last executing test programs: 1m56.046045497s ago: executing program 0 (id=876): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m55.031874695s ago: executing program 0 (id=880): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000200), 0x80800) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0xff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m54.122962881s ago: executing program 0 (id=884): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x48102, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m53.31547266s ago: executing program 0 (id=888): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r0, &(0x7f0000000040)='./file0/../file0\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 1m52.315124841s ago: executing program 0 (id=893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x23c, @private2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001180)='\f', 0x1}], 0x1}}], 0x2, 0x931766f6159e6d55) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000004300)=""/4129, &(0x7f0000000080)=0x1021) 1m51.333652264s ago: executing program 0 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 1m48.401093498s ago: executing program 32 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 1m8.779838591s ago: executing program 1 (id=1022): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m4.206748704s ago: executing program 1 (id=1029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x62283, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b3, 0x0, 0x3}]}) 1m3.262262546s ago: executing program 1 (id=1033): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000500), &(0x7f0000005b00)=0x4) 1m2.502451906s ago: executing program 1 (id=1037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)) 1m1.168490229s ago: executing program 1 (id=1040): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) 1m0.414611842s ago: executing program 1 (id=1044): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) 45.017711531s ago: executing program 33 (id=1044): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) 10.35361669s ago: executing program 5 (id=1173): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x0, 0x2}, 0x8) 9.758637471s ago: executing program 4 (id=1174): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x1e, 0x805, 0x0) inotify_init1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x280, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 9.271236255s ago: executing program 5 (id=1175): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000700)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x2}], {0x4, 0x4}}, 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) 8.707975427s ago: executing program 4 (id=1176): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r2, 0xffffffffffffffff, 0x0) tee(r0, r2, 0x60000000000, 0x0) 7.526884546s ago: executing program 4 (id=1178): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x64, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x64}}, 0x14) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 6.934876116s ago: executing program 5 (id=1179): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf252800000008000300", @ANYRES32=r3, @ANYBLOB="06003600040000000a000600c63f298bda610c43874fbe7f37f58f0036"], 0x54}, 0x1, 0x0, 0x0, 0x400c004}, 0x400c044) 6.671348774s ago: executing program 3 (id=1180): r0 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 6.194814954s ago: executing program 2 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x38, 0x0, [{0x1, 0x0, 0x0, 0xfe, 0xfffffc01, 0x7fffc}]}) 5.494223922s ago: executing program 4 (id=1182): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.335420277s ago: executing program 2 (id=1183): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0], 0x10, 0x7f4, &(0x7f0000000e40)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x3, 0x0, [{0x80000008, 0x7, 0x0, 0x7fffffff, 0x2}, {0x40000001, 0xb17, 0xffff1c4c, 0x7, 0x10007}, {0x80000008, 0x0, 0xfffffff7, 0x2, 0x6}]}) 4.55880112s ago: executing program 3 (id=1184): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000280)={0x54, r2, 0x11, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "29b91887d58c29500d8ea7a0fa484f3e0a78b2233f4bbe65"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) 4.303475472s ago: executing program 2 (id=1185): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x30c2, 0x4) getsockopt(r0, 0x4, 0x17, 0x0, 0x0) 4.046326994s ago: executing program 4 (id=1186): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x48102, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.783002699s ago: executing program 3 (id=1187): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x100) 3.249590725s ago: executing program 5 (id=1188): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3.241409854s ago: executing program 4 (id=1189): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x40, 0x7f}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 2.97504198s ago: executing program 2 (id=1190): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001180)={r2, 0x5, 0x7ff, 0x101, 0x2, 0x3}, &(0x7f00000011c0)=0x14) 2.911488245s ago: executing program 3 (id=1191): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x180) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.321979723s ago: executing program 5 (id=1192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r10, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 1.492280287s ago: executing program 2 (id=1193): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000017000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 1.16047696s ago: executing program 3 (id=1194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r2, 0x1, 0x0, 0x2000000, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.146613064s ago: executing program 5 (id=1195): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x1, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c0100"], 0x16c}}, 0x0) io_uring_enter(r0, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) 14.757905ms ago: executing program 3 (id=1196): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) 0s ago: executing program 2 (id=1197): syz_open_procfs(0x0, &(0x7f0000000300)='attr/exec\x00') socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd(0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) kernel console output (not intermixed with test programs): B device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.287602][ T5841] usb 5-1: Product: syz [ 314.292077][ T5841] usb 5-1: Manufacturer: syz [ 314.297067][ T5841] usb 5-1: SerialNumber: syz [ 314.683598][ T5841] ti_usb_3410_5052 5-1:7.101: TI USB 3410 1 port adapter converter detected [ 314.710762][ T5841] ti_usb_3410_5052 5-1:7.101: missing endpoints [ 314.773930][ T5841] usb 5-1: USB disconnect, device number 3 [ 314.828480][ T5082] Bluetooth: unknown link type 128 [ 315.608847][ T5840] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 315.708407][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 315.751761][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 315.776574][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 315.777425][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 315.796649][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.810978][ T5840] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 315.820403][ T5840] usb 1-1: config 1 has no interface number 1 [ 315.854109][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 315.907302][ T6590] warning: `syz.2.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.931691][ T5840] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 315.988448][ T5840] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.002332][ T5840] usb 1-1: config 1 interface 2 has no altsetting 0 [ 316.074093][ T5840] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.084006][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.096602][ T5840] usb 1-1: Product: syz [ 316.101400][ T5840] usb 1-1: Manufacturer: syz [ 316.106231][ T5840] usb 1-1: SerialNumber: syz [ 316.182350][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 316.189116][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 316.387176][ T6580] ceph: No mds server is up or the cluster is laggy [ 316.440785][ T5840] usb 1-1: selecting invalid altsetting 0 [ 316.614785][ T5840] usb 1-1: USB disconnect, device number 4 [ 316.690547][ T6594] loop1: detected capacity change from 0 to 2048 [ 316.771413][ T6594] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 72057594037927939)! [ 316.785086][ T6594] EXT4-fs (loop1): group descriptors corrupted! [ 316.836743][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.854685][ T5841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 316.863339][ T5082] Bluetooth: hci2: command tx timeout [ 317.049543][ T5841] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 317.059399][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.115786][ T5841] usb 5-1: config 0 descriptor?? [ 318.449287][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.537903][ T5841] ath6kl: Failed to submit usb control message: -110 [ 318.545929][ T5841] ath6kl: unable to send the bmi data to the device: -110 [ 318.554040][ T5841] ath6kl: Unable to send get target info: -110 [ 318.588114][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.724101][ T5841] ath6kl: Failed to init ath6kl core: -110 [ 318.790002][ T5841] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 319.099891][ T6618] loop3: detected capacity change from 0 to 8 [ 319.460454][ T6617] loop0: detected capacity change from 0 to 2048 [ 319.470702][ T6617] udf: Unknown parameter 'GÏÌÿÿÿ€ãÿÿ ' [ 319.625627][ T6618] SQUASHFS error: lzo decompression failed, data probably corrupt [ 319.634536][ T6618] SQUASHFS error: Failed to read block 0x91: -5 [ 319.641070][ T6618] SQUASHFS error: Unable to read metadata cache entry [8f] [ 319.650499][ T6618] SQUASHFS error: Unable to read inode 0x11f [ 320.507857][ T5841] usb 5-1: USB disconnect, device number 4 [ 320.963971][ T6626] loop3: detected capacity change from 0 to 512 [ 321.029355][ T6631] Cannot find add_set index 2 as target [ 321.037856][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 321.077580][ T6626] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.178: corrupted in-inode xattr: invalid ea_ino [ 321.081845][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 321.156072][ T6626] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.178: couldn't read orphan inode 15 (err -117) [ 321.161952][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 321.226397][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 321.310852][ T6626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.602184][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 321.701801][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 322.155445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 322.182096][ T6632] ceph: No mds server is up or the cluster is laggy [ 322.215046][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 322.444163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 322.577567][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 322.836621][ T6638] bond1: option resend_igmp: invalid value (2878) [ 322.843750][ T6638] bond1: option resend_igmp: allowed values 0 - 255 [ 322.857261][ T6638] bond1 (unregistering): Released all slaves [ 323.033448][ T5837] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 323.271508][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 323.332496][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.345641][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.356396][ T5837] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 323.365932][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.371606][ T6652] loop0: detected capacity change from 0 to 64 [ 323.517131][ T5837] usb 4-1: config 0 descriptor?? [ 324.051879][ T5837] usbhid 4-1:0.0: can't add hid device: -71 [ 324.060290][ T5837] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 324.162996][ T5837] usb 4-1: USB disconnect, device number 3 [ 325.047457][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.212811][ T5841] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 325.421534][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 325.484664][ T5841] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.496947][ T5841] usb 5-1: config 1 has no interface number 1 [ 325.551546][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 325.611571][ T5841] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.668334][ T5841] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.678315][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.687195][ T5841] usb 5-1: Product: syz [ 325.693822][ T5841] usb 5-1: Manufacturer: syz [ 325.698669][ T5841] usb 5-1: SerialNumber: syz [ 326.092702][ T5841] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 326.128246][ T5841] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 326.377522][ T5841] usb 5-1: USB disconnect, device number 5 [ 326.860478][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.488487][ T6701] loop3: detected capacity change from 0 to 32768 [ 328.498913][ T6701] btrfs: Deprecated parameter 'usebackuproot' [ 328.505616][ T6701] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 328.563824][ T6701] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.204 (6701) [ 328.613444][ T6701] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.626685][ T6701] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 328.727437][ T6706] loop1: detected capacity change from 0 to 1024 [ 328.754908][ T6706] EXT4-fs: Ignoring removed orlov option [ 328.791967][ T6051] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 328.806137][ T6701] BTRFS error (device loop3): failed to load root extent [ 328.813904][ T6701] BTRFS warning (device loop3): try to load backup roots slot 1 [ 328.841641][ T6051] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 328.855842][ T6701] BTRFS warning (device loop3): couldn't read tree root [ 328.856120][ T6706] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 328.863889][ T6701] BTRFS warning (device loop3): try to load backup roots slot 2 [ 328.895133][ T6051] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 328.907072][ T6701] BTRFS warning (device loop3): couldn't read tree root [ 328.914479][ T6701] BTRFS warning (device loop3): try to load backup roots slot 3 [ 328.973960][ T6701] BTRFS info (device loop3): rebuilding free space tree [ 328.989161][ T6706] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.059944][ T6701] BTRFS info (device loop3): checking UUID tree [ 329.085534][ T6701] BTRFS info (device loop3): enabling ssd optimizations [ 329.093550][ T6701] BTRFS info (device loop3): turning off barriers [ 329.100449][ T6701] BTRFS info (device loop3): turning on sync discard [ 329.107933][ T6701] BTRFS info (device loop3): enabling free space tree [ 329.115205][ T6701] BTRFS info (device loop3): force clearing of disk cache [ 329.123017][ T6701] BTRFS info (device loop3): enabling auto defrag [ 329.129707][ T6701] BTRFS info (device loop3): trying to use backup root at mount time [ 329.138370][ T6701] BTRFS info (device loop3): use zstd compression, level 3 [ 329.162695][ T30] audit: type=1800 audit(1769059432.623:139): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.204" name="file1" dev="loop3" ino=257 res=0 errno=0 [ 329.212135][ T6706] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 329.230289][ T6706] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 329.230289][ T6706] [ 329.242207][ T6706] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 329.355233][ T6706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.526867][ T6706] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.206: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 329.624187][ T6706] EXT4-fs (loop1): Remounting filesystem read-only [ 329.699608][ T5797] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.720410][ T6733] loop4: detected capacity change from 0 to 128 [ 329.769407][ T6733] FAT-fs (loop4): bogus number of directory entries (29850) [ 329.777428][ T6733] FAT-fs (loop4): Can't find a valid FAT filesystem [ 329.795617][ T30] audit: type=1326 audit(1769059433.263:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f824579acb9 code=0x0 [ 329.999137][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.176762][ T30] audit: type=1326 audit(1769059433.643:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89719acb9 code=0x7ffc0000 [ 330.359463][ T30] audit: type=1326 audit(1769059433.673:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89719acb9 code=0x7ffc0000 [ 330.382743][ T30] audit: type=1326 audit(1769059433.703:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7ff89719acb9 code=0x7ffc0000 [ 330.408540][ T30] audit: type=1326 audit(1769059433.703:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89719acb9 code=0x7ffc0000 [ 330.432031][ T30] audit: type=1326 audit(1769059433.703:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89719acb9 code=0x7ffc0000 [ 331.949559][ T30] audit: type=1326 audit(1769059435.383:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d2d9acb9 code=0x7ffc0000 [ 332.175817][ T30] audit: type=1326 audit(1769059435.463:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe5d2d9acb9 code=0x7ffc0000 [ 332.200514][ T30] audit: type=1326 audit(1769059435.463:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d2d9acb9 code=0x7ffc0000 [ 333.023744][ T5841] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 333.289106][ T5841] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 333.298358][ T5841] usb 1-1: config 160 has no interface number 0 [ 333.391759][ T5841] usb 1-1: config 160 interface 200 has no altsetting 0 [ 333.482542][ T5841] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 333.492782][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.501620][ T5841] usb 1-1: Product: syz [ 333.506037][ T5841] usb 1-1: Manufacturer: syz [ 333.510863][ T5841] usb 1-1: SerialNumber: syz [ 334.205972][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 334.266296][ T5841] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.287566][ T5082] Bluetooth: hci2: command 0x0406 tx timeout [ 334.296506][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 334.303731][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 334.393013][ T5841] usb 1-1: MIDIStreaming interface descriptor not found [ 334.592843][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.606716][ T6767] bridge_slave_1: left allmulticast mode [ 334.612928][ T6767] bridge_slave_1: left promiscuous mode [ 334.619966][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.656932][ T6767] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 334.708765][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 334.874428][ T5841] usb 1-1: USB disconnect, device number 5 [ 335.658099][ T5791] Bluetooth: hci0: unexpected event for opcode 0x202f [ 336.462495][ T6792] IPv6: Can't replace route, no match found [ 337.171997][ T6801] netlink: 244 bytes leftover after parsing attributes in process `syz.1.242'. [ 337.197472][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.750826][ T9] libceph: connect (1)[c::]:6789 error -101 [ 337.768336][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 337.860750][ T6815] loop1: detected capacity change from 0 to 128 [ 337.974482][ T6815] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.039317][ T6815] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.052947][ T9] libceph: connect (1)[c::]:6789 error -101 [ 338.059488][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 338.091649][ T6820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.248'. [ 338.146719][ T6808] ceph: No mds server is up or the cluster is laggy [ 338.667097][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.743195][ T5791] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 339.752148][ T5791] Bluetooth: hci0: Injecting HCI hardware error event [ 339.765450][ T5791] Bluetooth: hci0: hardware error 0x00 [ 339.968536][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 339.968620][ T30] audit: type=1326 audit(1769059443.433:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824579acb9 code=0x7ffc0000 [ 340.147064][ T30] audit: type=1326 audit(1769059443.483:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824579acb9 code=0x7ffc0000 [ 340.170698][ T30] audit: type=1326 audit(1769059443.493:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f824579acb9 code=0x7ffc0000 [ 340.194201][ T30] audit: type=1326 audit(1769059443.493:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824579acb9 code=0x7ffc0000 [ 340.218433][ T30] audit: type=1326 audit(1769059443.493:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824579acb9 code=0x7ffc0000 [ 340.647268][ T6848] netlink: 830 bytes leftover after parsing attributes in process `syz.4.260'. [ 341.175878][ T9] libceph: connect (1)[c::]:6789 error -101 [ 341.202051][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 341.229148][ T9] libceph: connect (1)[c::]:6789 error -101 [ 341.260089][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 341.395910][ T6854] ceph: No mds server is up or the cluster is laggy [ 341.802104][ T5791] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 342.304061][ T5791] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 343.593042][ T5791] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 344.677991][ T5791] Bluetooth: hci2: connection err: -111 [ 344.805279][ T5791] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 347.595652][ T6951] bond1: entered promiscuous mode [ 347.645833][ T6951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.192833][ T6993] loop3: detected capacity change from 0 to 164 [ 350.246627][ T6993] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 350.354247][ T6993] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 350.429673][ T6993] Symlink component flag not implemented [ 350.440806][ T6993] Symlink component flag not implemented [ 350.506273][ T6993] Symlink component flag not implemented (7) [ 350.513677][ T6993] Symlink component flag not implemented (116) [ 351.026970][ T7004] loop1: detected capacity change from 0 to 2048 [ 351.173632][ T7012] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.790668][ T7024] loop1: detected capacity change from 0 to 4096 [ 353.027171][ T7038] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.180057][ T7031] xt_CT: No such helper "snmp" [ 354.360306][ T5841] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 354.642018][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 354.676041][ T5841] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 354.685394][ T5841] usb 5-1: config 0 has no interface number 0 [ 354.711360][ T5841] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 354.770912][ T5841] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 354.788123][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.796518][ T5841] usb 5-1: Product: syz [ 354.800895][ T5841] usb 5-1: Manufacturer: syz [ 354.805924][ T5841] usb 5-1: SerialNumber: syz [ 354.965633][ T5841] usb 5-1: config 0 descriptor?? [ 355.020242][ T7052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 355.175587][ T7058] SQUASHFS error: Failed to read block 0x0: -5 [ 355.235196][ T7054] loop3: detected capacity change from 0 to 32768 [ 355.245512][ T7054] btrfs: Deprecated parameter 'usebackuproot' [ 355.251987][ T7054] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 355.276866][ T7054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.348 (7054) [ 355.300179][ T7054] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 355.310895][ T7054] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 355.479823][ T7052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 355.531997][ T1321] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 355.546931][ T7054] BTRFS error (device loop3): failed to load root extent [ 355.555576][ T7054] BTRFS warning (device loop3): try to load backup roots slot 1 [ 355.565095][ T3451] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 355.579718][ T7054] BTRFS warning (device loop3): couldn't read tree root [ 355.587262][ T7054] BTRFS warning (device loop3): try to load backup roots slot 2 [ 355.664529][ T3451] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 355.676335][ T7054] BTRFS warning (device loop3): couldn't read tree root [ 355.683802][ T7054] BTRFS warning (device loop3): try to load backup roots slot 3 [ 355.778568][ T5841] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 355.792899][ T7054] BTRFS info (device loop3): rebuilding free space tree [ 355.816909][ T5841] asix 5-1:0.191: probe with driver asix failed with error -71 [ 355.845522][ T7054] BTRFS info (device loop3): checking UUID tree [ 355.854053][ T7054] BTRFS info (device loop3): enabling ssd optimizations [ 355.862282][ T7054] BTRFS info (device loop3): turning off barriers [ 355.868938][ T7054] BTRFS info (device loop3): turning on sync discard [ 355.876111][ T7054] BTRFS info (device loop3): enabling free space tree [ 355.883330][ T7054] BTRFS info (device loop3): force clearing of disk cache [ 355.890682][ T7054] BTRFS info (device loop3): enabling auto defrag [ 355.897634][ T7054] BTRFS info (device loop3): trying to use backup root at mount time [ 355.907709][ T7054] BTRFS info (device loop3): use zstd compression, level 3 [ 355.910512][ T5841] usb 5-1: USB disconnect, device number 6 [ 355.945154][ T30] audit: type=1800 audit(1769059459.413:155): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.348" name="file1" dev="loop3" ino=257 res=0 errno=0 [ 355.998109][ T7054] bridge_slave_1: left allmulticast mode [ 356.005469][ T7054] bridge_slave_1: left promiscuous mode [ 356.012703][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.063768][ T7054] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 356.077720][ T7054] siw: device registration error -23 [ 356.775631][ T7086] nft_compat: unsupported protocol 249 [ 356.814383][ T5797] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.137415][ T7092] rdma_rxe: rxe_newlink: failed to add lo [ 357.771030][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.777906][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.652291][ T7112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.393768][ T7110] loop0: detected capacity change from 0 to 32768 [ 359.413502][ T7110] btrfs: Deprecated parameter 'usebackuproot' [ 359.420181][ T7110] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 359.434233][ T7110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.368 (7110) [ 359.520248][ T7110] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 359.535609][ T7110] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 359.671749][ T3451] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 359.686285][ T7110] BTRFS error (device loop0): failed to load root extent [ 359.697894][ T7110] BTRFS warning (device loop0): try to load backup roots slot 1 [ 359.707524][ T1321] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 359.722157][ T7110] BTRFS warning (device loop0): couldn't read tree root [ 359.729452][ T7110] BTRFS warning (device loop0): try to load backup roots slot 2 [ 359.738830][ T1104] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 359.750053][ T7110] BTRFS warning (device loop0): couldn't read tree root [ 359.757577][ T7110] BTRFS warning (device loop0): try to load backup roots slot 3 [ 359.886778][ T7110] BTRFS info (device loop0): rebuilding free space tree [ 359.943954][ T7110] BTRFS info (device loop0): checking UUID tree [ 359.972696][ T7110] BTRFS info (device loop0): enabling ssd optimizations [ 359.979913][ T7110] BTRFS info (device loop0): turning off barriers [ 359.986804][ T7110] BTRFS info (device loop0): turning on sync discard [ 359.994189][ T7110] BTRFS info (device loop0): enabling free space tree [ 360.003794][ T7110] BTRFS info (device loop0): force clearing of disk cache [ 360.011384][ T7110] BTRFS info (device loop0): enabling auto defrag [ 360.018218][ T7110] BTRFS info (device loop0): trying to use backup root at mount time [ 360.026868][ T7110] BTRFS info (device loop0): use zstd compression, level 3 [ 360.096558][ T30] audit: type=1800 audit(1769059463.543:156): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.368" name="file1" dev="loop0" ino=257 res=0 errno=0 [ 360.529846][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 361.632853][ T30] audit: type=1326 audit(1769059465.103:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d2d9acb9 code=0x7ffc0000 [ 361.672383][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 361.681533][ T30] audit: type=1326 audit(1769059465.103:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d2d9acb9 code=0x7ffc0000 [ 361.704499][ T30] audit: type=1326 audit(1769059465.133:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe5d2d9acb9 code=0x7ffc0000 [ 361.727982][ T30] audit: type=1326 audit(1769059465.133:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d2d9acb9 code=0x7ffc0000 [ 363.723231][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 364.842604][ T5082] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 364.850876][ T5082] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 