last executing test programs: 3.814811122s ago: executing program 3 (id=363): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, &(0x7f00000000c0), 0x4) 3.682097436s ago: executing program 3 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 3.527554494s ago: executing program 3 (id=366): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) pwrite64(r0, &(0x7f0000000340)="bf", 0x1, 0x8007) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 3.208445871s ago: executing program 3 (id=369): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) shutdown(r0, 0x0) listen(r0, 0x10000) 3.068785308s ago: executing program 1 (id=371): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x800) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 2.533918512s ago: executing program 0 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 2.503680957s ago: executing program 3 (id=377): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0xc00, 0x12122, 0x0, 0x0) 2.266601196s ago: executing program 2 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x25}, 0x4814) 2.204515638s ago: executing program 3 (id=380): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000002b40)={{0x12, 0x1, 0x300, 0x23, 0x20, 0xd7, 0x40, 0x10b8, 0x1f9c, 0x692a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x14, 0x3, 0x20, 0xa, [{{0x9, 0x4, 0xac, 0x1, 0x0, 0xde, 0x82, 0x32}}]}}]}}, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000009600)={0x14, 0x0, &(0x7f00000095c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000009a00)={0x14, 0x0, 0x0}, &(0x7f0000009c40)={0x44, &(0x7f0000009a40)={0x0, 0x5, 0x5, "ed9efd8eb1"}, 0x0, 0x0, &(0x7f0000009b00)={0x20, 0x80, 0x1c, {0x0, 0x9, 0x80, 0x3, 0x2000, 0x1ff, 0x6e80, 0x8001, 0x8, 0x8, 0x35f, 0x8001}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000125c0)={0x2c, &(0x7f0000012300)={0x40, 0x15, 0x27, "e8188cb50fe26def81a0d6e75d66e6aee5900b7c35a434fb81cd91b7840f5b3dd7e4804a269ab0"}, 0x0, 0x0, 0x0, 0x0}) 2.123894028s ago: executing program 0 (id=381): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000005c0)={@rand_addr=' \x01\x00', 0x36, r2}) 1.931493286s ago: executing program 2 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r0, &(0x7f0000000580)}, 0x20) 1.901574743s ago: executing program 0 (id=383): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 1.869288956s ago: executing program 4 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.732210321s ago: executing program 2 (id=386): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b1a, &(0x7f0000000040)) 1.661763211s ago: executing program 0 (id=387): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xfffffffffffffd68, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) 1.653296057s ago: executing program 5 (id=388): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 1.651670969s ago: executing program 4 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) 1.449143894s ago: executing program 5 (id=390): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9, 0x0, @opaque='\"'}}}}}, 0x0) 1.421242445s ago: executing program 1 (id=391): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0x1, 0x8, 0x7ff}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.357493193s ago: executing program 2 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) 1.356971375s ago: executing program 4 (id=393): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000013"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) 1.322581058s ago: executing program 0 (id=394): unshare(0x20000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 1.186860449s ago: executing program 5 (id=395): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 1.139690792s ago: executing program 4 (id=396): open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) 1.123855297s ago: executing program 2 (id=397): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x808, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x484, &(0x7f0000000f40)="$eJzs3MtvVNUfAPDvvZ2Wlsev/BAfIGgVjMRHS8tDFiZGo4kLjSa6wLiq00KQAgZqIoQousAYF4bEvXFp4l/gSjdGXZm4xb0hIYYN6GrMnXsvbaczpS3Tzuh8Psllzrn3Dud859wzPfecmQmgZ41k/yQRmyPiakQMR0Sl8YSR/OHWjYvVv25crCZRq73xZ5I9LW7euFgt/ov6ltmU76jVivyGJuVefjticmZm+myRH5s99d7YufMXnj5xavL49PHp0xNHjhw8sHvg8MShtsSZxXVz54dndu14+a0rr1aPXnnn52+z+m4ujpdxtNNI/uo29Vi7C+uwLfPSSaWDFWFFsnbrL7arMRx9MXT72HC89ElHKwestUqzv8+FSzXgPywbqAO9qPxDn93/lts6jTu6wvXn8wmPLO5bxZYfqURanNPfcH/bToMRcfTS319lW6zRPAQAwHzfZ+Ofp5qN/9K4b955/yvWULZGxP8jYltE3BMR2yPi3oj6ufdHxAMrLL9xhWTx+Ce9tiBb61thCUvLxn/PFmtbC8d/5egvtvYVuS31+PuTYydmpvcXr8m+6N+Q5ccXPGWhH1787YvGfZ8X0+wj88Z/2ZaVvzDC9FrjBN3U5Ozk3Ueeu/5xxM5Ks/iT2+uASUTsiIidqyzjxBPf7Gp1rFn8xVh4iWnJQhvWmWpfRzyet/+laIi/lLRcnxx/5vDEobHBmJneP1ZeFYv98uvl11uVv0T86yJr/41Nr/88/uweMRmMOHf+wsn6eu25VRTy+6fVpMWh7XeMf/H1X90bMZC8WU8PlGcVjwPJK9nDULn/g8nZ2bMTc88t8/XH8Tz+fXvm4p+Muf6/bV5HfDAisot4d0Q8FBEPF233SEQ8GhF7lgj/pxf2vtvqWOv2v/Pl3w5Z/FNLtH/2lpel5tp/5Ym+kz9+16r82rLa/2A9ta/Ys5z3v+VW8G5eOwAAAPi3SOufgU/S0dvpNB0dzT/Dvz02ppWIePLYmfdPT+Wfld8a/Wk50zU8bz50vJgbLvMTDfkDxbzxl31D9fxo9czMVKeDhx63qUX/z/zR3qUWoBv5vhb0Lv0fepf+D71L/4fe9dyyzhpY83oA66xFt/5ovesBdMTKx/+Da1IPYP25/4fepf9D79L/oSe1/G58usyv/A/Fan8WoBsTle6oRtPEUHdUo0xE2hXVaF/itc/yLtEt9SkTlWX/mMUqExuaHur0OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB7/BMAAP//7e7ZPQ==") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 1.022185212s ago: executing program 0 (id=398): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x1, 0xa01, 0x0, 0x0}, {0xfff8, 0x1a01, 0x0, 0x0}], 0x2}) 914.87108ms ago: executing program 5 (id=399): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x80000000}) 878.034031ms ago: executing program 4 (id=400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) 741.846667ms ago: executing program 1 (id=401): setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 714.288798ms ago: executing program 5 (id=402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000080000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 495.000073ms ago: executing program 1 (id=403): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x12e64, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xfffff800}, 0x1c) 420.560949ms ago: executing program 5 (id=404): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r0, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9) 420.266114ms ago: executing program 4 (id=405): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 253.676943ms ago: executing program 2 (id=406): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8005, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) 213.034322ms ago: executing program 1 (id=407): socket$inet6(0xa, 0x80002, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0) unshare(0x6020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x2, 0x7ffffffffffffbff, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0xb962, 0xffffffffffffffec, 0x0, 0x0, 0x200000, 0x4, 0x6}, &(0x7f0000000280), 0x0) 0s ago: executing program 1 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) kernel console output (not intermixed with test programs): [ 101.822157][ T842] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 108.826757][ T5827] cgroup: Unknown subsys name 'net' [ 109.005132][ T5827] cgroup: Unknown subsys name 'cpuset' [ 109.015920][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 110.878180][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.567008][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.592548][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.601341][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.604394][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.610832][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.619159][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.625433][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.637709][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.645929][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.650296][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.654303][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.668417][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.670623][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.690029][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.700345][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.710441][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.731248][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.733381][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.758045][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.765450][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.773405][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.781127][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.781349][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.796767][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.804365][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.808580][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.819993][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.829842][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.883443][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.891829][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.682383][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 116.898914][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 116.990563][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 117.068419][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 117.256974][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.267581][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.275366][ T5854] bridge_slave_0: entered allmulticast mode [ 117.284207][ T5854] bridge_slave_0: entered promiscuous mode [ 117.293842][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 