last executing test programs: 5.707664715s ago: executing program 0 (id=654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x18, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.71374346s ago: executing program 0 (id=660): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000040)=ANY=[], 0x3, 0x7e0, &(0x7f0000000300)="$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") socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 4.345347979s ago: executing program 1 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f0000000bc0)=""/111, 0x6f}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 4.255501642s ago: executing program 2 (id=663): r0 = socket$inet6(0xa, 0x2, 0x3a) unshare(0x2040400) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x2}, 0x6e) 3.994248631s ago: executing program 4 (id=665): r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0xf) r1 = dup(r0) ioctl$TUNGETVNETLE(r1, 0x800454dd, 0x0) 3.714935059s ago: executing program 2 (id=666): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) 3.66073154s ago: executing program 0 (id=667): openat$uinput(0xffffffffffffff9c, &(0x7f0000002040), 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) poll(&(0x7f0000000000)=[{}], 0x2000000000000083, 0x0) 3.441685567s ago: executing program 3 (id=668): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) 3.335491688s ago: executing program 1 (id=669): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000880)=ANY=[], 0x2, 0x5ae, &(0x7f0000001540)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3.285258678s ago: executing program 4 (id=670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 3.255561259s ago: executing program 2 (id=671): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@remote, 0x30, r2}) 2.959277405s ago: executing program 0 (id=672): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x12, 0x0, 0x0) 2.793857922s ago: executing program 3 (id=673): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000780)="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", 0x2000, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.688174971s ago: executing program 4 (id=674): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x14000000}) read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020) 2.613693654s ago: executing program 2 (id=675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) 2.568215362s ago: executing program 1 (id=676): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 2.174311152s ago: executing program 3 (id=677): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mq_open(&(0x7f0000000440)='127.0.0.1\x00', 0x40, 0x0, &(0x7f0000000480)={0x0, 0x4, 0x23cfbd70}) 1.935205451s ago: executing program 4 (id=678): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)='b', 0x1}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000001880)=""/63, 0x3f, 0x0, 0x0, 0x0) 1.872960629s ago: executing program 1 (id=679): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x246f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x10, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x800000000000015) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.602612278s ago: executing program 3 (id=680): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 1.594413384s ago: executing program 2 (id=690): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000014c0)=0x10) 1.5812112s ago: executing program 4 (id=681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) 1.275724373s ago: executing program 4 (id=682): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.193875509s ago: executing program 1 (id=683): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x90, 0x0, r1, 0x0) 690.870249ms ago: executing program 1 (id=684): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "a5247d20"}]}}, 0x0}, 0x0) socket(0x11, 0x3, 0x9) 685.521345ms ago: executing program 0 (id=695): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) 443.141736ms ago: executing program 0 (id=685): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 322.637993ms ago: executing program 3 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 18.987047ms ago: executing program 3 (id=687): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(0x0, 0x143142, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) 0s ago: executing program 2 (id=688): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800000}, 0x0, 0x0, 0x0, 0x4, 0x101, 0x0, 0x20}}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. [ 175.867343][ T5171] cgroup: Unknown subsys name 'net' [ 176.058129][ T5171] cgroup: Unknown subsys name 'cpuset' [ 176.074757][ T5171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.299050][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.306196][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.755380][ T5171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 235.013557][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.056733][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.082660][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.139410][ T5189] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.149283][ T5189] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.161898][ T5189] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.172142][ T5189] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.181507][ T5195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.211383][ T5189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.235975][ T5195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.279182][ T5189] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.288390][ T5189] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.296128][ T5193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.307541][ T5189] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.308645][ T5193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.326565][ T5193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.338337][ T5201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.353777][ T5201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.370821][ T5201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.383548][ T5199] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.405114][ T5201] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.420629][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.458186][ T5193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.468745][ T5193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.656813][ T5201] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.667229][ T5201] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.731941][ T5201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.763210][ T5201] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.822636][ T5201] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.833034][ T5201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.506269][ T5191] chnl_net:caif_netlink_parms(): no params data found [ 237.262730][ T5187] chnl_net:caif_netlink_parms(): no params data found [ 237.307039][ T5193] Bluetooth: hci0: command tx timeout [ 237.449372][ T5193] Bluetooth: hci1: command tx timeout [ 237.525252][ T5193] Bluetooth: hci2: command tx timeout [ 237.629383][ T5194] chnl_net:caif_netlink_parms(): no params data found [ 237.694872][ T5193] Bluetooth: hci3: command tx timeout [ 237.729808][ T5203] chnl_net:caif_netlink_parms(): no params data found [ 237.991712][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.002971][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.011110][ T5191] bridge_slave_0: entered allmulticast mode [ 238.020615][ T5191] bridge_slave_0: entered promiscuous mode [ 238.034064][ T5193] Bluetooth: hci4: command tx timeout [ 238.058004][ T5197] chnl_net:caif_netlink_parms(): no params data found [ 238.156797][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.169328][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.177371][ T5191] bridge_slave_1: entered allmulticast mode [ 238.186958][ T5191] bridge_slave_1: entered promiscuous mode [ 238.564093][ T5191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.587898][ T5191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.601113][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.609679][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.617648][ T5187] bridge_slave_0: entered allmulticast mode [ 238.627283][ T5187] bridge_slave_0: entered promiscuous mode [ 238.753270][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.764858][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.772695][ T5187] bridge_slave_1: entered allmulticast mode [ 238.782983][ T5187] bridge_slave_1: entered promiscuous mode [ 238.806606][ T5191] team0: Port device team_slave_0 added [ 238.895515][ T5191] team0: Port device team_slave_1 added [ 239.151798][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.160056][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.170942][ T5203] bridge_slave_0: entered allmulticast mode [ 239.180485][ T5203] bridge_slave_0: entered promiscuous mode [ 239.336072][ T5187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.346260][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.354020][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.363904][ T5203] bridge_slave_1: entered allmulticast mode [ 239.371952][ T5193] Bluetooth: hci0: command tx timeout [ 239.375032][ T5203] bridge_slave_1: entered promiscuous mode [ 239.421629][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.429410][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.455976][ T5191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.511111][ T5187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.553228][ T5193] Bluetooth: hci1: command tx timeout [ 239.627053][ T5193] Bluetooth: hci2: command tx timeout [ 239.639727][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.647618][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.656134][ T5194] bridge_slave_0: entered allmulticast mode [ 239.665772][ T5194] bridge_slave_0: entered promiscuous mode [ 239.682270][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.690887][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.717347][ T5191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.751390][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.759441][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.767744][ T5197] bridge_slave_0: entered allmulticast mode [ 239.777489][ T5197] bridge_slave_0: entered promiscuous mode [ 239.791657][ T5193] Bluetooth: hci3: command tx timeout [ 239.905384][ T5203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.915950][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.923820][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.932984][ T5194] bridge_slave_1: entered allmulticast mode [ 239.942632][ T5194] bridge_slave_1: entered promiscuous mode [ 239.952790][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.962094][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.970071][ T5197] bridge_slave_1: entered allmulticast mode [ 239.979727][ T5197] bridge_slave_1: entered promiscuous mode [ 240.037099][ T5187] team0: Port device team_slave_0 added [ 240.087106][ T5193] Bluetooth: hci4: command tx timeout [ 240.119371][ T5203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.139713][ T5194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.281716][ T5187] team0: Port device team_slave_1 added [ 240.335090][ T5194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.359297][ T5191] hsr_slave_0: entered promiscuous mode [ 240.370423][ T5191] hsr_slave_1: entered promiscuous mode [ 240.565336][ T5197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.617106][ T5203] team0: Port device team_slave_0 added [ 240.627336][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.635057][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.661522][ T5187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.689992][ T5194] team0: Port device team_slave_0 added [ 240.706908][ T5197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.724067][ T5194] team0: Port device team_slave_1 added [ 240.763903][ T5203] team0: Port device team_slave_1 added [ 240.810753][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.818366][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.844779][ T5187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.010029][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.017556][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.045613][ T5203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.078531][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.086215][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.112793][ T5203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.208171][ T5197] team0: Port device team_slave_0 added [ 241.277348][ T5194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.284979][ T5194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.311377][ T5194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.410223][ T5197] team0: Port device team_slave_1 added [ 241.431960][ T5187] hsr_slave_0: entered promiscuous mode [ 241.442774][ T5187] hsr_slave_1: entered promiscuous mode [ 241.446251][ T5193] Bluetooth: hci0: command tx timeout [ 241.457776][ T5187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.466050][ T5187] Cannot create hsr debugfs directory [ 241.510675][ T5194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.518269][ T5194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.545106][ T5194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.604848][ T5193] Bluetooth: hci1: command tx timeout [ 241.660610][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.668080][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.694797][ T5197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.707446][ T5193] Bluetooth: hci2: command tx timeout [ 241.725552][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.732768][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.760918][ T5197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.844923][ T5193] Bluetooth: hci3: command tx timeout [ 242.081682][ T5203] hsr_slave_0: entered promiscuous mode [ 242.091458][ T5203] hsr_slave_1: entered promiscuous mode [ 242.103444][ T5203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.111424][ T5203] Cannot create hsr debugfs directory [ 242.164539][ T5193] Bluetooth: hci4: command tx timeout [ 242.225822][ T5197] hsr_slave_0: entered promiscuous mode [ 242.236364][ T5197] hsr_slave_1: entered promiscuous mode [ 242.246547][ T5197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.255514][ T5197] Cannot create hsr debugfs directory [ 242.330012][ T5194] hsr_slave_0: entered promiscuous mode [ 242.341368][ T5194] hsr_slave_1: entered promiscuous mode [ 242.351137][ T5194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.359210][ T5194] Cannot create hsr debugfs directory [ 243.381699][ T5191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.524810][ T5193] Bluetooth: hci0: command tx timeout [ 243.527192][ T5191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.567683][ T5191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.607746][ T5191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.714754][ T5193] Bluetooth: hci1: command tx timeout [ 243.775835][ T5193] Bluetooth: hci2: command tx timeout [ 243.781860][ T5187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.826197][ T5187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.853842][ T5187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.914102][ T5187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.925310][ T5193] Bluetooth: hci3: command tx timeout [ 244.152024][ T5197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.213821][ T5197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 244.246017][ T5193] Bluetooth: hci4: command tx timeout [ 244.278696][ T5194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.304557][ T5194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.331143][ T5194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.420855][ T5197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.452329][ T5194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.558058][ T5197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.600366][ T5203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.676994][ T5203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.750144][ T5203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.836857][ T5203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.385136][ T5191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.629706][ T5187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.759691][ T5191] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.878862][ T5187] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.946829][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.954929][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.982753][ T5194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.057113][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.065239][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.157322][ T5194] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.195262][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.203346][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.224821][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.232822][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.422696][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.430758][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.447570][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.455518][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.786692][ T5197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.968884][ T5187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.090271][ T5197] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.169791][ T5203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.250544][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.258451][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.411459][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.419378][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.531508][ T5203] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.696330][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.704128][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.889714][ T5197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.901504][ T5197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.951955][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.959840][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.320075][ T5203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.401898][ T5191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.559396][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.701196][ T5194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.165925][ T5191] veth0_vlan: entered promiscuous mode [ 250.247965][ T5187] veth0_vlan: entered promiscuous mode [ 250.340346][ T5191] veth1_vlan: entered promiscuous mode [ 250.430951][ T5197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.459343][ T5187] veth1_vlan: entered promiscuous mode [ 250.540325][ T5203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.749987][ T5191] veth0_macvtap: entered promiscuous