365.457283][ T7186] netlink: set zone limit has 8 unknown bytes [ 365.706118][ T7196] bridge1: entered promiscuous mode [ 365.712117][ T7196] bridge1: entered allmulticast mode [ 367.908753][ T7220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.921735][ T5082] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 368.930477][ T5082] Bluetooth: hci4: Injecting HCI hardware error event [ 368.943225][ T5082] Bluetooth: hci4: hardware error 0x00 [ 369.289869][ T7236] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 369.548515][ T7244] xt_connbytes: Forcing CT accounting to be enabled [ 371.013690][ T5082] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 371.334379][ T7255] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 373.061668][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 373.071079][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 373.080389][ T7270] netlink: 'syz.3.431': attribute type 4 has an invalid length. [ 373.230166][ T7275] netlink: 'syz.1.433': attribute type 13 has an invalid length. [ 373.282697][ T7273] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 373.618815][ T7277] bond1: Removing last arp target with arp_interval on [ 373.665384][ T9] libceph: connect (1)[c::]:6789 error -101 [ 373.679224][ T7277] bond1: entered promiscuous mode [ 373.685249][ T7277] bond1: entered allmulticast mode [ 373.689258][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 373.712773][ T9] libceph: connect (1)[c::]:6789 error -101 [ 373.733701][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 373.740976][ T7277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.910634][ T7281] ceph: No mds server is up or the cluster is laggy [ 374.022528][ T9] libceph: connect (1)[c::]:6789 error -101 [ 374.071721][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 376.091616][ T7312] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 376.142394][ T7303] loop1: detected capacity change from 0 to 4096 [ 377.274698][ T7303] ntfs3(loop1): ino=1a, mi_enum_attr [ 377.345248][ T7303] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 377.578765][ T7303] ntfs3(loop1): ino=9, attr_set_size [ 377.599936][ T7314] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 378.745879][ T9] libceph: connect (1)[c::]:6789 error -101 [ 378.772687][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 378.788034][ T9] libceph: connect (1)[c::]:6789 error -101 [ 378.805367][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 378.858235][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 378.992625][ T7325] ceph: No mds server is up or the cluster is laggy [ 379.083487][ T9] libceph: connect (1)[c::]:6789 error -101 [ 379.089952][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 379.682513][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 379.869586][ T7344] loop3: detected capacity change from 0 to 512 [ 380.013706][ T7344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.133161][ T7344] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.239610][ T7344] EXT4-fs warning (device loop3): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 380.314000][ T7353] Bluetooth: hci0: invalid len left 7, exp >= 104 [ 380.622714][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.311471][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 382.556167][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.568154][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.578603][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 382.588256][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.688764][ T9] usb 1-1: config 0 descriptor?? [ 383.158555][ T5837] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 383.309105][ T9] hid-generic 0003:04F3:0754.0001: unknown main item tag 0x0 [ 383.319467][ T9] hid-generic 0003:04F3:0754.0001: unknown main item tag 0x0 [ 383.329531][ T9] hid-generic 0003:04F3:0754.0001: unknown main item tag 0x0 [ 383.338564][ T9] hid-generic 0003:04F3:0754.0001: unknown main item tag 0x0 [ 383.346506][ T9] hid-generic 0003:04F3:0754.0001: unknown main item tag 0x0 [ 383.366071][ T9] hid-generic 0003:04F3:0754.0001: failed to start in urb: -90 [ 383.382326][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 383.408939][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.441911][ T5837] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 383.451492][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.515430][ T9] hid-generic 0003:04F3:0754.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.0-1/input0 [ 383.540488][ T5837] usb 4-1: config 0 descriptor?? [ 383.595675][ T9] usb 1-1: USB disconnect, device number 6 [ 383.608119][ T5837] dvb-usb: found a 'TeVii S662' in warm state. [ 383.665845][ T5837] dw2102: su3000_power_ctrl: 1, initialized 0 [ 383.697910][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 383.770773][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 383.822827][ T7391] dw2102: i2c wr: len=66 is too big! [ 383.822827][ T7391] [ 383.829086][ T5837] dvbdev: DVB: registering new adapter (TeVii S662) [ 383.905197][ T5837] usb 4-1: media controller created [ 383.910690][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 383.917195][ T5837] dw2102: i2c transfer failed. [ 383.964526][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 383.970886][ T5837] dw2102: i2c transfer failed. [ 384.011967][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 384.018051][ T5837] dw2102: i2c transfer failed. [ 384.033047][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 384.039062][ T5837] dw2102: i2c transfer failed. [ 384.071759][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 384.077725][ T5837] dw2102: i2c transfer failed. [ 384.138228][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 384.144959][ T5837] dw2102: i2c transfer failed. [ 384.150023][ T5837] dvb-usb: MAC address: 02:02:02:02:02:02 [ 384.510069][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.663490][ T7399] fido_id[7399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 384.949861][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 384.956165][ T5837] dw2102: command 0x0e transfer failed. [ 385.044973][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 385.053015][ T5837] dw2102: command 0x0e transfer failed. [ 385.183737][ T7415] capability: warning: `syz.3.487' uses 32-bit capabilities (legacy support in use) [ 385.364431][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 385.370505][ T5837] dw2102: command 0x0e transfer failed. [ 385.411581][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 385.417562][ T5837] dw2102: command 0x0e transfer failed. [ 385.470100][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 385.476403][ T5837] dw2102: command 0x51 transfer failed. [ 385.514528][ T5837] dvb-usb: bulk message failed: -22 (5/0) [ 385.520498][ T5837] dw2102: i2c probe for address 0x68 failed. [ 385.577165][ T5837] dvb-usb: bulk message failed: -22 (5/0) [ 385.583420][ T5837] dw2102: i2c probe for address 0x69 failed. [ 385.615633][ T5837] dvb-usb: bulk message failed: -22 (5/0) [ 385.621998][ T5837] dw2102: i2c probe for address 0x6a failed. [ 385.628558][ T5837] dw2102: probing for demodulator failed. Is the external power switched on? [ 385.637747][ T5837] dvb-usb: no frontend was attached by 'TeVii S662' [ 386.171540][ T5837] rc_core: IR keymap rc-tt-1500 not found [ 386.177892][ T5837] Registered IR keymap rc-empty [ 386.247772][ T5837] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 386.310094][ T7425] loop1: detected capacity change from 0 to 1024 [ 386.320456][ T5837] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 386.358532][ T5837] dvb-usb: schedule remote query interval to 250 msecs. [ 386.366544][ T5837] dw2102: su3000_power_ctrl: 0, initialized 1 [ 386.373156][ T5837] dvb-usb: TeVii S662 successfully initialized and connected. [ 386.390364][ T5837] usb 4-1: USB disconnect, device number 4 [ 386.457405][ T7425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.601972][ T7425] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.490: reserved inode found cleared - inode=2 [ 386.810741][ T7432] loop3: detected capacity change from 0 to 4096 [ 386.884370][ T7432] syz.3.493: attempt to access beyond end of device [ 386.884370][ T7432] loop3: rw=8388608, sector=1152921504606847184, nr_sectors = 8 limit=4096 [ 386.900926][ T7432] NILFS (loop3): I/O error reading meta-data file (ino=4, block-offset=0) [ 386.910162][ T7432] NILFS (loop3): error -5 while loading last checkpoint (checkpoint number=2) [ 386.995036][ T7435] tipc: Started in network mode [ 387.000428][ T7435] tipc: Node identity fe800000000000000000000000000011, cluster identity 4711 [ 387.010864][ T7435] tipc: Enabling of bearer rejected, failed to enable media [ 387.120284][ T5837] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 387.512527][ T7438] netlink: 96 bytes leftover after parsing attributes in process `syz.3.496'. [ 387.522404][ T7438] netlink: 48 bytes leftover after parsing attributes in process `syz.3.496'. [ 387.638239][ T7443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.497'. [ 387.671615][ T7442] xt_connbytes: Forcing CT accounting to be enabled [ 390.089295][ T7477] xt_connbytes: Forcing CT accounting to be enabled [ 390.096796][ T5841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 390.117584][ T5840] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 390.311807][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 390.351861][ T5841] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 390.361910][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.370164][ T5841] usb 5-1: Product: syz [ 390.374953][ T5841] usb 5-1: Manufacturer: syz [ 390.379797][ T5841] usb 5-1: SerialNumber: syz [ 390.426672][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.440334][ T5841] usb 5-1: config 0 descriptor?? [ 390.446436][ T5840] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.458014][ T5840] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.468986][ T5840] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.483404][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 390.490350][ T5840] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 390.500438][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.573689][ T5840] usb 4-1: config 0 descriptor?? [ 390.824985][ T5841] usb 5-1: USB disconnect, device number 7 [ 391.035412][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.114499][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 391.179155][ T5840] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 391.294892][ T5840] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-38) [ 391.358966][ T5840] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -38 [ 391.483673][ T5840] usb 4-1: USB disconnect, device number 5 [ 391.988009][ T7492] fido_id[7492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 392.198039][ T5840] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 392.291446][ T5837] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 392.391709][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 392.448827][ T5840] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 392.460204][ T5840] usb 1-1: config 0 has no interface number 0 [ 392.483637][ T5837] usb 5-1: config 164 has an invalid interface number: 52 but max is 0 [ 392.492375][ T5837] usb 5-1: config 164 has no interface number 0 [ 392.495871][ T5082] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 392.516137][ T7506] xt_connbytes: Forcing CT accounting to be enabled [ 392.530428][ T5840] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 392.539245][ T5837] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=99.da [ 392.540439][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.549850][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.557400][ T5840] usb 1-1: Product: syz [ 392.572058][ T5840] usb 1-1: Manufacturer: syz [ 392.576971][ T5840] usb 1-1: SerialNumber: syz [ 392.656137][ T5840] usb 1-1: config 0 descriptor?? [ 392.719064][ T5840] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 392.793473][ T5837] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 393.034082][ T5840] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 393.160463][ T5840] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 393.360909][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 393.362665][ T5837] usb 1-1: USB disconnect, device number 7 [ 393.439719][ T7510] netlink: 40 bytes leftover after parsing attributes in process `syz.3.526'. [ 393.550263][ T5837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 393.657262][ T5837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 393.677786][ T5840] usb 5-1: USB disconnect, device number 8 [ 393.716366][ T5837] quatech2 1-1:0.51: device disconnected [ 394.937703][ T7521] loop3: detected capacity change from 0 to 256 [ 394.955539][ T5840] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 394.979843][ T7521] exfat: Deprecated parameter 'utf8' [ 395.110220][ T7521] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 395.133601][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.144271][ T5840] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 395.154042][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.213312][ T30] audit: type=1800 audit(1769059498.683:161): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.531" name="file1" dev="loop3" ino=1048606 res=0 errno=0 [ 395.295092][ T5840] usb 1-1: config 0 descriptor?? [ 395.355422][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.532'. [ 395.932621][ T7530] loop3: detected capacity change from 0 to 1024 [ 396.037222][ T9] usb 1-1: USB disconnect, device number 8 [ 396.232324][ T7530] hfsplus: bad catalog entry type [ 396.570029][ T3451] hfsplus: b-tree write err: -5, ino 4 [ 396.893401][ T5840] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 396.926876][ T7543] jfs: block size(16384) > page size(4096) not supported by filesystem [ 396.977791][ T7543] Mount JFS Failure: -22 [ 396.982550][ T7543] jfs_mount failed w/return code = -22 [ 397.132013][ T5840] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.143670][ T5840] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.154230][ T5840] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 397.169398][ T5840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 397.177264][ T5840] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 397.186772][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.315205][ T5840] usb 5-1: config 0 descriptor?? [ 397.522044][ T5841] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 397.699410][ T5837] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 