last executing test programs: 3m14.486926065s ago: executing program 3 (id=406): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x13, r0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) mbind(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x1, 0x0, 0x0, 0x1) 3m13.927987262s ago: executing program 3 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, &(0x7f0000000180)={0x26, 0x0, 0x94}) 3m13.206401007s ago: executing program 3 (id=416): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 3m12.612585217s ago: executing program 2 (id=418): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 3m12.547836956s ago: executing program 3 (id=420): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 3m11.916568693s ago: executing program 3 (id=422): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a4fc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b87f7c40a1702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f600e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10f9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80729fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a85430600f1e49db5a5517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000047e628cd57cde4268f47c9aaec3a3dfe43e032b88ea53656a8740c1a4e0a99be5c97ba451d8b2b0f4e12ba96082e0f6b2dabe716699090058e61a38ce85611945106dd1309087d3a2cf3aaef6216ff3720c3917170544a509071166565eaa3c9285b5227f520cd47"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 3m11.760256067s ago: executing program 2 (id=424): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3m11.355912361s ago: executing program 3 (id=426): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) unlink(&(0x7f00000002c0)='./file1\x00') 3m9.449996115s ago: executing program 32 (id=426): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$eJzs3c9vHGf9B/D3rje2N99+UzdN2hRVitVIgLBI/EMumAsBIeRDhapy4GwlTmNlkxbbRW6FqMvPaw/5A8rBN05I3COVCxe49epjJQSXXjCnRTM7a29tr38Ux2uX1yuafZ6ZZ+Z5Ps9nZ3Z214o2wP+s+Yk0nqSW+YnX1or1zY2Z1ubGzMNuPclIknrS6BSp/avdbn+c3E5nyUvFxqq7Wr9xHi/NvfHJZ5ufdtYa1VLuXz/ouKNZr5aMJxmqypPq785h/Y0e1l1te4ZFwm50EweDdiFJu/SPx50tP/3LM9stPZr7HX3omQ+cA7XOfXOPseRidaEX7wM6d8XOPftcWx90AAAAAHAKnt3KVtZyadBxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHlS/f5/rVrq3fp4at3f/x+utqWqny3Xj7f7k6cVBwAAAAAAAACcoutb2cpaLnXX27Xyb/6vlCtXysf/yztZyWKWczNrWchqVrOcqSRjPR0Nry2sri5PHeHI6X2PnD4k0JGqbJ7MvAEAAAAAAADgS+aXmd/5+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwFtWSoU5TLlW59LPVGktEkw8V+68nfuvXz7MmgAwAAAIBT8OxWtrKWS931dq38zP9C+bl/NO/kUVazlNW0spi75XcBnU/99c2NmdbmxszDYtnb7/f+eawwyh7T+e5h/5GvlXs0cy9L5ZabuZO30srd1MsjC9e68ewf1wdFTLXvVo4Y2d2qLGb+YVXu8f6xJtvPMb9MGSszcmE7I5NVbEU2njs4E8d8dnaPNJX6drBXdo20axJfKOcXq7KYz2/75Xwgdmdiuufse+HgnCdf+9MffnK/9ejB/XsrE2dnSgdbr8qhqmyXj829mZjpycSLX8ZM9DVZZuLq9vp8fpgfZyLjeT3LWcrPspDVLGY8PyhrC9X5XOu55Ptk6vbn1l4/LJLh6gztPFnHi+mV8thLWcqP8lbuZjGvlv+mM5VvZTazmet5hq8e4ZW23ueqb///vsHf+HpVaSb5XVWeDUVen+vJa+9r7ljZ1rtlJ0uXT/5+1PhKVSnG+FVVng27MzHVk4nnD87E78uXlZXWowfL9xfePtpwlz+sKsV19JszdZcozpfLxZNVrn3+7Cjant+3bapsu7LdVt/TdnW7rXOlrve9Uoer93B7e5ou217ct22mbLvW07bf+y0AzryL37g43Px786/Nj5q/bt5vvjb6/ZFvj7w8nAt/vvCdxuTQV+sv1/6Yj/KLnc//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF7fy7nsPFlqtxeVdlXa7/X6fpvNc6f6c2SkO+tIzyaCmPJzkbGT+3+12u9pSOwvxHFxpF0bSfupjNZLs13S9d8sHAzl/BvzCBDx1t1Yfvn1r5d33vrn0cOHNxTcXH83Nzs5Nzs2+OnPr3lJrcbLzOOgogadh56Y/6EgAAAAAAAAAAACAozqZ/zPQTNJ/n/6jj57mVAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBzan4ijSepZWry5mSxvrkx0yqWbn1nz0aSepLaz5Pax8ntdJaM9XRX6zfO46W5Nz75bPPTnb4a3f3rBx13NOvVkvEkQ1V5Uv3d+a/7q23PsEjYjW7iYND+EwAA//9nMgTf") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) unlink(&(0x7f00000002c0)='./file1\x00') 3m9.379674507s ago: executing program 2 (id=432): r0 = memfd_secret(0x0) rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) 3m7.517481927s ago: executing program 2 (id=436): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3m5.032872873s ago: executing program 2 (id=445): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn79Nivjb4uiTidUOPlmt9rm6cu1qSifDJTaEdRmKiKy7RmrjfyyGotF5Y/Hap6U2DthQ1VyXwxerwF0sibJbAJSj+KDP7n+LbfNmH+W7+nL9BiiL+3q+1Y8MR5qXGWm7v+2niYg4dvHfr7ItNuY5BABAi++z+c+zneZ/aTzQVO6efG1oPF9L2R0R90XEnoi4P6JW9sGIeGid9bcvktw8/0mv9BTYGmXzv5fyta3W+V8x+4vxoTy3qxb/SHL8ZGXxUP6aTMbI1iw/s0odP7z62xfdjjXP/7Itq7+YC+btuDK8tfWchbmVuduJudnVTyL2DXeKP7mxEpBExN6I2NdjHSef/uZAt2O3jn8VfVhnqn4d8VS9/y9GW/yFZPX1yeltUVk8NF1cFTf75ddLb3Wr/7bi74Os/7d3vP5vxD+eNK/XLq+/jkt/fN71nmaqp+u/sWNL/vfDuZWVszMRW5I36o1u3j/bOLfIF+Wz+CcPdh7/u6PxSuyPiOwifjgiHomIR/O+eywiHo+Ig53Dy24d46dXnnivW/x3Qv8vtPX/eGuRtv5vJLZE+57OiaFTP37X+j82kmt7/ztSS03me9by/reWdvV2NQMAAMD/TxoROyNJp26kR9Opqfp3+PfE9rSytLzyzPGlD84s1H8jMB4jafGka6zpeehMfltf5Gfb8ofz58ZfDo3W8lPzS5WFsoOHAbfjpvGf1sZ/5s+hslsHbDi/14LB1TT+kzLbAWw+n/8wuIx/GFwdxv9oGe0ANl+nz/+PS2gHsPnaxr9lPxgg7v9hcBn/MLiax78vAMDAWB6NW/9IvlNiW/RylsRdk4j0jmhGfxJJj6NgrYmdZQe4/kTZ70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD///Mv57k=") bpf$MAP_CREATE(0x0, 0x0, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x1, @desc2}) 3m1.936238785s ago: executing program 2 (id=454): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m59.874914971s ago: executing program 33 (id=454): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m24.501959187s ago: executing program 0 (id=600): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) 2m23.407718263s ago: executing program 0 (id=604): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) 2m22.651747658s ago: executing program 0 (id=608): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0xffed}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffd}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2m22.019087536s ago: executing program 0 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000001200)='./file0/file0\x00', 0xf) 2m21.575335449s ago: executing program 0 (id=615): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2m21.019629895s ago: executing program 0 (id=619): r0 = mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\x03q\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x91:\x0f\xef\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00q`\x1a_\xcd\x8ck+\x05\x11}*\xf5\r\a\x14\x97B>\x9d\xe6\x81\xf9\xcbE\xa1\xc3\xda\xb6\xfe\rh\xd5\xe3\x9d\x85\xe0;\x90W\xa4\xc1\x1eb;\xa5\x12\xc5\x936k\x18=\xe08\x17\xfc\xf1\xee\xd5\xa7\xab\xd3\x05a\x15?c\xa3\xa8\xd3$\xe8`$\x16\xb4\xd8K\x1bR4s\xab\xedM\xa1\xd4I\x91\x01', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x1a38, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 2m19.768737299s ago: executing program 34 (id=619): r0 = mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\x03q\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x91:\x0f\xef\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00q`\x1a_\xcd\x8ck+\x05\x11}*\xf5\r\a\x14\x97B>\x9d\xe6\x81\xf9\xcbE\xa1\xc3\xda\xb6\xfe\rh\xd5\xe3\x9d\x85\xe0;\x90W\xa4\xc1\x1eb;\xa5\x12\xc5\x936k\x18=\xe08\x17\xfc\xf1\xee\xd5\xa7\xab\xd3\x05a\x15?c\xa3\xa8\xd3$\xe8`$\x16\xb4\xd8K\x1bR4s\xab\xedM\xa1\xd4I\x91\x01', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x1a38, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 1m39.500269125s ago: executing program 6 (id=793): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet_sctp(0x2, 0x5, 0x84) 1m38.949640879s ago: executing program 6 (id=796): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x3}, 0x4) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m38.265019451s ago: executing program 6 (id=800): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000500)={0x14, &(0x7f00000001c0)={0x40, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, 0x0, 0x0}, 0x0) 1m12.499504272s ago: executing program 6 (id=800): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000500)={0x14, &(0x7f00000001c0)={0x40, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, 0x0, 0x0}, 0x0) 55.617489455s ago: executing program 7 (id=931): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 54.100305654s ago: executing program 7 (id=938): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000300), 0x5, 0x4a7, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000480)={0x88, 0x7, 0x1, 0x2}) 52.875609293s ago: executing program 7 (id=941): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 51.4932911s ago: executing program 7 (id=947): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@fd={0x7, 0x1, 0x4, 0x8, 0x6, {}, {0x1, 0x2, 0x9, 0x6, 0x9, 0xfd, 'yT=7'}, 0x0, 0x4, {}, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 50.828877725s ago: executing program 7 (id=951): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x88c0, &(0x7f0000000180)={0xa, 0x4a1f, 0x0, @loopback, 0x87ff}, 0x1c) sendto$inet6(r0, &(0x7f0000000440)='\r', 0x1, 0x4000080, 0x0, 0x0) 43.746652556s ago: executing program 6 (id=800): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000500)={0x14, &(0x7f00000001c0)={0x40, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, 0x0, 0x0}, 0x0) 32.57233767s ago: executing program 1 (id=995): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x24}}, 0x0) 31.864178502s ago: executing program 1 (id=997): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x4, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x0, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 31.195277129s ago: executing program 1 (id=1000): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x44, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) 30.033587664s ago: executing program 1 (id=1002): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) 29.119203509s ago: executing program 1 (id=1004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 28.219113329s ago: executing program 1 (id=1009): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 16.425755733s ago: executing program 7 (id=951): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x88c0, &(0x7f0000000180)={0xa, 0x4a1f, 0x0, @loopback, 0x87ff}, 0x1c) sendto$inet6(r0, &(0x7f0000000440)='\r', 0x1, 0x4000080, 0x0, 0x0) 10.010044217s ago: executing program 5 (id=1039): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4040}, 0x24000800) 9.826941298s ago: executing program 6 (id=800): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000500)={0x14, &(0x7f00000001c0)={0x40, 0x23, 0x7, {0x7, 0x31, "edff017fdc"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, 0x0, 0x0}, 0x0) 7.202057236s ago: executing program 5 (id=1040): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={r3, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 5.722887371s ago: executing program 5 (id=1044): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.131751116s ago: executing program 4 (id=1045): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101001, 0x1a3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 3.815328699s ago: executing program 4 (id=1046): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x24, r2, 0x60b, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x24}}, 0x4008034) 3.401014967s ago: executing program 5 (id=1047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 3.221321484s ago: executing program 4 (id=1048): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 2.814864325s ago: executing program 5 (id=1049): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r0, r0, 0x0) socket$rds(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f00000032c0)={0x0, 0x0, 0x0}, 0x100) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.17783543s ago: executing program 5 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 963.847093ms ago: executing program 4 (id=1051): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 366.584896ms ago: executing program 4 (id=1052): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x800000, &(0x7f00000002c0)={[{@huge_advise}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ftruncate(r0, 0x2) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x27fffff, 0x4002011, r0, 0x0) 0s ago: executing program 4 (id=1053): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close(0x3) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): T9] usb 5-1: USB disconnect, device number 4 [ 425.160533][ T7561] loop1: detected capacity change from 0 to 1024 [ 425.263756][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 425.263841][ T30] audit: type=1800 audit(1749927553.082:103): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.579" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 425.360328][ T4059] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 426.069328][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 426.859098][ T7589] loop1: detected capacity change from 0 to 1024 [ 426.924343][ T7584] loop6: detected capacity change from 0 to 2048 [ 427.028327][ T7589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.046660][ T7589] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.099454][ T7584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.297968][ T7589] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 427.354287][ T7589] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 427.367312][ T7589] EXT4-fs (loop1): This should not happen!! Data will be lost [ 427.367312][ T7589] [ 427.377904][ T7589] EXT4-fs (loop1): Total free blocks count 0 [ 427.384308][ T7589] EXT4-fs (loop1): Free/Dirty block details [ 427.390481][ T7589] EXT4-fs (loop1): free_blocks=4293918720 [ 427.396748][ T7589] EXT4-fs (loop1): dirty_blocks=64 [ 427.402107][ T7589] EXT4-fs (loop1): Block reservation details [ 427.408505][ T7589] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 427.523990][ T7589] syz.1.589 (7589) used greatest stack depth: 4944 bytes left [ 427.868749][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.929883][ T7605] loop5: detected capacity change from 0 to 256 [ 427.980381][ T7605] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.991533][ T7605] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 428.127776][ T7605] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 428.443944][ T7613] netem: incorrect gi model size [ 428.449380][ T7613] netem: change failed [ 428.563864][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 428.775760][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 428.815995][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 428.824698][ T9] usb 2-1: config 0 has no interface number 0 [ 428.862934][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 428.872613][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.884766][ T9] usb 2-1: Product: syz [ 428.889414][ T9] usb 2-1: Manufacturer: syz [ 428.895852][ T9] usb 2-1: SerialNumber: syz [ 428.949890][ T9] usb 2-1: config 0 descriptor?? [ 428.981677][ T9] smsc95xx v2.0.0 [ 430.106791][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 430.125619][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 430.192599][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 430.204852][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 430.305005][ T9] usb 2-1: USB disconnect, device number 7 [ 430.449795][ T7637] loop5: detected capacity change from 0 to 128 [ 431.464033][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 431.674840][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 