last executing test programs: 57.243665773s ago: executing program 0 (id=535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r0}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 55.753787048s ago: executing program 0 (id=542): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x4, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000480)='H', 0x1}], 0x1}}], 0x1, 0x4004800) 54.133709282s ago: executing program 0 (id=548): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0xfffffd5f) 52.908717635s ago: executing program 0 (id=554): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00'], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc000) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 50.944995602s ago: executing program 0 (id=560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000b00000000000000008008001e000100000008"], 0x2c}}, 0x0) 49.323744167s ago: executing program 0 (id=564): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0}, 0x3400d840) r1 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 45.345717189s ago: executing program 32 (id=564): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0}, 0x3400d840) r1 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 8.075388801s ago: executing program 1 (id=736): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2001"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.528265039s ago: executing program 2 (id=748): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) 5.403244828s ago: executing program 5 (id=749): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 5.390025978s ago: executing program 4 (id=750): r0 = syz_io_uring_setup(0x49f, &(0x7f0000001000)={0x0, 0x54e9, 0x0, 0x7, 0x40024f}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4040000}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 4.984448287s ago: executing program 1 (id=751): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000000}) sendto$inet6(r0, &(0x7f00000004c0)="80009ba1ced2e4fa", 0x8, 0x49010, &(0x7f0000001100)={0xa, 0x0, 0x9, @loopback, 0x401}, 0x1c) 4.904310004s ago: executing program 3 (id=752): r0 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 4.876352378s ago: executing program 2 (id=753): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) stat(0x0, 0x0) 4.725703647s ago: executing program 5 (id=754): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 4.675774916s ago: executing program 4 (id=755): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40046607, 0x0) 4.129059851s ago: executing program 1 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 3.743525708s ago: executing program 3 (id=757): setregid(0xee00, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x0, &(0x7f00000001c0)) 3.635415874s ago: executing program 2 (id=758): fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000000100)) 3.273034513s ago: executing program 5 (id=759): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="3303120081fd120000007ef52f55682a0c09000000fd88a800f788a83baaeb28", 0x20, 0x40008c0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0xcf, 0x6, @random="220ba33d3994"}, 0x14) 3.032530579s ago: executing program 1 (id=760): r0 = socket(0x10, 0x3, 0x0) ppoll(&(0x7f0000000380)=[{r0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 3.032142651s ago: executing program 3 (id=761): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2.982057843s ago: executing program 4 (id=762): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 2.883534811s ago: executing program 2 (id=763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="b0f5b4ade491"}) 2.433232333s ago: executing program 2 (id=764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 2.425886326s ago: executing program 5 (id=774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x220}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 2.417682755s ago: executing program 3 (id=765): r0 = syz_io_uring_setup(0x49f, &(0x7f0000001000)={0x0, 0x54e9, 0x0, 0x7, 0x40024f}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4040000}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 2.159576224s ago: executing program 4 (id=766): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1004000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.836990477s ago: executing program 2 (id=767): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000540)={0x1, 0x79, 0x2, &(0x7f0000000040)={0x16, "03eb341bf0ead3c126c73da429a3f7eeb637eecf3b620c00"}}) 1.75739804s ago: executing program 1 (id=768): r0 = gettid() socket$inet6(0xa, 0x2, 0x4) tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, {[0x8000000000000001]}}, 0x0, 0x8, &(0x7f0000000000)) 1.642096945s ago: executing program 4 (id=769): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 1.635004121s ago: executing program 3 (id=780): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 968.332484ms ago: executing program 5 (id=770): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x4}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @remote}}]}, 0x10c) syz_emit_ethernet(0x66, &(0x7f0000000580)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 213.117742ms ago: executing program 1 (id=771): r0 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 212.941703ms ago: executing program 3 (id=772): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)=""/38, 0x26}], 0x1}, 0x2174eda0}], 0x1, 0x1, 0x0) 47.237961ms ago: executing program 4 (id=773): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x406) 0s ago: executing program 5 (id=785): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x4031, 0xffffffffffffffff, 0x77e3b000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.241' (ED25519) to the list of known hosts. [ 200.793582][ T5795] cgroup: Unknown subsys name 'net' [ 200.927812][ T5795] cgroup: Unknown subsys name 'cpuset' [ 200.944706][ T5795] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 208.121387][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 212.843246][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.852319][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.863417][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.873446][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.883811][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.893195][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.901152][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.927025][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.935800][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.939662][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.948482][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.951528][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.961671][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.970586][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.980475][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.981665][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.003499][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.007107][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.029021][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.037858][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.067956][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.076934][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.090458][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.110287][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.122865][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.501180][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 215.047237][ T5830] Bluetooth: hci1: command tx timeout [ 215.125236][ T5830] Bluetooth: hci0: command tx timeout [ 215.130981][ T5830] Bluetooth: hci2: command tx timeout [ 215.159335][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 215.210093][ T5828] Bluetooth: hci3: command tx timeout [ 215.215987][ T5830] Bluetooth: hci4: command tx timeout [ 215.732273][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 216.019748][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 216.045301][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.053192][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.061157][ T5812] bridge_slave_0: entered allmulticast mode [ 216.071364][ T5812] bridge_slave_0: entered promiscuous mode [ 216.161148][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.169636][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.177730][ T5812] bridge_slave_1: entered allmulticast mode [ 216.188072][ T5812] bridge_slave_1: entered promiscuous mode [ 216.237455][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 216.618714][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.910091][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.125627][ T5828] Bluetooth: hci1: command tx timeout [ 217.178636][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.186686][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.194385][ T5813] bridge_slave_0: entered allmulticast mode [ 217.204737][ T5813] bridge_slave_0: entered promiscuous mode [ 217.205317][ T5828] Bluetooth: hci2: command tx timeout [ 217.216773][ T5830] Bluetooth: hci0: command tx timeout [ 217.285204][ T5828] Bluetooth: hci3: command tx timeout [ 217.291058][ T5828] Bluetooth: hci4: command tx timeout [ 217.370954][ T5812] team0: Port device team_slave_0 added [ 217.408853][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.416852][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.424730][ T5813] bridge_slave_1: entered allmulticast mode [ 217.435340][ T5813] bridge_slave_1: entered promiscuous mode [ 217.519955][ T5812] team0: Port device team_slave_1 added [ 217.529340][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.537171][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.545166][ T5811] bridge_slave_0: entered allmulticast mode [ 217.555475][ T5811] bridge_slave_0: entered promiscuous mode [ 217.787565][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.795487][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.803187][ T5811] bridge_slave_1: entered allmulticast mode [ 217.811966][ T5811] bridge_slave_1: entered promiscuous mode [ 217.876686][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.886714][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.894406][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.905783][ T5822] bridge_slave_0: entered allmulticast mode [ 217.914743][ T5822] bridge_slave_0: entered promiscuous mode [ 217.930265][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.938224][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.946029][ T5822] bridge_slave_1: entered allmulticast mode [ 217.956327][ T5822] bridge_slave_1: entered promiscuous mode [ 