397.719857][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 397.764514][ T5837] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 397.797075][ T5841] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.806004][ T5841] usb 1-1: config 0 has no interface number 0 [ 397.847653][ T5841] usb 1-1: config 0 interface 1 has no altsetting 0 [ 397.894688][ T5841] usb 1-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a [ 397.904380][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.912850][ T5841] usb 1-1: Product: syz [ 397.917233][ T5841] usb 1-1: Manufacturer: syz [ 397.922404][ T5841] usb 1-1: SerialNumber: syz [ 397.946235][ T5840] uclogic 0003:5543:0042.0005: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 398.048183][ T5840] usb 5-1: USB disconnect, device number 9 [ 398.091626][ T5841] usb 1-1: config 0 descriptor?? [ 398.535074][ T5841] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 398.558620][ T7555] fido_id[7555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 398.604037][ T5841] usb 1-1: USB disconnect, device number 9 [ 398.680673][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'. [ 398.774733][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.706626][ T7561] fido_id[7561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 400.415698][ T7580] bpf: Bad value for 'gid' [ 400.771998][ T7583] loop4: detected capacity change from 0 to 16 [ 400.819963][ T7583] erofs (device loop4): mounted with root inode @ nid 36. [ 401.458126][ T7598] loop4: detected capacity change from 0 to 128 [ 401.604116][ T7598] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.686844][ T7598] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.073843][ T5794] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.137477][ T7605] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 402.879439][ T7615] netlink: 56 bytes leftover after parsing attributes in process `syz.2.571'. [ 402.981663][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 403.173052][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 403.208356][ T5837] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.217166][ T5837] usb 2-1: config 0 has no interface number 0 [ 403.272780][ T5837] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 403.282540][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.290920][ T5837] usb 2-1: Product: syz [ 403.295535][ T5837] usb 2-1: Manufacturer: syz [ 403.300394][ T5837] usb 2-1: SerialNumber: syz [ 403.436294][ T5837] usb 2-1: config 0 descriptor?? [ 403.549656][ T5837] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 403.592546][ T7618] bond_slave_0: entered promiscuous mode [ 403.598575][ T7618] bond_slave_1: entered promiscuous mode [ 403.605160][ T7618] bridge_slave_1: entered promiscuous mode [ 403.612744][ T7618] macvtap1: entered allmulticast mode [ 403.620924][ T7618] bond0: entered allmulticast mode [ 403.626973][ T7618] bond_slave_0: entered allmulticast mode [ 403.633701][ T7618] bond_slave_1: entered allmulticast mode [ 403.639757][ T7618] bridge_slave_1: entered allmulticast mode [ 403.662436][ T7618] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 403.854720][ T5837] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 403.950611][ T5837] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 404.229606][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 404.233382][ T5841] usb 2-1: USB disconnect, device number 3 [ 404.324673][ T5841] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 404.405623][ T5841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 404.517068][ T5841] quatech2 2-1:0.51: device disconnected [ 407.069964][ T7666] loop4: detected capacity change from 0 to 2048 [ 407.177218][ T7666] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.946994][ T7679] loop4: detected capacity change from 0 to 512 [ 408.006452][ T7679] EXT4-fs: Ignoring removed bh option [ 408.043947][ T7681] netlink: 'syz.1.602': attribute type 4 has an invalid length. [ 408.052107][ T7681] netlink: 17 bytes leftover after parsing attributes in process `syz.1.602'. [ 408.064485][ T7679] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 408.073853][ T7679] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 408.163876][ T7679] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.601: Allocating blocks 41-42 which overlap fs metadata [ 408.255892][ T7679] Quota error (device loop4): write_blk: dquota write failed [ 408.263848][ T7679] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 408.393276][ T7679] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 408.422005][ T7679] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.601: Failed to acquire dquot type 1 [ 408.480671][ T7679] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 408.521961][ T7679] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.601: corrupted inode contents [ 408.560617][ T7679] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.601: mark_inode_dirty error [ 408.728867][ T7679] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.601: corrupted inode contents [ 408.734283][ T7679] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.601: mark_inode_dirty error [ 408.736610][ T7679] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.601: corrupted inode contents [ 408.828549][ T7679] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 408.899837][ T7679] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.601: corrupted inode contents [ 409.011058][ T7679] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.601: mark_inode_dirty error [ 409.023928][ T1321] bond0: (slave bond_slave_0): interface is now down [ 409.031078][ T1321] bond0: (slave bond_slave_1): interface is now down [ 409.038631][ T1321] bond0: (slave bridge_slave_1): interface is now down [ 409.069791][ T7696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.093091][ T7679] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 409.165388][ T7679] EXT4-fs (loop4): 1 truncate cleaned up [ 409.191487][ T1321] bond0: (slave bond_slave_0): interface is now down [ 409.197051][ T7679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.198692][ T1321] bond0: (slave bond_slave_1): interface is now down [ 409.219202][ T1321] bond0: (slave bridge_slave_1): interface is now down [ 409.338343][ T1321] bond0: now running without any active interface! [ 409.754067][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.216435][ T7708] netlink: 256 bytes leftover after parsing attributes in process `syz.4.613'. [ 410.226916][ T7708] netlink: 72 bytes leftover after parsing attributes in process `syz.4.613'. [ 411.780850][ T7724] bridge_slave_1: entered promiscuous mode [ 411.793349][ T7723] bridge_slave_1: left promiscuous mode [ 412.221777][ T5837] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 412.431549][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 412.482529][ T5837] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 412.492031][ T5837] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 412.502547][ T5837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.633661][ T5837] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.643471][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.653062][ T5837] usb 5-1: Product: syz [ 412.657716][ T5837] usb 5-1: Manufacturer: syz [ 412.662692][ T5837] usb 5-1: SerialNumber: syz [ 413.406221][ T5837] usb 5-1: 0:2 : does not exist [ 413.579444][ T5837] usb 5-1: USB disconnect, device number 10 [ 414.020599][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.502852][ T7765] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 415.548562][ T7763] loop3: detected capacity change from 0 to 32768 [ 415.559345][ T7763] btrfs: Deprecated parameter 'usebackuproot' [ 415.565973][ T7763] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 415.641747][ T7763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.634 (7763) [ 415.824232][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 415.896329][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 416.057129][ T9] usb 2-1: device descriptor read/64, error -32 [ 416.170072][ T7763] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 416.181676][ T7763] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 416.352157][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 416.376588][ T1321] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 416.390972][ T7763] BTRFS error (device loop3): failed to load root extent [ 416.398828][ T7763] BTRFS warning (device loop3): try to load backup roots slot 1 [ 416.407859][ T1104] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 416.424424][ T7763] BTRFS warning (device loop3): couldn't read tree root [ 416.432327][ T7763] BTRFS warning (device loop3): try to load backup roots slot 2 [ 416.442603][ T3458] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 416.454073][ T7763] BTRFS warning (device loop3): couldn't read tree root [ 416.461565][ T7763] BTRFS warning (device loop3): try to load backup roots slot 3 [ 416.547172][ T7763] BTRFS info (device loop3): rebuilding free space tree [ 416.582229][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 416.621797][ T9] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 416.630462][ T9] usb 2-1: config 0 has no interface number 0 [ 416.639032][ T7763] BTRFS info (device loop3): checking UUID tree [ 416.650285][ T7763] BTRFS info (device loop3): enabling ssd optimizations [ 416.658246][ T7763] BTRFS info (device loop3): turning off barriers [ 416.665505][ T7763] BTRFS info (device loop3): turning on sync discard [ 416.672925][ T7763] BTRFS info (device loop3): enabling free space tree [ 416.680021][ T7763] BTRFS info (device loop3): force clearing of disk cache [ 416.687737][ T7763] BTRFS info (device loop3): enabling auto defrag [ 416.697305][ T7763] BTRFS info (device loop3): trying to use backup root at mount time [ 416.705892][ T7763] BTRFS info (device loop3): use zstd compression, level 3 [ 416.762956][ T30] audit: type=1800 audit(1769059520.223:162): pid=7763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.634" name="file1" dev="loop3" ino=257 res=0 errno=0 [ 416.865588][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 416.877234][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.886157][ T9] usb 2-1: Product: syz [ 416.890725][ T9] usb 2-1: Manufacturer: syz [ 416.895858][ T9] usb 2-1: SerialNumber: syz [ 417.067500][ T9] usb 2-1: config 0 descriptor?? [ 417.220427][ T9] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 417.283795][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 417.290291][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 417.370329][ T5797] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 417.387546][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.416780][ T7764] dw2102: i2c wr: len=66 is too big! [ 417.416780][ T7764] [ 417.490301][ T9] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 417.555895][ T9] usb 2-1: media controller created [ 417.595951][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 417.609717][ T9] dw2102: i2c transfer failed. [ 417.687797][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 417.694109][ T9] dw2102: i2c transfer failed. [ 417.748819][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 417.755716][ T9] dw2102: i2c transfer failed. [ 417.813478][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 417.819562][ T9] dw2102: i2c transfer failed. [ 417.872417][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 417.878491][ T9] dw2102: i2c transfer failed. [ 417.919346][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 417.925798][ T9] dw2102: i2c transfer failed. [ 417.930835][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 417.956953][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.642'. [ 418.185914][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 418.246907][ T7808] delete_channel: no stack [ 418.317816][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.721341][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 418.727409][ T9] dw2102: command 0x0e transfer failed. [ 418.771302][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 418.777415][ T9] dw2102: command 0x0e transfer failed. [ 419.101341][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 419.107491][ T9] dw2102: command 0x0e transfer failed. [ 419.196056][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.205698][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.238234][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 419.244880][ T9] dw2102: command 0x0e transfer failed. [ 419.290617][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 419.297078][ T9] dw2102: command 0x51 transfer failed. [ 420.088734][ T7828] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 420.373850][ T7831] netlink: 'syz.2.649': attribute type 17 has an invalid length. [ 420.382406][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 420.909928][ T9] DVB: Unable to find symbol ds3000_attach() [ 420.916507][ T9] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 421.213895][ T5841] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 421.412253][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 421.472136][ T5841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 421.556554][ T5841] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 421.567180][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 421.576036][ T5841] usb 5-1: Product: syz [ 421.580713][ T5841] usb 5-1: Manufacturer: syz [ 421.585903][ T5841] usb 5-1: SerialNumber: syz [ 421.800014][ T5841] usb 5-1: config 0 descriptor?? [ 421.842337][ T7835] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 422.558996][ T5837] usb 5-1: USB disconnect, device number 11 [ 422.960166][ T7843] loop3: detected capacity change from 0 to 32768 [ 423.194108][ T9] rc_core: IR keymap rc-su3000 not found [ 423.201336][ T9] Registered IR keymap rc-empty [ 423.216647][ T7848] netlink: 'syz.0.657': attribute type 3 has an invalid length. [ 423.285944][ T9] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 423.430292][ T9] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 423.652103][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 423.659813][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 423.667147][ T9] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 423.825032][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 423.831201][ T5837] dw2102: i2c transfer failed. [ 423.852894][ T9] usb 2-1: USB disconnect, device number 5 [ 424.111307][ T7853] netlink: 'syz.2.659': attribute type 11 has an invalid length. [ 424.480135][ T9] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 