last executing test programs: 4.805828379s ago: executing program 0 (id=542): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f00000004c0)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000005100000005"], 0x922c3) 4.754072003s ago: executing program 3 (id=543): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x150a, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x602c2, 0x11a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000400010046) 4.593940599s ago: executing program 2 (id=545): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0xec7, &(0x7f0000001080)={0x0, 0x5852, 0x10100, 0x800000, 0x4}, &(0x7f0000000480)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2def, 0x0, 0x21, 0x0, 0x0) 3.802688456s ago: executing program 0 (id=547): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) 3.777804948s ago: executing program 2 (id=548): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x10403, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x1, 0x8b, &(0x7f0000000180)="$eJzs0aENAkEQBdB/Z0DRAD1cD5RCkOBQEBIqohVKoAMEFrOIBbMSs4S8l8wkk29+MtfnZZlFUs5JaewPx+16V3f4S2OSWZJ56v+HJPdVzYZ3fnucNp/p3RcAAPjemKm9p25lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7QKwAA//838Ccg") r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x70) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) 3.73851417s ago: executing program 1 (id=549): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) 3.704037018s ago: executing program 3 (id=551): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 3.211309744s ago: executing program 4 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c00038008000100020000003400038008000100000000002800038006000100020000000800020002"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) 3.188830595s ago: executing program 2 (id=553): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8}, {}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x323) truncate(&(0x7f0000000080)='./file2\x00', 0x2000) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 2.902822668s ago: executing program 1 (id=554): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r1, r0, 0x1, 0x8) 2.832862277s ago: executing program 3 (id=555): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1200c86, &(0x7f0000000800)=ANY=[@ANYBLOB='codepage=euc-jp,umask=00000000000000000000000,iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303430312c00c994e48a9982fd053a91804fd916d456fbdad755abc919da7043fe4b61596d3ff66315b84278e675ecc2703026dae370642e1e144299773d50b3e346959705c70300e831d95fbcaf24ffda352e6218b6df10ccfa7bd138ca492d5ccd6443fee65a368969318ca163c876cf2ea518", @ANYBLOB="1bf5159485d0e458efb3adbf487376526d73de336e0ea0e7bf1c3ad3b6e5c0bb0390e9898f80c99e756e828bee0acf737f177a22"], 0x1, 0x286, &(0x7f0000000200)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001080)=""/210, 0xd2) 2.778028985s ago: executing program 0 (id=556): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000c40)="de", 0x1}], 0x1, 0x0, 0x0, 0x4c810}, 0x0) recvmmsg$unix(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x12040, 0x0) 2.486084444s ago: executing program 4 (id=557): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.281535793s ago: executing program 2 (id=558): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x3, &(0x7f0000000280)={0x0, 0x10007fa, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 2.261974014s ago: executing program 1 (id=559): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@shortname_win95}, {@rodir}, {@rodir}, {@shortname_mixed}, {@numtail}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80a053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 2.142753331s ago: executing program 3 (id=560): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000)=';', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/108, 0xfffffffffffffe28, 0x775, 0x0, 0xfffffffffffffecb) 2.129389173s ago: executing program 0 (id=561): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x70000) 1.918966559s ago: executing program 4 (id=562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r2, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1.69394689s ago: executing program 2 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c088fcff070211750001080211000000505050505050"], 0x68}, 0x1, 0x0, 0x0, 0x200040d0}, 0x0) 1.40902251s ago: executing program 1 (id=564): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000700)={0x19980330}, &(0x7f00000006c0)={0x200000, 0x200000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 1.375164988s ago: executing program 4 (id=565): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.100913022s ago: executing program 2 (id=566): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="200d01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x3, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 896.37534ms ago: executing program 4 (id=567): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x0, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000340)={@remote, @multicast1, 0x0, "009b5b5ccda6b1783c3cd1d4401e08e7d87fbdc59ba0b8827a6230fe5fba4980", 0x1, 0xc0, 0xfffffff8, 0x5}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@remote, @multicast1, 0x1, "ffff9e1107580bff07000000b9c17c263289ee4e64f000", 0x5, 0x80000001, 0x1, 0x200006}, 0x3c) 771.482978ms ago: executing program 1 (id=568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000007eaed64d8e8408caf4d83941bc"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$sock(r0, &(0x7f0000004980)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x1, 0x9, "a16174cf41dbde3620e48d842b1007c93a9cfcb111d3ddbbf678a4d176ebc0a4df2340b688170974457ffda1be92e468a690a54f1b0cf134419fb3c7748cd3", 0x1d}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="1f247c95", 0x4}], 0x2}}], 0x1, 0x40480) 750.823854ms ago: executing program 0 (id=569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7b1c, 0xfc07}, 0x90) 641.998167ms ago: executing program 3 (id=570): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 419.748976ms ago: executing program 1 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000304040000000200000000000000", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0xba01}, 0x810) 131.059228ms ago: executing program 4 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}}, 0x2000c050) 373.396µs ago: executing program 0 (id=573): socket$inet(0x2, 0x3, 0x2) setreuid(0x0, 0xee01) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 0s ago: executing program 3 (id=574): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 195.173828][ T5774] cgroup: Unknown subsys name 'net' [ 195.309350][ T5774] cgroup: Unknown subsys name 'cpuset' [ 195.327672][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.502118][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.509077][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.183302][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 251.574793][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.584392][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.588913][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.593492][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.600474][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.610820][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.614553][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.623094][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.629067][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.643847][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.661280][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.680329][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.689483][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.701574][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.713139][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.764710][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.773834][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.790786][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.815538][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.829442][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.940401][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.957254][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.968637][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.983038][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.995435][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.119705][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 253.719195][ T5089] Bluetooth: hci0: command tx timeout [ 253.800664][ T5089] Bluetooth: hci1: command tx timeout [ 253.800805][ T5804] Bluetooth: hci2: command tx timeout [ 253.861497][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 253.883844][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 253.883859][ T5804] Bluetooth: hci3: command tx timeout [ 254.036862][ T5804] Bluetooth: hci4: command tx timeout [ 