mode [ 250.827349][ T5191] veth1_macvtap: entered promiscuous mode [ 250.910745][ T5187] veth0_macvtap: entered promiscuous mode [ 251.013731][ T5187] veth1_macvtap: entered promiscuous mode [ 251.076464][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.248163][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.330598][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.341631][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.357410][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.405026][ T5191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.414751][ T5191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.423975][ T5191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.433228][ T5191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.549392][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.561077][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.577544][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.591651][ T5197] veth0_vlan: entered promiscuous mode [ 251.668734][ T5203] veth0_vlan: entered promiscuous mode [ 251.739649][ T5197] veth1_vlan: entered promiscuous mode [ 251.803895][ T5187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.814890][ T5187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.823999][ T5187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.833407][ T5187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.932741][ T5203] veth1_vlan: entered promiscuous mode [ 252.182935][ T5197] veth0_macvtap: entered promiscuous mode [ 252.243467][ T5197] veth1_macvtap: entered promiscuous mode [ 252.464714][ T5203] veth0_macvtap: entered promiscuous mode [ 252.522606][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.535151][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.546864][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.557706][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.576220][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.656841][ T5203] veth1_macvtap: entered promiscuous mode [ 252.783416][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.795467][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.808475][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.820379][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.836293][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.969211][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.980258][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.990498][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.002130][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.012389][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.023217][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.039153][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.176334][ T5194] veth0_vlan: entered promiscuous mode [ 253.249538][ T5197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.259247][ T5197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.268620][ T5197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.278138][ T5197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.346022][ T5194] veth1_vlan: entered promiscuous mode [ 253.382590][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.394557][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.405527][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.416377][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.426555][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.437406][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.452906][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.574212][ T5203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.586730][ T5203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.597386][ T5203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.614052][ T5203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.008813][ T5194] veth0_macvtap: entered promiscuous mode [ 254.129408][ T5194] veth1_macvtap: entered promiscuous mode [ 254.425390][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.438145][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.450127][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.461134][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.471419][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.482400][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.492829][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.503823][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.520355][ T5194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.888200][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.899555][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.909972][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.920851][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.931095][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.942041][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.952237][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.963063][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.985397][ T5194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.086259][ T5194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.095661][ T5194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.104970][ T5194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.114068][ T5194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.448005][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.456351][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.651195][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.659466][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.794557][ T3316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.802776][ T3316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.976480][ T3316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.985474][ T3316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.148556][ T5187] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 260.834939][ T29] audit: type=1326 audit(1727409536.885:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 260.874070][ T29] audit: type=1326 audit(1727409536.935:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 260.897324][ T29] audit: type=1326 audit(1727409536.935:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 260.919596][ T29] audit: type=1326 audit(1727409536.935:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 261.050888][ T29] audit: type=1326 audit(1727409537.005:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 261.073270][ T29] audit: type=1326 audit(1727409537.015:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 261.073521][ T29] audit: type=1326 audit(1727409537.015:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 261.073757][ T29] audit: type=1326 audit(1727409537.065:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 261.140539][ T29] audit: type=1326 audit(1727409537.065:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 261.163865][ T29] audit: type=1326 audit(1727409537.065:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 261.361106][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.369799][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.385013][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.393351][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.517496][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.527876][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.601005][ T5366] loop0: detected capacity change from 0 to 2048 [ 261.657197][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.670351][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.796738][ T5366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.087413][ T5366] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.1: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 262.174902][ T5366] EXT4-fs (loop0): Remounting filesystem read-only [ 262.698574][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.785023][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.795091][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.184097][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.198484][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.817654][ T5382] loop1: detected capacity change from 0 to 4096 [ 264.076495][ T5393] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 266.043923][ T5404] atomic_op ffff88812051f128 conn xmit_atomic 0000000000000000 [ 266.605434][ T5418] loop3: detected capacity change from 0 to 16 [ 266.854125][ T5422] loop2: detected capacity change from 0 to 256 [ 266.972808][ T5422] exfat: Deprecated parameter 'utf8' [ 266.978829][ T5422] exfat: Deprecated parameter 'utf8' [ 266.984780][ T5422] exfat: Deprecated parameter 'utf8' [ 267.187698][ T5426] loop4: detected capacity change from 0 to 128 [ 267.245433][ T5422] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 267.566720][ T5426] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 267.622916][ T5426] sysv_count_free_blocks: cannot read free-list block [ 268.611289][ T5437] netlink: 48 bytes leftover after parsing attributes in process `syz.3.31'. [ 268.707833][ T5426] sysv_count_free_inodes: unable to read inode table [ 268.715070][ T5426] Process accounting resumed [ 269.334805][ T5194] sysv_free_block: trying to free block not in datazone [ 269.628820][ T5194] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 270.018871][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 270.259880][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 270.310099][ T5455] netlink: 173 bytes leftover after parsing attributes in process `syz.2.37'. [ 271.346686][ T5246] hid-generic 0080:0003:0000.0001: unknown main item tag 0x0 [ 271.354770][ T5246] hid-generic 0080:0003:0000.0001: unknown main item tag 0x0 [ 271.424194][ T5246] hid-generic 0080:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 271.519415][ T5468] loop2: detected capacity change from 0 to 512 [ 271.616022][ T5468] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 271.629600][ T5468] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 271.891066][ T5468] EXT4-fs error (device loop2): __ext4_fill_super:5458: inode #2: comm syz.2.43: casefold flag without casefold feature [ 271.968968][ T5468] EXT4-fs (loop2): get root inode failed [ 271.975319][ T5468] EXT4-fs (loop2): mount failed [ 272.011352][ T5474] overlayfs: failed to resolve './file0': -2 [ 273.178074][ T5478] loop0: detected capacity change from 0 to 64 [ 279.665567][ T5526] loop0: detected capacity change from 0 to 256 [ 279.769600][ T5526] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 279.871068][ T5529] mmap: syz.1.69 (5529) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 280.128157][ T5526] exFAT-fs (loop0): abnormal access to deleted source dentry [ 282.749871][ T5532] loop2: detected capacity change from 0 to 8192 [ 283.495375][ T5538] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 284.227257][ T5549] netlink: 'syz.4.78': attribute type 16 has an invalid length. [ 284.235671][ T5549] netlink: 'syz.4.78': attribute type 3 has an invalid length. [ 284.243497][ T5549] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.78'. [ 284.874033][ T5547] loop3: detected capacity change from 0 to 1764 [ 284.890672][ T5547] iso9660: Bad value for 'gid' [ 284.896050][ T5547] iso9660: Bad value for 'gid' [ 285.894661][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 286.092951][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.105305][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.115667][ T25] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 286.125219][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.191597][ T25] usb 4-1: config 0 descriptor?? [ 286.590847][ T29] audit: type=1326 audit(1727409562.635:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.2.87" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 286.673489][ T5242] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 286.684416][ C1] hrtimer: interrupt took 237706 ns [ 286.773769][ T25] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 286.782380][ T25] itetech 0003:06CB:73F5.0002: unbalanced collection at end of report description [ 286.871705][ T25] itetech 0003:06CB:73F5.0002: probe with driver itetech failed with error -22 [ 286.914684][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 286.988156][ T5242] usb 1-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 286.997941][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.998586][ T5246] usb 4-1: USB disconnect, device number 2 [ 287.006369][ T5242] usb 1-1: Product: syz [ 287.006494][ T5242] usb 1-1: Manufacturer: syz [ 287.006611][ T5242] usb 1-1: SerialNumber: syz [ 287.037393][ T5242] usb 1-1: config 0 descriptor?? [ 287.109084][ T5242] usb-storage 1-1:0.0: USB Mass Storage device detected [ 287.283835][ T1819] usb 1-1: USB disconnect, device number 2 [ 288.612314][ T5591] loop0: detected capacity change from 0 to 2048 [ 288.693639][ T5596] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.793348][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.800668][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.930003][ T5594] tun0: tun_chr_ioctl cmd 2147767511 [ 295.524756][ T1819] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 295.745011][ T1819] usb 2-1: Using ep0 maxpacket: 8 [ 295.797515][ T1819] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.810142][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.821626][ T1819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.927606][ T1819] usb 2-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 295.937265][ T1819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.946004][ T1819] usb 2-1: Product: syz [ 295.950462][ T1819] usb 2-1: Manufacturer: syz [ 295.957612][ T1819] usb 2-1: SerialNumber: syz [ 296.145563][ T1819] usb 2-1: config 0 descriptor?? [ 296.375693][ T1819] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0069 [ 296.600309][ T1819] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 296.608829][ T1819] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 296.621817][ T1819] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 296.810400][ T1819] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 296.819455][ T1819] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 296.859070][ T1819] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 296.870384][ T1819] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 297.053220][ T1819] usb 2-1: USB disconnect, device number 2 [ 297.420199][ T5246] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 297.655933][ T5246] usb 5-1: Using ep0 maxpacket: 32 [ 297.748769][ T5246] usb 5-1: unable to get BOS descriptor or descriptor too short [ 297.815605][ T5246] usb 5-1: config 253 has an invalid interface number: 227 but max is 0 [ 297.824556][ T5246] usb 5-1: config 253 has no interface number 0 [ 297.831244][ T5246] usb 5-1: config 253 interface 227 has no altsetting 0 [ 297.857053][ T5641] netlink: 56 bytes leftover after parsing attributes in process `syz.1.116'. [ 297.866831][ T5641] netlink: 56 bytes leftover after parsing attributes in process `syz.1.116'. [ 297.929164][ T5246] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 297.938858][ T5246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.947854][ T5246] usb 5-1: Product: syz [ 297.952321][ T5246] usb 5-1: Manufacturer: syz [ 297.964671][ T5246] usb 5-1: SerialNumber: syz [ 298.054867][ T1819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 298.254841][ T1819] usb 3-1: Using ep0 maxpacket: 8 [ 298.302674][ T1819] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 298.312469][ T1819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.366401][ T5643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.117'. [ 298.379767][ T1819] usb 3-1: config 0 descriptor?? [ 298.429071][ T1819] pvrusb2: Hardware description: Terratec Grabster AV400 [ 298.437204][ T1819] pvrusb2: ********** [ 298.441415][ T1819] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 298.452418][ T1819] pvrusb2: Important functionality might not be entirely working. [ 298.463124][ T1819] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 298.475016][ T1819] pvrusb2: ********** [ 298.769936][ T2022] pvrusb2: Invalid write control endpoint [ 298.912538][ T5246] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 298.915540][ T5242] usb 3-1: USB disconnect, device number 2 [ 298.934969][ T3375] usb 5-1: Failed to submit usb control message: -71 [ 298.946678][ T3375] usb 5-1: unable to send the bmi data to the device: -71 [ 298.954121][ T3375] usb 5-1: unable to get target info from device [ 298.963261][ T3375] usb 5-1: could not get target info (-71) [ 298.969546][ T3375] usb 5-1: could not probe fw (-71) [ 299.163822][ T5246] usb 5-1: USB disconnect, device number 2 [ 299.317418][ T2022] pvrusb2: Invalid write control endpoint [ 299.323488][ T2022] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 299.341069][ T2022] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 299.351618][ T2022] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 299.362709][ T2022] pvrusb2: Device being rendered inoperable [ 299.371824][ T2022] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 299.379829][ T2022] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 299.390174][ T2022] pvrusb2: Attached sub-driver cx25840 [ 299.395997][ T2022] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 299.406452][ T2022] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 299.503094][ T5655] loop4: detected capacity change from 0 to 256 [ 299.749969][ T5658] loop4: detected capacity change from 0 to 8 [ 301.545005][ T5193] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 301.553761][ T5193] Bluetooth: hci0: Injecting HCI hardware error event [ 301.564208][ T5193] Bluetooth: hci0: hardware error 0x00 [ 302.616303][ T5689] loop2: detected capacity change from 0 to 512 [ 302.807767][ T5689] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 302.891766][ T5689] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 302.901860][ T5689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.991562][ T5689] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.136: Directory hole found for htree leaf block 0 [ 303.024724][ T5242] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 303.119881][ T1819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 303.204590][ T5242] usb 1-1: Using ep0 maxpacket: 32 [ 303.287316][ T5242] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.299462][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 303.311214][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 303.317240][ T5203] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.322837][ T5242] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.348377][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.438107][ T5242] usb 1-1: config 0 descriptor?? [ 303.460254][ T5688] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 303.510649][ T5242] hub 1-1:0.0: USB hub found [ 303.574875][ T1819] usb 4-1: Using ep0 maxpacket: 16 [ 303.627548][ T1819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 303.640359][ T1819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.685328][ T5193] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 303.709836][ T5242] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 303.742699][ T1819] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.754896][ T1819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.763230][ T1819] usb 4-1: Product: syz [ 303.768437][ T1819] usb 4-1: Manufacturer: syz [ 303.773595][ T1819] usb 4-1: SerialNumber: syz [ 303.807591][ T1819] usb 4-1: config 0 descriptor?? [ 303.833677][ T1819] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 303.843642][ T1819] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 303.919842][ T5698] loop1: detected capacity change from 0 to 1024 [ 304.320431][ T5242] hid-generic 0003:046D:C314.0003: unknown main item tag 0x0 [ 304.425499][ T5242] hid-generic 0003:046D:C314.0003: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.0-1/input0 [ 304.527543][ T5242] usb 1-1: USB disconnect, device number 3 [ 304.715616][ T1819] em28xx 4-1:0.0: unknown em28xx chip ID (151) [ 304.903359][ T5703] netlink: 52 bytes leftover after parsing attributes in process `syz.4.140'. [ 305.009308][ T5705] No control pipe specified [ 305.044968][ T1819] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 305.073418][ T1819] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 305.082688][ T1819] em28xx 4-1:0.0: No AC97 audio processor [ 305.298604][ T1819] usb 4-1: USB disconnect, device number 3 [ 305.306384][ T1819] em28xx 4-1:0.0: Disconnecting em28xx [ 305.549575][ T1819] em28xx 4-1:0.0: Freeing device [ 307.352455][ T5729] tun0: tun_chr_ioctl cmd 2148553947 [ 308.312377][ T5739] loop1: detected capacity change from 0 to 64 [ 308.531273][ T29] audit: type=1804 audit(1727409584.575:13): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.157" name="/newroot/29/file0/file1" dev="loop1" ino=5 res=1 errno=0 [ 308.589896][ T5727] loop0: detected capacity change from 0 to 4096 [ 309.066535][ T5727] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 309.596966][ T5755] capability: warning: `syz.4.164' uses deprecated v2 capabilities in a way that may be insecure [ 310.385667][ T5763] bridge0: entered promiscuous mode [ 310.459509][ T5763] bridge0: left promiscuous mode [ 311.727875][ T5782] warning: `syz.3.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 311.818225][ T5785] netlink: 116 bytes leftover after parsing attributes in process `syz.1.176'. [ 312.568744][ T5794] netlink: 'syz.4.179': attribute type 1 has an invalid length. [ 312.693084][ T5791] netlink: 32 bytes leftover after parsing attributes in process `syz.2.178'. [ 313.346040][ T5801] cgroup: Need name or subsystem set [ 314.151574][ T5812] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 315.363678][ T5813] loop2: detected capacity change from 0 to 4096 [ 315.373144][ T5813] ======================================================= [ 315.373144][ T5813] WARNING: The mand mount option has been deprecated and [ 315.373144][ T5813] and is ignored by this kernel. Remove the mand [ 315.373144][ T5813] option from the mount to silence this warning. [ 315.373144][ T5813] ======================================================= [ 315.866281][ T5830] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.515118][ T5201] Bluetooth: hci4: command 0x0405 tx timeout [ 318.670338][ T5867] netem: change failed [ 319.918063][ T5886] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 319.994843][ T5193] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 320.004200][ T5193] Bluetooth: hci1: Injecting HCI hardware error event [ 320.021101][ T5193] Bluetooth: hci1: hardware error 0x00 [ 320.850946][ T5898] loop3: detected capacity change from 0 to 1024 [ 321.046615][ T5898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.155260][ T5898] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 321.756060][ T5914] netlink: 152 bytes leftover after parsing attributes in process `syz.0.230'. [ 321.808851][ T5197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.093114][ T5193] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 322.703227][ T5920] loop3: detected capacity change from 0 to 2048 [ 322.843662][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 323.043737][ T5920] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 324.470842][ T5920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.757805][ T29] audit: type=1804 audit(1727409856.811:14): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.234" name="/newroot/49/file0/bus" dev="loop3" ino=1367 res=1 errno=0 [ 324.780834][ T29] audit: type=1800 audit(1727409856.811:15): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.234" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 324.933194][ T5944] loop1: detected capacity change from 0 to 1024 [ 325.500522][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 325.636102][ T5944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.649286][ T5944] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.752307][ T5961] loop3: detected capacity change from 0 to 128 [ 326.161911][ T5956] loop0: detected capacity change from 0 to 1764 [ 326.240902][ T5956] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 326.251232][ T5956] ISOFS: unable to read i-node block [ 326.256985][ T5956] isofs_fill_super: get root inode failed [ 326.378593][ T5191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.357505][ T5975] loop1: detected capacity change from 0 to 256 [ 327.655717][ T5978] tap0: tun_chr_ioctl cmd 2148553947 [ 328.615823][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 329.026495][ T5993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 329.185562][ T5246] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 329.384549][ T5246] usb 3-1: Using ep0 maxpacket: 16 [ 329.419957][ T5246] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.432034][ T5246] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.447283][ T5246] usb 3-1: config 1 interface 0 has no altsetting 0 [ 329.722339][ T5246] usb 3-1: string descriptor 0 read error: -22 [ 329.735851][ T5246] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.40 [ 329.745553][ T5246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.220979][ T5246] usbhid 3-1:1.0: can't add hid device: -71 [ 330.229658][ T5246] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 330.310830][ T5246] usb 3-1: USB disconnect, device number 3 [ 330.433299][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.275'. [ 330.528654][ T6017] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 332.042642][ T2819] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 332.050725][ T2819] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 332.069946][ T2819] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 332.804325][ T6051] netlink: 152 bytes leftover after parsing attributes in process `syz.3.289'. [ 332.880590][ T6044] loop2: detected capacity change from 0 to 1024 [ 333.334408][ T29] audit: type=1800 audit(1727409865.381:16): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.287" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 334.648640][ T6076] loop2: detected capacity change from 0 to 764 [ 334.790016][ T6080] loop0: detected capacity change from 0 to 24 [ 334.804135][ T6076] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 334.930325][ T6082] loop1: detected capacity change from 0 to 256 [ 334.951249][ T6076] Symlink component flag not implemented [ 334.957342][ T6076] Symlink component flag not implemented [ 335.093556][ T6082] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 335.202674][ T6084] Symlink component flag not implemented (128) [ 335.209495][ T6084] Symlink component flag not implemented (122) [ 336.964675][ T2819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 337.284600][ T2819] usb 2-1: Using ep0 maxpacket: 8 [ 337.299981][ T2819] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 337.311269][ T2819] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 337.323811][ T2819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 337.335203][ T2819] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.474032][ T2819] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 337.483638][ T2819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.492146][ T2819] usb 2-1: Product: syz [ 337.496756][ T2819] usb 2-1: Manufacturer: syz [ 337.501646][ T2819] usb 2-1: SerialNumber: syz [ 337.507329][ T1819] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 337.620553][ T2819] usb 2-1: config 0 descriptor?? [ 337.733250][ T1819] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 337.742931][ T1819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.787753][ T2819] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 337.916769][ T1819] usb 4-1: config 0 descriptor?? [ 337.943328][ T1819] cp210x 4-1:0.0: cp210x converter detected [ 338.017128][ T2819] usb 2-1: USB disconnect, device number 3 [ 338.017239][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 338.390435][ T1819] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 338.431224][ T1819] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 338.488689][ T1819] usb 4-1: cp210x converter now attached to ttyUSB0 [ 338.635635][ T1819] usb 4-1: USB disconnect, device number 4 [ 338.694778][ T1819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 338.706204][ T1819] cp210x 4-1:0.0: device disconnected [ 339.844626][ T5242] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 339.956076][ T6134] loop3: detected capacity change from 0 to 128 [ 340.049163][ T6134] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.085441][ T6134] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.095065][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 340.164475][ T5242] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 340.173991][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.182593][ T5242] usb 2-1: Product: syz [ 340.187310][ T5242] usb 2-1: Manufacturer: syz [ 340.192212][ T5242] usb 2-1: SerialNumber: syz [ 340.238017][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 340.261769][ T6134] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 340.343979][ T5242] usb 2-1: config 0 descriptor?? [ 340.406768][ T6120] loop4: detected capacity change from 0 to 4096 [ 340.473750][ T6120] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 340.565475][ T5197] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.629889][ T5242] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.065380][ T6142] loop0: detected capacity change from 0 to 256 [ 341.277516][ T5242] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 341.355482][ T5242] usb 2-1: USB disconnect, device number 4 [ 341.471396][ T6142] FAT-fs (loop0): Directory bread(block 64) failed [ 341.479158][ T6142] FAT-fs (loop0): Directory bread(block 65) failed [ 341.486683][ T6142] FAT-fs (loop0): Directory bread(block 66) failed [ 341.493547][ T6142] FAT-fs (loop0): Directory bread(block 67) failed [ 341.500832][ T6142] FAT-fs (loop0): Directory bread(block 68) failed [ 341.507887][ T6142] FAT-fs (loop0): Directory bread(block 69) failed [ 341.515078][ T6142] FAT-fs (loop0): Directory bread(block 70) failed [ 341.521916][ T6142] FAT-fs (loop0): Directory bread(block 71) failed [ 341.529617][ T6142] FAT-fs (loop0): Directory bread(block 72) failed [ 341.547011][ T6142] FAT-fs (loop0): Directory bread(block 73) failed [ 343.084969][ T6146] loop2: detected capacity change from 0 to 4096 [ 343.109284][ T6157] loop4: detected capacity change from 0 to 1024 [ 343.144498][ T6157] EXT4-fs: Ignoring removed oldalloc option [ 343.145450][ T6146] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 343.224013][ T6157] EXT4-fs (loop4): bad geometry: block count 1341 exceeds size of device (512 blocks) [ 343.756852][ T6146] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 344.467597][ T6169] loop0: detected capacity change from 0 to 128 [ 344.991639][ T6176] loop2: detected capacity change from 0 to 64 [ 346.787614][ T6201] bridge1: entered promiscuous mode [ 346.793477][ T6201] bridge1: entered allmulticast mode [ 347.512913][ T6186] loop3: detected capacity change from 0 to 4096 [ 347.546451][ T6186] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 347.954150][ T6186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 347.986761][ T6213] input: syz1 as /devices/virtual/input/input6 [ 348.065384][ T6186] ntfs3: loop3: Failed to load $Extend (-22). [ 348.072078][ T6186] ntfs3: loop3: Failed to initialize $Extend. [ 348.426457][ T1819] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 348.635982][ T1819] usb 1-1: Using ep0 maxpacket: 32 [ 348.691211][ T1819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.702748][ T1819] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 348.714067][ T1819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.831224][ T1819] usb 1-1: config 0 descriptor?? [ 349.336969][ T6229] sctp: [Deprecated]: syz.3.366 (pid 6229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.336969][ T6229] Use struct sctp_sack_info instead [ 349.420580][ T29] audit: type=1326 audit(1727409881.421:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.370" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 349.451124][ T29] audit: type=1326 audit(1727409881.421:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.370" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 350.006087][ T6236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.372'. [ 350.015767][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 351.049574][ T1819] nintendo 0003:057E:200E.0005: unknown main item tag 0x0 [ 351.139250][ T6245] syz.4.375 (6245) used greatest stack depth: 4760 bytes left [ 351.152109][ T1819] nintendo 0003:057E:200E.0005: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 351.225935][ T1819] nintendo 0003:057E:200E.0005: Failed charging grip handshake [ 351.234944][ T1819] nintendo 0003:057E:200E.0005: Failed to initialize controller; ret=-110 [ 351.341732][ T1819] nintendo 0003:057E:200E.0005: probe - fail = -110 [ 351.349464][ T1819] nintendo 0003:057E:200E.0005: probe with driver nintendo failed with error -110 [ 351.502137][ T1819] usb 1-1: USB disconnect, device number 4 [ 352.212201][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.219216][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.663704][ T6231] coredump: 150(syz.2.370): interrupted: fatal signal pending [ 352.671741][ T6231] coredump: 150(syz.2.370): written to core: VMAs: 29, size 99389440; core: 14331518 bytes, pos 14716928 [ 353.654528][ T6269] process 'syz.2.385' launched './file1' with NULL argv: empty string added [ 353.748377][ T6265] loop0: detected capacity change from 0 to 1024 [ 354.010056][ T6265] hfsplus: catalog searching failed [ 354.193276][ T6274] loop3: detected capacity change from 0 to 64 [ 354.457696][ T29] audit: type=1800 audit(1727409886.491:19): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.386" name="bus" dev="loop3" ino=6 res=0 errno=0 [ 354.534172][ T34] hfsplus: b-tree write err: -5, ino 4 [ 355.323218][ T6282] loop4: detected capacity change from 0 to 736 [ 356.076328][ T6284] loop3: detected capacity change from 0 to 2048 [ 356.255939][ T6297] bridge0: port 3(syz_tun) entered blocking state [ 356.263338][ T6297] bridge0: port 3(syz_tun) entered disabled state [ 356.273964][ T6297] syz_tun: entered allmulticast mode [ 356.286458][ T6297] syz_tun: entered promiscuous mode [ 356.302471][ T6297] bridge0: port 3(syz_tun) entered blocking state [ 356.309861][ T6297] bridge0: port 3(syz_tun) entered forwarding state [ 356.387054][ T6298] loop0: detected capacity change from 0 to 1024 [ 356.812464][ T6298] hfsplus: extend alloc file! (8192,65536,366) [ 357.740410][ T6307] loop2: detected capacity change from 0 to 512 [ 358.541137][ T6307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.224854][ T5203] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.293107][ T6322] loop1: detected capacity change from 0 to 128 [ 359.375175][ T4562] Bluetooth: hci2: command 0x0406 tx timeout [ 359.381563][ T5195] Bluetooth: hci3: command 0x0406 tx timeout [ 359.511354][ T6322] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.530618][ T6322] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.632475][ T6322] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x19) [ 360.140391][ T5191] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.050181][ T6348] loop3: detected capacity change from 0 to 256 [ 361.144458][ T6348] MINIX-fs: mounting file system with errors, running fsck is recommended [ 362.624650][ T6363] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 362.859307][ T6370] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 363.278489][ T6375] loop2: detected capacity change from 0 to 256 [ 363.878025][ T6378] loop3: detected capacity change from 0 to 128 [ 364.054087][ T6378] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.141693][ T6375] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 364.155610][ T6378] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.442121][ T6387] loop0: detected capacity change from 0 to 256 [ 364.499489][ T6387] exfat: Deprecated parameter 'utf8' [ 364.505261][ T6387] exfat: Deprecated parameter 'utf8' [ 364.552935][ T5197] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.768216][ T6387] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x811ad48d, utbl_chksum : 0xe619d30d) [ 365.442882][ T6399] rose0: tun_chr_ioctl cmd 1074025681 [ 365.880973][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 366.579807][ T6412] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 367.064170][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 368.175510][ T6433] loop1: detected capacity change from 0 to 512 [ 368.180872][ T6434] loop4: detected capacity change from 0 to 256 [ 368.399530][ T6433] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 368.611708][ T6434] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 368.738053][ T29] audit: type=1800 audit(1727409900.781:20): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.455" name="bus" dev="loop4" ino=1048616 res=0 errno=0 [ 368.792937][ T6430] loop2: detected capacity change from 0 to 4096 [ 368.804182][ T5242] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 369.058772][ T6439] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.204876][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 369.223802][ T5242] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 369.233215][ T5242] usb 2-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 369.243960][ T5242] usb 2-1: config 0 has no interface number 0 [ 369.250506][ T5242] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 82, changing to 10 [ 369.262293][ T5242] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1703, setting to 1024 [ 369.274115][ T5242] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.295327][ T5242] usb 2-1: config 0 interface 52 has no altsetting 0 [ 369.360831][ T29] audit: type=1804 audit(1727409901.391:21): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.452" name="/newroot/85/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 369.532866][ T5242] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 369.543282][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 369.552173][ T5242] usb 2-1: Product: syz [ 369.556843][ T5242] usb 2-1: SerialNumber: syz [ 369.630452][ T5242] usb 2-1: config 0 descriptor?? [ 369.918347][ T5242] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input8 [ 369.973039][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 370.498767][ T5246] usb 2-1: USB