424.877268][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 426.548550][ T7879] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 428.515428][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 428.852196][ T7910] macsec0: entered allmulticast mode [ 428.903109][ T7910] veth1_macvtap: entered allmulticast mode [ 428.909464][ T7910] macsec0: left allmulticast mode [ 428.917441][ T7910] veth1_macvtap: left allmulticast mode [ 429.054604][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.685'. [ 430.335848][ T7936] SQUASHFS error: Failed to read block 0x0: -5 [ 430.888003][ T7942] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 430.915315][ T7946] loop4: detected capacity change from 0 to 512 [ 430.999167][ T7946] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 431.008409][ T7946] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 431.017288][ T7946] System zones: 0-1, 15-15, 18-18, 34-34 [ 431.024484][ T7946] EXT4-fs (loop4): orphan cleanup on readonly fs [ 431.031535][ T7946] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 431.041310][ T7946] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 431.056360][ T7946] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 431.068239][ T7946] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.701: bg 0: block 40: padding at end of block bitmap is not set [ 431.083893][ T7946] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 431.094142][ T7946] EXT4-fs (loop4): 1 truncate cleaned up [ 431.102872][ T7946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.227843][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.412352][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 433.356371][ T7982] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 433.392123][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.717'. [ 434.354203][ T7988] loop3: detected capacity change from 0 to 4096 [ 434.399433][ T7988] EXT4-fs: Ignoring removed bh option [ 434.433758][ T7988] EXT4-fs (loop3): Test dummy encryption mode enabled [ 434.475938][ T7988] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 434.496227][ T7988] System zones: 0-5 [ 434.523852][ T7988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.577839][ T7988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.585667][ T7988] EXT4-fs: can't change dax mount option while remounting [ 434.694185][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.457112][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.728'. [ 435.638218][ T8010] loop3: detected capacity change from 0 to 64 [ 435.910712][ T8010] Trying to free block not in datazone [ 436.553303][ T8019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.595039][ T30] audit: type=1326 audit(1769059540.063:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0b59acb9 code=0x7fc00000 [ 440.825287][ T8063] loop0: detected capacity change from 0 to 256 [ 440.893992][ T8063] exfat: Deprecated parameter 'namecase' [ 441.036448][ T8063] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 441.240349][ T8063] exFAT-fs (loop0): error, in sector 160, dentry 5 should be unused, but 0xc1 [ 441.261178][ C0] hrtimer: interrupt took 332307 ns [ 441.822711][ T5082] Bluetooth: hci2: unexpected event for opcode 0x201c [ 444.033217][ T8103] loop4: detected capacity change from 0 to 256 [ 445.227528][ T8109] loop0: detected capacity change from 0 to 1024 [ 445.390600][ T8109] hfsplus: bad catalog entry type [ 445.634727][ T8117] loop3: detected capacity change from 0 to 128 [ 445.794317][ T8117] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.924506][ T8117] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 446.227835][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 446.470431][ T5797] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.521917][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 446.758047][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.774264][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 446.783818][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.884334][ T9] usb 1-1: config 0 descriptor?? [ 447.468188][ T9] logitech-hidpp-device 0003:046D:C087.0006: item fetching failed at offset 0/3 [ 447.535765][ T9] logitech-hidpp-device 0003:046D:C087.0006: hidpp_probe:parse failed [ 447.546308][ T9] logitech-hidpp-device 0003:046D:C087.0006: probe with driver logitech-hidpp-device failed with error -22 [ 447.704510][ T5841] usb 1-1: USB disconnect, device number 10 [ 447.985061][ T8142] 8021q: VLANs not supported on ipvlan1 [ 448.274139][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 448.592201][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 448.598718][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 448.632960][ T8154] loop4: detected capacity change from 0 to 256 [ 448.647499][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 448.661879][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 448.734717][ T8154] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x961876d8, utbl_chksum : 0xe619d30d) [ 448.938135][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 449.000243][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 449.135024][ T8149] ceph: No mds server is up or the cluster is laggy [ 449.643725][ T8163] loop0: detected capacity change from 0 to 4096 [ 449.721482][ T8163] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 450.091820][ T8163] ntfs3(loop0): Failed to load $Extend (-22). [ 450.152579][ T8163] ntfs3(loop0): Failed to initialize $Extend. [ 450.530265][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 450.539922][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 450.804105][ T9] libceph: connect (1)[c::]:6789 error -101 [ 450.872213][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 450.914166][ T9] libceph: connect (1)[c::]:6789 error -101 [ 450.920562][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 451.274212][ T9] libceph: connect (1)[c::]:6789 error -101 [ 451.312704][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 451.412885][ T8180] ceph: No mds server is up or the cluster is laggy [ 452.075775][ T30] audit: type=1326 audit(1769059555.533:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce219acb9 code=0x7ffc0000 [ 452.181493][ T30] audit: type=1326 audit(1769059555.593:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fdce219acb9 code=0x7ffc0000 [ 452.204807][ T30] audit: type=1326 audit(1769059555.593:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce219acb9 code=0x7ffc0000 [ 452.227951][ T30] audit: type=1326 audit(1769059555.603:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fdce219acb9 code=0x7ffc0000 [ 452.253523][ T30] audit: type=1326 audit(1769059555.613:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce219acb9 code=0x7ffc0000 [ 452.998197][ T8206] loop3: detected capacity change from 0 to 4096 [ 453.167234][ T8206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.503879][ T8206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.514575][ T8218] loop4: detected capacity change from 0 to 256 [ 453.549318][ T8206] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 453.957932][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.383059][ T8228] loop4: detected capacity change from 0 to 32768 [ 455.399780][ T8228] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.819 (8228) [ 455.426823][ T8228] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 455.437671][ T8228] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 455.688494][ T8228] BTRFS info (device loop4): setting nodatasum [ 455.696074][ T8228] BTRFS info (device loop4): enabling ssd optimizations [ 455.703572][ T8228] BTRFS info (device loop4): using spread ssd allocation scheme [ 455.711895][ T8228] BTRFS info (device loop4): disabling tree log [ 455.718473][ T8228] BTRFS info (device loop4): enabling free space tree [ 455.750791][ T8228] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 459.419140][ T8287] loop3: detected capacity change from 0 to 512 [ 460.184020][ T8287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.199334][ T8287] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.758257][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.875878][ T8296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.837'. [ 462.081417][ T5841] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 462.303655][ T8302] loop6: detected capacity change from 0 to 2640 [ 462.314204][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 462.397754][ T8304] loop6: detected capacity change from 2640 to 524288000 [ 462.402548][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.436010][ T5841] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 462.445936][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.454516][ T5841] usb 2-1: Product: syz [ 462.458904][ T5841] usb 2-1: Manufacturer: syz [ 462.463850][ T5841] usb 2-1: SerialNumber: syz [ 462.491784][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.531747][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.584073][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.626782][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.708102][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.764659][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.825647][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.843451][ T8302] ldm_validate_partition_table(): Disk read failed. [ 462.891726][ T5390] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 462.935048][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 462.966458][ T5841] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 462.976339][ T8302] Buffer I/O error on dev loop6, logical block 0, async page read [ 463.025521][ T8302] Dev loop6: unable to read RDB block 0 [ 463.055280][ T8302] loop6: unable to read partition table [ 463.056161][ T5841] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 463.084213][ T5390] usb 5-1: Using ep0 maxpacket: 32 [ 463.087501][ T8302] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 463.116058][ T5082] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 463.123959][ T5082] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 463.156265][ T5841] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 463.173381][ T5390] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 463.185750][ T5390] usb 5-1: config 0 interface 0 has no altsetting 0 [ 463.192952][ T5390] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 463.202542][ T5390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.231842][ T5841] usb 2-1: media controller created [ 463.308223][ T5390] usb 5-1: config 0 descriptor?? [ 463.527811][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.990197][ T5841] zl10353_read_register: readreg error (reg=127, ret==-71) [ 464.336256][ T5390] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 464.347365][ T5390] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 464.356923][ T5390] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 464.365172][ T5390] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 464.373396][ T5390] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 464.692665][ T5390] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 465.148189][ T5841] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 465.229505][ T5390] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -110 [ 465.298307][ T5841] usb 2-1: USB disconnect, device number 6 [ 465.362269][ T5390] usb 5-1: USB disconnect, device number 12 [ 467.244123][ T5082] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 467.253230][ T5082] Bluetooth: hci2: Injecting HCI hardware error event [ 467.263784][ T5791] Bluetooth: hci2: hardware error 0x00 [ 469.321495][ T5791] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 469.391521][ T8334] loop0: detected capacity change from 0 to 32768 [ 469.462588][ T8334] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.853 (8334) [ 469.488584][ T8334] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 469.499288][ T8334] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 469.508368][ T8334] BTRFS error (device loop0): cannot disable free-space-tree [ 469.516261][ T8334] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 469.530996][ T8334] BTRFS error (device loop0): open_ctree failed: -22 [ 469.556389][ T8321] fido_id[8321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 470.189175][ T5791] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 470.222608][ T5791] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 472.352253][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 472.362000][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 473.773044][ T8382] overlay: Unknown parameter '32 [ 473.773044][ T8382] time [ 473.773044][ T8382] string [ 473.773044][ T8382] statistic [ 473.773044][ T8382] state [ 473.773044][ T8382] realm [ 473.773044][ T8382] rateest [ 473.773044][ T8382] quota [ 473.773044][ T8382] pkttype [ 473.773044][ T8382] physdev [ 473.773044][ T8382] cgroup [ 473.773044][ T8382] cgroup [ 473.773044][ T8382] cgroup [ 473.773044][ T8382] owner [ 473.773044][ T8382] nfacct [ 473.773044][ T8382] nfacct [ 473.773044][ T8382] mac [ 473.773044][ T8382] limit [ 473.773044][ T8382] ipvs [ 473.773044][ T8382] helper [ 473.773044][ T8382] devgroup [ 473.773044][ T8382] cpu [ 473.773044][ T8382] conntrack [ 473.773044][ T8382] conntrack [ 473.773044][ T8382] conntrack [ 473.773044][ T8382] connlabel [ 473.773044][ T8382] connbytes [ 473.773044][ T8382] comment [ 473.773044][ T8382] bpf [ 473.773044][ T8382] bpf [ 473.773044][ T8382] connmark [ 473.773044][ T8382] mark [ 473.773044][ T8382] rpfilter [ 473.773044][ T8382] ah [ 473.773044][ T8382] tcpmss [ 473.773044][ T8382] socket [ 473.773044][ T8382] socket [ 473.773044][ T8382] socket [ 473.773044][ T8382] socket [ 473.773044][ T8382] sctp [ 473.773044][ T8382] recent [ 473.773044][ T8382] recent [ 473.773044][ T8382] policy [ 473.773044][ T8382] osf [ 473.773044][ T8382] multiport [ 473.773044][ T8382] length [ 473.773044][ T8382] l2tp [ 473.773044][ T8382] iprange [ 473.773044][ T8382] ipcomp [ 473.773044][ T8382] ttl [ 473.773044][ T8382] hashlimit [ 473.773044][ T8382] hashlimit [ 473.773044][ T8382] hashlimit [ 473.773044][ T8382] esp [ 473.773044][ T8382] ecn [ 473.773044][ T8382] tos [ 473.773044][ T8382] dscp [ 473.773044][ T8382] dccp [ 473.773044][ T8382] connlimit [ 473.773044][ T8382] cluster [ 473.773044][ T8382] addrtype [ 473.773044][ T8382] addrtype [ 473.773044][ T8382] set [ 473.773044][ T8382] set [ 473.773044][ T8382] set [ 473.773044][ T8382] set [ 473.773044][ T8382] set [ 473.773044][ T8382] icmp [ 474.214719][ T5082] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 