254.145319][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 254.302082][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 254.629919][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.637735][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.645508][ T5796] bridge_slave_0: entered allmulticast mode [ 254.657000][ T5796] bridge_slave_0: entered promiscuous mode [ 254.738980][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.749668][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.757525][ T5796] bridge_slave_1: entered allmulticast mode [ 254.767579][ T5796] bridge_slave_1: entered promiscuous mode [ 254.963611][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.112325][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.385144][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.392858][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.400711][ T5797] bridge_slave_0: entered allmulticast mode [ 255.410555][ T5797] bridge_slave_0: entered promiscuous mode [ 255.430276][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.437983][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.445687][ T5797] bridge_slave_1: entered allmulticast mode [ 255.455386][ T5797] bridge_slave_1: entered promiscuous mode [ 255.559144][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.567653][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.575300][ T5809] bridge_slave_0: entered allmulticast mode [ 255.584955][ T5809] bridge_slave_0: entered promiscuous mode [ 255.640697][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.648529][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.656449][ T5811] bridge_slave_0: entered allmulticast mode [ 255.667929][ T5811] bridge_slave_0: entered promiscuous mode [ 255.724211][ T5796] team0: Port device team_slave_0 added [ 255.773798][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.781587][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.790402][ T5809] bridge_slave_1: entered allmulticast mode [ 255.800267][ T5809] bridge_slave_1: entered promiscuous mode [ 255.808293][ T5804] Bluetooth: hci0: command tx timeout [ 255.814696][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.825470][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.834400][ T5811] bridge_slave_1: entered allmulticast mode [ 255.843521][ T5811] bridge_slave_1: entered promiscuous mode [ 255.861672][ T5796] team0: Port device team_slave_1 added [ 255.877129][ T5804] Bluetooth: hci2: command tx timeout [ 255.882869][ T5089] Bluetooth: hci1: command tx timeout [ 255.957115][ T5804] Bluetooth: hci3: command tx timeout [ 256.094270][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.104770][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.112807][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.120683][ T5800] bridge_slave_0: entered allmulticast mode [ 256.127771][ T5804] Bluetooth: hci4: command tx timeout [ 256.131105][ T5800] bridge_slave_0: entered promiscuous mode [ 256.191022][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.254150][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.264320][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.272172][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.280073][ T5800] bridge_slave_1: entered allmulticast mode [ 256.289860][ T5800] bridge_slave_1: entered promiscuous mode [ 256.311174][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.370588][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.382728][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.390279][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.416704][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.472741][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.554630][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.562465][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.588944][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.681906][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.752508][ T5797] team0: Port device team_slave_0 added [ 256.803695][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.861618][ T5811] team0: Port device team_slave_0 added [ 256.881384][ T5811] team0: Port device team_slave_1 added [ 256.897076][ T5797] team0: Port device team_slave_1 added [ 256.911526][ T5809] team0: Port device team_slave_0 added [ 257.079725][ T5809] team0: Port device team_slave_1 added [ 257.095692][ T5800] team0: Port device team_slave_0 added [ 257.179318][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.188208][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.215937][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.274821][ T5800] team0: Port device team_slave_1 added [ 257.354317][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.363180][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.390894][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.429334][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.436654][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.463161][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.481450][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.488833][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.515343][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.564352][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.571699][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.598396][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.622792][ T5796] hsr_slave_0: entered promiscuous mode [ 257.634062][ T5796] hsr_slave_1: entered promiscuous mode [ 257.760729][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.768177][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.795562][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.879905][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.886365][ T5804] Bluetooth: hci0: command tx timeout [ 257.887170][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.918986][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.939494][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.946981][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.974512][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.987329][ T5804] Bluetooth: hci2: command tx timeout [ 257.992975][ T5804] Bluetooth: hci1: command tx timeout [ 258.015709][ T5811] hsr_slave_0: entered promiscuous mode [ 258.026208][ T5811] hsr_slave_1: entered promiscuous mode [ 258.034980][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.043005][ T5811] Cannot create hsr debugfs directory [ 258.046264][ T5804] Bluetooth: hci3: command tx timeout [ 258.196738][ T5804] Bluetooth: hci4: command tx timeout [ 258.319318][ T5809] hsr_slave_0: entered promiscuous mode [ 258.332064][ T5809] hsr_slave_1: entered promiscuous mode [ 258.341011][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.348985][ T5809] Cannot create hsr debugfs directory [ 258.381545][ T5797] hsr_slave_0: entered promiscuous mode [ 258.391218][ T5797] hsr_slave_1: entered promiscuous mode [ 258.400199][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.408073][ T5797] Cannot create hsr debugfs directory [ 258.802854][ T5800] hsr_slave_0: entered promiscuous mode [ 258.811948][ T5800] hsr_slave_1: entered promiscuous mode [ 258.821157][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.829121][ T5800] Cannot create hsr debugfs directory [ 259.957553][ T5804] Bluetooth: hci0: command tx timeout [ 260.046820][ T5804] Bluetooth: hci1: command tx timeout [ 260.052521][ T5804] Bluetooth: hci2: command tx timeout [ 260.116524][ T5804] Bluetooth: hci3: command tx timeout [ 260.149264][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.189972][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.212182][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.235650][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.304348][ T5804] Bluetooth: hci4: command tx timeout [ 