last executing test programs: 9.621943253s ago: executing program 1 (id=453): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r7, &(0x7f0000000000)=""/35, 0x23) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x51) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000000000)=0x8, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) shutdown(r0, 0x1) 7.306610697s ago: executing program 1 (id=457): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x109402, 0x24) 6.668823927s ago: executing program 1 (id=460): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.806029435s ago: executing program 0 (id=463): inotify_init() mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000006, 0x50, 0xffffffffffffffff, 0x4786d000) socketpair$unix(0x1, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f00000001c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0xb, 0x2, 0x1402, 0x105}) 4.314023662s ago: executing program 0 (id=464): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 3.14336751s ago: executing program 2 (id=466): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) 3.046557183s ago: executing program 1 (id=467): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000180)={[{@nossd_spread}, {}, {@flushoncommit}, {@max_inline={'max_inline', 0x3d, [0x25, 0x38]}}, {@nodatasum}, {@discard}, {@usebackuproot}, {@discard_sync}]}, 0x1, 0x50f3, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={{r0}, 0x0, 0x0, 0x100000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002480)={{r1}, 0x0, 0x0, @unused, @subvolid=0xad}) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES8=r1], 0xe6f, 0x0) 2.52560877s ago: executing program 3 (id=469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0xf2, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) 2.360778875s ago: executing program 3 (id=470): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c92010000c00050017010800"], 0x15) 2.20586102s ago: executing program 3 (id=471): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x60, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffd, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000100001080000", @ANYRES32=0x0, @ANYBLOB="040000000000000008003f00656306000800"], 0x30}}, 0x40020) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r6, &(0x7f0000002a00), 0x0, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) write(r6, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x8, 0x80, 0x1}}, @common=@unspec=@state={{0x28}, {0x1000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.058360944s ago: executing program 2 (id=472): inotify_init() mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000006, 0x50, 0xffffffffffffffff, 0x4786d000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f00000001c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0xb, 0x2, 0x1402, 0x105}) 1.89210713s ago: executing program 3 (id=473): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00'], 0xfe33) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "61b2c13a64c7a3fdf4d8186dbecd6aa50d61f492573729589a196e8b82f9c7b17428dc5c3d91bc5d5aad038e9c2edb9399d0214d28bc8710b6d5b4b201efe3b6", 0x11}, 0x48, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d83, 0x101200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000340)=""/90) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) 1.490408583s ago: executing program 1 (id=474): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000000)="08205ef22440c3957a7cbddd0fbccb", 0xf}], 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x407c0, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) getpid() io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 1.413091945s ago: executing program 0 (id=475): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffe, 0x2, &(0x7f0000006680)) r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.223194741s ago: executing program 0 (id=476): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001640)={'syztnl2\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001680)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @private0, 0x5, 0x8, 0x8001, 0x0, 0x247, 0x1830013}) r1 = socket$inet6(0xa, 0x800, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x140) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 1.134470704s ago: executing program 3 (id=477): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000000)="08205ef22440c3957a7cbddd0fbccb", 0xf}], 0x1}}], 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x407c0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r5, r6, r7, 0x0) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) getpid() io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 924.958361ms ago: executing program 2 (id=478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 576.635952ms ago: executing program 2 (id=479): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) 466.538726ms ago: executing program 0 (id=480): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 466.319376ms ago: executing program 2 (id=481): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="920636", 0x3, 0x81, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x4f1}], 0x1}}], 0x2, 0x42054) 404.415388ms ago: executing program 0 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}}) 375.074649ms ago: executing program 2 (id=483): add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0}) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2a00000008021100000108021100000008021100000000000000000000000000640001000006020202020202010782848b960c121872060303030303034d6e609fbb2ff63f11dcae47e85607e18f9735cb299d1e9f2ec1e075bc6397287a26a84f0c380a637cfd5c96e36d33e252e947e0f37f0a7374ee537bbe790702b97e22cc45f3e634823d4881e48ea20bde1a0d3b65547cb9fbfc2d152731e7382c04d47c096e43b426e025780673d613e7dc26d9cabfdb615d48806f"], 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu}, 0x1c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x2000e844) 314.8561ms ago: executing program 1 (id=484): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1br\x14\xdb\xd3\xcd\xfd\xbdnC\xec)\x86\x14\x13\xeb\xb5\n-\xfeha\xfef\xecUO(\x91\x8d\x14\xec\x02u\xd9_FT\xaa\xda\x0e \xa0;\x10', 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000002000010327bd7000ff08002502000000000000011e00000005001600d600000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000100)={0x3, 0x100, 0x3d8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 3 (id=485): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x38, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): ge_slave_1) entered blocking state [ 87.682847][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.690210][ T5772] bridge_slave_1: entered allmulticast mode [ 87.697536][ T5772] bridge_slave_1: entered promiscuous mode [ 87.750449][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.783906][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.795979][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.870857][ T5772] team0: Port device team_slave_0 added [ 87.920336][ T5772] team0: Port device team_slave_1 added [ 87.948745][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.955973][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.964065][ T5774] bridge_slave_0: entered allmulticast mode [ 87.971648][ T5774] bridge_slave_0: entered promiscuous mode [ 88.005126][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.012524][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.019812][ T5776] bridge_slave_0: entered allmulticast mode [ 88.027402][ T5776] bridge_slave_0: entered promiscuous mode [ 88.035710][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.043196][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.050446][ T5774] bridge_slave_1: entered allmulticast mode [ 88.057843][ T5774] bridge_slave_1: entered promiscuous mode [ 88.085622][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.093156][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.100513][ T5776] bridge_slave_1: entered allmulticast mode [ 88.107766][ T5776] bridge_slave_1: entered promiscuous mode [ 88.159282][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.166467][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.174209][ T5773] bridge_slave_0: entered allmulticast mode [ 88.181392][ T5773] bridge_slave_0: entered promiscuous mode [ 88.191657][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.198738][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.224687][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.250467][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.262929][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.272286][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.282460][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.289810][ T5773] bridge_slave_1: entered allmulticast mode [ 88.296983][ T5773] bridge_slave_1: entered promiscuous mode [ 88.304769][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.312346][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.338635][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.355064][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.403818][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.446463][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.472612][ T5776] team0: Port device team_slave_0 added [ 88.494837][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.508212][ T5774] team0: Port device team_slave_0 added [ 88.516454][ T5776] team0: Port device team_slave_1 added [ 88.554612][ T5774] team0: Port device team_slave_1 added [ 88.574714][ T5772] hsr_slave_0: entered promiscuous mode [ 88.581578][ T5772] hsr_slave_1: entered promiscuous mode [ 88.612291][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.619457][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.645592][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.668519][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.675514][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.704679][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.727962][ T5773] team0: Port device team_slave_0 added [ 88.778989][ T5773] team0: Port device team_slave_1 added [ 88.796365][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.799692][ T5084] Bluetooth: hci2: command tx timeout [ 88.803505][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.835111][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.863946][ T5776] hsr_slave_0: entered promiscuous mode [ 88.870449][ T5776] hsr_slave_1: entered promiscuous mode [ 88.876892][ T5084] Bluetooth: hci3: command tx timeout [ 88.876988][ T51] Bluetooth: hci1: command tx timeout [ 88.887069][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.896265][ T5776] Cannot create hsr debugfs directory [ 88.928513][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.935529][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.958104][ T51] Bluetooth: hci0: command tx timeout [ 88.968192][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.010205][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.017354][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.044183][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.100509][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.107647][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.134202][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.248198][ T5774] hsr_slave_0: entered promiscuous mode [ 89.254990][ T5774] hsr_slave_1: entered promiscuous mode [ 89.262189][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.270085][ T5774] Cannot create hsr debugfs directory [ 89.316302][ T5773] hsr_slave_0: entered promiscuous mode [ 89.325174][ T5773] hsr_slave_1: entered promiscuous mode [ 89.331582][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.339531][ T5773] Cannot create hsr debugfs directory [ 89.580906][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.625385][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.654127][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.690227][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.777110][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.794382][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.805853][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.822906][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.959676][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.973958][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.997321][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.012423][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.062315][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.115074][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.131306][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.142082][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.154298][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.181223][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.228301][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.235698][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.271139][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.278377][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.301839][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.382167][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.418330][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.425500][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.461947][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.469253][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.503956][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.620711][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.636433][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.688751][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.696000][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.712308][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.719569][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.739321][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.800211][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.861055][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.868316][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.887458][ T51] Bluetooth: hci2: command tx timeout [ 90.900450][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.907674][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.957592][ T51] Bluetooth: hci1: command tx timeout [ 90.963063][ T51] Bluetooth: hci3: command tx timeout [ 91.037036][ T51] Bluetooth: hci0: command tx timeout [ 91.055933][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.142865][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.259633][ T5772] veth0_vlan: entered promiscuous mode [ 91.295568][ T5772] veth1_vlan: entered promiscuous mode [ 91.395704][ T5772] veth0_macvtap: entered promiscuous mode [ 91.419978][ T5776] veth0_vlan: entered promiscuous mode [ 91.438434][ T5772] veth1_macvtap: entered promiscuous mode [ 91.481619][ T5776] veth1_vlan: entered promiscuous mode [ 91.509848][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.551994][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.599174][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.629404][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.642820][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.653792][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.662898][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.672119][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.751437][ T5776] veth0_macvtap: entered promiscuous mode [ 91.781192][ T5774] veth0_vlan: entered promiscuous mode [ 91.806182][ T5776] veth1_macvtap: entered promiscuous mode [ 91.857382][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.865487][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.889631][ T5774] veth1_vlan: entered promiscuous mode [ 91.954195][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.967563][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.991811][ T5774] veth0_macvtap: entered promiscuous mode [ 92.010854][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.024029][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.037311][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.070168][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.089925][ T2134] cfg80211: failed to load regulatory.db [ 92.096198][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.113885][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.122952][ T5773] veth0_vlan: entered promiscuous mode [ 92.135830][ T5774] veth1_macvtap: entered promiscuous mode [ 92.152171][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.161642][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.171165][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.180854][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.206790][ T5773] veth1_vlan: entered promiscuous mode [ 92.256197][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.267441][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.277902][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.289315][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.301155][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.334407][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.352917][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.365034][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.380526][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.393892][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.408916][ T5841] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.432015][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.445919][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.454885][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.467249][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.584336][ T5773] veth0_macvtap: entered promiscuous mode [ 92.664295][ T5773] veth1_macvtap: entered promiscuous mode [ 92.727974][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.735835][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.807639][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.815538][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.852394][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.874627][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.897197][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.917665][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.935228][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.946453][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.958099][ T51] Bluetooth: hci2: command tx timeout [ 92.965655][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.013685][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.025362][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.037014][ T51] Bluetooth: hci3: command tx timeout [ 93.037822][ T5084] Bluetooth: hci1: command tx timeout [ 93.060651][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.085189][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.104036][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.115060][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.125806][ T5084] Bluetooth: hci0: command tx timeout [ 93.132235][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.143072][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.154647][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.166877][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.174780][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.228519][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.249142][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.258379][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.267483][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.533804][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.569347][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.652414][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.681970][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.055366][ T5868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.093497][ T5084] Bluetooth: hci2: command tx timeout [ 95.227165][ T5084] Bluetooth: hci1: command tx timeout [ 95.233434][ T5084] Bluetooth: hci3: command tx timeout [ 95.239822][ T5084] Bluetooth: hci0: command tx timeout [ 95.761768][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 95.981575][ T5885] team0: Port device team_slave_0 removed [ 96.387287][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 96.633371][ T5898] veth0_macvtap: left promiscuous mode [ 97.797371][ T5922] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.889809][ T5787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.987160][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.116971][ T5787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.151409][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.169814][ T5787] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.187260][ T5787] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 98.210140][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.226692][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.246756][ T5787] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 98.260298][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.272874][ T5787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 98.285277][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.293828][ T5787] usb 4-1: config 1 interface 1 has no altsetting 0 [ 98.331607][ T5915] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.339348][ T5787] usb 4-1: string descriptor 0 read error: -22 [ 98.345835][ T5787] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 98.386047][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.399755][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 98.847780][ T5787] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 98.869656][ T5435] veth0_macvtap: entered promiscuous mode [ 99.210698][ T23] usb 3-1: USB disconnect, device number 2 [ 99.395330][ T5787] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 99.444962][ T5787] usb 4-1: USB disconnect, device number 2 [ 99.553615][ T5926] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 99.784585][ T5926] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.805568][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.823257][ T5926] usb 2-1: Product: syz [ 99.840433][ T5926] usb 2-1: Manufacturer: syz [ 99.845113][ T5926] usb 2-1: SerialNumber: syz [ 99.905564][ T5926] usb 2-1: config 0 descriptor?? [ 99.930825][ T5965] syz.0.28[5965]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.305928][ T5974] serio: Serial port ttyS3 [ 100.382759][ T5926] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 100.404402][ T5926] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 100.451027][ T5926] usb 2-1: USB disconnect, device number 2 [ 100.936830][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.147029][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 101.158024][ T23] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 101.176223][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.189815][ T23] usb 4-1: config 0 descriptor?? [ 101.213763][ T23] gspca_main: sq930x-2.14.0 probing 041e:403c [ 101.641066][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 101.750681][ T6004] team0: Port device team_slave_0 removed [ 101.769317][ T6006] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.39'. [ 101.846723][ T5787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.886678][ T23] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 101.898631][ T23] sq930x: probe of 4-1:0.0 failed with error -71 [ 101.925811][ T23] usb 4-1: USB disconnect, device number 3 [ 101.946020][ T6008] syz_tun: entered allmulticast mode [ 101.995110][ T6011] Bluetooth: MGMT ver 1.22 [ 102.079177][ T5787] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.096075][ T5787] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.109192][ T5787] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.131567][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.161974][ T6002] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 102.184418][ T5787] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 102.556723][ T5787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.746708][ T1191] usb 2-1: USB disconnect, device number 3 [ 102.786894][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 102.817985][ T5787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.865715][ T5787] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 102.875236][ T5787] usb 3-1: config 3 has an invalid interface number: 25 but max is 1 [ 102.884086][ T5787] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 102.892982][ T5787] usb 3-1: config 3 has no interface number 0 [ 102.899934][ T5787] usb 3-1: config 3 has no interface number 1 [ 102.906112][ T5787] usb 3-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 102.919618][ T5787] usb 3-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 102.934209][ T5787] usb 3-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 102.961139][ T5787] usb 3-1: config 3 interface 223 has no altsetting 1 [ 102.973118][ T5787] usb 3-1: config 3 interface 25 has no altsetting 0 [ 102.988246][ T5787] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 102.998230][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.006280][ T5787] usb 3-1: Product: syz [ 103.029604][ T5787] usb 3-1: Manufacturer: syz [ 103.041651][ T5787] usb 3-1: SerialNumber: syz [ 103.299568][ T5787] usb 3-1: USB disconnect, device number 3 [ 103.877874][ T51] Bluetooth: hci2: Invalid handle: 0x9c98 > 0x0eff [ 104.432401][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 104.543851][ T6045] loop3: detected capacity change from 0 to 256 [ 104.566202][ T6045] ======================================================= [ 104.566202][ T6045] WARNING: The mand mount option has been deprecated and [ 104.566202][ T6045] and is ignored by this kernel. Remove the mand [ 104.566202][ T6045] option from the mount to silence this warning. [ 104.566202][ T6045] ======================================================= [ 104.615077][ T6038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.677483][ T6038] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.686335][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 104.731902][ T6038] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.073905][ T6038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.098285][ T6045] FAT-fs (loop3): Directory bread(block 64) failed [ 105.135094][ T6038] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.176321][ T6045] FAT-fs (loop3): Directory bread(block 65) failed [ 105.184108][ T6045] FAT-fs (loop3): Directory bread(block 66) failed [ 105.191688][ T6045] FAT-fs (loop3): Directory bread(block 67) failed [ 105.198707][ T6045] FAT-fs (loop3): Directory bread(block 68) failed [ 105.205315][ T6045] FAT-fs (loop3): Directory bread(block 69) failed [ 105.216778][ T6045] FAT-fs (loop3): Directory bread(block 70) failed [ 105.223392][ T6045] FAT-fs (loop3): Directory bread(block 71) failed [ 105.236798][ T6045] FAT-fs (loop3): Directory bread(block 72) failed [ 105.243381][ T6045] FAT-fs (loop3): Directory bread(block 73) failed [ 105.298238][ T6038] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.322101][ T6038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.486804][ T6038] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.999241][ T6038] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.014193][ T6038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.021602][ T6038] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.058440][ T6038] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.100100][ T6050] loop0: detected capacity change from 0 to 1024 [ 106.244336][ T6050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.379851][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 106.556846][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.731004][ T59] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 106.751932][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 768 with error 28 [ 106.765416][ T59] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.765416][ T59] [ 106.776146][ T59] EXT4-fs (loop0): Total free blocks count 0 [ 106.782849][ T59] EXT4-fs (loop0): Free/Dirty block details [ 106.789266][ T59] EXT4-fs (loop0): free_blocks=20480 [ 106.794735][ T59] EXT4-fs (loop0): dirty_blocks=768 [ 106.808222][ T59] EXT4-fs (loop0): Block reservation details [ 106.814421][ T59] EXT4-fs (loop0): i_reserved_data_blocks=48 [ 107.057756][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.223807][ T5819] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.226741][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.357322][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.456872][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 107.599047][ T6085] block device autoloading is deprecated and will be removed. [ 107.622922][ T6085] syz.3.63: attempt to access beyond end of device [ 107.622922][ T6085] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 107.895506][ T6079] Zero length message leads to an empty skb [ 108.085376][ T1191] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.098544][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.227624][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 108.375413][ T5819] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 108.387044][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.395091][ T5819] usb 2-1: Product: syz [ 108.399539][ T5819] usb 2-1: Manufacturer: syz [ 108.404175][ T5819] usb 2-1: SerialNumber: syz [ 108.429186][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.439916][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.449304][ T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 108.482361][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.550665][ T23] usb 1-1: config 0 descriptor?? [ 108.576680][ T1191] usb 3-1: Using ep0 maxpacket: 32 [ 108.586433][ T1191] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 108.590307][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 108.615239][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 108.626843][ T1191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.636911][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.643132][ T1191] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 108.659602][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 108.669970][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.684973][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 108.697652][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 108.705670][ T23] usb 1-1: media controller created [ 108.710904][ T1191] usb 3-1: config 0 descriptor?? [ 108.732726][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.783136][ T5819] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 108.845278][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 108.865896][ T5819] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 108.870561][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 108.912686][ T5819] usb 2-1: USB disconnect, device number 4 [ 108.932099][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 108.995684][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 109.015056][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 109.025600][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.174091][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 109.182011][ T23] dvb-usb: error while querying for an remote control event. [ 109.277567][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.378092][ T2134] dvb-usb: bulk message failed: -22 (1/0) [ 109.384534][ T2134] dvb-usb: error while querying for an remote control event. [ 109.436826][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.455940][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.464831][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.531429][ T1191] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 109.560166][ T1191] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 109.576892][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 109.582974][ T5921] dvb-usb: error while querying for an remote control event. [ 109.597316][ T1191] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 109.614122][ T1191] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 109.631482][ T1191] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 109.659532][ T1191] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 109.834971][ T6095] dvb-usb: bulk message failed: -22 (1/0) [ 109.849176][ T6095] dvb-usb: error while querying for an remote control event. [ 110.017357][ T6095] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.046872][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 110.052800][ T5929] dvb-usb: error while querying for an remote control event. [ 110.074117][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.084422][ T1191] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -110 [ 110.115872][ T1191] usb 3-1: USB disconnect, device number 4 [ 110.157121][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.183416][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.196900][ T6095] usb 2-1: Using ep0 maxpacket: 16 [ 110.209543][ T6095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.222197][ T6094] dvb-usb: bulk message failed: -22 (1/0) [ 110.229191][ T6094] dvb-usb: error while querying for an remote control event. [ 110.237684][ T6095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.248252][ T6095] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.268790][ T6095] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 110.282660][ T6095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.308557][ T6095] usb 2-1: config 0 descriptor?? [ 110.435550][ T5844] usb 1-1: USB disconnect, device number 2 [ 110.716664][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.748033][ T5844] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 110.782442][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x3 [ 110.807467][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.817212][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.824129][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.832783][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.840417][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.847799][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.854827][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.864875][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.880862][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.899824][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.927323][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.948663][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.955579][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 110.997915][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.023783][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.047020][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.054034][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.085007][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.094477][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.094907][ T6089] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.113109][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.125605][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.131844][ T6089] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.144387][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.152949][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.161412][ T6089] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.174845][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.184051][ T6089] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.201960][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.219457][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.236654][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.251428][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.259120][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.265973][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.287705][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.294592][ T6095] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 111.335687][ T6095] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 111.357454][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.378974][ T6095] usb 2-1: USB disconnect, device number 5 [ 111.518941][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.574304][ T6114] fido_id[6114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 112.237019][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.826203][ T6133] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET) [ 113.196747][ T6099] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.397307][ T6099] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 113.417555][ T6099] usb 1-1: can't read configurations, error -61 [ 113.578767][ T6099] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.812003][ T6099] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 113.835307][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 113.844983][ T6099] usb 1-1: can't read configurations, error -61 [ 113.868038][ T6099] usb usb1-port1: attempt power cycle [ 114.066013][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 114.190044][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 114.596911][ T6099] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.905713][ T6099] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.913928][ T6099] usb 1-1: can't read configurations, error -61 [ 115.116753][ T6099] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.164027][ T6099] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 115.172961][ T6099] usb 1-1: can't read configurations, error -61 [ 115.212496][ T6099] usb usb1-port1: unable to enumerate USB device [ 115.407425][ T5928] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 115.586730][ T5820] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.598945][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.614125][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.624851][ T5928] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 115.644285][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.660586][ T5928] usb 4-1: config 0 descriptor?? [ 115.766771][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 115.775504][ T5820] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.786725][ T6099] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.796945][ T5820] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.811018][ T5820] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 115.820669][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.975294][ T6099] usb 3-1: Using ep0 maxpacket: 8 [ 115.988388][ T6099] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 116.011070][ T6099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.024442][ T6099] usb 3-1: Product: syz [ 116.028840][ T6099] usb 3-1: Manufacturer: syz [ 116.033740][ T6099] usb 3-1: SerialNumber: syz [ 116.127387][ T5928] aquacomputer_d5next 0003:0C70:F0B6.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 116.251779][ T5820] usbhid 2-1:128.0: can't add hid device: -71 [ 116.266489][ T5820] usbhid: probe of 2-1:128.0 failed with error -71 [ 116.312287][ T5820] usb 2-1: USB disconnect, device number 6 [ 116.336028][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 116.379238][ T6099] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 116.441200][ T6099] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 116.455525][ T5928] usb 4-1: USB disconnect, device number 4 [ 116.507983][ T6099] usb 3-1: USB disconnect, device number 5 [ 116.581041][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.878823][ T6236] netlink: 'syz.3.93': attribute type 4 has an invalid length. [ 118.160918][ T5084] Bluetooth: hci3: Invalid handle: 0x9c98 > 0x0eff [ 118.293103][ T6256] [U] [ 118.296349][ T6256] [U] [ 118.299115][ T6256] [U] [ 118.301869][ T6256] [U] [ 118.306235][ T6256] [U] [ 118.309012][ T6256] [U] [ 118.311746][ T6256] [U] [ 118.314478][ T6256] [U] [ 118.323003][ T6256] [U] [ 118.325778][ T6256] [U] [ 118.328518][ T6256] [U] [ 118.331295][ T6256] [U] [ 118.335118][ T6256] [U] [ 118.337874][ T6256] [U] [ 118.340619][ T6256] [U] [ 118.343365][ T6256] [U] [ 118.367024][ T6256] [U] [ 118.369832][ T6256] [U] [ 118.372576][ T6256] [U] [ 118.375334][ T6256] [U] [ 118.396848][ T6256] [U] [ 118.399637][ T6256] [U] [ 118.402385][ T6256] [U] [ 118.405129][ T6256] [U] [ 118.420881][ T6256] [U] [ 118.423672][ T6256] [U] [ 118.426414][ T6256] [U] [ 118.429157][ T6256] [U] [ 118.495040][ T6256] [U] [ 118.497827][ T6256] [U] [ 118.500572][ T6256] [U] [ 118.503306][ T6256] [U] [ 118.523595][ T6256] [U] [ 118.526381][ T6256] [U] [ 118.529125][ T6256] [U] [ 118.531872][ T6256] [U] [ 118.534638][ T6256] [U] [ 118.548130][ T6256] [U] [ 118.551001][ T6256] [U] [ 118.553741][ T6256] [U] [ 118.556488][ T6256] [U] [ 118.569495][ T6256] [U] [ 118.572286][ T6256] [U] [ 118.575018][ T6256] [U] [ 118.577741][ T6256] [U] [ 118.582194][ T6256] [U] [ 118.584956][ T6256] [U] [ 118.587697][ T6256] [U] [ 118.590518][ T6256] [U] [ 118.602894][ T6256] [U] [ 118.605683][ T6256] [U] [ 118.608415][ T6256] [U] [ 118.611168][ T6256] [U] [ 118.628015][ T6256] [U] [ 118.630813][ T6256] [U] [ 118.633564][ T6256] [U] [ 118.636311][ T6256] [U] [ 118.664270][ T6256] [U] [ 118.667069][ T6256] [U] [ 118.669815][ T6256] [U] [ 118.672552][ T6256] [U] [ 118.710720][ T6256] [U] [ 118.713513][ T6256] [U] [ 118.716249][ T6256] [U] [ 118.718987][ T6256] [U] [ 119.438618][ T6256] [U] [ 119.441412][ T6256] [U] [ 119.444168][ T6256] [U] [ 119.446901][ T6256] [U] [ 119.449948][ T6256] [U] [ 119.452709][ T6256] [U] [ 119.455445][ T6256] [U] [ 119.458179][ T6256] [U] [ 119.462847][ T6256] [U] [ 119.465624][ T6256] [U] [ 119.468362][ T6256] [U] [ 119.471101][ T6256] [U] [ 119.476931][ T6256] [U] [ 119.479680][ T6256] [U] [ 119.482380][ T6256] [U] [ 119.485080][ T6256] [U] [ 119.499460][ T6257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.546427][ T6257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.558674][ T6256] [U] [ 119.572586][ T6257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.608043][ T6257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.133119][ T6290] netlink: 'syz.3.105': attribute type 4 has an invalid length. [ 120.152702][ T6292] [U] [ 120.155501][ T6292] [U] [ 120.158241][ T6292] [U] [ 120.160976][ T6292] [U] [ 120.253824][ T6294] loop2: detected capacity change from 0 to 1024 [ 120.263416][ T6292] [U] [ 120.266190][ T6292] [U] [ 120.268942][ T6292] [U] [ 120.271682][ T6292] [U] [ 120.309616][ T6292] [U] [ 120.312399][ T6292] [U] [ 120.315153][ T6292] [U] [ 120.317890][ T6292] [U] [ 120.339995][ T6292] [U] [ 120.342795][ T6292] [U] [ 120.345540][ T6292] [U] [ 120.348286][ T6292] [U] [ 120.396830][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.415135][ T6292] [U] [ 120.418013][ T6292] [U] [ 120.420752][ T6292] [U] [ 120.423499][ T6292] [U] [ 120.427642][ T6292] [U] [ 120.430415][ T6292] [U] [ 120.433154][ T6292] [U] [ 120.435890][ T6292] [U] [ 120.439045][ T6292] [U] [ 120.441799][ T6292] [U] [ 120.444540][ T6292] [U] [ 120.447278][ T6292] [U] [ 120.451891][ T6292] [U] [ 120.454653][ T6292] [U] [ 120.457401][ T6292] [U] [ 120.460144][ T6292] [U] [ 120.463247][ T6292] [U] [ 120.466013][ T6292] [U] [ 120.468756][ T6292] [U] [ 120.471497][ T6292] [U] [ 120.474638][ T6292] [U] [ 120.477423][ T6292] [U] [ 120.480168][ T6292] [U] [ 120.482924][ T6292] [U] [ 120.486061][ T6292] [U] [ 120.488813][ T6292] [U] [ 120.491552][ T6292] [U] [ 120.494279][ T6292] [U] [ 120.497360][ T6292] [U] [ 120.500124][ T6292] [U] [ 120.502869][ T6292] [U] [ 120.505608][ T6292] [U] [ 120.508661][ T6292] [U] [ 120.511413][ T6292] [U] [ 120.514152][ T6292] [U] [ 120.516896][ T6292] [U] [ 120.534000][ T6292] [U] [ 120.535657][ T28] audit: type=1800 audit(1781274194.821:2): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.106" name="file1" dev="loop2" ino=26 res=0 errno=0 [ 120.536758][ T6292] [U] [ 120.536840][ T6292] [U] [ 120.536896][ T6292] [U] [ 120.579048][ T6292] [U] [ 120.581831][ T6292] [U] [ 120.584574][ T6292] [U] [ 120.587321][ T6292] [U] [ 120.591651][ T6292] [U] [ 120.594417][ T6292] [U] [ 120.597155][ T6292] [U] [ 120.599897][ T6292] [U] [ 120.604333][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.604511][ T6292] [U] [ 120.612847][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.614655][ T6292] [U] [ 120.614691][ T6292] [U] [ 120.627665][ T6292] [U] [ 120.633619][ T6292] [U] [ 120.636403][ T6292] [U] [ 120.639151][ T6292] [U] [ 120.641889][ T6292] [U] [ 120.652983][ T6292] [U] [ 120.655709][ T6292] [U] [ 120.657013][ T6099] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.658410][ T6292] [U] [ 120.668627][ T6292] [U] [ 120.671738][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.680465][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.688169][ T6292] [U] [ 120.690916][ T6292] [U] [ 120.693661][ T6292] [U] [ 120.696407][ T6292] [U] [ 120.705472][ T6292] [U] [ 120.708257][ T6292] [U] [ 120.711003][ T6292] [U] [ 120.713737][ T6292] [U] [ 120.716773][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.724468][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.744283][ T6292] [U] [ 120.862464][ T6099] usb 4-1: config 0 has no interfaces? [ 120.902340][ T6099] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.924869][ T6099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.949044][ T6099] usb 4-1: config 0 descriptor?? [ 120.977032][ T6302] mmap: syz.2.108 (6302) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.186243][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.200978][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.206955][ T6096] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.221234][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.233086][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.244673][ T5820] usb 4-1: USB disconnect, device number 5 [ 121.397406][ T6096] usb 2-1: Using ep0 maxpacket: 8 [ 121.404933][ T6096] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 121.413518][ T6096] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.423455][ T6096] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.433323][ T6096] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.443445][ T6096] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.456509][ T6096] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.462995][ T5871] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 121.474569][ T6096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.519177][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.597081][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.676775][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.685793][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.696338][ T5871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.705526][ T5871] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 121.714725][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.726906][ T5871] usb 3-1: config 0 descriptor?? [ 121.739383][ T5871] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 121.746382][ T5871] dvb-usb: bulk message failed: -22 (3/0) [ 121.758643][ T5871] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 121.768317][ T5871] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 121.776828][ T5871] usb 3-1: media controller created [ 121.784260][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.805270][ T5871] dvb-usb: bulk message failed: -22 (6/0) [ 121.812356][ T6096] usb 2-1: usb_control_msg returned -32 [ 121.822630][ T6096] usbtmc 2-1:16.0: can't read capabilities [ 121.826066][ T5871] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 121.836328][ T5820] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.848181][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 121.876877][ T5871] dvb-usb: schedule remote query interval to 150 msecs. [ 121.891538][ T5871] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 122.016751][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 122.026976][ T5820] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 122.036823][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.044964][ T5820] usb 4-1: Product: syz [ 122.049774][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 122.058661][ T5820] usb 4-1: Manufacturer: syz [ 122.061279][ T6096] usb 2-1: USB disconnect, device number 7 [ 122.063544][ T5820] usb 4-1: SerialNumber: syz [ 122.075147][ T5871] dvb-usb: error while querying for an remote control event. [ 122.099802][ T5820] usb 4-1: config 0 descriptor?? [ 122.115379][ T5820] gspca_main: spca500-2.14.0 probing 046d:0900 [ 122.256748][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 122.268424][ T5871] dvb-usb: error while querying for an remote control event. [ 122.324227][ T5820] gspca_spca500: reg write: error -71 [ 122.330928][ T5820] gspca_spca500: reg write: error -71 [ 122.337447][ T5820] gspca_spca500: reg write: error -71 [ 122.343496][ T5820] gspca_spca500: reg write: error -71 [ 122.351832][ T5820] gspca_spca500: reg write: error -71 [ 122.358193][ T5820] gspca_spca500: reg write: error -71 [ 122.364036][ T5820] gspca_spca500: reg write: error -71 [ 122.370453][ T5820] gspca_spca500: reg write: error -71 [ 122.376173][ T5820] gspca_spca500: reg write: error -71 [ 122.389073][ T5820] gspca_spca500: reg write: error -71 [ 122.394938][ T5820] gspca_spca500: reg write: error -71 [ 122.401058][ T5820] gspca_spca500: reg write: error -71 [ 122.406996][ T5820] gspca_spca500: reg write: error -71 [ 122.412804][ T5820] gspca_spca500: reg write: error -71 [ 122.428208][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 122.434476][ T5820] usb 4-1: USB disconnect, device number 6 [ 122.440468][ T5871] dvb-usb: error while querying for an remote control event. [ 122.616970][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 122.622907][ T5871] dvb-usb: error while querying for an remote control event. [ 122.801075][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 122.812607][ T5820] dvb-usb: error while querying for an remote control event. [ 122.978722][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 122.997585][ T5871] dvb-usb: error while querying for an remote control event. [ 123.177197][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 123.318027][ T5871] dvb-usb: error while querying for an remote control event. [ 123.477859][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 123.520920][ T5820] dvb-usb: error while querying for an remote control event. [ 123.716929][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 123.723679][ T5820] dvb-usb: error while querying for an remote control event. [ 123.916897][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 123.922733][ T5820] dvb-usb: error while querying for an remote control event. [ 124.096755][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 124.102565][ T5820] dvb-usb: error while querying for an remote control event. [ 124.125572][ T6102] usb 3-1: USB disconnect, device number 6 [ 124.174969][ T6102] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 124.216952][ T6096] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.410504][ T6096] usb 2-1: Using ep0 maxpacket: 32 [ 124.429753][ T6096] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.455740][ T6096] usb 2-1: config 0 has no interface number 0 [ 124.471903][ T6096] usb 2-1: config 0 interface 184 has no altsetting 0 [ 124.482723][ T6096] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.507055][ T6096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.515136][ T6096] usb 2-1: Product: syz [ 124.531083][ T6096] usb 2-1: Manufacturer: syz [ 124.535782][ T6096] usb 2-1: SerialNumber: syz [ 124.559384][ T6096] usb 2-1: config 0 descriptor?? [ 124.599266][ T6096] smsc75xx v1.0.0 [ 124.851918][ T6347] process 'syz.0.124' launched '/dev/fd/7' with NULL argv: empty string added [ 124.957164][ T5820] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.159306][ T5820] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.181249][ T5820] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.209304][ T5820] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.346869][ T6099] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.371745][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.388771][ T6343] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.399484][ T5820] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 125.412546][ T6096] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 125.819634][ T6096] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.170805][ T6096] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 126.215535][ T6096] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 126.247007][ T6096] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 126.276743][ T6096] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 126.304155][ T6096] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 126.335288][ T6096] usb 2-1: USB disconnect, device number 8 [ 126.345805][ T6099] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.396004][ T6099] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 126.406031][ T6099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 126.434547][ T6099] usb 1-1: Product: syz [ 126.449255][ T6099] usb 1-1: Manufacturer: syz [ 126.472029][ T6099] usb 1-1: SerialNumber: syz [ 126.582316][ T6096] usb 4-1: USB disconnect, device number 7 [ 126.768762][ T6099] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.042420][ T1191] usb 1-1: USB disconnect, device number 7 [ 127.071542][ T1191] usblp0: removed [ 127.077622][ T5820] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.287444][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 127.302391][ T5820] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 127.331617][ T5820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.344378][ T5820] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 127.385043][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.406019][ T5820] usb 2-1: config 0 descriptor?? [ 128.007698][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 128.283392][ T5820] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 128.351985][ T5820] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 128.397115][ T5820] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 128.423374][ T5820] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 128.481313][ T5820] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 128.553919][ T5820] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 128.790291][ T6380] netlink: 'syz.2.135': attribute type 4 has an invalid length. [ 128.999876][ T5820] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -110 [ 129.042516][ T5820] usb 2-1: USB disconnect, device number 9 [ 129.826885][ T6401] syz.3.143: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 129.848559][ T6401] CPU: 0 PID: 6401 Comm: syz.3.143 Not tainted syzkaller #0 [ 129.855945][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.866094][ T6401] Call Trace: [ 129.869439][ T6401] [ 129.872420][ T6401] dump_stack_lvl+0x18c/0x250 [ 129.877181][ T6401] ? show_regs_print_info+0x20/0x20 [ 129.882443][ T6401] ? load_image+0x420/0x420 [ 129.887017][ T6401] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 129.893495][ T6401] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 129.900069][ T6401] warn_alloc+0x246/0x340 [ 129.904457][ T6401] ? stack_trace_save+0xaa/0x100 [ 129.909443][ T6401] ? zone_watermark_ok_safe+0x230/0x230 [ 129.915038][ T6401] ? kasan_set_track+0x5f/0x70 [ 129.919837][ T6401] ? kasan_set_track+0x4e/0x70 [ 129.924630][ T6401] ? __kasan_kmalloc+0x8f/0xa0 [ 129.929418][ T6401] ? xsk_init_queue+0xad/0x100 [ 129.934208][ T6401] ? xsk_setsockopt+0x42e/0x760 [ 129.939081][ T6401] ? do_sock_setsockopt+0x175/0x1a0 [ 129.944307][ T6401] ? __x64_sys_setsockopt+0x182/0x200 [ 129.949707][ T6401] __vmalloc_node_range+0x126/0x1330 [ 129.955048][ T6401] ? free_vm_area+0x50/0x50 [ 129.959594][ T6401] vmalloc_user+0x74/0x80 [ 129.963957][ T6401] ? xskq_create+0xbf/0x170 [ 129.968489][ T6401] xskq_create+0xbf/0x170 [ 129.972856][ T6401] xsk_init_queue+0xad/0x100 [ 129.977476][ T6401] xsk_setsockopt+0x42e/0x760 [ 129.982183][ T6401] ? xsk_poll+0x680/0x680 [ 129.986545][ T6401] ? __fget_files+0x28/0x4b0 [ 129.991169][ T6401] ? __fget_files+0x28/0x4b0 [ 129.995791][ T6401] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 130.001370][ T6401] ? security_socket_setsockopt+0x7e/0xa0 [ 130.007123][ T6401] ? xsk_poll+0x680/0x680 [ 130.011484][ T6401] do_sock_setsockopt+0x175/0x1a0 [ 130.016547][ T6401] ? __fdget+0x180/0x210 [ 130.020829][ T6401] __x64_sys_setsockopt+0x182/0x200 [ 130.026063][ T6401] do_syscall_64+0x55/0xb0 [ 130.030508][ T6401] ? clear_bhb_loop+0x40/0x90 [ 130.035208][ T6401] ? clear_bhb_loop+0x40/0x90 [ 130.039905][ T6401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.045827][ T6401] RIP: 0033:0x7f4f4a39ce59 [ 130.050282][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.069918][ T6401] RSP: 002b:00007f4f4b239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.078402][ T6401] RAX: ffffffffffffffda RBX: 00007f4f4a615fa0 RCX: 00007f4f4a39ce59 [ 130.086401][ T6401] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 130.094399][ T6401] RBP: 00007f4f4a432d6f R08: 0000000000000004 R09: 0000000000000000 [ 130.102397][ T6401] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.110393][ T6401] R13: 00007f4f4a616038 R14: 00007f4f4a615fa0 R15: 00007ffdbcf5a9d8 [ 130.118504][ T6401] [ 130.163764][ T6401] Mem-Info: [ 130.168509][ T6401] active_anon:5566 inactive_anon:0 isolated_anon:0 [ 130.168509][ T6401] active_file:1212 inactive_file:39987 isolated_file:0 [ 130.168509][ T6401] unevictable:768 dirty:236 writeback:0 [ 130.168509][ T6401] slab_reclaimable:10181 slab_unreclaimable:93034 [ 130.168509][ T6401] mapped:24882 shmem:1387 pagetables:621 [ 130.168509][ T6401] sec_pagetables:0 bounce:0 [ 130.168509][ T6401] kernel_misc_reclaimable:0 [ 130.168509][ T6401] free:1354867 free_pcp:13595 free_cma:0 [ 130.267314][ T6401] Node 0 active_anon:22200kB inactive_anon:0kB active_file:4752kB inactive_file:159744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99412kB dirty:944kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11344kB pagetables:2464kB sec_pagetables:0kB all_unreclaimable? no [ 130.301644][ T6401] Node 1 active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 130.362205][ T6410] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 130.378928][ T6401] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.446929][ T5871] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.449237][ T6401] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 130.481370][ T6401] Node 0 DMA32 free:1527196kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22096kB inactive_anon:0kB active_file:4752kB