474.217417][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 474.223881][ T5082] Bluetooth: hci3: Injecting HCI hardware error event [ 474.232548][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 474.232701][ T8385] netlink: 'syz.2.873': attribute type 18 has an invalid length. [ 474.250797][ T5791] Bluetooth: hci3: hardware error 0x00 [ 474.257446][ T8385] netlink: 'syz.2.873': attribute type 18 has an invalid length. [ 474.575652][ T8389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.362904][ T5791] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 476.462430][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 476.835846][ T8410] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 476.977965][ T8415] loop3: detected capacity change from 0 to 16 [ 477.051996][ T8415] erofs (device loop3): mounted with root inode @ nid 36. [ 477.070817][ T5840] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 477.273630][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 477.342389][ T5840] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 477.352660][ T5840] usb 5-1: config 0 has no interface number 0 [ 477.444085][ T5840] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d [ 477.456174][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.465970][ T5840] usb 5-1: Product: syz [ 477.470377][ T5840] usb 5-1: Manufacturer: syz [ 477.475315][ T5840] usb 5-1: SerialNumber: syz [ 477.529531][ T5840] usb 5-1: config 0 descriptor?? [ 477.643014][ T5840] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 477.715222][ T8421] loop0: detected capacity change from 0 to 1024 [ 477.768911][ T8421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 477.927387][ T8421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.206538][ T5787] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 478.244272][ T5840] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 478.251908][ T5840] gspca_pac7302 5-1:0.56: probe with driver gspca_pac7302 failed with error -71 [ 478.310196][ T5787] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 478.324470][ T5840] usb 5-1: USB disconnect, device number 13 [ 478.964022][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.512386][ T8442] xt_hashlimit: size too large, truncated to 1048576 [ 479.642917][ T8443] –: renamed from vxcan1 (while UP) [ 480.081539][ T3451] bridge_slave_0: left allmulticast mode [ 480.087438][ T3451] bridge_slave_0: left promiscuous mode [ 480.094627][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.299682][ T8446] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 480.628823][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.635809][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.228739][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.292130][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.333827][ T3451] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 481.359610][ T3451] bond0 (unregistering): Released all slaves [ 481.378478][ T3451] bond1 (unregistering): Released all slaves [ 481.677839][ T3451] tipc: Left network mode [ 482.008397][ T3451] hsr_slave_0: left promiscuous mode [ 482.023680][ T3451] hsr_slave_1: left promiscuous mode [ 482.045730][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.066635][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.148229][ T8468] Illegal XDP return value 4294967294 on prog (id 69) dev N/A, expect packet loss! [ 483.838955][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 483.880010][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 483.903963][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 483.928693][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 483.943097][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 483.957721][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.004069][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 485.386655][ T8491] pimreg1: tun_chr_ioctl cmd 1074025681 [ 485.608724][ T8490] loop3: detected capacity change from 0 to 32768 [ 485.750765][ T8490] [ 485.750765][ T8490] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 485.750765][ T8490] [ 486.042752][ T5082] Bluetooth: hci1: command tx timeout [ 486.169790][ T1104] read_mapping_page failed! [ 486.174857][ T1104] ERROR: (device loop3): txAbort: [ 486.174857][ T1104] [ 486.261678][ T1104] ERROR: (device loop3): remounting filesystem as read-only [ 486.269348][ T1104] jfs_write_inode: jfs_commit_inode failed! [ 486.335409][ T5797] [ 486.335409][ T5797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.335409][ T5797] [ 486.403392][ T5797] [ 486.403392][ T5797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.403392][ T5797] [ 486.639545][ T3451] IPVS: stop unused estimator thread 0... [ 487.425845][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 487.486259][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 487.493794][ T8506] ceph: No mds server is up or the cluster is laggy [ 487.543064][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 487.586247][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 487.939731][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 488.122438][ T5082] Bluetooth: hci1: command tx timeout [ 489.113726][ T8532] loop3: detected capacity change from 0 to 2048 [ 489.227993][ T8532] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 489.321601][ T8532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.780235][ T5837] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 490.001653][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 490.041038][ T5837] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 490.050822][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.116643][ T5837] usb 5-1: config 0 descriptor?? [ 490.201511][ T5082] Bluetooth: hci1: command tx timeout [ 490.404400][ T5837] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 490.462246][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.556994][ T5837] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 490.591881][ T5837] usb 5-1: media controller created [ 490.916021][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.974434][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.982532][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.019208][ T8475] bridge_slave_0: entered allmulticast mode [ 491.075998][ T8475] bridge_slave_0: entered promiscuous mode [ 491.135378][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.149119][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.234726][ T8475] bridge_slave_1: entered allmulticast mode [ 491.255767][ T5837] az6027: usb out operation failed. (-71) [ 491.287201][ T5837] az6027: usb out operation failed. (-71) [ 491.293361][ T5837] stb0899_attach: Driver disabled by Kconfig [ 491.293499][ T8475] bridge_slave_1: entered promiscuous mode [ 491.305522][ T5837] az6027: no front-end attached [ 491.305522][ T5837] [ 491.381669][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 491.414047][ T5837] az6027: usb out operation failed. (-71) [ 491.420108][ T5837] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 491.497244][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 491.601846][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 491.610584][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 491.619974][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 491.630832][ T9] usb 4-1: config 220 has no interface number 2 [ 491.676381][ T5837] dvb-usb: schedule remote query interval to 400 msecs. [ 491.683998][ T5837] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 491.751589][ T5837] usb 5-1: USB disconnect, device number 14 [ 491.757888][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 491.772182][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 491.779297][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 491.787820][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 491.890312][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 491.942933][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 491.952885][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.961386][ T9] usb 4-1: Product: syz [ 491.965765][ T9] usb 4-1: Manufacturer: syz [ 491.970704][ T9] usb 4-1: SerialNumber: syz [ 492.010107][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.183558][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.282135][ T5082] Bluetooth: hci1: command tx timeout [ 492.380302][ T5837] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 492.440503][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 492.451301][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 492.497440][ T9] usb 4-1: selecting invalid altsetting 0 [ 492.620648][ T9] usb 4-1: selecting invalid altsetting 0 [ 492.628286][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 492.732832][ T9] usb 4-1: USB disconnect, device number 6 [ 492.739460][ T8475] team0: Port device team_slave_0 added [ 492.831549][ T8475] team0: Port device team_slave_1 added [ 493.242411][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.249776][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.276649][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.469258][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.476622][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.503681][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.697296][ T8576] loop3: detected capacity change from 0 to 512 [ 493.755196][ T8576] EXT4-fs: Ignoring removed nobh option [ 493.942605][ T8576] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.935: bg 0: block 5: invalid block bitmap [ 494.053648][ T8576] EXT4-fs (loop3): Remounting filesystem read-only [ 494.060822][ T8576] EXT4-fs (loop3): 2 truncates cleaned up [ 494.095981][ T8475] hsr_slave_0: entered promiscuous mode [ 494.102514][ T8583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.108525][ T8475] hsr_slave_1: entered promiscuous mode [ 494.167006][ T8576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.750662][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.026910][ T8475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 497.224951][ T8475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 497.352733][ T8475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 497.453404][ T8475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 499.291010][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.662551][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.835202][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.843263][ T6051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.029660][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.037742][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.552321][ T8646] loop4: detected capacity change from 0 to 64 [ 501.902792][ T8662] loop4: detected capacity change from 0 to 16 [ 503.156242][ T8675] loop4: detected capacity change from 0 to 512 [ 503.283919][ T8675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.964185][ T8475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.025515][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.675136][ T8688] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 505.837795][ T5840] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 506.055567][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 506.099563][ T5840] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 506.108875][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.122792][ T5840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.207932][ T5840] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.217661][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.231332][ T5840] usb 5-1: Product: syz [ 506.235919][ T5840] usb 5-1: Manufacturer: syz [ 506.240751][ T5840] usb 5-1: SerialNumber: syz [ 506.872787][ T5840] usb 5-1: 0:2 : does not exist [ 507.346618][ T5840] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 507.604944][ T8475] veth0_vlan: entered promiscuous mode [ 507.622749][ T5840] usb 5-1: USB disconnect, device number 15 [ 507.819535][ T8475] veth1_vlan: entered promiscuous mode [ 507.866177][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.610285][ T8475] veth0_macvtap: entered promiscuous mode [ 508.742452][ T8475] veth1_macvtap: entered promiscuous mode [ 508.797372][ T8738] loop4: detected capacity change from 0 to 128 [ 508.983420][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.997094][ T8738] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 509.015858][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.110973][ T8738] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 509.315501][ T8738] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10) [ 509.352025][ T6051] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.481830][ T6051] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.579789][ T6051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.629338][ T6051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.770914][ T5794] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.264853][ T8758] loop4: detected capacity change from 0 to 16 [ 510.327971][ T8758] erofs (device loop4): mounted with root inode @ nid 36. [ 510.501696][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 510.824712][ T5840] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 510.835216][ T5840] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 510.846437][ T5840] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 510.857753][ T5840] usb 2-1: config 220 has no interface number 2 [ 510.984754][ T5840] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 510.998887][ T5840] usb 2-1: config 220 interface 0 has no altsetting 0 [ 511.006183][ T5840] usb 2-1: config 220 interface 76 has no altsetting 0 [ 511.013693][ T5840] usb 2-1: config 220 interface 1 has no altsetting 0 [ 511.134252][ T5840] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 511.149740][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.159015][ T5840] usb 2-1: Product: syz [ 511.163602][ T5840] usb 2-1: Manufacturer: syz [ 511.168533][ T5840] usb 2-1: SerialNumber: syz [ 511.522440][ T5840] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 511.530437][ T5840] uvcvideo 2-1:220.0: No valid video chain found. [ 511.614527][ T5840] usb 2-1: selecting invalid altsetting 0 [ 511.822553][ T5840] usb 2-1: selecting invalid altsetting 0 [ 511.828760][ T5840] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 511.838381][ T8770] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 511.915442][ T5840] usb 2-1: USB disconnect, device number 7 [ 512.345253][ T5390] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 512.550483][ T8780] usb