260.429552][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.472766][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.509566][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.562673][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.595813][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.618343][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.691668][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.714552][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.853087][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.965422][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.047410][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.091541][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.140605][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.192177][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.226365][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.280311][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.895277][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.097946][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.160092][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.265480][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.349910][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.420795][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.452139][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.459845][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.475501][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.483161][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.677663][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.685473][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.701723][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.709394][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.730728][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.738441][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.760488][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.768321][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.988789][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.220493][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.369282][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.377016][ T3954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.423714][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.537586][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.545341][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.798503][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.899610][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.907269][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.008965][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.016653][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.413757][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.591395][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.646920][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.022324][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.313528][ T5809] veth0_vlan: entered promiscuous mode [ 266.390327][ T5797] veth0_vlan: entered promiscuous mode [ 266.507207][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.519722][ T5809] veth1_vlan: entered promiscuous mode [ 266.604897][ T5797] veth1_vlan: entered promiscuous mode [ 266.784269][ T5811] veth0_vlan: entered promiscuous mode [ 266.953090][ T5811] veth1_vlan: entered promiscuous mode [ 266.969549][ T5809] veth0_macvtap: entered promiscuous mode [ 267.090548][ T5797] veth0_macvtap: entered promiscuous mode [ 267.134554][ T5809] veth1_macvtap: entered promiscuous mode [ 267.150615][ T5797] veth1_macvtap: entered promiscuous mode [ 267.326310][ T5800] veth0_vlan: entered promiscuous mode [ 267.440906][ T5811] veth0_macvtap: entered promiscuous mode [ 267.454324][ T5800] veth1_vlan: entered promiscuous mode [ 267.490246][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.512191][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.553084][ T5811] veth1_macvtap: entered promiscuous mode [ 267.600618][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.675065][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.748967][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.760396][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.770696][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.780144][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.805598][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.815084][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.824393][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.833709][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.932249][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.029379][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.054203][ T5800] veth0_macvtap: entered promiscuous mode [ 268.165068][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.176143][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.185209][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.194584][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.288247][ T5800] veth1_macvtap: entered promiscuous mode [ 268.584903][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.706841][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.759178][ T5796] veth0_vlan: entered promiscuous mode [ 268.818302][ T5800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.827477][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.836752][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.845792][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.917995][ T5796] veth1_vlan: entered promiscuous mode [ 269.371378][ T5796] veth0_macvtap: entered promiscuous mode [ 269.459847][ T5796] veth1_macvtap: entered promiscuous mode [ 269.682947][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.822346][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.917230][ T5796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.926429][ T5796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.935426][ T5796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.944698][ T5796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.253872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.262193][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.338501][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.347746][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.372609][ T3951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.380832][ T3951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.674228][ T1873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.684045][ T1873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.690256][ T3954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.700121][ T3954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.855233][ T1873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.864198][ T1873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.061130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.069670][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.325452][ T4114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.333903][ T4114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.391628][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 277.048776][ T1873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.057600][ T1873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.352977][ T1873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.361272][ T1873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.338564][ T5987] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7'. [ 278.726605][ T5993] loop4: detected capacity change from 0 to 256 [ 278.848614][ T5993] exfat: Deprecated parameter 'utf8' [ 279.109486][ T5993] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 279.375667][ T5996] tipc: Started in network mode [ 279.381208][ T5996] tipc: Node identity ac14140f, cluster identity 4711 [ 279.390154][ T5996] tipc: New replicast peer: 255.255.255.255 [ 279.410316][ T5996] tipc: Enabled bearer , priority 10 [ 279.434380][ T5997] loop2: detected capacity change from 0 to 256 [ 279.490449][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 279.499673][ T5998] tipc: Disabling bearer [ 280.702485][ T6007] capability: warning: `syz.1.12' uses deprecated v2 capabilities in a way that may be insecure [ 281.806781][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 282.033191][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 282.097303][ T5846] usb 3-1: config 0 has no interfaces? [ 282.237662][ T5846] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 282.247310][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.255610][ T5846] usb 3-1: Product: syz [ 282.261418][ T5846] usb 3-1: Manufacturer: syz [ 282.266782][ T5846] usb 3-1: SerialNumber: syz [ 282.374846][ T5846] usb 3-1: config 0 descriptor?? [ 282.662866][ T24] usb 3-1: USB disconnect, device number 2 [ 283.230290][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 284.973459][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.033343][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 285.503530][ T6057] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 285.989438][ T6062] loop1: detected capacity change from 0 to 1024 [ 286.183433][ T6062] hfsplus: bad catalog entry type [ 286.510648][ T6069] loop3: detected capacity change from 0 to 128 [ 286.572191][ T6069] EXT4-fs: Ignoring removed nobh option [ 286.725169][ T6069] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.833174][ T6069] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.855894][ T6076] loop1: detected capacity change from 0 to 64 [ 286.998226][ T6069] fscrypt (loop3, inode 12): Reserved bits set in encryption policy [ 287.447733][ T5809] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.973126][ T6086] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 