last executing test programs: 2m37.711977213s ago: executing program 3 (id=14): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{}, {0x4, 0xb, 0x7, 0x81, 0x9}}}}, 0xe) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x8, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x4000801) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 2m6.261496141s ago: executing program 3 (id=14): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{}, {0x4, 0xb, 0x7, 0x81, 0x9}}}}, 0xe) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x8, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x4000801) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 1m50.616776284s ago: executing program 1 (id=190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x21}, 0x0) 1m49.348478664s ago: executing program 1 (id=195): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423f, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}) 1m48.6354919s ago: executing program 1 (id=196): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 1m47.992376201s ago: executing program 1 (id=198): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000000480)={[{@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {}]}, 0x4, 0x339, &(0x7f00000004c0)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m47.188610204s ago: executing program 1 (id=201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x5, 0xffffffff) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4200c2, 0x0) unshare(0x6a040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x410100, 0x14e) 1m46.587555214s ago: executing program 1 (id=203): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e", 0x3b}, {&(0x7f0000000e00)="1bfb4448a12f6f3feb92fd5b7d34a411adb5e76b926b5dc707080dd16ab5de9bb23938", 0x23}], 0x2, 0x0, 0x0, 0x1f000801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r4, @ANYBLOB="1400350064756d6d79300000"], 0x3c}}, 0x0) 1m43.889167697s ago: executing program 32 (id=203): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e", 0x3b}, {&(0x7f0000000e00)="1bfb4448a12f6f3feb92fd5b7d34a411adb5e76b926b5dc707080dd16ab5de9bb23938", 0x23}], 0x2, 0x0, 0x0, 0x1f000801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r4, @ANYBLOB="1400350064756d6d79300000"], 0x3c}}, 0x0) 1m33.958382124s ago: executing program 3 (id=14): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{}, {0x4, 0xb, 0x7, 0x81, 0x9}}}}, 0xe) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x8, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x4000801) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 1m5.800779962s ago: executing program 3 (id=14): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{}, {0x4, 0xb, 0x7, 0x81, 0x9}}}}, 0xe) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x8, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x4000801) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 37.50134144s ago: executing program 3 (id=14): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{}, {0x4, 0xb, 0x7, 0x81, 0x9}}}}, 0xe) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x8, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x4000801) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 11.946099802s ago: executing program 4 (id=442): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede1102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='@7\r'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x40, 0xe, 0x28, "bc4c24bf6afa06818f8faedaecf0ff41495295498506366e892b7f84c7e84456b205b923a298b09f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="400084"], 0x0, 0x0, 0x0, 0x0, 0x0}) 11.798560096s ago: executing program 0 (id=443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000004b00)=0x52, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/19, 0x13}, 0x4000000c}], 0x1, 0x10002, 0x0) 10.234224478s ago: executing program 0 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 9.331716549s ago: executing program 0 (id=447): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x3, 0x0, 0xfffffffd) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8.069044517s ago: executing program 2 (id=450): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) 7.872607657s ago: executing program 4 (id=451): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006"], 0x54}}, 0x0) 7.664516429s ago: executing program 5 (id=452): bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 7.43761464s ago: executing program 3 (id=14): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{}, {0x4, 0xb, 0x7, 0x81, 0x9}}}}, 0xe) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x8, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x4000801) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 7.375190264s ago: executing program 2 (id=453): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 4.233228707s ago: executing program 0 (id=454): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x38, 0x4) write(r0, &(0x7f0000000440)="08008edf773c8000", 0x8) recvmmsg(r0, &(0x7f0000007640)=[{{0x0, 0x47, 0x0}, 0xa8e9}], 0x1, 0x0, 0x0) 4.211594141s ago: executing program 5 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x11982f, 0x0) 4.211242442s ago: executing program 2 (id=456): sendmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}}], 0x1, 0x400c800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003ec0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24040000}, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 4.189365516s ago: executing program 4 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) 3.518914669s ago: executing program 0 (id=458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) 3.367722875s ago: executing program 5 (id=459): memfd_create(&(0x7f0000000640)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\b\x9a<\xceU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\boc\x88\xbep\x94\x0egs\xfa\xa82\x7fK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xb1\xc3l\xf24\x8f\xf0\xe2\xbc\xbb\xc7n\xd8\x0f\x8b\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb3u\x8c\xb1\x8e\xe9\xd1\xed\xb2\x86\xad\x92\xa3\xce\xf6<\xdd\x92\xc6\x16\x12n\xeb\x04\xc6\x85\xf5\x82\xcb\x86\xaf\xa9\x92\xd7\xc1\xa9\xb4\xbd\xdb\xffnpY\xca\x97\xb5\x1b\xe3jq\x9b\xff\x04\nE\a,M\x9a\xa7\x01\xc3\x8d\'0\x9f\xd4\x9a\xa6\x01\xc1\xc7\x10W\x8dV\xcc\xa9\xe7\xb8\t\x9buQ\x82\v_\xec\x95!\xa7\xbd\x02=\xaf\x92S*O\xb2%(\xeb\xf7\x16\x7f\x86\a\f\xa6@v\x9a\x9f\xd3\xc4\xfb\xe1\x05\xee\xc1\x97\xed\x17\xd6\xaa*1CD\xba\xae%r`\xa49\xbd\xa4\xb1\xa6N\x95 \f\xf1q\xaeugG\xed\x1d\x01AL\xf0z\xd0\xba`d\xe5\x81\xa3\xd6\xff5M\x03\x8f\xcaN]\xf2\xc7\x9c\x10\xb7i\t7\xd1\r\xf4\xbf\x8c\xe0\x1eh<\xaa(\x95s\xc6vI\f\xb0\x1b\xa1\xd3f\x01\xe3\x17\x92D\xeaF\x8f:\x82\xfa\xb6\xd79\xa2=kB\x00\xb8\x84Z7Q\x02\xfd\xa1WV\x7f>\xe9\n\nh\xc0\x05 \xacR\xeb\xd7\xdd)\x15\x8e\x04\xf8U\xf3S\xf1\x1f\x9aR\x8f|\xb3\v\x81\x97.9\xae.\x85O\x15\x0e\xc6\xef', 0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) 3.156240717s ago: executing program 2 (id=460): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x80000001) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 2.790818951s ago: executing program 4 (id=461): fsopen(0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x7040, 0x0) 2.193817674s ago: executing program 2 (id=462): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.908275084s ago: executing program 4 (id=463): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005200)=@delchain={0x114, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x98, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ctinfo={0x58, 0xe, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x19, 0x6, "c29bbea977e4535250f2c8f19efcf1cae3055d9c6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x114}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x7, 0x30}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.837068512s ago: executing program 5 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="5900fd050000040000002100000008000300", @ANYRES32=r2, @ANYBLOB="0c002c8008000000095f000074002d800a0000006f6419b079d4000022000000615059ca6b3ce4e61ac43b892bc2e5db68f1c7d76c29cf744eac57a7726400001a000000fbbc2948d0ecafb306e1d144a6a590b52471e5dd6ccd00000a000000020202020202000009000000842536aee00000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4040804}, 0x80) 1.488402297s ago: executing program 0 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000b00), 0x1, 0x55ae, &(0x7f000000ac40)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.216214264s ago: executing program 2 (id=466): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503", @ANYBLOB="06c8"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.059842083s ago: executing program 5 (id=467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)) 781.740943ms ago: executing program 4 (id=468): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2000002389a) 0s ago: executing program 5 (id=469): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) kernel console output (not intermixed with test programs): omm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 349.647595][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 349.682553][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.693333][ T5873] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.820763][ T5873] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.830595][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.839123][ T5873] usb 1-1: Product: syz [ 349.843580][ T5873] usb 1-1: Manufacturer: syz [ 349.848569][ T5873] usb 1-1: SerialNumber: syz [ 349.914891][ T5797] Bluetooth: hci0: command tx timeout [ 350.112301][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.120314][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.128463][ T6398] bridge_slave_0: entered allmulticast mode [ 350.139171][ T6398] bridge_slave_0: entered promiscuous mode [ 350.396440][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.404729][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.413358][ T6398] bridge_slave_1: entered allmulticast mode [ 350.423161][ T6398] bridge_slave_1: entered promiscuous mode [ 350.436127][ T5873] usb 1-1: 0:2 : does not exist [ 350.509285][ T5873] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 350.699512][ T5873] usb 1-1: USB disconnect, device number 6 [ 350.772182][ T6440] loop4: detected capacity change from 0 to 2048 [ 350.876382][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.979282][ T6442] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.024106][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.282793][ T6445] net_ratelimit: 10 callbacks suppressed [ 351.282882][ T6445] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.359851][ T24] IPVS: starting estimator thread 0... [ 351.487817][ T6448] IPVS: using max 192 ests per chain, 9600 per kthread [ 351.996045][ T5797] Bluetooth: hci0: command tx timeout [ 352.265711][ T6398] team0: Port device team_slave_0 added [ 352.347246][ T6398] team0: Port device team_slave_1 added [ 352.481500][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.488407][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.597783][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.605095][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.634698][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.855260][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.862603][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.891059][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.630911][ T6398] hsr_slave_0: entered promiscuous mode [ 353.641911][ T6398] hsr_slave_1: entered promiscuous mode [ 353.729444][ T6456] loop1: detected capacity change from 0 to 32768 [ 353.843146][ T6456] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 353.902790][ T6456] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 354.038947][ T5797] Bluetooth: hci0: command tx timeout [ 354.240746][ T6462] kvm: pic: non byte read [ 354.246889][ T6462] kvm: pic: non byte read [ 354.451931][ T6456] XFS (loop1): Ending clean mount [ 354.482922][ T6456] XFS (loop1): Quotacheck needed: Please wait. [ 354.589797][ T6456] XFS (loop1): Quotacheck: Done. [ 354.708153][ T6477] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 354.871021][ T5788] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 354.906781][ T6477] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.916431][ T6477] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.925984][ T6477] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.939899][ T6477] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.958894][ T6477] bond1: (slave geneve2): making interface the new active one [ 354.975288][ T6477] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 354.985602][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.110'. [ 355.036297][ T6481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.073119][ T1827] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 355.856267][ T6486] loop2: detected capacity change from 0 to 256 [ 355.858822][ T6398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.974803][ T6398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.997636][ T6485] loop0: detected capacity change from 0 to 2048 [ 356.048779][ T6485] udf: Unknown parameter 'partit^on' [ 356.079045][ T6398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.079831][ T6486] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 356.100045][ T6486] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 356.179485][ T6398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.320592][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'. [ 357.294756][ T6485] loop0: detected capacity change from 0 to 8192 [ 357.382656][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.398292][ T5849] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 357.532030][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.587480][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 357.617117][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.619407][ T5849] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 357.624926][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.632942][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.653731][ T5849] usb 3-1: config 0 has no interface number 0 [ 357.660269][ T5849] usb 3-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 357.674091][ T5849] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 