usb8: usbfs: process 8780 (syz.3.998) did not claim interface 0 before use [ 512.561475][ T5390] usb 5-1: Using ep0 maxpacket: 8 [ 512.621833][ T5390] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 512.686134][ T5390] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 512.696215][ T5390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.704931][ T5390] usb 5-1: Product: syz [ 512.709419][ T5390] usb 5-1: Manufacturer: syz [ 512.714432][ T5390] usb 5-1: SerialNumber: syz [ 512.791593][ T5390] usb 5-1: config 0 descriptor?? [ 512.848998][ T5390] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 512.936224][ T5390] usb 5-1: setting power ON [ 512.950196][ T5390] dvb-usb: bulk message failed: -22 (2/0) [ 513.017001][ T5390] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.064321][ T8774] dvb-usb: bulk message failed: -22 (3/0) [ 513.096940][ T8774] dvb-usb: bulk message failed: -22 (4/0) [ 513.107380][ T5390] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 513.127466][ T5840] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 513.186838][ T5390] usb 5-1: media controller created [ 513.398064][ T5840] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 513.407048][ T5840] usb 2-1: config 0 has no interface number 0 [ 513.449480][ T5390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.478048][ T5840] usb 2-1: too many endpoints for config 0 interface 84 altsetting 105: 77, using maximum allowed: 30 [ 513.516594][ T5840] usb 2-1: config 0 interface 84 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 513.533345][ T5840] usb 2-1: config 0 interface 84 has no altsetting 0 [ 513.540543][ T5840] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 513.550301][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.767440][ T5840] usb 2-1: config 0 descriptor?? [ 513.857753][ T5390] usb 5-1: selecting invalid altsetting 6 [ 513.864481][ T5390] usb 5-1: digital interface selection failed (-22) [ 513.871601][ T5390] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 513.898244][ T5390] usb 5-1: setting power OFF [ 513.908841][ T5390] dvb-usb: bulk message failed: -22 (2/0) [ 513.917109][ T5390] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 513.926977][ T5390] (NULL device *): no alternate interface [ 514.095167][ T5840] usb 2-1: language id specifier not provided by device, defaulting to English [ 514.340626][ T5840] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 514.498612][ T5840] usb 2-1: USB disconnect, device number 8 [ 514.788826][ T5390] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 514.902281][ T5390] usb 5-1: USB disconnect, device number 16 [ 515.581584][ T5390] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 515.806344][ T5390] usb 5-1: Using ep0 maxpacket: 16 [ 515.837301][ T5390] usb 5-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.852542][ T5390] usb 5-1: config 0 interface 0 has no altsetting 0 [ 515.859464][ T5390] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 515.869808][ T5390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.989878][ T5390] usb 5-1: config 0 descriptor?? [ 516.327557][ T8808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.363972][ T8808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.176279][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.186144][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.193927][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.201197][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.208546][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.215791][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.222984][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.230011][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.237238][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.244473][ T5390] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.269282][ T8826] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 517.828121][ T5390] kye 0003:0458:0138.0008: unexpected long global item [ 517.979388][ T5390] kye 0003:0458:0138.0008: parse failed [ 517.985884][ T5390] kye 0003:0458:0138.0008: probe with driver kye failed with error -22 [ 518.164733][ T5390] usb 5-1: USB disconnect, device number 17 [ 520.073022][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.081327][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.475206][ T6065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.483649][ T6065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.258353][ T5390] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 522.452327][ T5390] usb 2-1: Using ep0 maxpacket: 32 [ 522.562213][ T5390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.574024][ T5390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.584454][ T5390] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 522.594186][ T5390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.706490][ T5390] usb 2-1: config 0 descriptor?? [ 522.804545][ T5390] hub 2-1:0.0: USB hub found [ 523.149741][ T8868] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 523.907791][ T9] libceph: connect (1)[c::]:6789 error -101 [ 523.956447][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 523.999587][ T9] libceph: connect (1)[c::]:6789 error -101 [ 524.051949][ T5390] hub 2-1:0.0: 1 port detected [ 524.082137][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 524.210579][ T8871] ceph: No mds server is up or the cluster is laggy [ 524.372943][ T9] libceph: connect (1)[c::]:6789 error -101 [ 525.668328][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 526.175315][ T5390] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 526.247616][ T5390] usb 2-1: USB disconnect, device number 9 [ 526.930775][ T8895] netlink: 'syz.4.1031': attribute type 21 has an invalid length. [ 526.939289][ T8895] netlink: 14378 bytes leftover after parsing attributes in process `syz.4.1031'. [ 527.051007][ T8883] loop3: detected capacity change from 0 to 4096 [ 527.224003][ T8897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1032'. [ 529.210799][ T8918] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 529.847412][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 530.108592][ T5082] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 531.152990][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'. [ 531.165744][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'. [ 531.257977][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'. [ 531.267385][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'. [ 532.303386][ T8944] loop4: detected capacity change from 0 to 32768 [ 532.313956][ T8944] btrfs: Deprecated parameter 'usebackuproot' [ 532.320722][ T8944] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 532.344753][ T8944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1048 (8944) [ 532.405229][ T8944] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.417114][ T8944] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 532.740954][ T1082] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 532.759899][ T8944] BTRFS error (device loop4): failed to load root extent [ 532.773296][ T8944] BTRFS warning (device loop4): try to load backup roots slot 1 [ 532.827748][ T1082] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 532.843097][ T8944] BTRFS warning (device loop4): couldn't read tree root [ 532.855188][ T8944] BTRFS warning (device loop4): try to load backup roots slot 2 [ 532.886623][ T1082] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 532.898655][ T8944] BTRFS warning (device loop4): couldn't read tree root [ 532.906389][ T8944] BTRFS warning (device loop4): try to load backup roots slot 3 [ 532.980225][ T8944] BTRFS info (device loop4): rebuilding free space tree [ 533.024356][ T8944] BTRFS info (device loop4): checking UUID tree [ 533.033199][ T8944] BTRFS info (device loop4): enabling ssd optimizations [ 533.040656][ T8944] BTRFS info (device loop4): turning off barriers [ 533.047841][ T8944] BTRFS info (device loop4): turning on sync discard [ 533.059710][ T8944] BTRFS info (device loop4): enabling free space tree [ 533.067214][ T8944] BTRFS info (device loop4): force clearing of disk cache [ 533.074724][ T8944] BTRFS info (device loop4): enabling auto defrag [ 533.081549][ T8944] BTRFS info (device loop4): trying to use backup root at mount time [ 533.089847][ T8944] BTRFS info (device loop4): use zstd compression, level 3 [ 533.174069][ T30] audit: type=1800 audit(1769059636.643:169): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1048" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 533.983780][ T5794] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 534.122813][ T5082] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 534.132228][ T5082] Bluetooth: hci1: Injecting HCI hardware error event [ 534.142634][ T5791] Bluetooth: hci1: hardware error 0x00 [ 535.570054][ T8993] loop5: detected capacity change from 0 to 4096 [ 535.594321][ T8985] loop3: detected capacity change from 0 to 8192 [ 535.617987][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 535.628247][ T8993] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 536.190958][ T8993] ntfs3(loop5): ino=19, mi_enum_attr [ 536.197190][ T8993] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 536.212142][ T5791] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 540.040628][ T9035] loop3: detected capacity change from 0 to 16 [ 540.145479][ T9035] erofs (device loop3): mounted with root inode @ nid 36. [ 540.331381][ T9035] erofs (device loop3): corrupted dir block 8200 @ nid 36 [ 540.394312][ T9035] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 540.436895][ T9035] erofs (device loop3): readahead error at folio 9 @ nid 36 [ 540.523913][ T9035] syz.3.1072: attempt to access beyond end of device [ 540.523913][ T9035] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 540.680503][ T9035] syz.3.1072: attempt to access beyond end of device [ 540.680503][ T9035] loop3: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 541.389439][ T9037] loop4: detected capacity change from 0 to 4096 [ 542.069555][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.076784][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.131978][ T9070] loop4: detected capacity change from 0 to 1024 [ 544.163146][ T9070] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 544.173698][ T9070] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 544.214906][ T9070] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 544.282122][ T9070] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: inode #32: comm syz.4.1083: iget: special inode unallocated [ 544.323491][ T9070] EXT4-fs (loop4): no journal found [ 544.335977][ T9070] EXT4-fs (loop4): can't get journal size [ 544.406809][ T9070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.862603][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.959690][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.274123][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 547.292760][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 547.309180][ T9098] tipc: Started in network mode [ 547.315630][ T9098] tipc: Node identity ac141441, cluster identity 4711 [ 547.372456][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 547.404459][ T9098] tipc: Enabling of bearer rejected, failed to enable media [ 547.513319][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 547.644443][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 548.951617][ T5840] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 549.181381][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 549.248982][ T5840] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 549.258771][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.372985][ T5840] usb 4-1: config 0 descriptor?? [ 549.380179][ T9096] chnl_net:caif_netlink_parms(): no params data found [ 549.418907][ T5840] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 549.762846][ T5082] Bluetooth: hci5: command tx timeout [ 550.273504][ T5840] gspca_vc032x: reg_w err -71 [ 550.278652][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.284647][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.290128][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.295757][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.301651][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.307116][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.313420][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.318876][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.324725][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.330208][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.335980][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.341926][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.347591][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.353340][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.364542][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.370274][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.379867][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.385842][ T5840] gspca_vc032x: I2c Bus Busy Wait 00 [ 550.391705][ T5840] gspca_vc032x: Unknown sensor... [ 550.397210][ T5840] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 550.707363][ T5840] usb 4-1: USB disconnect, device number 7 [ 551.642984][ T9135] netlink: 'syz.3.1101': attribute type 2 has an invalid length. [ 551.801885][ T5082] Bluetooth: hci5: command tx timeout [ 552.366380][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.375880][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.461786][ T9096] bridge_slave_0: entered allmulticast mode [ 552.485632][ T9096] bridge_slave_0: entered promiscuous mode [ 552.716586][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.724842][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.778281][ T9096] bridge_slave_1: entered allmulticast mode [ 552.821981][ T9096] bridge_slave_1: entered promiscuous mode [ 553.645944][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.903616][ T5082] Bluetooth: hci5: command tx timeout [ 553.967821][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.703050][ T9096] team0: Port device team_slave_0 added [ 554.709789][ T58] bridge_slave_1: left allmulticast mode [ 554.720901][ T58] bridge_slave_1: left promiscuous mode [ 554.727876][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.063556][ T9173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 555.768056][ T9181] could not open pipe file descriptor [ 555.918060][ T9096] team0: Port device team_slave_1 added [ 555.962326][ T5082] Bluetooth: hci5: command tx timeout [ 