last executing test programs: 24.382282945s ago: executing program 1 (id=733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 24.098129778s ago: executing program 1 (id=735): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x6}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x68, 0x60, 0x36, 0x20, 0xe7e, 0x1001, 0xa317, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x98, 0x7, 0x2, 0xdf, 0x2b, 0x9f, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x400, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 22.11278823s ago: executing program 1 (id=741): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0xfb0, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @fda={0x70742a85, 0x3, 0x1, 0x16}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 21.813643914s ago: executing program 1 (id=743): mkdir(&(0x7f00000003c0)='./file0\x00', 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40000) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x15, 0xfeb8, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x1, 0x3, 0xdf7e, 0x3, 0x80007, 0xd}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000000)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r4, 0x0, r6, 0x0, 0xfffd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 20.550861017s ago: executing program 1 (id=745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 19.813114607s ago: executing program 1 (id=749): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000000a0a01ff"], 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 18.531158272s ago: executing program 32 (id=749): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000000a0a01ff"], 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 10.593994058s ago: executing program 4 (id=787): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 9.560599152s ago: executing program 4 (id=788): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000100)={0xd4, 0x0, 0x6}) 9.482288308s ago: executing program 0 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x810) 9.302049143s ago: executing program 0 (id=790): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 9.21341472s ago: executing program 4 (id=791): r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000000)=0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x100b}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100"], 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0b00000019000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000008000000291b375c0857e26a8da145e1ada8923c98c9f374309eeed256c6d585b23703f242c639fdf5689d5e19d730b153f6c2e4733ac308e6cff3956fd50d98db4264091621c24d49", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f0000000580), &(0x7f0000000600)=""/251}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2010, r0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3, 0x1, 0x6, 0x400, r1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0xc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYRES16, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000924060500", @ANYBLOB="a1"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff08000000000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x15, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x201}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xc, 0x4, 0xa, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @ldst={0x1, 0x0, 0x4, 0xd, 0x4, 0x100, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x79, &(0x7f0000000580)=""/121, 0x28c882e26ce37d8f, 0x0, '\x00', 0x0, @fallback=0xa, r1, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xa, 0x4, 0x2}, 0x10, 0x0, r1, 0x6, &(0x7f0000000640)=[r1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x2, 0x1, 0xf, 0x7}, {0x4, 0x5, 0xf, 0x2}, {0x1, 0x5, 0xf, 0xc}, {0x1, 0x3, 0x0, 0x6}, {0x2, 0x4, 0x1, 0xc}, {0x6, 0x2, 0xb, 0xc}], 0x10, 0x8}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x81ff) 9.018360776s ago: executing program 0 (id=792): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) sendfile(r1, r0, 0x0, 0xfffe82) 8.824114542s ago: executing program 0 (id=794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x20000007, 0x0, r0}, 0x50) 7.974016621s ago: executing program 2 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x4000000000) 5.068966387s ago: executing program 3 (id=800): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000100)={0xd4, 0x0, 0x6}) 4.821858517s ago: executing program 2 (id=801): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 4.722206636s ago: executing program 3 (id=802): bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.625596044s ago: executing program 2 (id=803): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x32, 0xb05, 0x0, 0x200, {0xa}}, 0x75}}, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.114266755s ago: executing program 2 (id=804): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000000), 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 3.674793981s ago: executing program 2 (id=805): io_setup(0xffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 3.003012725s ago: executing program 2 (id=806): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.717931209s ago: executing program 3 (id=807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d0000000000000000000000040018"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) 2.674210522s ago: executing program 4 (id=808): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.392334535s ago: executing program 3 (id=809): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) sendfile(r1, r0, 0x0, 0x100000000) 1.420493855s ago: executing program 4 (id=810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0xfb0, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @fda={0x70742a85, 0x3, 0x1, 0x16}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 402.335307ms ago: executing program 0 (id=811): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xd4, 0x0, 0x6}) 396.664847ms ago: executing program 3 (id=812): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 389.903318ms ago: executing program 4 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x8b2c1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 110.169191ms ago: executing program 0 (id=814): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r4}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) 0s ago: executing program 3 (id=815): io_setup(0xffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) kernel console output (not intermixed with test programs): id descriptor of length 0, skipping remainder of the config [ 118.925193][ T4772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.934370][ T4772] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 118.944096][ T4772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.967659][ T4772] usb 4-1: config 0 descriptor?? [ 118.990335][ T4772] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 118.997363][ T4772] dvb-usb: bulk message failed: -22 (3/0) [ 119.025740][ T4772] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.036657][ T4772] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.044797][ T4772] usb 4-1: media controller created [ 119.059261][ T4772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.097324][ T4772] dvb-usb: bulk message failed: -22 (6/0) [ 119.104168][ T4772] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 119.131622][ T4772] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 119.155344][ T4413] usb 5-1: config 0 has no interface number 0 [ 119.181008][ T4772] dvb-usb: schedule remote query interval to 150 msecs. [ 119.184959][ T4960] dvb-usb: bulk message failed: -22 (55/0) [ 119.188221][ T4772] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.248583][ T4413] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 119.345475][ T4772] dvb-usb: bulk message failed: -22 (1/0) [ 119.351843][ T4772] dvb-usb: error while querying for an remote control event. [ 119.398144][ T4772] usb 4-1: USB disconnect, device number 4 [ 119.430691][ T4413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.442701][ T4413] usb 5-1: Product: syz [ 119.457417][ T4413] usb 5-1: Manufacturer: syz [ 119.462239][ T4413] usb 5-1: SerialNumber: syz [ 119.485090][ T4413] usb 5-1: config 0 descriptor?? [ 119.485905][ T4772] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 119.502232][ T4413] ftdi_sio 5-1:0.23: FTDI USB Serial Device converter detected [ 119.529439][ T4413] usb 5-1: Detected SIO [ 119.545344][ T4413] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 119.719341][ T3532] usb 5-1: USB disconnect, device number 4 [ 119.737245][ T3532] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.767407][ T3532] ftdi_sio 5-1:0.23: device disconnected [ 120.326042][ T4987] vivid-007: ================= START STATUS ================= [ 120.384798][ T4987] vivid-007: Generate PTS: true [ 120.398453][ T4987] vivid-007: Generate SCR: true [ 120.422368][ T4987] tpg source WxH: 640x360 (Y'CbCr) [ 120.439900][ T4987] tpg field: 1 [ 120.443480][ T4987] tpg crop: 640x360@0x0 [ 121.801825][ T4987] tpg compose: 640x360@0x0 [ 121.806557][ T4987] tpg colorspace: 8 [ 121.810395][ T4987] tpg transfer function: 0/0 [ 121.826170][ T4987] tpg Y'CbCr encoding: 0/0 [ 121.873263][ T4987] tpg quantization: 0/0 [ 121.878939][ T4987] tpg RGB range: 0/2 [ 121.883002][ T4987] vivid-007: ================== END STATUS ================== [ 121.883031][ T4986] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 121.897311][ T4986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.978080][ T4986] vhci_hcd vhci_hcd.0: Device attached [ 122.187064][ T4999] vhci_hcd: connection closed [ 122.187277][ T4998] vhci_hcd: stop threads [ 122.261518][ T7] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 122.338791][ T4998] vhci_hcd: release socket [ 122.344002][ T4998] vhci_hcd: disconnect device [ 122.682731][ T5013] tmpfs: Unknown parameter 'usrquota' [ 123.615331][ T4413] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 124.614709][ T4412] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 124.646562][ T4413] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.664632][ T4413] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 124.683921][ T4413] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 124.694887][ T4413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.719205][ T4413] usb 2-1: config 0 descriptor?? [ 124.729073][ T4413] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 124.736903][ T4413] dvb-usb: bulk message failed: -22 (3/0) [ 124.752335][ T4413] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 124.761651][ T4413] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 124.775685][ T4413] usb 2-1: media controller created [ 124.782008][ T4413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.807695][ T4412] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 124.819557][ T4412] usb 4-1: config 0 has no interface number 0 [ 124.831487][ T4413] dvb-usb: bulk message failed: -22 (6/0) [ 124.842554][ T4413] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 124.850736][ T4412] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 124.866916][ T4412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.878289][ T4413] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 124.933361][ T5020] dvb-usb: bulk message failed: -22 (55/0) [ 124.940489][ T4412] usb 4-1: Product: syz [ 124.951316][ T4412] usb 4-1: Manufacturer: syz [ 124.961401][ T4413] dvb-usb: schedule remote query interval to 150 msecs. [ 124.974816][ T4412] usb 4-1: SerialNumber: syz [ 124.979687][ T4413] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 125.011972][ T4412] usb 4-1: config 0 descriptor?? [ 125.022797][ T4412] ftdi_sio 4-1:0.23: FTDI USB Serial Device converter detected [ 125.046427][ T4413] usb 2-1: USB disconnect, device number 6 [ 125.053307][ T4412] usb 4-1: Detected SIO [ 125.060079][ T4412] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 125.116543][ T4413] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 125.257596][ T4770] usb 4-1: USB disconnect, device number 5 [ 125.290742][ T5048] vivid-007: ================= START STATUS ================= [ 125.306075][ T4770] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 125.316852][ T5048] vivid-007: Generate PTS: true [ 125.324715][ T4256] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 125.333819][ T5048] vivid-007: Generate SCR: true [ 125.377118][ T4770] ftdi_sio 4-1:0.23: device disconnected [ 125.384147][ T5048] tpg source WxH: 640x360 (Y'CbCr) [ 125.465938][ T5048] tpg field: 1 [ 125.494690][ T4256] usb 1-1: device descriptor read/64, error -71 [ 125.528754][ T5048] tpg crop: 640x360@0x0 [ 125.553890][ T5048] tpg compose: 640x360@0x0 [ 125.585828][ T5048] tpg colorspace: 8 [ 125.589653][ T5048] tpg transfer function: 0/0 [ 125.607745][ T5048] tpg Y'CbCr encoding: 0/0 [ 125.622902][ T5048] tpg quantization: 0/0 [ 125.624667][ T5047] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 125.633659][ T5047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.644349][ T5048] tpg RGB range: 0/2 [ 125.649206][ T5048] vivid-007: ================== END STATUS ================== [ 125.717273][ T5055] tmpfs: Unknown parameter 'usrquota' [ 125.804706][ T4256] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 125.977217][ T5047] vhci_hcd vhci_hcd.0: Device attached [ 125.985499][ T5053] vhci_hcd: connection closed [ 125.985749][ T4998] vhci_hcd: stop threads [ 126.006076][ T4998] vhci_hcd: release socket [ 126.010539][ T4998] vhci_hcd: disconnect device [ 126.024523][ T4256] usb 1-1: device descriptor read/64, error -71 [ 126.155072][ T4256] usb usb1-port1: attempt power cycle [ 126.764628][ T4256] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 126.811304][ T4256] usb 1-1: device descriptor read/8, error -71 [ 127.104692][ T4256] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 127.499156][ T7] vhci_hcd: vhci_device speed not set [ 127.635627][ T4256] usb 1-1: device descriptor read/8, error -71 [ 128.408527][ T4256] usb usb1-port1: unable to enumerate USB device [ 129.287423][ T4770] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 129.444969][ T3532] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 129.491841][ T5097] tmpfs: Unknown parameter 'usrquota' [ 129.494078][ T4770] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 129.515648][ T4770] usb 3-1: config 0 has no interface number 0 [ 129.942231][ T3532] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.039791][ T4770] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 130.049233][ T3532] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.059429][ T4770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.068246][ T3532] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.077697][ T4770] usb 3-1: Product: syz [ 130.081939][ T4770] usb 3-1: Manufacturer: syz [ 130.095707][ T3532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.103895][ T4770] usb 3-1: SerialNumber: syz [ 130.124591][ T4770] usb 3-1: config 0 descriptor?? [ 130.138004][ T3532] usb 4-1: config 0 descriptor?? [ 130.187617][ T4770] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected [ 130.198691][ T3532] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 130.244728][ T5096] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 130.251418][ T5096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.281916][ T4770] usb 3-1: Detected SIO [ 130.286492][ T3532] dvb-usb: bulk message failed: -22 (3/0) [ 130.300091][ T4770] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 130.329128][ T3532] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 130.381922][ T5096] vhci_hcd vhci_hcd.0: Device attached [ 130.399918][ T5090] dibusb: i2c wr: len=62 is too big! [ 130.399918][ T5090] [ 130.425256][ T4770] usb 3-1: USB disconnect, device number 6 [ 130.434348][ T3532] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 130.463371][ T5101] vhci_hcd: connection closed [ 130.463840][ T4770] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.480495][ T3532] usb 4-1: media controller created [ 130.487055][ T4512] vhci_hcd: stop threads [ 130.491341][ T4512] vhci_hcd: release socket [ 130.517620][ T4512] vhci_hcd: disconnect device [ 130.517663][ T3532] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.543688][ T4770] ftdi_sio 3-1:0.23: device disconnected [ 130.563550][ T3532] dvb-usb: bulk message failed: -22 (6/0) [ 130.605598][ T4413] vhci_hcd: vhci_device speed not set [ 130.667330][ T3532] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 130.731554][ T3532] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 130.769837][ T3532] dvb-usb: schedule remote query interval to 150 msecs. [ 130.780403][ T3532] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 130.848595][ T3532] usb 4-1: USB disconnect, device number 6 [ 131.092531][ T3532] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 131.735322][ T4770] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 132.694788][ T4770] usb 3-1: device descriptor read/64, error -71 [ 132.777334][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783792][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.882343][ T5131] tmpfs: Unknown parameter 'usrquota' [ 132.984788][ T4770] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 133.154624][ T4770] usb 3-1: device descriptor read/64, error -71 [ 133.275748][ T4770] usb usb3-port1: attempt power cycle [ 133.703287][ T4770] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 133.747285][ T4770] usb 3-1: device descriptor read/8, error -71 [ 133.934562][ T7] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 134.024747][ T4770] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 134.065871][ T4770] usb 3-1: device descriptor read/8, error -71 [ 134.126130][ T7] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 134.134403][ T7] usb 5-1: config 0 has no interface number 0 [ 134.175778][ T4413] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 134.244765][ T4770] usb usb3-port1: unable to enumerate USB device [ 134.246123][ T7] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 134.272668][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.293684][ T5150] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 134.300309][ T5150] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.311806][ T5150] vhci_hcd vhci_hcd.0: Device attached [ 134.319429][ T5153] vhci_hcd: connection closed [ 134.319685][ T4568] vhci_hcd: stop threads [ 134.342249][ T7] usb 5-1: Product: syz [ 134.350892][ T4568] vhci_hcd: release socket [ 134.355545][ T7] usb 5-1: Manufacturer: syz [ 134.360741][ T4568] vhci_hcd: disconnect device [ 134.369481][ T7] usb 5-1: SerialNumber: syz [ 134.389047][ T4413] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.401274][ T7] usb 5-1: config 0 descriptor?? [ 134.414719][ T4413] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 134.430027][ T4413] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 134.440033][ T7] ftdi_sio 5-1:0.23: FTDI USB Serial Device converter detected [ 134.452081][ T7] usb 5-1: Detected SIO [ 134.456531][ T4413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.472352][ T7] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 134.489898][ T4413] usb 1-1: config 0 descriptor?? [ 134.510290][ T4413] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 134.526766][ T4413] dvb-usb: bulk message failed: -22 (3/0) [ 134.544390][ T4413] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 134.568183][ T4413] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 134.598409][ T4413] usb 1-1: media controller created [ 134.604214][ T4413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.646808][ T4413] dvb-usb: bulk message failed: -22 (6/0) [ 134.657987][ T4772] usb 5-1: USB disconnect, device number 5 [ 134.678938][ T4772] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 134.695204][ T4413] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 134.711245][ T5148] dvb-usb: bulk message failed: -22 (60/0) [ 134.722516][ T4772] ftdi_sio 5-1:0.23: device disconnected [ 134.752638][ T4413] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 134.800999][ T4413] dvb-usb: schedule remote query interval to 150 msecs. [ 134.821363][ T4413] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 134.889865][ T4413] usb 1-1: USB disconnect, device number 9 [ 134.954445][ T4413] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 136.275776][ T5175] tmpfs: Unknown parameter 'usrquota' [ 137.574846][ T4256] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 137.646410][ T5197] vivid-007: ================= START STATUS ================= [ 137.654221][ T5197] vivid-007: Generate PTS: true [ 137.659818][ T5197] vivid-007: Generate SCR: true [ 137.670329][ T5197] tpg source WxH: 640x360 (Y'CbCr) [ 137.682441][ T5197] tpg field: 1 [ 137.707099][ T5195] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 137.713721][ T5195] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.722533][ T5197] tpg crop: 640x360@0x0 [ 137.728218][ T5197] tpg compose: 640x360@0x0 [ 137.748697][ T5197] tpg colorspace: 8 [ 137.759208][ T5195] vhci_hcd vhci_hcd.0: Device attached [ 137.803650][ T5197] tpg transfer function: 0/0 [ 137.814660][ T4256] usb 1-1: device descriptor read/64, error -71 [ 137.833259][ T5197] tpg Y'CbCr encoding: 0/0 [ 137.852317][ T5197] tpg quantization: 0/0 [ 137.862192][ T5197] tpg RGB range: 0/2 [ 137.870760][ T5197] vivid-007: ================== END STATUS ================== [ 137.898215][ T5199] vhci_hcd: connection closed [ 137.899391][ T4350] vhci_hcd: stop threads [ 137.949386][ T4350] vhci_hcd: release socket [ 137.954257][ T4350] vhci_hcd: disconnect device [ 138.074569][ T14] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 138.114587][ T4256] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 138.217053][ T3532] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 138.266162][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.276395][ T4256] usb 1-1: device descriptor read/64, error -71 [ 138.289421][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.304775][ T14] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 138.313929][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.324081][ T14] usb 4-1: config 0 descriptor?? [ 138.345453][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.352976][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 138.360370][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.384865][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 138.394687][ T4256] usb usb1-port1: attempt power cycle [ 138.401133][ T14] usb 4-1: media controller created [ 138.407974][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.418036][ T3532] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 138.445916][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 138.446735][ T3532] usb 3-1: config 0 has no interface number 0 [ 138.451718][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 138.512457][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 138.526297][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 138.528496][ T3532] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 138.533255][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 138.560652][ T5204] dvb-usb: bulk message failed: -22 (60/0) [ 138.804703][ T4256] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 139.938351][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 139.945803][ T4256] usb 1-1: device descriptor read/8, error -71 [ 139.995931][ T14] dvb-usb: error while querying for an remote control event. [ 140.103385][ T7] usb 4-1: USB disconnect, device number 7 [ 140.121858][ T3532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.130055][ T3532] usb 3-1: Product: syz [ 140.134541][ T3532] usb 3-1: Manufacturer: syz [ 140.140421][ T3532] usb 3-1: SerialNumber: syz [ 140.148577][ T3532] usb 3-1: config 0 descriptor?? [ 140.157857][ T3532] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected [ 140.166672][ T3532] usb 3-1: Detected SIO [ 140.175381][ T3532] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 140.194978][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 140.264798][ T4256] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 140.366898][ T3532] usb 3-1: USB disconnect, device number 11 [ 140.375959][ T4256] usb 1-1: device descriptor read/8, error -71 [ 140.385172][ T3532] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 140.429078][ T3532] ftdi_sio 3-1:0.23: device disconnected [ 140.502100][ T4256] usb usb1-port1: unable to enumerate USB device [ 140.655073][ T5219] tmpfs: Unknown parameter 'usrquota' [ 141.650770][ T5233] 9pnet: Could not find request transport: fd0x0000000000000003 [ 143.807792][ T5246] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 143.814412][ T5246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.829965][ T5246] vhci_hcd vhci_hcd.0: Device attached [ 143.858412][ T5250] vhci_hcd: connection closed [ 143.859367][ T11] vhci_hcd: stop threads [ 143.895543][ T11] vhci_hcd: release socket [ 143.919570][ T11] vhci_hcd: disconnect device [ 144.124616][ T7] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 144.294891][ T7] usb 1-1: device descriptor read/64, error -71 [ 144.605300][ T4256] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 144.691553][ T5264] tmpfs: Unknown parameter 'usrquota' [ 144.760343][ T7] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 144.946460][ T4256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.999994][ T4256] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 145.019636][ T4256] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 145.031769][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.051151][ T4256] usb 2-1: config 0 descriptor?? [ 145.063055][ T4256] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 145.076183][ T7] usb 1-1: device descriptor read/64, error -71 [ 145.082953][ T4256] dvb-usb: bulk message failed: -22 (3/0) [ 145.113659][ T4256] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 145.127320][ T4256] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 145.138907][ T4256] usb 2-1: media controller created [ 145.148786][ T4256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.162879][ T4256] dvb-usb: bulk message failed: -22 (6/0) [ 145.183815][ T4256] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 145.225959][ T7] usb usb1-port1: attempt power cycle [ 145.249208][ T4256] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 145.263730][ T5260] dvb-usb: bulk message failed: -22 (60/0) [ 145.273557][ T4256] dvb-usb: schedule remote query interval to 150 msecs. [ 145.321198][ T4256] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 145.357662][ T4256] usb 2-1: USB disconnect, device number 7 [ 145.399442][ T4256] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 145.444592][ T4772] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 145.636191][ T4772] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 145.648193][ T4772] usb 5-1: config 0 has no interface number 0 [ 145.654672][ T7] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 145.660644][ T4772] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 145.676165][ T4772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.686674][ T4772] usb 5-1: Product: syz [ 145.690923][ T4772] usb 5-1: Manufacturer: syz [ 145.703350][ T4772] usb 5-1: SerialNumber: syz [ 145.711290][ T4772] usb 5-1: config 0 descriptor?? [ 145.716906][ T7] usb 1-1: device descriptor read/8, error -71 [ 145.719763][ T4772] ftdi_sio 5-1:0.23: FTDI USB Serial Device converter detected [ 145.741792][ T4772] usb 5-1: Detected SIO [ 145.752585][ T4772] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 145.931985][ T4256] usb 5-1: USB disconnect, device number 6 [ 145.950965][ T4256] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 145.968219][ T4256] ftdi_sio 5-1:0.23: device disconnected [ 146.004555][ T7] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 146.041093][ T7] usb 1-1: device descriptor read/8, error -71 [ 146.195630][ T7] usb usb1-port1: unable to enumerate USB device [ 146.690858][ T5281] 9pnet: Could not find request transport: fd0x0000000000000003 [ 148.500159][ T5294] vivid-007: ================= START STATUS ================= [ 148.507927][ T5294] vivid-007: Generate PTS: true [ 148.512848][ T5294] vivid-007: Generate SCR: true [ 148.517770][ T5294] tpg source WxH: 640x360 (Y'CbCr) [ 148.522879][ T5294] tpg field: 1 [ 148.526297][ T5294] tpg crop: 640x360@0x0 [ 148.530452][ T5294] tpg compose: 640x360@0x0 [ 148.534944][ T5294] tpg colorspace: 8 [ 148.538748][ T5294] tpg transfer function: 0/0 [ 148.543329][ T5294] tpg Y'CbCr encoding: 0/0 [ 148.547884][ T5294] tpg quantization: 0/0 [ 148.552113][ T5294] tpg RGB range: 0/2 [ 148.556153][ T5294] vivid-007: ================== END STATUS ================== [ 148.709953][ T5299] tmpfs: Unknown parameter 'usrquota' [ 148.861610][ T5294] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 148.868264][ T5294] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 148.876088][ T5294] vhci_hcd vhci_hcd.0: Device attached [ 148.876291][ T5298] vhci_hcd: connection closed [ 148.886417][ T4470] vhci_hcd: stop threads [ 149.079226][ T4470] vhci_hcd: release socket [ 149.098319][ T4470] vhci_hcd: disconnect device [ 149.136719][ T3532] vhci_hcd: vhci_device speed not set [ 149.764561][ T7] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 150.008043][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.049761][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 150.128838][ T7] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 150.199019][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.228798][ T7] usb 1-1: config 0 descriptor?? [ 150.250726][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 150.274686][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 150.322216][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 150.383778][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 150.414058][ T7] usb 1-1: media controller created [ 150.434983][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.448404][ T5318] dvb-usb: bulk message failed: -22 (62/0) [ 150.495516][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 150.516243][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 150.559650][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 150.625989][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 150.652241][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 150.691727][ T7] usb 1-1: USB disconnect, device number 18 [ 150.732080][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 151.104727][ T126] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 151.690172][ T5333] 9pnet: Could not find request transport: fd0x0000000000000003 [ 151.830504][ T4770] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 151.989904][ T4770] usb 1-1: device descriptor read/64, error -71 [ 152.079220][ T5348] vivid-007: ================= START STATUS ================= [ 152.217287][ T126] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 152.274592][ T4770] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 153.415370][ T126] usb 5-1: config 0 has no interface number 0 [ 153.501512][ T5348] vivid-007: Generate PTS: true [ 153.524685][ T126] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 153.539148][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.545901][ T5348] vivid-007: Generate SCR: [ 153.555692][ T5349] tmpfs: Unknown parameter 'usrquota' [ 153.569894][ T126] usb 5-1: Product: syz [ 153.571025][ T5348] true [ 153.614717][ T4770] usb 1-1: device descriptor read/64, error -71 [ 153.615149][ T5348] tpg source WxH: 640x360 (Y'CbCr) [ 153.626816][ T126] usb 5-1: Manufacturer: syz [ 153.671206][ T126] usb 5-1: SerialNumber: syz [ 153.697844][ T5347] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 153.704460][ T5347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 153.712787][ T5347] vhci_hcd vhci_hcd.0: Device attached [ 153.735301][ T4770] usb usb1-port1: attempt power cycle [ 153.760631][ T5348] tpg field: 1 [ 153.878616][ T126] usb 5-1: config 0 descriptor?? [ 153.892097][ T5348] tpg crop: 640x360@0x0 [ 153.959840][ T5348] tpg compose: 640x360@0x0 [ 153.981069][ T5348] tpg colorspace: 8 [ 153.989489][ T5348] tpg transfer function: 0/0 [ 154.034721][ T5348] tpg Y'CbCr encoding: 0/0 [ 154.054344][ T5348] tpg quantization: 0/0 [ 154.091951][ T5348] tpg RGB range: 0/2 [ 154.097171][ T5348] vivid-007: ================== END