117.370805][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.378206][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.386234][ T5854] bridge_slave_1: entered allmulticast mode [ 117.395030][ T5854] bridge_slave_1: entered promiscuous mode [ 117.403604][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 117.530877][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.538072][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.546415][ T5849] bridge_slave_0: entered allmulticast mode [ 117.555053][ T5849] bridge_slave_0: entered promiscuous mode [ 117.572016][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.579268][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.588285][ T5857] bridge_slave_0: entered allmulticast mode [ 117.597063][ T5857] bridge_slave_0: entered promiscuous mode [ 117.643688][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.650968][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.658335][ T5849] bridge_slave_1: entered allmulticast mode [ 117.667265][ T5849] bridge_slave_1: entered promiscuous mode [ 117.726323][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.734004][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.741956][ T5857] bridge_slave_1: entered allmulticast mode [ 117.751001][ T5857] bridge_slave_1: entered promiscuous mode [ 117.761613][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.775355][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.820694][ T5851] Bluetooth: hci2: command tx timeout [ 117.898996][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.907981][ T5851] Bluetooth: hci0: command tx timeout [ 117.908443][ T5864] Bluetooth: hci3: command tx timeout [ 117.913878][ T5851] Bluetooth: hci4: command tx timeout [ 117.919459][ T5859] Bluetooth: hci1: command tx timeout [ 117.931141][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.938283][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.947177][ T5847] bridge_slave_0: entered allmulticast mode [ 117.955028][ T5847] bridge_slave_0: entered promiscuous mode [ 117.980214][ T5864] Bluetooth: hci5: command tx timeout [ 118.029319][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.058034][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.066182][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.073630][ T5847] bridge_slave_1: entered allmulticast mode [ 118.081451][ T5847] bridge_slave_1: entered promiscuous mode [ 118.092386][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.104002][ T5854] team0: Port device team_slave_0 added [ 118.170854][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.183380][ T5854] team0: Port device team_slave_1 added [ 118.223250][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.231334][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.238605][ T5860] bridge_slave_0: entered allmulticast mode [ 118.248110][ T5860] bridge_slave_0: entered promiscuous mode [ 118.258678][ T5849] team0: Port device team_slave_0 added [ 118.269726][ T5849] team0: Port device team_slave_1 added [ 118.342207][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.349537][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.357845][ T5846] bridge_slave_0: entered allmulticast mode [ 118.366544][ T5846] bridge_slave_0: entered promiscuous mode [ 118.374932][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.382827][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.390312][ T5860] bridge_slave_1: entered allmulticast mode [ 118.398182][ T5860] bridge_slave_1: entered promiscuous mode [ 118.442721][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.470287][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.477290][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.504085][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.516934][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.524636][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.533434][ T5846] bridge_slave_1: entered allmulticast mode [ 118.542622][ T5846] bridge_slave_1: entered promiscuous mode [ 118.566217][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.576120][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.604573][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.620822][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.649904][ T5857] team0: Port device team_slave_0 added [ 118.656848][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.664036][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.690866][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.737284][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.744591][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.771876][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.823373][ T5857] team0: Port device team_slave_1 added [ 118.878935][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.911394][ T5847] team0: Port device team_slave_0 added [ 118.953859][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.961141][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.987642][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.004914][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.017209][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.047462][ T5847] team0: Port device team_slave_1 added [ 119.078504][ T5849] hsr_slave_0: entered promiscuous mode [ 119.085843][ T5849] hsr_slave_1: entered promiscuous mode [ 119.096431][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.103621][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.130409][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.155174][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.204851][ T5860] team0: Port device team_slave_0 added [ 119.323680][ T5860] team0: Port device team_slave_1 added [ 119.348637][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.357805][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.385069][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.404568][ T5854] hsr_slave_0: entered promiscuous mode [ 119.411373][ T5854] hsr_slave_1: entered promiscuous mode [ 119.417699][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 119.424084][ T5854] Cannot create hsr debugfs directory [ 119.455847][ T5846] team0: Port device team_slave_0 added [ 119.465225][ T5846] team0: Port device team_slave_1 added [ 119.488411][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.495922][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.525468][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.588904][ T5857] hsr_slave_0: entered promiscuous mode [ 119.596060][ T5857] hsr_slave_1: entered promiscuous mode [ 119.602539][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 119.608732][ T5857] Cannot create hsr debugfs directory [ 119.650147][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.658272][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.684767][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.732121][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.739124][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.766358][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.781063][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.788133][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.814280][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.827081][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.834420][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.861552][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.900606][ T5864] Bluetooth: hci2: command tx timeout [ 119.979704][ T5864] Bluetooth: hci4: command tx timeout [ 119.985458][ T5864] Bluetooth: hci0: command tx timeout [ 119.992654][ T5859] Bluetooth: hci3: command tx timeout [ 119.998099][ T5859] Bluetooth: hci1: command tx timeout [ 120.059547][ T5851] Bluetooth: hci5: command tx timeout [ 120.177611][ T5847] hsr_slave_0: entered promiscuous mode [ 120.184977][ T5847] hsr_slave_1: entered promiscuous mode [ 120.192079][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 120.197994][ T5847] Cannot create hsr debugfs directory [ 120.236688][ T5846] hsr_slave_0: entered promiscuous mode [ 120.243650][ T5846] hsr_slave_1: entered promiscuous mode [ 120.250580][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 120.256739][ T5846] Cannot create hsr debugfs directory [ 120.283367][ T5860] hsr_slave_0: entered promiscuous mode [ 120.291713][ T5860] hsr_slave_1: entered promiscuous mode [ 120.298306][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 120.304791][ T5860] Cannot create hsr debugfs directory [ 120.868877][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.885649][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.945244][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.994635][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.091278][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.110465][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.124953][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.149066][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.294040][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.306931][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.324182][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.336603][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 121.484382][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.497213][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.521132][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.534447][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.547993][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.592233][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.690687][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.698407][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.757029][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.764283][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.783698][ T5846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.794627][ T5846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.832285][ T5846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.877097][ T5846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.898776][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.990737][ T5851] Bluetooth: hci2: command tx timeout [ 122.023064][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.052575][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.060295][ T5851] Bluetooth: hci0: command tx timeout [ 122.061748][ T5864] Bluetooth: hci1: command tx timeout [ 122.065712][ T5851] Bluetooth: hci3: command tx timeout [ 122.071738][ T5864] Bluetooth: hci4: command tx timeout [ 122.098795][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.138767][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.146135][ T5864] Bluetooth: hci5: command tx timeout [ 122.179695][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.186878][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.212925][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.243666][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.286869][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.314538][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.321858][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.374524][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.438594][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.445883][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.505264][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.512485][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.568933][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.703110][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.721672][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.762789][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.841435][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.848684][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.935581][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.943828][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.967696][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.008805][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.016112][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.179039][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.186296][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.236599][ T5849] veth0_vlan: entered promiscuous mode [ 123.337814][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.362121][ T5849] veth1_vlan: entered promiscuous mode [ 123.465560][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.499743][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.555433][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.598260][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.617241][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.624492][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.745696][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.753085][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.829094][ T5854] veth0_vlan: entered promiscuous mode [ 123.873174][ T5849] veth0_macvtap: entered promiscuous mode [ 123.911226][ T5849] veth1_macvtap: entered promiscuous mode [ 123.961444][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.973333][ T5857] veth0_vlan: entered promiscuous mode [ 124.032401][ T5854] veth1_vlan: entered promiscuous mode [ 124.069893][ T5864] Bluetooth: hci2: command tx timeout [ 124.121551][ T5857] veth1_vlan: entered promiscuous mode [ 124.140545][ T5157] Bluetooth: hci1: command tx timeout [ 124.141263][ T5851] Bluetooth: hci0: command tx timeout [ 124.146025][ T5864] Bluetooth: hci3: command tx timeout [ 124.158718][ T5157] Bluetooth: hci4: command tx timeout [ 124.182708][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.205400][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.220270][ T5851] Bluetooth: hci5: command tx timeout [ 124.248321][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.277814][ T5854] veth0_macvtap: entered promiscuous mode [ 124.366127][ T5854] veth1_macvtap: entered promiscuous mode [ 124.409927][ T2960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.476536][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.501082][ T2960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.529481][ T2960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.558833][ T2960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.589171][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.613627][ T5857] veth0_macvtap: entered promiscuous mode [ 124.678623][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.718490][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.788816][ T5857] veth1_macvtap: entered promiscuous mode [ 124.805251][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.834813][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.999330][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.023205][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.168120][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.196434][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.221769][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.243938][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.343955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.365462][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.388571][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.392709][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 125.414978][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.438995][ T5860] veth0_vlan: entered promiscuous mode [ 125.513686][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.537253][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.567640][ T5987] loop0: detected capacity change from 0 to 16 [ 125.575398][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.613300][ T5987] erofs (device loop0): mounted with root inode @ nid 36. [ 125.636783][ T5987] erofs (device loop0): readahead error at folio 4 @ nid 36 [ 125.645340][ T5987] syz.0.1: attempt to access beyond end of device [ 125.645340][ T5987] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 125.696486][ T5987] syz.0.1: attempt to access beyond end of device [ 125.696486][ T5987] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 125.727733][ T5987] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 125.738815][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.741045][ T5987] erofs (device loop0): read error -117 @ 0 of nid 36 [ 125.755017][ T5987] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 125.763974][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.805027][ T5860] veth1_vlan: entered promiscuous mode [ 125.956893][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.990380][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.027178][ T5846] veth0_vlan: entered promiscuous mode [ 126.041844][ T5989] loop0: detected capacity change from 0 to 512 [ 126.058507][ T5846] veth1_vlan: entered promiscuous mode [ 126.144430][ T5989] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 126.164905][ T5860] veth0_macvtap: entered promiscuous mode [ 126.235484][ T5847] veth0_vlan: entered promiscuous mode [ 126.244338][ T5989] EXT4-fs warning (device loop0): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.263533][ T5989] EXT4-fs (loop0): mount failed [ 126.272618][ T5860] veth1_macvtap: entered promiscuous mode [ 126.350504][ T5847] veth1_vlan: entered promiscuous mode [ 126.362375][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.393301][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.453402][ T5846] veth0_macvtap: entered promiscuous mode [ 126.477173][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.574953][ T5846] veth1_macvtap: entered promiscuous mode [ 126.617508][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.754492][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.769578][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.778419][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.891126][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.923974][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.052250][ T5847] veth0_macvtap: entered promiscuous mode [ 127.100754][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.195943][ T5847] veth1_macvtap: entered promiscuous mode [ 127.262580][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.275695][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.317921][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.330813][ T2960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.489984][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.511515][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.520099][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.566415][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.588678][ T5996] loop1: detected capacity change from 0 to 32768 [ 127.680742][ T5996] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 127.727264][ T4498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.737550][ T4498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.789642][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.797544][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.815422][ T4498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.866268][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.946587][ T5996] XFS (loop1): Ending clean mount [ 128.095087][ T30] audit: type=1800 audit(1754066504.965:2): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8" name="file1" dev="loop1" ino=5766 