556.424833][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.433677][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.460789][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.676791][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.684861][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.712015][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.510881][ T9096] hsr_slave_0: entered promiscuous mode [ 557.536071][ T9096] hsr_slave_1: entered promiscuous mode [ 557.585478][ T9096] debugfs: 'hsr0' already exists in 'hsr' [ 557.591680][ T9096] Cannot create hsr debugfs directory [ 557.713575][ T58] hsr_slave_0: left promiscuous mode [ 557.765027][ T58] hsr_slave_1: left promiscuous mode [ 557.803733][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.855368][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.852051][ T5840] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 559.111827][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.124547][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 559.136174][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 559.146748][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 559.160502][ T5840] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 559.172811][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.521493][ T5840] usb 4-1: config 0 descriptor?? [ 560.004646][ T58] team0 (unregistering): Port device team_slave_1 removed [ 560.130911][ T5840] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 560.164325][ T58] team0 (unregistering): Port device team_slave_0 removed [ 562.280579][ T5837] usb 4-1: USB disconnect, device number 8 [ 564.894428][ T9250] loop3: detected capacity change from 0 to 764 [ 565.018191][ T9250] Symlink component flag not implemented [ 565.024382][ T9250] Symlink component flag not implemented [ 565.030460][ T9250] Symlink component flag not implemented (128) [ 565.036968][ T9250] Symlink component flag not implemented (122) [ 566.794620][ T9096] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 566.885395][ T9096] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 566.920929][ T9096] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 566.982760][ T9096] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 569.513653][ T9278] loop5: detected capacity change from 0 to 32768 [ 569.618415][ T9278] JBD2: Ignoring recovery information on journal [ 569.796282][ T9278] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 569.875703][ T9278] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 569.896291][ T9278] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 569.907787][ T9278] OCFS2: File system is now read-only. [ 569.913755][ T9278] (syz.5.1149,9278,0):ocfs2_trim_mainbm:7631 ERROR: status = -30 [ 570.118712][ T5840] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 570.154387][ T8475] ocfs2: Unmounting device (7,5) on (node local) [ 570.322375][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.378415][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.430049][ T5840] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 570.534188][ T5840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.543945][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.552684][ T5840] usb 5-1: Product: syz [ 570.557087][ T5840] usb 5-1: Manufacturer: syz [ 570.562085][ T5840] usb 5-1: SerialNumber: syz [ 570.696665][ T9298] tipc: Enabled bearer , priority 10 [ 570.772334][ T9096] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.954713][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.962610][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.032997][ T9289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.117669][ T9289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.200193][ T5840] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 571.218804][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.226733][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.305758][ T5840] usb 5-1: USB disconnect, device number 18 [ 571.379395][ T5957] udevd[5957]: setting mode of /dev/bus/usb/005/018 to 020664 failed: No such file or directory [ 571.499864][ T5957] udevd[5957]: setting owner of /dev/bus/usb/005/018 to uid=0, gid=0 failed: No such file or directory [ 571.817404][ T5840] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 571.855687][ T5837] tipc: Node number set to 2886997057 [ 572.051405][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 572.108478][ T5840] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 572.117344][ T5840] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 572.241483][ T5840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 572.252051][ T5840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 572.262338][ T5840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 572.275521][ T5840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 572.288049][ T5840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25191, setting to 1024 [ 572.299937][ T5840] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 572.309749][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.616019][ T9314] loop3: detected capacity change from 0 to 512 [ 572.718917][ T9314] EXT4-fs: Ignoring removed i_version option [ 572.726337][ T9314] EXT4-fs: Ignoring removed bh option [ 572.769340][ T9309] loop5: detected capacity change from 0 to 32768 [ 572.784699][ T9309] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1158 (9309) [ 572.807700][ T9309] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 572.872869][ T9309] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 573.162998][ T5840] usb 5-1: can't set config #16, error -71 [ 573.195309][ T5840] usb 5-1: USB disconnect, device number 19 [ 573.207606][ T9309] BTRFS info (device loop5): allowing degraded mounts [ 573.215055][ T9309] BTRFS info (device loop5): enabling free space tree [ 573.222295][ T9309] BTRFS info (device loop5): enabling auto defrag [ 573.228944][ T9309] BTRFS info (device loop5): force zstd compression, level 3 [ 573.254033][ T9314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.293800][ T30] audit: type=1800 audit(1769059676.763:170): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1158" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 573.337998][ T9309] BTRFS error (device loop5): balance: mixed groups data and metadata options must be the same [ 573.413217][ T9314] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.984700][ T8475] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 574.164109][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.810413][ T9345] loop3: detected capacity change from 0 to 32768 [ 575.885051][ T9345] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.349801][ T9345] XFS (loop3): Ending clean mount [ 576.406428][ T9345] XFS (loop3): Quotacheck needed: Please wait. [ 576.548516][ T9345] XFS (loop3): Quotacheck: Done. [ 576.608243][ T30] audit: type=1800 audit(1769059680.073:171): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1164" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 576.753341][ T9364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 576.762949][ T9364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 576.957111][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.110681][ T9364] gretap0: entered promiscuous mode [ 577.124454][ T5797] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 577.169835][ T9364] ipvlan0: entered promiscuous mode [ 577.854338][ T9364] ipvlan0: left promiscuous mode [ 577.892456][ T9364] gretap0: left promiscuous mode [ 582.524536][ T9398] loop5: detected capacity change from 0 to 32768 [ 582.556549][ T9398] (syz.5.1175,9398,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 582.574989][ T9096] veth0_vlan: entered promiscuous mode [ 582.584777][ T9398] (syz.5.1175,9398,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 582.650978][ T9398] JBD2: Ignoring recovery information on journal [ 582.806103][ T9096] veth1_vlan: entered promiscuous mode [ 582.844146][ T9398] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 583.565349][ T9409] loop4: detected capacity change from 0 to 1024 [ 583.717897][ T8475] ocfs2: Unmounting device (7,5) on (node local) [ 583.865144][ T9409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.969386][ T9096] veth0_macvtap: entered promiscuous mode [ 584.083290][ T9096] veth1_macvtap: entered promiscuous mode [ 584.167278][ T9409] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.1178: inode #808464432: comm syz.4.1178: iget: illegal inode # [ 584.304963][ T9409] EXT4-fs (loop4): Remounting filesystem read-only [ 584.356568][ T9409] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.4.1178: cleanup dec ref error -30 [ 584.417268][ T9409] EXT4-fs warning (device loop4): ext4_xattr_block_set:2200: inode #19: comm syz.4.1178: dec ref error=-30 [ 584.594900][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.850572][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.948638][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.042792][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.181339][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.234775][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.295984][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.824718][ T9439] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1179'. [ 587.623207][ T9446] program syz.5.1188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.188592][ T9452] loop3: detected capacity change from 0 to 2048 [ 588.296721][ T9452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.416297][ T9452] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.804273][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1192'. [ 589.284587][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.997693][ T9478] nbd: device at index 3 is going down [ 590.913042][ T6065] ===================================================== [ 590.920303][ T6065] BUG: KMSAN: uninit-value in gsmld_receive_buf+0x558/0x5d0 [ 590.928569][ T6065] gsmld_receive_buf+0x558/0x5d0 [ 590.934082][ T6065] tty_ldisc_receive_buf+0x1f7/0x2c0 [ 590.939642][ T6065] tty_port_default_receive_buf+0xd7/0x1a0 [ 590.946059][ T6065] flush_to_ldisc+0x43e/0xe40 [ 590.951271][ T6065] process_scheduled_works+0xb03/0x1da0 [ 590.957132][ T6065] worker_thread+0xede/0x1590 [ 590.962269][ T6065] kthread+0xd5a/0xf00 [ 590.966727][ T6065] ret_from_fork+0x207/0x6f0 [ 590.971661][ T6065] ret_from_fork_asm+0x1a/0x30 [ 590.976656][ T6065] [ 590.979077][ T6065] Uninit was created at: [ 590.983856][ T6065] __kmalloc_noprof+0xae9/0x1c00 [ 590.989091][ T6065] __tty_buffer_request_room+0x3d4/0x7a0 [ 590.995215][ T6065] __tty_insert_flip_string_flags+0x157/0x6f0 [ 591.001725][ T6065] uart_insert_char+0x368/0x930 [ 591.006822][ T6065] serial8250_read_char+0x1ba/0x670 [ 591.015291][ T6065] serial8250_handle_irq+0x930/0x1110 [ 591.020923][ T6065] serial8250_default_handle_irq+0x116/0x370 [ 591.027901][ T6065] serial8250_interrupt+0xcb/0x420 [ 591.033509][ T6065] __handle_irq_event_percpu+0x118/0xec0 [ 591.039394][ T6065] handle_irq_event+0xe0/0x2a0 [ 591.044541][ T6065] handle_edge_irq+0x2a9/0xb50 [ 591.049609][ T6065] __common_interrupt+0x9d/0x180 [ 591.054925][ T6065] common_interrupt+0x94/0xb0 [ 591.059956][ T6065] asm_common_interrupt+0x2b/0x40 [ 591.065429][ T6065] [ 591.068140][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(voluntary) [ 591.079160][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.089792][ T6065] Workqueue: events_unbound flush_to_ldisc [ 591.096095][ T6065] ===================================================== [ 591.103407][ T6065] Disabling lock debugging due to kernel taint [ 591.109768][ T6065] Kernel panic - not syncing: kmsan.panic set ... [ 591.116434][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: kworker/u8:16 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 591.128219][ T6065] Tainted: [B]=BAD_PAGE [ 591.132500][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.142818][ T6065] Workqueue: events_unbound flush_to_ldisc [ 591.149190][ T6065] Call Trace: [ 591.152678][ T6065] [ 591.155714][ T6065] __dump_stack+0x26/0x30 [ 591.160251][ T6065] dump_stack_lvl+0x50/0x1c0 [ 591.165182][ T6065] ? dump_stack+0x12/0x25 [ 591.169865][ T6065] dump_stack+0x1e/0x25 [ 591.174243][ T6065] vpanic+0x435/0xd40 [ 591.178660][ T6065] panic+0x15d/0x160 [ 591.182902][ T6065] kmsan_report+0x31a/0x320 [ 591.187817][ T6065] ? update_misfit_status+0x32/0xa90 [ 591.193529][ T6065] ? __msan_warning+0x1b/0x30 [ 591.198469][ T6065] ? gsmld_receive_buf+0x558/0x5d0 [ 591.203947][ T6065] ? tty_ldisc_receive_buf+0x1f7/0x2c0 [ 591.209846][ T6065] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 591.216097][ T6065] ? flush_to_ldisc+0x43e/0xe40 [ 591.221295][ T6065] ? process_scheduled_works+0xb03/0x1da0 [ 591.227221][ T6065] ? worker_thread+0xede/0x1590 [ 591.232300][ T6065] ? kthread+0xd5a/0xf00 [ 591.236845][ T6065] ? ret_from_fork+0x207/0x6f0 [ 591.241797][ T6065] ? ret_from_fork_asm+0x1a/0x30 [ 591.246970][ T6065] ? __set_next_task_fair+0x29b/0x6d0 [ 591.252525][ T6065] ? kmsan_get_metadata+0xf1/0x160 [ 591.257895][ T6065] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 591.264484][ T6065] ? kmsan_get_metadata+0xf1/0x160 [ 591.269853][ T6065] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 591.275967][ T6065] ? psi_group_change+0xf8c/0x1430 [ 591.281428][ T6065] ? kmsan_get_metadata+0xf1/0x160 [ 591.286923][ T6065] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 591.293009][ T6065] ? kmsan_get_metadata+0xf1/0x160 [ 591.298543][ T6065] ? __pfx_gsm1_receive+0x10/0x10 [ 591.303822][ T6065] __msan_warning+0x1b/0x30 [ 591.308562][ T6065] gsmld_receive_buf+0x558/0x5d0 [ 591.313762][ T6065] ? kmsan_get_metadata+0xf1/0x160 [ 591.319142][ T6065] tty_ldisc_receive_buf+0x1f7/0x2c0 [ 591.324700][ T6065] ? __pfx_gsmld_receive_buf+0x10/0x10 [ 591.330427][ T6065] tty_port_default_receive_buf+0xd7/0x1a0 [ 591.336540][ T6065] flush_to_ldisc+0x43e/0xe40 [ 591.341529][ T6065] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 591.348474][ T6065] ? __pfx_flush_to_ldisc+0x10/0x10 [ 591.354093][ T6065] process_scheduled_works+0xb03/0x1da0 [ 591.359967][ T6065] worker_thread+0xede/0x1590 [ 591.364936][ T6065] kthread+0xd5a/0xf00 [ 591.369269][ T6065] ? __pfx_worker_thread+0x10/0x10 [ 591.374708][ T6065] ? __pfx_kthread+0x10/0x10 [ 591.379536][ T6065] ret_from_fork+0x207/0x6f0 [ 591.384514][ T6065] ? __switch_to+0x521/0x750 [ 591.389580][ T6065] ? __pfx_kthread+0x10/0x10 [ 591.394440][ T6065] ret_from_fork_asm+0x1a/0x30 [ 591.399585][ T6065] [ 591.403428][ T6065] Kernel Offset: disabled [ 591.407826][ T6065] Rebooting in 86400 seconds..