431.696760][ T5875] kernel read not supported for file /rfkill (pid: 5875 comm: kworker/1:5) [ 431.718362][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 431.729143][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.795412][ T24] usb 6-1: config 0 descriptor?? [ 431.815596][ T24] gspca_main: sq930x-2.14.0 probing 041e:403c [ 432.920699][ T24] gspca_sq930x: ucbus_write failed -71 [ 432.927093][ T24] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 432.947921][ T24] usb 6-1: USB disconnect, device number 3 [ 433.579802][ T7667] loop1: detected capacity change from 0 to 128 [ 433.730946][ T7667] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 433.786225][ T7667] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.974094][ T7667] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz.1.621: No space for directory leaf checksum. Please run e2fsck -D. [ 433.990127][ T7667] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #11: comm syz.1.621: checksumming directory block 0 [ 434.036513][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.055179][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.075803][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.111612][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.128498][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.572968][ T5799] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.037012][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 435.294588][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 435.313657][ T7670] chnl_net:caif_netlink_parms(): no params data found [ 435.368222][ T24] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 435.377372][ T24] usb 2-1: config 0 has no interface number 0 [ 435.383994][ T24] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 435.452952][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 435.462905][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.471465][ T24] usb 2-1: Product: syz [ 435.476072][ T24] usb 2-1: Manufacturer: syz [ 435.480946][ T24] usb 2-1: SerialNumber: syz [ 435.574391][ T24] usb 2-1: config 0 descriptor?? [ 435.585330][ T7691] mmap: syz.6.630 (7691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 436.037369][ T24] radio-si470x 2-1:0.35: DeviceID=0xc798 ChipID=0x0c11 [ 436.174846][ T5804] Bluetooth: hci2: command tx timeout [ 436.218320][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.5.632'. [ 436.248691][ T24] radio-si470x 2-1:0.35: software version 199, hardware version 152 [ 436.464038][ T24] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 436.473538][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.481295][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.493809][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.503717][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.512008][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.523692][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.531187][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.538446][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.553660][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.562143][ T24] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 436.571086][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.571669][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.572292][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.579413][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.580010][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.587157][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.587788][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.594903][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.595573][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.602788][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.603409][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.617209][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.617780][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.625172][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.625842][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.632912][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.633523][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.640643][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.641309][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.648399][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.648986][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.656201][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.656893][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.664121][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.664733][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.671771][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.672370][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.679445][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.680068][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.687172][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.687799][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.694951][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.695615][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.702675][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.703271][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.710382][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.710977][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.718421][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.718989][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.726054][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.726736][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.733856][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.734477][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.741498][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.742127][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.749340][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.750008][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.757196][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.757828][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.764863][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.765541][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.772610][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.773216][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.773900][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.780948][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.781592][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.788734][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.789398][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.796521][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.797154][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.804468][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.805136][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.812378][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.813000][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.820184][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.820840][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.827988][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.828665][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.835975][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.836639][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.843830][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.844492][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.851572][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.852237][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.859429][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.860028][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.867144][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.867827][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.875024][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.875713][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.882833][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.883465][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.890576][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.891177][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.901748][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.904063][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.911158][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.911820][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.919013][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.919654][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.926860][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.927546][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.934785][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.935455][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.942544][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.943205][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.943913][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.950988][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.951648][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.958908][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.959571][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.966798][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.967466][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.974669][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.975323][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.982422][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.983086][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.997070][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 436.997761][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.004916][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.005565][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.012667][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.013325][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.014343][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.021509][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.022178][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.029805][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.030485][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.037666][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.038357][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.045669][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.046344][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.053479][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.054198][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.054879][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.061977][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.062640][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.069839][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.070520][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.077775][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.078441][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.085666][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.086361][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.093502][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.100849][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.101509][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.108751][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.109408][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.116616][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.117287][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.124449][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.125109][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.132204][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.132854][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.140013][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.140666][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.147792][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.148440][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.155661][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.156296][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.163410][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.164361][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.165034][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.172096][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.172735][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.179834][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.180448][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.187562][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.188190][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.195423][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.196083][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.203145][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.203745][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.204364][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.211388][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.212031][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.219128][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.219729][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.226903][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.227566][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.234732][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.235399][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.242498][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.243088][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.256986][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.257611][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.264743][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.265409][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.272499][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.273157][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.273859][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.280907][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.281542][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.288731][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.289362][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.296731][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.297389][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.304560][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.305221][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.312315][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.312940][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.320112][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.320726][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