289.236737][ T1628] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 289.611611][ T1628] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 289.611754][ T1628] usb 1-1: config 0 has no interface number 0 [ 289.642495][ T1628] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 289.642668][ T1628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.642802][ T1628] usb 1-1: Product: syz [ 289.642910][ T1628] usb 1-1: Manufacturer: syz [ 289.643016][ T1628] usb 1-1: SerialNumber: syz [ 289.650924][ T1628] usb 1-1: config 0 descriptor?? [ 290.132798][ T1628] usb 1-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 290.374258][ T1628] usb 1-1: failed to fetch extended address, random address set [ 290.374399][ T1628] usb 1-1: atusb_probe: initialization failed, error = -524 [ 290.375340][ T1628] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 290.434447][ T1628] usb 1-1: USB disconnect, device number 2 [ 290.963314][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.970291][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.595028][ T5851] IPVS: starting estimator thread 0... [ 291.696685][ T6126] IPVS: using max 240 ests per chain, 12000 per kthread [ 291.733912][ T6128] input: syz0 as /devices/virtual/input/input5 [ 291.807599][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 292.016591][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 292.047004][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 292.058528][ T24] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.075460][ T24] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 292.090594][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.097854][ T24] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 292.107302][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.318421][ T24] usb 5-1: config 0 descriptor?? [ 292.364696][ T30] audit: type=1326 audit(1748070689.757:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.533091][ T30] audit: type=1326 audit(1748070689.847:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.555503][ T30] audit: type=1326 audit(1748070689.847:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.581268][ T30] audit: type=1326 audit(1748070689.847:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.604589][ T30] audit: type=1326 audit(1748070689.897:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.626887][ T30] audit: type=1326 audit(1748070689.897:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.649171][ T30] audit: type=1326 audit(1748070689.897:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.671643][ T30] audit: type=1326 audit(1748070689.927:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.697590][ T30] audit: type=1326 audit(1748070689.927:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 292.967605][ T24] zeroplus 0003:0C12:0030.0001: item 0 1 0 9 parsing failed [ 293.017635][ T24] zeroplus 0003:0C12:0030.0001: parse failed [ 293.024491][ T24] zeroplus 0003:0C12:0030.0001: probe with driver zeroplus failed with error -22 [ 293.098236][ T5851] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 293.099845][ T30] audit: type=1800 audit(1748070690.507:11): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 293.141029][ T24] usb 5-1: USB disconnect, device number 2 [ 293.181341][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 293.345090][ T5851] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 293.354795][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.410966][ T5851] usb 3-1: config 0 descriptor?? [ 294.266691][ T6145] loop3: detected capacity change from 0 to 2048 [ 294.329261][ T5851] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.340905][ T5851] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 294.353041][ T5851] asix 3-1:0.0: probe with driver asix failed with error -71 [ 294.455889][ T6151] loop4: detected capacity change from 0 to 128 [ 294.556905][ T5851] usb 3-1: USB disconnect, device number 3 [ 294.583834][ T6145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.596781][ T6145] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.717721][ T6155] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 294.866856][ T6145] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.72: path /15/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 295.388984][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.231489][ T6169] geneve2: entered promiscuous mode [ 296.237273][ T6169] geneve2: entered allmulticast mode [ 298.058173][ T6187] loop0: detected capacity change from 0 to 2048 [ 298.102250][ T6187] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 298.244009][ T6192] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.857530][ T6202] IPVS: persistence engine module ip_vs_pe_@ not found [ 301.146964][ T6221] loop3: detected capacity change from 0 to 256 [ 301.172051][ T6221] exfat: Deprecated parameter 'utf8' [ 301.250073][ T6221] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 301.948319][ T6228] loop4: detected capacity change from 0 to 512 [ 301.959582][ T6228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.158346][ T6228] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 302.167105][ T6228] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 302.322747][ T6228] EXT4-fs (loop4): 1 truncate cleaned up [ 302.331770][ T6228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.742699][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 302.784175][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.821626][ T6240] netlink: 104 bytes leftover after parsing attributes in process `syz.0.111'. [ 302.831117][ T6240] netlink: 104 bytes leftover after parsing attributes in process `syz.0.111'. [ 303.873072][ T6252] netlink: 108 bytes leftover after parsing attributes in process `syz.0.116'. [ 303.882855][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 304.525509][ T6259] mkiss: ax0: crc mode is auto. [ 304.597594][ T6260] loop3: detected capacity change from 0 to 1024 [ 305.190550][ T14] hfsplus: b-tree write err: -5, ino 4 [ 305.971185][ T30] audit: type=1326 audit(1748070703.377:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.3.126" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf712e539 code=0x0 [ 306.033962][ T6277] loop2: detected capacity change from 0 to 512 [ 306.126465][ T6277] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.201663][ T6277] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 306.210002][ T6277] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 306.237842][ T6277] System zones: 0-1, 15-15, 18-18, 34-34 [ 306.269563][ T6277] EXT4-fs (loop2): orphan cleanup on readonly fs [ 306.277630][ T6277] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 306.287475][ T6277] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 306.308640][ T6277] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 306.362650][ T6277] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.127: bg 0: block 40: padding at end of block bitmap is not set [ 306.483857][ T6277] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 306.551633][ T6277] EXT4-fs (loop2): 1 truncate cleaned up [ 306.563540][ T6277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.790403][ T6277] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.846599][ T6277] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 306.854800][ T6277] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 307.099842][ T6289] netlink: 92 bytes leftover after parsing attributes in process `syz.1.131'. [ 307.368615][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.776483][ T5846] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 310.816894][ T5849] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 311.057949][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 311.064237][ T5846] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.076181][ T5846] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.086972][ T5846] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.096568][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.177654][ T5849] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.189070][ T5849] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.199286][ T5849] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.217637][ T5849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 311.224598][ T5849] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 311.235766][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.285371][ T6323] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.291797][ T6323] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 311.311332][ T6326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.402761][ T5846] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.411115][ T6323] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.422146][ T6323] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 311.440278][ T5849] usb 1-1: config 0 descriptor?? [ 