217.973251][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.980427][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.007430][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.114490][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.258553][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.267421][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.295174][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.369127][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.377062][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.384729][ T5823] bridge_slave_0: entered allmulticast mode [ 218.394981][ T5823] bridge_slave_0: entered promiscuous mode [ 218.423392][ T5813] team0: Port device team_slave_0 added [ 218.497707][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.520951][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.532754][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.540741][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.549045][ T5823] bridge_slave_1: entered allmulticast mode [ 218.558313][ T5823] bridge_slave_1: entered promiscuous mode [ 218.577684][ T5813] team0: Port device team_slave_1 added [ 218.646205][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.715548][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.032257][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.051247][ T5811] team0: Port device team_slave_0 added [ 219.071562][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.087851][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.096266][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.122807][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.182245][ T5822] team0: Port device team_slave_0 added [ 219.208367][ T5812] hsr_slave_0: entered promiscuous mode [ 219.219765][ T5812] hsr_slave_1: entered promiscuous mode [ 219.233426][ T5828] Bluetooth: hci1: command tx timeout [ 219.285444][ T5828] Bluetooth: hci2: command tx timeout [ 219.288002][ T5811] team0: Port device team_slave_1 added [ 219.291190][ T5830] Bluetooth: hci0: command tx timeout [ 219.301723][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.310054][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.336731][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.388736][ T5828] Bluetooth: hci4: command tx timeout [ 219.394468][ T5828] Bluetooth: hci3: command tx timeout [ 219.416514][ T5822] team0: Port device team_slave_1 added [ 219.646178][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.653384][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.682557][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.705515][ T5823] team0: Port device team_slave_0 added [ 219.716229][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.723480][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.750285][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.863938][ T5823] team0: Port device team_slave_1 added [ 219.930367][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.938250][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.965143][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.129578][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.138125][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.164973][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.340427][ T5811] hsr_slave_0: entered promiscuous mode [ 220.351879][ T5811] hsr_slave_1: entered promiscuous mode [ 220.361449][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 220.367701][ T5811] Cannot create hsr debugfs directory [ 220.398394][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.405898][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.432707][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.461414][ T5813] hsr_slave_0: entered promiscuous mode [ 220.471497][ T5813] hsr_slave_1: entered promiscuous mode [ 220.480867][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 220.486949][ T5813] Cannot create hsr debugfs directory [ 220.563856][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.571262][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.598545][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.255610][ T5822] hsr_slave_0: entered promiscuous mode [ 221.265899][ T5822] hsr_slave_1: entered promiscuous mode [ 221.274291][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 221.281334][ T5822] Cannot create hsr debugfs directory [ 221.299211][ T5828] Bluetooth: hci1: command tx timeout [ 221.306530][ T5823] hsr_slave_0: entered promiscuous mode [ 221.317389][ T5823] hsr_slave_1: entered promiscuous mode [ 221.325925][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 221.332046][ T5823] Cannot create hsr debugfs directory [ 221.375701][ T5828] Bluetooth: hci2: command tx timeout [ 221.380992][ T5830] Bluetooth: hci0: command tx timeout [ 221.445519][ T5830] Bluetooth: hci4: command tx timeout [ 221.451258][ T5830] Bluetooth: hci3: command tx timeout [ 222.012129][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.110305][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.231231][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.393016][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.703701][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.731330][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.848797][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.970099][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.259983][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.308629][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.397346][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.423443][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.584312][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.719034][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.840322][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.878967][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.073741][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.170987][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.207886][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.257018][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.404802][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.817100][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.888288][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.036422][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.044153][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.117681][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.176959][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.271808][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.279488][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.305215][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.312945][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.646395][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.674177][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.681872][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.912137][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.919930][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.965490][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.973126][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.040768][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.187615][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.293579][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.305671][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.536834][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.608706][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.705073][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.712698][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.941757][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.949743][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.080713][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.307972][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.315788][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.458432][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.500431][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.508216][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.674259][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.983475][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.057369][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.492342][ T5812] veth0_vlan: entered promiscuous mode [ 229.737774][ T5812] veth1_vlan: entered promiscuous mode [ 229.784094][ T5811] veth0_vlan: entered promiscuous mode [ 229.815207][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.821913][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.921879][ T5811] veth1_vlan: entered promiscuous mode [ 230.039009][ T5813] veth0_vlan: entered promiscuous mode [ 230.133143][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.268691][ T5813] veth1_vlan: entered promiscuous mode [ 230.348117][ T5812] veth0_macvtap: entered promiscuous mode [ 230.418020][ T5811] veth0_macvtap: entered promiscuous mode [ 230.435627][ T5812] veth1_macvtap: entered promiscuous mode [ 230.493361][ T5811] veth1_macvtap: entered promiscuous mode [ 230.763727][ T5813] veth0_macvtap: entered promiscuous mode [ 230.789265][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.827895][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.863827][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.873526][ T5813] veth1_macvtap: entered promiscuous mode [ 230.935389][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.991985][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.102196][ T3561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.141628][ T3561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.190877][ T3561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.260705][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.270537][ T1332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.352155][ T3718] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.394614][ T3718] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.440813][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.486515][ T5103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.542982][ T5103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.617129][ T3718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.661520][ T3718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.706882][ T3718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.780031][ T3718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.834377][ T5823] veth0_vlan: entered promiscuous mode [ 231.944068][ T5823] veth1_vlan: entered promiscuous mode [ 232.313938][ T5823] veth0_macvtap: entered promiscuous mode [ 232.432931][ T5823] veth1_macvtap: entered