inactive_file:158924kB unevictable:1536kB writepending:944kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:24964kB local_pcp:9436kB free_cma:0kB [ 130.511892][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.524731][ T6401] lowmem_reserve[]: 0 0 0 0 0 [ 130.530276][ T6401] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 130.557199][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.591401][ T6401] lowmem_reserve[]: 0 0 0 0 0 [ 130.602640][ T6401] Node 1 Normal free:3876420kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:30632kB local_pcp:19748kB free_cma:0kB [ 130.634933][ T6401] lowmem_reserve[]: 0 0 0 0 0 [ 130.637101][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 130.641377][ T6401] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 130.652055][ T5871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.694124][ T5871] usb 3-1: config 0 has no interface number 0 [ 130.706029][ T6401] Node 0 DMA32: 497*4kB (UME) 383*8kB (UME) 190*16kB (UM) 94*32kB (UME) 19*64kB (UME) 9*128kB (UME) 1*256kB (U) 4*512kB (UME) 4*1024kB (ME) 2*2048kB (UE) 367*4096kB (M) = 1527196kB [ 130.747957][ T5871] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 130.763891][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.767336][ T6401] Node 0 Normal: [ 130.782246][ T5871] usb 3-1: Product: syz [ 130.798979][ T5871] usb 3-1: Manufacturer: syz [ 130.806505][ T6401] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 130.816481][ T5871] usb 3-1: SerialNumber: syz [ 130.834328][ T5871] usb 3-1: config 0 descriptor?? [ 130.851653][ T5871] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 130.874063][ T5871] usb 3-1: selecting invalid altsetting 1 [ 130.879358][ T6401] Node 1 Normal: 177*4kB (UME) 60*8kB (UM) 34*16kB (UM) 60*32kB (UE) 22*64kB (UME) 7*128kB (UE) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 944*4096kB (M) = 3876420kB [ 130.889305][ T5871] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 130.915949][ T6401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.927300][ T6401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 130.933229][ T5871] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.950563][ T6401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.965360][ T6418] loop1: detected capacity change from 0 to 128 [ 130.973324][ T5871] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 130.982588][ T5871] usb 3-1: media controller created [ 131.000443][ T6418] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 131.033352][ T6418] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.048975][ T6418] ext2 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.067860][ T6399] trusted_key: encrypted_key: insufficient parameters specified [ 131.080234][ T6401] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 131.106620][ T6401] 42582 total pagecache pages [ 131.116377][ T6401] 0 pages in swap cache [ 131.120681][ T6401] Free swap = 124472kB [ 131.124986][ T6401] Total swap = 124996kB [ 131.129588][ T6401] 2097051 pages RAM [ 131.133474][ T6401] 0 pages HighMem/MovableOnly [ 131.138678][ T6401] 416933 pages reserved [ 131.143192][ T6401] 0 pages cma reserved [ 131.181082][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.200436][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.810820][ T6441] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 132.236769][ T1191] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.416942][ T1191] usb 2-1: Using ep0 maxpacket: 32 [ 132.437316][ T1191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.451136][ T1191] usb 2-1: config 3 has an invalid interface number: 223 but max is 1 [ 132.461050][ T1191] usb 2-1: config 3 has an invalid interface number: 25 but max is 1 [ 132.472940][ T1191] usb 2-1: config 3 has no interface number 0 [ 132.479655][ T1191] usb 2-1: config 3 has no interface number 1 [ 132.496344][ T1191] usb 2-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 132.514123][ T1191] usb 2-1: config 3 interface 25 has no altsetting 0 [ 132.525011][ T1191] usb 2-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 132.536097][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.544333][ T1191] usb 2-1: Product: syz [ 132.549864][ T1191] usb 2-1: Manufacturer: syz [ 132.554573][ T1191] usb 2-1: SerialNumber: syz [ 132.811299][ T1191] usb 2-1: USB disconnect, device number 10 [ 132.846087][ T5871] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 132.964270][ T5871] usb 3-1: USB disconnect, device number 7 [ 133.045341][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.218709][ T6460] netlink: 'syz.0.164': attribute type 4 has an invalid length. [ 133.433925][ T6465] syzkaller0: entered promiscuous mode [ 133.447676][ T6465] syzkaller0: entered allmulticast mode [ 133.654386][ T6472] tipc: Started in network mode [ 133.665808][ T6472] tipc: Node identity ac1414aa, cluster identity 4711 [ 133.675368][ T6472] tipc: Enabled bearer , priority 10 [ 133.684316][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 133.696438][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 134.095669][ T6488] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 134.607395][ T1191] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.667349][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 134.680700][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 134.694590][ T6102] tipc: Node number set to 2886997162 [ 134.807329][ T1191] usb 3-1: Using ep0 maxpacket: 32 [ 134.815358][ T1191] usb 3-1: unable to get BOS descriptor or descriptor too short [ 134.843443][ T1191] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 134.876716][ T1191] usb 3-1: config 3 has an invalid interface number: 25 but max is 1 [ 134.902105][ T1191] usb 3-1: config 3 has no interface number 0 [ 134.923479][ T1191] usb 3-1: config 3 has no interface number 1 [ 134.935068][ T1191] usb 3-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 134.961202][ T6511] netlink: 'syz.1.183': attribute type 4 has an invalid length. [ 134.966409][ T1191] usb 3-1: config 3 interface 25 has no altsetting 0 [ 134.978785][ T1191] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 134.996488][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.025912][ T1191] usb 3-1: Product: syz [ 135.030433][ T1191] usb 3-1: Manufacturer: syz [ 135.035080][ T1191] usb 3-1: SerialNumber: syz [ 135.154311][ T6515] syzkaller0: entered promiscuous mode [ 135.159984][ T6515] syzkaller0: entered allmulticast mode [ 135.216741][ T5871] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 135.303214][ T1191] usb 3-1: USB disconnect, device number 8 [ 135.412596][ T5871] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.422928][ T5871] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.443034][ T5871] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.452785][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.674798][ T5871] usb 1-1: usb_control_msg returned -32 [ 135.687048][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.706692][ T5871] usbtmc 1-1:16.0: can't read capabilities [ 135.707802][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.053002][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 136.066350][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 136.105166][ T6533] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 136.130010][ T5871] usb 1-1: USB disconnect, device number 8 [ 136.184844][ T6536] syzkaller1: entered promiscuous mode [ 136.190590][ T6536] syzkaller1: entered allmulticast mode [ 136.626846][ T6099] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 137.606647][ T6545] syzkaller0: entered promiscuous mode [ 137.612358][ T6545] syzkaller0: entered allmulticast mode [ 137.672006][ T6099] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.683080][ T6099] usb 3-1: config 0 has no interface number 0 [ 137.697331][ T6099] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 137.719114][ T6099] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 137.740029][ T6099] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 137.754648][ T6099] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.767788][ T6099] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.779614][ T6099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.790544][ T6099] usb 3-1: config 0 descriptor?? [ 137.799236][ T6540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.818162][ T6540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.833464][ T6099] ldusb 3-1:0.55: Interrupt in endpoint not found [ 137.946695][ T5871] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.050297][ T1191] usb 3-1: USB disconnect, device number 9 [ 138.076773][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.126681][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 138.133472][ T5871] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 138.142030][ T5871] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.147152][ T6099] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.151849][ T5871] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.171015][ T5871] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.181184][ T5871] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.194723][ T5871] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.203923][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.386706][ T6099] usb 1-1: Using ep0 maxpacket: 32 [ 138.400371][ T6099] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.411103][ T6099] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 138.419559][ T6099] usb 1-1: config 3 has an invalid interface number: 25 but max is 1 [ 138.428847][ T6099] usb 1-1: config 3 has no interface number 0 [ 138.435148][ T6099] usb 1-1: config 3 has no interface number 1 [ 138.441447][ T6099] usb 1-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 138.453058][ T6099] usb 1-1: config 3 interface 25 has no altsetting 0 [ 138.455411][ T5871] usb 2-1: usb_control_msg returned -32 [ 138.468576][ T5871] usbtmc 2-1:16.0: can't read capabilities [ 138.476644][ T6099] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 138.486339][ T6099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.498715][ T6099] usb 1-1: Product: syz [ 138.502990][ T6099] usb 1-1: Manufacturer: syz [ 138.511356][ T6099] usb 1-1: SerialNumber: syz [ 138.677491][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'. [ 138.687221][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'. [ 138.745946][ T6099] usb 1-1: USB disconnect, device number 9 [ 138.847258][ T6558] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 139.049059][ T1191] usb 2-1: USB disconnect, device number 11 [ 139.146826][ T5871] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.339962][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 139.347503][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.357916][ T5871] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.369084][ T5871] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.379155][ T5871] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.394090][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.400872][ T5871] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 139.410242][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.421677][ T5871] usb 3-1: config 0 descriptor?? [ 140.000071][ T28] audit: type=1326 audit(1781274214.231:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.3.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4a39ce59 code=0x7ffc0000 [ 140.268869][ T28] audit: type=1326 audit(1781274214.241:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.3.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f4f4a39ce59 code=0x7ffc0000 [ 140.465937][ T28] audit: type=1326 audit(1781274214.241:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.3.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4a39ce59 code=0x7ffc0000 [ 140.649302][ T28] audit: type=1326 audit(1781274214.241:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.3.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4a39ce59 code=0x7ffc0000 [ 140.805624][ T5871] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 141.002295][ T5871] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 141.009870][ T5871] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 141.017383][ T5871] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 141.026084][ T5871] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 141.036263][ T5871] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 141.119448][ T5871] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-38) [ 141.131248][ T5871] corsair-psu: probe of 0003:1B1C:1C09.0005 failed with error -38 [ 141.144840][ T5871] usb 3-1: USB disconnect, device number 10 [ 141.352111][ T6580] fido_id[6580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 141.353629][ T6588] loop0: detected capacity change from 0 to 256 [ 141.764758][ T51] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 141.826954][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 141.911172][ T6606] binder: 6605:6606 ioctl c0306201 0 returned -14 [ 142.038781][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.181086][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 142.248840][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 142.324171][ T8] usb 3-1: Product: syz [ 142.362519][ T8] usb 3-1: Manufacturer: syz [ 142.402847][ T8] usb 3-1: SerialNumber: syz [ 142.931226][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 143.008223][ T6608] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 143.140923][ T8] usb 3-1: USB disconnect, device number 11 [ 143.176142][ T8] usblp0: removed [ 143.776832][ T6099] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.956712][ T6099] usb 1-1: Using ep0 maxpacket: 32 [ 143.965199][ T6099] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.967035][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.978131][ T6099] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 143.988955][ T6099] usb 1-1: config 3 has an invalid interface number: 25 but max is 1 [ 144.002948][ T6099] usb 1-1: config 3 has an invalid interface descriptor of length 2, skipping [ 144.012802][ T6099] usb 1-1: config 3 has no interface number 0 [ 144.021276][ T6099] usb 1-1: config 3 has no interface number 1 [ 144.029179][ T6099] usb 1-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 144.042376][ T6099] usb 1-1: config 3 interface 25 has no altsetting 0 [ 144.051768][ T6099] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 144.061091][ T6099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.069197][ T6099] usb 1-1: Product: syz [ 144.073477][ T6099] usb 1-1: Manufacturer: syz [ 144.078236][ T6099] usb 1-1: SerialNumber: syz [ 144.178812][ T8] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 144.196119][ T8] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 