.327841][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.328495][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.335630][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.336274][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.343314][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.343984][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.344623][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.351737][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.352370][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.359503][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.360127][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.367274][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.367912][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.375247][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.375903][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.382998][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.383702][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.390773][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.391447][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.398617][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.399264][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.406481][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.407169][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.414343][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.415043][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.422125][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.422771][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.429916][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.430552][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.437805][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.438458][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.445635][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.446315][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.453412][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.454922][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.455576][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.462619][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.463241][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.470422][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.471114][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.478272][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.478890][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.486059][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.486739][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.494005][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.494704][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.501833][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.502481][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.509722][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.510395][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.517624][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.518314][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.525483][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.526175][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.533249][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.536493][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.539848][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.547037][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.547693][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.555826][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.556489][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.563772][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.566651][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.577740][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.579247][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.586663][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.588947][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.596177][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.596838][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.603983][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.604631][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.611742][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.613261][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.619003][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.630713][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.632060][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.639887][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.640785][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.648153][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.653970][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.658232][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.667720][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.668372][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.675706][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.676934][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.684123][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.684758][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.691846][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.692548][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.699806][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.700760][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.707867][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.708495][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.715646][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.716308][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.723365][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.724031][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.724686][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.731773][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.732438][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.740161][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.740852][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.748061][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.748724][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.755858][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.756523][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.763650][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.764388][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.771512][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.772162][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.779349][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.780041][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.787250][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.787935][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.795227][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.795884][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.802980][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.803693][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.810765][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.811451][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.818599][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.819243][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.826966][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.827664][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.834776][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.835456][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.842558][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.843197][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.850361][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.850979][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.858189][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.858830][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.866375][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.876452][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.883680][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.884873][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.892020][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.892955][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.893721][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.900790][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.901465][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.912431][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.913115][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.914011][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.928969][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.929635][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.936824][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.937483][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.944633][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.945318][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.952437][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.953081][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.953742][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.960813][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.961421][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.968548][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.969187][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.976578][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.977200][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.984322][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.985031][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.992133][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.992756][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 437.999928][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.000583][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.007828][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.008476][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.015650][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.016318][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.023509][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.024181][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.024852][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.031955][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.032622][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.039834][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.040493][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.047705][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.048380][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.055597][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.056263][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.063349][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.064159][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.064872][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.071963][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.072637][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.079801][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.080473][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.087656][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.088336][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.095546][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.096209][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.103277][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.103889][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.110969][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.111591][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.118755][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.119429][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.126666][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.127353][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.134448][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.135090][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.142176][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.142794][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.149976][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.150579][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.158073][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.158754][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.165923][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.166620][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.173776][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.174396][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.181389][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.182003][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.189187][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.189814][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.196954][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.197606][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.204722][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.205400][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.212672][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.213304][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.213986][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.221041][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.221694][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.228782][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.229415][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.236537][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.237168][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.244504][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.245157][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.252323][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.253004][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.254792][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.261935][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.262604][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.269779][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.270405][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 438.274936][ T5804] Bluetooth: hci2: command tx timeout [ 438.277545][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 439.761360][ T24] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -22 [ 439.796281][ T24] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 439.834243][ T24] usb 2-1: USB disconnect, device number 8 [ 440.010307][ T7702] dvmrp1: entered allmulticast mode [ 440.075725][ T7706] pimreg: entered allmulticast mode [ 440.098360][ T7708] dvmrp1: left