promiscuous mode [ 232.679151][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.797906][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.921282][ T3561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.956912][ T1131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.000570][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.075671][ T5103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.072442][ T5822] veth0_vlan: entered promiscuous mode [ 234.242898][ T5822] veth1_vlan: entered promiscuous mode [ 234.728482][ T5822] veth0_macvtap: entered promiscuous mode [ 234.817155][ T5822] veth1_macvtap: entered promiscuous mode [ 235.064592][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.193294][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.312986][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.417266][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.491781][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.543846][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.756277][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.764541][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.046887][ T3656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.055286][ T3656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.060855][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.071157][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.289221][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.297815][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.312808][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.323273][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.643444][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.656478][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.718635][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 241.072111][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.080941][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.563395][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.572049][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.526919][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 244.055119][ T4189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.063481][ T4189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.445921][ T3718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.454252][ T3718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.161344][ T6040] loop2: detected capacity change from 0 to 128 [ 245.209080][ T6040] ======================================================= [ 245.209080][ T6040] WARNING: The mand mount option has been deprecated and [ 245.209080][ T6040] and is ignored by this kernel. Remove the mand [ 245.209080][ T6040] option from the mount to silence this warning. [ 245.209080][ T6040] ======================================================= [ 245.458368][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 245.518709][ T6040] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 245.589420][ T6040] hpfs: filesystem error: improperly stopped [ 245.596455][ T6040] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 245.604721][ T6040] hpfs: You really don't want any checks? You are crazy... [ 245.698046][ T6040] hpfs: hpfs_map_sector(): read error [ 245.703842][ T6040] hpfs: code page support is disabled [ 245.808662][ T6040] hpfs: hpfs_map_4sectors(): unaligned read [ 245.862184][ T6040] hpfs: hpfs_map_4sectors(): unaligned read [ 245.869178][ T6040] hpfs: filesystem error: unable to find root dir [ 246.130825][ T6051] loop3: detected capacity change from 0 to 1024 [ 246.361669][ T6051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.756359][ T30] audit: type=1800 audit(1758201761.430:2): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 247.127877][ T6054] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 88: padding at end of block bitmap is not set [ 247.370956][ T6065] nbd0: detected capacity change from 0 to 127 [ 247.458467][ T5830] block nbd0: Receive control failed (result -32) [ 247.478637][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.644192][ T6070] process 'syz.2.26' launched './file0' with NULL argv: empty string added [ 247.723393][ T6008] block nbd0: Dead connection, failed to find a fallback [ 247.735456][ T6008] block nbd0: shutting down sockets [ 247.740884][ T6008] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.751182][ T6008] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.759980][ T6008] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.769654][ T6008] Buffer I/O error on dev nbd0, logical block 1, async page read [ 247.777937][ T6008] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.787423][ T6008] Buffer I/O error on dev nbd0, logical block 2, async page read [ 247.801682][ T6008] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.812941][ T6008] Buffer I/O error on dev nbd0, logical block 3, async page read [ 247.821483][ T6008] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.831017][ T6008] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.839322][ T6008] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.849033][ T6008] Buffer I/O error on dev nbd0, logical block 1, async page read [ 247.857376][ T6008] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.867197][ T6008] Buffer I/O error on dev nbd0, logical block 2, async page read [ 247.875500][ T6008] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.885178][ T6008] Buffer I/O error on dev nbd0, logical block 3, async page read [ 247.893579][ T6008] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.908975][ T6008] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.919153][ T6008] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.929989][ T6008] Buffer I/O error on dev nbd0, logical block 1, async page read [ 247.942382][ T6008] ldm_validate_partition_table(): Disk read failed. [ 247.952282][ T6008] Dev nbd0: unable to read RDB block 0 [ 247.961254][ T6008] nbd0: unable to read partition table [ 247.984014][ T6008] ldm_validate_partition_table(): Disk read failed. [ 247.994649][ T6008] Dev nbd0: unable to read RDB block 0 [ 248.008449][ T6008] nbd0: unable to read partition table [ 249.901160][ T9] IPVS: starting estimator thread 0... [ 249.925305][ T6093] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 250.031544][ T6094] IPVS: using max 192 ests per chain, 9600 per kthread [ 250.406977][ T6078] loop1: detected capacity change from 0 to 8192 [ 250.622695][ T6089] loop2: detected capacity change from 0 to 4096 [ 251.303789][ T6104] capability: warning: `syz.4.38' uses deprecated v2 capabilities in a way that may be insecure [ 251.658316][ T6108] Bluetooth: MGMT ver 1.23 [ 252.036175][ T6089] ntfs3(loop2): failed to convert "0000" to iso8859-15 [ 252.383419][ T6111] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 252.762435][ T6114] loop3: detected capacity change from 0 to 512 [ 252.833178][ T6112] loop0: detected capacity change from 0 to 1764 [ 252.949057][ T6114] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 253.007123][ T6114] EXT4-fs (loop3): orphan cleanup on readonly fs [ 253.131984][ T6114] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 253.143391][ T6114] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 253.153479][ T6114] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.43: Failed to acquire dquot type 1 [ 253.210196][ T6114] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.43: bg 0: block 40: padding at end of block bitmap is not set [ 253.315874][ T6114] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 253.475916][ T6114] EXT4-fs (loop3): 1 truncate cleaned up [ 253.486141][ T6114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.228723][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.503867][ T6135] mmap: syz.4.52 (6135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 256.463665][ T6148] loop4: detected capacity change from 0 to 256 [ 256.994646][ T6148] FAT-fs (loop4): Directory bread(block 64) failed [ 257.002408][ T6148] FAT-fs (loop4): Directory bread(block 65) failed [ 257.009674][ T6148] FAT-fs (loop4): Directory bread(block 66) failed [ 257.021321][ T6148] FAT-fs (loop4): Directory bread(block 67) failed [ 257.030249][ T6148] FAT-fs (loop4): Directory bread(block 68) failed [ 257.037250][ T6148] FAT-fs (loop4): Directory bread(block 69) failed [ 257.044199][ T6148] FAT-fs (loop4): Directory bread(block 70) failed [ 257.051274][ T6148] FAT-fs (loop4): Directory bread(block 71) failed [ 257.059080][ T6148] FAT-fs (loop4): Directory bread(block 72) failed [ 257.066033][ T6148] FAT-fs (loop4): Directory bread(block 73) failed [ 257.165644][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 258.060083][ T2070] IPVS: starting estimator thread 0... [ 258.155681][ T6162] IPVS: using max 192 ests per chain, 9600 per kthread [ 258.643042][ T4346] Bluetooth: hci5: Frame reassembly failed (-84) [ 258.672501][ T6169] loop3: detected capacity change from 0 to 128 [ 258.702187][ T6165] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 258.810613][ T6172] loop1: detected capacity change from 0 to 128 [ 259.561712][ T6179] loop1: detected capacity change from 0 to 128 [ 259.659275][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 260.647519][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 260.649938][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 261.024739][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 261.038609][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 261.787836][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 263.305903][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 263.525978][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 263.588210][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.595535][ T6226] loop4: detected capacity change from 0 to 256 [ 263.599538][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 263.722836][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.735164][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.743530][ T9] usb 2-1: Product: syz [ 263.748524][ T9] usb 2-1: Manufacturer: syz [ 263.753362][ T9] usb 2-1: SerialNumber: syz [ 263.951013][ T6228] loop2: detected capacity change from 0 to 136 [ 264.975856][ T9] usb 2-1: USB disconnect, device number 2 [ 265.262679][ T6237] loop2: detected capacity change from 0 to 64 [ 265.549736][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.498466][ T6249] loop6: detected capacity change from 0 to 524287999 [ 267.443558][ T6262] loop2: detected capacity change from 0 to 256 [ 267.493656][ T6262] exfat: Deprecated parameter 'utf8' [ 267.672220][ T6262] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 267.747348][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 