311.609713][ T6323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.616399][ T6323] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 311.803427][ T5851] usb 2-1: USB disconnect, device number 2 [ 311.854213][ T6323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.861057][ T6323] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 311.992280][ T6323] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 311.998945][ T6323] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 312.144428][ T5849] hid-generic 0003:045E:05DA.0002: unknown main item tag 0x0 [ 312.152354][ T5849] hid-generic 0003:045E:05DA.0002: unknown main item tag 0x0 [ 312.160269][ T5849] hid-generic 0003:045E:05DA.0002: unknown main item tag 0x0 [ 312.168061][ T5849] hid-generic 0003:045E:05DA.0002: ignoring exceeding usage max [ 312.186058][ T5849] hid-generic 0003:045E:05DA.0002: unbalanced collection at end of report description [ 312.431683][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.468945][ T5849] hid-generic 0003:045E:05DA.0002: probe with driver hid-generic failed with error -22 [ 312.607371][ T5849] usb 1-1: USB disconnect, device number 3 [ 313.800374][ T6355] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 315.159820][ T6372] loop1: detected capacity change from 0 to 64 [ 315.199753][ T6372] ======================================================= [ 315.199753][ T6372] WARNING: The mand mount option has been deprecated and [ 315.199753][ T6372] and is ignored by this kernel. Remove the mand [ 315.199753][ T6372] option from the mount to silence this warning. [ 315.199753][ T6372] ======================================================= [ 315.288521][ T6374] loop2: detected capacity change from 0 to 128 [ 315.359439][ T6374] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 315.453829][ T6380] warning: `syz.4.169' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.465409][ T6374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.877713][ T5804] Bluetooth: hci0: command tx timeout [ 316.646357][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 316.904583][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.916276][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.926518][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 316.935860][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.007819][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 317.017062][ T24] usb 4-1: config 0 descriptor?? [ 317.545657][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.552964][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.560312][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.568188][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.575275][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.582539][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.589739][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.597242][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.604339][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.611621][ T24] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 317.618936][ T24] sony 0003:054C:024B.0003: report_id 0 is invalid [ 317.625744][ T24] sony 0003:054C:024B.0003: item 0 1 1 8 parsing failed [ 317.951405][ T24] sony 0003:054C:024B.0003: parse failed [ 317.959119][ T24] sony 0003:054C:024B.0003: probe with driver sony failed with error -22 [ 318.020934][ T6409] loop0: detected capacity change from 0 to 1024 [ 318.027335][ T24] usb 4-1: USB disconnect, device number 2 [ 318.245365][ T6409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.823562][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.479534][ T6430] loop4: detected capacity change from 0 to 1024 [ 319.531397][ T6433] loop0: detected capacity change from 0 to 512 [ 319.646962][ T6433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.851627][ T6433] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 209 vs 212 free clusters [ 320.124778][ T6437] loop2: detected capacity change from 0 to 2048 [ 320.322154][ T6433] syz.0.183 (6433) used greatest stack depth: 5168 bytes left [ 320.333853][ T6437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.346970][ T6437] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.439844][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.942202][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.976766][ T6457] netlink: 'syz.2.193': attribute type 4 has an invalid length. [ 321.984962][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 322.640470][ T6464] sp0: Synchronizing with TNC [ 322.804103][ T6465] loop1: detected capacity change from 0 to 1024 [ 323.180633][ T6471] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 323.280321][ T5851] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 324.367063][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 324.803887][ T6483] syz.4.203 (6483) used greatest stack depth: 5144 bytes left [ 325.256506][ T5804] Bluetooth: hci0: command tx timeout [ 325.454793][ T6491] loop2: detected capacity change from 0 to 2048 [ 325.694656][ T6491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.904440][ T6491] EXT4-fs (loop2): shut down requested (1) [ 326.449233][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.508409][ T6538] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 328.548978][ T6538] lo: entered promiscuous mode [ 328.565101][ T6538] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.671330][ T6553] loop3: detected capacity change from 0 to 2048 [ 329.770714][ T6553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.994290][ T6553] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.226: bg 0: block 234: padding at end of block bitmap is not set [ 330.057141][ T6553] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 117 [ 330.073168][ T6553] EXT4-fs (loop3): This should not happen!! Data will be lost [ 330.073168][ T6553] [ 330.412352][ T6553] syz.3.226 (6553) used greatest stack depth: 4752 bytes left [ 330.458959][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.748490][ T6570] sg_write: process 106 (syz.4.230) changed security contexts after opening file descriptor, this is not allowed. [ 331.301807][ T6571] loop2: detected capacity change from 0 to 4096 [ 331.403399][ T6580] loop1: detected capacity change from 0 to 512 [ 331.495461][ T6580] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.235: iget: bogus i_mode (0) [ 331.530608][ T6580] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.235: couldn't read orphan inode 17 (err -117) [ 331.575617][ T6580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.718847][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 331.771122][ T6580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.235: bg 0: block 7: invalid block bitmap [ 331.827851][ T6575] loop0: detected capacity change from 0 to 4096 [ 332.143268][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.415750][ T6591] Zero length message leads to an empty skb [ 332.704045][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 333.289916][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 333.551635][ T6604] loop2: detected capacity change from 0 to 2048 [ 333.705756][ T6604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.185776][ T6617] loop3: detected capacity change from 0 to 1024 [ 334.457889][ T6623] bridge_slave_0: left allmulticast mode [ 334.464019][ T6623] bridge_slave_0: left promiscuous mode [ 334.471145][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.610287][ T6623] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 334.707641][ T62] hfsplus: b-tree write err: -5, ino 4 [ 334.871272][ T6627] loop4: detected capacity change from 0 to 1024 [ 335.037300][ T6627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.050402][ T6627] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.447886][ T6627] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 335.540365][ T6627] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 335.553573][ T6627] EXT4-fs (loop4): This should not happen!! Data will be lost [ 335.553573][ T6627] [ 335.574691][ T6627] EXT4-fs (loop4): Total free blocks count 0 [ 335.582731][ T6627] EXT4-fs (loop4): Free/Dirty block details [ 335.589239][ T6627] EXT4-fs (loop4): free_blocks=4293918720 [ 335.595379][ T6627] EXT4-fs (loop4): dirty_blocks=64 [ 335.603897][ T6627] EXT4-fs (loop4): Block reservation details [ 335.610329][ T6627] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 336.000730][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.410539][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 336.419918][ T6650] netlink: 'syz.3.260': attribute type 18 has an invalid length. [ 336.428150][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 337.316823][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 338.152094][ T6673] loop2: detected capacity change from 0 to 256 [ 338.228692][ T6673] exfat: Deprecated parameter 'utf8' [ 338.423820][ T6680] loop0: detected capacity change from 0 to 128 [ 339.305895][ T6688] process 'syz.2.275' launched './file1' with NULL argv: empty string added [ 340.189970][ T6702] raw_sendmsg: syz.1.282 forgot to set AF_INET. Fix it! [ 340.265012][ T6704] loop0: detected capacity change from 0 to 128 [ 340.299353][ T6704] EXT4-fs: Ignoring removed nobh option [ 340.338695][ T6704] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.361428][ T6704] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.650202][ T6704] EXT4-fs warning (device loop0): ext4_group_extend:1886: will only finish group (8193 blocks, 8129 new) [ 340.662331][ T6704] EXT4-fs warning (device loop0): ext4_group_extend:1891: can't read last block, resize aborted [ 341.052640][ T5811] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.199668][ T5851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 342.379658][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 342.414727][ T5851] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 342.423549][ T5851] usb 5-1: config 0 has no interface number 0 [ 342.430232][ T5851] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 342.443929][ T5851] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 342.454482][ T5851] usb 5-1: config 0 interface 126 has no altsetting 0 [ 342.566353][ T5851] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 342.576061][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.584329][ T5851] usb 5-1: Product: syz [ 342.591822][ T5851] usb 5-1: Manufacturer: syz [ 342.597368][ T5851] usb 5-1: SerialNumber: syz [ 342.631820][ T5851] usb 5-1: config 0 descriptor?? [ 342.640395][ T6727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 342.665242][ T6727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 342.811981][ T6742] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 342.820420][ T6740] loop0: detected capacity change from 0 to 1024 [ 343.168252][ T5851] ir_usb 5-1:0.126: IR Dongle converter detected [ 343.376815][ T5851] usb 5-1: IRDA class descriptor not found, device not bound [ 343.597881][ T5851] usb 5-1: USB disconnect, device number 3 [ 343.840831][ T6753] syz.1.303 uses obsolete (PF_INET,SOCK_PACKET) [ 344.395054][ T6762] ALSA: mixer_oss: invalid OSS volume ',' [ 345.970569][ T6789] loop0: detected capacity change from 0 to 64 [ 347.092999][ T6810] loop1: detected capacity change from 0 to 512 [ 347.125410][ T6809] loop4: detected capacity change from 0 to 512 [ 347.141605][ T6810] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 347.155207][ T6810] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 347.300248][ T6810] EXT4-fs (loop1): 1 truncate cleaned up [ 347.308958][ T6810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.486588][ T6809] EXT4-fs (loop4): Test dummy encryption mode enabled [ 347.493665][ T6809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 347.600080][ T6809] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.324: bad orphan inode 131083 [ 347.629717][ T6809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.088229][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.490561][ T6819] loop3: detected capacity change from 0 to 40427 [ 348.501929][ T6819] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 348.510205][ T6819] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 348.538281][ T6819] F2FS-fs (loop3): invalid crc value [ 348.582259][ T6819] F2FS-fs (loop3): invalid crc value [ 348.588112][ T6819] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 349.065438][ T6809] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 349.439351][ T6830] loop0: detected capacity change from 0 to 64 [ 349.545580][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.232701][ T6854] loop0: detected capacity change from 0 to 16 [ 352.072612][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.347'. [ 352.084941][ T6867] netlink: 52 bytes leftover after parsing attributes in process `syz.4.347'. [ 352.173406][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 352.419470][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.426389][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.811453][ T6877] syz.4.351: attempt to access beyond end of device [ 352.811453][ T6877] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 354.494227][ T6894] infiniband syz!: set active [ 354.499446][ T6894] infiniband syz!: added team_slave_0 [ 354.672245][ T6894] RDS/IB: syz!: added [ 354.676724][ T6894] smc: adding ib device syz! with port count 1 [ 354.683205][ T6894] smc: ib device syz! port 1 has pnetid [ 356.787527][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 356.975765][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 357.030765][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 357.040670][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.049065][ T24] usb 5-1: Product: syz [ 357.053480][ T24] usb 5-1: Manufacturer: syz [ 357.058863][ T24] usb 5-1: SerialNumber: syz [ 357.172211][ T24] usb 5-1: config 0 descriptor?? [ 357.310506][ T24] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 357.339286][ T5851] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 357.525521][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.540082][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.543130][ T6918] loop0: detected capacity change from 0 to 2048 [ 357.553175][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.574256][ T5851] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.586765][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.733736][ T5851] usb 2-1: config 0 descriptor?? [ 358.079020][ T24] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 358.098290][ T24] usb 5-1: USB disconnect, device number 4 [ 358.500393][ T6925] mmap: syz.3.373 (6925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 358.533800][ T6929] Bluetooth: MGMT ver 1.23 [ 358.929182][ T5851] usbhid 2-1:0.0: can't add hid device: -71 [ 358.940488][ T5851] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 359.069531][ T5851] usb 2-1: USB disconnect, device number 3 [ 359.304285][ T6935] loop4: detected capacity change from 0 to 128 [ 359.499811][ T6939] loop1: detected capacity change from 0 to 1024 [ 359.665860][ T6939] hfsplus: xattr search failed [ 359.981777][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.382'. [ 359.995428][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 360.804735][ T6957] loop4: detected capacity change from 0 to 1024 [ 360.850231][ T6957] EXT4-fs: Ignoring removed orlov option [ 360.906520][ T6959] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 360.999546][ T6957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.034696][ T6955] loop3: detected capacity change from 0 to 4096 [ 361.652854][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.111353][ T6992] loop3: detected capacity change from 0 to 65 [ 363.157913][ T6992] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 364.559252][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 364.816617][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 364.852602][ T7017] loop0: detected capacity change from 0 to 64 [ 364.999710][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 365.055173][ T24] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 365.064881][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.073401][ T24] usb 2-1: Product: syz [ 365.078008][ T24] usb 2-1: Manufacturer: syz [ 365.082944][ T24] usb 2-1: SerialNumber: syz [ 365.126361][ T24] usb 2-1: config 0 descriptor?? [ 365.144579][ T24] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 365.368276][ T24] usb 2-1: USB disconnect, device number 4 [ 365.437612][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 365.714945][ T7028] loop3: detected capacity change from 0 to 1024 [ 365.762483][ T7028] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 365.809020][ T7028] hfsplus: bad catalog entry used to create inode [ 366.186904][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 366.403611][ T7038] loop0: detected capacity change from 0 to 256 [ 366.407846][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 366.452832][ T24] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 366.461664][ T24] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 366.470795][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 366.480181][ T24] usb 4-1: config 1 has no interface number 0 [ 366.486677][ T24] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.498115][ T24] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 366.511553][ T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 366.521034][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.553662][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 366.779521][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 366.788984][ T7038] FAT-fs (loop0): Directory bread(block 64) failed [ 366.799619][ T7038] FAT-fs (loop0): Directory bread(block 65) failed [ 366.809770][ T7038] FAT-fs (loop0): Directory bread(block 66) failed [ 366.816786][ T7038] FAT-fs (loop0): Directory bread(block 67) failed [ 366.823714][ T7038] FAT-fs (loop0): Directory bread(block 68) failed [ 366.833767][ T7038] FAT-fs (loop0): Directory bread(block 69) failed [ 366.844628][ T7038] FAT-fs (loop0): Directory bread(block 70) failed [ 366.851724][ T7038] FAT-fs (loop0): Directory bread(block 71) failed [ 366.861687][ T7038] FAT-fs (loop0): Directory bread(block 72) failed [ 366.871742][ T7038] FAT-fs (loop0): Directory bread(block 73) failed [ 367.316049][ T24] usb 4-1: USB disconnect, device number 4 [ 367.324135][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 368.292324][ T7055] loop1: detected capacity change from 0 to 256 [ 368.326558][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 368.349886][ T7055] exfat: Deprecated parameter 'namecase' [ 368.423293][ T7055] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 368.576230][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 368.679346][ T7061] loop0: detected capacity change from 0 to 256 [ 368.714446][ T7060] loop3: detected capacity change from 0 to 512 [ 368.742225][ T7061] exfat: Deprecated parameter 'utf8' [ 368.751783][ T7061] exfat: Deprecated parameter 'utf8' [ 368.757756][ T7061] exfat: Deprecated parameter 'namecase' [ 368.767051][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 368.818469][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 368.827360][ T24] usb 3-1: config 0 has no interface number 0 [ 368.856700][ T7060] EXT4-fs (loop3): Test dummy encryption mode enabled [ 368.863808][ T7060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 368.896789][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 368.906433][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.914793][ T24] usb 3-1: Product: syz [ 368.919421][ T24] usb 3-1: Manufacturer: syz [ 368.924364][ T24] usb 3-1: SerialNumber: syz [ 368.973656][ T7061] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 369.012271][ T7060] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.430: bad orphan inode 131083 [ 369.048998][ T7060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.077385][ T24] usb 3-1: config 0 descriptor?? [ 369.137386][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 369.315762][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 369.378039][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 369.690790][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.729595][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 369.741482][ T24] usb 3-1: USB disconnect, device number 4 [ 369.769652][ T7070] loop4: detected capacity change from 0 to 1024 [ 369.781956][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 369.825498][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 369.842628][ T24] quatech2 3-1:0.51: device disconnected [ 369.995677][ T30] audit: type=1326 audit(1748070767.407:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.435" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70de539 code=0x0 [ 370.017445][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.017920][ T7073] netlink: 'syz.1.436': attribute type 4 has an invalid length. [ 372.147488][ T5851] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 372.341146][ T7107] netlink: 'syz.1.452': attribute type 15 has an invalid length. [ 372.372048][ T5851] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=ab.24 [ 372.384588][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.442226][ T5851] usb 4-1: config 0 descriptor?? [ 372.662784][ T5851] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 372.711126][ T5851] usb 4-1: USB disconnect, device number 5 [ 373.273924][ T7119] macsec1: entered promiscuous mode [ 373.282665][ T7119] macvlan1: entered promiscuous mode [ 373.290542][ T7119] macsec1: entered allmulticast mode [ 373.299176][ T7119] macvlan1: entered allmulticast mode [ 373.304809][ T7119] veth1_vlan: entered allmulticast mode [ 373.417187][ T7119] macvlan1: left allmulticast mode [ 373.422742][ T7119] veth1_vlan: left allmulticast mode [ 373.428487][ T7119] macvlan1: left promiscuous mode [ 373.666200][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 373.720625][ T7124] loop4: detected capacity change from 0 to 256 [ 373.866613][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 373.902530][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.914063][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.924305][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.933736][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.978570][ T7124] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 373.992266][ T7124] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 374.082431][ T24] usb 2-1: config 0 descriptor?? [ 374.134358][ T24] hub 2-1:0.0: USB hub found [ 374.348508][ T24] hub 2-1:0.0: 1 port detected [ 374.792427][ T24] usb 2-1: USB disconnect, device number 5 [ 375.047850][ T7139] binder: binder_mmap: 7137 80000000-80b36000 bad vm_flags failed -1 [ 375.999521][ T7152] Illegal XDP return value 1411234355 on prog (id 46) dev N/A, expect packet loss! [ 376.976777][ T7164] loop3: detected capacity change from 0 to 1024 [ 377.135546][ T7167] overlay: Unknown parameter 'e [ 377.135546][ T7167] string [ 377.135546][ T7167] statistic [ 377.135546][ T7167] state [ 377.135546][ T7167] realm [ 377.135546][ T7167] rateest [ 377.135546][ T7167] quota [ 377.135546][ T7167] pkttype [ 377.135546][ T7167] physdev [ 377.135546][ T7167] cgroup [ 377.135546][ T7167] cgroup [ 377.135546][ T7167] cgroup [ 377.135546][ T7167] owner [ 377.135546][ T7167] nfacct [ 377.135546][ T7167] nfacct [ 377.135546][ T7167] mac [ 377.135546][ T7167] limit [ 377.135546][ T7167] ipvs [ 377.135546][ T7167] helper [ 377.135546][ T7167] devgroup [ 377.135546][ T7167] cpu [ 377.135546][ T7167] conntrack [ 377.135546][ T7167] conntrack [ 377.135546][ T7167] conntrack [ 377.135546][ T7167] connlabel [ 377.135546][ T7167] connbytes [ 377.135546][ T7167] comment [ 377.135546][ T7167] bpf [ 377.135546][ T7167] bpf [ 377.135546][ T7167] connmark [ 377.135546][ T7167] mark [ 377.135546][ T7167] rpfilter [ 377.135546][ T7167] ah [ 377.135546][ T7167] tcpmss [ 377.135546][ T7167] socket [ 377.135546][ T7167] socket [ 377.135546][ T7167] socket [ 377.135546][ T7167] socket [ 377.135546][ T7167] sctp [ 377.135546][ T7167] recent [ 377.135546][ T7167] recent [ 377.135546][ T7167] policy [ 377.135546][ T7167] osf [ 377.135546][ T7167] multiport [ 377.135546][ T7167] length [ 377.135546][ T7167] l2tp [ 377.135546][ T7167] iprange [ 377.135546][ T7167] ipcomp [ 377.135546][ T7167] ttl [ 377.135546][ T7167] hashlimit [ 377.135546][ T7167] hashlimit [ 377.135546][ T7167] hashlimit [ 377.135546][ T7167] esp [ 377.135546][ T7167] ecn [ 377.135546][ T7167] tos [ 377.135546][ T7167] dscp [ 377.135546][ T7167] dccp [ 377.135546][ T7167] connlimit [ 377.135546][ T7167] cluster [ 377.135546][ T7167] addrtype [ 377.135546][ T7167] addrtype [ 377.135546][ T7167] set [ 377.135546][ T7167] set [ 377.135546][ T7167] set [ 377.135546][ T7167] set [ 377.135546][ T7167] set [ 377.135546][ T7167] icmp [ 377.140646][ T7164] hfsplus: bad catalog entry type [ 377.317709][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.717155][ T62] hfsplus: b-tree write err: -5, ino 4 [ 378.008051][ T7176] loop0: detected capacity change from 0 to 256 [ 378.056737][ T7177] loop2: detected capacity change from 0 to 64 [ 378.915742][ T7191] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 379.229420][ T7195] netlink: 176 bytes leftover after parsing attributes in process `syz.2.490'. [ 379.637385][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 379.886484][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.897959][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 379.908243][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.917760][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.055105][ T7198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.083176][ T7206] loop2: detected capacity change from 0 to 2048 [ 380.090240][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.214543][ T7206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.230856][ T7206] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.436411][ T24] usb 4-1: USB disconnect, device number 6 [ 380.457306][ T30] audit: type=1800 audit(1748070777.857:14): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 380.955400][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.571135][ T7223] loop2: detected capacity change from 0 to 256 [ 382.096416][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.504'. [ 382.372046][ T7236] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.785017][ T7240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.510'. [ 383.552321][ T7246] loop0: detected capacity change from 0 to 4096 [ 383.652471][ T7256] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.663243][ T7264] loop4: detected capacity change from 0 to 256 [ 384.889781][ T7264] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd137a500, utbl_chksum : 0xe619d30d) [ 385.674503][ T7279] pim6reg: entered allmulticast mode [ 385.758993][ T7278] pim6reg: left allmulticast mode [ 385.843406][ T7283] loop1: detected capacity change from 0 to 1024 [ 385.853110][ T7282] loop4: detected capacity change from 0 to 1024 [ 385.945097][ T7283] hfsplus: bad catalog entry type [ 386.194959][ T62] hfsplus: b-tree write err: -5, ino 4 [ 386.304785][ T3951] hfsplus: b-tree write err: -5, ino 4 [ 386.566378][ T7289] loop2: detected capacity change from 0 to 512 [ 386.669110][ T7289] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.531: invalid indirect mapped block 256 (level 2) [ 386.742663][ T7289] EXT4-fs (loop2): 2 truncates cleaned up [ 386.751916][ T7289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.810450][ T7296] loop0: detected capacity change from 0 to 1024 [ 387.164662][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.734108][ T7306] loop0: detected capacity change from 0 to 8 [ 388.489162][ T7316] loop3: detected capacity change from 0 to 256 [ 388.546786][ T7316] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 388.557938][ T7316] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 388.716588][ T7316] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 388.716719][ T7319] loop0: detected capacity change from 0 to 128 [ 388.746272][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 388.799370][ T7319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.493894][ T7328] loop2: detected capacity change from 0 to 64 [ 389.848118][ T7333] fuse: Invalid gid '00000000000037777777777' [ 390.110202][ T7338] loop2: detected capacity change from 0 to 256 [ 390.124890][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.552'. [ 390.129640][ T7338] exfat: Deprecated parameter 'utf8' [ 390.246836][ T7338] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 390.401562][ T7343] loop3: detected capacity change from 0 to 64 [ 390.533125][ T7343] hfs: bad catalog entry type 0 [ 391.027783][ T7348] loop1: detected capacity change from 0 to 256 [ 391.314282][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 391.568941][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 391.868375][ T7364] capability: warning: `syz.1.564' uses 32-bit capabilities (legacy support in use) [ 392.383085][ T7370] dvmrp1: entered allmulticast mode [ 392.396625][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 392.580270][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 392.613939][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 392.623863][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.674274][ T24] usb 3-1: config 0 descriptor?? [ 392.939925][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 392.973953][ T7376] ipvlan2: entered promiscuous mode [ 392.979744][ T7376] ipvlan2: entered allmulticast mode [ 392.985326][ T7376] hsr0: entered allmulticast mode [ 392.990797][ T7376] hsr_slave_0: entered allmulticast mode [ 392.996930][ T7376] hsr_slave_1: entered allmulticast mode [ 393.033197][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 393.066982][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 393.074458][ T24] usb 3-1: media controller created [ 393.156545][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.176107][ T7366] ===================================================== [ 393.183596][ T7366] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 393.191081][ T7366] _copy_to_user+0xcc/0x120 [ 393.195875][ T7366] i2cdev_ioctl_smbus+0x586/0x660 [ 393.201287][ T7366] compat_i2cdev_ioctl+0x48f/0xb40 [ 393.206842][ T7366] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 393.212712][ T7366] ia32_sys_call+0x2d07/0x42c0 [ 393.217803][ T7366] __do_fast_syscall_32+0xb0/0x110 [ 393.223182][ T7366] do_fast_syscall_32+0x38/0x80 [ 393.228560][ T7366] do_SYSENTER_32+0x1f/0x30 [ 393.233390][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.240851][ T7366] [ 393.243299][ T7366] Uninit was stored to memory at: [ 393.248749][ T7366] __i2c_smbus_xfer+0x254d/0x2f60 [ 393.254022][ T7366] i2c_smbus_xfer+0x31d/0x4d0 [ 393.259089][ T7366] i2cdev_ioctl_smbus+0x4a1/0x660 [ 393.264398][ T7366] compat_i2cdev_ioctl+0x48f/0xb40 [ 393.269971][ T7366] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 393.275766][ T7366] ia32_sys_call+0x2d07/0x42c0 [ 393.280924][ T7366] __do_fast_syscall_32+0xb0/0x110 [ 393.286495][ T7366] do_fast_syscall_32+0x38/0x80 [ 393.291598][ T7366] do_SYSENTER_32+0x1f/0x30 [ 393.296501][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.303098][ T7366] [ 393.305539][ T7366] Local variable msgbuf1.i created at: [ 393.311243][ T7366] __i2c_smbus_xfer+0x86a/0x2f60 [ 393.331868][ T7366] i2c_smbus_xfer+0x31d/0x4d0 [ 393.344506][ T7366] [ 393.347115][ T7366] Bytes 0-1 of 2 are uninitialized [ 393.352377][ T7366] Memory access of size 2 starts at ffff88812a1e7c86 [ 393.359367][ T7366] Data copied to user address 0000000080000100 [ 393.365809][ T7366] [ 393.368425][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.2.566 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(undef) [ 393.380828][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.391224][ T7366] ===================================================== [ 393.398624][ T7366] Disabling lock debugging due to kernel taint [ 393.404965][ T7366] Kernel panic - not syncing: kmsan.panic set ... [ 393.411571][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.2.566 Tainted: G B 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(undef) [ 393.425397][ T7366] Tainted: [B]=BAD_PAGE [ 393.429703][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.439963][ T7366] Call Trace: [ 393.443424][ T7366] [ 393.446505][ T7366] __dump_stack+0x26/0x30 [ 393.451096][ T7366] dump_stack_lvl+0x53/0x270 [ 393.455928][ T7366] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.462057][ T7366] dump_stack+0x1e/0x25 [ 393.466543][ T7366] panic+0x4bd/0xd50 [ 393.470782][ T7366] kmsan_report+0x29d/0x2a0 [ 393.475631][ T7366] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 393.482236][ T7366] ? kmsan_internal_check_memory+0x496/0x570 [ 393.488562][ T7366] ? kmsan_copy_to_user+0xca/0xe0 [ 393.493947][ T7366] ? _copy_to_user+0xcc/0x120 [ 393.498873][ T7366] ? i2cdev_ioctl_smbus+0x586/0x660 [ 393.504310][ T7366] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 393.509821][ T7366] ? __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 393.515783][ T7366] ? ia32_sys_call+0x2d07/0x42c0 [ 393.520946][ T7366] ? __do_fast_syscall_32+0xb0/0x110 [ 393.526517][ T7366] ? do_fast_syscall_32+0x38/0x80 [ 393.531821][ T7366] ? do_SYSENTER_32+0x1f/0x30 [ 393.536773][ T7366] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.543544][ T7366] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 393.549065][ T7366] ? __i2c_transfer+0x11ca/0x30e0 [ 393.554322][ T7366] ? kmsan_get_metadata+0x105/0x1b0 [ 393.559806][ T7366] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 393.566436][ T7366] ? kmsan_get_metadata+0x105/0x1b0 [ 393.571907][ T7366] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.578046][ T7366] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 393.583507][ T7366] ? kmsan_get_metadata+0x105/0x1b0 [ 393.588976][ T7366] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.595100][ T7366] kmsan_internal_check_memory+0x496/0x570 [ 393.601232][ T7366] kmsan_copy_to_user+0xca/0xe0 [ 393.606343][ T7366] ? should_fail_usercopy+0x2e/0x40 [ 393.611798][ T7366] _copy_to_user+0xcc/0x120 [ 393.616532][ T7366] i2cdev_ioctl_smbus+0x586/0x660 [ 393.621845][ T7366] compat_i2cdev_ioctl+0x48f/0xb40 [ 393.627242][ T7366] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 393.633114][ T7366] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 393.638906][ T7366] ? kmsan_get_metadata+0x105/0x1b0 [ 393.644346][ T7366] ? kmsan_get_metadata+0x105/0x1b0 [ 393.649832][ T7366] ia32_sys_call+0x2d07/0x42c0 [ 393.654794][ T7366] __do_fast_syscall_32+0xb0/0x110 [ 393.660231][ T7366] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 393.666215][ T7366] do_fast_syscall_32+0x38/0x80 [ 393.671334][ T7366] do_SYSENTER_32+0x1f/0x30 [ 393.676116][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.682714][ T7366] RIP: 0023:0xf708e539 [ 393.686976][ T7366] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 393.706849][ T7366] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 393.715522][ T7366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 393.723689][ T7366] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.731849][ T7366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.740024][ T7366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 393.748192][ T7366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.756420][ T7366] [ 393.759994][ T7366] Kernel Offset: disabled [ 393.764444][ T7366] Rebooting in 86400 seconds..