STATUS ================== [ 154.101519][ T126] usb 5-1: can't set config #0, error -71 [ 154.148819][ T126] usb 5-1: USB disconnect, device number 7 [ 154.155261][ T5350] vhci_hcd: connection closed [ 154.155477][ T4470] vhci_hcd: stop threads [ 154.164439][ T4470] vhci_hcd: release socket [ 154.169233][ T4770] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 154.191670][ T4470] vhci_hcd: disconnect device [ 154.215828][ T4770] usb 1-1: device descriptor read/8, error -71 [ 154.244846][ T4256] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 154.296757][ T4256] usb 35-1: enqueue for inactive port 0 [ 154.485836][ T4256] vhci_hcd: vhci_device speed not set [ 154.504570][ T4770] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 154.777459][ T4770] usb 1-1: device descriptor read/8, error -71 [ 154.894995][ T4770] usb usb1-port1: unable to enumerate USB device [ 155.434681][ T3532] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 158.460145][ T3532] usb 5-1: device descriptor read/all, error -71 [ 158.974606][ T4770] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 159.114901][ T5398] tmpfs: Unknown parameter 'usrquota' [ 159.685265][ T4770] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 159.693474][ T4770] usb 4-1: config 0 has no interface number 0 [ 159.814384][ T4770] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 159.849345][ T4770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.884751][ T4770] usb 4-1: Product: syz [ 159.888957][ T4770] usb 4-1: Manufacturer: syz [ 159.893661][ T4770] usb 4-1: SerialNumber: syz [ 159.922858][ T4770] usb 4-1: config 0 descriptor?? [ 159.942683][ T4770] ftdi_sio 4-1:0.23: FTDI USB Serial Device converter detected [ 159.953796][ T4770] usb 4-1: Detected SIO [ 159.966525][ T4770] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 160.108284][ T5406] vivid-007: ================= START STATUS ================= [ 160.824554][ T4770] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 161.440279][ T5406] vivid-007: Generate PTS: true [ 161.445308][ T5406] vivid-007: Generate SCR: true [ 161.450244][ T5406] tpg source WxH: 640x360 (Y'CbCr) [ 161.455636][ T5406] tpg field: 1 [ 161.459057][ T5406] tpg crop: 640x360@0x0 [ 161.463249][ T5406] tpg compose: 640x360@0x0 [ 161.467794][ T5406] tpg colorspace: 8 [ 161.471638][ T5406] tpg transfer function: 0/0 [ 161.476321][ T5406] tpg Y'CbCr encoding: 0/0 [ 161.480782][ T5406] tpg quantization: 0/0 [ 161.485046][ T5406] tpg RGB range: 0/2 [ 161.488963][ T5406] vivid-007: ================== END STATUS ================== [ 161.510364][ T5402] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 161.517002][ T5402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.524958][ T5402] vhci_hcd vhci_hcd.0: Device attached [ 161.534391][ T5409] vhci_hcd: connection closed [ 161.538021][ T4411] vhci_hcd: stop threads [ 161.579363][ T4317] usb 4-1: USB disconnect, device number 8 [ 161.585937][ T4411] vhci_hcd: release socket [ 161.590387][ T4411] vhci_hcd: disconnect device [ 161.625424][ T4317] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 161.644823][ T4317] ftdi_sio 4-1:0.23: device disconnected [ 161.735119][ T4770] usb 1-1: device descriptor read/64, error -71 [ 162.014872][ T4770] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 162.194712][ T4770] usb 1-1: device descriptor read/64, error -71 [ 163.368351][ T4256] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 163.611067][ T4770] usb usb1-port1: attempt power cycle [ 163.667272][ T5434] 9pnet_fd: Insufficient options for proto=fd [ 163.776746][ T4256] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.834581][ T4256] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.843521][ T4256] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 163.918162][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.957484][ T4256] usb 5-1: config 0 descriptor?? [ 163.977845][ T4256] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 164.060525][ T5447] tmpfs: Unknown parameter 'usrquota' [ 164.315145][ T4256] dvb-usb: bulk message failed: -22 (3/0) [ 164.466573][ T4256] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 164.517803][ T4256] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 164.541788][ T4256] usb 5-1: media controller created [ 164.550535][ T4256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.591148][ T4256] dvb-usb: bulk message failed: -22 (6/0) [ 164.622998][ T4256] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 164.648685][ T4256] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 164.672255][ T4256] dvb-usb: schedule remote query interval to 150 msecs. [ 164.680484][ T4256] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 164.715178][ T4256] usb 5-1: USB disconnect, device number 10 [ 164.751356][ T4256] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 165.073586][ T5459] vivid-007: ================= START STATUS ================= [ 165.082198][ T5459] vivid-007: Generate PTS: true [ 165.087562][ T5459] vivid-007: Generate SCR: true [ 165.092582][ T5459] tpg source WxH: 640x360 (Y'CbCr) [ 165.098074][ T5459] tpg field: 1 [ 165.101569][ T5459] tpg crop: 640x360@0x0 [ 165.106164][ T5459] tpg compose: 640x360@0x0 [ 165.110954][ T5459] tpg colorspace: 8 [ 165.115116][ T5459] tpg transfer function: 0/0 [ 165.119849][ T5459] tpg Y'CbCr encoding: 0/0 [ 165.141350][ T5459] tpg quantization: 0/0 [ 165.145733][ T5459] tpg RGB range: 0/2 [ 165.149738][ T5459] vivid-007: ================== END STATUS ================== [ 165.643864][ T5460] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 165.650591][ T5460] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.658808][ T5460] vhci_hcd vhci_hcd.0: Device attached [ 165.834617][ T5461] vhci_hcd: connection closed [ 165.836893][ T4998] vhci_hcd: stop threads [ 165.944923][ T4770] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 166.497709][ T4998] vhci_hcd: release socket [ 166.505050][ T4998] vhci_hcd: disconnect device [ 166.844582][ T4256] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 166.854587][ T126] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 167.976078][ T5476] 9pnet_fd: Insufficient options for proto=fd [ 168.116143][ T4256] usb 4-1: config 0 has no interfaces? [ 168.121811][ T126] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 168.136048][ T4256] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 168.154555][ T126] usb 3-1: config 0 has no interface number 0 [ 168.182843][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.376707][ T126] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 168.640397][ T4256] usb 4-1: Product: syz [ 168.646557][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.655114][ T4256] usb 4-1: Manufacturer: syz [ 168.659809][ T4256] usb 4-1: SerialNumber: syz [ 168.668903][ T126] usb 3-1: Product: syz [ 168.674742][ T126] usb 3-1: Manufacturer: syz [ 168.753143][ T5488] tmpfs: Unknown parameter 'usrquota' [ 168.830189][ T4256] usb 4-1: config 0 descriptor?? [ 168.847501][ T126] usb 3-1: SerialNumber: syz [ 168.945813][ T126] usb 3-1: config 0 descriptor?? [ 168.953201][ T126] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected [ 168.966306][ T126] usb 3-1: Detected SIO [ 169.190353][ T126] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 169.231763][ T126] usb 3-1: USB disconnect, device number 12 [ 169.290307][ T4256] usb 4-1: USB disconnect, device number 9 [ 169.297970][ T126] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 169.314042][ T126] ftdi_sio 3-1:0.23: device disconnected [ 169.646076][ T5506] vivid-007: ================= START STATUS ================= [ 169.653840][ T5506] vivid-007: Generate PTS: true [ 169.659039][ T5506] vivid-007: Generate SCR: true [ 169.664100][ T5506] tpg source WxH: 640x360 (Y'CbCr) [ 169.669435][ T5506] tpg field: 1 [ 169.672838][ T5506] tpg crop: 640x360@0x0 [ 169.677207][ T5506] tpg compose: 640x360@0x0 [ 169.681769][ T5506] tpg colorspace: 8 [ 169.685807][ T5506] tpg transfer function: 0/0 [ 169.690885][ T5506] tpg Y'CbCr encoding: 0/0 [ 169.695584][ T5506] tpg quantization: 0/0 [ 169.713097][ T5506] tpg RGB range: 0/2 [ 169.717449][ T5506] vivid-007: ================== END STATUS ================== [ 169.800401][ T5507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 169.807041][ T5507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 169.815336][ T5507] vhci_hcd vhci_hcd.0: Device attached [ 170.053025][ T5504] loop0: detected capacity change from 0 to 2048 [ 170.114638][ T126] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 170.435001][ T5508] vhci_hcd: connection reset by peer [ 170.441758][ T4470] vhci_hcd: stop threads [ 170.449522][ T4470] vhci_hcd: release socket [ 170.531153][ T4470] vhci_hcd: disconnect device [ 170.851111][ T5504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.093380][ T26] audit: type=1800 audit(1754655673.918:5): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.352" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 171.575273][ T4770] vhci_hcd: vhci_device speed not set [ 172.952235][ T5521] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 173.738951][ T5549] loop2: detected capacity change from 0 to 1024 [ 173.756963][ T14] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 173.765811][ T5549] EXT4-fs: Ignoring removed bh option [ 173.787324][ T5549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.877165][ T5549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.958056][ T14] usb 2-1: config 0 has no interfaces? [ 173.967059][ T14] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 173.989540][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.998195][ T14] usb 2-1: Product: syz [ 174.002392][ T14] usb 2-1: Manufacturer: syz [ 174.007693][ T14] usb 2-1: SerialNumber: syz [ 174.013903][ T14] usb 2-1: config 0 descriptor?? [ 174.121771][ T5556] loop3: detected capacity change from 0 to 1024 [ 174.182407][ T5556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 174.204259][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 174.247942][ T5556] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.268357][ T26] audit: type=1800 audit(1754655677.098:6): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 174.275213][ T4770] usb 2-1: USB disconnect, device number 8 [ 174.305804][ T26] audit: type=1800 audit(1754655677.138:7): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 174.310367][ T5556] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 1: comm syz.3.368: lblock 1 mapped to illegal pblock 1 (length 15) [ 174.328829][ T26] audit: type=1800 audit(1754655677.138:8): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 174.521352][ T5556] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.368: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 174.724583][ T5567] tmpfs: Unknown parameter 'usrquota' [ 174.934233][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 175.259785][ T126] vhci_hcd: vhci_device speed not set [ 175.426376][ T5590] tipc: Started in network mode [ 175.437031][ T5590] tipc: Node identity ea13ba23312c, cluster identity 4711 [ 175.457081][ T5590] tipc: Enabled bearer , priority 0 [ 175.457894][ T5592] loop4: detected capacity change from 0 to 512 [ 175.476371][ T5592] journal_path: Lookup failure for './file0/../file0' [ 175.503799][ T5592] EXT4-fs: error: could not find journal device path [ 175.536680][ T5582] tipc: Resetting bearer [ 175.586073][ T5464] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.534564][ T4317] tipc: Node number set to 3678386723 [ 176.722105][ T126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.747569][ T5613] tmpfs: Unknown parameter 'usrquota' [ 176.845056][ T4317] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 177.083656][ T4317] usb 5-1: config 0 has no interfaces? [ 177.084597][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 177.091672][ T4317] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 177.106819][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.120935][ T4317] usb 5-1: Product: syz [ 177.127603][ T4317] usb 5-1: Manufacturer: syz [ 177.132341][ T4317] usb 5-1: SerialNumber: syz [ 177.195947][ T4317] usb 5-1: config 0 descriptor?? [ 177.227590][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.254361][ T126] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 177.299179][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.319142][ T126] usb 2-1: config 0 descriptor?? [ 177.354769][ T126] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 177.417450][ T4774] usb 5-1: USB disconnect, device number 11 [ 178.394896][ T4413] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 178.606158][ T4413] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 178.617013][ T4413] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 178.626196][ T4413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.651743][ T4413] usb 5-1: config 0 descriptor?? [ 178.666590][ T4413] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 178.673834][ T4413] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 178.877751][ T4269] usb 5-1: USB disconnect, device number 12 [ 178.998629][ T126] gspca_vc032x: reg_w err -71 [ 179.003715][ T126] vc032x: probe of 2-1:0.0 failed with error -71 [ 179.017520][ T126] usb 2-1: USB disconnect, device number 9 [ 179.125189][ T5582] tipc: Disabling bearer [ 179.448457][ T4774] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 179.664140][ T4774] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 179.708977][ T4774] usb 1-1: config 0 has no interface number 0 [ 179.760729][ T4774] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 179.774619][ T4774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.784018][ T4774] usb 1-1: Product: syz [ 179.792077][ T4774] usb 1-1: Manufacturer: syz [ 179.798752][ T4774] usb 1-1: SerialNumber: syz [ 179.813978][ T4774] usb 1-1: config 0 descriptor?? [ 179.846162][ T4774] ftdi_sio 1-1:0.23: FTDI USB Serial Device converter detected [ 179.862220][ T4774] usb 1-1: Detected SIO [ 179.875484][ T4774] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 180.083811][ T4413] usb 1-1: USB disconnect, device number 26 [ 180.201103][ T4413] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 180.240866][ T4413] ftdi_sio 1-1:0.23: device disconnected [ 180.256459][ T5631] loop3: detected capacity change from 0 to 32768 [ 180.304242][ T5631] gfs2: Bad value for 'locktable' [ 180.781093][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 180.954660][ T4770] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 181.074641][ T4413] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 181.146298][ T4770] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 181.160586][ T4770] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.182325][ T4770] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 181.198549][ T4770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.207076][ T4774] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 181.214996][ T4770] usb 3-1: Product: syz [ 181.219454][ T4770] usb 3-1: Manufacturer: syz [ 181.224376][ T4770] usb 3-1: SerialNumber: syz [ 181.235260][ T4770] usb 3-1: config 0 descriptor?? [ 181.256829][ T4770] hub 3-1:0.0: bad descriptor, ignoring hub [ 181.263836][ T4770] hub: probe of 3-1:0.0 failed with error -5 [ 181.266348][ T4413] usb 2-1: Using ep0 maxpacket: 16 [ 181.299096][ T4413] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.309427][ T4413] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.333952][ T4413] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.354712][ T4413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.373551][ T4413] usb 2-1: Product: syz [ 181.383669][ T4413] usb 2-1: Manufacturer: syz [ 181.395189][ T4413] usb 2-1: SerialNumber: syz [ 181.411569][ T4774] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.432237][ T4774] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.455155][ T4774] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 181.484535][ T4774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.494148][ T4774] usb 1-1: config 0 descriptor?? [ 181.550788][ T5674] loop4: detected capacity change from 0 to 32768 [ 181.561537][ T5674] gfs2: Bad value for 'locktable' [ 181.614799][ T4770] usb 3-1: USB disconnect, device