268.042049][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 268.053954][ T9] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 268.063614][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.143537][ T9] usb 2-1: config 0 descriptor?? [ 268.768263][ T9] samsung 0003:0419:0600.0001: unknown main item tag 0x2 [ 268.782309][ T9] samsung 0003:0419:0600.0001: unknown main item tag 0x5 [ 268.948119][ T9] samsung 0003:0419:0600.0001: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 269.085413][ T9] usb 2-1: USB disconnect, device number 3 [ 269.480507][ T6272] loop3: detected capacity change from 0 to 2048 [ 269.788213][ T6280] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.339160][ T6278] fido_id[6278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 272.061681][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 272.391049][ T6306] loop2: detected capacity change from 0 to 64 [ 272.495594][ T6306] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 272.632264][ T6310] input: syz0 as /devices/virtual/input/input5 [ 273.660545][ T6323] loop0: detected capacity change from 0 to 256 [ 274.152017][ T6323] FAT-fs (loop0): Directory bread(block 64) failed [ 274.159295][ T6323] FAT-fs (loop0): Directory bread(block 65) failed [ 274.167514][ T6323] FAT-fs (loop0): Directory bread(block 66) failed [ 274.174381][ T6323] FAT-fs (loop0): Directory bread(block 67) failed [ 274.190201][ T6323] FAT-fs (loop0): Directory bread(block 68) failed [ 274.197852][ T6323] FAT-fs (loop0): Directory bread(block 69) failed [ 274.205156][ T6323] FAT-fs (loop0): Directory bread(block 70) failed [ 274.212000][ T6323] FAT-fs (loop0): Directory bread(block 71) failed [ 274.226356][ T6323] FAT-fs (loop0): Directory bread(block 72) failed [ 274.233159][ T6323] FAT-fs (loop0): Directory bread(block 73) failed [ 276.175361][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 276.623073][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 276.707887][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 276.913077][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 277.095408][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 277.141836][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 277.151816][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.278634][ T9] usb 4-1: config 0 descriptor?? [ 277.693229][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 277.746046][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.793857][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 277.807546][ T9] usb 4-1: media controller created [ 277.863244][ T6368] loop0: detected capacity change from 0 to 256 [ 277.940214][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.071593][ T6369] loop2: detected capacity change from 0 to 512 [ 278.233158][ T6369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.316055][ T6368] FAT-fs (loop0): Directory bread(block 64) failed [ 278.322862][ T6368] FAT-fs (loop0): Directory bread(block 65) failed [ 278.330074][ T6368] FAT-fs (loop0): Directory bread(block 66) failed [ 278.337115][ T6368] FAT-fs (loop0): Directory bread(block 67) failed [ 278.344054][ T6368] FAT-fs (loop0): Directory bread(block 68) failed [ 278.350995][ T6368] FAT-fs (loop0): Directory bread(block 69) failed [ 278.358140][ T6368] FAT-fs (loop0): Directory bread(block 70) failed [ 278.365221][ T6368] FAT-fs (loop0): Directory bread(block 71) failed [ 278.372272][ T6368] FAT-fs (loop0): Directory bread(block 72) failed [ 278.379264][ T6368] FAT-fs (loop0): Directory bread(block 73) failed [ 278.439270][ T9] az6027: usb out operation failed. (-71) [ 278.448330][ T9] az6027: usb out operation failed. (-71) [ 278.454322][ T9] stb0899_attach: Driver disabled by Kconfig [ 278.460951][ T9] az6027: no front-end attached [ 278.460951][ T9] [ 278.475712][ T9] az6027: usb out operation failed. (-71) [ 278.481734][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 278.481751][ T6369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.493333][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 278.502870][ T6369] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.626457][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 278.633866][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 278.767580][ T9] usb 4-1: USB disconnect, device number 2 [ 279.307698][ T6376] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 279.528759][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 279.560696][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.378870][ T6384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.162'. [ 280.388639][ T6384] netlink: 120 bytes leftover after parsing attributes in process `syz.0.162'. [ 280.398402][ T6384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.162'. [ 280.712653][ T6379] loop1: detected capacity change from 0 to 32768 [ 280.850311][ T6379] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.706789][ T6379] XFS (loop1): Ending clean mount [ 281.733537][ T6379] XFS (loop1): Quotacheck needed: Please wait. [ 281.787467][ T6379] XFS (loop1): Quotacheck: Done. [ 281.854701][ T2070] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 282.018635][ T5813] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.097098][ T2070] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.113314][ T2070] usb 4-1: config 0 interface 0 has no altsetting 0 [ 282.122466][ T2070] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 282.132127][ T2070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.181036][ T2070] usb 4-1: config 0 descriptor?? [ 282.781197][ T2070] wacom 0003:056A:00BA.0002: ignoring exceeding usage max [ 282.800444][ T2070] wacom 0003:056A:00BA.0002: unbalanced delimiter at end of report description [ 282.961870][ T2070] wacom 0003:056A:00BA.0002: parse failed [ 282.968731][ T2070] wacom 0003:056A:00BA.0002: probe with driver wacom failed with error -22 [ 283.073193][ T2070] usb 4-1: USB disconnect, device number 3 [ 285.925980][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 286.010216][ T3656] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 286.100959][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.109303][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.168904][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 286.233416][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.242340][ T9] usb 4-1: config 0 has no interface number 0 [ 286.365974][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 286.376077][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.385287][ T9] usb 4-1: Product: syz [ 286.389839][ T9] usb 4-1: Manufacturer: syz [ 286.394722][ T9] usb 4-1: SerialNumber: syz [ 286.556481][ T9] usb 4-1: config 0 descriptor?? [ 286.619291][ T9] quatech2 4-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 286.900342][ T6448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.186'. [ 286.910024][ T6448] netlink: 43 bytes leftover after parsing attributes in process `syz.0.186'. [ 286.926773][ T6448] netlink: 'syz.0.186': attribute type 5 has an invalid length. [ 286.934653][ T6448] netlink: 43 bytes leftover after parsing attributes in process `syz.0.186'. [ 286.969796][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 286.999817][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 287.388606][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 287.404921][ T9] usb 4-1: USB disconnect, device number 4 [ 287.432573][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 287.541373][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 287.556733][ T9] quatech2 4-1:0.1: device disconnected [ 287.729729][ T6454] loop4: detected capacity change from 0 to 256 [ 287.904334][ T6454] cifs: Unknown parameter 'mode' [ 289.432453][ T6477] netlink: 'syz.4.198': attribute type 3 has an invalid length. [ 289.771779][ T2070] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 290.026692][ T2070] usb 1-1: Using ep0 maxpacket: 8 [ 290.081405][ T2070] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 290.096481][ T2070] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 290.111848][ T2070] usb 1-1: config 0 has no interface number 0 [ 290.118426][ T2070] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.130486][ T2070] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 290.142334][ T2070] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.259267][ T2070] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 290.269273][ T2070] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 290.278299][ T2070] usb 1-1: Product: syz [ 290.297651][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 290.377693][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 290.411053][ T2070] usb 1-1: config 0 descriptor?? [ 290.420135][ T6483] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.468536][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 290.547365][ T31] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 290.557387][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.574307][ T31] usb 5-1: Product: syz [ 290.579503][ T31] usb 5-1: Manufacturer: syz [ 290.584660][ T31] usb 5-1: SerialNumber: syz [ 290.743446][ T31] usb 5-1: config 0 descriptor?? [ 290.793264][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 291.141973][ T2070] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input7 [ 291.266197][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.273556][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.446404][ T9] usb 1-1: USB disconnect, device number 2 [ 291.446451][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 291.679971][ T31] gspca_ov534_9: reg_w failed -71 [ 291.972164][ T6500] loop3: detected capacity change from 0 to 2048 [ 291.985198][ T31] gspca_ov534_9: Unknown sensor 0000 [ 291.985603][ T31] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 292.027511][ T31] usb 5-1: USB disconnect, device number 2 [ 292.211536][ T6505] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.242597][ T6505] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 293.253945][ T6505] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 293.327215][ T6505] Remounting filesystem read-only [ 293.355581][ T5812] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 293.561824][ T6511] loop0: detected capacity change from 0 to 2048 [ 293.687665][ T6511] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 293.893820][ T6517] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.148146][ T6518] loop3: detected capacity change from 0 to 1024 [ 294.310647][ T6518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.553498][ T6532] loop2: detected capacity change from 0 to 64 [ 295.625191][ T6532] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 295.913935][ T6536] Bluetooth: MGMT ver 1.23 [ 295.919653][ T6536] Bluetooth: hci1: too big key_count value 32778 [ 296.885851][ T6546] loop2: detected capacity change from 0 to 256 [ 297.092161][ T6546] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 297.961406][ T6554] capability: warning: `syz.3.230' uses 32-bit capabilities (legacy support in use) [ 298.989851][ T6562] loop1: detected capacity change from 0 to 512 [ 299.127297][ T6562] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.235: bad orphan inode 15 [ 299.226082][ T6562] ext4_test_bit(bit=14, block=5) = 0 [ 299.234207][ T6562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.456771][ T6562] EXT4-fs (loop1): shut down requested (1) [ 299.759350][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.852537][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 302.099183][ T6609] loop6: detected capacity change from 0 to 524288000 [ 302.179704][ T30] audit: type=1326 audit(1758201816.