144.208382][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.218271][ T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 144.228584][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.237689][ T8] usb 3-1: Product: syz [ 144.242037][ T8] usb 3-1: Manufacturer: syz [ 144.247202][ T8] usb 3-1: SerialNumber: syz [ 144.261369][ T8] usb 3-1: config 0 descriptor?? [ 144.275573][ T8] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 144.284555][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 144.298603][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 144.319966][ T6099] usb 1-1: USB disconnect, device number 10 [ 144.321908][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 144.340332][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 144.349517][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 144.362190][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 144.374433][ T8] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 144.391342][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 144.402614][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 144.418352][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 144.426023][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 144.435078][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 144.448481][ T8] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 144.656345][ T6643] fuse: Bad value for 'fd' [ 144.721667][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.733401][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.756227][ T51] block nbd2: Receive control failed (result -32) [ 144.761614][ T8] usb 3-1: USB disconnect, device number 12 [ 144.794435][ T6634] block nbd2: shutting down sockets [ 144.802130][ T6646] loop3: detected capacity change from 0 to 256 [ 144.814150][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 144.887096][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 144.920457][ T8] keyspan 3-1:0.0: device disconnected [ 145.721955][ T6668] fuse: Bad value for 'fd' [ 145.838257][ T5084] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 145.847235][ T5084] Bluetooth: hci2: Injecting HCI hardware error event [ 145.856186][ T5780] Bluetooth: hci2: hardware error 0x00 [ 145.964936][ T6676] tipc: Started in network mode [ 145.970484][ T6676] tipc: Node identity 82c4db30a8f8, cluster identity 4711 [ 145.978526][ T6676] tipc: Enabled bearer , priority 2 [ 145.987217][ T6676] netdevsim netdevsim3 €Â: renamed from netdevsim0 [ 145.995680][ T6676] tipc: Disabling bearer [ 146.562333][ T6693] fuse: Bad value for 'fd' [ 146.630697][ T6695] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 146.821215][ T6699] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 146.917927][ T6699] bond2: (slave bridge1): making interface the new active one [ 146.929744][ T6699] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 146.968469][ T6699] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 146.980742][ T6699] team0: entered promiscuous mode [ 146.985846][ T6699] team_slave_0: entered promiscuous mode [ 146.992874][ T6699] team_slave_1: entered promiscuous mode [ 147.000288][ T6699] team0: entered allmulticast mode [ 147.005676][ T6699] team_slave_0: entered allmulticast mode [ 147.011957][ T6699] team_slave_1: entered allmulticast mode [ 147.030969][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.059874][ T6699] bond2: (slave team0): Enslaving as an active interface with a down link [ 147.082026][ T6708] loop0: detected capacity change from 0 to 512 [ 147.158738][ T8] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 147.187848][ T6708] EXT4-fs (loop0): Test dummy encryption mode enabled [ 147.194689][ T6708] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.207888][ T6708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.223159][ T6708] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.258: bad orphan inode 131083 [ 147.236264][ T6708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.352329][ T8] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 147.362096][ T6708] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 147.366966][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.386192][ T8] usb 3-1: Product: syz [ 147.392685][ T8] usb 3-1: Manufacturer: syz [ 147.402022][ T8] usb 3-1: SerialNumber: syz [ 147.436170][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.724453][ T6723] autofs4:pid:6723:autofs_fill_super: called with bogus options [ 147.825521][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 147.917596][ T5780] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 148.056810][ T5871] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.241425][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 148.250186][ T5871] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 148.263939][ T5871] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.280072][ T5871] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.290474][ T5871] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.301920][ T5871] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.315225][ T5871] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.324912][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.556825][ T5871] usb 4-1: usb_control_msg returned -32 [ 148.562494][ T5871] usbtmc 4-1:16.0: can't read capabilities [ 148.759421][ T6099] usb 4-1: USB disconnect, device number 8 [ 149.156796][ T5928] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 149.359020][ T5928] usb 2-1: config 0 has no interfaces? [ 149.367280][ T5928] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.376779][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.384781][ T5928] usb 2-1: Product: syz [ 149.390136][ T5928] usb 2-1: Manufacturer: syz [ 149.394786][ T5928] usb 2-1: SerialNumber: syz [ 149.402535][ T5928] usb 2-1: config 0 descriptor?? [ 149.541311][ T6745] loop3: detected capacity change from 0 to 1024 [ 149.549382][ T6745] EXT4-fs: inline encryption not supported [ 149.568316][ T6745] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.578922][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.624164][ T6745] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.269: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.634566][ T5928] usb 2-1: USB disconnect, device number 12 [ 149.673158][ T6745] EXT4-fs (loop3): Remounting filesystem read-only [ 149.682381][ T6745] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 149.691024][ T6745] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 149.704094][ T6745] EXT4-fs (loop3): 1 orphan inode deleted [ 149.713149][ T6745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.731578][ T6745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.782585][ T5871] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 149.793848][ T5871] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 149.804128][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.817841][ T5871] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 149.827495][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.839372][ T5871] usb 1-1: Product: syz [ 149.843562][ T5871] usb 1-1: Manufacturer: syz [ 149.852864][ T5871] usb 1-1: SerialNumber: syz [ 149.863808][ T5871] usb 1-1: config 0 descriptor?? [ 149.901650][ T5871] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 149.932433][ T8] usb 3-1: USB disconnect, device number 13 [ 149.939568][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 149.956184][ T8] usblp0: removed [ 149.964130][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 149.974469][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 149.984200][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 149.994360][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 150.002238][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 150.017257][ T5871] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 150.038080][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 150.045867][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 150.101478][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 150.110553][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 150.118628][ T5871] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 150.144201][ T5871] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 150.210913][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 150.473078][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.490869][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.520252][ T5780] block nbd0: Receive control failed (result -32) [ 150.523018][ T5928] usb 1-1: USB disconnect, device number 11 [ 150.534395][ T6752] block nbd0: shutting down sockets [ 150.561691][ T6763] overlayfs: failed to resolve './file2': -2 [ 150.585056][ T5928] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 150.652187][ T5928] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 150.704689][ T5928] keyspan 1-1:0.0: device disconnected [ 151.223432][ T6785] loop0: detected capacity change from 0 to 256 [ 151.396697][ T6096] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.586706][ T6096] usb 4-1: Using ep0 maxpacket: 8 [ 151.600181][ T6096] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 151.608745][ T6096] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.619247][ T6096] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.629329][ T6096] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.639477][ T6096] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.657312][ T6096] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.681209][ T6096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.877743][ T6803] overlayfs: failed to resolve './file2': -2 [ 151.945453][ T6096] usb 4-1: usb_control_msg returned -32 [ 151.960879][ T6096] usbtmc 4-1:16.0: can't read capabilities [ 152.178404][ T6096] usb 4-1: USB disconnect, device number 9 [ 153.784135][ T6842] overlayfs: failed to resolve './file2': -2 [ 155.770174][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.304'. [ 155.783726][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.304'. [ 155.938330][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 155.948643][ T6895] bridge_slave_1: left allmulticast mode [ 155.954388][ T6895] bridge_slave_1: left promiscuous mode [ 155.962260][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.998211][ T6895] bridge_slave_0: left allmulticast mode [ 156.004023][ T6895] bridge_slave_0: left promiscuous mode [ 156.010716][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.911144][ T6914] x_tables: duplicate underflow at hook 1 [ 156.994018][ T6916] vlan2: entered allmulticast mode [ 156.999368][ T6916] macsec0: entered allmulticast mode [ 157.004695][ T6916] veth1_macvtap: entered allmulticast mode [ 157.959724][ T6919] loop0: detected capacity change from 0 to 128 [ 157.999276][ T6919] befs: (loop0): No write support. Marking filesystem read-only [ 158.044748][ T6919] befs: (loop0): invalid magic header [ 158.274755][ T6929] ubi0: attaching mtd0 [ 158.294163][ T6929] ubi0: scanning is finished [ 158.298949][ T6929] ubi0: empty MTD device detected [ 158.560129][ T6931] loop1: detected capacity change from 0 to 256 [ 158.567874][ T6931] FAT-fs (loop1): Unrecognized mount option "smackfsroot=&\:" or missing value [ 158.691443][ T6929] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 158.701336][ T6929] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 158.708731][ T6929] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 158.715763][ T6929] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 158.723446][ T6929] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 158.730440][ T6929] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 158.738526][ T6929] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1954976348 [ 158.748671][ T6929] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 158.762764][ T6932] ubi0: background thread "ubi_bgt0d" started, PID 6932 [ 159.224169][ T6942] loop1: detected capacity change from 0 to 256 [ 159.279307][ T6942] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 159.669394][ T6924] loop3: detected capacity change from 0 to 32768 [ 159.676514][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 159.694571][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 159.712138][ T6924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.309 (6924) [ 159.781048][ T6924] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.795803][ T6924] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 159.811002][ T6924] BTRFS info (device loop3): using free space tree [ 160.003374][ T6924] BTRFS info (device loop3): enabling ssd optimizations [ 160.045740][ T6924] BTRFS info (device loop3): auto enabling async discard [ 160.319617][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.378763][ T5871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.561326][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 160.579099][ T5871] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.617572][ T5871] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 160.636867][ T5871] usb 1-1: config 3 has an invalid interface number: 25 but max is 1 [ 160.655260][ T5871] usb 1-1: config 3 has an invalid interface descriptor of length 6, skipping [ 160.677782][ T5871] usb 1-1: config 3 has no interface number 0 [ 160.683952][ T5871] usb 1-1: config 3 has no interface number 1 [ 160.706893][ T5871] usb 1-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 160.761227][ T5871] usb 1-1: config 3 interface 25 has no altsetting 0 [ 160.785222][ T5871] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 160.810148][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.824942][ T5871] usb 1-1: Product: syz [ 160.833569][ T5871] usb 1-1: Manufacturer: syz [ 160.842993][ T6987] Bluetooth: MGMT ver 1.22 [ 160.848134][ T5871] usb 1-1: SerialNumber: syz [ 161.098874][ T5871] usb 1-1: USB disconnect, device number 12 [ 161.244054][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.323'. [ 161.267125][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.323'. [ 162.291222][ T6985] loop2: detected capacity change from 0 to 32768 [ 162.300673][ T6985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.319 (6985) [ 162.328510][ T6985] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.346805][ T6985] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 162.355606][ T6985] BTRFS info (device loop2): enabling auto defrag [ 162.387222][ T6985] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 162.414482][ T6985] BTRFS info (device loop2): use zstd compression, level 3 [ 162.423158][ T6985] BTRFS info (device loop2): turning on async discard [ 162.438360][ T6985] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 162.454072][ T6985] BTRFS info (device loop2): trying