0x1d0 [ 175.830279][ T7267] ret_from_fork+0x514/0xb70 [ 175.830299][ T7267] ret_from_fork_asm+0x1a/0x30 [ 175.830312][ T7267] [ 175.830316][ T7267] Memory state around the buggy address: [ 175.830326][ T7267] ffff888021fa6800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 175.830336][ T7267] ffff888021fa6880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 175.830346][ T7267] >ffff888021fa6900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 175.830353][ T7267] ^ [ 175.830362][ T7267] ffff888021fa6980: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 175.830372][ T7267] ffff888021fa6a00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 175.830379][ T7267] ================================================================== [ 175.843227][ T7267] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 175.843249][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 175.843274][ T7267] Tainted: [L]=SOFTLOCKUP [ 175.843280][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.843296][ T7267] Call Trace: [ 175.843303][ T7267] [ 175.843311][ T7267] vpanic+0x5d9/0xad0 [ 175.843332][ T7267] ? __pfx_clockevents_program_event+0x10/0x10 [ 175.843357][ T7267] ? __pfx_vpanic+0x10/0x10 [ 175.843380][ T7267] panic+0xc5/0xd0 [ 175.843394][ T7267] ? __pfx_panic+0x10/0x10 [ 175.843410][ T7267] ? preempt_schedule_thunk+0x16/0x40 [ 175.843431][ T7267] ? vhci_tx_loop+0x3e9/0x1c70 [ 175.843447][ T7267] ? preempt_schedule_thunk+0x16/0x40 [ 175.843466][ T7267] ? vhci_tx_loop+0x3e9/0x1c70 [ 175.843482][ T7267] check_panic_on_warn+0x89/0xb0 [ 175.843499][ T7267] ? vhci_tx_loop+0x3e9/0x1c70 [ 175.843514][ T7267] end_report+0x73/0x170 [ 175.843533][ T7267] ? vhci_tx_loop+0x3e9/0x1c70 [ 175.843547][ T7267] kasan_report+0x128/0x150 [ 175.843566][ T7267] ? vhci_tx_loop+0x3e9/0x1c70 [ 175.843585][ T7267] vhci_tx_loop+0x3e9/0x1c70 [ 175.843611][ T7267] ? __pfx_vhci_tx_loop+0x10/0x10 [ 175.843631][ T7267] ? __lock_acquire+0x6df/0x2e40 [ 175.843653][ T7267] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 175.843672][ T7267] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.843695][ T7267] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.843714][ T7267] ? __pfx_autoremove_wake_function+0x10/0x10 [ 175.843740][ T7267] ? __kthread_parkme+0x71/0x1f0 [ 175.843762][ T7267] ? __kthread_parkme+0x196/0x1f0 [ 175.843785][ T7267] kthread+0x388/0x470 [ 175.843800][ T7267] ? __pfx_vhci_tx_loop+0x10/0x10 [ 175.843815][ T7267] ? __pfx_kthread+0x10/0x10 [ 175.843830][ T7267] ret_from_fork+0x514/0xb70 [ 175.843847][ T7267] ? __pfx_ret_from_fork+0x10/0x10 [ 175.843863][ T7267] ? __switch_to+0xc89/0x1420 [ 175.843886][ T7267] ? __pfx_kthread+0x10/0x10 [ 175.843902][ T7267] ret_from_fork_asm+0x1a/0x30 [ 175.843923][ T7267] [ 175.844164][ T7267] Kernel Offset: disabled