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.202511][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.223442][ T6609] support for the xor transformation has been removed. [ 302.316695][ T30] audit: type=1326 audit(1758201816.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.340223][ T30] audit: type=1326 audit(1758201816.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.370599][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.380767][ T30] audit: type=1326 audit(1758201816.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.403034][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.410996][ T30] audit: type=1326 audit(1758201816.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.433598][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.440241][ T30] audit: type=1326 audit(1758201816.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.462936][ T30] audit: type=1326 audit(1758201816.940:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.485311][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.497162][ T30] audit: type=1326 audit(1758201816.940:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.519511][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.526146][ T30] audit: type=1326 audit(1758201816.940:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 302.548283][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.555025][ T30] audit: type=1326 audit(1758201816.940:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 303.846690][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 304.076978][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 304.106731][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 304.121117][ T31] usb 5-1: config 0 has no interface number 0 [ 304.131118][ T31] usb 5-1: config 0 interface 2 has no altsetting 0 [ 304.183072][ T31] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 304.193121][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.201815][ T31] usb 5-1: Product: syz [ 304.206472][ T31] usb 5-1: Manufacturer: syz [ 304.211294][ T31] usb 5-1: SerialNumber: syz [ 304.285784][ T31] usb 5-1: config 0 descriptor?? [ 304.557103][ T31] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.703480][ T31] usb 5-1: USB disconnect, device number 3 [ 305.454696][ T6654] loop2: detected capacity change from 0 to 128 [ 305.547043][ T6654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 305.613644][ T6654] System zones: 1-3, 19-19, 35-36 [ 305.639301][ T6654] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.669338][ T6657] loop1: detected capacity change from 0 to 512 [ 305.677356][ T6654] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.692971][ T6657] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.722680][ T6657] EXT4-fs: old and new quota format mixing [ 306.046437][ T5823] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.387812][ T6666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.282'. [ 307.023504][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.286'. [ 307.239647][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 308.251296][ T6698] loop2: detected capacity change from 0 to 256 [ 308.465291][ T6701] loop4: detected capacity change from 0 to 512 [ 308.528005][ T6701] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 310.205387][ T6725] loop1: detected capacity change from 0 to 128 [ 310.304024][ T6725] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.389970][ T6725] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.490174][ T6725] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 310.900388][ T5813] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.267764][ T6742] loop1: detected capacity change from 0 to 256 [ 311.324683][ T6742] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.397213][ T6742] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.425540][ T6740] loop4: detected capacity change from 0 to 2048 [ 311.550266][ T30] audit: type=1800 audit(1758201826.240:13): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="bus" dev="loop1" ino=1048615 res=0 errno=0 [ 311.572593][ T6740] NILFS (loop4): invalid segment: Magic number mismatch [ 311.580155][ T6740] NILFS (loop4): trying rollback from an earlier position [ 311.655514][ T30] audit: type=1804 audit(1758201826.280:14): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.312" name="/newroot/63/file0/bus" dev="loop1" ino=1048615 res=1 errno=0 [ 311.762205][ T6748] sg_write: process 137 (syz.3.316) changed security contexts after opening file descriptor, this is not allowed. [ 311.806073][ T6740] NILFS (loop4): recovery complete [ 311.826781][ T6750] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.331754][ T6775] loop0: detected capacity change from 0 to 4096 [ 314.533011][ T6782] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.613423][ T6785] netlink: 'syz.1.332': attribute type 3 has an invalid length. [ 314.621929][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 316.038591][ T31] kernel write not supported for file /sequencer2 (pid: 31 comm: kworker/1:1) [ 317.012937][ T6815] netem: change failed [ 317.218573][ T6807] loop2: detected capacity change from 0 to 4096 [ 317.657191][ T6807] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 318.627273][ T6833] loop0: detected capacity change from 0 to 4096 [ 318.714076][ T6833] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 319.184210][ T6841] loop1: detected capacity change from 0 to 2048 [ 319.185641][ T6833] ntfs3(loop0): ino=19, mi_enum_attr [ 319.196713][ T6833] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 319.240723][ T6841] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 319.249345][ T6841] UDF-fs: Scanning with blocksize 512 failed [ 319.336473][ T6841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.241947][ T6869] loop4: detected capacity change from 0 to 512 [ 321.406597][ T6869] EXT4-fs (loop4): orphan cleanup on readonly fs [ 321.482346][ T6869] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.369: inode #218103808: comm syz.4.369: iget: illegal inode # [ 321.581160][ T6869] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.369: Bad quota inode: 218103808, type: 2 [ 321.651426][ T6869] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 321.706126][ T6869] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 321.716168][ T6869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.959753][ T6869] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 322.081436][ T6869] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.369: inode #218103808: comm syz.4.369: iget: illegal inode # [ 322.142853][ T6869] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.369: Bad quota inode: 218103808, type: 2 [ 322.244050][ T6869] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 322.393028][ T6874] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 322.472024][ T6874] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.369: inode #218103808: comm syz.4.369: iget: illegal inode # [ 322.525763][ T6874] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.369: Bad quota inode: 218103808, type: 2 [ 322.602757][ T6874] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 323.643074][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.787709][ T6897] tap0: tun_chr_ioctl cmd 1074025677 [ 324.793890][ T6897] tap0: linktype set to 825 [ 324.875930][ T6900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.434026][ T5830] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 326.001215][ T6909] loop1: detected capacity change from 0 to 128 [ 326.222933][ T30] audit: type=1800 audit(1758201840.910:15): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.385" name="bus" dev="loop1" ino=1048616 res=0 errno=0 [ 327.578726][ T6923] loop4: detected capacity change from 0 to 1024 [ 327.824603][ T6923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.850221][ T6923] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.111859][ T6923] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 4: comm syz.4.392: lblock 4 mapped to illegal pblock 4 (length 1) [ 328.182107][ T6923] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 328.208166][ T6923] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.208166][ T6923] [ 328.761856][ T3561] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:11: lblock 0 mapped to illegal pblock 0 (length 1) [ 328.827555][ T3561] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 328.840451][ T3561] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.840451][ T3561] [ 328.973620][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 329.337342][ T6940] loop1: detected capacity change from 0 to 4096 [ 329.381517][ T6940] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 329.400160][ T6940] ntfs3(loop1): It is recommened to use chkdsk. [ 329.532852][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 329.547769][ T5830] Bluetooth: hci2: Injecting HCI hardware error event [ 329.561453][ T5828] Bluetooth: hci2: hardware error 0x00 [ 331.043578][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 331.072533][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 331.685707][ T5828] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 331.773372][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 333.062161][ T6978] loop1: detected capacity change from 0 to 512 [ 333.156081][ T6978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 333.170149][ T6978] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.379704][ T6978] EXT4-fs (loop1): 1 orphan inode deleted [ 333.386573][ T6978] EXT4-fs (loop1): 1 truncate cleaned up [ 333.399989][ T6978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.563007][ T6982] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 333.640762][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 334.320766][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.814140][ T7002] loop4: detected capacity change from 0 to 64 [ 336.623915][ T7011] loop2: detected capacity change from 0 to 128 [ 337.761039][ T7015] loop4: detected capacity change from 0 to 4096 [ 337.796375][ T7015] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 338.683020][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.367088][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 339.373593][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 339.383767][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 339.384408][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 339.605393][ T7029] erspan0: entered promiscuous mode [ 340.409891][ T7036] loop1: detected capacity change from 0 to 2048 [ 340.699488][ T7036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.744100][ T7040] loop0: detected capacity change from 0 to 512 [ 340.933306][ T7040] EXT4-fs (loop0): invalid inodes per group: 100663328 [ 340.933306][ T7040] [ 340.977613][ T30] audit: type=1800 audit(1758201855.670:16): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.442" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 341.643946][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.689592][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 341.770520][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 342.911113][ T7055] loop4: detected capacity change from 0 to 4096 [ 342.923235][ T7055] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.994301][ T7055] EXT4-fs (loop4): Test dummy encryption mode enabled [ 342.994506][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.451'. [ 343.138849][ T7055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.802281][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.363278][ T7083] loop4: detected capacity change from 0 to 256 [ 345.562772][ T7083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 346.018939][ T7091] loop0: detected capacity change from 0 to 8 [ 346.234597][ T7091] SQUASHFS error: lzo decompression failed, data probably corrupt [ 346.243487][ T7091] SQUASHFS error: Failed to read block 0x91: -5 [ 346.250225][ T7091] SQUASHFS error: Unable to read metadata cache entry [8f] [ 346.261727][ T7091] SQUASHFS error: Unable to read inode 0x11f [ 347.522827][ T7099] loop4: detected capacity change from 0 to 512 [ 347.671372][ T7099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 347.784516][ T7103] netlink: 'syz.0.469': attribute type 4 has an invalid length. [ 347.818375][ T7099] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 347.835447][ T7099] EXT4-fs (loop4): 1 truncate cleaned up [ 347.849612][ T7099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.089160][ T7099] EXT4-fs (loop4): shut down requested (1) [ 348.739954][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.343014][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.960389][ T5870] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 350.223174][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.238453][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.248882][ T5870] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 350.258714][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.324418][ T5870] usb 4-1: config 0 descriptor?? [ 350.939119][ T5870] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 351.346105][ T5870] usb 4-1: USB disconnect, device number 5 [ 352.718227][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.725295][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.875580][ T7150] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 353.892921][ T7150] syzkaller1: linktype set to 804 [ 354.481786][ T7155] netlink: 'syz.2.487': attribute type 25 has an invalid length. [ 354.490180][ T7155] netlink: 184 bytes leftover after parsing attributes in process `syz.2.487'. [ 355.913123][ T7173] loop4: detected capacity change from 0 to 1024 [ 356.623570][ T3633] hfsplus: b-tree write err: -5, ino 4 [ 357.188912][ T7181] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 357.211874][ T7181] team0: Cannot enslave team device to itself [ 357.644327][ T7186] loop3: detected capacity change from 0 to 1024 [ 357.646084][ T7187] loop0: detected capacity change from 0 to 64 [ 357.954259][ T7186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 357.972899][ T7186] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.323883][ T7186] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.503: lblock 0 mapped to illegal pblock 0 (length 1) [ 358.427914][ T7186] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 358.441070][ T7186] EXT4-fs (loop3): This should not happen!! Data will be lost [ 358.441070][ T7186] [ 358.644117][ T5811] hfs: node 4:3 still has 1 user(s)! [ 359.171904][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 360.043171][ T7210] warning: `syz.4.513' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 360.226449][ T7213] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 361.377134][ T7225] loop0: detected capacity change from 0 to 64 [ 362.051040][ T7232] loop3: detected capacity change from 0 to 256 [ 362.816048][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 363.327486][ T7244] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 363.838282][ T7247] loop0: detected capacity change from 0 to 1024 [ 367.982761][ T7285] Zero length message leads to an empty skb [ 367.985858][ T1332] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.044059][ T1332] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.058385][ T1332] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.141352][ T1332] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.071854][ T7296] loop1: detected capacity change from 0 to 256 [ 369.254154][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 369.286984][ T7298] loop3: detected capacity change from 0 to 256 [ 369.330958][ T7298] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.436681][ T7300] loop0: detected capacity change from 0 to 1024 [ 369.485419][ T7298] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.493985][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 369.515226][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 369.523629][ T7300] EXT4-fs: Ignoring removed nobh option [ 369.527694][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 369.533938][ T7300] EXT4-fs: Ignoring removed bh option [ 369.647086][ T30] audit: type=1800 audit(1758201884.310:17): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.553" name="bus" dev="loop3" ino=1048619 res=0 errno=0 [ 369.710965][ T31] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 369.726588][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.740886][ T31] usb 3-1: Product: syz [ 369.751324][ T31] usb 3-1: Manufacturer: syz [ 369.766861][ T31] usb 3-1: SerialNumber: syz [ 369.780857][ T30] audit: type=1804 audit(1758201884.390:18): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.553" name="/newroot/107/file0/bus" dev="loop3" ino=1048619 res=1 errno=0 [ 369.842562][ T31] usb 3-1: config 0 descriptor?? [ 369.852300][ T7295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.911672][ T7295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.944119][ T7300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.033501][ T31] usb 3-1: ucan: probing device on interface #0 [ 370.560177][ T31] usb 3-1: ucan: device reported invalid tx-fifo size [ 370.573771][ T31] usb 3-1: ucan: probe failed; try to update the device firmware [ 370.876907][ T31] usb 3-1: USB disconnect, device number 2 [ 371.002589][ T2070] kernel write not supported for file /sg0 (pid: 2070 comm: kworker/1:2) [ 371.789177][ T7033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.452760][ T7320] loop2: detected capacity change from 0 to 64 [ 372.585765][ T1332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.718931][ T30] audit: type=1800 audit(1758201887.410:19): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.562" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 372.981201][ T1332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.061504][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.565'. [ 373.286369][ T1332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.662089][ T1332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.425265][ T1332] bridge_slave_1: left allmulticast mode [ 374.431264][ T1332] bridge_slave_1: left promiscuous mode [ 374.444232][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.552179][ T1332] bridge_slave_0: left allmulticast mode [ 374.563984][ T1332] bridge_slave_0: left promiscuous mode [ 374.584268][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.145340][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.172910][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.194512][ T1332] bond0 (unregistering): Released all slaves [ 376.850202][ T1332] hsr_slave_0: left promiscuous mode [ 376.907993][ T1332] hsr_slave_1: left promiscuous mode [ 376.916953][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.931352][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.987329][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.995772][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.091960][ T1332] veth1_macvtap: left promiscuous mode [ 377.098200][ T1332] veth0_macvtap: left promiscuous mode [ 377.108424][ T1332] veth1_vlan: left promiscuous mode [ 377.114726][ T1332] veth0_vlan: left promiscuous mode [ 378.185301][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.186543][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 378.225623][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.236514][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.263443][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.276663][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.337632][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 379.561021][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 380.412694][ T5820] Bluetooth: hci2: command tx timeout [ 380.567321][ T7337] chnl_net:caif_netlink_parms(): no params data found [ 380.601063][ T7358] loop4: detected capacity change from 0 to 1024 [ 381.088844][ T7367] loop3: detected capacity change from 0 to 256 [ 381.165131][ T7367] MINIX-fs: mounting file system with errors, running fsck is recommended [ 382.266460][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.274224][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.282270][ T7337] bridge_slave_0: entered allmulticast mode [ 382.292656][ T7337] bridge_slave_0: entered promiscuous mode [ 382.311891][ T7337] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.320228][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.331391][ T7337] bridge_slave_1: entered allmulticast mode [ 382.342047][ T7337] bridge_slave_1: entered promiscuous mode [ 382.501442][ T5820] Bluetooth: hci2: command tx timeout [ 382.577533][ T7337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.604143][ T7337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.755953][ T7381] loop4: detected capacity change from 0 to 2048 [ 382.910363][ T7381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.940229][ T7337] team0: Port device team_slave_0 added [ 383.008018][ T7337] team0: Port device team_slave_1 added [ 383.056165][ T7386] loop3: detected capacity change from 0 to 512 [ 383.159045][ T7386] EXT4-fs: Ignoring removed oldalloc option [ 383.281445][ T7386] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.590: Parent and EA inode have the same ino 15 [ 383.288603][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.301400][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.328110][ T7337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.347882][ T7386] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.590: Parent and EA inode have the same ino 15 [ 383.393443][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.405842][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.436336][ T7337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.497580][ T7386] EXT4-fs (loop3): 1 orphan inode deleted [ 383.511689][ T7386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.634200][ T7386] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.728657][ T7394] loop1: detected capacity change from 0 to 164 [ 383.813269][ T7394] rock: corrupted directory entry. extent=28, offset=0, size=100663296 [ 383.964593][ T7394] rock: corrupted directory entry. extent=28, offset=0, size=100663296 [ 383.978358][ T7337] hsr_slave_0: entered promiscuous mode [ 384.003225][ T7337] hsr_slave_1: entered promiscuous mode [ 384.012788][ T7337] debugfs: 'hsr0' already exists in 'hsr' [ 384.019251][ T7337] Cannot create hsr debugfs directory [ 384.571375][ T5820] Bluetooth: hci2: command tx timeout [ 384.695638][ T7400] block nbd1: server does not support multiple connections per device. [ 384.713364][ T7400] block nbd1: shutting down sockets [ 384.819839][ T7404] loop1: detected capacity change from 0 to 256 [ 384.896874][ T7404] FAT-fs (loop1): Directory bread(block 1285) failed [ 385.028245][ T7404] FAT-fs (loop1): Directory bread(block 1285) failed [ 385.282661][ T5870] IPVS: starting estimator thread 0... [ 385.311814][ T7409] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 385.405927][ T7411] IPVS: using max 144 ests per chain, 7200 per kthread [ 385.550754][ T7337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 385.617003][ T7337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 385.690896][ T7337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.748882][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'. [ 385.763572][ T7413] tipc: Started in network mode [ 385.770395][ T7413] tipc: Node identity 7, cluster identity 4711 [ 385.780748][ T7413] tipc: Node number set to 7 [ 385.789168][ T7337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.655618][ T5820] Bluetooth: hci2: command tx timeout [ 387.098883][ T7434] loop4: detected capacity change from 0 to 128 [ 387.332191][ T7337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.519966][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 387.528234][ T7337] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.626112][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.633818][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.706673][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.714396][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.745402][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 387.785125][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 387.793680][ T9] usb 5-1: config 0 has no interface number 0 [ 387.833900][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 387.843594][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.852477][ T9] usb 5-1: Product: syz [ 387.860264][ T9] usb 5-1: Manufacturer: syz [ 387.865442][ T9] usb 5-1: SerialNumber: syz [ 387.972492][ T9] usb 5-1: config 0 descriptor?? [ 388.039062][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 388.261563][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 388.261830][ T7337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.319055][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 388.441257][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 138 [ 388.661715][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 388.674187][ T9] usb 5-1: USB disconnect, device number 4 [ 388.756780][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 388.832481][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 388.850104][ T9] quatech2 5-1:0.51: device disconnected [ 390.051885][ T7460] loop3: detected capacity change from 0 to 256 [ 390.361247][ T7460] FAT-fs (loop3): Directory bread(block 64) failed [ 390.369739][ T7460] FAT-fs (loop3): Directory bread(block 65) failed [ 390.377024][ T7460] FAT-fs (loop3): Directory bread(block 66) failed [ 390.383793][ T7460] FAT-fs (loop3): Directory bread(block 67) failed [ 390.385466][ T7337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.390948][ T7460] FAT-fs (loop3): Directory bread(block 68) failed [ 390.404237][ T7460] FAT-fs (loop3): Directory bread(block 69) failed [ 390.411931][ T7460] FAT-fs (loop3): Directory bread(block 70) failed [ 390.419175][ T7460] FAT-fs (loop3): Directory bread(block 71) failed [ 390.426462][ T7460] FAT-fs (loop3): Directory bread(block 72) failed [ 390.433205][ T7460] FAT-fs (loop3): Directory bread(block 73) failed [ 390.531047][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 390.787512][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.796007][ T9] usb 5-1: too many configurations: 238, using maximum allowed: 8 [ 390.826370][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 390.834268][ T9] usb 5-1: can't read configurations, error -71 [ 392.125953][ T2070] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 392.343045][ T2070] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.354438][ T2070] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 392.367128][ T2070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 392.378903][ T2070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 392.394011][ T2070] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 392.554446][ T2070] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 392.564433][ T2070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 392.573996][ T2070] usb 4-1: Product: syz [ 392.579127][ T2070] usb 4-1: Manufacturer: syz [ 392.583945][ T2070] usb 4-1: SerialNumber: syz [ 392.663980][ T2070] usb 4-1: config 0 descriptor?? [ 392.978801][ T2070] radio-si470x 4-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 393.070445][ T7337] veth0_vlan: entered promiscuous mode [ 393.191463][ T2070] radio-si470x 4-1:0.0: software version 100, hardware version 101 [ 393.283471][ T7337] veth1_vlan: entered promiscuous mode [ 393.454088][ T2070] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 393.664545][ T2070] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 393.675437][ T2070] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 393.786355][ T7337] veth0_macvtap: entered promiscuous mode [ 393.807145][ T2070] usb 4-1: USB disconnect, device number 6 [ 393.905882][ T7337] veth1_macvtap: entered promiscuous mode [ 394.130384][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.270684][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.416699][ T3633] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.472157][ T3633] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.518782][ T3718] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.552239][ T3718] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.941567][ T7509] netlink: 'syz.4.640': attribute type 6 has an invalid length. [ 397.037587][ T7528] loop1: detected capacity change from 0 to 4096 [ 400.865585][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 400.956684][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.672'. [ 401.069569][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 401.086300][ T9] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 401.146920][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.159237][ T9] usb 5-1: config 0 has no interface number 0 [ 401.184185][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.199113][ T9] usb 5-1: config 0 has no interface number 0 [ 401.261601][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.270180][ T9] usb 5-1: config 0 has no interface number 0 [ 401.295929][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.308104][ T9] usb 5-1: config 0 has no interface number 0 [ 401.428863][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.441080][ T9] usb 5-1: config 0 has no interface number 0 [ 401.463771][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.476072][ T9] usb 5-1: config 0 has no interface number 0 [ 401.579942][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.588669][ T9] usb 5-1: config 0 has no interface number 0 [ 401.650266][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.662856][ T9] usb 5-1: config 0 has no interface number 0 [ 401.742045][ T9] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 401.755296][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.763580][ T9] usb 5-1: Product: syz [ 401.768453][ T9] usb 5-1: Manufacturer: syz [ 401.773299][ T9] usb 5-1: SerialNumber: syz [ 401.843486][ T9] usb 5-1: config 0 descriptor?? [ 401.880327][ T9] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 402.123190][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.131779][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.314003][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.328867][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.236316][ T7611] netlink: 'syz.3.680': attribute type 4 has an invalid length. [ 403.971339][ T7607] loop2: detected capacity change from 0 to 8192 [ 404.091213][ T9] etas_es58x 5-1:0.2: could not retrieve the product info string [ 404.302296][ T9] usb 5-1: USB disconnect, device number 7 [ 404.314703][ T9] etas_es58x 5-1:0.2: Disconnecting syz syz [ 404.908632][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 405.131035][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.141889][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 405.157271][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 405.168753][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 405.178946][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 405.354504][ T9] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 405.364170][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 405.372674][ T9] usb 5-1: Product: syz [ 405.380531][ T9] usb 