allmulticast mode [ 440.134738][ T7710] tun0: tun_chr_ioctl cmd 1074025675 [ 440.140385][ T7710] tun0: persist enabled [ 440.164797][ T7708] pimreg: left allmulticast mode [ 440.231606][ T7712] tun0: tun_chr_ioctl cmd 1074025675 [ 440.238215][ T7712] tun0: persist disabled [ 440.243826][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.251643][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.262487][ T7670] bridge_slave_0: entered allmulticast mode [ 440.280792][ T7670] bridge_slave_0: entered promiscuous mode [ 440.341252][ T5804] Bluetooth: hci2: command tx timeout [ 440.370734][ T7670] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.378937][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.387358][ T7670] bridge_slave_1: entered allmulticast mode [ 440.397217][ T7670] bridge_slave_1: entered promiscuous mode [ 440.702129][ T7670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.790115][ T7670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.983773][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 440.984835][ T7670] team0: Port device team_slave_0 added [ 441.091822][ T7670] team0: Port device team_slave_1 added [ 441.157689][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 441.209492][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.221914][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.232887][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 441.246334][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 441.255962][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.345558][ T9] usb 7-1: config 0 descriptor?? [ 441.401847][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.409301][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.435889][ T7670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.501636][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.509294][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.536220][ T7670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.979589][ T7670] hsr_slave_0: entered promiscuous mode [ 441.990222][ T7670] hsr_slave_1: entered promiscuous mode [ 441.999661][ T7670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.007652][ T7670] Cannot create hsr debugfs directory [ 442.040215][ T7724] loop1: detected capacity change from 0 to 4096 [ 442.085455][ T7724] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 442.159875][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0006/input/input14 [ 442.247025][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0006/input/input15 [ 442.361355][ T9] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 442.421710][ T5804] Bluetooth: hci2: command tx timeout [ 442.488548][ T7724] ntfs3(loop1): ino=1b, "file0" ntfs_readdir [ 442.609319][ T7733] @: renamed from vlan0 (while UP) [ 442.615897][ T24] usb 7-1: USB disconnect, device number 2 [ 442.889230][ T5875] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 442.962816][ T5875] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.238202][ T5859] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 443.525564][ T7670] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 443.542008][ T5859] usb 6-1: config 0 has no interfaces? [ 443.558769][ T5859] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 443.568667][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.577134][ T5859] usb 6-1: Product: syz [ 443.581528][ T5859] usb 6-1: Manufacturer: syz [ 443.586485][ T5859] usb 6-1: SerialNumber: syz [ 443.625160][ T7670] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 443.639812][ T5859] usb 6-1: config 0 descriptor?? [ 443.674953][ T7670] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 443.756284][ T7670] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 443.906355][ T5859] usb 6-1: USB disconnect, device number 4 [ 444.797966][ T7670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.009469][ T7670] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.096084][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.103846][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.194518][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.202073][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.235394][ T7751] loop6: detected capacity change from 0 to 2048 [ 445.309000][ T7751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.802213][ T7761] loop5: detected capacity change from 0 to 512 [ 445.873346][ T7761] EXT4-fs: Ignoring removed i_version option [ 445.907585][ T7761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 446.004064][ T7761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.018091][ T7761] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.128523][ T7761] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.657: corrupted inode contents [ 446.181082][ T7761] EXT4-fs (loop5): Remounting filesystem read-only [ 446.350763][ T7773] loop4: detected capacity change from 0 to 64 [ 446.368501][ T7123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.991187][ T7670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.957303][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 448.965995][ T7796] loop5: detected capacity change from 0 to 8192 [ 449.088336][ T7796] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.244672][ T7670] veth0_vlan: entered promiscuous mode [ 449.265803][ T7805] loop8: detected capacity change from 0 to 7 [ 449.316552][ T7805] Dev loop8: unable to read RDB block 7 [ 449.322717][ T7805] loop8: unable to read partition table [ 449.329562][ T7670] veth1_vlan: entered promiscuous mode [ 449.394543][ T7805] loop8: partition table beyond EOD, truncated [ 449.401368][ T7805] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 449.718011][ T7670] veth0_macvtap: entered promiscuous mode [ 449.778657][ T7670] veth1_macvtap: entered promiscuous mode [ 450.027093][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.088707][ T7809] loop1: detected capacity change from 0 to 128 [ 450.133280][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.156600][ T7809] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 450.203065][ T7670] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.213055][ T7670] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.222552][ T7670] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.231790][ T7670] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.304126][ T30] audit: type=1804 audit(1749927578.122:104): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.674" name="/newroot/152/file2/file0" dev="loop1" ino=1048628 res=1 errno=0 [ 450.860274][ T4059] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 451.045555][ T7815] Bluetooth: MGMT ver 1.23 [ 452.455310][ T11] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 452.644350][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 452.781931][ T11] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 452.790544][ T11] usb 6-1: config 0 has no interface number 0 [ 452.878837][ T11] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 452.888960][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.898267][ T11] usb 6-1: Product: syz [ 452.902704][ T11] usb 6-1: Manufacturer: syz [ 452.908482][ T11] usb 6-1: SerialNumber: syz [ 453.106255][ T11] usb 6-1: config 0 descriptor?? [ 453.158618][ T11] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 453.385227][ T11] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 453.446064][ T11] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 453.719954][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 453.729623][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 453.756445][ T7849] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.765983][ T7849] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.775359][ T7849] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.784629][ T7849] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.815737][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 453.821646][ T5875] usb 6-1: USB disconnect, device number 5 [ 453.877766][ T5875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 453.956578][ T5875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 453.969791][ T5875] quatech2 6-1:0.51: device disconnected [ 454.396718][ T7857] loop1: detected capacity change from 0 to 256 [ 455.379996][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.388373][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.457772][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.466410][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.905918][ T7874] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.620'. [ 456.893965][ T11] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 457.102026][ T11] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 457.110886][ T11] usb 2-1: config 0 has no interface number 0 [ 457.164522][ T11] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 457.174354][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.182665][ T11] usb 2-1: Product: syz [ 457.187299][ T11] usb 2-1: Manufacturer: syz [ 457.192183][ T11] usb 2-1: SerialNumber: syz [ 457.251384][ T11] usb 2-1: config 0 descriptor?? [ 457.284839][ T11] hub 2-1:0.132: bad descriptor, ignoring hub [ 457.291541][ T11] hub 2-1:0.132: probe with driver hub failed with error -5 [ 457.308426][ T11] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input18 [ 457.526860][ T11] usb 2-1: USB disconnect, device number 9 [ 458.013316][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.708'. [ 458.415482][ T5875] IPVS: starting estimator thread 0... [ 458.422370][ T7904] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 458.524317][ T7907] IPVS: using max 192 ests per chain, 9600 per kthread [ 459.250486][ T7919] loop1: detected capacity change from 0 to 512 [ 459.288068][ T7919] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 459.409511][ T7919] EXT4-fs (loop1): 1 truncate cleaned up [ 459.418297][ T7919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.523866][ T5875] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 459.747688][ T5875] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 459.756322][ T5875] usb 6-1: config 0 has no interface number 0 [ 459.812812][ T5875] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 459.822335][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.830833][ T5875] usb 6-1: Product: syz [ 459.835399][ T5875] usb 6-1: Manufacturer: syz [ 459.840264][ T5875] usb 6-1: SerialNumber: syz [ 459.951450][ T5875] usb 6-1: config 0 descriptor?? [ 459.959581][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.878794][ T5875] asix 6-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 461.095808][ T11] usb 6-1: USB disconnect, device number 6 [ 461.546346][ T7949] io-wq is not configured for unbound workers [ 461.909550][ T7954] loop4: detected capacity change from 0 to 8 [ 462.221524][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.733'. [ 463.444378][ T5875] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 463.635370][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 463.671186][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.685258][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.697279][ T5875] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 463.706776][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.821529][ T5875] usb 7-1: config 0 descriptor?? [ 464.339246][ T5875] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 464.560295][ T9] usb 7-1: USB disconnect, device number 3 [ 465.002154][ T7990] netlink: 428 bytes leftover after parsing attributes in process `syz.1.747'. [ 465.011819][ T7990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.747'. [ 468.061086][ T8030] syzkaller1: entered promiscuous mode [ 468.067586][ T8030] syzkaller1: entered allmulticast mode [ 469.560966][ T30] audit: type=1326 audit(1749927597.382:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.583875][ T30] audit: type=1326 audit(1749927597.382:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.773807][ T30] audit: type=1326 audit(1749927597.432:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.796734][ T30] audit: type=1326 audit(1749927597.432:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.819272][ T30] audit: type=1326 audit(1749927597.432:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.846714][ T30] audit: type=1326 audit(1749927597.432:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.871217][ T30] audit: type=1326 audit(1749927597.432:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.893804][ T30] audit: type=1326 audit(1749927597.472:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.916360][ T30] audit: type=1326 audit(1749927597.472:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 469.938908][ T30] audit: type=1326 audit(1749927597.482:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.6.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 470.404722][ T8056] capability: warning: `syz.1.775' uses deprecated v2 capabilities in a way that may be insecure [ 471.592354][ T8074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.782'. [ 471.726533][ T8073] loop5: detected capacity change from 0 to 2048 [ 471.828012][ T8073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.161379][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.789'. [ 473.255870][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.789'. [ 473.614845][ T8097] loop4: detected capacity change from 0 to 512 [ 473.656445][ T8097] EXT4-fs: Ignoring removed nobh option [ 473.765731][ T8097] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.791: iget: bad i_size value: 38620345925642 [ 473.795131][ T8097] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.791: couldn't read orphan inode 15 (err -117) [ 473.866994][ T8097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.467522][ T5798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.834857][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.985152][ T8116] batadv_slave_1: entered promiscuous mode [ 475.055047][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.116202][ T8117] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 475.127029][ T9] IPVS: starting estimator thread 0... [ 475.172962][ T8114] batadv_slave_1: left promiscuous mode [ 475.224101][ T8122] IPVS: using max 192 ests per chain, 9600 per kthread [ 475.280731][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.321102][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.328754][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.547651][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.911518][ T58] bridge_slave_1: left allmulticast mode [ 475.917864][ T58] bridge_slave_1: left promiscuous mode [ 475.924956][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.954084][ T58] bridge_slave_0: left allmulticast mode [ 475.960042][ T58] bridge_slave_0: left promiscuous mode [ 475.966938][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.488812][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.515146][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.540426][ T58] bond0 (unregistering): Released all slaves [ 477.121740][ T58] hsr_slave_0: left promiscuous mode [ 477.154174][ T58] hsr_slave_1: left promiscuous mode [ 477.162833][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.171623][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.222288][ T8134] loop1: detected capacity change from 0 to 64 [ 477.241823][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.250019][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.297438][ T8134] hfs: unable to locate alternate MDB [ 477.303110][ T8134] hfs: continuing without an alternate MDB [ 477.315581][ T8136] 9pnet_fd: Insufficient options for proto=fd [ 477.464367][ T58] veth1_macvtap: left promiscuous mode [ 477.470174][ T58] veth0_macvtap: left promiscuous mode [ 477.476455][ T58] veth1_vlan: left promiscuous mode [ 477.482096][ T58] veth0_vlan: left promiscuous mode [ 478.508435][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.528120][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.639628][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.774017][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.786401][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.899633][ T58] team0 (unregistering): Port device team_slave_1 removed [ 478.927860][ T58] team0 (unregistering): Port device team_slave_0 removed [ 479.915469][ T58] IPVS: stop unused estimator thread 0... [ 480.091668][ T8164] loop4: detected capacity change from 0 to 512 [ 480.239483][ T8166] loop5: detected capacity change from 0 to 512 [ 480.313186][ T8166] EXT4-fs: Ignoring removed bh option [ 480.364779][ T8166] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 480.472490][ T8166] EXT4-fs (loop5): 1 truncate cleaned up [ 480.481059][ T8166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.647745][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 480.894361][ T5804] Bluetooth: hci4: command tx timeout [ 481.080878][ T7123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.917508][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.821'. [ 482.002979][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 482.170720][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.178916][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.189380][ T8149] bridge_slave_0: entered allmulticast mode [ 482.199473][ T8149] bridge_slave_0: entered promiscuous mode [ 482.236106][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.244534][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.252389][ T8149] bridge_slave_1: entered allmulticast mode [ 482.262625][ T8149] bridge_slave_1: entered promiscuous mode [ 482.290565][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.302059][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.312244][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.325873][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.339537][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.431382][ T9] usb 2-1: config 0 descriptor?? [ 482.598223][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.650092][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.974271][ T5804] Bluetooth: hci4: command tx timeout [ 483.101846][ T8149] team0: Port device team_slave_0 added [ 483.124843][ T8149] team0: Port device team_slave_1 added [ 483.341640][ T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 483.358960][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.366612][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.391156][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 483.393574][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.485770][ T9] usb 2-1: USB disconnect, device number 10 [ 483.607725][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.615528][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.642212][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.091267][ T8149] hsr_slave_0: entered promiscuous mode [ 484.102277][ T8149] hsr_slave_1: entered promiscuous mode [ 484.111748][ T8149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.119903][ T8149] Cannot create hsr debugfs directory [ 485.054397][ T5804] Bluetooth: hci4: command tx timeout [ 485.558679][ T8216] loop5: detected capacity change from 0 to 256 [ 485.632968][ T8210] loop7: detected capacity change from 0 to 40427 [ 485.649059][ T8210] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 485.657339][ T8210] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 485.724325][ T8210] F2FS-fs (loop7): invalid crc value [ 485.730458][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 485.730542][ T30] audit: type=1800 audit(1749927613.552:117): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.831" name="file2" dev="loop5" ino=1048633 res=0 errno=0 [ 486.220644][ T8210] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 486.233758][ T8210] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 486.843674][ T8228] loop4: detected capacity change from 0 to 512 [ 487.001433][ T8228] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.134659][ T5804] Bluetooth: hci4: command tx timeout [ 487.283818][ T8228] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 487.295082][ T8228] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 487.416861][ T8149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 487.501666][ T8149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.561468][ T8149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.636289][ T8149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.713683][ T5798] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 488.428734][ T11] IPVS: starting estimator thread 0... [ 488.436217][ T8242] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.536523][ T8244] IPVS: using max 192 ests per chain, 9600 per kthread [ 489.030221][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.067601][ T8251] loop4: detected capacity change from 0 to 512 [ 489.204880][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.205109][ T8251] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.843: bad orphan inode 13 [ 489.289486][ T3846] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.297374][ T3846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.364905][ T8251] ext4_test_bit(bit=12, block=4) = 1 [ 489.370517][ T8251] is_bad_inode(inode)=0 [ 489.375664][ T8251] NEXT_ORPHAN(inode)=0 [ 489.379966][ T8251] max_ino=32 [ 489.383584][ T8251] i_nlink=1 [ 489.389304][ T8251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.426318][ T3846] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.434030][ T3846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.574691][ T8251] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.843: Unrecognised inode hash code 20 [ 489.586714][ T8251] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.843: Corrupt directory, running e2fsck is recommended [ 489.681127][ T8251] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.843: Unrecognised inode hash code 20 [ 489.693146][ T8251] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.843: Corrupt directory, running e2fsck is recommended [ 490.168930][ T5798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.337361][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.7.850'. [ 491.601133][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.041233][ T8149] veth0_vlan: entered promiscuous mode [ 494.143765][ T8149] veth1_vlan: entered promiscuous mode [ 494.380181][ T8303] loop7: detected capacity change from 0 to 256 [ 494.462408][ T8149] veth0_macvtap: entered promiscuous mode [ 494.561925][ T8149] veth1_macvtap: entered promiscuous mode [ 494.784008][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.841045][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.886780][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 494.965152][ T8149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.975756][ T8149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.985153][ T8149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.994538][ T8149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.942852][ T8332] trusted_key: syz.7.872 sent an empty control message without MSG_MORE. [ 497.541292][ T8341] loop7: detected capacity change from 0 to 64 [ 498.209174][ T8349] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 498.339502][ T8353] loop4: detected capacity change from 0 to 8 [ 498.444761][ T8353] cramfs: Unknown parameter '0xffffffffffffffff' [ 499.543004][ T3846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.551530][ T3846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.644571][ T5875] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 499.672964][ T3846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.681524][ T3846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.776437][ T8375] netlink: 'syz.7.885': attribute type 4 has an invalid length. [ 499.883663][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 499.908505][ T5875] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.919395][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.931569][ T5875] usb 5-1: config 0 has no interface number 0 [ 500.010290][ T5875] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 500.019987][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.028473][ T5875] usb 5-1: Product: syz [ 500.032908][ T5875] usb 5-1: Manufacturer: syz [ 500.038138][ T5875] usb 5-1: SerialNumber: syz [ 500.062278][ T8376] loop1: detected capacity change from 0 to 4096 [ 500.125033][ T5875] usb 5-1: config 0 descriptor?? [ 500.176126][ T5875] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.189266][ T8376] NILFS (loop1): invalid segment: Checksum error in segment payload [ 500.199676][ T8376] NILFS (loop1): trying rollback from an earlier position [ 500.370325][ T8377] loop5: detected capacity change from 0 to 4096 [ 500.392617][ T5875] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 500.400282][ T8376] NILFS (loop1): recovery complete [ 500.426442][ T8378] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.478231][ T5875] usb 5-1: USB disconnect, device number 5 [ 500.596231][ T4235] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.728099][ T4235] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.860662][ T4235] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.948705][ T30] audit: type=1800 audit(1749927628.762:118): pid=8377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.887" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 501.086819][ T30] audit: type=1800 audit(1749927628.902:119): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.887" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 501.087171][ T4235] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.194383][ T5862] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 501.413845][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.425444][ T5862] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 501.435000][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.542473][ T5862] usb 8-1: config 0 descriptor?? [ 501.563032][ T4235] bridge_slave_1: left allmulticast mode [ 501.569363][ T4235] bridge_slave_1: left promiscuous mode [ 501.576408][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.609814][ T4235] bridge_slave_0: left allmulticast mode [ 501.616497][ T4235] bridge_slave_0: left promiscuous mode [ 501.623147][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.921703][ T5862] usbhid 8-1:0.0: can't add hid device: -71 [ 501.928658][ T5862] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 502.008661][ T5862] usb 8-1: USB disconnect, device number 2 [ 502.173056][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.200673][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.232834][ T4235] bond0 (unregistering): Released all slaves [ 502.767460][ T4235] hsr_slave_0: left promiscuous mode [ 502.783049][ T4235] hsr_slave_1: left promiscuous mode [ 502.791405][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.799311][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.810400][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.827032][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.856197][ T4235] veth1_macvtap: left promiscuous mode [ 502.861976][ T4235] veth0_macvtap: left promiscuous mode [ 502.869978][ T4235] veth1_vlan: left promiscuous mode [ 502.875734][ T4235] veth0_vlan: left promiscuous mode [ 503.611465][ T4235] team0 (unregistering): Port device team_slave_1 removed [ 503.754590][ T4235] team0 (unregistering): Port device team_slave_0 removed [ 504.595541][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.606811][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.626405][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.642840][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.661153][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 504.714403][ T8404] loop7: detected capacity change from 0 to 256 [ 504.796686][ T5862] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 505.012795][ T30] audit: type=1800 audit(1749927632.812:120): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.896" name="file1" dev="loop7" ino=1048639 res=0 errno=0 [ 505.133731][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 505.148948][ T5862] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 505.158057][ T5862] usb 6-1: config 0 has no interface number 0 [ 505.164540][ T5862] usb 6-1: config 0 interface 12 has no altsetting 0 [ 505.203571][ T5862] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 505.213171][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.222309][ T5862] usb 6-1: Product: syz [ 505.228971][ T5862] usb 6-1: Manufacturer: syz [ 505.233981][ T5862] usb 6-1: SerialNumber: syz [ 505.261818][ T5862] usb 6-1: config 0 descriptor?? [ 505.706787][ T8399] chnl_net:caif_netlink_parms(): no params data found [ 506.606265][ T5862] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 506.617745][ T5862] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 506.625806][ T5862] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 506.634217][ T5862] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 506.702866][ T5862] usb 6-1: USB disconnect, device number 7 [ 506.840402][ T5817] Bluetooth: hci4: command tx timeout [ 506.893079][ T8415] loop7: detected capacity change from 0 to 4096 [ 507.026998][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.034942][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.042758][ T8399] bridge_slave_0: entered allmulticast mode [ 507.052739][ T8399] bridge_slave_0: entered promiscuous mode [ 507.088782][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.097526][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.105555][ T8399] bridge_slave_1: entered allmulticast mode [ 507.115519][ T8399] bridge_slave_1: entered promiscuous mode [ 507.145979][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 507.478081][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.571102][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.900940][ T8399] team0: Port device team_slave_0 added [ 507.970095][ T8399] team0: Port device team_slave_1 added [ 508.093752][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 