357.683624][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.726484][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 357.767928][ T6500] batman_adv: batadv0: Interface deactivated: dummy0 [ 357.775210][ T6500] batman_adv: batadv0: Removing interface: dummy0 [ 357.815839][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.825188][ T6500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.849242][ T5849] usb 3-1: config 0 descriptor?? [ 357.884697][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.892831][ T6500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.924958][ T5849] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.035674][ T6485] pim6reg: entered allmulticast mode [ 358.071492][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.079470][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.163764][ T5849] snd-usb-audio 3-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 358.197721][ T5849] usb 3-1: USB disconnect, device number 3 [ 358.208922][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 358.229663][ T6503] pim6reg: left allmulticast mode [ 358.399209][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 358.455126][ T9] usb 2-1: config 7 has an invalid interface number: 227 but max is 0 [ 358.466152][ T9] usb 2-1: config 7 has no interface number 0 [ 358.538806][ T9] usb 2-1: New USB device found, idVendor=5dd4, idProduct=a8ac, bcdDevice=ac.b1 [ 358.548624][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.557278][ T9] usb 2-1: Product: syz [ 358.561725][ T9] usb 2-1: Manufacturer: syz [ 358.570995][ T9] usb 2-1: SerialNumber: syz [ 358.875444][ T9] cdc_eem 2-1:7.227: probe with driver cdc_eem failed with error -22 [ 359.002216][ T9] usb 2-1: USB disconnect, device number 4 [ 360.285585][ T6520] loop1: detected capacity change from 0 to 1024 [ 360.798407][ T6528] loop2: detected capacity change from 0 to 256 [ 360.919686][ T6528] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 360.933867][ T6528] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 361.252203][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.550440][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 361.679249][ T6398] veth0_vlan: entered promiscuous mode [ 361.741567][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 361.769615][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.781605][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.791945][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 361.801828][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.843569][ T6398] veth1_vlan: entered promiscuous mode [ 361.918075][ T9] usb 1-1: config 0 descriptor?? [ 361.936035][ T9] hub 1-1:0.0: USB hub found [ 362.093235][ T6539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.171066][ T6540] loop4: detected capacity change from 0 to 128 [ 362.205397][ T6398] veth0_macvtap: entered promiscuous mode [ 362.231387][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 362.231706][ T6540] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.291239][ T6398] veth1_macvtap: entered promiscuous mode [ 362.332487][ T6540] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 362.466783][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 362.474087][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 362.497155][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.509719][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.522190][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.533010][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.543236][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.554331][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.574397][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.587440][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 362.598715][ T5848] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 362.649350][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.663175][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.674193][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.690042][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.701503][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.712810][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.729122][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.742635][ T9] usb 1-1: USB disconnect, device number 7 [ 362.813917][ T6398] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.824848][ T6398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.831144][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 362.834095][ T6398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.848403][ T6398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.909825][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.922915][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 362.938695][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 362.950370][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 362.962183][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 362.977981][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.075460][ T5848] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 363.085977][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.094616][ T5848] usb 3-1: Product: syz [ 363.099232][ T5848] usb 3-1: Manufacturer: syz [ 363.104130][ T5848] usb 3-1: SerialNumber: syz [ 363.145901][ T5848] usb 3-1: config 0 descriptor?? [ 363.154409][ T6543] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 363.220766][ T5848] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 363.487967][ T5848] usb 3-1: USB disconnect, device number 4 [ 363.821640][ T6551] loop0: detected capacity change from 0 to 256 [ 363.939413][ T6551] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 363.954676][ T6551] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 363.966006][ T6551] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 363.974651][ T6551] UDF-fs: Scanning with blocksize 512 failed [ 364.024636][ T6551] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 364.066651][ T6551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.746762][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 365.826624][ T6561] loop0: detected capacity change from 0 to 32768 [ 366.693925][ T6561] loop0: detected capacity change from 0 to 1024 [ 366.718640][ T6561] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 366.730050][ T6561] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 366.740719][ T6561] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 366.965452][ T6568] loop4: detected capacity change from 0 to 32768 [ 366.987390][ T6568] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.135 (6568) [ 367.007578][ T6568] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 367.018448][ T6568] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 367.028837][ T6568] BTRFS info (device loop4): using free-space-tree [ 367.469911][ T6572] bridge0: port 3(batadv0) entered disabled state [ 367.478878][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.489119][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.768875][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.769535][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 367.803538][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.312575][ T6572] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.321959][ T6572] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.331280][ T6572] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.340336][ T6572] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.376713][ T5790] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 368.649648][ T6591] team0 (unregistering): Port device team_slave_0 removed [ 368.719664][ T6591] team0 (unregistering): Port device team_slave_1 removed [ 369.611491][ T6602] loop2: detected capacity change from 0 to 1024 [ 370.352800][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 370.525265][ T6611] Bluetooth: MGMT ver 1.23 [ 370.569638][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 370.633604][ T9] usb 1-1: config 0 has no interfaces? [ 370.676434][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 370.686247][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.695133][ T9] usb 1-1: Product: syz [ 370.699700][ T9] usb 1-1: Manufacturer: syz [ 370.704570][ T9] usb 1-1: SerialNumber: syz [ 370.774317][ T9] usb 1-1: config 0 descriptor?? [ 370.939024][ T6617] loop2: detected capacity change from 0 to 512 [ 370.994561][ T6617] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 371.124263][ T6617] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.145: iget: bad i_size value: -6917529027641081756 [ 371.188850][ T9] usb 1-1: USB disconnect, device number 8 [ 371.196506][ T6617] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.145: couldn't read orphan inode 17 (err -117) [ 371.226320][ T6617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.409977][ T3722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.418403][ T3722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.530131][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.538453][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.662930][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.736923][ T6623] loop4: detected capacity change from 0 to 4096 [ 371.812694][ T6623] ntfs3(loop4): Failed to load $Volume (-22). [ 372.189672][ T6625] loop1: detected capacity change from 0 to 4096 [ 372.302870][ T6625] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 372.341245][ T5797] Bluetooth: hci4: unexpected cc 0x0c7b length: 73 > 5 [ 372.346325][ T6628] loop2: detected capacity change from 0 to 4096 [ 372.355487][ T6625] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 372.396902][ T6628] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 372.424712][ T6628] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 372.445583][ T6628] ntfs3(loop2): Failed to load $LogFile (-22). [ 372.454860][ T6625] ntfs3(loop1): volume is dirty and "force" flag is not set! [ 372.824109][ T3878] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.986236][ T6634] loop0: detected capacity change from 0 to 16 [ 373.008033][ T3878] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.060286][ T6634] erofs (device loop0): invalid lz4 cfgs, size=13 [ 373.176325][ T3878] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.363622][ T3878] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.682254][ T3878] bridge_slave_1: left allmulticast mode [ 373.688646][ T3878] bridge_slave_1: left promiscuous mode [ 373.695428][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.736635][ T3878] bridge_slave_0: left allmulticast mode [ 373.743350][ T3878] bridge_slave_0: left promiscuous mode [ 373.750489][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.313649][ T3878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.354787][ T3878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.372530][ T3878] bond0 (unregistering): Released all slaves [ 374.919750][ T3878] hsr_slave_0: left promiscuous mode [ 374.959072][ T3878] hsr_slave_1: left promiscuous mode [ 374.968929][ T3878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.976838][ T3878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.056284][ T3878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.064246][ T3878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.238382][ T3878] veth1_macvtap: left promiscuous mode [ 375.244456][ T3878] veth0_macvtap: left promiscuous mode [ 375.250859][ T3878] veth1_vlan: left promiscuous mode [ 375.258218][ T3878] veth0_vlan: left promiscuous mode [ 375.913811][ T6643] loop0: detected capacity change from 0 to 32768 [ 375.926895][ T6643] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.152 (6643) [ 376.171367][ T6643] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 376.187465][ T6643] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 376.199839][ T6643] BTRFS info (device loop0): using free-space-tree [ 376.627684][ T5848] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 376.645330][ T3878] team0 (unregistering): Port device team_slave_1 removed [ 376.750528][ T3878] team0 (unregistering): Port device team_slave_0 removed [ 376.818377][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.859678][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 376.937884][ T5848] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 376.946378][ T5848] usb 5-1: config 0 has no interface number 0 [ 376.953318][ T5848] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 376.964885][ T5848] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 377.030987][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.048304][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.072399][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.085160][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 377.096191][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.159989][ T45] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 377.168762][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.237398][ T5848] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 377.246837][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 377.255539][ T5848] usb 5-1: Product: syz [ 377.260307][ T5848] usb 5-1: SerialNumber: syz [ 377.272764][ T5848] usb 5-1: config 0 descriptor?? [ 377.359325][ T5848] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 377.369128][ T5848] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6 [ 377.387369][ T45] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 377.397166][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.406695][ T45] usb 3-1: Product: syz [ 377.415922][ T45] usb 3-1: Manufacturer: syz [ 377.422726][ T45] usb 3-1: SerialNumber: syz [ 377.511771][ T45] usb 3-1: config 0 descriptor?? [ 377.670696][ T45] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 377.692505][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 377.704573][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 377.715830][ T11] usb 5-1: USB disconnect, device number 2 [ 377.719109][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 377.729219][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 377.748193][ T6643] x_tables: duplicate underflow at hook 1 [ 377.769233][ T11] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 377.884085][ T45] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 377.891690][ T45] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 378.005286][ T45] usb 3-1: USB disconnect, device number 5 [ 378.220746][ T5798] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 378.812258][ T6661] chnl_net:caif_netlink_parms(): no params data found [ 379.112425][ T6676] program syz.4.161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.216470][ T6679] loop2: detected capacity change from 0 to 256 [ 379.297917][ T6679] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 379.332460][ T6679] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 379.342630][ T6679] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 379.351982][ T6679] UDF-fs: Scanning with blocksize 512 failed [ 379.405206][ T5797] Bluetooth: hci0: command tx timeout [ 379.412818][ T6679] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 379.470698][ T6679] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 380.095312][ T6691] loop1: detected capacity change from 0 to 64 [ 380.641112][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.649276][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.659250][ T6661] bridge_slave_0: entered allmulticast mode [ 380.669475][ T6661] bridge_slave_0: entered promiscuous mode [ 380.956859][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.965145][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.975575][ T6661] bridge_slave_1: entered allmulticast mode [ 380.985392][ T6661] bridge_slave_1: entered promiscuous mode [ 381.201690][ T6661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.319208][ T6698] loop2: detected capacity change from 0 to 4096 [ 381.607627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 381.635588][ T5797] Bluetooth: hci0: command tx timeout [ 381.676519][ T6661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.863043][ T6661] team0: Port device team_slave_0 added [ 381.904333][ T5797] Bluetooth: Wrong link type (-57) [ 381.936449][ T6702] loop0: detected capacity change from 0 to 1024 [ 381.947423][ T6702] EXT4-fs: Ignoring removed oldalloc option [ 381.967894][ T6661] team0: Port device team_slave_1 added [ 382.006719][ T6702] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 382.139915][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.147441][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.163359][ T6702] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 382.173969][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.210504][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.223551][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.252479][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.278506][ T6698] ntfs3(loop2): try to read out of volume at offset 0x3fffffc7000 [ 382.355732][ T6702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.471603][ T6702] fscrypt (loop0, inode 15): Error -61 getting encryption context [ 382.494466][ T6661] hsr_slave_0: entered promiscuous mode [ 382.505311][ T6661] hsr_slave_1: entered promiscuous mode [ 382.595136][ T6711] program syz.4.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.912808][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.215517][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'. [ 383.225424][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'. [ 383.234826][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'. [ 383.245872][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'. [ 383.285841][ T6718] lo speed is unknown, defaulting to 1000 [ 383.296714][ T6718] lo speed is unknown, defaulting to 1000 [ 383.304162][ T6718] lo speed is unknown, defaulting to 1000 [ 383.331490][ T6720] lo speed is unknown, defaulting to 1000 [ 383.337875][ T6720] lo speed is unknown, defaulting to 1000 [ 383.346368][ T6720] lo speed is unknown, defaulting to 1000 [ 383.366112][ T6720] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 383.409807][ T6720] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 383.483626][ T6722] »»»»»»: renamed from lo (while UP) [ 383.518301][ T6720] »»»»»» speed is unknown, defaulting to 1000 [ 383.530351][ T6720] »»»»»» speed is unknown, defaulting to 1000 [ 383.539995][ T6720] »»»»»» speed is unknown, defaulting to 1000 [ 383.551033][ T6720] »»»»»» speed is unknown, defaulting to 1000 [ 383.560454][ T6720] »»»»»» speed is unknown, defaulting to 1000 [ 383.738278][ T5797] Bluetooth: hci0: command tx timeout [ 383.805979][ T6718] infiniband sz1: set active [ 383.811218][ T6718] infiniband sz1: added »»»»»» [ 383.821478][ T45] »»»»»» speed is unknown, defaulting to 1000 [ 383.876619][ T6718] RDS/IB: sz1: added [ 383.881350][ T6718] smc: adding ib device sz1 with port count 1 [ 383.887996][ T6718] smc: ib device sz1 port 1 has pnetid [ 383.896731][ T6718] »»»»»» speed is unknown, defaulting to 1000 [ 384.393176][ T45] »»»»»» speed is unknown, defaulting to 1000 [ 384.439320][ T6729] loop0: detected capacity change from 0 to 65 [ 384.506414][ T6729] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 384.515196][ T6718] »»»»»» speed is unknown, defaulting to 1000 [ 384.743795][ T6731] loop4: detected capacity change from 0 to 256 [ 384.792256][ T6731] exfat: Deprecated parameter 'namecase' [ 384.798971][ T6731] exfat: Deprecated parameter 'namecase' [ 385.001826][ T6731] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 385.126030][ T6718] »»»»»» speed is unknown, defaulting to 1000 [ 385.733518][ T6718] »»»»»» speed is unknown, defaulting to 1000 [ 385.817258][ T5797] Bluetooth: hci0: command tx timeout [ 385.906554][ T6735] loop1: detected capacity change from 0 to 256 [ 386.104281][ T6737] loop0: detected capacity change from 0 to 64 [ 386.258175][ T6718] »»»»»» speed is unknown, defaulting to 1000 [ 386.308617][ T6735] FAT-fs (loop1): Directory bread(block 64) failed [ 386.316876][ T6735] FAT-fs (loop1): Directory bread(block 65) failed [ 386.324990][ T6735] FAT-fs (loop1): Directory bread(block 66) failed [ 386.332051][ T6735] FAT-fs (loop1): Directory bread(block 67) failed [ 386.339228][ T6735] FAT-fs (loop1): Directory bread(block 68) failed [ 386.346024][ T6735] FAT-fs (loop1): Directory bread(block 69) failed [ 386.353160][ T6735] FAT-fs (loop1): Directory bread(block 70) failed [ 386.360298][ T6735] FAT-fs (loop1): Directory bread(block 71) failed [ 386.367494][ T6735] FAT-fs (loop1): Directory bread(block 72) failed [ 386.374386][ T6735] FAT-fs (loop1): Directory bread(block 73) failed [ 386.912102][ T6735] FAT-fs (loop1): Filesystem has been set read-only [ 386.978409][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 386.978504][ T30] audit: type=1800 audit(1742895036.811:80): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.182" name="memory.events.local" dev="loop1" ino=32 res=0 errno=0 [ 386.982323][ T6661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.054899][ T6661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.066845][ T6735] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006a61) [ 387.096273][ T6661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.126092][ T6661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.274617][ T6742] loop0: detected capacity change from 0 to 256 [ 387.298932][ T30] audit: type=1326 audit(1742895037.181:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.407996][ T30] audit: type=1326 audit(1742895037.251:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.431079][ T30] audit: type=1326 audit(1742895037.261:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.449504][ T6743] »»»»»» speed is unknown, defaulting to 1000 [ 387.458081][ T30] audit: type=1326 audit(1742895037.261:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.483921][ T30] audit: type=1326 audit(1742895037.261:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.506697][ T30] audit: type=1326 audit(1742895037.261:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.529668][ T30] audit: type=1326 audit(1742895037.261:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.558510][ T30] audit: type=1326 audit(1742895037.261:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.581767][ T30] audit: type=1326 audit(1742895037.281:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 387.712466][ T6742] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 387.869981][ T6743] »»»»»» speed is unknown, defaulting to 1000 [ 387.892283][ T6735] syz.1.182 (6735) used greatest stack depth: 4240 bytes left [ 388.226118][ T6751] program syz.2.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.702443][ T6661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.900384][ T6661] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.984812][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.992741][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.118723][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.126545][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.129602][ T6761] loop2: detected capacity change from 0 to 4096 [ 390.227894][ T6761] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 390.238498][ T6761] NILFS (loop2): mounting unchecked fs [ 390.253793][ T6761] NILFS (loop2): invalid segment: Checksum error in segment payload [ 390.262221][ T6761] NILFS (loop2): unable to fall back to spare super block [ 390.270042][ T6761] NILFS (loop2): error -22 while searching super root [ 390.353896][ T5086] Bluetooth: hci4: command 0x0406 tx timeout [ 390.361509][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 390.369530][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 390.376199][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 390.377871][ T6763] loop0: detected capacity change from 0 to 4096 [ 390.581680][ T6769] xt_TCPMSS: Only works on TCP SYN packets [ 390.820400][ T6772] loop4: detected capacity change from 0 to 512 [ 390.841586][ T6772] EXT4-fs: Ignoring removed nobh option [ 390.969567][ T6763] ntfs3(loop0): Failed to initialize $Secure::$SDH (-22). [ 390.978463][ T6763] ntfs3(loop0): Failed to initialize $Secure (-22). [ 391.158354][ T6772] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 391.269699][ T6772] EXT4-fs error (device loop4): ext4_do_update_inode:5158: inode #16: comm syz.4.197: corrupted inode contents [ 391.320780][ T6772] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #16: comm syz.4.197: mark_inode_dirty error [ 391.374484][ T6779] loop1: detected capacity change from 0 to 64 [ 391.384916][ T6772] EXT4-fs error (device loop4): ext4_do_update_inode:5158: inode #16: comm syz.4.197: corrupted inode contents [ 391.463253][ T6772] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.197: mark_inode_dirty error [ 391.499605][ T6772] EXT4-fs error (device loop4): ext4_do_update_inode:5158: inode #16: comm syz.4.197: corrupted inode contents [ 391.532291][ T6772] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 391.570381][ T6772] EXT4-fs error (device loop4): ext4_do_update_inode:5158: inode #16: comm syz.4.197: corrupted inode contents [ 391.616056][ T6772] EXT4-fs error (device loop4): ext4_truncate:4244: inode #16: comm syz.4.197: mark_inode_dirty error [ 391.664304][ T6772] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 391.689606][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 391.744328][ T6772] EXT4-fs (loop4): 1 truncate cleaned up [ 391.753433][ T6772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.767052][ T6772] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.808288][ T1827] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:12: Failed to release dquot type 1 [ 391.914576][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 391.922124][ T6772] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.197: Failed to acquire dquot type 1 [ 391.957085][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 391.967491][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.976051][ T9] usb 3-1: Product: syz [ 391.980700][ T9] usb 3-1: Manufacturer: syz [ 391.985580][ T9] usb 3-1: SerialNumber: syz [ 392.006688][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.108527][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 392.115145][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 392.485949][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.503085][ T1309] __quota_error: 10 callbacks suppressed [ 392.503175][ T1309] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 392.520182][ T1309] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:9: Failed to release dquot type 1 [ 392.581208][ T9] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 392.700068][ T6661] veth0_vlan: entered promiscuous mode [ 392.840189][ T6661] veth1_vlan: entered promiscuous mode [ 393.090454][ T6788] loop4: detected capacity change from 0 to 64 [ 393.093881][ T5043] bridge0: port 3(batadv0) entered disabled state [ 393.117478][ T5043] bridge_slave_1: left allmulticast mode [ 393.124273][ T5043] bridge_slave_1: left promiscuous mode [ 393.131506][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.172468][ T5043] bridge_slave_0: left allmulticast mode [ 393.178824][ T5043] bridge_slave_0: left promiscuous mode [ 393.185813][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.625102][ T5043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.658496][ T5043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.691272][ T5043] bond0 (unregistering): Released all slaves [ 393.753066][ T6661] veth0_macvtap: entered promiscuous mode [ 393.818382][ T6661] veth1_macvtap: entered promiscuous mode [ 394.002834][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.014099][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.024398][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.035209][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.050895][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.180106][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.196854][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.208946][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.219914][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.235741][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.263486][ T6661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.273016][ T6661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.282406][ T6661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.298444][ T6661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.583042][ T5043] hsr_slave_0: left promiscuous mode [ 394.641828][ T5043] hsr_slave_1: left promiscuous