last executing test programs: 6.044019474s ago: executing program 4 (id=330): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet_icmp(0x2, 0x2, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) 5.355416419s ago: executing program 1 (id=335): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 3.926654512s ago: executing program 1 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1}}, 0x18, &(0x7f0000000080)={0x0}}, 0xee) 3.720550505s ago: executing program 3 (id=342): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf250800010000000000080015000000000008004f000000000008004b0013000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 3.696387359s ago: executing program 0 (id=343): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e25, 0x9, @mcast2, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.42491568s ago: executing program 1 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket(0xa, 0x1, 0x0) listen(r6, 0x7f) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 3.365118328s ago: executing program 3 (id=346): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000014c0)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) 3.228918555s ago: executing program 0 (id=347): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='afs_cm_no_server\x00', r1, 0x0, 0x400000000000}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.830017115s ago: executing program 2 (id=348): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(r0) 2.54827617s ago: executing program 0 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 2.435124306s ago: executing program 3 (id=350): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/212, 0xd4) 2.384997032s ago: executing program 1 (id=351): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xe, 0xc}, {0xb, 0xd}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.296319718s ago: executing program 2 (id=352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x4d, &(0x7f00000006c0)="3e8a4f2ed594100661d53904c8142a2a6840508c69534f2252f4de4d76d1b7f9f1d078080021d90b7692dfb43d330857886ca14d033bcd55471b53b1e7e7e0e16ef665096826730354a5e2be21", 0x9, 0x1, 0xc49, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={r3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000100)) 1.875707671s ago: executing program 0 (id=353): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.751978325s ago: executing program 1 (id=354): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x40004, &(0x7f0000000000)={0x2, 0x4e25}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) 1.655101779s ago: executing program 4 (id=355): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 1.500699397s ago: executing program 2 (id=356): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/206, 0xce, 0x40000000, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.34735036s ago: executing program 1 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 1.223644464s ago: executing program 0 (id=358): getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045", 0x19}], 0x1) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.139675752s ago: executing program 4 (id=359): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x4, 0x7}, 0x8) 1.080987611s ago: executing program 2 (id=360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x2) 909.425484ms ago: executing program 3 (id=361): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) listen(0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_emit_ethernet(0x85, &(0x7f0000000380)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4f, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x4f, 0x0, @opaque="25e9bdf78b79dfc3f7ba0bd2c55a828e1b463278453f8eb46d9180e0f47ae850aa326062cebb6d9f9e0f3f8553cb75ef75389cffdad2db6b119ca60f4ecef7426799d86e085d94"}}}}}}, 0x0) 648.563152ms ago: executing program 4 (id=362): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008d40000000c0a010300000000000000000100000008000440000000000900010073797a3000000000ac000380a8000080040001802c"], 0x158}}, 0x0) 624.159881ms ago: executing program 2 (id=363): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}}]}, 0x8c}}, 0x840) 593.863042ms ago: executing program 3 (id=364): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$inet(r0, 0x0, 0x4048081) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, 0x0, 0x4000855) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r3, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8805}, 0x1) 327.365383ms ago: executing program 4 (id=365): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) 288.746065ms ago: executing program 2 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 213.900518ms ago: executing program 3 (id=367): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) 8.513057ms ago: executing program 4 (id=368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "6bad71b350e22a00", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000002440)=@gcm_256={{0x304}, "45c594c057c79552", "1ea90b05633ee088498b8d50702128937e52933d857ebf2d5f788466b5915e97", "d81e1605", "33bbb74f571aefc8"}, 0x38) 0s ago: executing program 0 (id=369): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x8, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 154.234776][ T5780] cgroup: Unknown subsys name 'net' [ 154.361989][ T5780] cgroup: Unknown subsys name 'cpuset' [ 154.385588][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 159.811664][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 163.106521][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.113316][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.661900][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.707031][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.715243][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.733815][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.745708][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.748970][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.761920][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.766327][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.773541][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.779929][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.103719][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.116483][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.124843][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.142271][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.150806][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.164429][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.177842][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.190952][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.201137][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.221693][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.242266][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.252005][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.261252][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.274160][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.285148][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.819191][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 165.867846][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 165.875145][ T5801] Bluetooth: hci1: command tx timeout [ 165.875394][ T5804] Bluetooth: hci0: command tx timeout [ 165.896234][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 165.932829][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 165.977807][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.985406][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.995334][ T5800] bridge_slave_0: entered allmulticast mode [ 166.003952][ T5800] bridge_slave_0: entered promiscuous mode [ 166.030616][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.038371][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.046122][ T5800] bridge_slave_1: entered allmulticast mode [ 166.055342][ T5800] bridge_slave_1: entered promiscuous mode [ 166.203846][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 166.353518][ T5804] Bluetooth: hci3: command tx timeout [ 166.359134][ T5804] Bluetooth: hci4: command tx timeout [ 166.369902][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.394854][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.433459][ T5804] Bluetooth: hci2: command tx timeout [ 166.589296][ T5800] team0: Port device team_slave_0 added [ 166.616494][ T5800] team0: Port device team_slave_1 added [ 166.915649][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.922908][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.953175][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.019163][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.029958][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.037783][ T5809] bridge_slave_0: entered allmulticast mode [ 167.046967][ T5809] bridge_slave_0: entered promiscuous mode [ 167.098070][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.105482][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.131795][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.145646][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.153352][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.160912][ T5815] bridge_slave_0: entered allmulticast mode [ 167.169971][ T5815] bridge_slave_0: entered promiscuous mode [ 167.197666][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.207241][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.215006][ T5815] bridge_slave_1: entered allmulticast mode [ 167.224040][ T5815] bridge_slave_1: entered promiscuous mode [ 167.268074][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.275768][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.283689][ T5809] bridge_slave_1: entered allmulticast mode [ 167.292826][ T5809] bridge_slave_1: entered promiscuous mode [ 167.408884][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.417805][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.425419][ T5799] bridge_slave_0: entered allmulticast mode [ 167.433943][ T5799] bridge_slave_0: entered promiscuous mode [ 167.492555][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.554519][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.561859][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.569558][ T5799] bridge_slave_1: entered allmulticast mode [ 167.577715][ T5799] bridge_slave_1: entered promiscuous mode [ 167.637051][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.682009][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.765022][ T5800] hsr_slave_0: entered promiscuous mode [ 167.773892][ T5800] hsr_slave_1: entered promiscuous mode [ 167.817814][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.827772][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.835522][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.843339][ T5811] bridge_slave_0: entered allmulticast mode [ 167.851468][ T5811] bridge_slave_0: entered promiscuous mode [ 167.906878][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.955290][ T5804] Bluetooth: hci0: command tx timeout [ 167.960913][ T5804] Bluetooth: hci1: command tx timeout [ 167.977954][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.985649][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.993436][ T5811] bridge_slave_1: entered allmulticast mode [ 168.001597][ T5811] bridge_slave_1: entered promiscuous mode [ 168.019314][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.103710][ T5815] team0: Port device team_slave_0 added [ 168.122402][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.226828][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.243760][ T5815] team0: Port device team_slave_1 added [ 168.257584][ T5809] team0: Port device team_slave_0 added [ 168.362075][ T5809] team0: Port device team_slave_1 added [ 168.376687][ T5799] team0: Port device team_slave_0 added [ 168.435996][ T5801] Bluetooth: hci4: command tx timeout [ 168.441598][ T5801] Bluetooth: hci3: command tx timeout [ 168.458162][ T5811] team0: Port device team_slave_0 added [ 168.513672][ T5801] Bluetooth: hci2: command tx timeout [ 168.529264][ T5799] team0: Port device team_slave_1 added [ 168.594375][ T5811] team0: Port device team_slave_1 added [ 168.603502][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.610591][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.636868][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.756143][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.763380][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.789719][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.822124][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.829418][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.855850][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.882043][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.889382][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.915905][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.986720][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.994042][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.020466][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.034535][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.041637][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.067991][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.082084][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.090042][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.117410][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.172500][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.179829][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.206157][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.355480][ T5799] hsr_slave_0: entered promiscuous mode [ 169.365241][ T5799] hsr_slave_1: entered promiscuous mode [ 169.373682][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 169.379571][ T5799] Cannot create hsr debugfs directory [ 169.525107][ T5815] hsr_slave_0: entered promiscuous mode [ 169.534749][ T5815] hsr_slave_1: entered promiscuous mode [ 169.543464][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 169.549335][ T5815] Cannot create hsr debugfs directory [ 169.730487][ T5809] hsr_slave_0: entered promiscuous mode [ 169.739033][ T5809] hsr_slave_1: entered promiscuous mode [ 169.747127][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 169.752956][ T5809] Cannot create hsr debugfs directory [ 169.920281][ T5811] hsr_slave_0: entered promiscuous mode [ 169.929485][ T5811] hsr_slave_1: entered promiscuous mode [ 169.937671][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 169.943801][ T5811] Cannot create hsr debugfs directory [ 170.035306][ T5801] Bluetooth: hci1: command tx timeout [ 170.040908][ T5801] Bluetooth: hci0: command tx timeout [ 170.513473][ T5801] Bluetooth: hci3: command tx timeout [ 170.519214][ T5804] Bluetooth: hci4: command tx timeout [ 170.605241][ T5801] Bluetooth: hci2: command tx timeout [ 170.728011][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.845703][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.903763][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.924455][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.104923][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.131434][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.152913][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.173583][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.348194][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.392055][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.412378][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.459199][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.617725][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.641063][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.687746][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.732044][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.940802][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.979208][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.035015][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.066912][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.076117][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.114442][ T5801] Bluetooth: hci0: command tx timeout [ 172.120052][ T5801] Bluetooth: hci1: command tx timeout [ 172.225356][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.268951][ T3958] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.276634][ T3958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.351444][ T3958] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.359113][ T3958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.391999][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.594125][ T5801] Bluetooth: hci3: command tx timeout [ 172.599727][ T5801] Bluetooth: hci4: command tx timeout [ 172.613430][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.669429][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.677281][ T3873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.686111][ T5801] Bluetooth: hci2: command tx timeout [ 172.767438][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.775021][ T3873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.040706][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.062880][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.189462][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.289951][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.297657][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.322028][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.387971][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.395735][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.469620][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.477217][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.493315][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.500770][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.637202][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.887526][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.993628][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.043614][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.051095][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.121546][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.129081][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.564732][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.792371][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.179402][ T5800] veth0_vlan: entered promiscuous mode [ 175.309541][ T5815] veth0_vlan: entered promiscuous mode [ 175.349410][ T5800] veth1_vlan: entered promiscuous mode [ 175.391262][ T5815] veth1_vlan: entered promiscuous mode [ 175.680833][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.788038][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.815912][ T5800] veth0_macvtap: entered promiscuous mode [ 175.851699][ T5815] veth0_macvtap: entered promiscuous mode [ 175.904467][ T5815] veth1_macvtap: entered promiscuous mode [ 175.957854][ T5800] veth1_macvtap: entered promiscuous mode [ 176.075982][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.169578][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.218496][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.242090][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.262397][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.309761][ T5809] veth0_vlan: entered promiscuous mode [ 176.375864][ T3873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.413137][ T1801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.423844][ T1801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.459677][ T5809] veth1_vlan: entered promiscuous mode [ 176.511384][ T1801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.569952][ T1801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.614603][ T1801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.668088][ T1801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.746987][ T3822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.781906][ T5809] veth0_macvtap: entered promiscuous mode [ 176.844302][ T5811] veth0_vlan: entered promiscuous mode [ 176.871224][ T5809] veth1_macvtap: entered promiscuous mode [ 176.915578][ T5811] veth1_vlan: entered promiscuous mode [ 177.061758][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.137522][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.239371][ T3822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.297251][ T3822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.344084][ T3822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.387765][ T3822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.414980][ T5811] veth0_macvtap: entered promiscuous mode [ 177.486256][ T5811] veth1_macvtap: entered promiscuous mode [ 177.725224][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.832101][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.904930][ T5052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.945036][ T5052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.018502][ T5052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.088910][ T5052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.236098][ T5799] veth0_vlan: entered promiscuous mode [ 178.363859][ T5799] veth1_vlan: entered promiscuous mode [ 178.670825][ T5799] veth0_macvtap: entered promiscuous mode [ 178.730041][ T5799] veth1_macvtap: entered promiscuous mode [ 178.889458][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.012242][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.128805][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.176845][ T3822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.242548][ T3822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.273627][ T3822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.343440][ T5052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.351449][ T5052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.465755][ T1801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.474832][ T1801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.562726][ T1801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.573698][ T1801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.687261][ T3633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.695635][ T3633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.895819][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.904203][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.028691][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 183.146911][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.156324][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.535171][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.544098][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.687589][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.696538][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.814245][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.951859][ T5983] loop2: detected capacity change from 0 to 64 [ 183.997029][ T5983] hfs: Bad value for 'gid' [ 184.718310][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 184.971626][ T3873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.980081][ T3873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.147260][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.155579][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.167514][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 185.346107][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 185.376643][ T5855] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 185.386887][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.455978][ T5855] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 186.141599][ T6010] Zero length message leads to an empty skb [ 186.204883][ T5992] loop3: detected capacity change from 0 to 2043 [ 186.322498][ T5992] Alternate GPT is invalid, using primary GPT. [ 186.330322][ T5992] loop3: p1 p2 p3 [ 186.443559][ T5536] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.628167][ T5536] usb 5-1: Using ep0 maxpacket: 32 [ 186.672121][ T5536] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 186.682018][ T5536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.690491][ T5536] usb 5-1: Product: syz [ 186.694962][ T5536] usb 5-1: Manufacturer: syz [ 186.705484][ T5536] usb 5-1: SerialNumber: syz [ 186.857121][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.867122][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.936032][ T5536] usb 5-1: config 0 descriptor?? [ 186.991448][ T5536] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 187.007128][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.018096][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.128636][ T5855] gspca_nw80x: reg_w err -110 [ 187.133897][ T5855] nw80x 4-1:3.0: probe with driver nw80x failed with error -110 [ 187.200106][ T5855] usb 4-1: USB disconnect, device number 2 [ 187.491403][ T6020] loop2: detected capacity change from 0 to 512 [ 187.585963][ T6020] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 187.649322][ T6020] EXT4-fs (loop2): 1 truncate cleaned up [ 187.658874][ T6020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.711520][ T6020] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 187.753465][ T6020] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.14: Logical block already allocated [ 187.940637][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.951582][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.144767][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.435803][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.452246][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.075087][ T5855] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 189.263607][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 189.350005][ T5855] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 189.358819][ T5855] usb 2-1: config 8 has no interface number 0 [ 189.366903][ T5855] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 189.379524][ T5855] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 189.391218][ T5855] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 189.391279][ T30] audit: type=1804 audit(1763875767.923:2): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.19" name="/newroot/5/file0" dev="tmpfs" ino=44 res=1 errno=0 [ 189.401413][ T5855] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 189.401552][ T5855] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 189.430295][ T6044] loop2: detected capacity change from 0 to 1024 [ 189.434588][ T5855] usb 2-1: config 8 interface 206 has no altsetting 0 [ 189.617015][ T5855] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 189.626494][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.635188][ T5855] usb 2-1: Product: syz [ 189.639539][ T5855] usb 2-1: Manufacturer: syz [ 189.644747][ T5855] usb 2-1: SerialNumber: syz [ 189.914243][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 190.038834][ T5855] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 190.051703][ T5855] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 190.062794][ T5855] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 190.119431][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 190.158340][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.169509][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 190.183802][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 190.196603][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 190.207098][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.269114][ T5855] usb 2-1: USB disconnect, device number 2 [ 190.349239][ T5855] garmin_gps 2-1:8.206: device disconnected [ 190.362911][ T5536] gspca_stk1135: reg_w 0x351 err -71 [ 190.369758][ T5536] gspca_stk1135: serial bus timeout: status=0x00 [ 190.376356][ T5536] gspca_stk1135: Sensor write failed [ 190.381845][ T5536] gspca_stk1135: serial bus timeout: status=0x00 [ 190.397299][ T5536] gspca_stk1135: Sensor write