508.152578][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.160739][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.187271][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.280758][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.288621][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.315375][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.625786][ T8442] batman_adv: batadv0: Adding interface: ipvlan2 [ 508.632508][ T8442] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.665112][ T8442] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 508.896575][ T5804] Bluetooth: hci4: command tx timeout [ 508.930789][ T8399] hsr_slave_0: entered promiscuous mode [ 508.941673][ T8399] hsr_slave_1: entered promiscuous mode [ 508.951368][ T8399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.963908][ T8399] Cannot create hsr debugfs directory [ 509.678349][ T5862] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 509.843101][ T5862] usb 6-1: config 0 has no interfaces? [ 509.849384][ T5862] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.861110][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.909590][ T5862] usb 6-1: config 0 descriptor?? [ 510.093868][ T5875] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 510.374409][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.384816][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.408193][ T5862] usb 6-1: USB disconnect, device number 8 [ 510.422123][ T5875] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 510.431674][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.466397][ T5875] usb 8-1: config 0 descriptor?? [ 510.525460][ T8399] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 510.600563][ T8399] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 510.675443][ T8399] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 510.736397][ T5875] kaweth 8-1:0.0: Firmware present in device. [ 510.764664][ T8399] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 510.958306][ T5875] kaweth 8-1:0.0: Statistics collection: 0 [ 510.966496][ T5875] kaweth 8-1:0.0: Multicast filter limit: 0 [ 510.972667][ T5875] kaweth 8-1:0.0: MTU: 0 [ 510.974258][ T5804] Bluetooth: hci4: command tx timeout [ 510.978112][ T5875] kaweth 8-1:0.0: Read MAC address 00:00:00:00:00:00 [ 511.580403][ T5875] kaweth 8-1:0.0: kaweth interface created at eth9 [ 511.697288][ T8467] VFS: Can't find a romfs filesystem on dev nullb0. [ 511.697288][ T8467] [ 511.855014][ T5875] usb 8-1: USB disconnect, device number 3 [ 512.035732][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.159646][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.218250][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.226282][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.328882][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.336839][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.912327][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.922'. [ 513.064073][ T5804] Bluetooth: hci4: command tx timeout [ 513.522284][ T8481] loop1: detected capacity change from 0 to 512 [ 513.705637][ T8481] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.925: bad orphan inode 13 [ 513.774418][ T8481] ext4_test_bit(bit=12, block=4) = 1 [ 513.780006][ T8481] is_bad_inode(inode)=0 [ 513.784705][ T8481] NEXT_ORPHAN(inode)=0 [ 513.789004][ T8481] max_ino=32 [ 513.792409][ T8481] i_nlink=1 [ 513.799021][ T8481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.930052][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 514.003738][ T8481] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.925: Unrecognised inode hash code 20 [ 514.015761][ T8481] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.925: Corrupt directory, running e2fsck is recommended [ 514.027056][ T8493] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.070701][ T8481] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.925: Unrecognised inode hash code 20 [ 514.088206][ T8481] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.925: Corrupt directory, running e2fsck is recommended [ 514.251043][ T8493] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.389292][ T8493] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.519389][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.525110][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.745525][ T8493] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.067374][ T8493] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.105722][ T8493] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.145357][ T8493] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.184933][ T8493] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.854546][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.864118][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.873679][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.883115][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.892701][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.902267][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.911918][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.921455][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.930996][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 517.940653][ T8572] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 518.915118][ T5875] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 519.067348][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 519.076878][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'. [ 519.105902][ T8586] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.116110][ T8586] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.124840][ T8586] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.133541][ T8586] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.197444][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 519.209122][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.219756][ T5875] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 519.229237][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.296625][ T5875] usb 5-1: config 0 descriptor?? [ 519.362835][ T8589] loop7: detected capacity change from 0 to 512 [ 519.509065][ T8589] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.938: bad orphan inode 13 [ 519.515179][ T8399] veth0_vlan: entered promiscuous mode [ 519.590423][ T8399] veth1_vlan: entered promiscuous mode [ 519.602319][ T8589] ext4_test_bit(bit=12, block=4) = 1 [ 519.613714][ T8589] is_bad_inode(inode)=0 [ 519.618156][ T8589] NEXT_ORPHAN(inode)=0 [ 519.622448][ T8589] max_ino=32 [ 519.626081][ T8589] i_nlink=1 [ 519.631761][ T8589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.800382][ T5875] elan 0003:04F3:0755.000A: failed to start in urb: -90 [ 519.834115][ T8589] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.938: Unrecognised inode hash code 20 [ 519.846473][ T8589] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.938: Corrupt directory, running e2fsck is recommended [ 519.867385][ T8399] veth0_macvtap: entered promiscuous mode [ 519.892437][ T5875] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 519.985644][ T8589] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.938: Unrecognised inode hash code 20 [ 519.997038][ T8593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.997881][ T8589] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.938: Corrupt directory, running e2fsck is recommended [ 520.013653][ T8593] bond0: (slave bond1): Enslaving as an active interface with an up link [ 520.073941][ T8399] veth1_macvtap: entered promiscuous mode [ 520.095015][ T5862] usb 5-1: USB disconnect, device number 6 [ 520.117587][ T8591] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 520.267506][ T7670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.458288][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.563308][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.633729][ T8399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.642959][ T8399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.652268][ T8399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.661383][ T8399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.944607][ T8603] lo speed is unknown, defaulting to 1000 [ 520.950867][ T8603] lo speed is unknown, defaulting to 1000 [ 520.958414][ T8603] lo speed is unknown, defaulting to 1000 [ 520.978986][ T8603] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 520.999249][ T8603] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 521.089234][ T8603] lo speed is unknown, defaulting to 1000 [ 521.098783][ T8603] lo speed is unknown, defaulting to 1000 [ 521.109308][ T8603] lo speed is unknown, defaulting to 1000 [ 521.119001][ T8603] lo speed is unknown, defaulting to 1000 [ 521.128267][ T8603] lo speed is unknown, defaulting to 1000 [ 521.138450][ T8603] lo speed is unknown, defaulting to 1000 [ 522.242762][ T4059] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.441228][ T4059] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.621829][ T4059] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.779222][ T4059] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.255837][ T4059] bridge_slave_1: left allmulticast mode [ 523.261807][ T4059] bridge_slave_1: left promiscuous mode [ 523.268565][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.299505][ T4059] bridge_slave_0: left allmulticast mode [ 523.305778][ T4059] bridge_slave_0: left promiscuous mode [ 523.312476][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.805566][ T4059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.842337][ T4059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.870624][ T4059] bond0 (unregistering): Released all slaves [ 524.388519][ T4059] hsr_slave_0: left promiscuous mode [ 524.413646][ T4059] hsr_slave_1: left promiscuous mode [ 524.422047][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.430394][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.466766][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.475074][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.538418][ T4059] veth1_macvtap: left promiscuous mode [ 524.545511][ T4059] veth0_macvtap: left promiscuous mode [ 524.551588][ T4059] veth1_vlan: left promiscuous mode [ 524.557385][ T4059] veth0_vlan: left promiscuous mode [ 525.160393][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 525.478539][ T4059] team0 (unregistering): Port device team_slave_1 removed [ 525.520564][ T4059] team0 (unregistering): Port device team_slave_0 removed [ 525.535010][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.566548][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.576521][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.590888][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.603144][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.465113][ T8639] chnl_net:caif_netlink_parms(): no params data found [ 527.784905][ T5817] Bluetooth: hci2: command tx timeout [ 528.320302][ T4059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.329068][ T4059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.627340][ T4059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.636437][ T4059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.043067][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.055068][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.063027][ T8639] bridge_slave_0: entered allmulticast mode [ 529.073154][ T8639] bridge_slave_0: entered promiscuous mode [ 529.195351][ T8639] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.203006][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.210939][ T8639] bridge_slave_1: entered allmulticast mode [ 529.221737][ T8639] bridge_slave_1: entered promiscuous mode [ 529.452324][ T4059] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.800201][ T4059] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.846668][ T8639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.854338][ T5817] Bluetooth: hci2: command tx timeout [ 529.940516][ T4059] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.013927][ T8639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.116520][ T4059] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.230822][ T8639] team0: Port device team_slave_0 added [ 530.268757][ T8639] team0: Port device team_slave_1 added [ 530.482602][ T4059] bridge_slave_1: left allmulticast mode [ 530.488785][ T4059] bridge_slave_1: left promiscuous mode [ 530.495769][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.530888][ T4059] bridge_slave_0: left allmulticast mode [ 530.537207][ T4059] bridge_slave_0: left promiscuous mode [ 530.545235][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.046493][ T4059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.095577][ T4059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.150136][ T4059] bond0 (unregistering): Released all slaves [ 531.257508][ T8639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.265019][ T8639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.291558][ T8639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.386267][ T8698] netlink: 'syz.4.971': attribute type 39 has an invalid length. [ 531.454686][ T8639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.461926][ T8639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.488711][ T8639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.920061][ T8639] hsr_slave_0: entered promiscuous mode [ 531.931012][ T8639] hsr_slave_1: entered promiscuous mode [ 531.937422][ T5817] Bluetooth: hci2: command tx timeout [ 531.940736][ T8639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.950931][ T8639] Cannot create hsr debugfs directory [ 532.094226][ T4059] hsr_slave_0: left promiscuous mode [ 532.124633][ T4059] hsr_slave_1: left promiscuous mode [ 532.133223][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.141259][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.183818][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.191757][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.209629][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.5.973'. [ 532.288829][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.300583][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.313128][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.328198][ T4059] veth1_macvtap: left promiscuous mode [ 532.334913][ T4059] veth0_macvtap: left promiscuous mode [ 532.341082][ T4059] veth1_vlan: left promiscuous mode [ 532.346965][ T4059] veth0_vlan: left promiscuous mode [ 532.357134][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.5.973'. [ 532.376337][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 532.412848][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.425650][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 533.116183][ T4059] team0 (unregistering): Port device team_slave_1 removed [ 533.162790][ T4059] team0 (unregistering): Port device team_slave_0 removed [ 534.014306][ T5804] Bluetooth: hci2: command tx timeout [ 534.577757][ T5804] Bluetooth: hci4: command tx timeout [ 535.021263][ T8704] chnl_net:caif_netlink_parms(): no params data found [ 535.195974][ T8728] loop1: detected capacity change from 0 to 256 [ 535.333672][ T8728] FAT-fs (loop1): Directory bread(block 64) failed [ 535.340641][ T8728] FAT-fs (loop1): Directory bread(block 65) failed [ 535.348110][ T8728] FAT-fs (loop1): Directory bread(block 66) failed [ 535.355200][ T8728] FAT-fs (loop1): Directory bread(block 67) failed [ 535.362241][ T8728] FAT-fs (loop1): Directory bread(block 68) failed [ 535.369255][ T8728] FAT-fs (loop1): Directory bread(block 69) failed [ 535.376573][ T8728] FAT-fs (loop1): Directory bread(block 70) failed [ 535.383538][ T8728] FAT-fs (loop1): Directory bread(block 71) failed [ 535.390591][ T8728] FAT-fs (loop1): Directory bread(block 72) failed [ 535.397936][ T8728] FAT-fs (loop1): Directory bread(block 73) failed [ 535.472461][ T8639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 535.514281][ T8639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 535.541991][ T8639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 535.592717][ T8639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 536.336380][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.344381][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.352253][ T8704] bridge_slave_0: entered allmulticast mode [ 536.362108][ T8704] bridge_slave_0: entered promiscuous mode [ 536.424434][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'. [ 536.489353][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.497978][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.506111][ T8704] bridge_slave_1: entered allmulticast mode [ 536.515977][ T8704] bridge_slave_1: entered promiscuous mode [ 536.654582][ T5804] Bluetooth: hci4: command tx timeout [ 536.702533][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.764263][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.771130][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.851083][ T5859] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 536.888894][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.056835][ T5859] usb 2-1: config 0 has no interfaces? [ 537.062708][ T5859] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 537.072322][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.126154][ T5859] usb 2-1: config 0 descriptor?? [ 537.156155][ T8704] team0: Port device team_slave_0 added [ 537.190469][ T8704] team0: Port device team_slave_1 added [ 537.360058][ T5859] usb 2-1: USB disconnect, device number 11 [ 537.462367][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.466704][ T8745] IPVS: persistence engine module ip_vs_pe_ not found [ 537.471301][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.504171][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.539316][ T8639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.655576][ T8639] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.688630][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.696398][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.723465][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.769098][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.776950][ T8547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.861217][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.869131][ T8547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.944440][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 538.134068][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 538.182950][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.194697][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.200820][ T8704] hsr_slave_0: entered promiscuous mode [ 538.205329][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 538.216319][ T8704] hsr_slave_1: entered promiscuous mode [ 538.219777][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.229213][ T8704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.241805][ T8704] Cannot create hsr debugfs directory [ 538.467896][ T24] usb 6-1: config 0 descriptor?? [ 538.489433][ T24] hub 6-1:0.0: USB hub found [ 538.723032][ T24] hub 6-1:0.0: 1 port detected [ 538.735488][ T5804] Bluetooth: hci4: command tx timeout [ 539.362298][ T24] hub 6-1:0.0: activate --> -90 [ 539.576394][ T5859] usb 6-1: USB disconnect, device number 9 [ 539.582974][ T24] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 539.980123][ T8639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.210724][ T8704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 540.265681][ T5862] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 540.306422][ T8704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 540.397833][ T8704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 540.485969][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.500643][ T8704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 540.517724][ T5862] usb 5-1: not running at top speed; connect to a high speed hub [ 540.556506][ T5862] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 540.591487][ T5862] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 540.603028][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.612234][ T5862] usb 5-1: Product: syz [ 540.616821][ T5862] usb 5-1: Manufacturer: syz [ 540.621674][ T5862] usb 5-1: SerialNumber: syz [ 540.814604][ T5804] Bluetooth: hci4: command tx timeout [ 540.946250][ T5862] usbsevseg 5-1:129.0: USB 7 Segment device now attached [ 540.989243][ T5862] usb 5-1: USB disconnect, device number 7 [ 540.996756][ T5862] usbsevseg 5-1:129.0: USB 7 Segment now disconnected [ 541.328702][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.996'. [ 541.651884][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.872189][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.989754][ T3927] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.997461][ T3927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.153477][ T3927] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.161125][ T3927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.286736][ T8639] veth0_vlan: entered promiscuous mode [ 542.423234][ T8639] veth1_vlan: entered promiscuous mode [ 542.540595][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.998'. [ 542.844677][ T8639] veth0_macvtap: entered promiscuous mode [ 542.964273][ T8639] veth1_macvtap: entered promiscuous mode [ 543.197250][ T8639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.319317][ T8639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.411561][ T8639] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.421960][ T8639] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.431354][ T8639] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.440498][ T8639] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.494592][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 543.650302][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1003'. [ 544.630504][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.738988][ T3927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.749792][ T3927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.964286][ T3927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.977229][ T3927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.095226][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 545.167687][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 545.219489][ T3927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.230439][ T3927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.272315][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 545.427363][ T3927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.438351][ T3927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.515037][ T30] audit: type=1326 audit(1749927673.322:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 545.689611][ T30] audit: type=1326 audit(1749927673.502:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa6558 code=0x7fc00000 [ 545.941074][ T3927] bridge_slave_1: left allmulticast mode [ 545.947204][ T3927] bridge_slave_1: left promiscuous mode [ 545.954399][ T3927] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.974103][ T3927] bridge_slave_0: left allmulticast mode [ 545.980431][ T3927] bridge_slave_0: left promiscuous mode [ 545.987354][ T3927] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.550263][ T3927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.606076][ T3927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.641629][ T3927] bond0 (unregistering): (slave bond1): Releasing backup interface [ 546.664864][ T3927] bond0 (unregistering): Released all slaves [ 546.692016][ T3927] bond1 (unregistering): Released all slaves [ 547.164907][ T3927] hsr_slave_0: left promiscuous mode [ 547.174106][ T3927] hsr_slave_1: left promiscuous mode [ 547.182171][ T3927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.191945][ T3927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.237335][ T3927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.247212][ T3927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.294864][ T3927] veth1_macvtap: left promiscuous mode [ 547.300726][ T3927] veth0_macvtap: left promiscuous mode [ 547.306982][ T3927] veth1_vlan: left promiscuous mode [ 547.312600][ T3927] veth0_vlan: left promiscuous mode [ 548.099354][ T3927] team0 (unregistering): Port device team_slave_1 removed [ 548.195978][ T3927] team0 (unregistering): Port device team_slave_0 removed [ 548.984890][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 549.037409][ T8704] veth0_vlan: entered promiscuous mode [ 549.051785][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.063860][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.099342][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.134913][ T3927] IPVS: stop unused estimator thread 0... [ 549.145670][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.211267][ T8704] veth1_vlan: entered promiscuous mode [ 549.371329][ T8704] veth0_macvtap: entered promiscuous mode [ 549.519288][ T8704] veth1_macvtap: entered promiscuous mode [ 549.585159][ T8558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.596118][ T8558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.798707][ T8558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.809722][ T8558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.050827][ T8558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.063100][ T8558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.156456][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.250259][ T30] audit: type=1326 audit(1749927678.072:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 550.279748][ T8558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.290521][ T8558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.420528][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.513032][ T8704] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.522509][ T8704] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.533951][ T8704] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.543013][ T8704] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.950835][ T30] audit: type=1326 audit(1749927678.712:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 550.973769][ T30] audit: type=1326 audit(1749927678.712:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 550.996377][ T30] audit: type=1326 audit(1749927678.712:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 551.018810][ T30] audit: type=1326 audit(1749927678.712:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 551.041368][ T30] audit: type=1326 audit(1749927678.712:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 551.064345][ T30] audit: type=1326 audit(1749927678.712:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 551.086930][ T30] audit: type=1326 audit(1749927678.712:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 551.109325][ T8558] bridge_slave_1: left allmulticast mode [ 551.109467][ T30] audit: type=1326 audit(1749927678.712:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 551.115666][ T8558] bridge_slave_1: left promiscuous mode [ 551.137390][ T30] audit: type=1326 audit(1749927678.712:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 551.137642][ T30] audit: type=1326 audit(1749927678.712:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 551.144567][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.320992][ T5817] Bluetooth: hci1: command tx timeout [ 551.362163][ T8558] bridge_slave_0: left allmulticast mode [ 551.368330][ T8558] bridge_slave_0: left promiscuous mode [ 551.378045][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.060265][ T8558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.131213][ T8558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.178987][ T8558] bond0 (unregistering): Released all slaves [ 552.296048][ T8833] chnl_net:caif_netlink_parms(): no params data found [ 552.502733][ T8558] tipc: Disabling bearer [ 552.508943][ T8558] tipc: Left network mode [ 553.074774][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 553.074989][ T8558] hsr_slave_0: left promiscuous mode [ 553.155375][ T8558] hsr_slave_1: left promiscuous mode [ 553.165297][ T8558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.173130][ T8558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.192685][ T8558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.204443][ T8558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.235767][ T8558] veth1_macvtap: left promiscuous mode [ 553.241728][ T8558] veth0_macvtap: left promiscuous mode [ 553.248090][ T8558] veth1_vlan: left promiscuous mode [ 553.254570][ T8558] veth0_vlan: left promiscuous mode [ 553.404991][ T5817] Bluetooth: hci1: command tx timeout [ 553.957148][ T8558] team0 (unregistering): Port device team_slave_1 removed [ 553.985316][ T8558] team0 (unregistering): Port device team_slave_0 removed [ 555.400345][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.409564][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.417505][ T8833] bridge_slave_0: entered allmulticast mode [ 555.427492][ T8833] bridge_slave_0: entered promiscuous mode [ 555.478634][ T5817] Bluetooth: hci1: command tx timeout [ 555.516333][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.527708][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.536384][ T8833] bridge_slave_1: entered allmulticast mode [ 555.546300][ T8833] bridge_slave_1: entered promiscuous mode [ 555.658864][ T8551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.667179][ T8551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.788133][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.823884][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.832126][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.850941][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.147776][ T8833] team0: Port device team_slave_0 added [ 556.202254][ T8833] team0: Port device team_slave_1 added [ 556.497951][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.505675][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.532457][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.640511][ T58] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.711067][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.718914][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.745626][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.852351][ T58] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.998359][ T58] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.310025][ T58] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.497793][ T8833] hsr_slave_0: entered promiscuous mode [ 557.508354][ T8833] hsr_slave_1: entered promiscuous mode [ 557.553787][ T5817] Bluetooth: hci1: command tx timeout [ 557.798353][ T58] bridge_slave_1: left allmulticast mode [ 557.812467][ T58] bridge_slave_1: left promiscuous mode [ 557.819463][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.875796][ T58] bridge_slave_0: left allmulticast mode [ 557.881891][ T58] bridge_slave_0: left promiscuous mode [ 557.891704][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.441666][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.472371][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.497611][ T58] bond0 (unregistering): Released all slaves [ 559.079930][ T58] hsr_slave_0: left promiscuous mode [ 559.104780][ T58] hsr_slave_1: left promiscuous mode [ 559.113109][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.121490][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.260609][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.268749][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.419601][ T58] veth1_macvtap: left promiscuous mode [ 559.425896][ T58] veth0_macvtap: left promiscuous mode [ 559.431873][ T58] veth1_vlan: left promiscuous mode [ 559.437752][ T58] veth0_vlan: left promiscuous mode [ 560.110485][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.121150][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.136060][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.151093][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.163081][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 560.574238][ T58] team0 (unregistering): Port device team_slave_1 removed [ 560.715920][ T58] team0 (unregistering): Port device team_slave_0 removed [ 562.260919][ T5804] Bluetooth: hci2: command tx timeout [ 562.378576][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.386950][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.460351][ T8547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.468811][ T8547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.651163][ T8833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.677916][ T8833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.726219][ T8913] chnl_net:caif_netlink_parms(): no params data found [ 562.752524][ T8833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 562.849639][ T8833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 562.858816][ T5859] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 563.055184][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 563.082443][ T5859] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 563.092069][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.100667][ T5859] usb 5-1: Product: syz [ 563.105335][ T5859] usb 5-1: Manufacturer: syz [ 563.110217][ T5859] usb 5-1: SerialNumber: syz [ 563.143856][ T5859] usb 5-1: config 0 descriptor?? [ 563.164896][ T5859] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 563.177058][ T5859] usb 5-1: Detected FT-X [ 563.272617][ T8558] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.417788][ T5859] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 563.432664][ T8558] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.581447][ T8558] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.731755][ T8558] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.850229][ T5859] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 564.102783][ T5862] usb 5-1: USB disconnect, device number 8 [ 564.136691][ T5862] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 564.149090][ T5862] ftdi_sio 5-1:0.0: device disconnected [ 564.333751][ T5804] Bluetooth: hci2: command tx timeout [ 564.343177][ T8558] bridge_slave_1: left allmulticast mode [ 564.349377][ T8558] bridge_slave_1: left promiscuous mode [ 564.360052][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.387480][ T8558] bridge_slave_0: left allmulticast mode [ 564.394688][ T8558] bridge_slave_0: left promiscuous mode [ 564.401288][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.925797][ T8558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.955526][ T8558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.995768][ T8558] bond0 (unregistering): Released all slaves [ 565.199167][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.207050][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.216273][ T8913] bridge_slave_0: entered allmulticast mode [ 565.226054][ T8913] bridge_slave_0: entered promiscuous mode [ 565.252021][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.260240][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.268075][ T8913] bridge_slave_1: entered allmulticast mode [ 565.281652][ T8913] bridge_slave_1: entered promiscuous mode [ 565.511808][ T8913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.544285][ T8913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.703120][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.729862][ T8913] team0: Port device team_slave_0 added [ 565.748232][ T8913] team0: Port device team_slave_1 added [ 565.783158][ T8558] hsr_slave_0: left promiscuous mode [ 565.792782][ T8558] hsr_slave_1: left promiscuous mode [ 565.801093][ T8558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.809464][ T8558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.820616][ T8558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.828705][ T8558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.851657][ T8558] veth1_macvtap: left promiscuous mode [ 565.857974][ T8558] veth0_macvtap: left promiscuous mode [ 565.864175][ T8558] veth1_vlan: left promiscuous mode [ 565.869791][ T8558] veth0_vlan: left promiscuous mode [ 566.438612][ T5804] Bluetooth: hci2: command tx timeout [ 566.540770][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 566.550969][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 566.560618][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 566.575013][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 566.586795][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 566.933875][ T8558] team0 (unregistering): Port device team_slave_1 removed [ 566.969672][ T8558] team0 (unregistering): Port device team_slave_0 removed [ 567.582939][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.590599][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.618458][ T8913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.739621][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.748522][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.776067][ T8913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.803192][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.077267][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.085055][ T8558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.239745][ T8913] hsr_slave_0: entered promiscuous mode [ 568.250173][ T8913] hsr_slave_1: entered promiscuous mode [ 568.259015][ T8913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.267630][ T8913] Cannot create hsr debugfs directory [ 568.417978][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.425763][ T8558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.499132][ T5817] Bluetooth: hci2: command tx timeout [ 568.736789][ T5817] Bluetooth: hci4: command tx timeout [ 569.460977][ T8948] chnl_net:caif_netlink_parms(): no params data found [ 569.664518][ T8955] syz.5.1044 (8955) used greatest stack depth: 4360 bytes left [ 570.420683][ T8913] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 570.466735][ T8913] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 570.521016][ T8913] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 570.548989][ T8913] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 570.767213][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.776232][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.784313][ T8948] bridge_slave_0: entered allmulticast mode [ 570.794569][ T8948] bridge_slave_0: entered promiscuous mode [ 570.818262][ T5817] Bluetooth: hci4: command tx timeout [ 570.831797][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.859948][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.867717][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.875760][ T8948] bridge_slave_1: entered allmulticast mode [ 570.885949][ T8948] bridge_slave_1: entered promiscuous mode [ 571.552131][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880257fda00: rx timeout, send abort [ 571.562537][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880257fda00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 571.624634][ T8948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.772799][ T8948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.258367][ T8984] netlink: 'syz.4.1051': attribute type 3 has an invalid length. [ 572.894201][ T5817] Bluetooth: hci4: command tx timeout [ 573.616933][ T8948] team0: Port device team_slave_0 added [ 573.694672][ T8948] team0: Port device team_slave_1 added [ 573.937367][ T4059] ===================================================== [ 573.945283][ T4059] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0xfe/0x9a0 [ 573.953782][ T4059] n_tty_receive_buf_closing+0xfe/0x9a0 [ 573.959618][ T4059] n_tty_receive_buf_common+0x19d5/0x2540 [ 573.965783][ T4059] n_tty_receive_buf2+0x4c/0x60 [ 573.970891][ T4059] tty_ldisc_receive_buf+0xc6/0x2c0 [ 573.976559][ T4059] tty_port_default_receive_buf+0xd7/0x1a0 [ 573.982606][ T4059] flush_to_ldisc+0x49d/0xf00 [ 573.987583][ T4059] process_scheduled_works+0xb91/0x1d80 [ 573.993516][ T4059] worker_thread+0xedf/0x1590 [ 573.998474][ T4059] kthread+0xd5c/0xf00 [ 574.002803][ T4059] ret_from_fork+0x1e0/0x310 [ 574.007769][ T4059] ret_from_fork_asm+0x1a/0x30 [ 574.012816][ T4059] [ 574.016274][ T4059] Uninit was stored to memory at: [ 574.021716][ T4059] n_tty_receive_buf_closing+0xf7/0x9a0 [ 574.028123][ T4059] n_tty_receive_buf_common+0x19d5/0x2540 [ 574.034294][ T4059] n_tty_receive_buf2+0x4c/0x60 [ 574.039403][ T4059] tty_ldisc_receive_buf+0xc6/0x2c0 [ 574.044986][ T4059] tty_port_default_receive_buf+0xd7/0x1a0 [ 574.051051][ T4059] flush_to_ldisc+0x49d/0xf00 [ 574.056063][ T4059] process_scheduled_works+0xb91/0x1d80 [ 574.061936][ T4059] worker_thread+0xedf/0x1590 [ 574.067018][ T4059] kthread+0xd5c/0xf00 [ 574.071308][ T4059] ret_from_fork+0x1e0/0x310 [ 574.076241][ T4059] ret_from_fork_asm+0x1a/0x30 [ 574.081288][ T4059] [ 574.083812][ T4059] Uninit was created at: [ 574.088359][ T4059] __kmalloc_noprof+0x95f/0x1310 [ 574.093733][ T4059] __tty_buffer_request_room+0x3d4/0x7a0 [ 574.099617][ T4059] __tty_insert_flip_string_flags+0x157/0x6f0 [ 574.106054][ T4059] uart_insert_char+0x368/0x930 [ 574.111181][ T4059] serial8250_read_char+0x1ba/0x670 [ 574.116760][ T4059] serial8250_handle_irq+0x930/0x1110 [ 574.122419][ T4059] serial8250_default_handle_irq+0x116/0x2b0 [ 574.128727][ T4059] serial8250_interrupt+0xc8/0x400 [ 574.134174][ T4059] __handle_irq_event_percpu+0x11c/0xbf0 [ 574.140079][ T4059] handle_irq_event+0xe0/0x2a0 [ 574.145176][ T4059] handle_edge_irq+0x31c/0xc80 [ 574.150172][ T4059] __common_interrupt+0xa2/0x220 [ 574.155588][ T4059] common_interrupt+0x94/0xb0 [ 574.160527][ T4059] asm_common_interrupt+0x2b/0x40 [ 574.165884][ T4059] [ 574.168396][ T4059] CPU: 1 UID: 0 PID: 4059 Comm: kworker/u8:23 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 574.181225][ T4059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.191563][ T4059] Workqueue: events_unbound flush_to_ldisc [ 574.197682][ T4059] ===================================================== [ 574.205045][ T4059] Disabling lock debugging due to kernel taint [ 574.211372][ T4059] Kernel panic - not syncing: kmsan.panic set ... [ 574.218037][ T4059] CPU: 1 UID: 0 PID: 4059 Comm: kworker/u8:23 Tainted: G B 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 574.232209][ T4059] Tainted: [B]=BAD_PAGE [ 574.236531][ T4059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.246805][ T4059] Workqueue: events_unbound flush_to_ldisc [ 574.252930][ T4059] Call Trace: [ 574.256376][ T4059] [ 574.259447][ T4059] __dump_stack+0x26/0x30 [ 574.264029][ T4059] dump_stack_lvl+0x53/0x270 [ 574.268873][ T4059] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 574.274997][ T4059] dump_stack+0x1e/0x25 [ 574.279411][ T4059] panic+0x4bd/0xd50 [ 574.283608][ T4059] kmsan_report+0x31c/0x320 [ 574.288366][ T4059] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 574.294456][ T4059] ? __msan_warning+0x1b/0x30 [ 574.299382][ T4059] ? n_tty_receive_buf_closing+0xfe/0x9a0 [ 574.305366][ T4059] ? n_tty_receive_buf_common+0x19d5/0x2540 [ 574.311654][ T4059] ? n_tty_receive_buf2+0x4c/0x60 [ 574.316920][ T4059] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 574.322511][ T4059] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 574.328715][ T4059] ? flush_to_ldisc+0x49d/0xf00 [ 574.333795][ T4059] ? process_scheduled_works+0xb91/0x1d80 [ 574.339830][ T4059] ? worker_thread+0xedf/0x1590 [ 574.345000][ T4059] ? kthread+0xd5c/0xf00 [ 574.349482][ T4059] ? ret_from_fork+0x1e0/0x310 [ 574.354468][ T4059] ? ret_from_fork_asm+0x1a/0x30 [ 574.359658][ T4059] ? ret_from_fork_asm+0x1a/0x30 [ 574.364835][ T4059] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 574.370966][ T4059] ? __update_load_avg_cfs_rq+0xc30/0x1010 [ 574.377121][ T4059] ? update_curr_dl_se+0x1d7/0xb40 [ 574.382479][ T4059] ? kmsan_get_metadata+0xfb/0x160 [ 574.387876][ T4059] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 574.394007][ T4059] ? kmsan_get_metadata+0xfb/0x160 [ 574.399365][ T4059] ? kmsan_get_metadata+0xfb/0x160 [ 574.404745][ T4059] __msan_warning+0x1b/0x30 [ 574.409520][ T4059] n_tty_receive_buf_closing+0xfe/0x9a0 [ 574.415380][ T4059] n_tty_receive_buf_common+0x19d5/0x2540 [ 574.421483][ T4059] n_tty_receive_buf2+0x4c/0x60 [ 574.426595][ T4059] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 574.432406][ T4059] tty_ldisc_receive_buf+0xc6/0x2c0 [ 574.437862][ T4059] tty_port_default_receive_buf+0xd7/0x1a0 [ 574.443920][ T4059] flush_to_ldisc+0x49d/0xf00 [ 574.448817][ T4059] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 574.455481][ T4059] ? __pfx_flush_to_ldisc+0x10/0x10 [ 574.460883][ T4059] process_scheduled_works+0xb91/0x1d80 [ 574.466713][ T4059] worker_thread+0xedf/0x1590 [ 574.471639][ T4059] kthread+0xd5c/0xf00 [ 574.475879][ T4059] ? __pfx_worker_thread+0x10/0x10 [ 574.481257][ T4059] ? __pfx_kthread+0x10/0x10 [ 574.486030][ T4059] ret_from_fork+0x1e0/0x310 [ 574.490843][ T4059] ? __pfx_kthread+0x10/0x10 [ 574.495638][ T4059] ret_from_fork_asm+0x1a/0x30 [ 574.500668][ T4059] [ 574.504227][ T4059] Kernel Offset: disabled [ 574.508652][ T4059] Rebooting in 86400 seconds..