number 13 [ 181.626694][ T4413] usb 2-1: 0:2 : does not exist [ 181.647040][ T4413] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 181.748210][ T4413] usb 2-1: USB disconnect, device number 10 [ 181.783508][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 181.833505][ T5681] ksmbd: Unknown IPC event: 1, ignore. [ 181.965818][ T4774] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 181.989439][ T4774] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 182.003178][ T4774] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 182.003380][ T5464] udevd[5464]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.010975][ T4774] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 182.035888][ T4774] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 182.043466][ T4774] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 182.066265][ T4774] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 182.098804][ T4774] holtek_kbd 0003:04D9:A055.0003: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 182.260753][ T4774] usb 1-1: USB disconnect, device number 27 [ 182.392555][ T5687] loop4: detected capacity change from 0 to 512 [ 182.428559][ T5687] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 182.450295][ T5687] EXT4-fs (loop4): invalid journal inode [ 182.463010][ T5687] EXT4-fs (loop4): can't get journal size [ 182.528571][ T5687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 182.582427][ T5687] System zones: 1-12, 13-13 [ 182.663658][ T5687] EXT4-fs (loop4): 1 truncate cleaned up [ 182.678056][ T5687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.758034][ T5688] fido_id[5688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 182.772737][ T5687] EXT4-fs warning (device loop4): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 182.917666][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 182.934957][ T4413] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 183.135896][ T4413] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 183.155345][ T4413] usb 3-1: config 0 has no interface number 0 [ 183.200270][ T4413] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 183.256102][ T4413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.279901][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 183.290044][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:6 Not tainted 6.1.147-syzkaller #0 [ 183.300987][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.311062][ T4281] Workqueue: hci0 hci_rx_work [ 183.315752][ T4281] Call Trace: [ 183.319025][ T4281] [ 183.321948][ T4281] dump_stack_lvl+0x168/0x22e [ 183.326632][ T4281] ? show_regs_print_info+0x12/0x12 [ 183.331910][ T4281] ? load_image+0x3b0/0x3b0 [ 183.336440][ T4281] sysfs_create_dir_ns+0x252/0x280 [ 183.341637][ T4281] ? hci_rx_work+0x3eb/0xd40 [ 183.346223][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 183.350897][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 183.356095][ T4281] kobject_add_internal+0x6b8/0xc80 [ 183.361293][ T4281] kobject_add+0x152/0x210 [ 183.365701][ T4281] ? kobject_init+0x1d0/0x1d0 [ 183.370487][ T4281] ? klist_children_get+0x50/0x50 [ 183.375509][ T4281] ? get_device_parent+0x121/0x3f0 [ 183.380607][ T4281] device_add+0x483/0xfb0 [ 183.385011][ T4281] ? kmem_cache_free+0xf7/0x290 [ 183.389868][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 183.394819][ T4281] le_conn_complete_evt+0xd1d/0x1320 [ 183.400159][ T4281] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 183.406411][ T4281] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 183.412037][ T4281] ? skb_pull_data+0xf7/0x200 [ 183.416809][ T4281] hci_le_enh_conn_complete_evt+0x185/0x460 [ 183.422731][ T4281] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 183.429154][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 183.435215][ T4281] hci_event_packet+0x791/0x1210 [ 183.440167][ T4281] ? bis_list+0x280/0x280 [ 183.444492][ T4281] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 183.450654][ T4281] ? kcov_remote_start+0x4c7/0x7e0 [ 183.455930][ T4281] ? default_do_nmi+0xf0/0x150 [ 183.460699][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 183.465906][ T4281] hci_rx_work+0x3eb/0xd40 [ 183.470318][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 183.475173][ T4281] ? process_one_work+0x7a1/0x1160 [ 183.480375][ T4281] process_one_work+0x898/0x1160 [ 183.485310][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 183.490931][ T4281] ? _raw_spin_lock_irq+0xab/0xe0 [ 183.495943][ T4281] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 183.501304][ T4281] ? kthread_data+0x4b/0xc0 [ 183.505797][ T4281] worker_thread+0xaa2/0x1250 [ 183.510476][ T4281] kthread+0x29d/0x330 [ 183.514573][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 183.519679][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 183.524262][ T4281] ret_from_fork+0x1f/0x30 [ 183.528700][ T4281] [ 183.535722][ T4281] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.549541][ T4281] Bluetooth: hci0: failed to register connection device [ 183.585687][ T4413] usb 3-1: Product: syz [ 183.599651][ T4413] usb 3-1: Manufacturer: syz [ 183.627449][ T4413] usb 3-1: SerialNumber: syz [ 183.650250][ T4413] usb 3-1: config 0 descriptor?? [ 183.702209][ T4413] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected [ 183.731705][ T4413] usb 3-1: Detected SIO [ 183.951512][ T5724] loop4: detected capacity change from 0 to 40427 [ 183.967466][ T5724] F2FS-fs (loop4): invalid crc value [ 183.994773][ T4413] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 184.020226][ T4413] usb 3-1: USB disconnect, device number 14 [ 184.054630][ T4772] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 184.105315][ T4413] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 184.133675][ T5724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.193341][ T5724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.272983][ T4772] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 184.309758][ T4772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.370601][ T4772] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 184.380750][ T4772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.388946][ T4772] usb 2-1: Product: syz [ 184.394376][ T4772] usb 2-1: Manufacturer: syz [ 184.524898][ T4772] usb 2-1: SerialNumber: syz [ 184.552545][ T4772] usb 2-1: config 0 descriptor?? [ 184.712119][ T4772] hub 2-1:0.0: bad descriptor, ignoring hub [ 184.714760][ T4413] ftdi_sio 3-1:0.23: device disconnected [ 184.718623][ T4772] hub: probe of 2-1:0.0 failed with error -5 [ 184.867133][ T4267] syz-executor: attempt to access beyond end of device [ 184.867133][ T4267] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.934862][ T4412] usb 2-1: USB disconnect, device number 11 [ 185.013667][ T5739] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 185.740630][ T5755] vivid-007: ================= START STATUS ================= [ 185.748551][ T5755] vivid-007: Generate PTS: true [ 185.754033][ T5755] vivid-007: Generate SCR: true [ 185.759580][ T5755] tpg source WxH: 640x360 (Y'CbCr) [ 185.765255][ T5755] tpg field: 1 [ 185.768977][ T5755] tpg crop: 640x360@0x0 [ 185.773189][ T5755] tpg compose: 640x360@0x0 [ 185.777701][ T5755] tpg colorspace: 8 [ 185.781598][ T5755] tpg transfer function: 0/0 [ 185.786368][ T5755] tpg Y'CbCr encoding: 0/0 [ 185.805042][ T5755] tpg quantization: 0/0 [ 185.809275][ T5755] tpg RGB range: 0/2 [ 185.813238][ T5755] vivid-007: ================== END STATUS ================== [ 186.149730][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 186.149807][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 186.149840][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 186.161963][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 186.162000][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 186.523297][ T5756] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 186.529934][ T5756] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.537980][ T5756] vhci_hcd vhci_hcd.0: Device attached [ 186.545580][ T5757] vhci_hcd: connection closed [ 186.556935][ T4568] vhci_hcd: stop threads [ 187.068690][ T4568] vhci_hcd: release socket [ 187.132870][ T4568] vhci_hcd: disconnect device [ 187.636219][ T5766] loop3: detected capacity change from 0 to 64 [ 187.989580][ T5785] loop1: detected capacity change from 0 to 1024 [ 188.165512][ T4772] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 188.237961][ T5785] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.390464][ T4772] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 188.400102][ T5785] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.503721][ T4772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.523893][ T4772] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 188.534529][ T4772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.542631][ T4772] usb 1-1: Product: syz [ 188.547556][ T4772] usb 1-1: Manufacturer: syz [ 188.552259][ T4772] usb 1-1: SerialNumber: syz [ 188.686192][ T4772] usb 1-1: config 0 descriptor?? [ 188.694257][ T4772] hub 1-1:0.0: bad descriptor, ignoring hub [ 188.700669][ T4772] hub: probe of 1-1:0.0 failed with error -5 [ 188.752842][ T26] audit: type=1800 audit(1754655691.578:9): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.454" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 188.822537][ T26] audit: type=1800 audit(1754655691.608:10): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.454" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 188.857961][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 189.014862][ T4772] usb 1-1: USB disconnect, device number 28 [ 189.122482][ T5805] sctp: [Deprecated]: syz.2.458 (pid 5805) Use of int in maxseg socket option. [ 189.122482][ T5805] Use struct sctp_assoc_value instead [ 189.148245][ T5807] vivid-007: ================= START STATUS ================= [ 189.156093][ T5807] vivid-007: Generate PTS: true [ 189.161222][ T5807] vivid-007: Generate SCR: true [ 189.166700][ T5807] tpg source WxH: 640x360 (Y'CbCr) [ 189.171981][ T5807] tpg field: 1 [ 189.175620][ T5807] tpg crop: 640x360@0x0 [ 189.179868][ T5807] tpg compose: 640x360@0x0 [ 189.184512][ T5807] tpg colorspace: 8 [ 189.188387][ T5807] tpg transfer function: 0/0 [ 189.193044][ T5807] tpg Y'CbCr encoding: 0/0 [ 189.197616][ T5807] tpg quantization: 0/0 [ 189.206616][ T5807] tpg RGB range: 0/2 [ 189.210619][ T5807] vivid-007: ================== END STATUS ================== [ 189.911000][ T5807] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 189.917587][ T5807] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.925443][ T5807] vhci_hcd vhci_hcd.0: Device attached [ 189.940266][ T5809] vhci_hcd: connection closed [ 189.944066][ T4410] vhci_hcd: stop threads [ 190.494754][ T4410] vhci_hcd: release socket [ 190.507945][ T4410] vhci_hcd: disconnect device [ 190.772604][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 190.814578][ T4330] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.828398][ T5818] device bridge_slave_1 left promiscuous mode [ 190.871830][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.939356][ T5818] device bridge_slave_0 left promiscuous mode [ 190.958937][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.016454][ T4330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.038732][ T4330] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 191.077027][ T4330] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.108365][ T5825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.465'. [ 191.132612][ T4330] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 191.149418][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 191.168998][ T4330] usb 2-1: Product: syz [ 191.178784][ T4330] usb 2-1: Manufacturer: syz [ 191.190195][ T4330] usb 2-1: SerialNumber: syz [ 191.308690][ T5829] loop4: detected capacity change from 0 to 1024 [ 191.417795][ T4330] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 191.476405][ T5829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.487424][ T5829] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.521568][ T26] audit: type=1800 audit(1754655694.348:11): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.467" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 191.565591][ T26] audit: type=1800 audit(1754655694.378:12): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.467" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 191.609688][ T5837] loop2: detected capacity change from 0 to 128 [ 191.676427][ T5838] vivid-007: ================= START STATUS ================= [ 191.684182][ T5838] vivid-007: Generate PTS: true [ 191.691125][ T5838] vivid-007: Generate SCR: true [ 191.696112][ T5838] tpg source WxH: 640x360 (Y'CbCr) [ 191.701296][ T5838] tpg field: 1 [ 191.705209][ T5838] tpg crop: 640x360@0x0 [ 191.709510][ T5838] tpg compose: 640x360@0x0 [ 191.713977][ T5838] tpg colorspace: 8 [ 191.717869][ T5838] tpg transfer function: 0/0 [ 191.722507][ T5838] tpg Y'CbCr encoding: 0/0 [ 191.745363][ T5838] tpg quantization: 0/0 [ 191.749759][ T5838] tpg RGB range: 0/2 [ 191.753700][ T5838] vivid-007: ================== END STATUS ================== [ 192.958231][ T4772] usb 2-1: USB disconnect, device number 12 [ 193.036979][ T26] audit: type=1800 audit(1754655695.868:13): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.469" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 193.101367][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 193.158577][ T5811] usblp0: removed [ 193.305974][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 193.340854][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.352913][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.371763][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.390068][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.594667][ T4774] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 193.792768][ T4774] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 193.812690][ T4774] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.829023][ T4774] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.866577][ T5866] syz.1.481 uses obsolete (PF_INET,SOCK_PACKET) [ 193.877134][ T4774] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 193.889176][ T4774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.906091][ T4774] usb 5-1: Product: syz [ 193.910289][ T4774] usb 5-1: Manufacturer: syz [ 193.917205][ T4774] usb 5-1: SerialNumber: syz [ 193.943615][ T4774] usb 5-1: config 0 descriptor?? [ 193.982252][ T4774] hub 5-1:0.0: bad descriptor, ignoring hub [ 193.998110][ T4774] hub: probe of 5-1:0.0 failed with error -5 [ 194.024151][ T5873] loop2: detected capacity change from 0 to 1024 [ 194.065343][ T5873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.097620][ T5873] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.112529][ T26] audit: type=1800 audit(1754655696.938:14): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.483" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 194.135629][ T26] audit: type=1800 audit(1754655696.958:15): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.483" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 194.223169][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229587][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244596][ T4770] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 194.253172][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 194.304790][ T126] usb 5-1: USB disconnect, device number 13 [ 194.378783][ T5879] loop1: detected capacity change from 0 to 4096 [ 194.454434][ T5882] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.457972][ T4770] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 194.501717][ T26] audit: type=1800 audit(1754655697.328:16): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.484" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 194.543940][ T4770] usb 1-1: config 0 has no interface number 0 [ 194.568089][ T4770] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 194.588093][ T4770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.604870][ T4770] usb 1-1: Product: syz [ 194.611693][ T4770] usb 1-1: Manufacturer: syz [ 194.620435][ T4770] usb 1-1: SerialNumber: syz [ 194.634894][ T4770] usb 1-1: config 0 descriptor?? [ 194.653793][ T4770] ftdi_sio 1-1:0.23: FTDI USB Serial Device converter detected [ 194.696703][ T4770] usb 1-1: Detected SIO [ 194.718804][ T4770] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 194.749586][ T26] audit: type=1804 audit(1754655697.578:17): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.484" name="/newroot/100/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 194.934737][ T4770] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 195.126774][ T4770] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.141159][ T4770] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.167768][ T4770] usb 3-1: config 1 has no interface number 1 [ 195.174068][ T4770] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 195.190620][ T4770] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.194863][ T126] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 195.215136][ T4770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.223357][ T4770] usb 3-1: Product: syz [ 195.227823][ T4770] usb 3-1: Manufacturer: syz [ 195.232501][ T4770] usb 3-1: SerialNumber: syz [ 195.257974][ T5889] loop1: detected capacity change from 0 to 2048 [ 195.335821][ T5889] loop1: p2 p3 < > p4 < p5 > [ 195.340835][ T5889] loop1: partition table partially beyond EOD, truncated [ 195.356768][ T5889] loop1: p3 start 4225 is beyond EOD, truncated [ 195.394569][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 195.402466][ T126] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 195.452603][ T4770] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 195.474133][ T4770] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 195.493605][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.502362][ T4770] usb 3-1: failed to enable PITCH for EP 0x82 [ 195.559821][ T126] usb 5-1: config 0 descriptor?? [ 195.571714][ T126] gspca_main: sunplus-2.14.0 probing 041e:400b [ 195.592367][ T5677] udevd[5677]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 195.592812][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 195.618528][ T5464] udevd[5464]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 195.632381][ T4770] usb 3-1: USB disconnect, device number 15 [ 195.777629][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 195.777975][ T5464] udevd[5464]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 196.027144][ T5906] loop2: detected capacity change from 0 to 1024 [ 196.048575][ T5906] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 196.068163][ T5906] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.091941][ T26] audit: type=1800 audit(1754655698.918:18): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 196.116789][ T26] audit: type=1800 audit(1754655698.948:19): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 196.148146][ T5906] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 1: comm syz.2.495: lblock 1 mapped to illegal pblock 1 (length 15) [ 196.168372][ T5906] EXT4-fs error (device loop2): ext4_ext_remove_space:2930: inode #15: comm syz.2.495: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 196.215447][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 196.342355][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 197.069149][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 197.259265][ T126] gspca_sunplus: reg_w_riv err -71 [ 197.274585][ T126] sunplus: probe of 5-1:0.0 failed with error -71 [ 197.298997][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 197.315573][ T4772] usb 1-1: USB disconnect, device number 29 [ 197.322934][ T126] usb 5-1: USB disconnect, device number 14 [ 197.357332][ T4772] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 197.398282][ T4772] ftdi_sio 1-1:0.23: device disconnected [ 197.634532][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 197.834604][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 197.844391][ T7] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 197.851183][ T4772] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 197.887049][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.218607][ T5941] loop4: detected capacity change from 0 to 40427 [ 198.243185][ T7] usb 2-1: config 0 descriptor?? [ 198.251105][ T7] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 198.258273][ T5941] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x3ffff [ 198.273400][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 198.315676][ T5464] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.398561][ T4772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.417476][ T4772] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 198.431022][ T4772] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 198.440955][ T4772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.465158][ T4772] usb 1-1: config 0 descriptor?? [ 198.476555][ T4772] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 198.483329][ T4772] dvb-usb: bulk message failed: -22 (3/0) [ 198.504081][ T4772] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 198.531193][ T4772] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 198.552009][ T4772] usb 1-1: media controller created [ 198.558560][ T4772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.582537][ T4772] dvb-usb: bulk message failed: -22 (6/0) [ 198.588815][ T4772] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 198.606150][ T4772] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 198.638178][ T4772] dvb-usb: schedule remote query interval to 150 msecs. [ 198.650156][ T4772] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 198.699219][ T5919] dibusb: i2c wr: len=74 is too big! [ 198.699219][ T5919] [ 198.719266][ T4772] usb 1-1: USB disconnect, device number 30 [ 198.748915][ T4772] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 198.884550][ T126] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 199.086308][ T126] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 199.106227][ T126] usb 5-1: config 0 has no interface number 0 [ 199.115674][ T126] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 199.139962][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.152745][ T126] usb 5-1: Product: syz [ 199.157223][ T126] usb 5-1: Manufacturer: syz [ 199.161929][ T126] usb 5-1: SerialNumber: syz [ 199.174126][ T126] usb 5-1: config 0 descriptor?? [ 199.190579][ T126] ftdi_sio 5-1:0.23: FTDI USB Serial Device converter detected [ 199.199206][ T126] usb 5-1: Detected SIO [ 199.218964][ T126] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 199.375040][ T5967] loop2: detected capacity change from 0 to 4096 [ 199.427769][ T5967] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 199.560519][ T5971] process 'syz.3.520' launched './file1' with NULL argv: empty string added [ 199.646469][ T4266] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 199.666774][ T7] gspca_vc032x: reg_w err -71 [ 199.671596][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.682761][ T4266] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 199.685798][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.696406][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.701981][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.707765][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.715325][ T4266] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 199.733359][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.747851][ T5973] loop0: detected capacity change from 0 to 1024 [ 199.754428][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.765662][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.775691][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.782854][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.796074][ T5973] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 199.804147][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.811216][ T5973] EXT4-fs (loop0): orphan cleanup on readonly fs [ 199.818079][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.823875][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.829885][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.835577][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.841252][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.847072][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.852497][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.858233][ T7] gspca_vc032x: Unknown sensor... [ 199.863480][ T7] vc032x: probe of 2-1:0.0 failed with error -22 [ 199.872232][ T5973] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 199.886234][ T7] usb 2-1: USB disconnect, device number 13 [ 199.948737][ T5973] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 199.985252][ T5973] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.521: Failed to acquire dquot type 0 [ 200.047770][ T5973] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 200.066428][ T5973] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 200.081546][ T5973] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.521: Failed to acquire dquot type 0 [ 200.102613][ T5973] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.521: Freeing blocks not in datazone - block = 0, count = 4096 [ 200.131955][ T5973] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 200.144639][ T5973] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 200.157418][ T5973] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.521: Failed to acquire dquot type 0 [ 200.212341][ T5973] EXT4-fs (loop0): 1 orphan inode deleted [ 200.242502][ T5973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.760913][ T5973] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.521: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 200.864109][ T5987] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.521: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 201.031851][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 201.465069][ T6009] loop1: detected capacity change from 0 to 47 [ 201.625919][ T126] usb 5-1: USB disconnect, device number 15 [ 201.659161][ T126] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 201.714755][ T126] ftdi_sio 5-1:0.23: device disconnected [ 202.308457][ T6017] device bridge0 entered promiscuous mode [ 202.329604][ T6017] batman_adv: batadv0: Adding interface: macsec1 [ 202.336312][ T6017] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.485194][ T6021] loop3: detected capacity change from 0 to 64 [ 202.555572][ T6017] batman_adv: batadv0: Interface activated: macsec1 [ 203.138274][ T6036] loop4: detected capacity change from 0 to 1024 [ 203.211468][ T6036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 203.244421][ T6036] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.407046][ T26] audit: type=1800 audit(1754655706.238:20): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.547" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 203.427337][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.440646][ T6036] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm syz.4.547: lblock 1 mapped to illegal pblock 1 (length 15) [ 203.509762][ T26] audit: type=1800 audit(1754655706.268:21): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.547" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 203.537023][ T6036] EXT4-fs error (device loop4): ext4_ext_remove_space:2930: inode #15: comm syz.4.547: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 203.586035][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.586035][ T4887] loop3: rw=1, sector=233, nr_sectors = 1 limit=64 [ 203.614936][ T4887] Buffer I/O error on dev loop3, logical block 233, lost async page write [ 203.623697][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.623697][ T4887] loop3: rw=1, sector=235, nr_sectors = 1 limit=64 [ 203.643989][ T4887] Buffer I/O error on dev loop3, logical block 235, lost async page write [ 203.659609][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.659609][ T4887] loop3: rw=1, sector=236, nr_sectors = 1 limit=64 [ 203.673661][ T4887] Buffer I/O error on dev loop3, logical block 236, lost async page write [ 203.677791][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 203.682910][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.682910][ T4887] loop3: rw=1, sector=237, nr_sectors = 1 limit=64 [ 203.702766][ T4887] Buffer I/O error on dev loop3, logical block 237, lost async page write [ 203.712879][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.712879][ T4887] loop3: rw=1, sector=238, nr_sectors = 1 limit=64 [ 203.749374][ T4887] Buffer I/O error on dev loop3, logical block 238, lost async page write [ 203.764933][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.764933][ T4887] loop3: rw=1, sector=239, nr_sectors = 1 limit=64 [ 203.782490][ T4887] Buffer I/O error on dev loop3, logical block 239, lost async page write [ 203.793543][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.793543][ T4887] loop3: rw=1, sector=240, nr_sectors = 1 limit=64 [ 203.810961][ T4887] Buffer I/O error on dev loop3, logical block 240, lost async page write [ 203.822686][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.822686][ T4887] loop3: rw=1, sector=241, nr_sectors = 1 limit=64 [ 203.840401][ T4887] Buffer I/O error on dev loop3, logical block 241, lost async page write [ 203.860648][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.860648][ T4887] loop3: rw=1, sector=242, nr_sectors = 3928 limit=64 [ 203.878492][ T4887] kworker/u4:18: attempt to access beyond end of device [ 203.878492][ T4887] loop3: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 203.893539][ T4887] Buffer I/O error on dev loop3, logical block 4170, lost async page write [ 203.912953][ T4887] Buffer I/O error on dev loop3, logical block 4172, lost async page write [ 204.221471][ T6061] loop4: detected capacity change from 0 to 1024 [ 204.221843][ T6065] loop1: detected capacity change from 0 to 128 [ 204.233881][ T6061] EXT4-fs: Ignoring removed oldalloc option [ 204.240750][ T6061] EXT4-fs: Ignoring removed bh option [ 204.267282][ T6065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.277416][ T6065] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.292275][ T6061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.343676][ T6061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.370939][ T26] audit: type=1804 audit(1754655707.198:22): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.555" name="/newroot/109/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 204.391895][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.410039][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 204.494638][ T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.590738][ T6073] loop2: detected capacity change from 0 to 1024 [ 204.619027][ T6075] netlink: 'syz.0.560': attribute type 16 has an invalid length. [ 204.659975][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 204.668625][ T6075] netlink: 'syz.0.560': attribute type 17 has an invalid length. [ 204.694820][ T6075] netlink: 'syz.0.560': attribute type 19 has an invalid length. [ 204.702861][ T6075] netlink: 'syz.0.560': attribute type 27 has an invalid length. [ 204.711956][ T6075] netlink: 'syz.0.560': attribute type 28 has an invalid length. [ 204.716223][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.720702][ T6075] netlink: 'syz.0.560': attribute type 29 has an invalid length. [ 204.735375][ T126] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.746920][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.761637][ T6075] netlink: 3783 bytes leftover after parsing attributes in process `syz.0.560'. [ 204.775670][ T6075] netlink: 'syz.0.560': attribute type 16 has an invalid length. [ 204.795185][ T6075] netlink: 'syz.0.560': attribute type 17 has an invalid length. [ 204.813475][ T126] usb 4-1: config 0 descriptor?? [ 204.814569][ T4772] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 204.831683][ T6075] netlink: 'syz.0.560': attribute type 19 has an invalid length. [ 204.839096][ T126] pwc: Askey VC010 type 2 USB webcam detected. [ 204.847676][ T6075] netlink: 'syz.0.560': attribute type 27 has an invalid length. [ 204.856938][ T6075] netlink: 3783 bytes leftover after parsing attributes in process `syz.0.560'. [ 204.867370][ T6076] netlink: 3783 bytes leftover after parsing attributes in process `syz.0.560'. [ 205.026054][ T4772] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 205.041583][ T6082] loop0: detected capacity change from 0 to 1024 [ 205.043232][ T4772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.060411][ T6080] 8021q: VLANs not supported on caif0 [ 205.074635][ T4772] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.110009][ T4772] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 205.144665][ T4772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.146456][ T6082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.159605][ T4772] usb 2-1: Product: syz [ 205.166245][ T4772] usb 2-1: Manufacturer: syz [ 205.170979][ T4772] usb 2-1: SerialNumber: syz [ 205.177927][ T4772] usb 2-1: config 0 descriptor?? [ 205.187341][ T4772] hub 2-1:0.0: bad descriptor, ignoring hub [ 205.192986][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 205.195261][ T4772] hub: probe of 2-1:0.0 failed with error -5 [ 205.227975][ T126] pwc: recv_control_msg error -32 req 02 val 2b00 [ 205.253682][ T6082] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.261038][ T126] pwc: recv_control_msg error -32 req 02 val 2700 [ 205.281842][ T6086] loop2: detected capacity change from 0 to 1024 [ 205.302906][ T26] audit: type=1800 audit(1754655708.128:23): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.563" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 205.305524][ T6082] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 1: comm syz.0.563: lblock 1 mapped to illegal pblock 1 (length 15) [ 205.349187][ T6082] EXT4-fs error (device loop0): ext4_ext_remove_space:2930: inode #15: comm syz.0.563: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 205.363618][ T126] pwc: recv_control_msg error -32 req 02 val 2c00 [ 205.384632][ T126] pwc: recv_control_msg error -32 req 04 val 1000 [ 205.401405][ T26] audit: type=1800 audit(1754655708.128:24): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.563" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 205.409615][ T126] pwc: recv_control_msg error -32 req 04 val 1300 [ 205.465323][ T126] pwc: recv_control_msg error -32 req 04 val 1400 [ 205.472575][ T126] pwc: recv_control_msg error -32 req 02 val 2000 [ 205.482718][ T26] audit: type=1800 audit(1754655708.288:25): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.564" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 205.503042][ T126] pwc: recv_control_msg error -32 req 02 val 2100 [ 205.516432][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 205.522491][ T126] pwc: recv_control_msg error -32 req 04 val 1500 [ 205.550040][ T126] pwc: recv_control_msg error -32 req 02 val 2500 [ 205.601539][ T126] pwc: recv_control_msg error -32 req 02 val 2400 [ 205.610970][ T4269] usb 2-1: USB disconnect, device number 14 [ 205.628638][ T126] pwc: recv_control_msg error -32 req 02 val 2600 [ 205.656083][ T126] pwc: recv_control_msg error -32 req 02 val 2900 [ 205.769939][ T6100] loop2: detected capacity change from 0 to 512 [ 205.789833][ T6100] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 205.810188][ T6100] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.829437][ T6100] EXT4-fs (loop2): 1 truncate cleaned up [ 205.835800][ T6100] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 205.865933][ T4772] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 205.872555][ T126] pwc: recv_control_msg error -71 req 04 val 1100 [ 205.891881][ T126] pwc: recv_control_msg error -71 req 04 val 1200 [ 205.917328][ T126] pwc: Registered as video103. [ 205.924036][ T126] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 205.939503][ T126] usb 4-1: USB disconnect, device number 10 [ 206.017335][ T6106] device netdevsim0 entered promiscuous mode [ 206.020080][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 206.067391][ T4772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.114660][ T4772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.152480][ T4772] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 206.191925][ T4772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.238834][ T4772] usb 1-1: config 0 descriptor?? [ 206.335799][ T6110] random: crng reseeded on system resumption [ 206.487157][ T6113] capability: warning: `syz.1.574' uses deprecated v2 capabilities in a way that may be insecure [ 206.595962][ T6115] loop3: detected capacity change from 0 to 512 [ 206.672292][ T4772] hkems 0003:2006:0118.0004: unknown main item tag 0xe [ 206.701402][ T4772] hkems 0003:2006:0118.0004: item fetching failed at offset 4/7 [ 206.729291][ T6115] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.575: bg 0: block 248: padding at end of block bitmap is not set [ 206.762058][ T4772] hkems 0003:2006:0118.0004: parse failed [ 206.796963][ T4772] hkems: probe of 0003:2006:0118.0004 failed with error -22 [ 206.837294][ T6115] Quota error (device loop3): write_blk: dquota write failed [ 206.859028][ T6115] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 206.882981][ T4772] usb 1-1: USB disconnect, device number 31 [ 206.906964][ T6115] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.575: Failed to acquire dquot type 1 [ 206.977614][ T6115] EXT4-fs (loop3): 1 truncate cleaned up [ 207.029222][ T6115] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.064913][ T6115] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.093993][ T6115] EXT4-fs (loop3): shut down requested (1) [ 207.224774][ T6122] loop2: detected capacity change from 0 to 1024 [ 207.262718][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 207.320298][ T6122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.373238][ T6122] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.454525][ T26] audit: type=1800 audit(1754655710.278:26): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.577" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 207.462196][ T6122] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 1: comm syz.2.577: lblock 1 mapped to illegal pblock 1 (length 15) [ 207.493556][ T6122] EXT4-fs error (device loop2): ext4_ext_remove_space:2930: inode #15: comm syz.2.577: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 207.601347][ T26] audit: type=1800 audit(1754655710.288:27): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.577" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 207.665189][ T6130] loop0: detected capacity change from 0 to 764 [ 207.699947][ T6130] rock: directory entry would overflow storage [ 207.718270][ T6130] rock: sig=0x4654, size=5, remaining=4 [ 207.742493][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 207.873535][ T6135] loop4: detected capacity change from 0 to 764 [ 207.938280][ T6135] rock: directory entry would overflow storage [ 207.952021][ T6135] rock: sig=0x4654, size=5, remaining=4 [ 208.288819][ T6151] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 208.318889][ T4772] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 208.504793][ T4772] usb 2-1: Using ep0 maxpacket: 16 [ 208.517526][ T4772] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.647336][ T4772] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.761398][ T4772] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 208.901915][ T4772] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.988178][ T4772] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 209.092878][ T4772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.204861][ T4772] usb 2-1: config 0 descriptor?? [ 209.458269][ T6169] loop4: detected capacity change from 0 to 47 [ 209.637654][ T4772] usbhid 2-1:0.0: can't add hid device: -71 [ 209.645557][ T4772] usbhid: probe of 2-1:0.0 failed with error -71 [ 209.703425][ T4772] usb 2-1: USB disconnect, device number 15 [ 209.904928][ T6177] loop4: detected capacity change from 0 to 2048 [ 209.919141][ T6179] overlayfs: failed to clone upperpath [ 209.948471][ T6177] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.980062][ T6177] EXT4-fs: Ignoring removed bh option [ 210.084239][ T6177] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 210.130254][ T6177] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.174977][ T6177] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 155 with max blocks 1 with error 28 [ 210.188397][ T6177] EXT4-fs (loop4): This should not happen!! Data will be lost [ 210.188397][ T6177] [ 210.210337][ T6177] EXT4-fs (loop4): Total free blocks count 0 [ 210.231710][ T6177] EXT4-fs (loop4): Free/Dirty block details [ 210.238823][ T6177] EXT4-fs (loop4): free_blocks=2415919104 [ 210.245205][ T6177] EXT4-fs (loop4): dirty_blocks=32 [ 210.250526][ T6177] EXT4-fs (loop4): Block reservation details [ 210.260674][ T6177] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 210.273941][ T6185] validate_nla: 8 callbacks suppressed [ 210.273957][ T6185] netlink: 'syz.1.601': attribute type 13 has an invalid length. [ 210.381267][ T4470] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 210.420954][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.513785][ T6185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.593354][ T6189] loop4: detected capacity change from 0 to 512 [ 210.654417][ T6189] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.602: casefold flag without casefold feature [ 210.718018][ T6189] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.602: couldn't read orphan inode 15 (err -117) [ 210.791249][ T6189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.094674][ T6195] tmpfs: Unknown parameter 'usrquota' [ 212.469777][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 213.224585][ T4330] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 213.406055][ T4330] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 213.406084][ T4330] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 213.406102][ T4330] usb 4-1: config 0 has no interface number 0 [ 213.406128][ T4330] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 213.406148][ T4330] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.406177][ T4330] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 213.406197][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.407761][ T4330] usb 4-1: config 0 descriptor?? [ 213.465344][ T6239] loop4: detected capacity change from 0 to 512 [ 213.761685][ T6239] EXT4-fs (loop4): Test dummy encryption mode enabled [ 213.761706][ T6239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.799468][ T6239] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.623: bad orphan inode 131083 [ 213.799884][ T6239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 214.020593][ T4330] usb 4-1: USB disconnect, device number 11 [ 214.228828][ T6239] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 214.306064][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 215.859129][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 216.059186][ T6296] netlink: 'syz.2.639': attribute type 17 has an invalid length. [ 216.069132][ T6296] netlink: 148 bytes leftover after parsing attributes in process `syz.2.639'. [ 216.084764][ T126] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.294661][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 216.301849][ T126] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 216.311069][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.330227][ T126] usb 4-1: config 0 descriptor?? [ 216.338921][ T126] gspca_main: sunplus-2.14.0 probing 041e:400b [ 217.754854][ T126] gspca_sunplus: reg_w_riv err -71 [ 217.760057][ T126] sunplus: probe of 4-1:0.0 failed with error -71 [ 217.786708][ T126] usb 4-1: USB disconnect, device number 12 [ 217.953923][ T6357] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 218.289534][ T6368] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.670'. [ 218.325279][ T6368] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.670'. [ 218.353467][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 218.393328][ T6368] tc_dump_action: action bad kind [ 218.572703][ T6373] tmpfs: Unknown parameter 'usrquota' [ 219.088756][ T6379] loop4: detected capacity change from 0 to 1024 [ 219.105606][ T6379] EXT4-fs: Ignoring removed oldalloc option [ 219.148263][ T6379] EXT4-fs: Ignoring removed bh option [ 219.189896][ T6379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.323499][ T6379] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.383619][ T26] audit: type=1804 audit(1754655722.208:28): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.674" name="/newroot/133/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 219.488623][ T4330] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 219.696332][ T4330] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 219.725928][ T4330] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 219.752261][ T4330] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 219.771145][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.779795][ T4330] usb 3-1: Product: syz [ 219.784350][ T4330] usb 3-1: Manufacturer: syz [ 219.789544][ T4330] usb 3-1: SerialNumber: syz [ 219.811371][ T4330] usb 3-1: config 0 descriptor?? [ 219.832360][ T4330] hub 3-1:0.0: bad descriptor, ignoring hub [ 219.838736][ T4330] hub: probe of 3-1:0.0 failed with error -5 [ 219.949147][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 220.145036][ T4330] usb 3-1: USB disconnect, device number 16 [ 220.263933][ T6402] loop4: detected capacity change from 0 to 1024 [ 220.310098][ T6402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 220.319851][ T6402] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.338799][ T26] audit: type=1800 audit(1754655723.168:29): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.684" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 220.342281][ T6402] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm syz.4.684: lblock 1 mapped to illegal pblock 1 (length 15) [ 220.421303][ T6402] EXT4-fs error (device loop4): ext4_ext_remove_space:2930: inode #15: comm syz.4.684: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 220.459755][ T26] audit: type=1800 audit(1754655723.168:30): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.684" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 220.569031][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 221.339324][ T6416] support for the xor transformation has been removed. [ 221.372509][ T6419] loop3: detected capacity change from 0 to 1024 [ 221.391656][ T6419] EXT4-fs: Ignoring removed oldalloc option [ 221.448437][ T6419] EXT4-fs: Ignoring removed bh option [ 221.462696][ T6419] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.578151][ T6419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 221.704609][ T4770] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 221.844760][ T4772] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 221.950807][ T26] audit: type=1804 audit(1754655724.768:31): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.690" name="/newroot/121/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 221.973445][ T4770] usb 3-1: Using ep0 maxpacket: 16 [ 221.998957][ T4770] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.134409][ T26] audit: type=1804 audit(1754655724.878:32): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.690" name="/newroot/121/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 222.166729][ T4770] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.189373][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 222.198031][ T4770] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 222.212405][ T4770] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.220331][ T4770] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 222.236459][ T4770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.246921][ T4770] usb 3-1: config 0 descriptor?? [ 222.334700][ T4772] usb 5-1: Using ep0 maxpacket: 32 [ 222.343438][ T4772] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 222.372880][ T4772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.394564][ T4772] usb 5-1: config 0 descriptor?? [ 222.555701][ T4772] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 222.821365][ T4770] usbhid 3-1:0.0: can't add hid device: -71 [ 222.925480][ T4770] usbhid: probe of 3-1:0.0 failed with error -71 [ 