failed [ 190.402829][ T5536] gspca_stk1135: serial bus timeout: status=0x00 [ 190.411845][ T5536] gspca_stk1135: Sensor read failed [ 190.417428][ T5536] gspca_stk1135: serial bus timeout: status=0x00 [ 190.424147][ T5536] gspca_stk1135: Sensor read failed [ 190.429471][ T5536] gspca_stk1135: Detected sensor type unknown (0x0) [ 190.436540][ T5536] gspca_stk1135: serial bus timeout: status=0x00 [ 190.443174][ T5536] gspca_stk1135: Sensor read failed [ 190.448570][ T5536] gspca_stk1135: serial bus timeout: status=0x00 [ 190.455177][ T5536] gspca_stk1135: Sensor read failed [ 190.460562][ T5536] gspca_stk1135: serial bus timeout: status=0x00 [ 190.467191][ T5536] gspca_stk1135: Sensor write failed [ 190.472468][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 190.472614][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.481809][ T5536] gspca_stk1135: serial bus timeout: status=0x00 [ 190.481873][ T5536] gspca_stk1135: Sensor write failed [ 190.482149][ T5536] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 190.491797][ T24] usb 3-1: Product: syz [ 190.491898][ T24] usb 3-1: Manufacturer: syz [ 190.491993][ T24] usb 3-1: SerialNumber: syz [ 190.551811][ T5536] usb 5-1: USB disconnect, device number 2 [ 190.614059][ T24] usb 3-1: config 0 descriptor?? [ 190.836730][ T2164] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 191.003611][ T2164] usb 1-1: Using ep0 maxpacket: 32 [ 191.062546][ T2164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.074289][ T2164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.084673][ T2164] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 191.094199][ T2164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.160247][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 191.246175][ T2164] usb 1-1: config 0 descriptor?? [ 191.368085][ T5804] Bluetooth: min 0 < 6 [ 191.579680][ T5536] usb 3-1: USB disconnect, device number 2 [ 191.677831][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.688068][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.996262][ T2164] usbhid 1-1:0.0: can't add hid device: -71 [ 192.002774][ T2164] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 192.108321][ T2164] usb 1-1: USB disconnect, device number 2 [ 192.243545][ T5536] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 192.439760][ T5536] usb 4-1: Using ep0 maxpacket: 16 [ 192.464102][ T5536] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 192.472608][ T5536] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 192.483323][ T5536] usb 4-1: config 8 has no interface number 0 [ 192.489597][ T5536] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 192.502239][ T5536] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 192.522055][ T5536] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 192.533721][ T5536] usb 4-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.539915][ T6063] FAULT_INJECTION: forcing a failure. [ 192.539915][ T6063] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.552663][ T5536] usb 4-1: config 8 interface 206 has no altsetting 0 [ 192.560423][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.4.27 Not tainted syzkaller #0 PREEMPT(none) [ 192.560547][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.560630][ T6063] Call Trace: [ 192.560684][ T6063] [ 192.560736][ T6063] __dump_stack+0x26/0x30 [ 192.560906][ T6063] dump_stack_lvl+0x1df/0x270 [ 192.561064][ T6063] dump_stack+0x1e/0x25 [ 192.561196][ T6063] should_fail_ex+0x7dc/0x8a0 [ 192.561360][ T6063] should_fail+0x2a/0x40 [ 192.561485][ T6063] should_fail_usercopy+0x2e/0x40 [ 192.561632][ T6063] _copy_from_user+0x33/0x100 [ 192.561779][ T6063] ip_options_get+0x229/0x770 [ 192.561928][ T6063] do_ip_setsockopt+0x2726/0x4a70 [ 192.562092][ T6063] ? kmsan_get_metadata+0xfb/0x160 [ 192.562240][ T6063] ip_setsockopt+0x106/0x210 [ 192.562387][ T6063] ? __pfx_ip_setsockopt+0x10/0x10 [ 192.562526][ T6063] tcp_setsockopt+0x157/0x180 [ 192.562695][ T6063] ? __pfx_tcp_setsockopt+0x10/0x10 [ 192.562844][ T6063] sock_common_setsockopt+0xf5/0x140 [ 192.562996][ T6063] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.563143][ T6063] __sys_setsockopt+0x43e/0x580 [ 192.563326][ T6063] __ia32_sys_setsockopt+0xf3/0x1a0 [ 192.563507][ T6063] ia32_sys_call+0x24c2/0x4310 [ 192.563676][ T6063] __do_fast_syscall_32+0xb0/0x150 [ 192.563847][ T6063] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 192.564019][ T6063] do_fast_syscall_32+0x38/0x80 [ 192.564191][ T6063] do_SYSENTER_32+0x1f/0x30 [ 192.564353][ T6063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.564507][ T6063] RIP: 0023:0xf7f92539 [ 192.564616][ T6063] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.564727][ T6063] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 192.564847][ T6063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 192.564928][ T6063] RDX: 0000000000000004 RSI: 0000000080000000 RDI: 0000000000000002 [ 192.565005][ T6063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.565084][ T6063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.565159][ T6063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.565266][ T6063] [ 192.874302][ T6065] loop1: detected capacity change from 0 to 1024 [ 192.926002][ T6067] loop2: detected capacity change from 0 to 256 [ 192.960032][ T6067] exfat: Deprecated parameter 'utf8' [ 192.978376][ T5536] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 192.988072][ T5536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.996416][ T5536] usb 4-1: Product: syz [ 193.000753][ T5536] usb 4-1: Manufacturer: syz [ 193.005714][ T5536] usb 4-1: SerialNumber: syz [ 193.036112][ T6067] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 193.113887][ T6065] EXT4-fs: Ignoring removed orlov option [ 193.120119][ T6065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.323918][ T5536] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 193.335141][ T5536] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 193.346035][ T5536] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 193.393641][ T5804] Bluetooth: hci3: command tx timeout [ 193.416661][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.494827][ T5536] usb 4-1: USB disconnect, device number 3 [ 193.504392][ T5536] garmin_gps 4-1:8.206: device disconnected [ 193.930319][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.965805][ T2164] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 194.011852][ T6077] binder: 6076:6077 ioctl c00c620f 80000580 returned -22 [ 194.176593][ T2164] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.187139][ T2164] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.246863][ T2164] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.256389][ T2164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.265075][ T2164] usb 1-1: Product: syz [ 194.269423][ T2164] usb 1-1: Manufacturer: syz [ 194.274371][ T2164] usb 1-1: SerialNumber: syz [ 194.354422][ T5536] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 194.490782][ T5804] Bluetooth: min 0 < 6 [ 194.614533][ T5536] usb 3-1: Using ep0 maxpacket: 8 [ 194.665421][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.676228][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.707155][ T5536] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 194.716716][ T5536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.725075][ T5536] usb 3-1: Product: syz [ 194.729418][ T5536] usb 3-1: Manufacturer: syz [ 194.734389][ T5536] usb 3-1: SerialNumber: syz [ 194.804646][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 194.927830][ T2164] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 194.933117][ T5536] usb 3-1: config 0 descriptor?? [ 195.106627][ T2164] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 195.207508][ T2164] usb 1-1: USB disconnect, device number 3 [ 195.354417][ T6090] FAULT_INJECTION: forcing a failure. [ 195.354417][ T6090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.368057][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.3.37 Not tainted syzkaller #0 PREEMPT(none) [ 195.368181][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.368248][ T6090] Call Trace: [ 195.368291][ T6090] [ 195.368335][ T6090] __dump_stack+0x26/0x30 [ 195.368479][ T6090] dump_stack_lvl+0x1df/0x270 [ 195.368627][ T6090] dump_stack+0x1e/0x25 [ 195.368763][ T6090] should_fail_ex+0x7dc/0x8a0 [ 195.368918][ T6090] should_fail+0x2a/0x40 [ 195.369036][ T6090] should_fail_usercopy+0x2e/0x40 [ 195.369179][ T6090] _copy_to_user+0x35/0x120 [ 195.369325][ T6090] simple_read_from_buffer+0x1b2/0x340 [ 195.369507][ T6090] proc_fail_nth_read+0x1e0/0x2d0 [ 195.369681][ T6090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.369842][ T6090] vfs_read+0x27c/0xf90 [ 195.370001][ T6090] ? stack_depot_save_flags+0x35/0x7b0 [ 195.370136][ T6090] ? kmsan_get_metadata+0xfb/0x160 [ 195.370272][ T6090] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 195.370476][ T6090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.370624][ T6090] __ia32_sys_read+0x1f9/0x4d0 [ 195.370768][ T6090] ia32_sys_call+0x18b8/0x4310 [ 195.370938][ T6090] __do_fast_syscall_32+0xb0/0x150 [ 195.371113][ T6090] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 195.371280][ T6090] do_fast_syscall_32+0x38/0x80 [ 195.371446][ T6090] do_SYSENTER_32+0x1f/0x30 [ 195.371607][ T6090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.371768][ T6090] RIP: 0023:0xf708d539 [ 195.371857][ T6090] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.371961][ T6090] RSP: 002b:00000000f547d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 195.372078][ T6090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d620 [ 195.372161][ T6090] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 195.372237][ T6090] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 195.372310][ T6090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.372383][ T6090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.372487][ T6090] [ 195.663454][ T5804] Bluetooth: min 0 < 6 [ 195.724530][ T6093] loop4: detected capacity change from 0 to 1024 [ 195.772481][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.942803][ T5536] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 196.163543][ T5536] gspca_sunplus: reg_w_riv err -71 [ 196.169189][ T5536] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 196.343548][ T5536] usb 3-1: USB disconnect, device number 3 [ 196.373328][ T5853] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.513625][ T5804] Bluetooth: hci3: command tx timeout [ 196.640823][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 196.682529][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.693827][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 196.705742][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 196.717220][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 196.727256][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.949903][ T5853] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 196.959397][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.967755][ T5853] usb 5-1: Product: syz [ 196.972100][ T5853] usb 5-1: Manufacturer: syz [ 196.977034][ T5853] usb 5-1: SerialNumber: syz [ 197.074028][ T5853] usb 5-1: config 0 descriptor?? [ 197.113596][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 197.224133][ T2164] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 197.265794][ T6101] loop1: detected capacity change from 0 to 2048 [ 197.281073][ T6101] EXT4-fs: Ignoring removed bh option [ 197.298267][ T5884] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 197.314938][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 197.333817][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.345073][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.357027][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 197.366930][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.381295][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.387645][ T24] usb 1-1: config 0 descriptor?? [ 197.404283][ T6108] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.426718][ T2164] usb 3-1: Using ep0 maxpacket: 16 [ 197.446985][ T6101] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 197.461656][ T6101] EXT4-fs (loop1): This should not happen!! Data will be lost [ 197.461656][ T6101] [ 197.472302][ T6101] EXT4-fs (loop1): Total free blocks count 0 [ 197.479001][ T6101] EXT4-fs (loop1): Free/Dirty block details [ 197.485313][ T6101] EXT4-fs (loop1): free_blocks=2415919104 [ 197.491213][ T6101] EXT4-fs (loop1): dirty_blocks=64 [ 197.496637][ T6101] EXT4-fs (loop1): Block reservation details [ 197.502796][ T6101] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 197.584923][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 197.598242][ T2164] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.609020][ T2164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.620720][ T2164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.631070][ T2164] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.649105][ T5853] iowarrior 5-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 197.663613][ T2164] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.677755][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 197.679022][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.693311][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.745154][ T5884] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 197.753822][ T5884] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 197.765772][ T5884] usb 4-1: config 8 has no interface number 0 [ 197.772065][ T5884] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 197.785057][ T5884] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 197.796599][ T5884] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid wMaxPacketSize 0 [ 197.807247][ T5884] usb 4-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.820725][ T5884] usb 4-1: config 8 interface 206 has no altsetting 0 [ 197.852873][ T2164] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.864178][ T2164] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.872550][ T2164] usb 3-1: Manufacturer: syz [ 197.888996][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 197.895820][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 197.909547][ T5884] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 197.919017][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.927416][ T5884] usb 4-1: Product: syz [ 197.931755][ T5884] usb 4-1: Manufacturer: syz [ 197.937153][ T5884] usb 4-1: SerialNumber: syz [ 197.960278][ T2164] usb 3-1: config 0 descriptor?? [ 197.975599][ T24] usb 1-1: USB disconnect, device number 4 [ 198.035371][ T5536] usb 5-1: USB disconnect, device number 3 [ 198.058342][ T73] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 198.266168][ T5884] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 198.281819][ T5884] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 198.290974][ T5884] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 198.407566][ T5884] usb 4-1: USB disconnect, device number 4 [ 198.450470][ T5884] garmin_gps 4-1:8.206: device disconnected [ 198.578906][ T2164] rc_core: IR keymap rc-hauppauge not found [ 198.585121][ T2164] Registered IR keymap rc-empty [ 198.590717][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.604126][ T5804] Bluetooth: hci3: command tx timeout [ 198.629546][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.671185][ T2164] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 198.691829][ T2164] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 198.821166][ T6113] loop1: detected capacity change from 0 to 1024 [ 198.851630][ T6114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.884275][ T6116] loop0: detected capacity change from 0 to 64 [ 198.897831][ T6113] EXT4-fs: Ignoring removed orlov option [ 198.903977][ T6113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.912903][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.993960][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.034774][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.104412][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.129835][ T6113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.172780][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.201232][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.224603][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.243727][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.283831][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.312554][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.329524][ T3873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.383615][ T2164] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.442276][ T2164] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 199.451969][ T2164] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 199.855551][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.893523][ T2164] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 199.966168][ T5804] Bluetooth: min 0 < 6 [ 200.083465][ T2164] usb 1-1: device descriptor read/64, error -71 [ 200.363468][ T2164] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 200.553782][ T2164] usb 1-1: device descriptor read/64, error -71 [ 200.671704][ T2164] usb usb1-port1: attempt power cycle [ 200.954020][ T5536] usb 3-1: USB disconnect, device number 4 [ 201.064093][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 201.096239][ T5804] Bluetooth: min 0 < 6 [ 201.103749][ T2164] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 201.153377][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 201.154672][ T2164] usb 1-1: device descriptor read/8, error -71 [ 201.423346][ T2164] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.488741][ T2164] usb 1-1: device descriptor read/8, error -71 [ 201.604101][ T5884] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 201.634202][ T2164] usb usb1-port1: unable to enumerate USB device [ 201.673217][ T6146] loop4: detected capacity change from 0 to 512 [ 201.706876][ T6146] ======================================================= [ 201.706876][ T6146] WARNING: The mand mount option has been deprecated and [ 201.706876][ T6146] and is ignored by this kernel. Remove the mand [ 201.706876][ T6146] option from the mount to silence this warning. [ 201.706876][ T6146] ======================================================= [ 201.742889][ T6146] vfat: Unknown parameter '01777777777777777777777ÿÿ00000000000000000000000ÿÿÿÿÿÿÿÿ' [ 201.833479][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 201.857382][ T5884] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 201.866799][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.875219][ T5884] usb 3-1: Product: syz [ 201.879557][ T5884] usb 3-1: Manufacturer: syz [ 201.884627][ T5884] usb 3-1: SerialNumber: syz [ 201.939935][ T5884] usb 3-1: config 0 descriptor?? [ 202.033526][ T5804] Bluetooth: hci4: command tx timeout [ 202.258549][ T6151] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 202.463632][ T5884] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 202.513864][ T5884] gspca_sunplus: reg_w_riv err -71 [ 202.519542][ T5884] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 202.597894][ T5884] usb 3-1: USB disconnect, device number 5 [ 202.738275][ T2164] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 202.816360][ T6157] loop0: detected capacity change from 0 to 1024 [ 202.913655][ T2164] usb 5-1: Using ep0 maxpacket: 32 [ 202.960689][ T2164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.972160][ T2164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.984149][ T2164] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 202.994290][ T2164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.064578][ T2164] usb 5-1: config 0 descriptor?? [ 203.160163][ T5804] Bluetooth: hci3: command tx timeout [ 203.167211][ T5536] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 203.359347][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.369918][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.378410][ T5536] usb 1-1: Using ep0 maxpacket: 8 [ 203.425076][ T5536] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.437984][ T5536] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 203.449890][ T5536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 203.461140][ T5536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 203.471642][ T5536] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.505919][ T5536] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 203.515340][ T5536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.523701][ T5536] usb 1-1: Product: syz [ 203.528033][ T5536] usb 1-1: Manufacturer: syz [ 203.532799][ T5536] usb 1-1: SerialNumber: syz [ 203.554919][ T2164] usbhid 5-1:0.0: can't add hid device: -71 [ 203.561446][ T2164] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 203.613963][ T2164] usb 5-1: USB disconnect, device number 4 [ 203.656482][ T5536] usb 1-1: config 0 descriptor?? [ 204.168234][ T5536] iowarrior 1-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 204.454807][ T5536] usb 1-1: USB disconnect, device number 9 [ 204.591258][ T6167] loop2: detected capacity change from 0 to 1024 [ 204.649934][ T6167] EXT4-fs: Ignoring removed orlov option [ 204.656339][ T6167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.674346][ T5804] Bluetooth: min 0 < 6 [ 204.741695][ T6167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.156485][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.613982][ T5804] Bluetooth: min 0 < 6 [ 206.236440][ T2164] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 206.313750][ T5536] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 206.445449][ T2164] usb 3-1: Using ep0 maxpacket: 32 [ 206.479786][ T2164] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 206.488467][ T2164] usb 3-1: config 0 has no interface number 0 [ 206.495092][ T2164] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 206.503291][ T5536] usb 2-1: Using ep0 maxpacket: 8 [ 206.537614][ T5878] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 206.548864][ T2164] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 206.558449][ T2164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.568927][ T2164] usb 3-1: Product: syz [ 206.573708][ T5536] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 206.573858][ T5536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.573968][ T5536] usb 2-1: Product: syz [ 206.574056][ T5536] usb 2-1: Manufacturer: syz [ 206.583282][ T2164] usb 3-1: Manufacturer: syz [ 206.583388][ T2164] usb 3-1: SerialNumber: syz [ 206.621207][ T5536] usb 2-1: SerialNumber: syz [ 206.631879][ T2164] usb 3-1: config 0 descriptor?? [ 206.635813][ T5536] usb 2-1: config 0 descriptor?? [ 206.645643][ T6190] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.761229][ T5853] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 206.792162][ T5804] Bluetooth: hci3: command tx timeout [ 206.816040][ T5878] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 206.825859][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.834313][ T5878] usb 4-1: Product: syz [ 206.838764][ T5878] usb 4-1: Manufacturer: syz [ 206.843890][ T5878] usb 4-1: SerialNumber: syz [ 206.869029][ T5878] usb 4-1: config 0 descriptor?? [ 206.897728][ T5878] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 206.910138][ T6189] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.963500][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 207.001787][ T5853] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 207.010750][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.021537][ T5853] usb 5-1: config 0 has no interface number 0 [ 207.027978][ T5853] usb 5-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.129582][ T5853] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 207.139156][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.147636][ T5853] usb 5-1: Product: syz [ 207.152097][ T5853] usb 5-1: Manufacturer: syz [ 207.157230][ T5853] usb 5-1: SerialNumber: syz [ 207.167733][ T5536] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 207.205464][ T5536] gspca_sunplus: reg_w_riv err -71 [ 207.211298][ T5536] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 207.241903][ T6195] process 'syz.3.70' launched './file0' with NULL argv: empty string added [ 207.265619][ T5536] usb 2-1: USB disconnect, device number 3 [ 207.309209][ T5853] usb 5-1: config 0 descriptor?? [ 207.426165][ T5878] sonixb 4-1:0.0: Error reading register 00: -110 [ 207.633576][ T5804] Bluetooth: hci2: command tx timeout [ 207.921109][ T5853] usb 5-1: USB disconnect, device number 5 [ 207.976504][ T5804] Bluetooth: min 0 < 6 [ 208.172721][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.954544][ T6211] loop4: detected capacity change from 0 to 1024 [ 208.979674][ T6209] loop0: detected capacity change from 0 to 1024 [ 209.206290][ T6211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.219484][ T6211] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.519956][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.613413][ T24] usb 4-1: USB disconnect, device number 5 [ 209.634851][ T5884] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 209.748287][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 209.837714][ T2164] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 209.852936][ T2164] asix 3-1:0.188: probe with driver asix failed with error -71 [ 209.898350][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 209.911792][ T6217] loop4: detected capacity change from 0 to 16 [ 209.960544][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.971831][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 209.984041][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 209.995521][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 210.005654][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.040175][ T2164] usb 3-1: USB disconnect, device number 6 [ 210.041369][ T6217] erofs (device loop4): mounted with root inode @ nid 36. [ 210.062940][ T5804] Bluetooth: hci2: command tx timeout [ 210.246410][ T5884] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 210.257742][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.266622][ T5884] usb 1-1: Product: syz [ 210.270964][ T5884] usb 1-1: Manufacturer: syz [ 210.275972][ T5884] usb 1-1: SerialNumber: syz [ 210.334832][ T5884] usb 1-1: config 0 descriptor?? [ 210.592206][ T6217] capability: warning: `syz.4.78' uses deprecated v2 capabilities in a way that may be insecure [ 210.914721][ T5884] iowarrior 1-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 211.205553][ T5884] usb 1-1: USB disconnect, device number 10 [ 211.399913][ T6226] loop2: detected capacity change from 0 to 256 [ 214.219489][ T6228] Bluetooth: MGMT ver 1.23 [ 214.224395][ T6228] Bluetooth: hci0: unsupported parameter 255 [ 214.230547][ T6228] Bluetooth: hci0: unsupported parameter 255 [ 214.307045][ T6231] loop2: detected capacity change from 0 to 1024 [ 214.655024][ T5884] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.813460][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 214.822274][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.833353][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 214.845205][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 214.856426][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 214.867983][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.892764][ T5884] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 214.902090][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.910341][ T5884] usb 3-1: Product: syz [ 214.914911][ T5884] usb 3-1: Manufacturer: syz [ 214.919676][ T5884] usb 3-1: SerialNumber: syz [ 214.929378][ T5884] usb 3-1: config 0 descriptor?? [ 215.356123][ T5884] iowarrior 3-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 215.381087][ T5884] usb 3-1: USB disconnect, device number 7 [ 224.530110][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.537236][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.642074][ T5804] Bluetooth: min 0 < 6 [ 224.799291][ T6246] loop0: detected capacity change from 0 to 1024 [ 224.825683][ T6246] EXT4-fs: Ignoring removed i_version option [ 224.859751][ T6246] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 224.924061][ T6246] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 224.934896][ T6246] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 225.883531][ T5853] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.955244][ T6263] loop2: detected capacity change from 0 to 1024 [ 226.010081][ T6265] loop4: detected capacity change from 0 to 64 [ 226.095314][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.105628][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.119204][ T5853] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 226.134831][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.170939][ T30] audit: type=1800 audit(1763875804.683:3): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.96" name="file2" dev="loop4" ino=22 res=0 errno=0 [ 226.295874][ T5853] usb 2-1: config 0 descriptor?? [ 226.333564][ T5884] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 226.565253][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 226.600515][ T6261] loop1: detected capacity change from 0 to 16 [ 226.605823][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.618473][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 226.630322][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 226.643568][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 226.654480][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.726119][ T5804] Bluetooth: hci3: command tx timeout [ 226.803392][ T6261] erofs (device loop1): mounted with root inode @ nid 36. [ 226.900196][ T5884] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 226.909761][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.918183][ T5884] usb 3-1: Product: syz [ 226.922500][ T5884] usb 3-1: Manufacturer: syz [ 226.927493][ T5884] usb 3-1: SerialNumber: syz [ 227.144162][ T5884] usb 3-1: config 0 descriptor?? [ 227.403155][ T5853] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0 [ 227.410705][ T5853] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0 [ 227.418607][ T5853] saitek 0003:06A3:0CD0.0001: item fetching failed at offset 2/7 [ 227.507850][ T5853] saitek 0003:06A3:0CD0.0001: parse failed [ 227.515609][ T5853] saitek 0003:06A3:0CD0.0001: probe with driver saitek failed with error -22 [ 227.603347][ T5536] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 227.783631][ T5536] usb 4-1: Using ep0 maxpacket: 8 [ 227.793268][ T5884] iowarrior 3-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 227.839672][ T5536] usb 4-1: config index 0 descriptor too short (expected 17188, got 36) [ 227.844830][ T2164] usb 2-1: USB disconnect, device number 4 [ 227.848963][ T5536] usb 4-1: config 214 has too many interfaces: 223, using maximum allowed: 32 [ 227.868764][ T5536] usb 4-1: config 214 has 1 interface, different from the descriptor's value: 223 [ 227.880143][ T5536] usb 4-1: config 214 has no interface number 0 [ 227.886797][ T5536] usb 4-1: config 214 interface 60 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 227.897034][ T5536] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 227.900114][ T6255] udevd[6255]: failed to send result of seq 11484 to main daemon: Connection refused [ 227.906714][ T5536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.083167][ T5853] usb 3-1: USB disconnect, device number 8 [ 228.977301][ T5804] Bluetooth: min 0 < 6 [ 229.483902][ T5853] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 229.572437][ T5536] usb 4-1: string descriptor 0 read error: -71 [ 229.582925][ T5536] ftdi_sio 4-1:214.60: FTDI USB Serial Device converter detected [ 229.592705][ T5536] usb 4-1: Detected SIO [ 229.597309][ T5536] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 11 [ 229.621791][ T5536] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 229.648651][ T5536] usb 4-1: USB disconnect, device number 6 [ 229.662842][ T6301] netlink: 56 bytes leftover after parsing attributes in process `syz.1.108'. [ 229.672654][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'. [ 229.682638][ T5853] usb 1-1: device descriptor read/64, error -71 [ 229.721208][ T5536] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 229.731796][ T5536] ftdi_sio 4-1:214.60: device disconnected [ 229.843500][ T6302] loop2: detected capacity change from 0 to 1024 [ 229.875732][ T6302] EXT4-fs: Ignoring removed orlov option [ 229.881755][ T6302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.886856][ T6306] netlink: 9 bytes leftover after parsing attributes in process `syz.3.111'. [ 229.905497][ T6306] gretap0: entered promiscuous mode [ 229.935223][ T5853] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 229.990657][ T6302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.005355][ T6306] loop3: detected capacity change from 0 to 128 [ 230.028514][ T6306] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 230.133634][ T5853] usb 1-1: device descriptor read/64, error -71 [ 230.242947][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.258412][ T5853] usb usb1-port1: attempt power cycle [ 230.331165][ T30] audit: type=1326 audit(1763875808.873:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.428072][ T30] audit: type=1326 audit(1763875808.923:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.450409][ T30] audit: type=1326 audit(1763875808.923:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.472531][ T30] audit: type=1326 audit(1763875808.923:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.494903][ T30] audit: type=1326 audit(1763875808.933:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.518368][ T30] audit: type=1326 audit(1763875808.933:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.540867][ T30] audit: type=1326 audit(1763875808.933:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.564454][ T30] audit: type=1326 audit(1763875808.943:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.587505][ T30] audit: type=1326 audit(1763875808.943:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 230.621325][ T6315] loop4: detected capacity change from 0 to 512 [ 230.643271][ T6315] ext3: Unknown parameter 'fowner' [ 230.643281][ T5853] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 230.665167][ T5853] usb 1-1: device descriptor read/8, error -71 [ 230.929695][ T5853] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 230.975846][ T6321] loop2: detected capacity change from 0 to 1024 [ 230.995806][ T5804] Bluetooth: hci3: command tx timeout [ 231.019887][ T5853] usb 1-1: device descriptor read/8, error -71 [ 231.091382][ T5804] Bluetooth: min 0 < 6 [ 231.138020][ T5853] usb usb1-port1: unable to enumerate USB device [ 231.384022][ T2164] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 231.430947][ T6331] proc: Bad value for 'gid' [ 231.552377][ T2164] usb 3-1: Using ep0 maxpacket: 8 [ 231.580538][ T2164] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.591945][ T2164] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 231.604745][ T2164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 231.616677][ T2164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 231.626806][ T2164] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.653597][ T2164] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 231.664105][ T2164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.672522][ T2164] usb 3-1: Product: syz [ 231.677231][ T2164] usb 3-1: Manufacturer: syz [ 231.682001][ T2164] usb 3-1: SerialNumber: syz [ 231.756639][ T2164] usb 3-1: config 0 descriptor?? [ 232.053305][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 232.246850][ T2164] iowarrior 3-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 232.500457][ T5853] usb 3-1: USB disconnect, device number 9 [ 233.124475][ T5804] Bluetooth: min 0 < 6 [ 233.153554][ T5804] Bluetooth: hci4: command tx timeout [ 233.477690][ T5853] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 233.669034][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 233.714436][ T5853] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 233.724049][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.732251][ T5853] usb 2-1: Product: syz [ 233.737611][ T5853] usb 2-1: Manufacturer: syz [ 233.742439][ T5853] usb 2-1: SerialNumber: syz [ 233.785217][ T5853] usb 2-1: config 0 descriptor?? [ 233.823658][ T5536] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.850711][ T6378] loop4: detected capacity change from 0 to 1024 [ 233.860682][ T6378] EXT4-fs: Ignoring removed orlov option [ 233.866900][ T6378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.907725][ T6378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.967046][ T5536] usb 1-1: device descriptor read/64, error -71 [ 234.047712][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.220333][ T5536] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 234.260434][ T5853] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 234.268838][ T5853] gspca_sunplus: reg_w_riv err -71 [ 234.274817][ T5853] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 234.289000][ T5853] usb 2-1: USB disconnect, device number 5 [ 234.363557][ T5536] usb 1-1: device descriptor read/64, error -71 [ 234.474183][ T5536] usb usb1-port1: attempt power cycle [ 234.653436][ T2164] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 234.823744][ T5536] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 234.827929][ T2164] usb 5-1: Using ep0 maxpacket: 16 [ 234.856371][ T2164] usb 5-1: config 0 has an invalid interface number: 236 but max is 1 [ 234.865310][ T2164] usb 5-1: config 0 has an invalid interface number: 129 but max is 1 [ 234.873849][ T2164] usb 5-1: config 0 has no interface number 0 [ 234.880125][ T2164] usb 5-1: config 0 has no interface number 1 [ 234.886613][ T2164] usb 5-1: config 0 interface 236 has no altsetting 0 [ 234.893697][ T2164] usb 5-1: config 0 interface 129 has no altsetting 0 [ 234.895325][ T5536] usb 1-1: device descriptor read/8, error -71 [ 234.911592][ T2164] usb 5-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 234.921757][ T2164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.931740][ T2164] usb 5-1: Product: syz [ 234.936842][ T2164] usb 5-1: Manufacturer: syz [ 234.941615][ T2164] usb 5-1: SerialNumber: syz [ 234.960878][ T2164] usb 5-1: config 0 descriptor?? [ 235.091457][ T5052] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.164119][ T5536] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 235.172889][ T5804] Bluetooth: hci2: command tx timeout [ 235.196703][ T5536] usb 1-1: device descriptor read/8, error -71 [ 235.293829][ T6389] loop4: detected capacity change from 0 to 2048 [ 235.325102][ T5536] usb usb1-port1: unable to enumerate USB device [ 235.363346][ T6389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.376060][ T6389] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.421714][ T6389] overlayfs: missing 'lowerdir' [ 235.539617][ T6389] overlayfs: statfs failed on './file0' [ 235.618686][ T2164] ir_usb 5-1:0.236: required endpoints missing [ 235.666408][ T2164] usb 5-1: selecting invalid altsetting 0 [ 235.674192][ T2164] uvcvideo 5-1:0.129: Found UVC 2.26 device syz (1ace:e9b2) [ 235.676554][ T6404] loop1: detected capacity change from 0 to 1024 [ 235.683303][ T2164] uvcvideo 5-1:0.129: No valid video chain found. [ 235.759924][ T2164] usb 5-1: USB disconnect, device number 6 [ 235.811031][ T5804] Bluetooth: min 0 < 6 [ 235.842587][ T6408] geneve2: entered promiscuous mode [ 235.859076][ T5052] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.869254][ T5052] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.878837][ T5052] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.888931][ T5052] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.010576][ T5536] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 236.164200][ T6412] loop3: detected capacity change from 0 to 1024 [ 236.173558][ T5536] usb 2-1: Using ep0 maxpacket: 8 [ 236.174181][ T6412] EXT4-fs: Ignoring removed orlov option [ 236.184961][ T6412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.208344][ T5536] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.219614][ T5536] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 236.224049][ T6412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.231509][ T5536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 236.255129][ T5536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 236.270862][ T5536] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.408366][ T5536] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 236.418152][ T5536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.426618][ T5536] usb 2-1: Product: syz [ 236.430966][ T5536] usb 2-1: Manufacturer: syz [ 236.436146][ T5536] usb 2-1: SerialNumber: syz [ 236.481651][ T5536] usb 2-1: config 0 descriptor?? [ 236.506450][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.522244][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.537823][ T6419] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 236.594287][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 236.594358][ T30] audit: type=1326 audit(1763875815.143:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.716813][ T30] audit: type=1326 audit(1763875815.173:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.739173][ T30] audit: type=1326 audit(1763875815.183:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.762889][ T30] audit: type=1326 audit(1763875815.183:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.789300][ T30] audit: type=1326 audit(1763875815.183:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.813175][ T30] audit: type=1326 audit(1763875815.183:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.835353][ T30] audit: type=1326 audit(1763875815.193:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.857588][ T30] audit: type=1326 audit(1763875815.193:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.881444][ T30] audit: type=1326 audit(1763875815.203:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 236.904391][ T30] audit: type=1326 audit(1763875815.203:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 237.156904][ T5536] iowarrior 2-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 237.285755][ T2164] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 237.419071][ T5884] usb 2-1: USB disconnect, device number 6 [ 237.463357][ T2164] usb 1-1: Using ep0 maxpacket: 8 [ 237.502366][ T2164] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 237.512039][ T2164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.520611][ T2164] usb 1-1: Product: syz [ 237.525125][ T2164] usb 1-1: Manufacturer: syz [ 237.529906][ T2164] usb 1-1: SerialNumber: syz [ 237.539888][ T2164] usb 1-1: config 0 descriptor?? [ 237.874418][ T5804] Bluetooth: hci4: command tx timeout [ 237.999290][ T2164] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 238.035765][ T2164] gspca_sunplus: reg_w_riv err -71 [ 238.041614][ T2164] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 238.077575][ T6440] geneve2: entered promiscuous mode [ 238.095138][ T73] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.095377][ T2164] usb 1-1: USB disconnect, device number 19 [ 238.130171][ T73] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.141592][ T73] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.174798][ T73] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.359286][ T5804] Bluetooth: min 0 < 6 [ 238.740016][ T6449] loop4: detected capacity change from 0 to 1024 [ 238.756049][ T6449] EXT4-fs: Ignoring removed orlov option [ 238.762159][ T6449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.877988][ T6449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.949709][ T6456] loop2: detected capacity change from 0 to 64 [ 238.969464][ T6454] loop0: detected capacity change from 0 to 64 [ 239.317900][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.753391][ T6471] loop3: detected capacity change from 0 to 1024 [ 240.117466][ T5536] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.199547][ T5804] Bluetooth: min 0 < 6 [ 240.293595][ T5536] usb 4-1: Using ep0 maxpacket: 8 [ 240.325717][ T5536] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.337068][ T5536] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 240.349040][ T5536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 240.365923][ T5536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 240.377919][ T5536] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.443991][ T5804] Bluetooth: hci1: command tx timeout [ 240.449736][ T2164] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 240.591793][ T5536] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 240.601421][ T5536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.609808][ T5536] usb 4-1: Product: syz [ 240.614342][ T5536] usb 4-1: Manufacturer: syz [ 240.619119][ T5536] usb 4-1: SerialNumber: syz [ 240.625250][ T2164] usb 1-1: Using ep0 maxpacket: 8 [ 240.646589][ T2164] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 240.656260][ T2164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.666135][ T2164] usb 1-1: Product: syz [ 240.670474][ T2164] usb 1-1: Manufacturer: syz [ 240.675869][ T2164] usb 1-1: SerialNumber: syz [ 240.718651][ T2164] usb 1-1: config 0 descriptor?? [ 240.718800][ T5536] usb 4-1: config 0 descriptor?? [ 240.747962][ T6486] loop4: detected capacity change from 0 to 512 [ 240.806586][ T6486] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 240.839274][ T6486] EXT4-fs (loop4): 1 truncate cleaned up [ 240.848450][ T6486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.887939][ T6486] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 240.918891][ T6486] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.177: Logical block already allocated [ 241.103792][ T6489] loop2: detected capacity change from 0 to 1024 [ 241.132349][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.139532][ T6489] EXT4-fs: Ignoring removed orlov option [ 241.148048][ T6489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.191171][ T2164] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 241.200506][ T2164] gspca_sunplus: reg_w_riv err -71 [ 241.206913][ T2164] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 241.228026][ T2164] usb 1-1: USB disconnect, device number 20 [ 241.305868][ T5536] iowarrior 4-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 241.325332][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.340797][ T5536] usb 4-1: USB disconnect, device number 7 [ 241.502899][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.134762][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 242.224106][ T5804] Bluetooth: min 0 < 6 [ 242.274233][ T5804] Bluetooth: hci0: command tx timeout [ 242.648813][ T6516] loop2: detected capacity change from 0 to 512 [ 242.708405][ T6516] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 242.750494][ T6516] EXT4-fs (loop2): 1 truncate cleaned up [ 242.758648][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.799898][ T6522] loop4: detected capacity change from 0 to 1024 [ 242.811020][ T6522] EXT4-fs: Ignoring removed orlov option [ 242.819549][ T6522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.842845][ T6516] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 242.857300][ T6522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.866093][ T6516] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.189: Logical block already allocated [ 243.099402][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.134545][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.568355][ T6535] loop0: detected capacity change from 0 to 1024 [ 243.704476][ T2164] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 243.886698][ T2164] usb 3-1: Using ep0 maxpacket: 8 [ 243.903336][ T5536] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 243.916778][ T2164] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 243.927490][ T2164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.936007][ T2164] usb 3-1: Product: syz [ 243.940559][ T2164] usb 3-1: Manufacturer: syz [ 243.946936][ T2164] usb 3-1: SerialNumber: syz [ 244.003567][ T2164] usb 3-1: config 0 descriptor?? [ 244.073313][ T5536] usb 1-1: Using ep0 maxpacket: 8 [ 244.088674][ T5536] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.100317][ T5536] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 244.112225][ T5536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 244.123666][ T5536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 244.133685][ T5536] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.232883][ T5804] Bluetooth: min 0 < 6 [ 244.310506][ T5536] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 244.320591][ T5536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.328973][ T5536] usb 1-1: Product: syz [ 244.333416][ T5536] usb 1-1: Manufacturer: syz [ 244.338214][ T5536] usb 1-1: SerialNumber: syz [ 244.357525][ T5804] Bluetooth: hci0: command tx timeout [ 244.459071][ T2164] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 244.477798][ T5536] usb 1-1: config 0 descriptor?? [ 244.485372][ T2164] gspca_sunplus: reg_w_riv err -71 [ 244.490962][ T2164] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 244.510489][ T2164] usb 3-1: USB disconnect, device number 10 [ 244.715913][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 244.760833][ T6556] loop4: detected capacity change from 0 to 512 [ 244.801810][ T6556] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 244.824343][ T6556] EXT4-fs (loop4): 1 truncate cleaned up [ 244.833592][ T6556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.028072][ T6556] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 245.179277][ T5536] iowarrior 1-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 245.214251][ T5536] usb 1-1: USB disconnect, device number 21 [ 245.341929][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.793610][ T6570] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 245.800283][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.808281][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 246.073766][ T2164] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 246.084080][ T5536] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.186552][ T5804] Bluetooth: min 0 < 6 [ 246.283828][ T5536] usb 5-1: device descriptor read/64, error -71 [ 246.434088][ T5804] Bluetooth: hci0: command tx timeout [ 246.484122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 246.573583][ T5536] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 246.588890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 246.754156][ T5536] usb 5-1: device descriptor read/64, error -71 [ 246.864462][ T5536] usb usb5-port1: attempt power cycle [ 246.922390][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 246.941470][ T5853] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 247.103417][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 247.128654][ T5853] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 247.138205][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.146628][ T5853] usb 1-1: Product: syz [ 247.150942][ T5853] usb 1-1: Manufacturer: syz [ 247.155977][ T5853] usb 1-1: SerialNumber: syz [ 247.174448][ T5853] usb 1-1: config 0 descriptor?? [ 247.223518][ T5536] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 247.245665][ T5536] usb 5-1: device descriptor read/8, error -71 [ 247.432278][ T6604] random: crng reseeded on system resumption [ 247.503725][ T5536] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 247.548824][ T5536] usb 5-1: device descriptor read/8, error -71 [ 247.637497][ T5853] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 247.681081][ T5536] usb usb5-port1: unable to enumerate USB device [ 247.688784][ T5853] gspca_sunplus: reg_w_riv err -71 [ 247.694643][ T5853] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 247.708864][ T5853] usb 1-1: USB disconnect, device number 22 [ 247.917756][ T6610] FAULT_INJECTION: forcing a failure. [ 247.917756][ T6610] name failslab, interval 1, probability 0, space 0, times 1 [ 247.934030][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.2.224 Not tainted syzkaller #0 PREEMPT(none) [ 247.934164][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.934237][ T6610] Call Trace: [ 247.934280][ T6610] [ 247.934326][ T6610] __dump_stack+0x26/0x30 [ 247.934480][ T6610] dump_stack_lvl+0x1df/0x270 [ 247.934628][ T6610] dump_stack+0x1e/0x25 [ 247.934756][ T6610] should_fail_ex+0x7dc/0x8a0 [ 247.934907][ T6610] should_failslab+0x15b/0x200 [ 247.935059][ T6610] kmem_cache_alloc_node_noprof+0xf0/0x16b0 [ 247.935196][ T6610] ? __alloc_skb+0x1e0/0x7d0 [ 247.935342][ T6610] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 247.935528][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.935671][ T6610] __alloc_skb+0x1e0/0x7d0 [ 247.935829][ T6610] alloc_skb_with_frags+0xc5/0xa60 [ 247.935995][ T6610] ? __sock_sendmsg+0x333/0x3d0 [ 247.936129][ T6610] ? kmsan_get_metadata+0xfb/0x160 [ 247.936265][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.936414][ T6610] sock_alloc_send_pskb+0xacc/0xc60 [ 247.936590][ T6610] ? kmsan_get_metadata+0xfb/0x160 [ 247.936761][ T6610] hci_sock_sendmsg+0x2a6/0x1a00 [ 247.936944][ T6610] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 247.937102][ T6610] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 247.937260][ T6610] __sock_sendmsg+0x333/0x3d0 [ 247.937400][ T6610] sock_write_iter+0x3a6/0x420 [ 247.937557][ T6610] vfs_write+0xbe2/0x15d0 [ 247.937695][ T6610] ? __pfx_sock_write_iter+0x10/0x10 [ 247.937835][ T6610] __ia32_sys_write+0x1f9/0x4d0 [ 247.937982][ T6610] ia32_sys_call+0x35bc/0x4310 [ 247.938152][ T6610] __do_fast_syscall_32+0xb0/0x150 [ 247.938320][ T6610] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 247.938490][ T6610] do_fast_syscall_32+0x38/0x80 [ 247.938655][ T6610] do_SYSENTER_32+0x1f/0x30 [ 247.938821][ T6610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.938985][ T6610] RIP: 0023:0xf70ed539 [ 247.939075][ T6610] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 247.939181][ T6610] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 247.939297][ T6610] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000000 [ 247.939381][ T6610] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 247.939453][ T6610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.939526][ T6610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.939599][ T6610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.939705][ T6610] [ 248.196131][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.211838][ T5804] Bluetooth: hci4: command tx timeout [ 248.804527][ T6574] vhci_hcd: connection reset by peer [ 248.818353][ T3958] vhci_hcd: stop threads [ 248.822858][ T3958] vhci_hcd: release socket [ 248.827876][ T3958] vhci_hcd: disconnect device [ 248.838698][ T6616] loop1: detected capacity change from 0 to 256 [ 248.882250][ T6616] vfat: Unknown parameter '' [ 248.988845][ T6623] loop3: detected capacity change from 0 to 1024 [ 249.172773][ T5853] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.283429][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 249.365297][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 249.396956][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 249.410661][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 249.422624][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 249.434225][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 249.445662][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.459462][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 249.483621][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 249.495439][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 249.507824][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 249.517820][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 249.519844][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 249.538147][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.542549][ T5853] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 249.561467][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.569822][ T5853] usb 2-1: Product: syz [ 249.580119][ T5853] usb 2-1: Manufacturer: syz [ 249.586934][ T5853] usb 2-1: SerialNumber: syz [ 249.645133][ T5853] usb 2-1: config 0 descriptor?? [ 249.661064][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 249.671256][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.681146][ T24] usb 4-1: Product: syz [ 249.686101][ T24] usb 4-1: Manufacturer: syz [ 249.690880][ T24] usb 4-1: SerialNumber: syz [ 249.747509][ T24] usb 4-1: config 0 descriptor?? [ 249.877474][ T5853] appledisplay: Apple Cinema Display connected [ 250.096633][ T5884] usb 2-1: USB disconnect, device number 7 [ 250.096780][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 250.115201][ T5884] appledisplay: Apple Cinema Display disconnected [ 250.409384][ T24] iowarrior 4-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 250.438055][ T24] usb 4-1: USB disconnect, device number 8 [ 250.697281][ T6646] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 250.910300][ T5853] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 250.944363][ T6649] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 250.951122][ T6649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.959255][ T6649] vhci_hcd vhci_hcd.0: Device attached [ 251.094339][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 251.161995][ T5853] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 251.172075][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.180499][ T5853] usb 3-1: Product: syz [ 251.184954][ T5853] usb 3-1: Manufacturer: syz [ 251.189740][ T5853] usb 3-1: SerialNumber: syz [ 251.201715][ T5853] usb 3-1: config 0 descriptor?? [ 251.225724][ T2164] vhci_hcd: vhci_device speed not set [ 251.234850][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 251.254047][ T5536] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 251.400865][ T5536] usb 2-1: device descriptor read/64, error -71 [ 251.657023][ T5536] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 251.680388][ T5853] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 251.694117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 251.703772][ T5853] gspca_sunplus: reg_w_riv err -71 [ 251.709263][ T5853] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 251.752374][ T5853] usb 3-1: USB disconnect, device number 11 [ 251.837828][ T5536] usb 2-1: device descriptor read/64, error -71 [ 251.882075][ T6665] loop3: detected capacity change from 0 to 1024 [ 251.897648][ T6665] EXT4-fs: Ignoring removed orlov option [ 251.904056][ T6665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.957744][ T5536] usb usb2-port1: attempt power cycle [ 251.964271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 251.990471][ T6665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.179041][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.247'. [ 252.188824][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 252.218170][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.300228][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 252.373846][ T5536] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.426437][ T5536] usb 2-1: device descriptor read/8, error -71 [ 252.522173][ T6680] loop2: detected capacity change from 0 to 1024 [ 252.532902][ T6680] EXT4-fs: inline encryption not supported [ 252.582758][ T6680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.694570][ T5536] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 252.733895][ T5536] usb 2-1: device descriptor read/8, error -71 [ 252.791865][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 252.792018][ T30] audit: type=1800 audit(1763875831.333:100): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.250" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 252.866484][ T5536] usb usb2-port1: unable to enumerate USB device [ 253.165999][ T5536] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 253.335128][ T6693] loop0: detected capacity change from 0 to 1024 [ 253.381010][ T5536] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 253.390794][ T5536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.399391][ T5536] usb 3-1: Product: syz [ 253.403925][ T5536] usb 3-1: Manufacturer: syz [ 253.408695][ T5536] usb 3-1: SerialNumber: syz [ 253.446139][ T5536] usb 3-1: config 0 descriptor?? [ 253.683495][ T5853] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 253.687507][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.700596][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.726692][ T5536] usb-storage 3-1:0.0: USB Mass Storage device detected [ 253.829408][ T5536] usb 3-1: USB disconnect, device number 12 [ 253.844191][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 253.925067][ T6650] vhci_hcd: connection reset by peer [ 253.943931][ T5052] vhci_hcd: stop threads [ 253.948365][ T5052] vhci_hcd: release socket [ 253.956907][ T5052] vhci_hcd: disconnect device [ 253.989261][ T5853] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.000724][ T5853] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 254.012624][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 254.023959][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 254.034100][ T5853] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.074517][ T5853] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 254.089707][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.100077][ T5853] usb 1-1: Product: syz [ 254.104503][ T5853] usb 1-1: Manufacturer: syz [ 254.109257][ T5853] usb 1-1: SerialNumber: syz [ 254.124308][ T5853] usb 1-1: config 0 descriptor?? [ 254.537912][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.687355][ T5853] iowarrior 1-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 254.715288][ T5853] usb 1-1: USB disconnect, device number 23 [ 254.837580][ T6719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.262'. [ 254.848199][ T5536] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 254.893503][ T2164] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 255.006967][ T5536] usb 5-1: Using ep0 maxpacket: 8 [ 255.025474][ T5536] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 255.035129][ T5536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.043453][ T5536] usb 5-1: Product: syz [ 255.047779][ T5536] usb 5-1: Manufacturer: syz [ 255.052529][ T5536] usb 5-1: SerialNumber: syz [ 255.060866][ T5536] usb 5-1: config 0 descriptor?? [ 255.063422][ T2164] usb 4-1: device descriptor read/64, error -71 [ 255.097500][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 255.133315][ T5878] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 255.303911][ T2164] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 255.317800][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.351084][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 255.359330][ T5878] usb 2-1: can't read configurations, error -61 [ 255.474482][ T2164] usb 4-1: device descriptor read/64, error -71 [ 255.506188][ T5536] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 255.522086][ T5878] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 255.532529][ T5536] gspca_sunplus: reg_w_riv err -71 [ 255.538035][ T5536] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 255.551040][ T5536] usb 5-1: USB disconnect, device number 11 [ 255.584065][ T2164] usb usb4-port1: attempt power cycle [ 255.663680][ T5884] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 255.698726][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.711375][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 255.725463][ T5878] usb 2-1: can't read configurations, error -61 [ 255.737229][ T5878] usb usb2-port1: attempt power cycle [ 255.803482][ T5884] usb 1-1: device descriptor read/64, error -71 [ 255.943388][ T2164] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 255.977352][ T2164] usb 4-1: device descriptor read/8, error -71 [ 256.053516][ T5884] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 256.103386][ T5878] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.159331][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.180882][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 256.189172][ T5878] usb 2-1: can't read configurations, error -61 [ 256.204556][ T5884] usb 1-1: device descriptor read/64, error -71 [ 256.233440][ T2164] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 256.259076][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 256.267263][ T2164] usb 4-1: device descriptor read/8, error -71 [ 256.268320][ T6728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 256.314996][ T5884] usb usb1-port1: attempt power cycle [ 256.343515][ T5878] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 256.358301][ T24] vhci_hcd: vhci_device speed not set [ 256.382355][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.384316][ T2164] usb usb4-port1: unable to enumerate USB device [ 256.400958][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 256.409221][ T5878] usb 2-1: can't read configurations, error -61 [ 256.448795][ T5878] usb usb2-port1: unable to enumerate USB device [ 256.554629][ T6733] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 256.561370][ T6733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.569867][ T6733] vhci_hcd vhci_hcd.0: Device attached [ 256.590892][ T6736] loop2: detected capacity change from 0 to 1024 [ 256.599946][ T6736] EXT4-fs: Ignoring removed i_version option [ 256.610573][ T6736] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 256.621020][ T6736] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 256.703884][ T5884] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 256.735946][ T5884] usb 1-1: device descriptor read/8, error -71 [ 256.933421][ T5878] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 256.941526][ T5853] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 257.003598][ T5884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 257.043815][ T5884] usb 1-1: device descriptor read/8, error -71 [ 257.105306][ T5853] usb 5-1: no configurations [ 257.110307][ T5853] usb 5-1: can't read configurations, error -22 [ 257.164524][ T5884] usb usb1-port1: unable to enumerate USB device [ 257.259323][ T5853] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 257.409084][ T6742] loop2: detected capacity change from 0 to 512 [ 257.426539][ T5853] usb 5-1: no configurations [ 257.431339][ T5853] usb 5-1: can't read configurations, error -22 [ 257.445060][ T5853] usb usb5-port1: attempt power cycle [ 257.823608][ T5853] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 257.847525][ T5853] usb 5-1: no configurations [ 257.852414][ T5853] usb 5-1: can't read configurations, error -22 [ 257.921090][ T6748] loop2: detected capacity change from 0 to 1024 [ 258.003435][ T5853] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 258.042789][ T5853] usb 5-1: no configurations [ 258.047976][ T5853] usb 5-1: can't read configurations, error -22 [ 258.058149][ T5853] usb usb5-port1: unable to enumerate USB device [ 258.108197][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 258.243335][ T5536] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.393238][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 258.413538][ T5536] usb 3-1: Using ep0 maxpacket: 8 [ 258.431011][ T5536] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.442742][ T5536] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 258.454670][ T5536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 258.465841][ T5536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 258.475979][ T5536] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.520802][ T5536] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 258.530487][ T5536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.539054][ T5536] usb 3-1: Product: syz [ 258.543507][ T5536] usb 3-1: Manufacturer: syz [ 258.548304][ T5536] usb 3-1: SerialNumber: syz [ 258.554463][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 258.562662][ T5536] usb 3-1: config 0 descriptor?? [ 258.601555][ T24] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 258.611441][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.619835][ T24] usb 2-1: Product: syz [ 258.624365][ T24] usb 2-1: Manufacturer: syz [ 258.629131][ T24] usb 2-1: SerialNumber: syz [ 258.653449][ T24] usb 2-1: config 0 descriptor?? [ 259.091724][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 259.146702][ T5536] iowarrior 3-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 259.148131][ T24] gspca_sunplus: reg_w_riv err -71 [ 259.164236][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 259.173944][ T5536] usb 3-1: USB disconnect, device number 13 [ 259.179928][ T24] usb 2-1: USB disconnect, device number 16 [ 259.344168][ T5853] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 259.371515][ T6762] loop3: detected capacity change from 0 to 1024 [ 259.383416][ T6762] EXT4-fs: Ignoring removed orlov option [ 259.389275][ T6762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.422038][ T6762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.485140][ T5853] usb 1-1: device descriptor read/64, error -71 [ 259.509545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.562009][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.640468][ T6735] vhci_hcd: connection reset by peer [ 259.647128][ T3958] vhci_hcd: stop threads [ 259.651662][ T3958] vhci_hcd: release socket [ 259.656648][ T3958] vhci_hcd: disconnect device [ 259.788160][ T5853] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 259.943440][ T5853] usb 1-1: device descriptor read/64, error -71 [ 260.034156][ T5804] Bluetooth: min 0 < 6 [ 260.064482][ T5853] usb usb1-port1: attempt power cycle [ 260.250563][ T6770] loop4: detected capacity change from 0 to 4096 [ 260.280684][ T6770] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 260.413699][ T5853] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 260.469294][ T5853] usb 1-1: device descriptor read/8, error -71 [ 260.723241][ T5853] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 260.771338][ T5853] usb 1-1: device descriptor