mode [ 394.662749][ T5043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.844973][ T5043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.534133][ T5043] team0 (unregistering): Port device team_slave_1 removed [ 395.628469][ T5043] team0 (unregistering): Port device team_slave_0 removed [ 396.540616][ T5043] IPVS: stop unused estimator thread 0... [ 396.809193][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.819776][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.830993][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.849785][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.866520][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 396.877932][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.031075][ T6807] »»»»»» speed is unknown, defaulting to 1000 [ 397.329236][ T30] audit: type=1326 audit(1742895047.402:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf8d169 code=0x7ffc0000 [ 397.540762][ T30] audit: type=1326 audit(1742895047.463:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f875cf8d169 code=0x7ffc0000 [ 397.563846][ T30] audit: type=1326 audit(1742895047.463:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf8d169 code=0x7ffc0000 [ 397.589518][ T30] audit: type=1326 audit(1742895047.463:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f875cf8d169 code=0x7ffc0000 [ 397.616924][ T30] audit: type=1326 audit(1742895047.463:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf8d169 code=0x7ffc0000 [ 397.641423][ T30] audit: type=1326 audit(1742895047.463:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f875cf8d169 code=0x7ffc0000 [ 397.711851][ T6807] »»»»»» speed is unknown, defaulting to 1000 [ 397.847003][ T6812] »»»»»» speed is unknown, defaulting to 1000 [ 398.515194][ T6812] »»»»»» speed is unknown, defaulting to 1000 [ 398.945019][ T5801] Bluetooth: hci1: command tx timeout [ 399.338219][ T11] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 399.493251][ T6807] chnl_net:caif_netlink_parms(): no params data found [ 399.721818][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.733903][ T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 399.746083][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 399.757427][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 399.767612][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 399.908374][ T11] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 399.920081][ T11] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 399.928597][ T11] usb 5-1: Manufacturer: syz [ 399.976909][ T11] usb 5-1: config 0 descriptor?? [ 400.006356][ T11] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 400.170530][ T6834] loop0: detected capacity change from 0 to 2048 [ 400.196518][ T45] usb 5-1: USB disconnect, device number 3 [ 400.259345][ T6834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.992742][ T5801] Bluetooth: hci1: command tx timeout [ 401.085579][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.093665][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.102251][ T6807] bridge_slave_0: entered allmulticast mode [ 401.111911][ T6807] bridge_slave_0: entered promiscuous mode [ 401.209357][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.225672][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.234283][ T6807] bridge_slave_1: entered allmulticast mode [ 401.244537][ T6807] bridge_slave_1: entered promiscuous mode [ 401.329326][ T6842] loop2: detected capacity change from 0 to 8192 [ 401.474194][ T6842] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.579202][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.644693][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.841151][ T6853] netlink: 'syz.4.222': attribute type 10 has an invalid length. [ 401.849898][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.222'. [ 401.911474][ T6807] team0: Port device team_slave_0 added [ 401.958513][ T6807] team0: Port device team_slave_1 added [ 402.043759][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.222'. [ 402.428503][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.436389][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.463139][ T6807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.541398][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.549011][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.575749][ T6807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.621809][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.634751][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.906073][ T1827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.918191][ T1827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.038414][ T5801] Bluetooth: hci1: command tx timeout [ 403.082031][ T6807] hsr_slave_0: entered promiscuous mode [ 403.092803][ T6807] hsr_slave_1: entered promiscuous mode [ 403.102449][ T6807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.110552][ T6807] Cannot create hsr debugfs directory [ 403.179727][ T5801] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 403.541427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 403.980508][ T30] audit: type=1326 audit(1742895054.160:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 404.110860][ T30] audit: type=1326 audit(1742895054.200:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 404.134589][ T30] audit: type=1326 audit(1742895054.200:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 404.163891][ T30] audit: type=1326 audit(1742895054.200:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 404.188568][ T30] audit: type=1326 audit(1742895054.210:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 404.211668][ T30] audit: type=1326 audit(1742895054.210:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 404.228527][ T6871] »»»»»» speed is unknown, defaulting to 1000 [ 404.234667][ T30] audit: type=1326 audit(1742895054.210:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 404.269563][ T30] audit: type=1326 audit(1742895054.210:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f19c998d169 code=0x7ffc0000 [ 404.534353][ T6807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 404.842505][ T6807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 404.896740][ T6871] »»»»»» speed is unknown, defaulting to 1000 [ 405.007957][ T6807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 405.043684][ T6807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 405.090977][ T5801] Bluetooth: hci1: command tx timeout [ 405.183236][ T6885] loop0: detected capacity change from 0 to 64 [ 405.204818][ T4241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.513839][ T4241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.720934][ T4241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.202982][ T4241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.597327][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.715459][ T4241] bridge_slave_1: left allmulticast mode [ 406.721684][ T4241] bridge_slave_1: left promiscuous mode [ 406.728969][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.773388][ T4241] bridge_slave_0: left allmulticast mode [ 406.782316][ T4241] bridge_slave_0: left promiscuous mode [ 406.789161][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.342643][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.362753][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.390363][ T4241] bond0 (unregistering): Released all slaves [ 407.526970][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.565605][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.573503][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.683695][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.691527][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.340106][ T4241] hsr_slave_0: left promiscuous mode [ 408.387349][ T4241] hsr_slave_1: left promiscuous mode [ 408.409374][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.435580][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.612979][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.621033][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.641633][ T11] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 408.738726][ T4241] veth1_macvtap: left promiscuous mode [ 408.748115][ T4241] veth0_macvtap: left promiscuous mode [ 408.754429][ T4241] veth1_vlan: left promiscuous mode [ 408.760261][ T4241] veth0_vlan: left promiscuous mode [ 409.232139][ T6894] netlink: 'syz.2.236': attribute type 10 has an invalid length. [ 409.243165][ T6894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.236'. [ 409.280355][ T11] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.291291][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 409.298568][ T11] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 409.308108][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.349687][ T11] usb 5-1: config 0 descriptor?? [ 409.426323][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 409.586076][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.622468][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.707437][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.731902][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.756520][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 409.784112][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.868560][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 409.886234][ T11] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 409.936031][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 410.254018][ T11] elecom 0003:056E:00FC.0002: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 410.282494][ T11] usb 5-1: USB disconnect, device number 4 [ 410.420639][ T6899] »»»»»» speed is unknown, defaulting to 1000 [ 410.873060][ T6899] »»»»»» speed is unknown, defaulting to 1000 [ 411.664434][ T6911] loop0: detected capacity change from 0 to 22 [ 411.728496][ T6911] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 411.826265][ T5789] Bluetooth: hci0: command tx timeout [ 412.200762][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 412.390349][ T6807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.580568][ T11] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 412.741078][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 412.784030][ T11] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 412.794907][ T11] usb 5-1: config 0 has no interface number 0 [ 412.801762][ T11] usb 5-1: config 0 interface 12 has no altsetting 0 [ 412.884041][ T11] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 412.893940][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.902563][ T11] usb 5-1: Product: syz [ 412.907494][ T11] usb 5-1: Manufacturer: syz [ 412.912375][ T11] usb 5-1: SerialNumber: syz [ 413.038552][ T11] usb 5-1: config 0 descriptor?? [ 413.583431][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.725458][ T11] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 413.735501][ T11] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 413.743485][ T11] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 413.751791][ T11] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 413.865314][ T11] usb 5-1: USB disconnect, device number 5 [ 413.900612][ T5789] Bluetooth: hci0: command tx timeout [ 413.977468][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.994709][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.002931][ T6899] bridge_slave_0: entered allmulticast mode [ 414.012819][ T6899] bridge_slave_0: entered promiscuous mode [ 414.055805][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.063055][ T6936] loop2: detected capacity change from 0 to 4096 [ 414.072718][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.080825][ T6899] bridge_slave_1: entered allmulticast mode [ 414.098225][ T6899] bridge_slave_1: entered promiscuous mode [ 414.190924][ T6941] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.338776][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.359287][ T6940] loop0: detected capacity change from 0 to 2048 [ 414.415833][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.483930][ T6940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.722129][ T6899] team0: Port device team_slave_0 added [ 414.788656][ T6899] team0: Port device team_slave_1 added [ 415.140160][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.147682][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.175287][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.230465][ T6946] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 415.240019][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.251'. [ 415.249562][ T6946] batadv0: entered promiscuous mode [ 415.255194][ T6946] batadv0: entered allmulticast mode [ 415.265410][ T6946] bridge0: port 3(batadv0) entered blocking state [ 415.272977][ T6946] bridge0: port 3(batadv0) entered disabled state [ 415.286447][ T6946] bridge0: port 3(batadv0) entered blocking state [ 415.293815][ T6946] bridge0: port 3(batadv0) entered forwarding state [ 415.346688][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.354165][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.381107][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.490347][ T6807] veth0_vlan: entered promiscuous mode [ 415.512452][ T1827] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 415.522770][ T1827] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 415.548674][ T6946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.251'. [ 415.818197][ T6899] hsr_slave_0: entered promiscuous mode [ 415.830938][ T6899] hsr_slave_1: entered promiscuous mode [ 415.849618][ T6807] veth1_vlan: entered promiscuous mode [ 415.957453][ T5789] Bluetooth: hci0: command tx timeout [ 416.482708][ T6807] veth0_macvtap: entered promiscuous mode [ 416.540940][ T6807] veth1_macvtap: entered promiscuous mode [ 417.006411][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.006534][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.006605][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.006707][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.012635][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.077118][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.077240][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.077305][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.077405][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.082979][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.121858][ T6807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.122084][ T6807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.122291][ T6807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.122484][ T6807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.944817][ T6899] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.987848][ T6899] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 418.011881][ T6899] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 418.032951][ T5789] Bluetooth: hci0: command tx timeout [ 418.044783][ T6899] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.268924][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.425159][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.531986][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.539929][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.611501][ T6984] loop4: detected capacity change from 0 to 256 [ 419.636886][ T6984] exfat: Deprecated parameter 'namecase' [ 419.668339][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.676252][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.036055][ T6984] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 420.273495][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 420.527666][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.539108][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.553342][ T5873] usb 3-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 420.562748][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.698613][ T5873] usb 3-1: config 0 descriptor?? [ 421.237381][ T5873] wacom 0003:056A:0314.0003: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 421.271514][ T5873] wacom 0003:056A:0314.0003: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.2-1/input0 [ 421.286891][ T5873] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0314.0003/input/input7 [ 421.467193][ T5873] usb 3-1: USB disconnect, device number 7 [ 421.847475][ T7006] capability: warning: `syz.4.270' uses 32-bit capabilities (legacy support in use) [ 422.184011][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.919223][ T6899] veth0_vlan: entered promiscuous mode [ 423.206702][ T6899] veth1_vlan: entered promiscuous mode [ 423.786733][ T7012] loop0: detected capacity change from 0 to 40427 [ 423.797762][ T7012] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 423.805408][ T7012] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 423.815568][ T7012] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x1fffff [ 423.824966][ T7012] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 423.839726][ T7012] F2FS-fs (loop0): invalid crc value [ 423.872212][ T6899] veth0_macvtap: entered promiscuous mode [ 423.906000][ T7012] F2FS-fs (loop0): Found nat_bits in checkpoint [ 423.948798][ T6899] veth1_macvtap: entered promiscuous mode [ 424.286575][ T7012] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 424.294324][ T7012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 424.373680][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.386127][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.396779][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.407709][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.418151][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.429065][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.445222][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.664540][ T7027] netlink: 536 bytes leftover after parsing attributes in process `syz.4.276'. [ 424.675412][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.276'. [ 424.741441][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.752540][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.763040][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.773953][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.790537][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.803096][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.824465][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.005325][ T6899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.014704][ T6899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.024031][ T6899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.033261][ T6899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.619154][ T1827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.628413][ T1827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.757403][ T7036] loop4: detected capacity change from 0 to 128 [ 425.931835][ T3942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.940636][ T3942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.443187][ T7040] loop2: detected capacity change from 0 to 1024 [ 426.465437][ T7040] EXT4-fs: Ignoring removed bh option [ 426.628476][ T7040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.961290][ T7047] loop4: detected capacity change from 0 to 512 [ 427.128155][ T7047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.145222][ T7047] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 427.182747][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.318023][ T7047] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.281: invalid size [ 427.349303][ T5873] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 427.389382][ T7047] EXT4-fs (loop4): Remounting filesystem read-only [ 427.553638][ T5873] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 427.563745][ T5873] usb 1-1: config 0 has no interface number 0 [ 427.571667][ T5873] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 427.583392][ T5873] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 427.597534][ T5873] usb 1-1: config 0 interface 255 has no altsetting 0 [ 427.604920][ T5873] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 427.616793][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.797880][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.809695][ T14] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 427.820320][ T5873] usb 1-1: config 0 descriptor?? [ 427.821170][ T14] Quota error (device loop4): write_blk: dquota write failed [ 427.834623][ T14] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 427.835952][ T5873] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 427.945043][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.5.283'. [ 427.961456][ T7061] nbd: must specify a size in bytes for the device [ 428.077853][ T5873] usb 1-1: USB disconnect, device number 9 [ 428.315913][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 428.502735][ T7071] devpts: Bad value for 'uid' [ 430.073716][ T7088] Bluetooth: MGMT ver 1.23 [ 430.677982][ T7098] loop0: detected capacity change from 0 to 64 [ 430.929072][ T7101] loop4: detected capacity change from 0 to 256 [ 430.997911][ T7101] exfat: Deprecated parameter 'utf8' [ 431.154667][ T7101] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 431.544244][ T5873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 431.648981][ T5848] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 431.789182][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 431.807629][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.823128][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.839294][ T5873] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 431.850969][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.884867][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.893953][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.948652][ T5873] usb 3-1: config 0 descriptor?? [ 431.974724][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.990321][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.001061][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.014977][ T5848] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 432.024834][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.147836][ T5848] usb 1-1: config 0 descriptor?? [ 432.170510][ T3942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.178967][ T3942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.407823][ T7116] loop5: detected capacity change from 0 to 64 [ 432.477364][ T5873] bigben 0003:146B:0902.0004: unexpected rdesc, please submit for review [ 432.495679][ T5873] bigben 0003:146B:0902.0004: item fetching failed at offset 3/5 [ 432.585828][ T5873] bigben 0003:146B:0902.0004: parse failed [ 432.593353][ T5873] bigben 0003:146B:0902.0004: probe with driver bigben failed with error -22 [ 432.594546][ T7116] hfs: bad catalog entry type 0 [ 432.658738][ T5848] wacom 0003:056A:00F0.0005: unbalanced collection at end of report description [ 432.684534][ T5873] usb 3-1: USB disconnect, device number 8 [ 432.703289][ T5848] wacom 0003:056A:00F0.0005: parse failed [ 432.710624][ T5848] wacom 0003:056A:00F0.0005: probe with driver wacom failed with error -22 [ 432.832804][ T9] usb 1-1: USB disconnect, device number 10 [ 433.292228][ T4241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.486901][ T4241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.597032][ T7124] loop4: detected capacity change from 0 to 64 [ 433.681306][ T4241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.799921][ T4241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.038166][ T4241] bridge_slave_1: left allmulticast mode [ 434.044629][ T4241] bridge_slave_1: left promiscuous mode [ 434.051411][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.069145][ T4241] bridge_slave_0: left allmulticast mode [ 434.075819][ T4241] bridge_slave_0: left promiscuous mode [ 434.088179][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.623717][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.654207][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.679771][ T4241] bond0 (unregistering): Released all slaves [ 435.292596][ T4241] hsr_slave_0: left promiscuous mode [ 435.314760][ T4241] hsr_slave_1: left promiscuous mode [ 435.323661][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.332061][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.355737][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.364265][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.439546][ T4241] veth1_macvtap: left promiscuous mode [ 435.446066][ T4241] veth0_macvtap: left promiscuous mode [ 435.452482][ T4241] veth1_vlan: left promiscuous mode [ 435.458099][ T4241] veth0_vlan: left promiscuous mode [ 436.695510][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.711530][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.788651][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.820454][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.832692][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 436.858240][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.922895][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 437.032971][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 437.189234][ T7140] netlink: 44 bytes leftover after parsing attributes in process `syz.0.312'. [ 437.495545][ T7142] loop4: detected capacity change from 0 to 256 [ 437.560753][ T7135] »»»»»» speed is unknown, defaulting to 1000 [ 437.681896][ T7144] loop2: detected capacity change from 0 to 256 [ 437.984642][ T7135] »»»»»» speed is unknown, defaulting to 1000 [ 438.034448][ T7142] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 438.055461][ T7142] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 438.073416][ T7142] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 438.083642][ T7142] UDF-fs: Scanning with blocksize 512 failed [ 438.227297][ T7142] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 438.265172][ T7144] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 438.518716][ T7142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.552748][ T5873] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 438.706508][ T7154] loop0: detected capacity change from 0 to 1024 [ 438.729383][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 438.741381][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 438.753809][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 438.772982][ T7154] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.804033][ T5873] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 438.813900][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.822749][ T5873] usb 6-1: Product: syz [ 438.827388][ T5873] usb 6-1: Manufacturer: syz [ 438.832486][ T5873] usb 6-1: SerialNumber: syz [ 438.929178][ T5873] usb 6-1: config 0 descriptor?? [ 438.936212][ T7154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.939213][ T7150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 438.967047][ T7150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 439.030126][ T5801] Bluetooth: hci0: command tx timeout [ 439.041683][ T5873] usb 6-1: ucan: probing device on interface #0 [ 439.048097][ T7135] chnl_net:caif_netlink_parms(): no params data found [ 439.078463][ T5790] UDF-fs: warning (device loop4): udf_evict_inode: Inode 61 (mode 100755) has inode size 1050 different from extent length 2048. Filesystem need not be standards compliant. [ 439.496718][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.595635][ T5873] usb 6-1: ucan: device reported invalid tx-fifo size [ 439.611480][ T5873] usb 6-1: ucan: probe failed; try to update the device firmware [ 439.823440][ T11] usb 6-1: USB disconnect, device number 2 [ 440.189672][ T7171] warning: `syz.4.322' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 440.700046][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.708122][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.716220][ T7135] bridge_slave_0: entered allmulticast mode [ 440.729624][ T7135] bridge_slave_0: entered promiscuous mode [ 440.887052][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.895227][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.903199][ T7135] bridge_slave_1: entered allmulticast mode [ 440.913033][ T7135] bridge_slave_1: entered promiscuous mode [ 441.143791][ T5801] Bluetooth: hci0: command tx timeout [ 441.886902][ T7185] loop0: detected capacity change from 0 to 2048 [ 441.943728][ T14] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 442.029766][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.041908][ T7181] loop5: detected capacity change from 0 to 32768 [ 442.121852][ T7185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.135223][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.278134][ T30] audit: type=1800 audit(1742895092.622:111): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.329" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 442.322525][ T7185] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 442.337395][ T7181] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.398621][ T7135] team0: Port device team_slave_0 added [ 442.452614][ T7135] team0: Port device team_slave_1 added [ 442.618917][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.642410][ T7200] loop2: detected capacity change from 0 to 16 [ 442.663789][ T7200] erofs (device loop2): mounted with root inode @ nid 36. [ 442.692491][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.700013][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.727117][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.764705][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.778548][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.807068][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.827275][ T7200] overlayfs: failed to get metacopy (-117) [ 443.163195][ T5801] Bluetooth: hci0: command tx timeout [ 443.177639][ T7181] XFS (loop5): Ending clean mount [ 443.244730][ T7202] syz.0.332: attempt to access beyond end of device [ 443.244730][ T7202] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 443.259093][ T7202] qnx6: unable to read the first superblock [ 443.265717][ T7202] syz.0.332: attempt to access beyond end of device [ 443.265717][ T7202] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 443.279011][ T7202] qnx6: unable to read the first superblock [ 443.291280][ T7202] qnx6: unable to read the first superblock [ 443.451286][ T7135] hsr_slave_0: entered promiscuous mode [ 443.462847][ T7135] hsr_slave_1: entered promiscuous mode [ 443.519041][ T6807] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 444.567593][ T7206] loop2: detected capacity change from 0 to 32768 [ 444.711527][ T7206] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 445.239856][ T5801] Bluetooth: hci0: command tx timeout [ 445.628293][ T7206] XFS (loop2): Ending clean mount [ 445.669286][ T7135] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.697471][ T7135] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.750923][ T7135] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.874110][ T7135] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.876819][ T5795] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 446.554944][ T1847] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 447.102332][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.505699][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.561881][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.569840][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.718664][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.727131][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.255723][ T5848] hid (null): global environment stack underflow [ 448.264020][ T5848] hid (null): unknown global tag 0xc [ 448.270158][ T5848] hid (null): unknown global tag 0xc [ 448.275743][ T5848] hid (null): global environment stack underflow [ 448.284888][ T5848] hid (null): unknown global tag 0xd [ 448.290834][ T5848] hid (null): unknown global tag 0x73 [ 448.314753][ T5848] hid (null): unknown global tag 0xe [ 448.534717][ T5848] hid-generic 0005:0B57:0006.0006: unknown main item tag 0x6 [ 448.543113][ T5848] hid-generic 0005:0B57:0006.0006: global environment stack underflow [ 448.560688][ T5848] hid-generic 0005:0B57:0006.0006: item 0 4 1 11 parsing failed [ 448.581842][ T5848] hid-generic 0005:0B57:0006.0006: probe with driver hid-generic failed with error -22 [ 450.178516][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.743284][ T7135] veth0_vlan: entered promiscuous mode [ 450.875956][ T7135] veth1_vlan: entered promiscuous mode [ 451.169577][ T7135] veth0_macvtap: entered promiscuous mode [ 451.285242][ T7135] veth1_macvtap: entered promiscuous mode [ 451.434006][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.445751][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.466130][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.484142][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.496774][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.507771][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.524114][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.628583][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.639828][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.653542][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.664576][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.681879][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.694758][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.710783][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.949737][ T7135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.959623][ T7135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.977078][ T7135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.993785][ T7135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.311357][ T7281] xt_hashlimit: size too large, truncated to 1048576 [ 453.334833][ T7284] loop4: detected capacity change from 0 to 32768 [ 453.674235][ T7284] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 453.709317][ T7284] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 454.636780][ T7284] XFS (loop4): Ending clean mount [ 454.676876][ T7284] XFS (loop4): Quotacheck needed: Please wait. [ 454.711986][ T7284] XFS (loop4): Quotacheck: Done. [ 454.863604][ T5790] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 456.672165][ T7314] loop5: detected capacity change from 0 to 32768 [ 457.065158][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 457.197884][ T5801] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 458.750501][ T7345] loop5: detected capacity change from 0 to 256 [ 459.008146][ T7335] sctp: failed to load transform for md5: -2 [ 460.125941][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.134332][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.345394][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.354066][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.540927][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 460.573901][ T7366] netlink: 'syz.5.385': attribute type 1 has an invalid length. [ 460.717688][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.729301][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 460.738929][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.829543][ T9] usb 1-1: config 0 descriptor?? [ 460.980929][ T9] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 461.222866][ T7371] loop2: detected capacity change from 0 to 1024 [ 461.233091][ T7371] EXT4-fs: Ignoring removed nobh option [ 461.239096][ T7371] EXT4-fs: Ignoring removed bh option [ 461.248167][ T7371] EXT4-fs: Mount option(s) incompatible with ext3 [ 461.633528][ T1847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.945764][ T1847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.051122][ T9] usb 1-1: USB disconnect, device number 11 [ 462.424877][ T1847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.474871][ T7371] loop2: detected capacity change from 0 to 40427 [ 462.512376][ T7371] F2FS-fs (loop2): Unrecognized mount option "nobh" or missing value [ 462.839668][ T1847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.410649][ T1847] bridge_slave_1: left allmulticast mode [ 463.416728][ T1847] bridge_slave_1: left promiscuous mode [ 463.423821][ T1847] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.476446][ T1847] bridge_slave_0: left allmulticast mode [ 463.482870][ T1847] bridge_slave_0: left promiscuous mode [ 463.491622][ T1847] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.090497][ T1847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.114196][ T1847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.153907][ T1847] bond0 (unregistering): Released all slaves [ 464.743798][ T1847] hsr_slave_0: left promiscuous mode [ 464.786462][ T1847] hsr_slave_1: left promiscuous mode [ 464.795168][ T1847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.803177][ T1847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.825851][ T1847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.834561][ T1847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.061321][ T1847] veth1_macvtap: left promiscuous mode [ 465.067120][ T1847] veth0_macvtap: left promiscuous mode [ 465.073746][ T1847] veth1_vlan: left promiscuous mode [ 465.079546][ T1847] veth0_vlan: left promiscuous mode [ 465.782420][ T5801] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 466.588069][ T1847] team0 (unregistering): Port device team_slave_1 removed [ 466.597874][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.664266][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.674962][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.701954][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.718710][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 466.740531][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.786987][ T1847] team0 (unregistering): Port device team_slave_0 removed [ 467.355513][ T7386] »»»»»» speed is unknown, defaulting to 1000 [ 467.858047][ T7386] »»»»»» speed is unknown, defaulting to 1000 [ 468.817838][ T7386] chnl_net:caif_netlink_parms(): no params data found [ 468.916289][ T5801] Bluetooth: hci0: command tx timeout [ 468.952707][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 469.161945][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 469.212296][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.223374][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.235153][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.245398][ T11] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.255577][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.363174][ T11] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.373332][ T11] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.385763][ T11] usb 3-1: Manufacturer: syz [ 469.468614][ T11] usb 3-1: config 0 descriptor?? [ 469.798682][ T5801] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 469.807596][ T5801] Bluetooth: hci3: Injecting HCI hardware error event [ 469.815874][ T5801] Bluetooth: hci3: hardware error 0x00 [ 470.125287][ T11] rc_core: IR keymap rc-hauppauge not found [ 470.131975][ T11] Registered IR keymap rc-empty [ 470.138039][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.159216][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.182546][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 470.197583][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 470.234880][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.244544][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.252726][ T7386] bridge_slave_0: entered allmulticast mode [ 470.262651][ T7386] bridge_slave_0: entered promiscuous mode [ 470.328464][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.336419][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.344843][ T7386] bridge_slave_1: entered allmulticast mode [ 470.354751][ T7386] bridge_slave_1: entered promiscuous mode [ 470.366801][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 470.386104][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.474549][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.553062][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.632485][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.660022][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.675723][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.686786][ T9] usb 6-1: config 0 has no interfaces? [ 470.694194][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 470.704697][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.721386][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.754276][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.765340][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.776494][ T9] usb 6-1: config 0 descriptor?? [ 470.789141][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.818857][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.829807][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.874712][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.931435][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.961210][ T11] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 470.969961][ T11] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 470.993744][ T5789] Bluetooth: hci0: command tx timeout [ 471.011734][ T11] usb 3-1: USB disconnect, device number 9 [ 471.014464][ T5848] usb 6-1: USB disconnect, device number 3 [ 471.065612][ T7386] team0: Port device team_slave_0 added [ 471.154903][ T7386] team0: Port device team_slave_1 added [ 471.296061][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.303765][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.333623][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.379387][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.386910][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.415242][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.418670][ T5873] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 471.558194][ T5848] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 471.686525][ T7386] hsr_slave_0: entered promiscuous mode [ 471.697346][ T7386] hsr_slave_1: entered promiscuous mode [ 471.714065][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 471.734583][ T5873] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 471.749895][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.769167][ T5873] usb 1-1: config 0 descriptor?? [ 471.804895][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 471.816821][ T5848] usb 5-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 471.826615][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.857189][ T5873] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 471.868810][ T5801] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 471.972198][ T5848] usb 5-1: config 0 descriptor?? [ 472.519395][ T5848] wacom 0003:056A:0333.0007: unknown main item tag 0x0 [ 472.527736][ T5848] wacom 0003:056A:0333.0007: unbalanced collection at end of report description [ 472.586414][ T5848] wacom 0003:056A:0333.0007: parse failed [ 472.595327][ T5848] wacom 0003:056A:0333.0007: probe with driver wacom failed with error -22 [ 472.696132][ T5873] gspca_vc032x: reg_w err -71 [ 472.701613][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.707144][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.712914][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.718922][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.724537][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.730423][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.735944][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.741782][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.747300][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.753103][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.761346][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.767018][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.782002][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.790389][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.796151][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.801842][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.807556][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.813076][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.818726][ T5873] gspca_vc032x: Unknown sensor... [ 472.824473][ T5873] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 472.840310][ T5848] usb 5-1: USB disconnect, device number 6 [ 472.949375][ T5873] usb 1-1: USB disconnect, device number 12 [ 473.080966][ T5801] Bluetooth: hci0: command tx timeout [ 473.204995][ T7437] loop5: detected capacity change from 0 to 256 [ 473.311783][ T7437] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 473.421725][ T30] audit: type=1800 audit(1742895123.797:112): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.411" name="file1" dev="loop5" ino=35 res=0 errno=0 [ 473.491062][ T5873] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 473.763562][ T7386] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 473.802634][ T7386] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 473.844831][ T7386] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 473.878146][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.895023][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.907404][ T5873] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 473.916975][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.931691][ T3722] Bluetooth: hci5: Frame reassembly failed (-84) [ 473.948295][ T5873] usb 3-1: config 0 descriptor?? [ 473.975610][ T7386] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 474.593029][ T5873] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 474.600642][ T5873] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 474.617783][ T5873] sony 0003:054C:024B.0008: unexpected long global item [ 474.746733][ T5873] sony 0003:054C:024B.0008: parse failed [ 474.753966][ T5873] sony 0003:054C:024B.0008: probe with driver sony failed with error -22 [ 474.854840][ T5873] usb 3-1: USB disconnect, device number 10 [ 474.941157][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 474.963998][ T7446] loop5: detected capacity change from 0 to 32768 [ 474.978474][ T7446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.414 (7446) [ 475.006872][ T7446] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 475.022289][ T7446] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 475.031790][ T7446] BTRFS info (device loop5): disk space caching is enabled [ 475.039447][ T7446] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 475.148847][ T5789] Bluetooth: hci0: command tx timeout [ 475.297773][ T7446] BTRFS info (device loop5): rebuilding free space tree [ 475.372571][ T7446] BTRFS info (device loop5): disabling free space tree [ 475.380282][ T7446] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 475.391560][ T7446] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 475.539484][ T30] audit: type=1800 audit(1742895125.897:113): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.414" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 475.965847][ T5801] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 476.025538][ T6807] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 476.043738][ T7449] loop4: detected capacity change from 0 to 32768 [ 476.121678][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.280403][ T7449] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 476.312035][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.444886][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.452890][ T3722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.538212][ T3722] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.546060][ T3722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.634458][ T7473] loop2: detected capacity change from 0 to 1024 [ 476.719097][ T7473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.832158][ T7386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.845064][ T7386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.185202][ T7449] XFS (loop4): Ending clean mount [ 477.199835][ T7449] XFS (loop4): Quotacheck needed: Please wait. [ 477.315386][ T7449] XFS (loop4): Quotacheck: Done. [ 477.557267][ T5790] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 477.575272][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.976921][ T7484] loop0: detected capacity change from 0 to 256 [ 478.468889][ T7484] FAT-fs (loop0): Directory bread(block 64) failed [ 478.475906][ T7484] FAT-fs (loop0): Directory bread(block 65) failed [ 478.483157][ T7484] FAT-fs (loop0): Directory bread(block 66) failed [ 478.490258][ T7484] FAT-fs (loop0): Directory bread(block 67) failed [ 478.505974][ T7484] FAT-fs (loop0): Directory bread(block 68) failed [ 478.513219][ T7484] FAT-fs (loop0): Directory bread(block 69) failed [ 478.520367][ T7484] FAT-fs (loop0): Directory bread(block 70) failed [ 478.527372][ T7484] FAT-fs (loop0): Directory bread(block 71) failed [ 478.534493][ T7484] FAT-fs (loop0): Directory bread(block 72) failed [ 478.541630][ T7484] FAT-fs (loop0): Directory bread(block 73) failed [ 479.092364][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.117153][ T5873] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 479.323554][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 479.401539][ T5873] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 479.412108][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.456056][ T5873] usb 3-1: config 0 descriptor?? [ 479.515425][ T7386] veth0_vlan: entered promiscuous mode [ 479.653996][ T7386] veth1_vlan: entered promiscuous mode [ 480.027680][ T7494] sctp: failed to load transform for md5: -2 [ 480.065645][ T7386] veth0_macvtap: entered promiscuous mode [ 480.232872][ T7386] veth1_macvtap: entered promiscuous mode [ 480.518151][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.530859][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.541657][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.556347][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.566856][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.577901][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.596332][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.679801][ T5873] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 480.693714][ T5873] asix 3-1:0.0: probe with driver asix failed with error -71 [ 480.745361][ T5873] usb 3-1: USB disconnect, device number 11 [ 480.823326][ T7506] loop0: detected capacity change from 0 to 512 [ 480.943621][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.961996][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.974696][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.978599][ T7506] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 3: comm syz.0.425: lblock 0 mapped to illegal pblock 3 (length 1) [ 480.986456][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.009981][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.021034][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.037087][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.083680][ T7386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.094410][ T7386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.103748][ T7386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.112993][ T7386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.201959][ T7506] EXT4-fs (loop0): Remounting filesystem read-only [ 481.209096][ T7506] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.425: error -117 reading directory block [ 481.244336][ T7506] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 481.255238][ T7506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.043135][ T7506] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.425: error -117 reading directory block [ 483.150288][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.261154][ T11] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 483.344281][ T7523] netlink: 40 bytes leftover after parsing attributes in process `syz.5.430'. [ 483.488809][ T11] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 483.498951][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.507633][ T11] usb 5-1: Product: syz [ 483.513962][ T11] usb 5-1: Manufacturer: syz [ 483.519571][ T11] usb 5-1: SerialNumber: syz [ 483.572256][ T11] usb 5-1: config 0 descriptor?? [ 483.596749][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 483.715094][ T5842] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 483.757496][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 483.790755][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.802983][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.871107][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.881176][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.884867][ T7531] netlink: 36 bytes leftover after parsing attributes in process `syz.5.433'. [ 483.890258][ T9] usb 3-1: Product: syz [ 483.903601][ T9] usb 3-1: Manufacturer: syz [ 483.910105][ T9] usb 3-1: SerialNumber: syz [ 483.977821][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.988758][ T5842] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 484.060743][ T5842] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.072417][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.081064][ T5842] usb 1-1: Product: syz [ 484.085768][ T5842] usb 1-1: Manufacturer: syz [ 484.091183][ T5842] usb 1-1: SerialNumber: syz [ 484.370683][ T11] usb 5-1: Firmware: major: 108, minor: 98, hardware type: RZUSB (3) [ 484.415811][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.425287][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.520583][ T9] usb 3-1: 0:2 : does not exist [ 484.580753][ T5842] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 484.611567][ T11] usb 5-1: failed to fetch extended address, random address set [ 484.698822][ T5842] usb 1-1: USB disconnect, device number 13 [ 484.767805][ T11] usb 5-1: USB disconnect, device number 7 [ 484.974650][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 485.075779][ T9] usb 3-1: USB disconnect, device number 12 [ 485.154846][ T5842] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 485.346895][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 485.394034][ T5842] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 485.403509][ T5842] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 485.414599][ T5842] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.424778][ T5842] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.435263][ T5842] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 485.445967][ T5842] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.459786][ T5842] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 485.470512][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.786793][ T5842] usb 1-1: usb_control_msg returned -71 [ 485.792818][ T5842] usbtmc 1-1:16.0: can't read capabilities [ 485.832603][ T7544] loop4: detected capacity change from 0 to 64 [ 485.863241][ T5842] usb 1-1: USB disconnect, device number 14 [ 486.531166][ T7548] loop2: detected capacity change from 0 to 4096 [ 486.592072][ T7548] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 486.697340][ T5842] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 486.860110][ T7548] ntfs3(loop2): ino=1a, mi_enum_attr [ 486.865889][ T7548] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 486.896800][ T7548] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 486.931655][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.944158][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 486.957488][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28514, setting to 64 [ 486.969046][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 487.056269][ T30] audit: type=1800 audit(1742895137.418:114): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.438" name="file1" dev="loop2" ino=24 res=0 errno=0 [ 487.085654][ T7548] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 487.110111][ T5842] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 487.119839][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 487.130277][ T5842] usb 6-1: Product: syz [ 487.134738][ T5842] usb 6-1: Manufacturer: syz [ 487.141020][ T5842] usb 6-1: SerialNumber: syz [ 487.188769][ T5842] usb 6-1: config 0 descriptor?? [ 487.220192][ T7552] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 487.565595][ T5842] radio-si470x 6-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 487.772884][ T5842] radio-si470x 6-1:0.0: software version 100, hardware version 101 [ 487.776430][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 487.956959][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 487.982352][ T5842] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 487.991891][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.002320][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.009807][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.018293][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.025746][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.033514][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.043646][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.051657][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.051724][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 488.059268][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.068746][ T5873] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 488.075782][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.085033][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 488.091960][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.106612][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.113820][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.121573][ T5842] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 488.133540][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.135148][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.142402][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.143085][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.150260][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.150951][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.158147][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.158852][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.165903][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.166692][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.167391][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.174474][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.175163][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.182311][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.183000][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.190974][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.191683][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.198862][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.199556][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.206701][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.207403][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.214419][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.215093][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.222379][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.240702][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.241417][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.248686][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.249383][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.256504][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.257207][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.264268][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.264947][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.272161][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.272822][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.280285][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.280984][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.288121][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.288830][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.295896][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.309944][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.310745][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.317971][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.318685][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.325835][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.336889][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.337591][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.345053][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.345752][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.346509][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.353614][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.354314][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.361487][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.362194][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.369518][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.370225][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.377410][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.378083][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.385147][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.385841][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.399858][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.400572][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.407808][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.408493][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.415683][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.416447][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.417141][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.421912][ T5873] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 488.424300][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 488.436106][ T5873] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 488.488510][ T5842] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 488.492629][ T5873] usb 5-1: Product: syz [ 488.654473][ T5842] usb 6-1: USB disconnect, device number 4 [ 488.660184][ T5873] usb 5-1: Manufacturer: syz [ 488.660366][ T5873] usb 5-1: SerialNumber: syz [ 488.896037][ T5873] usb 5-1: config 0 descriptor?? [ 489.242120][ T7572] loop2: detected capacity change from 0 to 2048 [ 489.364051][ T7572] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 489.397133][ T5873] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 489.872242][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.880872][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.104238][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.112831][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.124981][ T5842] usb 5-1: USB disconnect, device number 8 [ 490.238203][ T7579] sctp: failed to load transform for md5: -2 [ 491.653457][ T1309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.876242][ T1309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.051697][ T7601] loop2: detected capacity change from 0 to 16 [ 492.071128][ T1309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.111986][ T7601] erofs (device loop2): mounted with root inode @ nid 36. [ 492.195253][ T7601] erofs (device loop2): bogus dirent @ nid 36 [ 492.271950][ T1309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.618503][ T1309] bridge_slave_1: left allmulticast mode [ 492.629066][ T1309] bridge_slave_1: left promiscuous mode [ 492.636171][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.691710][ T1309] bridge_slave_0: left allmulticast mode [ 492.697917][ T1309] bridge_slave_0: left promiscuous mode [ 492.704820][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.299845][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.362861][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.385391][ T1309] bond0 (unregistering): Released all slaves [ 494.143740][ T1309] hsr_slave_0: left promiscuous mode [ 494.171643][ T1309] hsr_slave_1: left promiscuous mode [ 494.181937][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.190131][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.227109][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.234867][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.285006][ T1309] veth1_macvtap: left promiscuous mode [ 494.291564][ T1309] veth0_macvtap: left promiscuous mode [ 494.297802][ T1309] veth1_vlan: left promiscuous mode [ 494.303426][ T1309] veth0_vlan: left promiscuous mode [ 495.518460][ T1309] team0 (unregistering): Port device team_slave_1 removed [ 495.571669][ T1309] team0 (unregistering): Port device team_slave_0 removed [ 496.401660][ T7617] loop5: detected capacity change from 0 to 256 [ 496.650268][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.661399][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.729017][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.767355][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.784221][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 496.794202][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.051708][ T7622] »»»»»» speed is unknown, defaulting to 1000 [ 497.785406][ T7622] »»»»»» speed is unknown, defaulting to 1000 [ 498.427150][ T5873] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 498.699126][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.709094][ T5873] usb 3-1: config 1 has no interface number 0 [ 498.718258][ T5873] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.730146][ T5873] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 498.739711][ T5873] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 200 [ 498.879434][ T7632] loop0: detected capacity change from 0 to 32768 [ 498.911833][ T7632] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.465 (7632) [ 498.944319][ T7632] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 498.948151][ T5789] Bluetooth: hci0: command tx timeout [ 498.954888][ T7632] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 498.976398][ T7632] BTRFS info (device loop0): using free-space-tree [ 498.982595][ T5873] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.992814][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.001377][ T5873] usb 3-1: Product: syz [ 499.006229][ T5873] usb 3-1: Manufacturer: syz [ 499.011167][ T5873] usb 3-1: SerialNumber: syz [ 499.191571][ T5043] ===================================================== [ 499.200071][ T5043] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x539/0xb40 [ 499.209363][ T5043] n_tty_receive_buf_closing+0x539/0xb40 [ 499.216319][ T5043] n_tty_receive_buf_common+0x1a83/0x25a0 [ 499.223058][ T5043] n_tty_receive_buf2+0x4c/0x60 [ 499.229123][ T5043] tty_ldisc_receive_buf+0xd0/0x290 [ 499.235205][ T5043] tty_port_default_receive_buf+0xdf/0x190 [ 499.243480][ T5043] flush_to_ldisc+0x473/0xdb0 [ 499.249123][ T5043] process_scheduled_works+0xc1a/0x1e80 [ 499.255680][ T5043] worker_thread+0xea7/0x14f0 [ 499.261107][ T5043] kthread+0x6b9/0xef0 [ 499.266346][ T5043] ret_from_fork+0x6d/0x90 [ 499.271001][ T5043] ret_from_fork_asm+0x1a/0x30 [ 499.276120][ T5043] [ 499.278571][ T5043] Uninit was created at: [ 499.285368][ T5043] __kmalloc_noprof+0x940/0x1250 [ 499.291277][ T5043] __tty_buffer_request_room+0x36e/0x6d0 [ 499.298189][ T5043] __tty_insert_flip_string_flags+0x14c/0x680 [ 499.304806][ T5043] uart_insert_char+0x39e/0xa10 [ 499.310033][ T5043] serial8250_read_char+0x1a7/0x5d0 [ 499.315726][ T5043] serial8250_handle_irq+0x971/0x1130 [ 499.321386][ T5043] serial8250_default_handle_irq+0x120/0x2b0 [ 499.328252][ T5043] serial8250_interrupt+0xc5/0x360 [ 499.333588][ T5043] __handle_irq_event_percpu+0x118/0xca0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 499.339641][ T5043] handle_irq_event+0xef/0x2c0 [ 499.344729][ T5043] handle_edge_irq+0x340/0xfb0 [ 499.349809][ T5043] __common_interrupt+0x97/0x1f0 [ 499.355054][ T5043] common_interrupt+0x92/0xb0 [ 499.360181][ T5043] asm_common_interrupt+0x2b/0x40 [ 499.365629][ T5043] [ 499.368126][ T5043] CPU: 0 UID: 0 PID: 5043 Comm: kworker/u8:25 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(undef) [ 499.380651][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 499.394238][ T5043] Workqueue: events_unbound flush_to_ldisc [ 499.401117][ T5043] ===================================================== [ 499.408499][ T5043] Disabling lock debugging due to kernel taint [ 499.414805][ T5043] Kernel panic - not syncing: kmsan.panic set ... [ 499.421555][ T5043] CPU: 0 UID: 0 PID: 5043 Comm: kworker/u8:25 Tainted: G B 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(undef) [ 499.435397][ T5043] Tainted: [B]=BAD_PAGE [ 499.439960][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 499.450437][ T5043] Workqueue: events_unbound flush_to_ldisc [ 499.456587][ T5043] Call Trace: [ 499.460063][ T5043] [ 499.463156][ T5043] dump_stack_lvl+0x216/0x2d0 [ 499.468176][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.474275][ T5043] dump_stack+0x1e/0x24 [ 499.478652][ T5043] panic+0x4e2/0xcf0 [ 499.482820][ T5043] ? kmsan_get_metadata+0x71/0x1c0 [ 499.488200][ T5043] kmsan_report+0x2c7/0x2d0 [ 499.493054][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.499191][ T5043] ? __msan_warning+0x95/0x120 [ 499.504268][ T5043] ? n_tty_receive_buf_closing+0x539/0xb40 [ 499.510338][ T5043] ? n_tty_receive_buf_common+0x1a83/0x25a0 [ 499.516492][ T5043] ? n_tty_receive_buf2+0x4c/0x60 [ 499.521811][ T5043] ? tty_ldisc_receive_buf+0xd0/0x290 [ 499.527454][ T5043] ? tty_port_default_receive_buf+0xdf/0x190 [ 499.533981][ T5043] ? flush_to_ldisc+0x473/0xdb0 [ 499.539081][ T5043] ? process_scheduled_works+0xc1a/0x1e80 [ 499.545101][ T5043] ? worker_thread+0xea7/0x14f0 [ 499.550186][ T5043] ? kthread+0x6b9/0xef0 [ 499.554659][ T5043] ? ret_from_fork+0x6d/0x90 [ 499.559492][ T5043] ? ret_from_fork_asm+0x1a/0x30 [ 499.564704][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.570784][ T5043] ? kmsan_get_metadata+0x13e/0x1c0 [ 499.576300][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.582365][ T5043] ? plist_check_list+0x58/0xa30 [ 499.587560][ T5043] ? filter_irq_stacks+0x60/0x1a0 [ 499.592831][ T5043] ? kmsan_get_metadata+0x13e/0x1c0 [ 499.598384][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.604462][ T5043] ? kmsan_get_metadata+0x13e/0x1c0 [ 499.609910][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.615973][ T5043] __msan_warning+0x95/0x120 [ 499.620790][ T5043] n_tty_receive_buf_closing+0x539/0xb40 [ 499.626718][ T5043] n_tty_receive_buf_common+0x1a83/0x25a0 [ 499.632690][ T5043] ? filter_irq_stacks+0x60/0x1a0 [ 499.638171][ T5043] n_tty_receive_buf2+0x4c/0x60 [ 499.643509][ T5043] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 499.649566][ T5043] tty_ldisc_receive_buf+0xd0/0x290 [ 499.655056][ T5043] tty_port_default_receive_buf+0xdf/0x190 [ 499.661196][ T5043] flush_to_ldisc+0x473/0xdb0 [ 499.666150][ T5043] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 499.673040][ T5043] ? __pfx_flush_to_ldisc+0x10/0x10 [ 499.678504][ T5043] process_scheduled_works+0xc1a/0x1e80 [ 499.684405][ T5043] worker_thread+0xea7/0x14f0 [ 499.689313][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.695400][ T5043] kthread+0x6b9/0xef0 [ 499.699706][ T5043] ? __pfx_worker_thread+0x10/0x10 [ 499.705112][ T5043] ? __pfx_kthread+0x10/0x10 [ 499.710065][ T5043] ret_from_fork+0x6d/0x90 [ 499.714828][ T5043] ? __pfx_kthread+0x10/0x10 [ 499.719766][ T5043] ret_from_fork_asm+0x1a/0x30 [ 499.724795][ T5043] [ 499.728392][ T5043] Kernel Offset: disabled [ 499.732834][ T5043] Rebooting in 86400 seconds..