res=0 errno=0 [ 128.406585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.418718][ T5854] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 128.464190][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.623097][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.667071][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.815513][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.888951][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.919001][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.993597][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.234606][ T6050] loop1: detected capacity change from 0 to 4096 [ 130.442367][ T6058] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.582183][ T6044] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 130.598562][ T30] audit: type=1800 audit(1754066507.465:3): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 130.810845][ T6044] usb 6-1: Using ep0 maxpacket: 16 [ 130.849725][ T6044] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 130.893826][ T6044] usb 6-1: config 0 has no interface number 0 [ 130.915283][ T6044] usb 6-1: New USB device found, idVendor=05ac, idProduct=8300, bcdDevice=b3.07 [ 130.951997][ T6044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.980145][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.992951][ T6044] usb 6-1: Product: syz [ 131.011999][ T6044] usb 6-1: Manufacturer: syz [ 131.029218][ T6044] usb 6-1: SerialNumber: syz [ 131.127579][ T6044] usb 6-1: config 0 descriptor?? [ 131.162453][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.199849][ T6038] loop3: detected capacity change from 0 to 32768 [ 131.211584][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.252795][ T24] usb 1-1: Product: syz [ 131.257074][ T24] usb 1-1: Manufacturer: syz [ 131.277749][ T6038] ======================================================= [ 131.277749][ T6038] WARNING: The mand mount option has been deprecated and [ 131.277749][ T6038] and is ignored by this kernel. Remove the mand [ 131.277749][ T6038] option from the mount to silence this warning. [ 131.277749][ T6038] ======================================================= [ 131.345876][ T24] usb 1-1: SerialNumber: syz [ 131.355620][ T6044] usb 6-1: Direct firmware load for isight.fw failed with error -2 [ 131.418215][ T6044] usb 6-1: Falling back to sysfs fallback for: isight.fw [ 131.460007][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.473549][ T6038] JBD2: Ignoring recovery information on journal [ 131.611808][ T1163] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.734306][ T6038] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 131.939609][ T5933] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.128492][ T5933] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.184247][ T5933] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.258763][ T5933] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.295640][ T5857] ocfs2: Unmounting device (7,3) on (node local) [ 132.314133][ T5933] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 132.353358][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.377031][ T6085] input: syz0 as /devices/virtual/input/input5 [ 132.436924][ T6078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.628274][ T5933] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 133.704290][ T5933] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input6 [ 133.848676][ T1163] usb 1-1: Service connection timeout for: 256 [ 134.345935][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 134.354387][ T5933] usb 5-1: USB disconnect, device number 2 [ 134.619083][ T24] usb 1-1: USB disconnect, device number 2 [ 134.634420][ T1163] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 134.645621][ T1163] ath9k_htc: Failed to initialize the device [ 134.688238][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 134.710010][ T6103] netlink: 'syz.5.48': attribute type 39 has an invalid length. [ 135.159683][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.332442][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 135.372657][ T5933] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 135.428412][ T5933] usb 5-1: config 0 has no interface number 0 [ 135.474310][ T5933] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 135.510779][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.519570][ T5933] usb 5-1: Product: syz [ 135.523952][ T5933] usb 5-1: Manufacturer: syz [ 135.529816][ T5933] usb 5-1: SerialNumber: syz [ 135.553590][ T6121] loop3: detected capacity change from 0 to 256 [ 135.554153][ T5933] usb 5-1: config 0 descriptor?? [ 135.599722][ T5933] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 135.629465][ T6121] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.768194][ T6121] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 135.867640][ T5933] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 135.950894][ T5933] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 136.012997][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 32 [ 136.313461][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 136.315368][ T24] usb 5-1: USB disconnect, device number 3 [ 136.378468][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 136.396964][ T6100] loop2: detected capacity change from 0 to 32768 [ 136.411052][ T6100] XFS: attr2 mount option is deprecated. [ 136.502004][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 136.524257][ T24] quatech2 5-1:0.51: device disconnected [ 136.799708][ T6100] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.987202][ T6142] loop1: detected capacity change from 0 to 2048 [ 137.118217][ T6100] XFS (loop2): Ending clean mount [ 137.121079][ T6142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.167474][ T6100] XFS (loop2): Quotacheck needed: Please wait. [ 137.387604][ T30] audit: type=1800 audit(1754066514.255:4): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.61" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 137.417464][ T6100] XFS (loop2): Quotacheck: Done. [ 137.702961][ T5847] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.784422][ T6153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.897755][ T6134] loop3: detected capacity change from 0 to 32768 [ 138.090999][ T6134] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.341097][ T6134] XFS (loop3): Ending clean mount [ 138.397961][ T6134] XFS (loop3): Quotacheck needed: Please wait. [ 138.623713][ T6134] XFS (loop3): Quotacheck: Done. [ 138.860033][ T6175] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.018356][ T6182] loop4: detected capacity change from 0 to 1024 [ 139.045639][ T5857] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.424580][ T6182] hfsplus: request for non-existent node 16777216 in B*Tree [ 139.464446][ T6182] hfsplus: request for non-existent node 16777216 in B*Tree [ 139.572907][ T6182] hfsplus: request for non-existent node 16777216 in B*Tree [ 139.592850][ T6182] hfsplus: request for non-existent node 16777216 in B*Tree [ 139.652732][ T6191] loop7: detected capacity change from 0 to 524255232 [ 139.938183][ T13] hfsplus: request for non-existent node 16777216 in B*Tree [ 139.999897][ T13] hfsplus: request for non-existent node 16777216 in B*Tree [ 140.393900][ T6201] netlink: 182 bytes leftover after parsing attributes in process `syz.5.84'. [ 140.721196][ T6181] loop1: detected capacity change from 0 to 32768 [ 140.770428][ T6181] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.74 (6181) [ 140.904409][ T6181] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.943281][ T6181] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 140.992665][ T6181] BTRFS info (device loop1): using free-space-tree [ 141.193902][ T6181] BTRFS info (device loop1): rebuilding free space tree [ 141.814624][ T6208] loop0: detected capacity change from 0 to 32768 [ 142.070333][ T30] audit: type=1800 audit(1754066518.935:5): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.86" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 142.137528][ T5854] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.239501][ T1163] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.282125][ T6198] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 142.447019][ T1163] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.484239][ T1163] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.536213][ T1163] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.580443][ T1163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.625734][ T1163] usb 5-1: SerialNumber: syz [ 142.799798][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.807358][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.943215][ T1163] usb 5-1: 0:2 : does not exist [ 143.098414][ T1163] usb 5-1: USB disconnect, device number 4 [ 143.377158][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.403128][ T6254] input: syz1 as /devices/virtual/input/input7 [ 143.981954][ T6259] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.99'. [ 144.190606][ T5933] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.384980][ T6266] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.399640][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 144.409109][ T5933] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 144.456872][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.501266][ T6266] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.537174][ T6272] loop4: detected capacity change from 0 to 256 [ 144.544108][ T5933] usb 1-1: config 0 descriptor?? [ 144.612290][ T6272] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.651911][ T6274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.669269][ T6272] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 144.735516][ T6272] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 144.841928][ T5933] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 144.888697][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.916320][ T6251] loop1: detected capacity change from 0 to 32768 [ 144.957607][ T5933] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 144.961707][ T6251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.95 (6251) [ 144.985789][ T5933] usb 1-1: media controller created [ 145.106928][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.111823][ T6251] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.166411][ T6251] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 145.222951][ T6251] BTRFS info (device loop1): using free-space-tree [ 145.283589][ T1153] Bluetooth: hci6: Frame reassembly failed (-84) [ 145.324379][ T5933] az6027: usb out operation failed. (-71) [ 145.352678][ T6278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 145.372423][ T5933] az6027: usb out operation failed. (-71) [ 145.394985][ T5933] stb0899_attach: Driver disabled by Kconfig [ 145.430206][ T5933] az6027: no front-end attached [ 145.430206][ T5933] [ 145.444343][ T5933] az6027: usb out operation failed. (-71) [ 145.477421][ T5933] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 145.516023][ T5933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 145.572376][ T5933] dvb-usb: schedule remote query interval to 400 msecs. [ 145.596314][ T5933] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 145.638059][ T5933] usb 1-1: USB disconnect, device number 3 [ 145.810038][ T6302] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 145.834599][ T6302] syzkaller1: persist disabled [ 146.025145][ T5933] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 146.291823][ T5854] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.813955][ T6317] syz.0.118 uses obsolete (PF_INET,SOCK_PACKET) [ 147.032538][ T6323] netlink: 2 bytes leftover after parsing attributes in process `syz.5.119'. [ 147.265882][ T6281] loop2: detected capacity change from 0 to 32768 [ 147.282366][ T6326] loop1: detected capacity change from 0 to 1024 [ 147.335833][ T6281] XFS: noikeep mount option is deprecated. [ 147.354139][ T6326] EXT4-fs: inline encryption not supported [ 147.399229][ T6326] EXT4-fs: Ignoring removed i_version option [ 147.406859][ T5157] Bluetooth: hci6: command 0x1003 tx timeout [ 147.414374][ T5851] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 147.491780][ T6281] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.633638][ T6326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.701024][ T6334] loop5: detected capacity change from 0 to 512 [ 147.769323][ T6334] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.817600][ T6281] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 147.847470][ T6334] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 147.989525][ T6281] XFS (loop2): Starting recovery (logdev: internal) [ 148.000635][ T6334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 148.084700][ T6334] System zones: 1-12 [ 148.177749][ T6334] EXT4-fs error (device loop5): ext4_iget_extra_inode:5103: inode #15: comm syz.5.121: corrupted in-inode xattr: e_value size too large [ 148.270849][ T6281] XFS (loop2): Ending recovery (logdev: internal) [ 148.295139][ T6322] loop4: detected capacity change from 0 to 131072 [ 148.298810][ T6326] EXT4-fs error (device loop1): mb_free_blocks:2014: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 148.344578][ T6334] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.121: couldn't read orphan inode 15 (err -117) [ 148.477092][ T6334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.603796][ T6322] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 148.753635][ T5847] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.871848][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.102414][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.784358][ T6362] loop5: detected capacity change from 0 to 2048 [ 149.862175][ T6362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.981191][ T6367] netlink: 'syz.2.132': attribute type 28 has an invalid length. [ 150.330780][ T6373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.690626][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 151.342779][ T6390] loop1: detected capacity change from 0 to 22 [ 151.397737][ T6390] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 151.489036][ T6390] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 152.304744][ T6409] loop1: detected capacity change from 0 to 512 [ 152.517763][ T6409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.551250][ T6381] loop4: detected capacity change from 0 to 32768 [ 152.568068][ T6381] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.138 (6381) [ 152.606144][ T6409] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.616813][ T6381] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 152.688583][ T6381] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 152.739088][ T6381] BTRFS info (device loop4): using free-space-tree [ 152.942487][ T6438] loop2: detected capacity change from 0 to 16 [ 152.990860][ T6438] erofs (device loop2): mounted with root inode @ nid 36. [ 153.092175][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.718780][ T5860] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 153.889515][ T5951] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.099531][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 154.133165][ T5951] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 154.179942][ T5951] usb 2-1: config 0 has no interface number 0 [ 154.186155][ T5951] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 154.263539][ T5951] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 154.307163][ T5951] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 154.320135][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.344371][ T5951] usb 2-1: Product: syz [ 154.393423][ T5951] usb 2-1: Manufacturer: syz [ 154.398142][ T5951] usb 2-1: SerialNumber: syz [ 154.420047][ T6466] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 154.735212][ T5951] usb 2-1: config 0 descriptor?? [ 154.789952][ T6452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.797417][ T6452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.032433][ T6476] loop5: detected capacity change from 0 to 1024 [ 155.078212][ T6476] EXT4-fs: Ignoring removed orlov option [ 155.104296][ T6452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.134280][ T6452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.228099][ T6476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.397816][ T6476] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 155.611613][ T5951] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 155.668044][ T5951] asix 2-1:0.251: probe with driver asix failed with error -524 [ 155.936470][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.996014][ T5951] usb 2-1: USB disconnect, device number 2 [ 156.158537][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 156.299657][ T5157] Bluetooth: hci5: command 0x0405 tx timeout [ 156.310494][ T6470] loop4: detected capacity change from 0 to 32768 [ 156.329125][ T6494] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 156.400886][ T6494] netlink: 'syz.2.179': attribute type 2 has an invalid length. [ 156.441034][ T6470] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.817395][ T6511] Failed to get privilege flags for destination (handle=0x2:0x4) [ 157.089690][ T6470] XFS (loop4): Ending clean mount [ 157.406207][ T6522] loop5: detected capacity change from 0 to 256 [ 157.491420][ T5860] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.606611][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.625924][ T6490] futex_wake_op: syz.0.176 tries to shift op by 144; fix this program [ 157.797742][ T9] kernel write not supported for file /uhid (pid: 9 comm: kworker/0:0) [ 157.809835][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 157.877523][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.930948][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 157.982308][ T24] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 158.030960][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.080849][ T24] usb 2-1: config 0 descriptor?? [ 158.573796][ T24] nintendo 0003:057E:2019.0001: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 158.592430][ T6535] process 'syz.2.193' launched './file1' with NULL argv: empty string added [ 158.793427][ T6517] loop3: detected capacity change from 0 to 32768 [ 158.899042][ T6517] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.185 (6517) [ 158.983605][ T24] nintendo 0003:057E:2019.0001: Failed to get joycon info; ret=-71 [ 159.033301][ T24] nintendo 0003:057E:2019.0001: Failed to retrieve controller info; ret=-71 [ 159.070806][ T6517] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.100521][ T24] nintendo 0003:057E:2019.0001: Failed to initialize controller; ret=-71 [ 159.149607][ T6517] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 159.154644][ T6540] loop2: detected capacity change from 0 to 2048 [ 159.191195][ T24] nintendo 0003:057E:2019.0001: probe - fail = -71 [ 159.201871][ T6517] BTRFS info (device loop3): using free-space-tree [ 159.237648][ T24] nintendo 0003:057E:2019.0001: probe with driver nintendo failed with error -71 [ 159.274996][ T24] usb 2-1: USB disconnect, device number 3 [ 159.320983][ T6540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.093798][ T6563] @: renamed from vlan0 (while UP) [ 160.127293][ T5857] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.152946][ T6562] loop2: detected capacity change from 0 to 512 [ 160.210871][ T6562] EXT4-fs: Ignoring removed oldalloc option [ 160.307375][ T6562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.380030][ T6562] EXT4-fs (loop2): orphan cleanup on readonly fs [ 160.485055][ T6562] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 160.511656][ T6568] [U] [ 160.514957][ T6568] [U] [ 160.517767][ T6568] [U] [ 160.520554][ T6568] [U] [ 160.540978][ T6568] [U] [ 160.543916][ T6568] [U] [ 160.546702][ T6568] [U] [ 160.549526][ T6568] [U] [ 160.552948][ T6562] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 160.564485][ T6562] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.196: Failed to acquire dquot type 1 [ 160.578622][ T6568] [U] [ 160.581381][ T6568] [U] [ 160.584114][ T6568] [U] [ 160.586873][ T6568] [U] [ 160.609011][ T6568] [U] [ 160.611904][ T6568] [U] [ 160.614676][ T6568] [U] [ 160.617474][ T6568] [U] [ 160.641931][ T6568] [U] [ 160.644739][ T6568] [U] [ 160.647497][ T6568] [U] [ 160.650245][ T6568] [U] [ 160.661255][ T6562] EXT4-fs (loop2): 1 truncate cleaned up [ 160.684157][ T6562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.728777][ T6568] [U] [ 160.731612][ T6568] [U] [ 160.734371][ T6568] [U] [ 160.737138][ T6568] [U] [ 160.775389][ T6568] [U] [ 160.778190][ T6568] [U] [ 160.781049][ T6568] [U] [ 160.783840][ T6568] [U] [ 160.830038][ T6568] [U] [ 160.832830][ T6568] [U] [ 160.835569][ T6568] [U] [ 160.838311][ T6568] [U] [ 160.857588][ T6568] [U] [ 160.860391][ T6568] [U] [ 160.863182][ T6568] [U] [ 160.865941][ T6568] [U] [ 160.880981][ T6537] loop0: detected capacity change from 0 to 32768 [ 160.918285][ T6568] [U] [ 160.921104][ T6568] [U] [ 160.923860][ T6568] [U] [ 160.926618][ T6568] [U] [ 160.939901][ T6537] XFS: attr2 mount option is deprecated. [ 160.983609][ T6537] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 160.995984][ T6568] [U] [ 160.998815][ T6568] [U] [ 161.001562][ T6568] [U] [ 161.004325][ T6568] [U] [ 161.030562][ T6568] [U] [ 161.033363][ T6568] [U] [ 161.036130][ T6568] [U] [ 161.038888][ T6568] [U] [ 161.057636][ T6537] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.081183][ T6568] [U] [ 161.084018][ T6568] [U] [ 161.086790][ T6568] [U] [ 161.089538][ T6568] [U] [ 161.097322][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.162105][ T6568] [U] [ 161.165082][ T6568] [U] [ 161.167827][ T6568] [U] [ 161.170565][ T6568] [U] [ 161.215383][ T6568] [U] [ 161.218527][ T6568] [U] [ 161.221272][ T6568] [U] [ 161.224002][ T6568] [U] [ 161.249169][ T6537] XFS (loop0): Ending clean mount [ 161.264086][ T6568] [U] [ 161.266860][ T6568] [U] [ 161.269599][ T6568] [U] [ 161.272369][ T6568] [U] [ 161.290408][ T6537] XFS (loop0): Quotacheck needed: Please wait. [ 161.323456][ T6568] [U] [ 161.326270][ T6568] [U] [ 161.329102][ T6568] [U] [ 161.331843][ T6568] [U] [ 161.421528][ T6568] [U] [ 161.424364][ T6568] [U] [ 161.427162][ T6568] [U] [ 161.429951][ T6568] [U] [ 161.475384][ T6568] [U] [ 161.478231][ T6568] [U] [ 161.480980][ T6568] [U] [ 161.483718][ T6568] [U] [ 161.500873][ T6537] XFS (loop0): Quotacheck: Done. [ 161.567118][ T6568] [U] [ 161.569905][ T6568] [U] [ 161.572649][ T6568] [U] [ 161.575386][ T6568] [U] [ 161.652029][ T6568] [U] [ 161.654837][ T6568] [U] [ 161.657582][ T6568] [U] [ 161.660323][ T6568] [U] [ 161.699465][ T5933] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 161.730317][ T6568] [U] [ 161.796780][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.953425][ T5933] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 161.966548][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.000313][ T5933] usb 3-1: Product: syz [ 162.004510][ T5933] usb 3-1: Manufacturer: syz [ 162.051939][ T5933] usb 3-1: SerialNumber: syz [ 162.095045][ T5933] usb 3-1: config 0 descriptor?? [ 162.147515][ T5933] ch341 3-1:0.0: ch341-uart converter detected [ 162.198645][ T6593] loop1: detected capacity change from 0 to 4096 [ 162.260124][ T6593] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 162.544822][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.209'. [ 162.611615][ T6593] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 162.650131][ T6593] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 162.690049][ T6593] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 162.918596][ T2960] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 162.982751][ T5933] usb 3-1: failed to send control message: -71 [ 163.010525][ T5933] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 163.052142][ T5933] usb 3-1: USB disconnect, device number 2 [ 163.098164][ T5933] ch341 3-1:0.0: device disconnected [ 163.135099][ T6589] loop5: detected capacity change from 0 to 32768 [ 163.207872][ T6589] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.204 (6589) [ 163.261133][ T6608] loop0: detected capacity change from 0 to 512 [ 163.309987][ T6589] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 163.380376][ T6608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 163.405822][ T6589] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 163.449975][ T6608] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.465602][ T6589] BTRFS info (device loop5): using free-space-tree [ 163.987939][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 164.026453][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 164.359671][ T5846] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 164.463714][ T6649] input: syz0 as /devices/virtual/input/input9 [ 164.466676][ T6647] loop1: detected capacity change from 0 to 2048 [ 164.588665][ T6647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.678058][ T6657] loop3: detected capacity change from 0 to 128 [ 164.737265][ T6647] EXT4-fs (loop1): shut down requested (0) [ 164.808153][ T6657] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 165.029569][ T30] audit: type=1800 audit(1754066541.895:6): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.226" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 165.037311][ T6663] loop5: detected capacity change from 0 to 512 [ 165.137131][ T6663] EXT4-fs warning (device loop5): read_mmp_block:114: Error -117 while reading MMP block 24 [ 165.215637][ T6657] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 165.321046][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.368906][ T6663] loop5: detected capacity change from 0 to 544 [ 165.374596][ T6657] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 165.424395][ T6663] EXT4-fs (loop5): failed to parse options in superblock: [ 165.489719][ T6663] EXT4-fs (loop5): Invalid default hash set in the superblock [ 165.763238][ T6671] mkiss: ax0: crc mode is auto. [ 166.515075][ T6689] loop5: detected capacity change from 0 to 256 [ 166.676787][ T6694] loop1: detected capacity change from 0 to 512 [ 166.729026][ T6694] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.241: casefold flag without casefold feature [ 166.751298][ T6694] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.241: couldn't read orphan inode 15 (err -117) [ 166.790932][ T6689] FAT-fs (loop5): Directory bread(block 64) failed [ 166.797780][ T6689] FAT-fs (loop5): Directory bread(block 65) failed [ 166.883105][ T6694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.906306][ T6689] FAT-fs (loop5): Directory bread(block 66) failed [ 166.929719][ T6690] loop0: detected capacity change from 0 to 4096 [ 166.949501][ T6689] FAT-fs (loop5): Directory bread(block 67) failed [ 166.992351][ T6689] FAT-fs (loop5): Directory bread(block 68) failed [ 167.008859][ T6689] FAT-fs (loop5): Directory bread(block 69) failed [ 167.036255][ T6689] FAT-fs (loop5): Directory bread(block 70) failed [ 167.048213][ T6689] FAT-fs (loop5): Directory bread(block 71) failed [ 167.069479][ T6689] FAT-fs (loop5): Directory bread(block 72) failed [ 167.076124][ T6689] FAT-fs (loop5): Directory bread(block 73) failed [ 167.139545][ T5933] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.210910][ T6701] dvmrp1: entered allmulticast mode [ 167.286231][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.331694][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 167.374011][ T5933] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 167.407791][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.416812][ T5933] usb 5-1: Product: syz [ 167.446616][ T5933] usb 5-1: Manufacturer: syz [ 167.489483][ T5933] usb 5-1: SerialNumber: syz [ 167.537187][ T5933] usb 5-1: config 0 descriptor?? [ 167.606481][ T5933] gspca_main: se401-2.14.0 probing 047d:5003 [ 167.927121][ T6680] loop3: detected capacity change from 0 to 32768 [ 168.000788][ T6680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.234 (6680) [ 168.055552][ T6680] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.109772][ T6680] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 168.146998][ T6680] BTRFS info (device loop3): using free-space-tree [ 168.276788][ T5933] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 168.318582][ T5933] usb 5-1: USB disconnect, device number 5 [ 168.674297][ T6680] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 169.118719][ T5857] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.412832][ T6705] loop1: detected capacity change from 0 to 32768 [ 169.441626][ T6705] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.245 (6705) [ 169.487451][ T6705] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 169.584529][ T6705] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 169.628211][ T6742] loop2: detected capacity change from 0 to 256 [ 169.635695][ T6705] BTRFS info (device loop1): using free-space-tree [ 170.569231][ T5854] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 170.647419][ T6778] block nbd0: server does not support multiple connections per device. [ 170.664436][ T6780] loop0: detected capacity change from 0 to 128 [ 170.691359][ T6778] block nbd0: shutting down sockets [ 170.724289][ T6780] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 170.849270][ T30] audit: type=1800 audit(1754066547.715:7): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.264" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 170.973520][ T6780] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 171.113447][ T6780] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 171.403364][ T6786] loop3: detected capacity change from 0 to 2048 [ 171.615390][ T6794] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.142000][ T6794] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 172.199608][ T6794] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 172.247216][ T6794] Remounting filesystem read-only [ 172.290681][ T5857] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 173.577407][ T6833] ntfs3(nullb0): Primary boot signature is not NTFS. [ 173.636594][ T6833] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 173.912221][ T6788] netlink: 'syz.5.267': attribute type 4 has an invalid length. [ 175.037660][ T6856] loop2: detected capacity change from 0 to 2048 [ 175.123299][ T6856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.465599][ T6865] netlink: 'syz.0.299': attribute type 12 has an invalid length. [ 175.718432][ T6842] loop1: detected capacity change from 0 to 32768 [ 176.007079][ T6879] loop2: detected capacity change from 0 to 256 [ 176.151133][ T6879] FAT-fs (loop2): Directory bread(block 64) failed [ 176.193311][ T6879] FAT-fs (loop2): Directory bread(block 65) failed [ 176.230229][ T6879] FAT-fs (loop2): Directory bread(block 66) failed [ 176.249679][ T6879] FAT-fs (loop2): Directory bread(block 67) failed [ 176.270463][ T6879] FAT-fs (loop2): Directory bread(block 68) failed [ 176.277140][ T6879] FAT-fs (loop2): Directory bread(block 69) failed [ 176.332314][ T6879] FAT-fs (loop2): Directory bread(block 70) failed [ 176.361935][ T6879] FAT-fs (loop2): Directory bread(block 71) failed [ 176.405932][ T6879] FAT-fs (loop2): Directory bread(block 72) failed [ 176.446349][ T6879] FAT-fs (loop2): Directory bread(block 73) failed [ 176.873424][ T6862] loop3: detected capacity change from 0 to 32768 [ 176.945428][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.311'. [ 177.876201][ T6881] loop5: detected capacity change from 0 to 32768 [ 177.890695][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.922217][ T6881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.306 (6881) [ 177.969495][ T6881] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.993153][ T6881] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 178.009605][ T6881] BTRFS info (device loop5): disk space caching is enabled [ 178.017661][ T6881] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 178.062128][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.073777][ T9] usb 5-1: config 0 has no interface number 0 [ 178.086982][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.105333][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.134101][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 178.154296][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.186243][ T9] usb 5-1: config 0 descriptor?? [ 178.210241][ T6881] BTRFS info (device loop5): rebuilding free space tree [ 178.274186][ T6881] BTRFS info (device loop5): disabling free space tree [ 178.289827][ T6881] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.333153][ T6881] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 178.670455][ T9] uclogic 0003:256C:006D.0002: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1 [ 178.701838][ T5846] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.865255][ T6940] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 178.903090][ T5955] usb 5-1: USB disconnect, device number 6 [ 179.346659][ T6951] loop3: detected capacity change from 0 to 1024 [ 179.411435][ T6951] hfsplus: bad catalog entry type [ 179.575923][ T12] hfsplus: b-tree write err: -5, ino 4 [ 179.784926][ T6966] mmap: syz.2.340 (6966) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 179.969672][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 180.052702][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 180.134548][ T6976] hsr_slave_1 (unregistering): left promiscuous mode [ 180.149688][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 180.162971][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.184855][ T6979] sit1: entered promiscuous mode [ 180.190432][ T6979] sit1: entered allmulticast mode [ 180.207527][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.279730][ T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 180.319883][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.363338][ T24] usb 1-1: config 0 descriptor?? [ 180.803742][ T24] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 180.833021][ T24] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 180.849778][ T24] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 180.866279][ T24] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 180.876778][ T24] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 180.924167][ T24] corsair 0003:1B1C:1B02.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 181.152608][ T7004] loop1: detected capacity change from 0 to 256 [ 181.255643][ T24] usb 1-1: USB disconnect, device number 4 [ 181.301020][ T7008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.360'. [ 181.524532][ T30] audit: type=1800 audit(1754066558.385:8): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="file1" dev="tmpfs" ino=303 res=0 errno=0 [ 181.818380][ T7021] loop3: detected capacity change from 0 to 128 [ 181.882853][ T7021] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.907202][ T7021] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.932174][ T7006] loop4: detected capacity change from 0 to 32768 [ 181.945451][ T7006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.359 (7006) [ 181.976403][ T7006] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.004889][ T7006] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 182.023095][ T7006] BTRFS info (device loop4): using free-space-tree [ 182.059315][ T5857] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.261934][ T30] audit: type=1800 audit(1754066559.135:9): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.359" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 182.415816][ T5860] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.528709][ T7057] netlink: 'syz.5.373': attribute type 10 has an invalid length. [ 182.556821][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.560632][ T5933] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.567016][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.683951][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.691366][ T7057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.701296][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.710069][ T7057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.757389][ T7057] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 182.771678][ T5933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.788785][ T5933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.828745][ T5933] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.864973][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.874192][ T5933] usb 2-1: SerialNumber: syz [ 183.144555][ T5933] usb 2-1: 0:2 : does not exist [ 183.236109][ T5933] usb 2-1: USB disconnect, device number 4 [ 183.469840][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 183.505344][ T7080] capability: warning: `syz.4.384' uses deprecated v2 capabilities in a way that may be insecure [ 183.644615][ T7084] warning: `syz.2.386' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 183.666927][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.679649][ T24] usb 4-1: config 20 has an invalid interface number: 172 but max is 0 [ 183.698253][ T24] usb 4-1: config 20 has no interface number 0 [ 183.711516][ T24] usb 4-1: config 20 interface 172 has no altsetting 0 [ 183.724450][ T24] usb 4-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=69.2a [ 183.735322][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.769391][ T24] usb 4-1: Product: syz [ 183.775702][ T24] usb 4-1: Manufacturer: syz [ 183.792166][ T24] usb 4-1: SerialNumber: syz [ 184.013101][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 184.239259][ T7106] loop2: detected capacity change from 0 to 512 [ 184.258420][ T24] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state. [ 184.288684][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.334076][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design) [ 184.365376][ T7106] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.397: bad orphan inode 15 [ 184.398560][ T24] usb 4-1: media controller created [ 184.453318][ T7106] ext4_test_bit(bit=14, block=5) = 0 [ 184.467406][ T7106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.484996][ T7114] macvlan2: entered allmulticast mode [ 184.534289][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.540435][ T7114] veth1_vlan: entered allmulticast mode [ 184.584353][ T7114] veth1_vlan: left allmulticast mode [ 184.634225][ T7117] hugetlbfs: syz.1.401 (7117): Using mlock ulimits for SHM_HUGETLB is obsolete [ 184.681735][ T1163] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.791522][ T24] DVB: Unable to find symbol dib8000_attach() [ 184.809901][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design' [ 184.841763][ T1163] usb 1-1: Using ep0 maxpacket: 8 [ 184.865021][ T1163] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 184.889893][ T1163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.977965][ T1163] pvrusb2: Hardware description: Terratec Grabster AV400 [ 184.997687][ T1163] pvrusb2: ********** [ 185.012141][ T1163] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 185.028838][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.042814][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 185.049231][ T24] Registered IR keymap rc-empty [ 185.054836][ T1163] pvrusb2: Important functionality might not be entirely working. [ 185.065300][ T24] dvb-usb: could not initialize remote control. [ 185.073216][ T24] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected. [ 185.084149][ T1163] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 185.096820][ T1163] pvrusb2: ********** [ 185.170287][ T2339] pvrusb2: Invalid write control endpoint [ 185.356659][ T2339] pvrusb2: Invalid write control endpoint [ 185.380316][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 185.438160][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 185.451609][ T7111] ------------[ cut here ]------------ [ 185.457931][ T7111] usb 4-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 185.482764][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 185.496387][ T5955] usb 4-1: USB disconnect, device number 2 [ 185.502514][ T7111] WARNING: CPU: 1 PID: 7111 at drivers/usb/core/urb.c:411 usb_submit_urb+0x13a7/0x1770 [ 185.502629][ T7111] Modules linked in: [ 185.502682][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.0.398 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(full) [ 185.530952][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.541269][ T7111] RIP: 0010:usb_submit_urb+0x13a7/0x1770 [ 185.547055][ T7111] Code: e8 ce 65 7e fa 48 8b 7c 24 40 e8 84 88 d4 fe 48 8b 54 24 30 45 89 e8 44 89 f9 48 89 c6 48 c7 c7 40 c4 73 8c e8 5a 23 3d fa 90 <0f> 0b 90 90 e9 a0 ef ff ff e8 9b 65 7e fa 0f b6 2d cb 84 54 09 31 [ 185.566997][ T7111] RSP: 0018:ffffc9001f477978 EFLAGS: 00010282 [ 185.573443][ T7111] RAX: 0000000000000000 RBX: ffff88814ccdc500 RCX: ffffc9000b029000 [ 185.583106][ T7111] RDX: 0000000000080000 RSI: ffffffff817a2815 RDI: 0000000000000001 [ 185.592447][ T7111] RBP: ffff888027d2a058 R08: 0000000000000001 R09: 0000000000000000 [ 185.600692][ T7111] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888146b78460 [ 185.608699][ T7111] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080000280 [ 185.617555][ T7111] FS: 00007f7778ac66c0(0000) GS:ffff888124802000(0000) knlGS:0000000000000000 [ 185.626903][ T7111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.633736][ T7111] CR2: 0000001b3150eff8 CR3: 00000000775c8000 CR4: 0000000000350ef0 [ 185.641867][ T7111] Call Trace: [ 185.645685][ T7111] [ 185.648631][ T7111] ? lockdep_init_map_type+0x50/0x280 [ 185.654560][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.664333][ T7111] ? __init_swait_queue_head+0xca/0x150 [ 185.670946][ T7111] usb_start_wait_urb+0x104/0x4b0 [ 185.676041][ T7111] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 185.682964][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.689746][ T7111] ? __asan_memset+0x23/0x50 [ 185.694486][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.700363][ T7111] usb_control_msg+0x326/0x4a0 [ 185.705189][ T7111] ? __pfx_usb_control_msg+0x10/0x10 [ 185.710618][ T7111] ? look_up_lock_class+0x59/0x150 [ 185.711162][ T2339] pvrusb2: Device being rendered inoperable [ 185.715838][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.727955][ T7111] ? register_lock_class+0x41/0x4c0 [ 185.733341][ T7111] dib0700_ctrl_rd+0x1b2/0x350 [ 185.736509][ T2339] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 185.738169][ T7111] dib0700_i2c_xfer+0xa9a/0xe40 [ 185.751116][ T7111] __i2c_transfer+0x6b6/0x2190 [ 185.756229][ T7111] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.758436][ T2339] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 185.761862][ T7111] ? __pfx___i2c_transfer+0x10/0x10 [ 185.761921][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.761974][ T7111] ? rt_mutex_slowtrylock+0xc9/0x100 [ 185.762037][ T7111] i2c_transfer+0x1da/0x380 [ 185.793833][ T2339] pvrusb2: Attached sub-driver cx25840 [ 185.793960][ T7111] i2cdev_ioctl_rdwr+0x373/0x710 [ 185.801188][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 185.805056][ T7111] i2cdev_ioctl+0x5ff/0x820 [ 185.823239][ T7111] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 185.828380][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.834173][ T7111] ? __fget_files+0x20e/0x3c0 [ 185.839128][ T7111] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 185.845066][ T7111] __x64_sys_ioctl+0x18e/0x210 [ 185.850254][ T7111] do_syscall_64+0xcd/0x4c0 [ 185.854194][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 185.854817][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.871225][ T7111] RIP: 0033:0x7f7777b8eb69 [ 185.875675][ T7111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.896726][ T7111] RSP: 002b:00007f7778ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.907210][ T7111] RAX: ffffffffffffffda RBX: 00007f7777db5fa0 RCX: 00007f7777b8eb69 [ 185.915352][ T7111] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 185.923772][ T7111] RBP: 00007f7777c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 185.931957][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.940389][ T7111] R13: 0000000000000000 R14: 00007f7777db5fa0 R15: 00007ffc26d7a4a8 [ 185.948449][ T7111] [ 185.951656][ T7111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.958965][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.0.398 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(full) [ 185.970561][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.980637][ T7111] Call Trace: [ 185.983929][ T7111] [ 185.986868][ T7111] dump_stack_lvl+0x3d/0x1f0 [ 185.991566][ T7111] vpanic+0x6a3/0x780 [ 185.995607][ T7111] ? __pfx_vpanic+0x10/0x10 [ 186.000160][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.005853][ T7111] ? usb_submit_urb+0x13a7/0x1770 [ 186.010923][ T7111] panic+0xca/0xd0 [ 186.014691][ T7111] ? __pfx_panic+0x10/0x10 [ 186.019194][ T7111] check_panic_on_warn+0xab/0xb0 [ 186.024174][ T7111] __warn+0xf6/0x3c0 [ 186.028104][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.033850][ T7111] ? usb_submit_urb+0x13a7/0x1770 [ 186.038913][ T7111] report_bug+0x3c3/0x580 [ 186.043277][ T7111] ? usb_submit_urb+0x13a7/0x1770 [ 186.048341][ T7111] handle_bug+0x184/0x210 [ 186.052695][ T7111] exc_invalid_op+0x17/0x50 [ 186.057226][ T7111] asm_exc_invalid_op+0x1a/0x20 [ 186.062103][ T7111] RIP: 0010:usb_submit_urb+0x13a7/0x1770 [ 186.067791][ T7111] Code: e8 ce 65 7e fa 48 8b 7c 24 40 e8 84 88 d4 fe 48 8b 54 24 30 45 89 e8 44 89 f9 48 89 c6 48 c7 c7 40 c4 73 8c e8 5a 23 3d fa 90 <0f> 0b 90 90 e9 a0 ef ff ff e8 9b 65 7e fa 0f b6 2d cb 84 54 09 31 [ 186.087473][ T7111] RSP: 0018:ffffc9001f477978 EFLAGS: 00010282 [ 186.093609][ T7111] RAX: 0000000000000000 RBX: ffff88814ccdc500 RCX: ffffc9000b029000 [ 186.101639][ T7111] RDX: 0000000000080000 RSI: ffffffff817a2815 RDI: 0000000000000001 [ 186.109636][ T7111] RBP: ffff888027d2a058 R08: 0000000000000001 R09: 0000000000000000 [ 186.117738][ T7111] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888146b78460 [ 186.125777][ T7111] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080000280 [ 186.133809][ T7111] ? __warn_printk+0x1a5/0x350 [ 186.138670][ T7111] ? usb_submit_urb+0x13a6/0x1770 [ 186.143747][ T7111] ? lockdep_init_map_type+0x50/0x280 [ 186.149176][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.154849][ T7111] ? __init_swait_queue_head+0xca/0x150 [ 186.160436][ T7111] usb_start_wait_urb+0x104/0x4b0 [ 186.165529][ T7111] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 186.171150][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.176826][ T7111] ? __asan_memset+0x23/0x50 [ 186.181460][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.187403][ T7111] usb_control_msg+0x326/0x4a0 [ 186.192222][ T7111] ? __pfx_usb_control_msg+0x10/0x10 [ 186.197557][ T7111] ? look_up_lock_class+0x59/0x150 [ 186.202757][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.208429][ T7111] ? register_lock_class+0x41/0x4c0 [ 186.213695][ T7111] dib0700_ctrl_rd+0x1b2/0x350 [ 186.218526][ T7111] dib0700_i2c_xfer+0xa9a/0xe40 [ 186.223515][ T7111] __i2c_transfer+0x6b6/0x2190 [ 186.228326][ T7111] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.233573][ T7111] ? __pfx___i2c_transfer+0x10/0x10 [ 186.238817][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.244485][ T7111] ? rt_mutex_slowtrylock+0xc9/0x100 [ 186.249809][ T7111] i2c_transfer+0x1da/0x380 [ 186.254352][ T7111] i2cdev_ioctl_rdwr+0x373/0x710 [ 186.259555][ T7111] i2cdev_ioctl+0x5ff/0x820 [ 186.264140][ T7111] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 186.269710][ T7111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.275484][ T7111] ? __fget_files+0x20e/0x3c0 [ 186.280218][ T7111] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 186.285278][ T7111] __x64_sys_ioctl+0x18e/0x210 [ 186.290076][ T7111] do_syscall_64+0xcd/0x4c0 [ 186.294734][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.300789][ T7111] RIP: 0033:0x7f7777b8eb69 [ 186.305266][ T7111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.324947][ T7111] RSP: 002b:00007f7778ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.333620][ T7111] RAX: ffffffffffffffda RBX: 00007f7777db5fa0 RCX: 00007f7777b8eb69 [ 186.341767][ T7111] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 186.350072][ T7111] RBP: 00007f7777c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 186.358231][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.366501][ T7111] R13: 0000000000000000 R14: 00007f7777db5fa0 R15: 00007ffc26d7a4a8 [ 186.374673][ T7111] [ 186.377861][ T7111] Kernel Offset: disabled [ 186.382227][ T7111] Rebooting in 86400 seconds..