read/8, error -71 [ 260.883249][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 260.893933][ T6791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.895997][ T5853] usb usb1-port1: unable to enumerate USB device [ 261.119104][ T6793] loop1: detected capacity change from 0 to 128 [ 261.137067][ T6793] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.156794][ T6793] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.284338][ T1801] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.437565][ T6795] FAULT_INJECTION: forcing a failure. [ 261.437565][ T6795] name failslab, interval 1, probability 0, space 0, times 0 [ 261.456917][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.4.293 Not tainted syzkaller #0 PREEMPT(none) [ 261.457071][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.457143][ T6795] Call Trace: [ 261.457189][ T6795] [ 261.457234][ T6795] __dump_stack+0x26/0x30 [ 261.457388][ T6795] dump_stack_lvl+0x1df/0x270 [ 261.457541][ T6795] dump_stack+0x1e/0x25 [ 261.457671][ T6795] should_fail_ex+0x7dc/0x8a0 [ 261.457831][ T6795] should_failslab+0x15b/0x200 [ 261.457984][ T6795] __kmalloc_noprof+0x18d/0x1b40 [ 261.458123][ T6795] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 261.458279][ T6795] ? __msan_warning+0x1b/0x30 [ 261.458395][ T6795] ? filter_irq_stacks+0x13f/0x190 [ 261.458563][ T6795] ? kmsan_get_metadata+0xfb/0x160 [ 261.458698][ T6795] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.458848][ T6795] tomoyo_realpath_from_path+0xeb/0x9f0 [ 261.459009][ T6795] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.459158][ T6795] ? __srcu_read_lock+0x5e/0xd0 [ 261.459307][ T6795] tomoyo_path_number_perm+0x1d0/0x7d0 [ 261.459496][ T6795] ? stack_depot_save_flags+0x35/0x7b0 [ 261.459655][ T6795] ? kmsan_get_metadata+0xfb/0x160 [ 261.459788][ T6795] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.459979][ T6795] tomoyo_file_ioctl+0x3d/0x50 [ 261.460135][ T6795] security_file_ioctl_compat+0x141/0x590 [ 261.460324][ T6795] __ia32_compat_sys_ioctl+0x150/0x1270 [ 261.460494][ T6795] ? kmsan_get_metadata+0xfb/0x160 [ 261.460621][ T6795] ? kmsan_get_metadata+0xfb/0x160 [ 261.460773][ T6795] ia32_sys_call+0x2d5f/0x4310 [ 261.460952][ T6795] __do_fast_syscall_32+0xb0/0x150 [ 261.461128][ T6795] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 261.461299][ T6795] do_fast_syscall_32+0x38/0x80 [ 261.461467][ T6795] do_SYSENTER_32+0x1f/0x30 [ 261.461630][ T6795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.461784][ T6795] RIP: 0023:0xf7f92539 [ 261.461874][ T6795] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.461985][ T6795] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 261.462103][ T6795] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0105512 [ 261.462186][ T6795] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.462261][ T6795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.462335][ T6795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.462409][ T6795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.462516][ T6795] [ 261.462566][ T6795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.033807][ T5878] vhci_hcd: vhci_device speed not set [ 262.122354][ T5804] Bluetooth: hci3: command tx timeout [ 262.164110][ T6800] loop1: detected capacity change from 0 to 1024 [ 262.334997][ T5804] Bluetooth: min 0 < 6 [ 262.472850][ T6808] loop0: detected capacity change from 0 to 1024 [ 262.533941][ T6808] EXT4-fs: Ignoring removed i_version option [ 262.543788][ T5853] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 262.547803][ T6808] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 262.562102][ T6808] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 262.755011][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 262.779295][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 262.796183][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 262.810039][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 262.821247][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 262.831349][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.871381][ T5853] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 262.881266][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.895234][ T5853] usb 2-1: Product: syz [ 262.899594][ T5853] usb 2-1: Manufacturer: syz [ 262.906502][ T5853] usb 2-1: SerialNumber: syz [ 262.957445][ T5853] usb 2-1: config 0 descriptor?? [ 263.055816][ T6817] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 263.064029][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 263.544274][ T5853] iowarrior 2-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 263.584562][ T5853] usb 2-1: USB disconnect, device number 17 [ 263.692408][ T6823] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 263.842801][ T6824] bond1: entered promiscuous mode [ 263.848495][ T6824] bond1: entered allmulticast mode [ 263.855407][ T6824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.357992][ T5804] Bluetooth: hci1: command tx timeout [ 264.361038][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 264.464531][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 264.612813][ T24] usb 3-1: device descriptor read/64, error -71 [ 264.816907][ T6848] ip6gre1: entered promiscuous mode [ 264.822337][ T6848] ip6gre1: entered allmulticast mode [ 264.854001][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 265.005143][ T24] usb 3-1: device descriptor read/64, error -71 [ 265.135542][ T24] usb usb3-port1: attempt power cycle [ 265.324811][ T6854] syzkaller0: entered promiscuous mode [ 265.330654][ T6854] syzkaller0: entered allmulticast mode [ 265.521848][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 265.549028][ T6861] netlink: 'syz.0.320': attribute type 8 has an invalid length. [ 265.557394][ T6861] netlink: 64 bytes leftover after parsing attributes in process `syz.0.320'. [ 265.567285][ T6861] block nbd0: not configured, cannot reconfigure [ 265.579221][ T24] usb 3-1: device descriptor read/8, error -71 [ 265.833521][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.897207][ T24] usb 3-1: device descriptor read/8, error -71 [ 266.020044][ T24] usb usb3-port1: unable to enumerate USB device [ 266.034980][ T6865] syzkaller0: entered promiscuous mode [ 266.040957][ T6865] syzkaller0: entered allmulticast mode [ 266.528890][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 269.499880][ T6920] syz.2.344 uses obsolete (PF_INET,SOCK_PACKET) [ 270.865311][ T5853] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 270.880419][ T5853] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 270.902032][ T5853] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 270.909846][ T5853] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 270.917643][ T5853] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 270.925461][ T5853] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/77 [ 271.018944][ T5853] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 271.858478][ T6959] netlink: 'syz.0.358': attribute type 4 has an invalid length. [ 272.301980][ T6968] netlink: 160 bytes leftover after parsing attributes in process `syz.4.362'. [ 272.313404][ T6968] netlink: 160 bytes leftover after parsing attributes in process `syz.4.362'. [ 272.800171][ T6978] ===================================================== [ 272.807506][ T6978] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30 [ 272.816277][ T6978] ieee802154_hdr_push+0x9ac/0xa30 [ 272.828407][ T6978] ieee802154_header_create+0x854/0xb90 [ 272.836363][ T6978] dgram_sendmsg+0xb40/0x16d0 [ 272.841223][ T6978] ieee802154_sock_sendmsg+0x92/0xd0 [ 272.846902][ T6978] __sock_sendmsg+0x333/0x3d0 [ 272.851741][ T6978] ____sys_sendmsg+0x7e0/0xd80 [ 272.856817][ T6978] ___sys_sendmsg+0x271/0x3b0 [ 272.861673][ T6978] __sys_sendmsg+0x1aa/0x300 [ 272.866582][ T6978] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 272.872334][ T6978] ia32_sys_call+0x3f6c/0x4310 [ 272.877428][ T6978] __do_fast_syscall_32+0xb0/0x150 [ 272.882758][ T6978] do_fast_syscall_32+0x38/0x80 [ 272.887903][ T6978] do_SYSENTER_32+0x1f/0x30 [ 272.892609][ T6978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.899274][ T6978] [ 272.901690][ T6978] Uninit was stored to memory at: [ 272.907604][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804e6efa00: rx timeout, send abort [ 272.918987][ T6978] ieee802154_hdr_push+0x9a5/0xa30 [ 272.931270][ T6978] ieee802154_header_create+0x854/0xb90 [ 272.939201][ T6978] dgram_sendmsg+0xb40/0x16d0 [ 272.944267][ T6978] ieee802154_sock_sendmsg+0x92/0xd0 [ 272.949728][ T6978] __sock_sendmsg+0x333/0x3d0 [ 272.954794][ T6978] ____sys_sendmsg+0x7e0/0xd80 [ 272.959742][ T6978] ___sys_sendmsg+0x271/0x3b0 [ 272.964757][ T6978] __sys_sendmsg+0x1aa/0x300 [ 272.969542][ T6978] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 272.975450][ T6978] ia32_sys_call+0x3f6c/0x4310 [ 272.980427][ T6978] __do_fast_syscall_32+0xb0/0x150 [ 272.985847][ T6978] do_fast_syscall_32+0x38/0x80 [ 272.990883][ T6978] do_SYSENTER_32+0x1f/0x30 [ 272.995738][ T6978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.002249][ T6978] [ 273.005180][ T6978] Local variable hdr created at: [ 273.010190][ T6978] ieee802154_header_create+0x4e/0xb90 [ 273.015994][ T6978] dgram_sendmsg+0xb40/0x16d0 [ 273.027874][ T6978] [ 273.030329][ T6978] CPU: 0 UID: 0 PID: 6978 Comm: syz.3.367 Not tainted syzkaller #0 PREEMPT(none) [ 273.042036][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.052441][ T6978] ===================================================== [ 273.059609][ T6978] Disabling lock debugging due to kernel taint [ 273.065973][ T6978] Kernel panic - not syncing: kmsan.panic set ... [ 273.072520][ T6978] CPU: 0 UID: 0 PID: 6978 Comm: syz.3.367 Tainted: G B syzkaller #0 PREEMPT(none) [ 273.083457][ T6978] Tainted: [B]=BAD_PAGE [ 273.087687][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.097839][ T6978] Call Trace: [ 273.101191][ T6978] [ 273.104191][ T6978] __dump_stack+0x26/0x30 [ 273.108678][ T6978] dump_stack_lvl+0x53/0x270 [ 273.113427][ T6978] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 273.119400][ T6978] dump_stack+0x1e/0x25 [ 273.123698][ T6978] vpanic+0x435/0xd30 [ 273.127844][ T6978] panic+0x15d/0x160 [ 273.131926][ T6978] kmsan_report+0x31c/0x320 [ 273.136564][ T6978] ? stack_depot_save+0x12/0x20 [ 273.141552][ T6978] ? __msan_warning+0x1b/0x30 [ 273.146351][ T6978] ? ieee802154_hdr_push+0x9ac/0xa30 [ 273.151823][ T6978] ? ieee802154_header_create+0x854/0xb90 [ 273.157684][ T6978] ? dgram_sendmsg+0xb40/0x16d0 [ 273.162665][ T6978] ? ieee802154_sock_sendmsg+0x92/0xd0 [ 273.168270][ T6978] ? __sock_sendmsg+0x333/0x3d0 [ 273.173254][ T6978] ? ____sys_sendmsg+0x7e0/0xd80 [ 273.178355][ T6978] ? ___sys_sendmsg+0x271/0x3b0 [ 273.183394][ T6978] ? __sys_sendmsg+0x1aa/0x300 [ 273.188347][ T6978] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 273.194254][ T6978] ? ia32_sys_call+0x3f6c/0x4310 [ 273.199372][ T6978] ? __do_fast_syscall_32+0xb0/0x150 [ 273.204826][ T6978] ? do_fast_syscall_32+0x38/0x80 [ 273.210010][ T6978] ? do_SYSENTER_32+0x1f/0x30 [ 273.214851][ T6978] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.221509][ T6978] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.228161][ T6978] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 273.234057][ T6978] ? ia32_sys_call+0x3f6c/0x4310 [ 273.239174][ T6978] ? kmsan_get_metadata+0xfb/0x160 [ 273.244430][ T6978] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 273.250424][ T6978] ? __pfx_ieee802154_hdr_push+0x1/0x10 [ 273.256147][ T6978] ? filter_irq_stacks+0x49/0x190 [ 273.261359][ T6978] ? kmsan_get_metadata+0xfb/0x160 [ 273.266633][ T6978] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 273.273084][ T6978] ? kmsan_get_metadata+0xfb/0x160 [ 273.278353][ T6978] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 273.284880][ T6978] ? kmsan_get_metadata+0xfb/0x160 [ 273.290190][ T6978] __msan_warning+0x1b/0x30 [ 273.294846][ T6978] ieee802154_hdr_push+0x9ac/0xa30 [ 273.300152][ T6978] ? __devm_create_dev_dax+0x382/0x1fd0 [ 273.305831][ T6978] ? __msan_memcpy+0x108/0x1c0 [ 273.310727][ T6978] ieee802154_header_create+0x854/0xb90 [ 273.316435][ T6978] ? kmsan_get_metadata+0xfb/0x160 [ 273.321693][ T6978] ? __pfx_ieee802154_header_create+0x10/0x10 [ 273.327896][ T6978] dgram_sendmsg+0xb40/0x16d0 [ 273.332738][ T6978] ? __pfx_dgram_sendmsg+0x10/0x10 [ 273.337995][ T6978] ieee802154_sock_sendmsg+0x92/0xd0 [ 273.343466][ T6978] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 273.349607][ T6978] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 273.355745][ T6978] __sock_sendmsg+0x333/0x3d0 [ 273.360565][ T6978] ____sys_sendmsg+0x7e0/0xd80 [ 273.365528][ T6978] ___sys_sendmsg+0x271/0x3b0 [ 273.370416][ T6978] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 273.376420][ T6978] ? __rcu_read_unlock+0x6d/0xd0 [ 273.381489][ T6978] ? __fget_files+0x3b4/0x4a0 [ 273.386294][ T6978] ? __fget_files+0x3b9/0x4a0 [ 273.391101][ T6978] ? kmsan_get_metadata+0xfb/0x160 [ 273.396366][ T6978] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 273.402344][ T6978] __sys_sendmsg+0x1aa/0x300 [ 273.407161][ T6978] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 273.412910][ T6978] ia32_sys_call+0x3f6c/0x4310 [ 273.417861][ T6978] __do_fast_syscall_32+0xb0/0x150 [ 273.423169][ T6978] do_fast_syscall_32+0x38/0x80 [ 273.428223][ T6978] do_SYSENTER_32+0x1f/0x30 [ 273.432983][ T6978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.439486][ T6978] RIP: 0023:0xf708d539 [ 273.443736][ T6978] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.463485][ T6978] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 273.472034][ T6978] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 273.480125][ T6978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.488189][ T6978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.496260][ T6978] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.504324][ T6978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.512424][ T6978] [ 273.515919][ T6978] Kernel Offset: disabled [ 273.520308][ T6978] Rebooting in 86400 seconds..