5-1: Manufacturer: syz [ 405.385603][ T9] usb 5-1: SerialNumber: syz [ 405.488777][ T9] usb 5-1: config 0 descriptor?? [ 405.651090][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.691'. [ 405.773298][ T9] radio-si470x 5-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 405.992672][ T9] radio-si470x 5-1:0.0: software version 100, hardware version 101 [ 406.200109][ T9] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 406.387377][ T7642] loop5: detected capacity change from 0 to 64 [ 406.429821][ T9] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 406.440020][ T9] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 406.513016][ T9] usb 5-1: USB disconnect, device number 8 [ 406.668810][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 406.682001][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 408.696419][ T7674] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 408.734404][ T7674] team0: Port device dummy0 added [ 408.852585][ T7677] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 408.920956][ T7676] loop4: detected capacity change from 0 to 256 [ 408.936007][ T7677] team0: Port device dummy0 removed [ 408.961268][ T7677] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 409.010146][ T7676] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.021832][ T7676] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 409.072887][ T7676] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 409.128820][ T7668] loop1: detected capacity change from 0 to 4096 [ 409.364016][ T30] audit: type=1800 audit(1758201924.060:20): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.707" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 409.556408][ T5877] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 409.767757][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.778964][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 409.791990][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 409.809378][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 409.821858][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 409.950989][ T5877] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 409.961388][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 409.970991][ T5877] usb 6-1: Product: syz [ 409.975972][ T5877] usb 6-1: Manufacturer: syz [ 409.980913][ T5877] usb 6-1: SerialNumber: syz [ 410.095230][ T5877] usb 6-1: config 0 descriptor?? [ 410.386076][ T5877] radio-si470x 6-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 410.596576][ T5877] radio-si470x 6-1:0.0: software version 100, hardware version 101 [ 410.808795][ T5877] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 411.111048][ T5877] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 411.121448][ T5877] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 411.205748][ T5877] usb 6-1: USB disconnect, device number 2 [ 414.151013][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.157902][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.305472][ T5877] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 414.385196][ T7739] loop5: detected capacity change from 0 to 1024 [ 414.481669][ T7739] EXT4-fs: Ignoring removed nobh option [ 414.488566][ T7739] EXT4-fs: Ignoring removed bh option [ 414.616069][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.627373][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 414.639858][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 414.652092][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 414.662918][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 414.853022][ T7739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.933035][ T5877] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 414.943253][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 414.951754][ T5877] usb 2-1: Product: syz [ 414.956331][ T5877] usb 2-1: Manufacturer: syz [ 414.961336][ T5877] usb 2-1: SerialNumber: syz [ 414.979303][ T5877] usb 2-1: config 0 descriptor?? [ 415.265697][ T5877] radio-si470x 2-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 415.483780][ T5877] radio-si470x 2-1:0.0: software version 100, hardware version 101 [ 415.578937][ T7337] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.688700][ T5877] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 415.893607][ T5877] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 415.904098][ T5877] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 416.037126][ T5877] usb 2-1: USB disconnect, device number 4 [ 417.553379][ T7782] loop4: detected capacity change from 0 to 128 [ 417.852347][ T7782] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.078974][ T7782] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.862661][ T5822] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.575873][ T5877] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 421.385088][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 421.399381][ T5877] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 421.409330][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.425596][ T5877] usb 3-1: config 0 descriptor?? [ 421.682983][ T5877] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 421.728185][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 421.764355][ T5877] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 421.780562][ T5877] usb 3-1: media controller created [ 421.886822][ T7819] ===================================================== [ 421.894198][ T7819] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 421.901910][ T7819] _copy_to_user+0xcc/0x120 [ 421.907034][ T7819] i2cdev_ioctl_smbus+0x586/0x660 [ 421.912323][ T7819] compat_i2cdev_ioctl+0x48f/0xb40 [ 421.918013][ T7819] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 421.923786][ T7819] ia32_sys_call+0x2d5f/0x4310 [ 421.928973][ T7819] __do_fast_syscall_32+0xb0/0x150 [ 421.934287][ T7819] do_fast_syscall_32+0x38/0x80 [ 421.939734][ T7819] do_SYSENTER_32+0x1f/0x30 [ 421.944583][ T7819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.952096][ T7819] [ 421.954524][ T7819] Uninit was stored to memory at: [ 421.960294][ T7819] __i2c_smbus_xfer+0x2561/0x2f60 [ 421.966005][ T7819] i2c_smbus_xfer+0x31d/0x4d0 [ 421.971082][ T7819] i2cdev_ioctl_smbus+0x4a1/0x660 [ 421.982465][ T7819] compat_i2cdev_ioctl+0x48f/0xb40 [ 421.989689][ T7819] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 421.997166][ T7819] ia32_sys_call+0x2d5f/0x4310 [ 422.002465][ T7819] __do_fast_syscall_32+0xb0/0x150 [ 422.008913][ T7819] do_fast_syscall_32+0x38/0x80 [ 422.014299][ T7819] do_SYSENTER_32+0x1f/0x30 [ 422.019242][ T7819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.026160][ T7819] [ 422.028593][ T7819] Local variable msgbuf1.i created at: [ 422.034193][ T7819] __i2c_smbus_xfer+0x86a/0x2f60 [ 422.039580][ T7819] i2c_smbus_xfer+0x31d/0x4d0 [ 422.044467][ T7819] [ 422.047109][ T7819] Byte 0 of 1 is uninitialized [ 422.051999][ T7819] Memory access of size 1 starts at ffff888050093c86 [ 422.059095][ T7819] Data copied to user address 0000000080000040 [ 422.065624][ T7819] [ 422.068073][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.2.767 Not tainted syzkaller #0 PREEMPT(none) [ 422.077920][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.094684][ T7819] ===================================================== [ 422.103816][ T7819] Disabling lock debugging due to kernel taint [ 422.110399][ T7819] Kernel panic - not syncing: kmsan.panic set ... [ 422.117096][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.2.767 Tainted: G B syzkaller #0 PREEMPT(none) [ 422.128221][ T7819] Tainted: [B]=BAD_PAGE [ 422.132504][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.142808][ T7819] Call Trace: [ 422.146217][ T7819] [ 422.149439][ T7819] __dump_stack+0x26/0x30 [ 422.154013][ T7819] dump_stack_lvl+0x53/0x270 [ 422.158856][ T7819] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.165025][ T7819] dump_stack+0x1e/0x25 [ 422.169509][ T7819] vpanic+0x361/0xc50 [ 422.173748][ T7819] panic+0x15d/0x160 [ 422.177925][ T7819] kmsan_report+0x31c/0x320 [ 422.182657][ T7819] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 422.189312][ T7819] ? kmsan_internal_check_memory+0x1e1/0x230 [ 422.195493][ T7819] ? kmsan_copy_to_user+0xf1/0x190 [ 422.200974][ T7819] ? _copy_to_user+0xcc/0x120 [ 422.205853][ T7819] ? i2cdev_ioctl_smbus+0x586/0x660 [ 422.211343][ T7819] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 422.216862][ T7819] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 422.222801][ T7819] ? ia32_sys_call+0x2d5f/0x4310 [ 422.228094][ T7819] ? __do_fast_syscall_32+0xb0/0x150 [ 422.233577][ T7819] ? do_fast_syscall_32+0x38/0x80 [ 422.238865][ T7819] ? do_SYSENTER_32+0x1f/0x30 [ 422.243716][ T7819] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.250467][ T7819] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 422.255941][ T7819] ? __i2c_transfer+0x11cd/0x3110 [ 422.261198][ T7819] ? kmsan_get_metadata+0xfb/0x160 [ 422.266534][ T7819] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 422.273078][ T7819] ? kmsan_get_metadata+0xfb/0x160 [ 422.278491][ T7819] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.284527][ T7819] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 422.289945][ T7819] ? kmsan_get_metadata+0xfb/0x160 [ 422.295313][ T7819] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.301370][ T7819] kmsan_internal_check_memory+0x1e1/0x230 [ 422.307403][ T7819] kmsan_copy_to_user+0xf1/0x190 [ 422.312548][ T7819] _copy_to_user+0xcc/0x120 [ 422.317268][ T7819] i2cdev_ioctl_smbus+0x586/0x660 [ 422.322571][ T7819] compat_i2cdev_ioctl+0x48f/0xb40 [ 422.328132][ T7819] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 422.334008][ T7819] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 422.339779][ T7819] ? kmsan_get_metadata+0xfb/0x160 [ 422.345098][ T7819] ? kmsan_get_metadata+0xfb/0x160 [ 422.350450][ T7819] ia32_sys_call+0x2d5f/0x4310 [ 422.355462][ T7819] __do_fast_syscall_32+0xb0/0x150 [ 422.360865][ T7819] do_fast_syscall_32+0x38/0x80 [ 422.365901][ T7819] do_SYSENTER_32+0x1f/0x30 [ 422.370764][ T7819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.377418][ T7819] RIP: 0023:0xf7f15539 [ 422.381624][ T7819] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 422.401519][ T7819] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 422.410213][ T7819] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 422.418422][ T7819] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.426853][ T7819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.434980][ T7819] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 422.443170][ T7819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.451602][ T7819] [ 422.455268][ T7819] Kernel Offset: disabled [ 422.459742][ T7819] Rebooting in 86400 seconds..