disconnect, device number 5 [ 370.498993][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 371.587701][ T6451] netlink: 'syz.2.461': attribute type 64 has an invalid length. [ 371.600603][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 373.222989][ T6475] ALSA: mixer_oss: invalid OSS volume '˛}8ző§00000' [ 373.776330][ T6477] loop2: detected capacity change from 0 to 1024 [ 374.186573][ T6477] hfsplus: bad catalog entry type [ 374.937634][ T3375] hfsplus: b-tree write err: -5, ino 4 [ 375.835462][ T29] audit: type=1326 audit(1727409907.851:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 375.860773][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.876474][ T29] audit: type=1326 audit(1727409907.861:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 375.903891][ T29] audit: type=1326 audit(1727409907.871:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 375.926011][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.935612][ T29] audit: type=1326 audit(1727409907.871:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 375.957732][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.970296][ T29] audit: type=1326 audit(1727409907.871:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 375.992246][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.002246][ T29] audit: type=1326 audit(1727409907.881:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 376.024269][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.034420][ T29] audit: type=1326 audit(1727409907.881:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 376.056470][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.069142][ T29] audit: type=1326 audit(1727409907.901:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 376.091516][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.101229][ T29] audit: type=1326 audit(1727409907.901:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 376.123347][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.740602][ T6519] overlayfs: failed to resolve './file0': -2 [ 379.327145][ T6544] loop3: detected capacity change from 0 to 256 [ 379.352219][ T6544] exfat: Deprecated parameter 'namecase' [ 379.445241][ T6540] loop1: detected capacity change from 0 to 128 [ 379.575773][ T6544] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 379.821885][ T6540] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.917770][ T6540] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 380.155353][ T6540] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 380.216066][ T6552] netlink: 84 bytes leftover after parsing attributes in process `syz.0.506'. [ 380.228642][ T6552] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 380.627536][ T6554] loop2: detected capacity change from 0 to 1024 [ 380.781312][ T6561] loop4: detected capacity change from 0 to 256 [ 380.942667][ T5191] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.028050][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.159596][ T6554] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #12: comm syz.2.508: corrupted in-inode xattr: bad magic number in in-inode xattr [ 381.198409][ T6554] EXT4-fs (loop2): Remounting filesystem read-only [ 381.301660][ T6561] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 381.316440][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 381.553483][ T6561] exFAT-fs (loop4): abnormal access to deleted source dentry [ 381.622765][ T25] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 381.632493][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.664596][ T25] usb 4-1: config 0 descriptor?? [ 381.700382][ T5203] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.750034][ T25] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 382.168846][ T25] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 382.670420][ T25] gspca_cpia1: usb_control_msg 02, error -71 [ 382.710769][ T25] gspca_cpia1: usb_control_msg 05, error -71 [ 382.717219][ T25] cpia1 4-1:0.0: unexpected systemstate: 00 [ 382.776344][ T25] usb 4-1: USB disconnect, device number 5 [ 384.630544][ T6604] netlink: 'syz.0.523': attribute type 16 has an invalid length. [ 384.638788][ T6604] netlink: 'syz.0.523': attribute type 3 has an invalid length. [ 384.655234][ T6604] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.523'. [ 384.904972][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 385.085085][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 385.130956][ T25] usb 3-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 385.141119][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.149827][ T25] usb 3-1: Product: syz [ 385.154395][ T25] usb 3-1: Manufacturer: syz [ 385.166503][ T25] usb 3-1: SerialNumber: syz [ 385.296604][ T25] usb 3-1: config 0 descriptor?? [ 385.321412][ T25] usb-storage 3-1:0.0: USB Mass Storage device detected [ 385.538830][ T25] usb 3-1: USB disconnect, device number 4 [ 387.045254][ T6626] loop3: detected capacity change from 0 to 2048 [ 387.193084][ T6631] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.445250][ T5193] Bluetooth: hci4: command 0x0405 tx timeout [ 389.648501][ T6662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.553'. [ 390.824585][ T6671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.557'. [ 391.076865][ T6675] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 391.951162][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.562'. [ 392.057839][ T5193] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 392.827510][ T6690] loop2: detected capacity change from 0 to 8192 [ 392.992851][ T6698] bridge0: entered promiscuous mode [ 393.057540][ T6698] bridge0: left promiscuous mode [ 393.503295][ T6696] loop0: detected capacity change from 0 to 2048 [ 393.977442][ T6696] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 394.490246][ T6696] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 394.943690][ T6707] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.039715][ T6696] Remounting filesystem read-only [ 395.637276][ T6718] loop1: detected capacity change from 0 to 512 [ 395.723303][ T6718] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 395.760100][ T6718] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 395.799245][ T6718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.996902][ T6718] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.578: Directory hole found for htree leaf block 0 [ 396.104749][ T5201] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 396.113407][ T5201] Bluetooth: hci4: Injecting HCI hardware error event [ 396.440545][ T6728] loop4: detected capacity change from 0 to 64 [ 396.536006][ T5191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.567884][ T5201] Bluetooth: hci4: command 0x0405 tx timeout [ 396.582751][ T6728] minix_free_block (loop4:21): bit already cleared [ 397.182325][ T6732] loop1: detected capacity change from 0 to 256 [ 397.228291][ T6732] msdos: Bad value for 'time_offset' [ 397.252105][ T5193] Bluetooth: hci4: hardware error 0x00 [ 397.368853][ T5201] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 398.351752][ T6730] loop2: detected capacity change from 0 to 4096 [ 398.443719][ T6730] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 399.364553][ T5193] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 401.281383][ T6754] loop4: detected capacity change from 0 to 4096 [ 401.451173][ T5193] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 401.460117][ T5193] Bluetooth: hci2: Injecting HCI hardware error event [ 401.468308][ T5193] Bluetooth: hci2: hardware error 0x00 [ 401.582764][ T6773] loop1: detected capacity change from 0 to 1024 [ 401.585143][ T6774] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.418220][ T6773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.968768][ T5191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.377167][ T6792] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 403.533914][ T5193] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 404.051334][ T6797] loop1: detected capacity change from 0 to 2048 [ 404.179682][ T6797] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 404.282490][ T6797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.447355][ T29] audit: type=1804 audit(1727410192.502:31): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.609" name="/newroot/127/file0/bus" dev="loop1" ino=1367 res=1 errno=0 [ 404.472539][ T29] audit: type=1800 audit(1727410192.502:32): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.609" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 404.756207][ T6808] netem: change failed [ 404.994758][ T6805] loop2: detected capacity change from 0 to 1764 [ 405.058270][ T6805] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 405.068160][ T6805] ISOFS: unable to read i-node block [ 405.073814][ T6805] isofs_fill_super: get root inode failed [ 405.532839][ T6820] loop4: detected capacity change from 0 to 16 [ 405.577346][ T6820] erofs: (device loop4): mounted with root inode @ nid 36. [ 406.915133][ T5246] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 407.122644][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 407.139259][ T5246] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 407.148950][ T5246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.249198][ T5246] usb 3-1: config 0 descriptor?? [ 407.319876][ T5246] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 407.500094][ T6852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.634'. [ 407.631085][ T5246] usb 3-1: USB disconnect, device number 5 [ 407.741663][ T29] audit: type=1326 audit(1727410195.802:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.4.635" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x0 [ 407.879117][ T6858] loop1: detected capacity change from 0 to 1024 [ 408.105039][ T29] audit: type=1800 audit(1727410196.142:34): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.637" name="bus" dev="loop1" ino=25 res=0 errno=0 [ 409.378764][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 409.472026][ T6879] loop0: detected capacity change from 0 to 1024 [ 409.562818][ T6887] loop4: detected capacity change from 0 to 256 [ 409.749040][ T6891] loop1: detected capacity change from 0 to 256 [ 409.753977][ T6887] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 409.783199][ T6879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.796614][ T6879] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.230572][ T6897] tun0: tun_chr_ioctl cmd 1074025677 [ 410.237501][ T6897] tun0: linktype set to 805 [ 410.310885][ T6899] loop3: detected capacity change from 0 to 256 [ 410.506151][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.687729][ T6899] FAT-fs (loop3): Directory bread(block 64) failed [ 410.696712][ T6899] FAT-fs (loop3): Directory bread(block 65) failed [ 410.703709][ T6899] FAT-fs (loop3): Directory bread(block 66) failed [ 410.713917][ T6899] FAT-fs (loop3): Directory bread(block 67) failed [ 410.721094][ T6899] FAT-fs (loop3): Directory bread(block 68) failed [ 410.728061][ T6899] FAT-fs (loop3): Directory bread(block 69) failed [ 410.738131][ T6899] FAT-fs (loop3): Directory bread(block 70) failed [ 410.745100][ T6899] FAT-fs (loop3): Directory bread(block 71) failed [ 410.752094][ T6899] FAT-fs (loop3): Directory bread(block 72) failed [ 410.761259][ T6899] FAT-fs (loop3): Directory bread(block 73) failed [ 411.492311][ T6910] tipc: Started in network mode [ 411.497827][ T6910] tipc: Node identity ac1414aa, cluster identity 4711 [ 411.507115][ T6910] tipc: Enabled bearer , priority 10 [ 411.862729][ T6916] loop0: detected capacity change from 0 to 764 [ 411.962333][ T6916] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 412.051566][ T6916] Symlink component flag not implemented [ 412.057820][ T6916] Symlink component flag not implemented [ 412.106475][ T6916] Symlink component flag not implemented (128) [ 412.113022][ T6916] Symlink component flag not implemented (122) [ 412.654739][ T25] tipc: Node number set to 2886997162 [ 413.155456][ T6939] loop1: detected capacity change from 0 to 164 [ 413.615633][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.622564][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.965239][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 415.415065][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 415.582127][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 415.893272][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 415.902964][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.911454][ T25] usb 5-1: Product: syz [ 415.916085][ T25] usb 5-1: Manufacturer: syz [ 415.920966][ T25] usb 5-1: SerialNumber: syz [ 415.960266][ T25] usb 5-1: config 0 descriptor?? [ 416.075011][ T5240] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 416.204561][ T5242] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 416.233685][ T25] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 416.301067][ T5240] usb 2-1: Using ep0 maxpacket: 32 [ 416.317306][ T29] audit: type=1326 audit(1727410204.382:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.3.687" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x0 [ 416.325053][ T5240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.351119][ T5240] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 416.360885][ T5240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.472846][ T5242] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.482888][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.567667][ T5242] usb 1-1: config 0 descriptor?? [ 416.599546][ T29] audit: type=1326 audit(1727410204.422:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.3.687" exe="/root/syz-executor" sig=31 arch=40000003 syscall=436 compat=1 ip=0xf7f36579 code=0x0 [ 416.617400][ T5240] usb 2-1: config 0 descriptor?? [ 416.690743][ T5242] cp210x 1-1:0.0: cp210x converter detected [ 416.879973][ T6967] ===================================================== [ 416.890882][ T6967] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 [ 416.898468][ T6967] _copy_to_user+0xbc/0x110 [ 416.905846][ T6967] raw_ioctl+0x3d28/0x5440 [ 416.910528][ T6967] __se_compat_sys_ioctl+0x785/0x1080 [ 416.919856][ T6967] __ia32_compat_sys_ioctl+0x93/0xe0 [ 416.925650][ T6967] ia32_sys_call+0x32a2/0x40d0 [ 416.930693][ T6967] __do_fast_syscall_32+0xb0/0x110 [ 416.936213][ T6967] do_fast_syscall_32+0x38/0x80 [ 416.941294][ T6967] do_SYSENTER_32+0x1f/0x30 [ 416.949628][ T6967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.956423][ T6967] [ 416.958865][ T6967] Uninit was created at: [ 416.963418][ T6967] __kmalloc_noprof+0x661/0xf30 [ 416.970156][ T6967] raw_ioctl+0x3bc5/0x5440 [ 416.977863][ T6967] __se_compat_sys_ioctl+0x785/0x1080 [ 416.983501][ T6967] __ia32_compat_sys_ioctl+0x93/0xe0 [ 416.989385][ T6967] ia32_sys_call+0x32a2/0x40d0 [ 416.996186][ T6967] __do_fast_syscall_32+0xb0/0x110 [ 417.001520][ T6967] do_fast_syscall_32+0x38/0x80 [ 417.011638][ T6967] do_SYSENTER_32+0x1f/0x30 [ 417.017248][ T6967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.023862][ T6967] [ 417.026471][ T6967] Byte 0 of 1 is uninitialized [ 417.031371][ T6967] Memory access of size 1 starts at ffff88803f4de8a8 [ 417.041277][ T6967] Data copied to user address 00000000f5764550 [ 417.048006][ T6967] [ 417.050479][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.4.682 Not tainted 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 417.061091][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 417.074641][ T6967] ===================================================== [ 417.082274][ T6967] Disabling lock debugging due to kernel taint [ 417.088902][ T6967] Kernel panic - not syncing: kmsan.panic set ... [ 417.097822][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.4.682 Tainted: G B 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 417.111688][ T6967] Tainted: [B]=BAD_PAGE [ 417.116741][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 417.128413][ T6967] Call Trace: [ 417.132029][ T6967] [ 417.135113][ T6967] dump_stack_lvl+0x216/0x2d0 [ 417.140042][ T6967] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 417.146252][ T6967] dump_stack+0x1e/0x30 [ 417.150666][ T6967] panic+0x4e2/0xcf0 [ 417.154849][ T6967] ? kmsan_get_metadata+0x61/0x1c0 [ 417.160278][ T6967] kmsan_report+0x2c7/0x2d0 [ 417.165071][ T6967] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 417.171216][ T6967] ? kmsan_internal_check_memory+0x48c/0x560 [ 417.177485][ T6967] ? kmsan_copy_to_user+0xd5/0xf0 [ 417.182797][ T6967] ? _copy_to_user+0xbc/0x110 [ 417.187815][ T6967] ? raw_ioctl+0x3d28/0x5440 [ 417.192680][ T6967] ? __se_compat_sys_ioctl+0x785/0x1080 [ 417.198498][ T6967] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 417.204221][ T6967] ? ia32_sys_call+0x32a2/0x40d0 [ 417.209467][ T6967] ? __do_fast_syscall_32+0xb0/0x110 [ 417.214991][ T6967] ? do_fast_syscall_32+0x38/0x80 [ 417.220250][ T6967] ? do_SYSENTER_32+0x1f/0x30 [ 417.225141][ T6967] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.231949][ T6967] ? kmsan_get_metadata+0x13e/0x1c0 [ 417.237440][ T6967] ? kmsan_get_metadata+0x13e/0x1c0 [ 417.242915][ T6967] ? kmsan_get_metadata+0x13e/0x1c0 [ 417.248484][ T6967] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 417.254593][ T6967] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 417.260246][ T6967] ? filter_irq_stacks+0x60/0x1a0 [ 417.265558][ T6967] ? kmsan_get_metadata+0x13e/0x1c0 [ 417.271044][ T6967] ? kmsan_get_metadata+0x13e/0x1c0 [ 417.276541][ T6967] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 417.282645][ T6967] kmsan_internal_check_memory+0x48c/0x560 [ 417.288734][ T6967] kmsan_copy_to_user+0xd5/0xf0 [ 417.293846][ T6967] ? should_fail_usercopy+0x2e/0x40 [ 417.299296][ T6967] _copy_to_user+0xbc/0x110 [ 417.304123][ T6967] raw_ioctl+0x3d28/0x5440 [ 417.308811][ T6967] ? kmsan_get_metadata+0x13e/0x1c0 [ 417.314288][ T6967] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 417.320380][ T6967] ? do_vfs_ioctl+0x14fc/0x3e80 [ 417.325488][ T6967] ? kmsan_get_metadata+0x60/0x1c0 [ 417.330878][ T6967] ? __pfx_raw_ioctl+0x10/0x10 [ 417.335897][ T6967] __se_compat_sys_ioctl+0x785/0x1080 [ 417.341514][ T6967] ? kmsan_get_metadata+0x13e/0x1c0 [ 417.346994][ T6967] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 417.353598][ T6967] ? kmsan_get_metadata+0x13e/0x1c0 [ 417.359086][ T6967] __ia32_compat_sys_ioctl+0x93/0xe0 [ 417.364624][ T6967] ia32_sys_call+0x32a2/0x40d0 [ 417.369661][ T6967] __do_fast_syscall_32+0xb0/0x110 [ 417.374998][ T6967] ? irqentry_exit+0x16/0x60 [ 417.379868][ T6967] do_fast_syscall_32+0x38/0x80 [ 417.384949][ T6967] do_SYSENTER_32+0x1f/0x30 [ 417.389751][ T6967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.396380][ T6967] RIP: 0023:0xf7fe0579 [ 417.400629][ T6967] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 417.420494][ T6967] RSP: 002b:00000000f5764504 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 417.429179][ T6967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085504 [ 417.437342][ T6967] RDX: 00000000f5764548 RSI: 00000000f746bff4 RDI: 0000000000000001 [ 417.445500][ T6967] RBP: 00000000f746bff4 R08: 0000000000000000 R09: 0000000000000000 [ 417.453649][ T6967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 417.461883][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.470086][ T6967] [ 417.473585][ T6967] Kernel Offset: disabled [ 417.477996][ T6967] Rebooting in 86400 seconds..