to use backup root at mount time [ 162.463115][ T6985] BTRFS info (device loop2): enabling ssd optimizations [ 162.470611][ T6985] BTRFS info (device loop2): using spread ssd allocation scheme [ 162.479123][ T6985] BTRFS info (device loop2): force zlib compression, level 3 [ 162.488749][ T6985] BTRFS info (device loop2): using free space tree [ 162.537481][ T5871] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 162.564804][ T140] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 162.580928][ T6985] BTRFS error (device loop2): failed to load root extent [ 162.591019][ T6985] BTRFS warning (device loop2): try to load backup roots slot 1 [ 162.601873][ T42] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 162.615881][ T6985] BTRFS warning (device loop2): couldn't read tree root [ 162.623637][ T6985] BTRFS warning (device loop2): try to load backup roots slot 2 [ 162.632216][ T59] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 162.651258][ T6985] BTRFS warning (device loop2): couldn't read tree root [ 162.666606][ T6985] BTRFS warning (device loop2): try to load backup roots slot 3 [ 162.692743][ T6985] BTRFS info (device loop2): rebuilding free space tree [ 162.739516][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 162.756073][ T5871] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 162.765760][ T5871] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.778831][ T5871] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.788902][ T5871] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.795397][ T6985] BTRFS info (device loop2): checking UUID tree [ 162.804185][ T5871] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.822443][ T5871] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.832984][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.062885][ T5871] usb 4-1: usb_control_msg returned -32 [ 163.073482][ T5871] usbtmc 4-1:16.0: can't read capabilities [ 163.165812][ T5773] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.286099][ T5871] usb 4-1: USB disconnect, device number 10 [ 163.502878][ T7006] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 165.731118][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 166.230839][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.333'. [ 166.242803][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.333'. [ 167.546518][ T7065] befs: (nullb0): invalid magic header [ 167.560012][ T7065] loop3: detected capacity change from 0 to 512 [ 167.567238][ T7065] EXT4-fs: Ignoring removed bh option [ 167.586159][ T7065] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 167.600065][ T7065] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 167.646744][ T5778] udevd[5778]: incorrect ext4 checksum on /dev/loop3 [ 167.955210][ T7075] loop3: detected capacity change from 0 to 4096 [ 167.978285][ T7075] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 168.033328][ T7075] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 168.050290][ T7075] ntfs3: loop3: Inode r=b is not in use! [ 168.056312][ T7075] ntfs3: loop3: Failed to load $Extend (-116). [ 168.064362][ T7075] ntfs3: loop3: Failed to initialize $Extend. [ 168.118880][ T7075] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 168.445811][ T7083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 168.469526][ T7083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 168.646733][ T5871] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.965436][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 169.023499][ T5871] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 169.133291][ T5871] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.502116][ T5871] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.512422][ T5871] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.527720][ T5871] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.556647][ T5871] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.565776][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.703783][ T7098] x_tables: duplicate underflow at hook 1 [ 170.731581][ T5871] usb 1-1: usb_control_msg returned -32 [ 170.737431][ T5871] usbtmc 1-1:16.0: can't read capabilities [ 170.884539][ T7092] loop1: detected capacity change from 0 to 16384 [ 170.917436][ T7092] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 170.935189][ T5928] usb 1-1: USB disconnect, device number 13 [ 170.954397][ T7092] UDF-fs: Scanning with blocksize 512 failed [ 171.001881][ T7092] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 171.022124][ T7092] UDF-fs: Scanning with blocksize 1024 failed [ 171.044567][ T7092] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 171.066871][ T7092] UDF-fs: Scanning with blocksize 2048 failed [ 171.088750][ T7092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.349282][ T7109] batman_adv: batadv0: Adding interface: dummy0 [ 171.355630][ T7109] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.381037][ T7109] batman_adv: batadv0: Interface activated: dummy0 [ 171.927719][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 171.948098][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 173.247996][ T7134] loop2: detected capacity change from 0 to 4096 [ 173.271798][ T7134] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 174.876779][ T5871] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 175.071034][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 175.082923][ T5871] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 175.097928][ T5871] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.110565][ T5871] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.136837][ T5871] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.174427][ T5871] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.211035][ T5871] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.232900][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.531490][ T5871] usb 3-1: usb_control_msg returned -32 [ 175.537359][ T5871] usbtmc 3-1:16.0: can't read capabilities [ 176.268571][ T5871] usb 3-1: USB disconnect, device number 14 [ 178.089693][ T7184] netlink: 96 bytes leftover after parsing attributes in process `syz.0.377'. [ 178.193185][ T7189] loop3: detected capacity change from 0 to 2048 [ 178.259934][ T7189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.416734][ T5928] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 178.636883][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 178.730207][ T7203] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 178.768218][ T7203] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 178.804326][ T7203] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 178.811957][ T7203] overlayfs: failed to verify upper root origin [ 178.867132][ T5928] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 178.934603][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.015997][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.068410][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.101210][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.134232][ T5928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.250837][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.475476][ T7207] loop1: detected capacity change from 0 to 40427 [ 179.491043][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.501356][ T7207] F2FS-fs (loop1): LFS is not compatible with checkpoint=disable [ 179.551474][ T5778] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.703803][ T7212] "syz.3.385" (7212) uses obsolete ecb(arc4) skcipher [ 179.744039][ T5928] usb 3-1: usb_control_msg returned -32 [ 179.750950][ T5928] usbtmc 3-1:16.0: can't read capabilities [ 179.978688][ T5928] usb 3-1: USB disconnect, device number 15 [ 181.896671][ T1191] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 182.098514][ T1191] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 64 [ 182.116644][ T1191] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.126492][ T1191] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 0 [ 182.146616][ T1191] usb 2-1: config 1 interface 0 has no altsetting 0 [ 182.155673][ T1191] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.166670][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.186627][ T1191] usb 2-1: Product: syz [ 182.190874][ T1191] usb 2-1: Manufacturer: syz [ 182.195510][ T1191] usb 2-1: SerialNumber: syz [ 182.207106][ T7239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.412991][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.398'. [ 182.428413][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.398'. [ 182.466162][ T1191] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 182.490667][ T1191] usb 2-1: USB disconnect, device number 13 [ 183.018588][ T5928] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.377613][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 183.439280][ T5928] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 183.535989][ T5928] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.764627][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.821010][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.867375][ T5928] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.941741][ T5928] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.983596][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.210344][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 184.236872][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 184.318110][ T7277] loop1: detected capacity change from 0 to 128 [ 184.380231][ T7277] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.450946][ T7277] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.499047][ T5928] usb 1-1: usb_control_msg returned -32 [ 184.505937][ T5928] usbtmc 1-1:16.0: can't read capabilities [ 184.525473][ T5928] usb 1-1: USB disconnect, device number 14 [ 185.964851][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.296185][ T7293] capability: warning: `syz.0.413' uses deprecated v2 capabilities in a way that may be insecure [ 186.648304][ T7290] loop2: detected capacity change from 0 to 40427 [ 186.668577][ T7290] F2FS-fs (loop2): Invalid Fs Meta Ino: node(2305) meta(2) root(3) [ 186.717933][ T7290] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 186.759644][ T7290] F2FS-fs (loop2): invalid crc value [ 186.873856][ T7290] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.045290][ T7290] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 187.058549][ T7290] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.187117][ T7290] Illegal XDP return value 2456994548 on prog (id 10) dev syz_tun, expect packet loss! [ 187.326562][ C0] sched: RT throttling activated [ 187.531730][ T7303] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 187.591054][ T7303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.638308][ T7309] macvlan2: entered promiscuous mode [ 187.644391][ T7309] macvlan2: entered allmulticast mode [ 187.654985][ T7309] bond1: entered promiscuous mode [ 187.673463][ T7309] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.758843][ T7309] bond1: left promiscuous mode [ 187.847409][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 187.857133][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 187.974979][ T7320] binder: BINDER_SET_CONTEXT_MGR already set [ 187.997462][ T7320] binder: 7319:7320 ioctl 4018620d 200000004a80 returned -16 [ 188.027730][ T7320] binder: 7319:7320 unknown command 0 [ 188.033193][ T7320] binder: 7319:7320 ioctl c0306201 200000000240 returned -22 [ 188.274495][ T7331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.423'. [ 188.954907][ T7337] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 189.002020][ T7337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.035910][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 189.067421][ T7337] bond3: (slave bridge2): making interface the new active one [ 189.079912][ T7337] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 189.730521][ T7349] overlayfs: failed to resolve './file2': -2 [ 190.001848][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 190.031764][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 190.408383][ T1191] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 190.494113][ T7361] loop2: detected capacity change from 0 to 64 [ 190.666773][ T1191] usb 2-1: Using ep0 maxpacket: 8 [ 190.763030][ T1191] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 190.893194][ T1191] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.091517][ T1191] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.148792][ T1191] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.201475][ T1191] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.285729][ T1191] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.310682][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.324742][ T7365] vlan0: entered promiscuous mode [ 191.351338][ T1191] usb 2-1: can't set config #16, error -71 [ 191.386972][ T1191] usb 2-1: USB disconnect, device number 14 [ 191.568206][ T7353] loop3: detected capacity change from 0 to 32768 [ 191.591651][ T7353] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.430 (7353) [ 191.649425][ T7375] overlayfs: failed to resolve './file2': -2 [ 191.676896][ T7353] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 191.706695][ T7353] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 191.730829][ T7353] BTRFS info (device loop3): use zlib compression, level 3 [ 191.753453][ T7353] BTRFS info (device loop3): using free space tree [ 191.826811][ T7353] BTRFS info (device loop3): enabling ssd optimizations [ 191.862011][ T7353] BTRFS info (device loop3): auto enabling async discard [ 191.957605][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 191.970310][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 192.077740][ T5776] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 192.132586][ T7398] loop1: detected capacity change from 0 to 128 [ 192.216726][ T7398] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.247126][ T7398] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.253552][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.686655][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 193.739632][ T7417] overlayfs: failed to resolve './file2': -2 [ 193.775789][ T7418] loop1: detected capacity change from 0 to 512 [ 193.783650][ T7418] EXT4-fs: Ignoring removed bh option [ 193.802574][ T7418] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 193.825561][ T7418] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 193.863468][ T5778] udevd[5778]: incorrect ext4 checksum on /dev/loop1 [ 194.042590][ T7422] loop1: detected capacity change from 0 to 64 [ 194.084975][ T7422] hfs: unable to locate alternate MDB [ 194.092578][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 194.098960][ T7422] hfs: continuing without an alternate MDB [ 194.111810][ T5928] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 194.120297][ T5928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.130141][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.139967][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.149961][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.164400][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.184307][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.302749][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 194.312358][ T7424] bridge_slave_1: left allmulticast mode [ 194.318193][ T7424] bridge_slave_1: left promiscuous mode [ 194.324926][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.361315][ T7424] bridge_slave_0: left allmulticast mode [ 194.367193][ T7424] bridge_slave_0: left promiscuous mode [ 194.373954][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.500122][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.047337][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'. [ 195.065122][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'. [ 195.066513][ T5928] usb 4-1: usb_control_msg returned -32 [ 195.079923][ T5928] usbtmc 4-1:16.0: can't read capabilities [ 195.201776][ T5928] usb 4-1: USB disconnect, device number 11 [ 195.706014][ T7439] loop2: detected capacity change from 0 to 512 [ 196.778360][ T7439] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 196.787016][ T7439] EXT4-fs (loop2): DAX unsupported by block device. [ 197.827939][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 198.757337][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.462'. [ 198.789267][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.462'. [ 199.464512][ T7453] loop2: detected capacity change from 0 to 32768 [ 199.514510][ T7453] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.459 (7453) [ 200.401706][ T7453] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 200.426600][ T7453] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 200.447172][ T7453] BTRFS info (device loop2): setting nodatasum [ 200.456467][ T7453] BTRFS info (device loop2): using free space tree [ 200.707648][ T7483] loop3: detected capacity change from 0 to 2048 [ 200.714603][ T7453] BTRFS info (device loop2): enabling ssd optimizations [ 200.736879][ T7453] BTRFS info (device loop2): auto enabling async discard [ 200.828248][ T7483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.876673][ T6099] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 201.283701][ T7493] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 201.318291][ T7494] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 201.334687][ T7493] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 201.354384][ T7493] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 201.361738][ T7493] overlayfs: failed to verify upper root origin [ 201.586931][ T5773] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 201.873905][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.922954][ T6099] usb 1-1: Using ep0 maxpacket: 8 [ 201.958265][ T6099] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 201.976878][ T6099] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.030981][ T6099] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.046707][ T6099] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.073127][ T6099] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.087399][ T6099] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.096499][ T6099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.534030][ T7496] loop1: detected capacity change from 0 to 32768 [ 202.544225][ T7496] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.467 (7496) [ 202.568308][ T6099] usb 1-1: usb_control_msg returned -71 [ 202.576312][ T6099] usbtmc 1-1:16.0: can't read capabilities [ 202.603840][ T6099] usb 1-1: USB disconnect, device number 15 [ 202.611378][ T7496] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.650284][ T7496] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 202.673504][ T7496] BTRFS info (device loop1): allowing degraded mounts [ 202.694253][ T7496] BTRFS info (device loop1): turning on flush-on-commit [ 202.727681][ T7496] BTRFS info (device loop1): max_inline at 0 [ 202.733764][ T7496] BTRFS info (device loop1): setting nodatasum [ 202.741956][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.471'. [ 202.776310][ T7496] BTRFS info (device loop1): turning on sync discard [ 202.784061][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.471'. [ 202.794550][ T7496] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 202.821205][ T7496] BTRFS info (device loop1): trying to use backup root at mount time [ 202.847418][ T7496] BTRFS info (device loop1): using free space tree [ 202.936253][ T7527] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.944288][ T7527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.952112][ T7527] IPv6: NLM_F_CREATE should be set when creating new route [ 202.959446][ T7527] IPv6: NLM_F_CREATE should be set when creating new route [ 202.966763][ T7527] IPv6: NLM_F_CREATE should be set when creating new route [ 202.978577][ T7527] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.473'. [ 202.987998][ T7527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.001310][ T7496] BTRFS info (device loop1): enabling ssd optimizations [ 203.275508][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.096846][ T1191] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 255.921401][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.366681][ C0] ------------[ cut here ]------------ [ 317.373463][ C0] WARNING: CPU: 0 PID: 7574 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 317.384027][ C0] Modules linked in: [ 317.387950][ C0] CPU: 0 PID: 7574 Comm: syz.3.485 Not tainted syzkaller #0 [ 317.395254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.405400][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 317.411758][ C0] Code: ff ff ff 48 c7 c7 a0 64 31 97 be 04 00 00 00 e8 7a eb 6d 00 48 89 df b8 01 00 00 00 87 05 7c e2 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff c0 73 13 8d 74 47 48 c7 c0 1c 9b 8b 8e 48 c1 e8 03 [ 317.431372][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 317.437445][ C0] RAX: 0000000000000000 RBX: ffffffff8d1373c0 RCX: ffffffff81718216 [ 317.445425][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d1373c0 [ 317.453424][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 317.461436][ C0] R10: dffffc0000000000 R11: fffffbfff2e62c94 R12: 0000000000002904 [ 317.469431][ C0] R13: ffffffff8d1373c0 R14: 0000000000000a02 R15: dffffc0000000000 [ 317.477455][ C0] FS: 00007f4f4b2396c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 317.486429][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.493029][ C0] CR2: 000020000009c030 CR3: 000000005f34f000 CR4: 00000000003506f0 [ 317.501460][ C0] Call Trace: [ 317.504767][ C0] [ 317.507644][ C0] rcu_core+0x635/0x1770 [ 317.511914][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 317.517126][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 317.522177][ C0] ? rebalance_domains+0x132/0xa10 [ 317.527398][ C0] handle_softirqs+0x280/0x820 [ 317.532178][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 317.536953][ C0] ? do_softirq+0x1a0/0x1a0 [ 317.541466][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 317.546678][ C0] __irq_exit_rcu+0xd3/0x190 [ 317.551294][ C0] ? irq_exit_rcu+0x20/0x20 [ 317.555853][ C0] irq_exit_rcu+0x9/0x20 [ 317.560119][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 317.565786][ C0] [ 317.568726][ C0] [ 317.571664][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.577687][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 317.583553][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a ac d6 f6 48 89 df e8 c2 80 d7 f6 e8 bd 98 fb f6 fb bf 01 00 00 00 a2 87 ca f6 65 8b 05 33 b0 71 75 85 c0 74 02 5b c3 e8 30 97 6e [ 317.603200][ C0] RSP: 0018:ffffc9000ba4fc78 EFLAGS: 00000286 [ 317.609321][ C0] RAX: f0dd2bb8f5153100 RBX: ffff88805f30e5c0 RCX: f0dd2bb8f5153100 [ 317.617309][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 317.625466][ C0] RBP: ffff88805f30e858 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 317.633468][ C0] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: 1ffff1100be61d0b [ 317.641461][ C0] R13: 0000000000000011 R14: dffffc0000000000 R15: 0000000000000000 [ 317.649467][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.654775][ C0] get_signal+0x11f5/0x13f0 [ 317.659310][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 317.664879][ C0] ? get_sigframe_size+0x20/0x20 [ 317.669852][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 317.675334][ C0] exit_to_user_mode_loop+0x70/0x110 [ 317.680638][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 317.686201][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 317.691699][ C0] do_syscall_64+0x61/0xb0 [ 317.696135][ C0] ? clear_bhb_loop+0x40/0x90 [ 317.700826][ C0] ? clear_bhb_loop+0x40/0x90 [ 317.705537][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.711457][ C0] RIP: 0033:0x7ffdbcfa5a0a [ 317.715906][ C0] Code: 89 fd e8 29 03 00 00 44 89 ef 48 8b 75 c8 48 85 c0 0f 88 cb 00 00 00 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 <48> bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 [ 317.735554][ C0] RSP: 002b:00007f4f4b238ff0 EFLAGS: 00000216 [ 317.741641][ C0] RAX: 003745ef1194b46e RBX: 00007ffdbcfa10b0 RCX: 0000000000000018 [ 317.749621][ C0] RDX: 0000000001aa8b56 RSI: 00007f4f4b2390b0 RDI: 0000000000000001 [ 317.757608][ C0] RBP: 00007f4f4b239030 R08: 00000000000000e1 R09: 0000000000745d1e [ 317.765588][ C0] R10: 00000077f2b8234a R11: 000000000000aa6c R12: 0000000000000010 [ 317.773569][ C0] R13: 00007f4f4a616038 R14: 00007ffdbcfa1080 R15: 000000000000aa6c [ 317.781587][ C0] [ 317.784615][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.791905][ C0] CPU: 0 PID: 7574 Comm: syz.3.485 Not tainted syzkaller #0 [ 317.799194][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.809254][ C0] Call Trace: [ 317.812561][ C0] [ 317.815417][ C0] dump_stack_lvl+0x18c/0x250 [ 317.820113][ C0] ? show_regs_print_info+0x20/0x20 [ 317.825323][ C0] ? load_image+0x420/0x420 [ 317.829841][ C0] panic+0x2dc/0x730 [ 317.833753][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 317.838279][ C0] __warn+0x2e0/0x470 [ 317.842272][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 317.848012][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 317.853764][ C0] report_bug+0x2be/0x4f0 [ 317.858106][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 317.863837][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 317.869570][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 317.875308][ C0] handle_bug+0xcf/0x120 [ 317.879563][ C0] exc_invalid_op+0x1a/0x50 [ 317.884076][ C0] asm_exc_invalid_op+0x1a/0x20 [ 317.888945][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 317.895319][ C0] Code: ff ff ff 48 c7 c7 a0 64 31 97 be 04 00 00 00 e8 7a eb 6d 00 48 89 df b8 01 00 00 00 87 05 7c e2 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff c0 73 13 8d 74 47 48 c7 c0 1c 9b 8b 8e 48 c1 e8 03 [ 317.914938][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 317.921102][ C0] RAX: 0000000000000000 RBX: ffffffff8d1373c0 RCX: ffffffff81718216 [ 317.929081][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d1373c0 [ 317.937079][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 317.945055][ C0] R10: dffffc0000000000 R11: fffffbfff2e62c94 R12: 0000000000002904 [ 317.953049][ C0] R13: ffffffff8d1373c0 R14: 0000000000000a02 R15: dffffc0000000000 [ 317.961043][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 317.966800][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 317.972542][ C0] rcu_core+0x635/0x1770 [ 317.976830][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 317.982043][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 317.987092][ C0] ? rebalance_domains+0x132/0xa10 [ 317.992213][ C0] handle_softirqs+0x280/0x820 [ 317.997005][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 318.001783][ C0] ? do_softirq+0x1a0/0x1a0 [ 318.006298][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 318.011515][ C0] __irq_exit_rcu+0xd3/0x190 [ 318.016114][ C0] ? irq_exit_rcu+0x20/0x20 [ 318.020804][ C0] irq_exit_rcu+0x9/0x20 [ 318.025052][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 318.030878][ C0] [ 318.033834][ C0] [ 318.036789][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.042827][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 318.048679][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a ac d6 f6 48 89 df e8 c2 80 d7 f6 e8 bd 98 fb f6 fb bf 01 00 00 00 a2 87 ca f6 65 8b 05 33 b0 71 75 85 c0 74 02 5b c3 e8 30 97 6e [ 318.068301][ C0] RSP: 0018:ffffc9000ba4fc78 EFLAGS: 00000286 [ 318.074395][ C0] RAX: f0dd2bb8f5153100 RBX: ffff88805f30e5c0 RCX: f0dd2bb8f5153100 [ 318.082379][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 318.090366][ C0] RBP: ffff88805f30e858 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 318.098355][ C0] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: 1ffff1100be61d0b [ 318.106338][ C0] R13: 0000000000000011 R14: dffffc0000000000 R15: 0000000000000000 [ 318.114340][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.119559][ C0] get_signal+0x11f5/0x13f0 [ 318.124104][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 318.129675][ C0] ? get_sigframe_size+0x20/0x20 [ 318.134642][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 318.140134][ C0] exit_to_user_mode_loop+0x70/0x110 [ 318.145438][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 318.150998][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 318.156482][ C0] do_syscall_64+0x61/0xb0 [ 318.160928][ C0] ? clear_bhb_loop+0x40/0x90 [ 318.165613][ C0] ? clear_bhb_loop+0x40/0x90 [ 318.170300][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.176212][ C0] RIP: 0033:0x7ffdbcfa5a0a [ 318.180638][ C0] Code: 89 fd e8 29 03 00 00 44 89 ef 48 8b 75 c8 48 85 c0 0f 88 cb 00 00 00 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 <48> bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 [ 318.200248][ C0] RSP: 002b:00007f4f4b238ff0 EFLAGS: 00000216 [ 318.206321][ C0] RAX: 003745ef1194b46e RBX: 00007ffdbcfa10b0 RCX: 0000000000000018 [ 318.214330][ C0] RDX: 0000000001aa8b56 RSI: 00007f4f4b2390b0 RDI: 0000000000000001 [ 318.222315][ C0] RBP: 00007f4f4b239030 R08: 00000000000000e1 R09: 0000000000745d1e [ 318.230296][ C0] R10: 00000077f2b8234a R11: 000000000000aa6c R12: 0000000000000010 [ 318.238274][ C0] R13: 00007f4f4a616038 R14: 00007ffdbcfa1080 R15: 000000000000aa6c [ 318.246261][ C0] [ 319.361840][ C0] Shutting down cpus with NMI [ 319.366779][ C0] Kernel Offset: disabled [ 319.371534][ C0] Rebooting in 86400 seconds..