223.130312][ T4770] usb 3-1: USB disconnect, device number 17 [ 223.431813][ T6438] loop3: detected capacity change from 0 to 40427 [ 223.479060][ T6438] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value [ 223.731146][ T4772] gspca_vc032x: reg_w err -71 [ 223.736538][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.741846][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.759261][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.764862][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.770170][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.775772][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.781095][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.808839][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.814402][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.572971][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.622161][ T6457] syz.2.701[6457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.622264][ T6457] syz.2.701[6457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.665603][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.697034][ T6458] tipc: Enabled bearer , priority 0 [ 224.741259][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.764516][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.800136][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.809034][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.814375][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.854651][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.864866][ T4772] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.873976][ T6464] loop4: detected capacity change from 0 to 1024 [ 224.894498][ T4772] gspca_vc032x: Unknown sensor... [ 224.899643][ T4772] vc032x: probe of 5-1:0.0 failed with error -22 [ 224.926618][ T4772] usb 5-1: USB disconnect, device number 16 [ 224.955999][ T6464] EXT4-fs: Ignoring removed oldalloc option [ 224.981727][ T6464] EXT4-fs: Ignoring removed bh option [ 225.025883][ T6450] tipc: Resetting bearer [ 225.032505][ T6464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.122945][ T6464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.234414][ T26] audit: type=1804 audit(1754655728.058:33): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.704" name="/newroot/138/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 225.383082][ T6473] loop1: detected capacity change from 0 to 256 [ 225.499397][ T6473] FAT-fs (loop1): Directory bread(block 64) failed [ 225.516464][ T6473] FAT-fs (loop1): Directory bread(block 65) failed [ 225.541054][ T6473] FAT-fs (loop1): Directory bread(block 66) failed [ 225.557254][ T6473] FAT-fs (loop1): Directory bread(block 67) failed [ 225.571881][ T6473] FAT-fs (loop1): Directory bread(block 68) failed [ 225.588266][ T6473] FAT-fs (loop1): Directory bread(block 69) failed [ 225.604093][ T6473] FAT-fs (loop1): Directory bread(block 70) failed [ 225.616745][ T6473] FAT-fs (loop1): Directory bread(block 71) failed [ 225.652184][ T6473] FAT-fs (loop1): Directory bread(block 72) failed [ 225.691156][ T6473] FAT-fs (loop1): Directory bread(block 73) failed [ 225.797018][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 225.968212][ T6483] loop1: detected capacity change from 0 to 1024 [ 226.079556][ T6483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 226.097311][ T6483] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.152046][ T26] audit: type=1800 audit(1754655728.978:34): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.710" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 226.182733][ T6483] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 1: comm syz.1.710: lblock 1 mapped to illegal pblock 1 (length 15) [ 226.223706][ T26] audit: type=1800 audit(1754655728.998:35): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.710" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 226.269796][ T6483] EXT4-fs error (device loop1): ext4_ext_remove_space:2930: inode #15: comm syz.1.710: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 226.391562][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 226.504127][ T6493] loop4: detected capacity change from 0 to 128 [ 227.354061][ T6497] syz.1.712 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 228.334453][ C1] sched: RT throttling activated [ 230.546311][ T4283] Bluetooth: hci5: command 0x1003 tx timeout [ 230.546576][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 230.939292][ T6450] tipc: Disabling bearer [ 233.575661][ T4772] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 233.742385][ T6538] xt_NFQUEUE: number of total queues is 0 [ 233.814785][ T4772] usb 2-1: Using ep0 maxpacket: 32 [ 233.861741][ T4772] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 234.143795][ T4772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.292094][ T4772] usb 2-1: config 0 descriptor?? [ 234.298129][ T4772] usb 2-1: can't set config #0, error -71 [ 234.306558][ T4772] usb 2-1: USB disconnect, device number 16 [ 234.390121][ T6543] loop1: detected capacity change from 0 to 512 [ 234.609559][ T6550] loop4: detected capacity change from 0 to 512 [ 234.977987][ T6550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.987504][ T6550] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.805588][ T6556] loop1: detected capacity change from 0 to 256 [ 235.823433][ T6556] FAT-fs (loop1): Unrecognized mount option "discaró" or missing value [ 236.780177][ T6560] loop3: detected capacity change from 0 to 512 [ 238.877029][ T6560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.490450][ T6560] EXT4-fs: failed to create workqueue [ 239.496284][ T6560] EXT4-fs (loop3): mount failed [ 239.886998][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 240.123836][ T6572] loop4: detected capacity change from 0 to 1024 [ 240.215278][ T6572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.454550][ T4774] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 240.658325][ T4774] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 240.685536][ T4774] usb 2-1: config 0 has no interface number 0 [ 240.691676][ T4774] usb 2-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 240.754554][ T4774] usb 2-1: config 0 interface 152 has no altsetting 0 [ 240.766260][ T4774] usb 2-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 240.794512][ T4774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.802629][ T4774] usb 2-1: Product: syz [ 240.834503][ T4774] usb 2-1: Manufacturer: syz [ 240.839136][ T4774] usb 2-1: SerialNumber: syz [ 240.863058][ T4774] usb 2-1: config 0 descriptor?? [ 240.891582][ T6575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.922975][ T26] audit: type=1326 audit(1754655743.748:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110778ebe9 code=0x7ffc0000 [ 240.945738][ T126] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 240.992402][ T26] audit: type=1326 audit(1754655743.748:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f110778ebe9 code=0x7ffc0000 [ 241.094546][ T26] audit: type=1326 audit(1754655743.748:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110778ebe9 code=0x7ffc0000 [ 241.120859][ T6573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.137130][ T26] audit: type=1326 audit(1754655743.748:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f110778ebe9 code=0x7ffc0000 [ 241.138626][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 241.180841][ T4774] cdc_subset 2-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Yopy, b2:d8:0c:49:34:e1 [ 241.192938][ T26] audit: type=1326 audit(1754655743.748:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110778ebe9 code=0x7ffc0000 [ 241.203689][ T126] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 241.228774][ T26] audit: type=1326 audit(1754655743.778:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110778ebe9 code=0x7ffc0000 [ 241.362515][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.377769][ T4774] usb 2-1: USB disconnect, device number 17 [ 241.399181][ T4774] cdc_subset 2-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Yopy [ 241.555388][ T126] usb 4-1: config 0 descriptor?? [ 241.602931][ T126] gspca_main: sunplus-2.14.0 probing 041e:400b [ 242.131173][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 242.353314][ T6605] netlink: 'syz.4.742': attribute type 4 has an invalid length. [ 242.408003][ T6604] loop1: detected capacity change from 0 to 1024 [ 242.472050][ T6604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 242.578447][ T6604] EXT4-fs warning (device loop1): verify_group_input:180: Cannot read last block (524294) [ 242.713979][ T6616] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 16: comm syz.1.743: lblock 0 mapped to illegal pblock 16 (length 1) [ 243.063553][ T126] gspca_sunplus: reg_w_riv err -71 [ 243.081020][ T126] sunplus: probe of 4-1:0.0 failed with error -71 [ 243.148531][ T126] usb 4-1: USB disconnect, device number 13 [ 243.399383][ T6613] loop2: detected capacity change from 0 to 131072 [ 243.412361][ T6613] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 243.422732][ T6613] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 243.445130][ T6613] F2FS-fs (loop2): invalid crc value [ 243.485671][ T4270] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 243.505712][ T6613] F2FS-fs (loop2): Found nat_bits in checkpoint [ 243.513094][ T4270] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 243.558380][ T6613] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 243.564704][ T4270] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 243.565489][ T6613] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 243.619717][ T6613] F2FS-fs (loop2): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 243.779243][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 244.353332][ T4455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.151442][ T4455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.432073][ T4455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.707190][ T4455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.535700][ T6648] loop4: detected capacity change from 0 to 8192 [ 246.633492][ T6648] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 246.718850][ T6648] FAT-fs (loop4): Filesystem has been set read-only [ 246.751380][ T6626] loop3: detected capacity change from 0 to 40427 [ 246.874766][ T6626] F2FS-fs (loop3): invalid crc value [ 246.881294][ T6626] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 246.881696][ T4455] tipc: Left network mode [ 247.138465][ T6667] loop4: detected capacity change from 0 to 512 [ 247.280380][ T6670] loop2: detected capacity change from 0 to 4096 [ 247.288228][ T6667] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 247.303178][ T6670] EXT4-fs (loop2): Test dummy encryption mode enabled [ 247.323814][ T6667] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.431945][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.441864][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.450404][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.459428][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.491755][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 247.504691][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.640849][ T6667] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.757: Directory hole found for htree leaf block 0 [ 247.671108][ T6670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.785701][ T6686] loop3: detected capacity change from 0 to 256 [ 247.856668][ T6686] FAT-fs (loop3): Directory bread(block 64) failed [ 247.863605][ T6686] FAT-fs (loop3): Directory bread(block 65) failed [ 247.870626][ T6686] FAT-fs (loop3): Directory bread(block 66) failed [ 247.877343][ T6686] FAT-fs (loop3): Directory bread(block 67) failed [ 247.884291][ T6686] FAT-fs (loop3): Directory bread(block 68) failed [ 247.890975][ T6686] FAT-fs (loop3): Directory bread(block 69) failed [ 247.897925][ T6686] FAT-fs (loop3): Directory bread(block 70) failed [ 247.904647][ T6686] FAT-fs (loop3): Directory bread(block 71) failed [ 247.911691][ T6686] FAT-fs (loop3): Directory bread(block 72) failed [ 247.918533][ T6686] FAT-fs (loop3): Directory bread(block 73) failed [ 248.659162][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 248.844188][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 249.274384][ T6677] chnl_net:caif_netlink_parms(): no params data found [ 249.620707][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 250.626637][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.633938][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.949160][ T6677] device bridge_slave_0 entered promiscuous mode [ 251.403045][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.411554][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.432687][ T6677] device bridge_slave_1 entered promiscuous mode [ 251.635461][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.654901][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 251.675909][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.890390][ T6751] loop4: detected capacity change from 0 to 1024 [ 252.047744][ T6757] xt_NFQUEUE: number of total queues is 0 [ 252.159047][ T6751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 252.287691][ T6751] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.560068][ T26] audit: type=1800 audit(1754655756.385:42): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.778" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 252.673191][ T26] audit: type=1800 audit(1754655756.465:43): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.778" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 252.694047][ T26] audit: type=1800 audit(1754655756.465:44): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.778" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 252.761779][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 252.877445][ T6677] team0: Port device team_slave_0 added [ 252.930802][ T6677] team0: Port device team_slave_1 added [ 253.050998][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.078460][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.152753][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.241677][ T6773] loop4: detected capacity change from 0 to 256 [ 253.270688][ T6773] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.381632][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.406424][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.448501][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.574371][ T6677] device hsr_slave_0 entered promiscuous mode [ 253.664091][ T6677] device hsr_slave_1 entered promiscuous mode [ 253.696672][ T6677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.734627][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 253.764754][ T6677] Cannot create hsr debugfs directory [ 253.783557][ T4455] device hsr_slave_0 left promiscuous mode [ 253.794534][ T4772] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 253.813690][ T4455] device hsr_slave_1 left promiscuous mode [ 253.874301][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.901429][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.001607][ T4772] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 254.078248][ T4772] usb 3-1: config 0 has no interface number 0 [ 254.216348][ T4772] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 254.320000][ T4772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.344115][ T4772] usb 3-1: Product: syz [ 254.359110][ T4772] usb 3-1: Manufacturer: syz [ 254.371270][ T4772] usb 3-1: SerialNumber: syz [ 254.374037][ T6770] loop3: detected capacity change from 0 to 40427 [ 254.394289][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.419449][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.433329][ T4455] batman_adv: batadv0: Interface deactivated: macsec1 [ 254.445746][ T4455] batman_adv: batadv0: Removing interface: macsec1 [ 254.463219][ T4455] device bridge_slave_1 left promiscuous mode [ 254.474962][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.487094][ T4772] usb 3-1: config 0 descriptor?? [ 254.506592][ T6770] F2FS-fs (loop3): invalid crc value [ 254.506633][ T4772] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected [ 254.521914][ T4772] usb 3-1: Detected SIO [ 254.535485][ T4772] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 254.585872][ T4455] device bridge_slave_0 left promiscuous mode [ 254.592124][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.608235][ T6770] F2FS-fs (loop3): Found nat_bits in checkpoint [ 254.699393][ T4772] usb 3-1: USB disconnect, device number 18 [ 254.718530][ T4772] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 254.731742][ T4455] device bridge0 left promiscuous mode [ 254.777578][ T4772] ftdi_sio 3-1:0.23: device disconnected [ 254.803800][ T4455] device veth1_macvtap left promiscuous mode [ 254.825219][ T4455] device veth0_macvtap left promiscuous mode [ 254.831312][ T6770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.909677][ T26] audit: type=1804 audit(1754655758.735:45): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.783" name="/newroot/140/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 255.053034][ T6802] loop4: detected capacity change from 0 to 8192 [ 255.183040][ T4265] bio_check_eod: 61 callbacks suppressed [ 255.183056][ T4265] syz-executor: attempt to access beyond end of device [ 255.183056][ T4265] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.667075][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.673493][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.815147][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 255.984746][ T4269] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 256.182020][ T4269] usb 5-1: Using ep0 maxpacket: 16 [ 256.199850][ T4269] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.232531][ T4269] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.264958][ T4269] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 256.291586][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.300000][ T4269] usb 5-1: Product: syz [ 256.314616][ T4269] usb 5-1: Manufacturer: syz [ 256.319555][ T4269] usb 5-1: SerialNumber: syz [ 259.035245][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 259.210288][ T4455] team0 (unregistering): Port device team_slave_0 removed [ 259.475333][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.490685][ T6842] loop2: detected capacity change from 0 to 512 [ 259.548773][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.589732][ T6842] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.803: iget: bad i_size value: 38620345925642 [ 259.622991][ T6842] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.803: couldn't read orphan inode 15 (err -117) [ 259.650359][ T6842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.890860][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 260.869399][ T4455] bond0 (unregistering): Released all slaves [ 261.316530][ T4269] usb 5-1: 0:2 : does not exist [ 261.388564][ T4269] usb 5-1: USB disconnect, device number 17 [ 261.451553][ T5464] udevd[5464]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.554500][ T4330] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 261.904505][ T4330] usb 3-1: Using ep0 maxpacket: 16 [ 261.911581][ T4330] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.944209][ T4330] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.202640][ T4330] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 262.504498][ T4330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.534552][ T4330] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 262.562854][ T6677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 262.655089][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.670247][ T4330] usb 3-1: config 0 descriptor?? [ 262.772834][ T6677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 262.811702][ T6873] binder_alloc: 6872: binder_alloc_buf, no vma [ 265.745310][ T4330] usb 3-1: USB disconnect, device number 19 [ 265.756701][ T6893] [ 265.759100][ T6893] ====================================================== [ 265.766235][ T6893] WARNING: possible circular locking dependency detected [ 265.773366][ T6893] 6.1.147-syzkaller #0 Not tainted [ 265.778483][ T6893] ------------------------------------------------------ [ 265.785499][ T6893] syz.0.814/6893 is trying to acquire lock: [ 265.791396][ T6893] ffff8880283c53d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 265.801071][ T6893] [ 265.801071][ T6893] but task is already holding lock: [ 265.808438][ T6893] ffff88805917ede0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 265.819520][ T6893] [ 265.819520][ T6893] which lock already depends on the new lock. [ 265.819520][ T6893] [ 265.829927][ T6893] [ 265.829927][ T6893] the existing dependency chain (in reverse order) is: [ 265.839034][ T6893] [ 265.839034][ T6893] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 265.847821][ T6893] down_write+0x36/0x60 [ 265.852512][ T6893] process_measurement+0x33c/0x1a10 [ 265.858280][ T6893] ima_file_mmap+0x104/0x150 [ 265.863411][ T6893] __se_sys_remap_file_pages+0x53e/0x770 [ 265.869574][ T6893] do_syscall_64+0x4c/0xa0 [ 265.874641][ T6893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.881129][ T6893] [ 265.881129][ T6893] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 265.888676][ T6893] __lock_acquire+0x2cf8/0x7c50 [ 265.894459][ T6893] lock_acquire+0x1b4/0x490 [ 265.899484][ T6893] down_read_killable+0x4c/0x340 [ 265.905104][ T6893] mmap_read_lock_killable+0x1d/0x60 [ 265.910895][ T6893] lock_mm_and_find_vma+0x2b1/0x2f0 [ 265.916605][ T6893] do_user_addr_fault+0x2db/0xb10 [ 265.922143][ T6893] exc_page_fault+0x60/0x100 [ 265.927240][ T6893] asm_exc_page_fault+0x22/0x30 [ 265.932602][ T6893] fault_in_readable+0x13e/0x1f0 [ 265.938040][ T6893] fault_in_iov_iter_readable+0xbb/0x2e0 [ 265.944205][ T6893] generic_perform_write+0x1d2/0x560 [ 265.950000][ T6893] __generic_file_write_iter+0x172/0x430 [ 265.956141][ T6893] generic_file_write_iter+0xab/0x2e0 [ 265.962041][ T6893] vfs_write+0x44c/0x960 [ 265.966883][ T6893] ksys_write+0x143/0x240 [ 265.971712][ T6893] do_syscall_64+0x4c/0xa0 [ 265.976628][ T6893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.983033][ T6893] [ 265.983033][ T6893] other info that might help us debug this: [ 265.983033][ T6893] [ 265.993242][ T6893] Possible unsafe locking scenario: [ 265.993242][ T6893] [ 266.000669][ T6893] CPU0 CPU1 [ 266.006102][ T6893] ---- ---- [ 266.011444][ T6893] lock(&sb->s_type->i_mutex_key#12); [ 266.016889][ T6893] lock(&mm->mmap_lock); [ 266.023714][ T6893] lock(&sb->s_type->i_mutex_key#12); [ 266.031675][ T6893] lock(&mm->mmap_lock); [ 266.035987][ T6893] [ 266.035987][ T6893] *** DEADLOCK *** [ 266.035987][ T6893] [ 266.044110][ T6893] 3 locks held by syz.0.814/6893: [ 266.049110][ T6893] #0: ffff88802865b268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 266.058528][ T6893] #1: ffff888028fee460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 266.067575][ T6893] #2: ffff88805917ede0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 266.078880][ T6893] [ 266.078880][ T6893] stack backtrace: [ 266.084750][ T6893] CPU: 1 PID: 6893 Comm: syz.0.814 Not tainted 6.1.147-syzkaller #0 [ 266.092803][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.103015][ T6893] Call Trace: [ 266.106280][ T6893] [ 266.109195][ T6893] dump_stack_lvl+0x168/0x22e [ 266.113877][ T6893] ? load_image+0x3b0/0x3b0 [ 266.118366][ T6893] ? show_regs_print_info+0x12/0x12 [ 266.123555][ T6893] ? print_circular_bug+0x12b/0x1a0 [ 266.128736][ T6893] check_noncircular+0x274/0x310 [ 266.133663][ T6893] ? add_chain_block+0x940/0x940 [ 266.138590][ T6893] ? lockdep_lock+0xdc/0x1e0 [ 266.143164][ T6893] ? _find_first_zero_bit+0xcf/0x100 [ 266.148440][ T6893] __lock_acquire+0x2cf8/0x7c50 [ 266.153366][ T6893] ? verify_lock_unused+0x140/0x140 [ 266.158615][ T6893] ? verify_lock_unused+0x140/0x140 [ 266.163907][ T6893] ? verify_lock_unused+0x140/0x140 [ 266.169108][ T6893] ? mark_lock+0x94/0x320 [ 266.173608][ T6893] lock_acquire+0x1b4/0x490 [ 266.178111][ T6893] ? mmap_read_lock_killable+0x1d/0x60 [ 266.183559][ T6893] ? read_lock_is_recursive+0x10/0x10 [ 266.188937][ T6893] ? cmp_ex_search+0x1a/0x70 [ 266.193516][ T6893] ? bsearch+0x8a/0xb0 [ 266.197659][ T6893] ? fault_in_readable+0x13e/0x1f0 [ 266.202849][ T6893] ? search_extable+0x8c/0xd0 [ 266.207509][ T6893] ? trim_init_extable+0x3b0/0x3b0 [ 266.212604][ T6893] ? mmap_read_lock_killable+0x1d/0x60 [ 266.218050][ T6893] down_read_killable+0x4c/0x340 [ 266.222981][ T6893] ? mmap_read_lock_killable+0x1d/0x60 [ 266.228429][ T6893] mmap_read_lock_killable+0x1d/0x60 [ 266.233718][ T6893] lock_mm_and_find_vma+0x2b1/0x2f0 [ 266.238903][ T6893] do_user_addr_fault+0x2db/0xb10 [ 266.243911][ T6893] ? _raw_spin_unlock_irq+0x1f/0x40 [ 266.249102][ T6893] exc_page_fault+0x60/0x100 [ 266.253857][ T6893] asm_exc_page_fault+0x22/0x30 [ 266.258716][ T6893] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 266.264423][ T6893] Code: 78 eb c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 57 eb c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 3a eb [ 266.284209][ T6893] RSP: 0018:ffffc90003287a90 EFLAGS: 00050287 [ 266.290275][ T6893] RAX: ffffffff81bbdb89 RBX: 0000000000001000 RCX: 0000000000080000 [ 266.298326][ T6893] RDX: ffffc9000eba2000 RSI: 000000000000cf56 RDI: 000000000000cf57 [ 266.306632][ T6893] RBP: 0000000000000000 R08: ffff888024975940 R09: 0000000000000002 [ 266.314680][ T6893] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000035000 [ 266.322634][ T6893] R13: dffffc0000000000 R14: 0000200000033200 R15: 0000200000034000 [ 266.330772][ T6893] ? fault_in_readable+0x139/0x1f0 [ 266.335886][ T6893] fault_in_iov_iter_readable+0xbb/0x2e0 [ 266.341511][ T6893] generic_perform_write+0x1d2/0x560 [ 266.346982][ T6893] ? generic_file_direct_write+0x660/0x660 [ 266.352863][ T6893] ? __file_remove_privs+0x5b0/0x5b0 [ 266.358137][ T6893] ? preempt_count_add+0x8d/0x190 [ 266.363144][ T6893] ? rwsem_write_trylock+0x12f/0x1b0 [ 266.368414][ T6893] ? clear_nonspinnable+0x60/0x60 [ 266.373425][ T6893] ? generic_write_checks_count+0x3d9/0x4c0 [ 266.379312][ T6893] __generic_file_write_iter+0x172/0x430 [ 266.385023][ T6893] generic_file_write_iter+0xab/0x2e0 [ 266.390383][ T6893] vfs_write+0x44c/0x960 [ 266.394722][ T6893] ? file_end_write+0x250/0x250 [ 266.399585][ T6893] ? __fget_files+0x44a/0x4d0 [ 266.404251][ T6893] ? __fdget_pos+0x2ae/0x360 [ 266.408829][ T6893] ? ksys_write+0x71/0x240 [ 266.413234][ T6893] ksys_write+0x143/0x240 [ 266.417550][ T6893] ? __ia32_sys_read+0x80/0x80 [ 266.422309][ T6893] ? trace_sys_enter+0x22/0x80 [ 266.427059][ T6893] do_syscall_64+0x4c/0xa0 [ 266.431463][ T6893] ? clear_bhb_loop+0x60/0xb0 [ 266.436127][ T6893] ? clear_bhb_loop+0x60/0xb0 [ 266.440807][ T6893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.446771][ T6893] RIP: 0033:0x7f896a98ebe9 [ 266.451175][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.471204][ T6893] RSP: 002b:00007f896b785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.479603][ T6893] RAX: ffffffffffffffda RBX: 00007f896abb6090 RCX: 00007f896a98ebe9 [ 266.487675][ T6893] RDX: 0000000000043451 RSI: 0000200000000200 RDI: 0000000000000005 [ 266.495803][ T6893] RBP: 00007f896aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 266.503764][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.511719][ T6893] R13: 00007f896abb6128 R14: 00007f896abb6090 R15: 00007ffe20033568 [ 266.519681][ T6893] [ 267.043978][ T6677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.128898][ T6677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.239792][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.276222][ T6677] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.283156][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.292007][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.308368][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.320042][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.330080][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.337213][ T6656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.347242][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.356357][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.366334][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.373458][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.382076][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.400105][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.409544][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.418603][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.431284][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.446830][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.456108][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.470416][ T6677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.481716][ T6677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.496034][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.504235][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.513021][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.522017][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.533878][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.549662][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.772841][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.783208][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.802629][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.052463][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.062984][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.082372][ T6677] device veth0_vlan entered promiscuous mode [ 268.090526][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.100076][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.112038][ T6677] device veth1_vlan entered promiscuous mode [ 268.119916][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.128226][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.136952][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.155652][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.165886][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.175870][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.187595][ T6677] device veth0_macvtap entered promiscuous mode [ 268.197950][ T6677] device veth1_macvtap entered promiscuous mode [ 268.213527][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.225116][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.235061][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.245752][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.255791][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.266396][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.277105][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.285757][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.293664][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.302151][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.311391][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.325466][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.335978][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.346047][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.356649][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.366609][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.377762][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.388618][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.398184][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.407816][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.417209][ T6677] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.427576][ T6677] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.436616][ T6677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.445560][ T6677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.470420][ T6677] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 268.490257][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.491381][ T6677] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 268.505410][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.519697][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.524237][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.528103][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.545637][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready