last executing test programs: 37.638548668s ago: executing program 2 (id=431): r0 = io_uring_setup(0x36b1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], &(0x7f0000004a80), 0x1}, 0x20) 8.698889473s ago: executing program 4 (id=512): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x80, 0x0, 0xffffffffc2680a4f}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)=0x6) 8.472302114s ago: executing program 0 (id=513): r0 = gettid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r2, 0x0) tkill(r0, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) 8.136994567s ago: executing program 3 (id=514): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x9e7, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7e, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 8.122791113s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r1, &(0x7f0000000040)={r2, r1}) 6.90451986s ago: executing program 4 (id=518): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000007, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x2e00, 0x4000000}, 0x28) 6.843072857s ago: executing program 0 (id=519): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0xc17, &(0x7f0000000800)="$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") r0 = memfd_create(&(0x7f00000002c0)='system.skckpr\x02\x13otonam', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) chdir(0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="e84659cd0eff7a2495b2245ac8fc2d84722263fbb71c4ef3bd3995fdd82f2e"], 0x100) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 6.558587s ago: executing program 2 (id=432): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000017c0)=@filter={'filter\x00', 0xe, 0x4, 0x90, [], 0x8000000, 0x0, 0x0}, 0x108) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 5.692331494s ago: executing program 2 (id=521): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x9}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.988341008s ago: executing program 4 (id=522): socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 4.860792014s ago: executing program 0 (id=523): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2e0, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x12) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) 4.800971073s ago: executing program 1 (id=524): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x480, &(0x7f0000000500)=ANY=[], 0x1, 0x25d, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = inotify_init() chdir(&(0x7f0000000040)='./file0\x00') inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x4000174) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307202, &(0x7f0000000980)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 4.456439485s ago: executing program 2 (id=525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04b000000000000040076f56c7556f30000ffb675072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab0300000087f2270f00000d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 3.780337035s ago: executing program 1 (id=526): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') mount(&(0x7f0000000080)=@filename='./file0/file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x103004, 0x0) 3.625307059s ago: executing program 2 (id=527): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x2, 0x8}) ioctl$TCFLSH(r0, 0x40384708, 0x20000000) 3.505054808s ago: executing program 3 (id=528): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x3f}, {0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 3.147501552s ago: executing program 4 (id=529): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x17be1b}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3.036030873s ago: executing program 1 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000880400"]) 2.71136631s ago: executing program 2 (id=531): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.382879836s ago: executing program 0 (id=532): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000440)=0x3) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000180)=0x1) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0x20) 2.362806638s ago: executing program 1 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) writev(0xffffffffffffffff, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2.040982784s ago: executing program 3 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x4}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.765477214s ago: executing program 1 (id=535): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.307124322s ago: executing program 4 (id=536): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @private}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000040), 0x4) 1.267454824s ago: executing program 3 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 792.01911ms ago: executing program 1 (id=538): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xe510, 0x3) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x3, 0x200, 0x3}) 525.456536ms ago: executing program 4 (id=539): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) fcntl$setstatus(r1, 0x4, 0x42000) read(r2, &(0x7f0000000180)=""/145, 0x91) 512.9666ms ago: executing program 0 (id=540): timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x6, 0x19, 0x0, 0x2000e881) 212.713724ms ago: executing program 3 (id=541): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "d2c4023508b10000040000000000000000000000000000000000fe00", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000002c0)={0x1, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"fd0d1af889b4ea07001900005e99e47ac49e4906eddf9edd00004000000029e9", r3, 0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r3}, {r4}], 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000180)=0x8) 0s ago: executing program 3 (id=542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) kernel console output (not intermixed with test programs): 0 [ 263.569690][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.668504][ T5361] bridge0: port 3(netdevsim3) entered blocking state [ 263.676533][ T5361] bridge0: port 3(netdevsim3) entered disabled state [ 263.684435][ T5361] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 263.697045][ T5361] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 263.707252][ T5361] bridge0: port 3(netdevsim3) entered blocking state [ 263.714836][ T5361] bridge0: port 3(netdevsim3) entered forwarding state [ 263.749026][ T3198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.757284][ T3198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.947637][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.955941][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.061985][ T3198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.070450][ T3198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.758858][ T10] IPVS: starting estimator thread 0... [ 264.784060][ T5371] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 264.857372][ T5373] IPVS: using max 192 ests per chain, 9600 per kthread [ 265.044105][ T5242] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 265.304864][ T5242] usb 4-1: Using ep0 maxpacket: 8 [ 265.364331][ T5242] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 265.374172][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.382713][ T5242] usb 4-1: Product: syz [ 265.387238][ T5242] usb 4-1: Manufacturer: syz [ 265.392477][ T5242] usb 4-1: SerialNumber: syz [ 265.426946][ T5380] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 265.501781][ T5242] usb 4-1: config 0 descriptor?? [ 265.822663][ T5242] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 265.916920][ T3620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.925959][ T3620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.060823][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.069537][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.072659][ T5381] loop0: detected capacity change from 0 to 2048 [ 266.247836][ T5242] usb write operation failed. (-71) [ 266.348154][ T5242] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.365349][ T5242] dvbdev: DVB: registering new adapter (Terratec H7) [ 266.373723][ T5242] usb 4-1: media controller created [ 266.421978][ T5242] usb read operation failed. (-71) [ 266.432764][ T5386] loop2: detected capacity change from 0 to 1024 [ 266.439871][ T5242] usb write operation failed. (-71) [ 266.502443][ T5242] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 266.549527][ T5390] loop1: detected capacity change from 0 to 128 [ 266.569374][ T5390] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.634466][ T5242] usb 4-1: USB disconnect, device number 2 [ 266.642368][ T5390] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.872371][ T5393] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.098089][ T5381] syz.0.8: attempt to access beyond end of device [ 267.098089][ T5381] loop0: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 267.160661][ T5381] syz.0.8: attempt to access beyond end of device [ 267.160661][ T5381] loop0: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 267.492783][ T5400] syz.0.8: attempt to access beyond end of device [ 267.492783][ T5400] loop0: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 267.516116][ T5393] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 267.527391][ T5393] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 267.807109][ T5393] Remounting filesystem read-only [ 267.816617][ T5400] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 267.963542][ T5381] NILFS (loop0): mounting fs with errors [ 268.020943][ T5406] loop4: detected capacity change from 0 to 1024 [ 268.395654][ T5181] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000) [ 268.407218][ T5181] FAT-fs (loop1): Filesystem has been set read-only [ 268.469534][ T5181] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 268.545862][ T5181] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 268.583697][ T5393] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 268.595046][ T5393] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 268.604621][ T5393] Remounting filesystem read-only [ 268.988089][ T5417] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 269.220775][ T5406] EXT4-fs: Ignoring removed orlov option [ 269.242000][ T5419] loop0: detected capacity change from 0 to 1024 [ 269.275849][ T5406] EXT4-fs (loop4): Test dummy encryption mode enabled [ 269.359199][ T5424] block nbd3: shutting down sockets [ 269.481409][ T5406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.183274][ T5181] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.295161][ T3198] bridge0: port 3(netdevsim3) entered disabled state [ 270.341001][ T3198] netdevsim netdevsim1 netdevsim3 (unregistering): left allmulticast mode [ 270.354663][ T3198] netdevsim netdevsim1 netdevsim3 (unregistering): left promiscuous mode [ 270.364102][ T3198] bridge0: port 3(netdevsim3) entered disabled state [ 270.394017][ T3198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.448808][ T5406] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 270.545577][ T3198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.639246][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 270.881168][ T3198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.035156][ T5186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.083961][ T3198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.955907][ T3198] bridge_slave_1: left allmulticast mode [ 271.961993][ T3198] bridge_slave_1: left promiscuous mode [ 271.969379][ T3198] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.246356][ T3198] bridge_slave_0: left allmulticast mode [ 272.252546][ T3198] bridge_slave_0: left promiscuous mode [ 272.259282][ T3198] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.695007][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 272.822250][ T5460] loop4: detected capacity change from 0 to 512 [ 272.938997][ T5460] ======================================================= [ 272.938997][ T5460] WARNING: The mand mount option has been deprecated and [ 272.938997][ T5460] and is ignored by this kernel. Remove the mand [ 272.938997][ T5460] option from the mount to silence this warning. [ 272.938997][ T5460] ======================================================= [ 273.034068][ T5460] EXT4-fs: Mount option(s) incompatible with ext3 [ 273.041223][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 273.120611][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.131514][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 273.141044][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.192425][ T10] usb 3-1: config 0 descriptor?? [ 273.213294][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 273.356053][ T5188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.451713][ T5188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.478432][ T5188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.635703][ T5188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.658950][ T5188] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.673540][ T5188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.755861][ T3198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.875714][ T3198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.929246][ T3198] bond0 (unregistering): Released all slaves [ 275.234220][ T5279] usb 3-1: USB disconnect, device number 2 [ 275.830951][ T5188] Bluetooth: hci1: command tx timeout [ 276.298714][ T3198] hsr_slave_0: left promiscuous mode [ 276.328522][ T3198] hsr_slave_1: left promiscuous mode [ 276.363969][ T3198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.371954][ T3198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.486862][ T3198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.498920][ T3198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.501335][ T5499] netlink: 'syz.0.43': attribute type 3 has an invalid length. [ 276.588139][ T3198] veth1_macvtap: left promiscuous mode [ 276.597936][ T3198] veth0_macvtap: left promiscuous mode [ 276.604220][ T3198] veth1_vlan: left promiscuous mode [ 276.609846][ T3198] veth0_vlan: left promiscuous mode [ 276.693528][ T5501] loop2: detected capacity change from 0 to 16 [ 276.930399][ T5501] erofs: (device loop2): mounted with root inode @ nid 36. [ 277.303683][ T5188] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 277.499293][ T5501] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 277.510827][ T5501] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 277.858584][ T5188] Bluetooth: hci1: command tx timeout [ 278.220682][ T3198] team0 (unregistering): Port device team_slave_1 removed [ 278.402859][ T3198] team0 (unregistering): Port device team_slave_0 removed [ 279.652907][ T3198] IPVS: stop unused estimator thread 0... [ 279.933036][ T5188] Bluetooth: hci1: command tx timeout [ 280.082209][ T5528] loop3: detected capacity change from 0 to 256 [ 280.482971][ T5463] chnl_net:caif_netlink_parms(): no params data found [ 280.617437][ T5531] loop4: detected capacity change from 0 to 512 [ 280.760818][ T5531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.843648][ T5531] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 280.851970][ T5531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1802c01c, mo2=0002] [ 280.917573][ T5531] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 280.924900][ T5528] syz.3.52: attempt to access beyond end of device [ 280.924900][ T5528] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 280.927630][ T5531] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 280.951776][ T5531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 281.131908][ T5531] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 281.241452][ T5531] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 282.002169][ T5186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.108232][ T5188] Bluetooth: hci1: command tx timeout [ 282.778273][ T5463] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.786279][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.794389][ T5463] bridge_slave_0: entered allmulticast mode [ 282.804028][ T5463] bridge_slave_0: entered promiscuous mode [ 282.994557][ T5463] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.002729][ T5463] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.010604][ T5463] bridge_slave_1: entered allmulticast mode [ 283.022355][ T5463] bridge_slave_1: entered promiscuous mode [ 283.398417][ T5566] loop4: detected capacity change from 0 to 128 [ 283.552967][ T5463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.584830][ T5242] IPVS: starting estimator thread 0... [ 283.777464][ T5463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.812981][ T5567] IPVS: using max 192 ests per chain, 9600 per kthread [ 283.820159][ T5566] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.821592][ T5566] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 284.028019][ T5463] team0: Port device team_slave_0 added [ 284.199673][ T5463] team0: Port device team_slave_1 added [ 284.453171][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.460524][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.486819][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.497739][ T5463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.644296][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.651728][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.678170][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.687995][ T5463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.054278][ T5587] Zero length message leads to an empty skb [ 285.406323][ T5589] loop0: detected capacity change from 0 to 512 [ 285.460135][ T5463] hsr_slave_0: entered promiscuous mode [ 285.515202][ T5463] hsr_slave_1: entered promiscuous mode [ 285.641581][ T5593] loop3: detected capacity change from 0 to 16 [ 285.666721][ T5186] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.719018][ T5593] erofs: (device loop3): mounted with root inode @ nid 36. [ 285.998502][ T5596] loop2: detected capacity change from 0 to 4096 [ 286.091545][ T5593] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.286477][ T5599] loop4: detected capacity change from 0 to 128 [ 286.376668][ T5589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.390645][ T5589] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.751989][ T5589] Process accounting resumed [ 286.787315][ T5599] loop4: detected capacity change from 0 to 1024 [ 287.167186][ T29] audit: type=1800 audit(1727383266.970:2): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.73" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 287.188001][ T29] audit: type=1800 audit(1727383266.970:3): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.73" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 287.208624][ T29] audit: type=1800 audit(1727383266.980:4): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.73" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 287.230346][ T5589] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 287.672741][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.208254][ T5463] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.303962][ T5463] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.401690][ T5463] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.539256][ T5463] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.549219][ T5463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.655509][ T5463] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.687554][ T3198] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.695421][ T3198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.871363][ T5463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.882882][ T5463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.949717][ T3198] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.957663][ T3198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.613029][ T5188] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 290.621837][ T5188] Bluetooth: hci3: Injecting HCI hardware error event [ 290.633785][ T5188] Bluetooth: hci3: hardware error 0x00 [ 290.670673][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.677824][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.142562][ T3198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.370949][ T3198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.599087][ T3198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.788717][ T3198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.352726][ T3198] bridge_slave_1: left allmulticast mode [ 292.358714][ T3198] bridge_slave_1: left promiscuous mode [ 292.371718][ T3198] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.437918][ T3198] bridge_slave_0: left allmulticast mode [ 292.444842][ T3198] bridge_slave_0: left promiscuous mode [ 292.451560][ T3198] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.471570][ T5654] loop4: detected capacity change from 0 to 2048 [ 292.502484][ T5654] /dev/loop4: Can't open blockdev [ 292.907800][ T5188] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 293.213821][ T3198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.262841][ T3198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.282580][ T3198] bond0 (unregistering): Released all slaves [ 293.463812][ T5463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.148022][ T3198] hsr_slave_0: left promiscuous mode [ 294.175071][ T3198] hsr_slave_1: left promiscuous mode [ 294.201464][ T3198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.213312][ T3198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.248670][ T3198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.259100][ T3198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.370916][ T3198] veth1_macvtap: left promiscuous mode [ 294.377161][ T3198] veth0_macvtap: left promiscuous mode [ 294.385100][ T3198] veth1_vlan: left promiscuous mode [ 294.390717][ T3198] veth0_vlan: left promiscuous mode [ 294.744464][ T5195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.756968][ T5195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.767487][ T5195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.803868][ T5195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.824605][ T5195] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.840325][ T5195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.164035][ T5673] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 295.412972][ T3198] team0 (unregistering): Port device team_slave_1 removed [ 295.449493][ T3198] team0 (unregistering): Port device team_slave_0 removed [ 296.525001][ T5463] veth0_vlan: entered promiscuous mode [ 296.983754][ T5463] veth1_vlan: entered promiscuous mode [ 297.062649][ T5195] Bluetooth: hci0: command tx timeout [ 297.417469][ T5463] veth0_macvtap: entered promiscuous mode [ 297.540412][ T5463] veth1_macvtap: entered promiscuous mode [ 297.853093][ T5667] chnl_net:caif_netlink_parms(): no params data found [ 297.905750][ T5701] loop4: detected capacity change from 0 to 128 [ 297.959831][ T29] audit: type=1800 audit(2000000001.701:5): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.101" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 297.981332][ T29] audit: type=1800 audit(2000000001.711:6): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.101" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 298.003367][ T3198] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 298.003538][ T3198] FAT-fs (loop4): Filesystem has been set read-only [ 298.003774][ T3198] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 298.035577][ T5701] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 298.043671][ T5701] FAT-fs (loop4): Filesystem has been set read-only [ 298.202833][ T5702] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 298.219567][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.232899][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.244458][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.255800][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.268519][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.279780][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.296696][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.653620][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.664805][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.675226][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.686069][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.696273][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.707237][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.727458][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.870330][ T5463] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.880534][ T5463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.889936][ T5463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.899190][ T5463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.214333][ T5195] Bluetooth: hci0: command tx timeout [ 300.425148][ T5717] loop4: detected capacity change from 0 to 2048 [ 300.511996][ T5717] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 300.611268][ T5727] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.697541][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.705634][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.713695][ T5667] bridge_slave_0: entered allmulticast mode [ 300.723520][ T5667] bridge_slave_0: entered promiscuous mode [ 300.959262][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.971574][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.979806][ T5667] bridge_slave_1: entered allmulticast mode [ 300.989823][ T5667] bridge_slave_1: entered promiscuous mode [ 301.315237][ T5195] Bluetooth: hci0: command tx timeout [ 301.713911][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.816633][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.820633][ T5726] loop0: detected capacity change from 0 to 4096 [ 301.827001][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 301.988554][ T5726] NILFS (loop0): invalid segment: Checksum error in segment payload [ 302.000032][ T5726] NILFS (loop0): trying rollback from an earlier position [ 302.046399][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 302.077650][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.089770][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.102763][ T10] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 302.110853][ T5726] NILFS (loop0): recovery complete [ 302.113208][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.138713][ T5739] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.237909][ T5667] team0: Port device team_slave_0 added [ 302.258932][ T5667] team0: Port device team_slave_1 added [ 302.356527][ T5740] loop4: detected capacity change from 0 to 512 [ 302.434685][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.442183][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.468781][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.491631][ T5740] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 302.497938][ T10] usb 3-1: config 0 descriptor?? [ 302.500746][ T5740] UDF-fs: Scanning with blocksize 512 failed [ 302.559240][ T5726] overlayfs: upper fs does not support tmpfile. [ 302.628336][ T5726] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 302.637375][ T5726] overlayfs: failed to set xattr on upper [ 302.644274][ T5726] overlayfs: ...falling back to redirect_dir=nofollow. [ 302.651350][ T5726] overlayfs: ...falling back to index=off. [ 302.657606][ T5726] overlayfs: ...falling back to uuid=null. [ 302.665372][ T5740] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 302.673324][ T5740] UDF-fs: Scanning with blocksize 1024 failed [ 302.737534][ T5740] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 302.746294][ T5740] UDF-fs: Scanning with blocksize 2048 failed [ 302.771272][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.779566][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.806439][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.826573][ T5740] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 302.868547][ T5740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.196077][ T10] hkems 0003:2006:0118.0001: unbalanced delimiter at end of report description [ 303.202578][ T5667] hsr_slave_0: entered promiscuous mode [ 303.247644][ T10] hkems 0003:2006:0118.0001: parse failed [ 303.254100][ T10] hkems 0003:2006:0118.0001: probe with driver hkems failed with error -22 [ 303.266041][ T5667] hsr_slave_1: entered promiscuous mode [ 303.378145][ T5667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.386395][ T5667] Cannot create hsr debugfs directory [ 303.422689][ T5195] Bluetooth: hci0: command tx timeout [ 303.643877][ T44] usb 3-1: USB disconnect, device number 3 [ 304.656211][ T5756] loop4: detected capacity change from 0 to 256 [ 304.737852][ T5756] exfat: Deprecated parameter 'utf8' [ 305.013125][ T5756] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 305.964979][ T5772] loop2: detected capacity change from 0 to 256 [ 306.862564][ T5772] loop2: detected capacity change from 256 to 11 [ 306.875540][ T5667] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.034107][ T5667] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.245671][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.245778][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.266410][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.266515][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.280174][ T5667] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.298184][ T5183] FAT-fs (loop2): Directory bread(block 12) failed [ 307.298337][ T5183] FAT-fs (loop2): Directory bread(block 13) failed [ 307.298468][ T5183] FAT-fs (loop2): Directory bread(block 14) failed [ 307.298599][ T5183] FAT-fs (loop2): Directory bread(block 15) failed [ 307.298733][ T5183] FAT-fs (loop2): Directory bread(block 16) failed [ 307.298864][ T5183] FAT-fs (loop2): Directory bread(block 17) failed [ 307.298996][ T5183] FAT-fs (loop2): Directory bread(block 18) failed [ 307.299126][ T5183] FAT-fs (loop2): Directory bread(block 19) failed [ 307.299231][ T5183] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 307.299337][ T5183] FAT-fs (loop2): Filesystem has been set read-only [ 307.340745][ T5183] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 307.467702][ T5667] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.981517][ T3620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.214724][ T3620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.459062][ T3620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.677463][ T3620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.813499][ T5792] loop4: detected capacity change from 0 to 1764 [ 309.200916][ T3620] bridge_slave_1: left allmulticast mode [ 309.207483][ T3620] bridge_slave_1: left promiscuous mode [ 309.222722][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.295302][ T3620] bridge_slave_0: left allmulticast mode [ 309.301287][ T3620] bridge_slave_0: left promiscuous mode [ 309.309612][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.093395][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.189550][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.240126][ T3620] bond0 (unregistering): Released all slaves [ 311.247798][ T3620] hsr_slave_0: left promiscuous mode [ 311.278451][ T3620] hsr_slave_1: left promiscuous mode [ 311.334010][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.341917][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.455766][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.464081][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.575965][ T3620] veth1_macvtap: left promiscuous mode [ 311.581876][ T3620] veth0_macvtap: left promiscuous mode [ 311.588400][ T3620] veth1_vlan: left promiscuous mode [ 311.594254][ T3620] veth0_vlan: left promiscuous mode [ 311.730244][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.752631][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.969311][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.987918][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.999952][ T5188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 312.011099][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.786670][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 312.824602][ T5809] loop4: detected capacity change from 0 to 4096 [ 312.904936][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 313.442407][ T5815] warning: `syz.1.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 313.696983][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.749250][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.037070][ T3198] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.044926][ T3198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.063244][ T3198] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.071205][ T3198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.255277][ T5188] Bluetooth: hci4: command tx timeout [ 314.325169][ T3620] IPVS: stop unused estimator thread 0... [ 314.730798][ T5828] loop0: detected capacity change from 0 to 2048 [ 315.028810][ T5828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.042336][ T5828] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.320952][ T5842] loop4: detected capacity change from 0 to 2048 [ 315.572662][ T5849] loop1: detected capacity change from 0 to 128 [ 315.680863][ T5842] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 315.698732][ T5842] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x9b != 0xd4 [ 315.751970][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.778804][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 316.161756][ T5842] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 1312: 0x4a != 0xb3 [ 316.175779][ T5842] UDF-fs: error (device loop4): udf_read_inode: (ino 1312) failed !bh [ 316.345141][ T5188] Bluetooth: hci4: command tx timeout [ 316.378537][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.508360][ T5842] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 316.578634][ T5842] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 316.598714][ T5842] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 316.661299][ T5842] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 316.715898][ T5842] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 316.740221][ T5842] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 316.751758][ T5842] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 316.756690][ T5667] veth0_vlan: entered promiscuous mode [ 316.795788][ T5667] veth1_vlan: entered promiscuous mode [ 317.455588][ T5864] loop1: detected capacity change from 0 to 128 [ 317.492870][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.500802][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.508826][ T5816] bridge_slave_0: entered allmulticast mode [ 317.518098][ T5816] bridge_slave_0: entered promiscuous mode [ 317.575798][ T5864] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 317.645479][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.653632][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.665776][ T5816] bridge_slave_1: entered allmulticast mode [ 317.675546][ T5816] bridge_slave_1: entered promiscuous mode [ 317.807861][ T5667] veth0_macvtap: entered promiscuous mode [ 317.884652][ T5864] Trying to write to read-only block-device loop1 [ 318.062432][ T5864] syz.1.136: attempt to access beyond end of device [ 318.062432][ T5864] loop1: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 318.348462][ T5667] veth1_macvtap: entered promiscuous mode [ 318.385203][ T5463] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 318.394423][ T5463] FAT-fs (loop1): Filesystem has been set read-only [ 318.424622][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.434913][ T5188] Bluetooth: hci4: command tx timeout [ 318.510978][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.521864][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.532278][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.543140][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.553570][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.566433][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.586736][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.751386][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.979415][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.991434][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.002116][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.012909][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.023169][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.034136][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.049084][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.187057][ T5816] team0: Port device team_slave_0 added [ 319.273366][ T5816] team0: Port device team_slave_1 added [ 319.420513][ T5667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.429933][ T5667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.439408][ T5667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.448646][ T5667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.587075][ T29] audit: type=1326 audit(2000000023.331:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.610738][ T29] audit: type=1326 audit(2000000023.341:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.633840][ T29] audit: type=1326 audit(2000000023.341:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.656533][ T29] audit: type=1326 audit(2000000023.341:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.679259][ T29] audit: type=1326 audit(2000000023.341:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.702818][ T29] audit: type=1326 audit(2000000023.341:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.726867][ T29] audit: type=1326 audit(2000000023.351:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.749662][ T29] audit: type=1326 audit(2000000023.351:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.773104][ T29] audit: type=1326 audit(2000000023.351:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.797344][ T29] audit: type=1326 audit(2000000023.351:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c737df39 code=0x7ffc0000 [ 319.931026][ T5883] raw_sendmsg: syz.4.141 forgot to set AF_INET. Fix it! [ 320.415303][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.426044][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.453414][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.578233][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.586118][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.613886][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.631298][ T5188] Bluetooth: hci4: command tx timeout [ 321.203244][ T5816] hsr_slave_0: entered promiscuous mode [ 321.274462][ T5816] hsr_slave_1: entered promiscuous mode [ 321.332321][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.340184][ T5816] Cannot create hsr debugfs directory [ 322.329558][ T5914] loop0: detected capacity change from 0 to 256 [ 323.485964][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 323.719714][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 323.730614][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 323.740830][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 323.751030][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 323.761391][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 323.771024][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.794782][ T5928] loop7: detected capacity change from 0 to 16384 [ 323.863567][ T8] usb 2-1: config 0 descriptor?? [ 324.106368][ T8] hdpvr 2-1:0.0: firmware version 0x8 dated ¥)†íËŸâè=ÛJå¦+nÍoKÜo5Éüf¦oŠÉ °ÐôçO¬übL [ 324.153680][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.299407][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.356619][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.491148][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.738276][ T8] hdpvr 2-1:0.0: Could not setup controls [ 324.747738][ T8] hdpvr 2-1:0.0: registering videodev failed [ 324.877200][ T8] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 325.052200][ T8] usb 2-1: USB disconnect, device number 2 [ 326.131800][ T5943] vivid-004: disconnect [ 326.204031][ T5945] vivid-004: reconnect [ 327.268078][ T5940] loop0: detected capacity change from 0 to 32768 [ 327.348420][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.377897][ T5953] input: syz1 as /devices/virtual/input/input6 [ 327.730617][ T5957] loop1: detected capacity change from 0 to 128 [ 327.857712][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.966566][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.974503][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.077799][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.085729][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.359654][ T5816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.371350][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.503266][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 329.746593][ T10] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 329.755369][ T10] usb 2-1: config 0 has no interface number 1 [ 329.761785][ T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 329.772441][ T5188] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.772418][ T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 329.772617][ T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.800490][ T1922] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 329.800616][ T1922] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 329.815363][ T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 329.827112][ T10] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 329.836968][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.087151][ T10] usb 2-1: config 0 descriptor?? [ 330.222935][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.230232][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 330.502711][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 330.735754][ T10] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 330.783985][ T10] usb 2-1: USB disconnect, device number 3 [ 331.123330][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.688834][ T5816] veth0_vlan: entered promiscuous mode [ 331.761567][ T5816] veth1_vlan: entered promiscuous mode [ 331.926819][ T5996] veth0_to_batadv: entered promiscuous mode [ 332.139396][ T5816] veth0_macvtap: entered promiscuous mode [ 332.287940][ T5816] veth1_macvtap: entered promiscuous mode [ 332.544029][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.555048][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.565280][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.576061][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.586481][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.598929][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.609499][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.620708][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.636728][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.745490][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout [ 332.753543][ T1922] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 332.759912][ T1922] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 332.796542][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.807534][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.820474][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.831398][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.841624][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.852749][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.863111][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.873950][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.890166][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.976725][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.986003][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.995304][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.005786][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.133676][ T1922] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 335.140288][ T1922] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 335.152313][ T5188] Bluetooth: hci0: command 0x0c1a tx timeout [ 336.898301][ T6025] loop1: detected capacity change from 0 to 32768 [ 337.614317][ T5188] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.620783][ T1922] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 337.627540][ T1922] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 338.132977][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.140996][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.525594][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.534112][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.054748][ T6060] process 'syz.4.175' launched './file0' with NULL argv: empty string added [ 339.286739][ T6064] ALSA: seq fatal error: cannot create timer (-22) [ 340.319664][ T6055] loop1: detected capacity change from 0 to 4096 [ 340.349859][ T6055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.814463][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.823044][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.279177][ T3131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.287609][ T3131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.612563][ T6105] loop3: detected capacity change from 0 to 512 [ 342.718907][ T6105] EXT4-fs: Ignoring removed i_version option [ 342.725549][ T6105] EXT4-fs: Ignoring removed nobh option [ 342.823115][ T6105] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 342.838810][ T6105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.028521][ T6109] loop0: detected capacity change from 0 to 2048 [ 343.058200][ T6105] EXT4-fs (loop3): 1 truncate cleaned up [ 343.066783][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.108648][ T6109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 343.361439][ T6104] syz.2.122 (6104): drop_caches: 2 [ 343.475914][ T6105] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 343.521190][ T6109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.673125][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 343.872504][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 343.887108][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 343.895773][ T5667] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.895923][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.915207][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.925501][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.936115][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.949985][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.961369][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.336597][ T6121] loop3: detected capacity change from 0 to 16 [ 344.543298][ T25] usb 2-1: usb_control_msg returned -32 [ 344.549308][ T25] usbtmc 2-1:16.0: can't read capabilities [ 345.358976][ T6132] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 346.042894][ T6140] loop4: detected capacity change from 0 to 512 [ 346.501075][ T6140] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 346.510328][ T6140] EXT4-fs (loop4): 1 truncate cleaned up [ 346.520343][ T6140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.696607][ T1922] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 346.935180][ T1922] usb 4-1: Using ep0 maxpacket: 32 [ 347.016047][ T1922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.027599][ T1922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.040383][ T1922] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.049973][ T1922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.086501][ T6140] ecryptfs_parse_options: eCryptfs: unrecognized option [bcache_journal_write] [ 347.096238][ T6140] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 347.110120][ T6140] Error parsing options; rc = [-22] [ 347.231278][ T5238] usb 2-1: USB disconnect, device number 4 [ 347.285682][ T5186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.444906][ T1922] usb 4-1: config 0 descriptor?? [ 347.461838][ T1922] hub 4-1:0.0: USB hub found [ 347.754630][ T1922] hub 4-1:0.0: 1 port detected [ 348.029456][ T6152] fuse: root generation should be zero [ 348.419428][ T25] hub 4-1:0.0: activate --> -90 [ 349.050610][ T25] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 349.069712][ T25] usb 4-1-port1: cannot reset (err = -71) [ 349.077981][ T25] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 349.079641][ T5238] usb 4-1: USB disconnect, device number 3 [ 349.090730][ T25] usb 4-1-port1: attempt power cycle [ 351.955623][ T6201] loop0: detected capacity change from 0 to 256 [ 352.098081][ T6206] loop1: detected capacity change from 0 to 2048 [ 352.185678][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.192969][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.408659][ T6211] loop4: detected capacity change from 0 to 1024 [ 352.694516][ T6217] loop2: detected capacity change from 0 to 1024 [ 353.649766][ T6211] hfsplus: request for non-existent node 3 in B*Tree [ 353.656956][ T6211] hfsplus: request for non-existent node 3 in B*Tree [ 353.758597][ T6230] loop3: detected capacity change from 0 to 4096 [ 353.769245][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 353.769350][ T29] audit: type=1800 audit(2000000057.491:21): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.220" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 353.815588][ T6230] NILFS (loop3): invalid segment: Checksum error in segment payload [ 353.824132][ T6230] NILFS (loop3): trying rollback from an earlier position [ 354.084096][ T6217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.105004][ T6230] NILFS (loop3): recovery complete [ 354.176960][ T6240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.516140][ T50] hfsplus: b-tree write err: -5, ino 3 [ 354.717584][ T6248] loop1: detected capacity change from 0 to 128 [ 355.036136][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.319187][ T6250] loop4: detected capacity change from 0 to 1024 [ 355.333259][ T6250] ext4: Unknown parameter 'hash' [ 356.481267][ T6269] tipc: Failed to remove unknown binding: 66,1,1/0:509797878/509797880 [ 356.490391][ T6269] tipc: Failed to remove unknown binding: 66,1,1/0:509797878/509797880 [ 358.003465][ T1922] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 358.224708][ T1922] usb 4-1: Using ep0 maxpacket: 8 [ 358.806110][ T6299] loop0: detected capacity change from 0 to 1024 [ 358.827503][ T6299] EXT4-fs: Ignoring removed nobh option [ 358.833694][ T6299] EXT4-fs: Ignoring removed orlov option [ 358.866122][ T1922] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 358.875299][ T1922] usb 4-1: config 179 has no interface number 0 [ 358.882245][ T1922] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 358.893956][ T1922] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 358.905895][ T1922] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 358.920074][ T1922] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 358.934123][ T1922] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 358.943709][ T1922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.110360][ T6279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.255462][ C1] hrtimer: interrupt took 676787 ns [ 359.263829][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 361.963608][ T6299] EXT4-fs: error -4 creating inode table initialization thread [ 362.101083][ T6299] EXT4-fs (loop0): mount failed [ 362.124236][ T5238] usb 4-1: USB disconnect, device number 8 [ 362.124483][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 363.844660][ T6340] loop3: detected capacity change from 0 to 1024 [ 366.991885][ T6340] hfsplus: failed to load extents file [ 367.923190][ T1922] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 368.213586][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 368.282310][ T1922] usb 5-1: Using ep0 maxpacket: 32 [ 368.311257][ T1922] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 368.321209][ T1922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.436040][ T1922] usb 5-1: config 0 descriptor?? [ 369.003080][ T1922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 369.071833][ T1922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.145065][ T1922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 369.155328][ T1922] usb 5-1: media controller created [ 369.225084][ T1922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.334945][ T25] libceph: connect (1)[c::]:6789 error -101 [ 369.341584][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 369.422675][ T6366] ceph: No mds server is up or the cluster is laggy [ 369.568860][ T6082] coredump: 112(syz.0.179): written to core: VMAs: 34, size 99512320; core: 62251974 bytes, pos 99520512 [ 370.096308][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 370.115863][ T6387] loop1: detected capacity change from 0 to 1024 [ 370.178280][ T6387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.352366][ T1922] stb0899_attach: Driver disabled by Kconfig [ 370.358838][ T1922] az6027: no front-end attached [ 370.358838][ T1922] [ 370.424698][ T1922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 370.467938][ T1922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 370.512442][ T6396] bond_slave_0: entered promiscuous mode [ 370.518504][ T6396] bond_slave_1: entered promiscuous mode [ 370.530018][ T6396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.619903][ T1922] dvb-usb: schedule remote query interval to 400 msecs. [ 370.628149][ T1922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 370.804551][ T6396] bond_slave_0: left promiscuous mode [ 370.810442][ T6396] bond_slave_1: left promiscuous mode [ 370.890050][ T1922] usb 5-1: USB disconnect, device number 2 [ 371.422873][ T10] libceph: connect (1)[c::]:6789 error -101 [ 371.429332][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 371.567609][ T1922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 371.853700][ T10] libceph: connect (1)[c::]:6789 error -101 [ 371.860156][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 372.104497][ T6401] ceph: No mds server is up or the cluster is laggy [ 372.334462][ T6414] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 372.346127][ T6414] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 373.443919][ T29] audit: type=1326 audit(2000000077.201:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.543343][ T29] audit: type=1326 audit(2000000077.221:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.568022][ T29] audit: type=1326 audit(2000000077.221:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.592069][ T29] audit: type=1326 audit(2000000077.221:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.614803][ T29] audit: type=1326 audit(2000000077.291:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.637592][ T29] audit: type=1326 audit(2000000077.291:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.662736][ T29] audit: type=1326 audit(2000000077.291:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.685404][ T29] audit: type=1326 audit(2000000077.291:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.708200][ T29] audit: type=1326 audit(2000000077.291:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 373.731311][ T29] audit: type=1326 audit(2000000077.291:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 374.644493][ T6450] loop3: detected capacity change from 0 to 4096 [ 374.675209][ T6450] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 374.744212][ T6452] loop1: detected capacity change from 0 to 512 [ 375.105232][ T6452] loop1: detected capacity change from 0 to 1024 [ 375.154789][ T6452] hfsplus: part requires an argument [ 375.160317][ T6452] hfsplus: unable to parse mount options [ 375.167558][ T6458] loop2: detected capacity change from 0 to 256 [ 375.212979][ T6458] exfat: Deprecated parameter 'utf8' [ 375.218831][ T6458] exfat: Deprecated parameter 'utf8' [ 375.224855][ T6458] exfat: Deprecated parameter 'utf8' [ 375.302265][ T6455] loop4: detected capacity change from 0 to 2048 [ 375.391689][ T6458] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 375.569179][ T6455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.854726][ T5186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.514466][ T6492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.300'. [ 377.528933][ T6492] netlink: 172 bytes leftover after parsing attributes in process `syz.2.300'. [ 377.872463][ T6495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.301'. [ 378.440828][ T6495] netlink: 172 bytes leftover after parsing attributes in process `syz.1.301'. [ 378.817088][ T6513] loop0: detected capacity change from 0 to 1024 [ 378.847543][ T6516] loop1: detected capacity change from 0 to 2048 [ 379.055377][ T6522] loop2: detected capacity change from 0 to 256 [ 379.632721][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 379.632806][ T29] audit: type=1326 audit(2000000083.381:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 379.662347][ T29] audit: type=1326 audit(2000000083.391:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 379.685274][ T29] audit: type=1326 audit(2000000083.391:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 379.709739][ T29] audit: type=1326 audit(2000000083.391:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 379.732975][ T29] audit: type=1326 audit(2000000083.391:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 379.755940][ T29] audit: type=1326 audit(2000000083.391:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 380.111824][ T6531] loop1: detected capacity change from 0 to 512 [ 380.372237][ T29] audit: type=1326 audit(2000000083.681:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 380.395173][ T29] audit: type=1326 audit(2000000083.741:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 380.420186][ T29] audit: type=1326 audit(2000000083.971:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 380.443566][ T29] audit: type=1326 audit(2000000083.971:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 380.920497][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.046362][ T6538] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.055853][ T6538] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.065395][ T6538] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.075095][ T6538] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.085146][ T6538] geneve2: entered promiscuous mode [ 381.090653][ T6538] geneve2: entered allmulticast mode [ 381.273325][ T6538] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.284813][ T6538] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.295085][ T6538] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.304609][ T6538] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.854069][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.279371][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.691075][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.947705][ T6558] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 382.958563][ T6557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 383.022389][ T6559] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 383.036551][ T6561] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 383.254438][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 384.174265][ T34] bridge_slave_1: left allmulticast mode [ 384.180355][ T34] bridge_slave_1: left promiscuous mode [ 384.187474][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.314709][ T34] bridge_slave_0: left allmulticast mode [ 384.320668][ T34] bridge_slave_0: left promiscuous mode [ 384.330229][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.689448][ T5195] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 384.730521][ T5195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 384.928350][ T5195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.942661][ T5195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.970339][ T5195] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 384.980097][ T5195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.334163][ T6581] input: syz1 as /devices/virtual/input/input8 [ 385.364953][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.541048][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.597384][ T34] bond0 (unregistering): Released all slaves [ 386.106918][ T6584] loop3: detected capacity change from 0 to 4096 [ 387.213786][ T5188] Bluetooth: hci2: command tx timeout [ 387.401849][ T34] hsr_slave_0: left promiscuous mode [ 387.438473][ T34] hsr_slave_1: left promiscuous mode [ 387.488332][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.496386][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.576390][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.586646][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.653133][ T34] veth1_macvtap: left promiscuous mode [ 387.658983][ T34] veth0_macvtap: left promiscuous mode [ 387.665206][ T34] veth1_vlan: left promiscuous mode [ 387.670829][ T34] veth0_vlan: left promiscuous mode [ 388.649391][ T6614] loop3: detected capacity change from 0 to 1024 [ 388.726206][ T6614] hfsplus: extend alloc file! (8192,65536,366) [ 389.327858][ T5188] Bluetooth: hci2: command tx timeout [ 389.350245][ T6612] loop2: detected capacity change from 0 to 4096 [ 389.361809][ T6612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.373814][ T34] team0 (unregistering): Port device team_slave_1 removed [ 389.406724][ T34] team0 (unregistering): Port device team_slave_0 removed [ 389.498699][ T6612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.282135][ C0] ------------[ cut here ]------------ [ 390.287882][ C0] refcount_t: underflow; use-after-free. [ 390.296054][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:28 refcount_warn_saturate+0x2cb/0x370 [ 390.305979][ C0] Modules linked in: [ 390.310215][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 390.320929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 390.331406][ C0] RIP: 0010:refcount_warn_saturate+0x2cb/0x370 [ 390.338154][ C0] Code: f6 91 e8 f8 f7 26 fc c6 00 00 c6 05 f2 67 cf 0b 01 90 49 c7 86 80 0c 00 00 00 00 00 00 48 c7 c7 63 a1 16 91 e8 66 7d 33 fb 90 <0f> 0b 90 90 e9 c4 fe ff ff 8b 3a e8 85 04 27 fc f6 c3 01 0f 85 83 [ 390.358261][ C0] RSP: 0018:ffff8881002bf598 EFLAGS: 00010246 [ 390.364872][ C0] RAX: ffffffff815a7139 RBX: 0000000000000000 RCX: ffff8881002b0000 [ 390.373263][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.381546][ C0] RBP: ffff8881002bf5b0 R08: ffffffff815a712f R09: 0000000000000000 [ 390.390007][ C0] R10: ffff8880bb6bf1e0 R11: 0000000000000004 R12: 0000000000000000 [ 390.398372][ C0] R13: ffff88813fca1d80 R14: ffff88813fca1d80 R15: 0000000000000003 [ 390.406797][ C0] FS: 0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 [ 390.416190][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.423261][ C0] CR2: 0000000020002680 CR3: 000000002f814000 CR4: 00000000003506f0 [ 390.431542][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.439991][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.448384][ C0] Call Trace: [ 390.451893][ C0] [ 390.455200][ C0] ? show_trace_log_lvl+0x268/0x3d0 [ 390.460773][ C0] ? sk_skb_reason_drop+0x154/0x480 [ 390.466486][ C0] ? show_regs+0xb4/0xe0 [ 390.471073][ C0] ? __warn+0x2c7/0x780 [ 390.475734][ C0] ? refcount_warn_saturate+0x2cb/0x370 [ 390.481652][ C0] ? report_bug+0x929/0xbd0 [ 390.486685][ C0] ? refcount_warn_saturate+0x2cb/0x370 [ 390.492670][ C0] ? handle_bug+0x6a/0x90 [ 390.497314][ C0] ? exc_invalid_op+0x1f/0x50 [ 390.502398][ C0] ? asm_exc_invalid_op+0x1f/0x30 [ 390.507763][ C0] ? __warn_printk+0x43f/0x470 [ 390.512999][ C0] ? __warn_printk+0x449/0x470 [ 390.518140][ C0] ? refcount_warn_saturate+0x2cb/0x370 [ 390.524107][ C0] ? refcount_warn_saturate+0x2ca/0x370 [ 390.530106][ C0] sk_skb_reason_drop+0x154/0x480 [ 390.535667][ C0] j1939_session_put+0x2a0/0x620 [ 390.540956][ C0] j1939_xtp_rx_eoma+0x588/0x790 [ 390.546418][ C0] j1939_tp_recv+0xf1a/0x1600 [ 390.551428][ C0] j1939_can_recv+0xe30/0xfa0 [ 390.556613][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 390.562289][ C0] can_rcv_filter+0x697/0x1010 [ 390.567402][ C0] can_receive+0x423/0x5d0 [ 390.572309][ C0] can_rcv+0x209/0x3a0 [ 390.576686][ C0] ? ip6_rcv_finish+0x960/0x970 [ 390.581893][ C0] ? __pfx_can_rcv+0x10/0x10 [ 390.586909][ C0] __netif_receive_skb+0x42b/0xa00 [ 390.592570][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 390.598177][ C0] process_backlog+0x4ad/0xa50 [ 390.603462][ C0] ? __pfx_process_backlog+0x10/0x10 [ 390.609092][ C0] __napi_poll+0xe7/0x980 [ 390.613935][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 390.619536][ C0] net_rx_action+0xa5a/0x19b0 [ 390.624696][ C0] ? hrtimer_reprogram+0x35c/0x660 [ 390.630155][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 390.636474][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 390.642183][ C0] handle_softirqs+0x1a0/0x7c0 [ 390.647334][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 390.653078][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 390.659311][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 390.664891][ C0] run_ksoftirqd+0x29/0x50 [ 390.669676][ C0] smpboot_thread_fn+0x555/0xa60 [ 390.675105][ C0] kthread+0x3e2/0x540 [ 390.679566][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 390.685539][ C0] ? __pfx_kthread+0x10/0x10 [ 390.690474][ C0] ret_from_fork+0x6d/0x90 [ 390.695276][ C0] ? __pfx_kthread+0x10/0x10 [ 390.700233][ C0] ret_from_fork_asm+0x1a/0x30 [ 390.705471][ C0] [ 390.708723][ C0] ---[ end trace 0000000000000000 ]--- [ 390.723320][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.330334][ T6639] loop4: detected capacity change from 0 to 512 [ 391.394628][ T5188] Bluetooth: hci2: command tx timeout [ 391.707585][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 391.906405][ T6639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 391.920267][ T6639] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.633168][ T5186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 392.937152][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 393.452974][ T5188] Bluetooth: hci2: command tx timeout [ 393.768183][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.779357][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.787380][ T6573] bridge_slave_0: entered allmulticast mode [ 393.796912][ T6573] bridge_slave_0: entered promiscuous mode [ 393.940765][ T6673] loop2: detected capacity change from 0 to 512 [ 393.979193][ T6676] loop1: detected capacity change from 0 to 512 [ 393.979864][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.994011][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.001897][ T6573] bridge_slave_1: entered allmulticast mode [ 394.011945][ T6573] bridge_slave_1: entered promiscuous mode [ 394.402817][ T6681] loop3: detected capacity change from 0 to 128 [ 394.499774][ T6673] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 394.508473][ T6673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 394.530923][ T6684] loop1: detected capacity change from 0 to 256 [ 394.622715][ T6673] EXT4-fs (loop2): orphan cleanup on readonly fs [ 394.646296][ T6681] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 394.669144][ T6673] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 394.679984][ T6673] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 394.752863][ T6680] vivid-000: disconnect [ 394.776217][ T6678] vivid-000: reconnect [ 394.799056][ T6673] EXT4-fs (loop2): 1 truncate cleaned up [ 394.806979][ T6673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 394.984646][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.140559][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.175733][ T6673] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.356: dx entry: limit 65535 != root limit 120 [ 395.188559][ T6673] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.356: Corrupt directory, running e2fsck is recommended [ 395.265918][ T5238] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 395.323013][ T6673] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.356: path /40/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 395.514741][ T5238] usb 2-1: Using ep0 maxpacket: 8 [ 395.558707][ T5238] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 395.570491][ T5238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.579700][ T5238] usb 2-1: Product: syz [ 395.584352][ T5238] usb 2-1: Manufacturer: syz [ 395.589233][ T5238] usb 2-1: SerialNumber: syz [ 395.604895][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.618320][ T6573] team0: Port device team_slave_0 added [ 395.685897][ T6573] team0: Port device team_slave_1 added [ 395.715295][ T5238] usb 2-1: config 0 descriptor?? [ 396.004862][ T5238] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 396.065591][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.074553][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.103496][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.223532][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.230907][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.259864][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.678680][ T6573] hsr_slave_0: entered promiscuous mode [ 396.724017][ T6573] hsr_slave_1: entered promiscuous mode [ 396.753115][ T6573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.761107][ T6573] Cannot create hsr debugfs directory [ 397.293942][ T5238] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 397.374091][ T5238] usb 2-1: USB disconnect, device number 5 [ 397.880137][ T5195] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 397.918230][ T5195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 397.959099][ T5195] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.008867][ T5195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.040886][ T5195] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 398.063140][ T5195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 398.878763][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 399.063953][ T6713] loop1: detected capacity change from 0 to 512 [ 399.268471][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 399.278617][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 400.315365][ T6573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.344297][ T5188] Bluetooth: hci3: command tx timeout [ 400.643214][ T5188] block nbd1: Receive control failed (result -107) [ 400.681601][ T6700] chnl_net:caif_netlink_parms(): no params data found [ 400.808814][ T6730] nbd1: detected capacity change from 0 to 320 [ 400.856946][ T6573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.971621][ T6573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.984138][ T6724] nbd1: detected capacity change from 320 to 12 [ 400.991915][ T5391] block nbd1: Dead connection, failed to find a fallback [ 401.002457][ T5391] block nbd1: shutting down sockets [ 401.007913][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.018269][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.026744][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.036329][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.044785][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.054348][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.062735][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.072407][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.080641][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.090248][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.101420][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.111706][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.120216][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.129825][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.138313][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.147814][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.156072][ T5391] ldm_validate_partition_table(): Disk read failed. [ 401.163292][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.172860][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.181106][ T5391] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.190666][ T5391] Buffer I/O error on dev nbd1, logical block 0, async page read [ 401.202832][ T5391] Dev nbd1: unable to read RDB block 0 [ 401.209352][ T5391] nbd1: unable to read partition table [ 401.337034][ T6573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 401.405674][ T5391] nbd1: partition table beyond EOD, truncated [ 401.450522][ T5391] ldm_validate_partition_table(): Disk read failed. [ 401.459025][ T5391] Dev nbd1: unable to read RDB block 0 [ 401.466235][ T5391] nbd1: unable to read partition table [ 401.497535][ T5391] nbd1: partition table beyond EOD, truncated [ 402.412845][ T5188] Bluetooth: hci3: command tx timeout [ 402.638627][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.647342][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.655640][ T6700] bridge_slave_0: entered allmulticast mode [ 402.665362][ T6700] bridge_slave_0: entered promiscuous mode [ 402.829749][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.840588][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.850618][ T6700] bridge_slave_1: entered allmulticast mode [ 402.860390][ T6760] loop2: detected capacity change from 0 to 512 [ 402.863290][ T6700] bridge_slave_1: entered promiscuous mode [ 403.083290][ T6760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.097301][ T6760] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.483661][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 403.616850][ T6700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.686403][ T25] usb 2-1: config 0 has no interfaces? [ 403.692566][ T25] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 403.702295][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.706469][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.781677][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.796565][ T25] usb 2-1: config 0 descriptor?? [ 403.996978][ T6700] team0: Port device team_slave_0 added [ 404.089759][ T10] usb 2-1: USB disconnect, device number 6 [ 404.124991][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.133861][ T6700] team0: Port device team_slave_1 added [ 404.177131][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.257691][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.265561][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.428339][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 404.483600][ T6772] erspan0: entered promiscuous mode [ 404.489453][ T6772] macvtap1: entered promiscuous mode [ 404.498747][ T6772] macvtap1: entered allmulticast mode [ 404.504640][ T6772] erspan0: entered allmulticast mode [ 404.504702][ T5188] Bluetooth: hci3: command tx timeout [ 404.571597][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.579643][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.665392][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 404.675484][ T6774] erspan0: left allmulticast mode [ 404.684708][ T6774] erspan0: left promiscuous mode [ 404.976708][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.984104][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.012690][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.108971][ T6779] syz.2.383 uses obsolete (PF_INET,SOCK_PACKET) [ 405.170223][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.178799][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.208389][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.839891][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 406.082495][ T6700] hsr_slave_0: entered promiscuous mode [ 406.125747][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.136343][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 406.150134][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 406.159670][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.206718][ T6700] hsr_slave_1: entered promiscuous mode [ 406.274801][ T6700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.283189][ T25] usb 2-1: config 0 descriptor?? [ 406.289427][ T6700] Cannot create hsr debugfs directory [ 406.572613][ T5188] Bluetooth: hci3: command tx timeout [ 406.873900][ T25] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 407.713101][ T25] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 407.721899][ T25] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 407.839147][ T25] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 407.960559][ T25] usb 2-1: USB disconnect, device number 7 [ 408.182201][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.289188][ T6700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.447101][ T6806] loop3: detected capacity change from 0 to 256 [ 408.475166][ T6700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.643019][ T6806] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 408.718873][ T6700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.939882][ T6700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.614481][ T6573] veth0_vlan: entered promiscuous mode [ 409.741079][ T6573] veth1_vlan: entered promiscuous mode [ 409.831475][ T6700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.983155][ T6700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.054116][ T6573] veth0_macvtap: entered promiscuous mode [ 410.113423][ T6700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.218892][ T6700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.284185][ T6573] veth1_macvtap: entered promiscuous mode [ 410.304589][ T6820] loop3: detected capacity change from 0 to 2048 [ 410.481339][ T6820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.511241][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.524815][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.535897][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.546811][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.556984][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.568077][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.579046][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.590345][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.607188][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.813147][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.827093][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.838099][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.848961][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.859402][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.870252][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.880675][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.894270][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.910284][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.991207][ T6573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.000646][ T6573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.010029][ T6573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.019602][ T6573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.663784][ T6835] coredump: 6835(sed): over coredump resource limit, skipping core dump [ 411.674100][ T6835] coredump: 6835(sed): coredump has not been created, error -7 [ 412.607945][ T6846] input: syz1 as /devices/virtual/input/input9 [ 413.436598][ T3484] bridge_slave_1: left allmulticast mode [ 413.442664][ T3484] bridge_slave_1: left promiscuous mode [ 413.449399][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.632396][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.639152][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.859319][ T3484] bridge_slave_0: left allmulticast mode [ 413.866024][ T3484] bridge_slave_0: left promiscuous mode [ 413.873026][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.073073][ T5195] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.087331][ T5195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.165422][ T5195] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.250671][ T5195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.265813][ T5195] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 414.369709][ T5195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.530407][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.618704][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.661851][ T3484] bond0 (unregistering): Released all slaves [ 414.998444][ T3484] hsr_slave_0: left promiscuous mode [ 415.093639][ T3484] hsr_slave_1: left promiscuous mode [ 415.105103][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.122637][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.285512][ T6874] loop3: detected capacity change from 0 to 128 [ 415.381158][ T6874] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 415.618910][ T6874] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 416.184002][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 416.259761][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 416.382491][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 416.384655][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 416.423158][ T8] usb 3-1: config 0 has no interfaces? [ 416.462653][ T8] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 416.472351][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.480703][ T8] usb 3-1: Product: syz [ 416.485274][ T8] usb 3-1: Manufacturer: syz [ 416.490158][ T8] usb 3-1: SerialNumber: syz [ 416.580060][ T5195] Bluetooth: hci3: command tx timeout [ 416.707710][ T8] usb 3-1: config 0 descriptor?? [ 417.180621][ T44] usb 3-1: USB disconnect, device number 4 [ 417.917022][ T6898] loop1: detected capacity change from 0 to 512 [ 418.174070][ T6863] chnl_net:caif_netlink_parms(): no params data found [ 418.723956][ T5195] Bluetooth: hci3: command tx timeout [ 419.695703][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.703651][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.711762][ T6863] bridge_slave_0: entered allmulticast mode [ 419.721611][ T6863] bridge_slave_0: entered promiscuous mode [ 419.847156][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.855409][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.863630][ T6863] bridge_slave_1: entered allmulticast mode [ 419.873547][ T6863] bridge_slave_1: entered promiscuous mode [ 419.977630][ T6928] input: syz0 as /devices/virtual/input/input10 [ 419.984558][ T6928] input: failed to attach handler leds to device input10, error: -6 [ 420.231853][ T6863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.325022][ T6863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.733353][ T5195] Bluetooth: hci3: command tx timeout [ 420.796980][ T6863] team0: Port device team_slave_0 added [ 420.868239][ T6863] team0: Port device team_slave_1 added [ 421.235154][ T44] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 421.405777][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.413306][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.439967][ T6863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.494474][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 421.513951][ T44] usb 2-1: config index 0 descriptor too short (expected 28277, got 45) [ 421.522972][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.533993][ T44] usb 2-1: config 0 has no interfaces? [ 421.539794][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.549372][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.599978][ T6951] binder: 6946:6951 ioctl c0306201 20000080 returned -14 [ 421.696973][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.704708][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.705427][ T44] usb 2-1: config 0 descriptor?? [ 421.731076][ T6863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.860384][ T6950] syz.3.426 (6950) used greatest stack depth: 5152 bytes left [ 422.549847][ T6863] hsr_slave_0: entered promiscuous mode [ 422.594192][ T6863] hsr_slave_1: entered promiscuous mode [ 422.634328][ T6863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.642340][ T6863] Cannot create hsr debugfs directory [ 422.724107][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.733829][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.812488][ T5195] Bluetooth: hci3: command tx timeout [ 422.966285][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.974972][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.046820][ T8] usb 2-1: USB disconnect, device number 8 [ 425.197511][ T6863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.244243][ T6863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.293980][ T6863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.343780][ T6863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.858519][ T44] kernel write not supported for file /vcs (pid: 44 comm: kworker/1:1) [ 426.295893][ T6984] loop3: detected capacity change from 0 to 2048 [ 426.573743][ T6984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.586836][ T6984] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.625943][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.808995][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 426.837008][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.876659][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.884588][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.909148][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 426.924269][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 426.939747][ T6984] fs-verity: sha512 using implementation "sha512-generic" [ 426.999768][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.031383][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.039328][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.088300][ T5188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 427.127615][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 427.222953][ T6984] syz.3.435 (6984) used greatest stack depth: 4904 bytes left [ 427.428011][ T6863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.439490][ T6863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.497878][ T6997] input: syz1 as /devices/virtual/input/input11 [ 427.683923][ T5667] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.972921][ T6992] chnl_net:caif_netlink_parms(): no params data found [ 429.212812][ T7016] loop3: detected capacity change from 0 to 256 [ 429.370799][ T6863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.377745][ T5188] Bluetooth: hci4: command tx timeout [ 429.414904][ T7016] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 429.597559][ T5238] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 429.852823][ T5238] usb 2-1: Using ep0 maxpacket: 8 [ 429.876827][ T5238] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.912774][ T5238] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.922537][ T5238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.930845][ T5238] usb 2-1: Product: syz [ 429.935845][ T5238] usb 2-1: Manufacturer: syz [ 429.940708][ T5238] usb 2-1: SerialNumber: syz [ 430.367336][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.376854][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.389813][ T6992] bridge_slave_0: entered allmulticast mode [ 430.401382][ T6992] bridge_slave_0: entered promiscuous mode [ 430.439698][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.448582][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.457628][ T6992] bridge_slave_1: entered allmulticast mode [ 430.469506][ T6992] bridge_slave_1: entered promiscuous mode [ 430.649367][ T7030] loop0: detected capacity change from 0 to 128 [ 430.748312][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.806033][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.976823][ T7030] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.045518][ T7030] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 431.067264][ T6992] team0: Port device team_slave_0 added [ 431.124437][ T6992] team0: Port device team_slave_1 added [ 431.258152][ T5238] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 431.265192][ T5238] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 431.455775][ T5188] Bluetooth: hci4: command tx timeout [ 431.456490][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.469848][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.496943][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.695824][ T5238] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 431.743307][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.751610][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.779267][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.836629][ T6573] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.871718][ T5238] usb 2-1: USB disconnect, device number 9 [ 431.879422][ T5238] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 432.016145][ T6863] veth0_vlan: entered promiscuous mode [ 432.526687][ T6992] hsr_slave_0: entered promiscuous mode [ 432.664160][ T6992] hsr_slave_1: entered promiscuous mode [ 432.708635][ T6992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.716933][ T6992] Cannot create hsr debugfs directory [ 432.766383][ T6863] veth1_vlan: entered promiscuous mode [ 433.463408][ T6863] veth0_macvtap: entered promiscuous mode [ 433.532854][ T5188] Bluetooth: hci4: command tx timeout [ 433.649146][ T6863] veth1_macvtap: entered promiscuous mode [ 433.689729][ T7050] loop0: detected capacity change from 0 to 256 [ 433.737728][ T7050] exfat: Deprecated parameter 'namecase' [ 433.951406][ T7050] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 434.526126][ T6992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.566898][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.578047][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.592876][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.605206][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.615483][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.626389][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.638322][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.649346][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.663051][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.675590][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.697229][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.727896][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.739217][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.749566][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.760524][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.774178][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.790273][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.802204][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.814001][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.826055][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.837049][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.853587][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.963595][ T6992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.077507][ T6863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.088430][ T6863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.103899][ T6863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.115778][ T6863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.187987][ T6992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.244300][ T7067] trusted_key: syz.0.458 sent an empty control message without MSG_MORE. [ 435.456160][ T6992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.615432][ T5188] Bluetooth: hci4: command tx timeout [ 435.736313][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 436.085393][ T6992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.305480][ T6992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.510559][ T6992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.738770][ T6992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 438.320038][ T7074] loop1: detected capacity change from 0 to 32768 [ 439.349807][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.629061][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.753502][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.761446][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.778473][ T7102] loop1: detected capacity change from 0 to 512 [ 439.824410][ T7102] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.912515][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.920333][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.284079][ T7130] loop2: detected capacity change from 0 to 7 [ 442.319183][ T7130] loop2: [POWERTEC] p1 p2 p3 p4 [ 442.326279][ T7130] loop2: p1 start 1493582053 is beyond EOD, truncated [ 442.336193][ T7130] loop2: p2 start 1174072946 is beyond EOD, truncated [ 442.344387][ T7130] loop2: p3 start 3393350918 is beyond EOD, truncated [ 442.351633][ T7130] loop2: p4 start 1635021614 is beyond EOD, truncated [ 442.381822][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.596416][ T7132] loop1: detected capacity change from 0 to 1024 [ 442.668402][ T7132] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 442.682310][ T7132] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 443.004897][ T6992] veth0_vlan: entered promiscuous mode [ 443.161823][ T6992] veth1_vlan: entered promiscuous mode [ 443.564613][ T6992] veth0_macvtap: entered promiscuous mode [ 443.710984][ T6992] veth1_macvtap: entered promiscuous mode [ 443.968515][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.979809][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.990467][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.003706][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.014830][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.025636][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.035806][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.046702][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.056995][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.067804][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.074963][ T7139] loop3: detected capacity change from 0 to 4096 [ 444.078191][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.095344][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.114836][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.132578][ T7139] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 444.453188][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.464234][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.474551][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.486091][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.496609][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.507451][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.522426][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.534597][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.544933][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.555908][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.566121][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.579236][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.596085][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.865928][ T6992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.875195][ T6992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.884497][ T6992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.897854][ T6992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.046953][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.055156][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.389221][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.398887][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.484133][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 445.759367][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.771110][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.782405][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 445.791817][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.824755][ T25] usb 2-1: config 0 descriptor?? [ 446.349304][ T25] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 447.056414][ T7168] loop0: detected capacity change from 0 to 128 [ 447.092664][ T7168] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.148582][ T7168] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 447.462274][ T25] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 447.470144][ T25] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 447.507815][ T25] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 447.528677][ T25] usb 2-1: USB disconnect, device number 10 [ 447.780696][ T3484] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 448.186361][ T7176] Failed to get privilege flags for destination (handle=0x0:0x0) [ 448.288991][ T7173] loop4: detected capacity change from 0 to 1024 [ 448.425306][ T7173] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 448.436526][ T7178] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 448.502757][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 448.502843][ T29] audit: type=1326 audit(2000000152.251:75): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.3.494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0eda57df39 code=0x0 [ 448.629859][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.496'. [ 448.745282][ T7173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.973651][ T29] audit: type=1326 audit(2000000152.721:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 449.295143][ T6863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.494315][ T29] audit: type=1326 audit(2000000153.241:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 449.517643][ T29] audit: type=1326 audit(2000000153.241:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 449.543790][ T29] audit: type=1326 audit(2000000153.241:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 449.567810][ T29] audit: type=1326 audit(2000000153.241:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 449.590506][ T29] audit: type=1326 audit(2000000153.241:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 449.613364][ T29] audit: type=1326 audit(2000000153.241:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 449.638891][ T29] audit: type=1326 audit(2000000153.241:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 449.662465][ T29] audit: type=1326 audit(2000000153.241:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7fc00000 [ 450.992694][ T7213] loop0: detected capacity change from 0 to 256 [ 451.256343][ T7217] loop4: detected capacity change from 0 to 1024 [ 451.346015][ T7217] EXT4-fs: Ignoring removed mblk_io_submit option [ 451.574570][ T7217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.246022][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'. [ 452.255594][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'. [ 452.361335][ T6863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.743922][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.752352][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.939222][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.947584][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.118271][ T7258] loop0: detected capacity change from 0 to 2048 [ 455.226259][ T7258] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 455.327316][ T7258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.476072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 455.574462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 455.723397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 455.734542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 455.782792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 455.884562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 455.976789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 456.447202][ T7271] loop1: detected capacity change from 0 to 128 [ 456.787835][ T7273] loop0: detected capacity change from 0 to 64 [ 458.698102][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 459.092656][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 459.144875][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.162697][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 459.177077][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 459.188582][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 459.198840][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 459.293079][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 459.293219][ T29] audit: type=1326 audit(2000000162.861:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 459.322991][ T29] audit: type=1326 audit(2000000162.861:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 459.347399][ T29] audit: type=1326 audit(2000000162.861:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 459.382454][ T29] audit: type=1326 audit(2000000162.861:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 459.405608][ T29] audit: type=1326 audit(2000000162.861:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0837df39 code=0x7ffc0000 [ 459.718704][ T25] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 459.728601][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 459.737256][ T25] usb 3-1: Product: syz [ 459.741702][ T25] usb 3-1: Manufacturer: syz [ 459.746818][ T25] usb 3-1: SerialNumber: syz [ 459.764746][ T25] usb 3-1: config 0 descriptor?? [ 460.237089][ T25] radio-si470x 3-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 460.308621][ T7304] syz_tun: entered allmulticast mode [ 460.317727][ T7302] syz_tun: left allmulticast mode [ 460.443232][ T25] radio-si470x 3-1:0.0: software version 100, hardware version 101 [ 460.997840][ T44] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 461.264653][ T25] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 461.274379][ T25] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 461.519441][ T7289] ===================================================== [ 461.527174][ T7289] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 [ 461.535100][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.535368][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.535595][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.535908][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.536144][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.569183][ T44] usb 2-1: config 0 descriptor?? [ 461.573386][ T7289] _copy_to_user+0xbc/0x110 [ 461.573542][ T7289] raw_ioctl+0x3d28/0x5440 [ 461.573700][ T7289] __se_sys_ioctl+0x25e/0x450 [ 461.573822][ T7289] __x64_sys_ioctl+0x96/0xe0 [ 461.573944][ T7289] x64_sys_call+0x18bf/0x3ba0 [ 461.574096][ T7289] do_syscall_64+0xcd/0x1e0 [ 461.574200][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.638726][ T7289] [ 461.641381][ T7289] Uninit was created at: [ 461.646260][ T7289] __kmalloc_noprof+0x661/0xf30 [ 461.651573][ T7289] raw_ioctl+0x3bc5/0x5440 [ 461.656560][ T7289] __se_sys_ioctl+0x25e/0x450 [ 461.661662][ T7289] __x64_sys_ioctl+0x96/0xe0 [ 461.666894][ T7289] x64_sys_call+0x18bf/0x3ba0 [ 461.672135][ T7289] do_syscall_64+0xcd/0x1e0 [ 461.677049][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.683548][ T7289] [ 461.686184][ T7289] Bytes 0-2 of 3 are uninitialized [ 461.691441][ T7289] Memory access of size 3 starts at ffff8880310c0990 [ 461.698455][ T7289] Data copied to user address 00007fa66cab0fe8 [ 461.704937][ T7289] [ 461.707412][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.2.531 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 461.723111][ T7289] Tainted: [W]=WARN [ 461.727063][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.738814][ T7289] ===================================================== [ 461.746005][ T7289] Disabling lock debugging due to kernel taint [ 461.752476][ T7289] Kernel panic - not syncing: kmsan.panic set ... [ 461.759071][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.2.531 Tainted: G B W 6.11.0-syzkaller-10669-g11a299a7933e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.771075][ T7289] Tainted: [B]=BAD_PAGE, [W]=WARN [ 461.776247][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.786495][ T7289] Call Trace: [ 461.789913][ T7289] [ 461.792990][ T7289] dump_stack_lvl+0x216/0x2d0 [ 461.797960][ T7289] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 461.804078][ T7289] dump_stack+0x1e/0x30 [ 461.808515][ T7289] panic+0x4e2/0xcf0 [ 461.812695][ T7289] ? kmsan_get_metadata+0xd1/0x1c0 [ 461.818117][ T7289] kmsan_report+0x2c7/0x2d0 [ 461.822944][ T7289] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 461.829069][ T7289] ? kmsan_internal_check_memory+0x48c/0x560 [ 461.835401][ T7289] ? kmsan_copy_to_user+0xd5/0xf0 [ 461.840686][ T7289] ? _copy_to_user+0xbc/0x110 [ 461.845602][ T7289] ? raw_ioctl+0x3d28/0x5440 [ 461.850441][ T7289] ? __se_sys_ioctl+0x25e/0x450 [ 461.855521][ T7289] ? __x64_sys_ioctl+0x96/0xe0 [ 461.860533][ T7289] ? x64_sys_call+0x18bf/0x3ba0 [ 461.865654][ T7289] ? do_syscall_64+0xcd/0x1e0 [ 461.870565][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.876914][ T7289] ? kmsan_get_metadata+0x13e/0x1c0 [ 461.882397][ T7289] ? kmsan_get_metadata+0x13e/0x1c0 [ 461.887882][ T7289] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 461.893992][ T7289] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 461.899715][ T7289] ? filter_irq_stacks+0x60/0x1a0 [ 461.905122][ T7289] ? kmsan_get_metadata+0x13e/0x1c0 [ 461.910636][ T7289] ? kmsan_get_metadata+0x13e/0x1c0 [ 461.916158][ T7289] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 461.922307][ T7289] kmsan_internal_check_memory+0x48c/0x560 [ 461.928426][ T7289] kmsan_copy_to_user+0xd5/0xf0 [ 461.933575][ T7289] ? should_fail_usercopy+0x2e/0x40 [ 461.939052][ T7289] _copy_to_user+0xbc/0x110 [ 461.943796][ T7289] raw_ioctl+0x3d28/0x5440 [ 461.948472][ T7289] ? kmsan_get_metadata+0x13e/0x1c0 [ 461.953994][ T7289] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 461.960096][ T7289] ? do_vfs_ioctl+0x14fc/0x3e80 [ 461.965210][ T7289] ? kmsan_get_metadata+0xd0/0x1c0 [ 461.970647][ T7289] ? __pfx_raw_ioctl+0x10/0x10 [ 461.975667][ T7289] __se_sys_ioctl+0x25e/0x450 [ 461.980594][ T7289] __x64_sys_ioctl+0x96/0xe0 [ 461.985427][ T7289] x64_sys_call+0x18bf/0x3ba0 [ 461.990386][ T7289] do_syscall_64+0xcd/0x1e0 [ 461.995118][ T7289] ? clear_bhb_loop+0x25/0x80 [ 462.000045][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.006173][ T7289] RIP: 0033:0x7fa66bd7db3b [ 462.010789][ T7289] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 462.030805][ T7289] RSP: 002b:00007fa66cab0f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.039499][ T7289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa66bd7db3b [ 462.047685][ T7289] RDX: 00007fa66cab0fe0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 462.055879][ T7289] RBP: 00007fa66bdf0216 R08: 0000000000000003 R09: 0000000000000000 [ 462.064067][ T7289] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fa66cab0fe8 [ 462.072338][ T7289] R13: 0000000000000000 R14: 00007fa66bf35f80 R15: 00007ffc8fd031a8 [ 462.080533][ T7289] [ 462.084047][ T7289] Kernel Offset: disabled [ 462.088496][ T7289] Rebooting in 86400 seconds..