last executing test programs: 8m39.637642546s ago: executing program 32 (id=799): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) recvmmsg$unix(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, &(0x7f0000000280)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0xac}}], 0x1, 0x2, 0x0) 7m42.730107557s ago: executing program 33 (id=1137): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 3m32.061140325s ago: executing program 3 (id=2513): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3m31.619725066s ago: executing program 0 (id=2515): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fdatasync(r0) 3m30.776117013s ago: executing program 3 (id=2518): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x5, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x8008, 0x8, 0x5, 0x4, 0x8, 0x10000, 0xfffffff4]}) 3m30.681106213s ago: executing program 0 (id=2519): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) 3m29.979024551s ago: executing program 3 (id=2522): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 3m29.738630325s ago: executing program 0 (id=2523): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 3m28.90975545s ago: executing program 0 (id=2527): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x200880, &(0x7f00000001c0)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303030303030303030303030303037373737372c757466382c757466382c6572726f72733d636f6e74696e75652c00b96565c0941c97570bbc7b02c07f780970d7661194c0cf3528e6f7090fdbf3d1ce5c354f013e96c495d8dd8ee8d05f0ed4152a0f185e2263b2a8c3dd78735da134da1353e5b55d8a588c22cc082a840287ae8bc2cf58e90d6995b2dc6cce8a107684bce7c7744ff115c110979f"], 0x3, 0x1509, &(0x7f0000000f80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 3m28.608001384s ago: executing program 3 (id=2529): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 3m27.671203937s ago: executing program 3 (id=2533): clock_getres(0x9, &(0x7f0000000180)) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x2d) 3m27.542611368s ago: executing program 0 (id=2534): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./bus\x00') 3m23.604493275s ago: executing program 0 (id=2536): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e20, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x58}, {0x7, 0xb, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x3, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3m22.803784171s ago: executing program 34 (id=2536): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e20, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x58}, {0x7, 0xb, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x3, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3m22.683630501s ago: executing program 3 (id=2539): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) close(r0) 3m22.683490897s ago: executing program 35 (id=2539): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) close(r0) 2m59.385306107s ago: executing program 5 (id=2600): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESOCT=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') 2m58.12561044s ago: executing program 5 (id=2603): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "477f0700"}]}}, 0x0}, 0x0) 2m55.368980373s ago: executing program 5 (id=2606): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='4\x00', 0x2) 2m54.704378937s ago: executing program 5 (id=2607): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 2m54.129786592s ago: executing program 5 (id=2608): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000002280)='./file0\x00') 2m53.407412817s ago: executing program 5 (id=2610): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r0, 0x1000000, 0x0) 2m37.876886998s ago: executing program 36 (id=2610): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r0, 0x1000000, 0x0) 1m36.457513733s ago: executing program 6 (id=3015): r0 = fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='\x00', &(0x7f00000000c0)="ce", 0x1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/73, 0x1d}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2) 1m35.810263011s ago: executing program 6 (id=3017): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x200402, &(0x7f0000000200)=ANY=[], 0x1, 0x19c, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/55, 0x37) 1m35.061055277s ago: executing program 6 (id=3022): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80000000000d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close(0x3) 1m34.423074593s ago: executing program 6 (id=3037): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 1m33.643161915s ago: executing program 6 (id=3031): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1, 0xf, 0x0) 1m32.978628032s ago: executing program 6 (id=3036): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000b00)=""/6, 0x6}], 0x2}, 0x2}], 0x1, 0x0, 0x0) 1m31.069440935s ago: executing program 37 (id=3036): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000b00)=""/6, 0x6}], 0x2}, 0x2}], 0x1, 0x0, 0x0) 33.988026953s ago: executing program 8 (id=3346): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x0, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x806, 0x800077, 0x20800000000412, 0x6, 0xfffffffffffffffd, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 33.076824093s ago: executing program 8 (id=3353): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f3"], 0xfe1b) r0 = io_uring_setup(0x868, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x14, &(0x7f0000000000)=[0xffffffff], 0x2) 32.566450832s ago: executing program 8 (id=3357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, {0x0, 0x5, 0x15}, 0x400000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e0001000000000000000000000000000000000000000002000010"], 0xb8}}, 0x0) 31.804333247s ago: executing program 8 (id=3361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 31.451299165s ago: executing program 8 (id=3364): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 30.778333744s ago: executing program 8 (id=3370): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_adjtime(0x17, &(0x7f00000001c0)={0x3, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) 29.018762626s ago: executing program 38 (id=3370): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_adjtime(0x17, &(0x7f00000001c0)={0x3, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) 6.642162648s ago: executing program 9 (id=3476): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4fff, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x0, 0xfff1}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000) 6.026083735s ago: executing program 9 (id=3479): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 5.908389334s ago: executing program 1 (id=3480): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 5.073268823s ago: executing program 1 (id=3483): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 4.774199721s ago: executing program 2 (id=3485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60600) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000140)=0x4eb, 0x4) 4.770617322s ago: executing program 9 (id=3486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 4.39522186s ago: executing program 1 (id=3488): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200070008d90467a000000000000109022400010000a02009040106010300020009210000000122080009058103000400", @ANYRES8=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\b\x00'], 0x0}, 0x0) 4.184631959s ago: executing program 2 (id=3489): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)='a', 0x1}], 0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x0) 4.029266529s ago: executing program 9 (id=3491): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000140)={0x20, 0x3, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0}) 3.922451087s ago: executing program 4 (id=3492): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000040)) 3.63039732s ago: executing program 7 (id=3493): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setreuid(0x0, 0xee00) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x0, @empty}}) 3.587326824s ago: executing program 2 (id=3494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '-'}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'R'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 3.377353197s ago: executing program 4 (id=3495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd27, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x6040810}, 0x20042840) 3.092169886s ago: executing program 7 (id=3496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x2}) 2.927354501s ago: executing program 2 (id=3497): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2002}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94) 2.604600368s ago: executing program 4 (id=3498): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) 2.156967679s ago: executing program 7 (id=3499): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f00000003c0)={0x2, 0x3, 0x1, "0000087aba10fd0000000000800000000000000004b5e3eb63f2810b00", 0x30385056}) 2.094151942s ago: executing program 2 (id=3500): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000400"/20, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) 1.932337022s ago: executing program 4 (id=3501): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000680)=0x158c) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/82, 0x52}], 0x1, 0x50000000, 0x2) 1.709143265s ago: executing program 1 (id=3502): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffd, @loopback, 0xa77}, 0x1c) 1.327997302s ago: executing program 9 (id=3503): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x25}, 0x15, 0x3, 'none\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1.324586054s ago: executing program 7 (id=3513): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000015c0)={[{@type={'type', 0x3d, "3da53813"}}, {@codepage={'codepage', 0x3d, 'cp862'}}, {@gid}, {@creator={'creator', 0x3d, "df1a53be"}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@dir_umask={'dir_umask', 0x3d, 0x10000}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x11, 0x31c, &(0x7f0000001280)="$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") r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/4096, 0x9005) 1.145229795s ago: executing program 4 (id=3504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffff0db703000008000019b7040000020000808500000033000000850000002300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 898.406793ms ago: executing program 1 (id=3505): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 596.498983ms ago: executing program 7 (id=3506): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 573.111264ms ago: executing program 2 (id=3507): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 368.737588ms ago: executing program 4 (id=3508): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r0, 0x308000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 272.214353ms ago: executing program 9 (id=3509): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$setstatus(r0, 0x4, 0x4400) 224.990516ms ago: executing program 1 (id=3510): syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 0s ago: executing program 7 (id=3511): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)=0xc00) kernel console output (not intermixed with test programs): rect mapped block 1819239214 (level 1) [ 703.569423][T11539] EXT4-fs (loop6): 1 truncate cleaned up [ 703.586172][T11539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 703.755976][T11539] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work [ 704.176278][ T8504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.354056][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2523'. [ 704.681743][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 704.694852][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2524'. [ 704.704437][T11558] nbd: socks must be embedded in a SOCK_ITEM attr [ 705.211117][T11562] loop0: detected capacity change from 0 to 256 [ 705.263703][T11562] exfat: Deprecated parameter 'utf8' [ 705.269429][T11562] exfat: Deprecated parameter 'utf8' [ 705.386520][T11562] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 705.474264][T11564] loop5: detected capacity change from 0 to 1024 [ 705.617094][T11570] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2531'. [ 705.874386][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 706.260688][T10426] hfsplus: b-tree write err: -5, ino 4 [ 706.571553][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.663499][ T5805] syz_tun (unregistering): left allmulticast mode [ 706.844362][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.957798][ T5794] bond0: (slave syz_tun): Releasing backup interface [ 706.973315][T11574] sg_write: data in/out 458973/8 bytes for SCSI command 0x4e-- guessing data in; [ 706.973315][T11574] program syz.5.2535 not setting count and/or reply_len properly [ 707.131505][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.244204][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.785370][ T58] bridge_slave_1: left allmulticast mode [ 707.791469][ T58] bridge_slave_1: left promiscuous mode [ 707.798517][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.852188][ T58] bridge_slave_0: left allmulticast mode [ 707.858357][ T58] bridge_slave_0: left promiscuous mode [ 707.865312][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.642448][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.710236][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.753964][ T58] bond0 (unregistering): Released all slaves [ 708.969627][ T58] tipc: Disabling bearer [ 708.975546][ T58] tipc: Left network mode [ 709.393513][ T58] hsr_slave_0: left promiscuous mode [ 709.418707][ T58] hsr_slave_1: left promiscuous mode [ 709.428381][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.435975][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.470777][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.478608][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.565046][ T58] veth1_macvtap: left promiscuous mode [ 709.571075][ T58] veth0_macvtap: left promiscuous mode [ 709.577351][ T58] veth1_vlan: left promiscuous mode [ 709.582992][ T58] veth0_vlan: left promiscuous mode [ 710.551067][ T58] team0 (unregistering): Port device team_slave_1 removed [ 710.605503][ T58] team0 (unregistering): Port device team_slave_0 removed [ 712.162057][T11585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 712.182413][T11584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 712.192593][T11584] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 712.205715][T11584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 712.221631][T11584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.232201][T11590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.246426][T11590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 712.250870][T11592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.262806][T11590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 712.268286][T11592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.330577][T11592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 712.342289][T11592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 712.399196][T11592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 712.514249][T11592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 712.525936][T11592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.783641][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.783885][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.016214][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.016432][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.257315][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.257662][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.522020][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.522257][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.320306][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.337826][T11585] Bluetooth: hci0: command tx timeout [ 714.350852][T11585] Bluetooth: hci1: command tx timeout [ 714.523411][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.702334][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.763974][T11583] chnl_net:caif_netlink_parms(): no params data found [ 714.838004][T11585] Bluetooth: hci3: command tx timeout [ 714.871535][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.975778][T11586] chnl_net:caif_netlink_parms(): no params data found [ 715.071667][T11582] chnl_net:caif_netlink_parms(): no params data found [ 715.378709][T11610] sp0: Synchronizing with TNC [ 715.734373][ T58] bridge_slave_1: left allmulticast mode [ 715.740600][ T58] bridge_slave_1: left promiscuous mode [ 715.750961][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.834392][ T58] bridge_slave_0: left allmulticast mode [ 715.844670][ T58] bridge_slave_0: left promiscuous mode [ 715.854883][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.959654][ T58] bridge_slave_1: left allmulticast mode [ 715.966411][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.013706][ T58] bridge_slave_0: left allmulticast mode [ 716.023280][ T58] bridge_slave_0: left promiscuous mode [ 716.030370][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.418159][T11585] Bluetooth: hci1: command tx timeout [ 716.425114][T11592] Bluetooth: hci0: command tx timeout [ 716.907494][T11585] Bluetooth: hci3: command tx timeout [ 716.974578][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.007614][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.027247][ T58] bond0 (unregistering): Released all slaves [ 717.393553][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.414737][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.445529][ T58] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 717.465027][ T58] bond0 (unregistering): Released all slaves [ 717.978092][ T58] tipc: Left network mode [ 718.115085][T11636] loop5: detected capacity change from 0 to 512 [ 718.143465][ T58] tipc: Disabling bearer [ 718.151547][ T58] tipc: Left network mode [ 718.202746][ T58] IPVS: stopping backup sync thread 6203 ... [ 718.214192][T11636] EXT4-fs (loop5): 1 truncate cleaned up [ 718.222928][T11636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.227305][T11583] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.244011][T11583] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.251967][T11583] bridge_slave_0: entered allmulticast mode [ 718.267222][T11583] bridge_slave_0: entered promiscuous mode [ 718.285405][T11586] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.293349][T11586] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.301379][T11586] bridge_slave_0: entered allmulticast mode [ 718.311575][T11586] bridge_slave_0: entered promiscuous mode [ 718.484302][T11583] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.492270][T11583] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.500106][T11585] Bluetooth: hci1: command tx timeout [ 718.500600][T11583] bridge_slave_1: entered allmulticast mode [ 718.514785][T11585] Bluetooth: hci0: command tx timeout [ 718.516030][T11583] bridge_slave_1: entered promiscuous mode [ 718.549689][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.550174][T11640] syz.4.2556 (11640): drop_caches: 4 [ 718.557932][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.558550][T11582] bridge_slave_0: entered allmulticast mode [ 718.582488][T11582] bridge_slave_0: entered promiscuous mode [ 718.593956][ T7747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.618796][T11586] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.626727][T11586] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.637352][T11586] bridge_slave_1: entered allmulticast mode [ 718.647912][T11586] bridge_slave_1: entered promiscuous mode [ 718.754250][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.762055][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.770188][T11582] bridge_slave_1: entered allmulticast mode [ 718.780702][T11582] bridge_slave_1: entered promiscuous mode [ 718.980563][T11592] Bluetooth: hci3: command tx timeout [ 719.011999][T11644] loop4: detected capacity change from 0 to 512 [ 719.119428][T11644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.133253][T11644] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 719.405427][T11586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.421138][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.427205][T11583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.462611][T11582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.578234][T11583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.601980][T11586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.642175][T11582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.835056][T11651] loop4: detected capacity change from 0 to 128 [ 719.855241][T11651] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 719.906211][T11651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.090156][T11583] team0: Port device team_slave_0 added [ 720.204112][T11586] team0: Port device team_slave_0 added [ 720.308688][T11583] team0: Port device team_slave_1 added [ 720.325082][T11582] team0: Port device team_slave_0 added [ 720.345907][T11586] team0: Port device team_slave_1 added [ 720.492742][T11582] team0: Port device team_slave_1 added [ 720.575825][T11583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.583658][T11583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.612161][T11583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.626472][T11592] Bluetooth: hci0: command tx timeout [ 720.632443][T11585] Bluetooth: hci1: command tx timeout [ 720.794211][T11583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.801646][T11583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.828507][T11583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.863796][ T58] hsr_slave_0: left promiscuous mode [ 720.873017][ T58] hsr_slave_1: left promiscuous mode [ 720.884549][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.895005][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.915097][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.926273][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.960284][ T58] hsr_slave_0: left promiscuous mode [ 720.980023][ T58] hsr_slave_1: left promiscuous mode [ 720.992166][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.999891][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.030468][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.038719][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.058620][T11585] Bluetooth: hci3: command tx timeout [ 721.108277][ T58] veth1_macvtap: left promiscuous mode [ 721.114068][ T58] veth0_macvtap: left promiscuous mode [ 721.120732][ T58] veth1_vlan: left promiscuous mode [ 721.126317][ T58] veth0_vlan: left promiscuous mode [ 721.169325][ T58] veth1_macvtap: left promiscuous mode [ 721.175095][ T58] veth0_macvtap: left promiscuous mode [ 721.181499][ T58] veth1_vlan: left promiscuous mode [ 721.187929][ T58] veth0_vlan: left promiscuous mode [ 722.181561][ T58] team0 (unregistering): Port device team_slave_1 removed [ 722.234033][ T58] team0 (unregistering): Port device team_slave_0 removed [ 722.366028][T11670] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 722.646074][T11672] loop4: detected capacity change from 0 to 256 [ 722.987631][T11674] loop4: detected capacity change from 0 to 1024 [ 723.003530][ T58] team0 (unregistering): Port device team_slave_1 removed [ 723.059451][ T58] team0 (unregistering): Port device team_slave_0 removed [ 723.070389][T11674] hfsplus: bad catalog entry type [ 723.199174][ T3541] hfsplus: b-tree write err: -5, ino 4 [ 723.348564][T11586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.355729][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.382616][T11586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.509796][T11582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.517684][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.544411][T11582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.616744][T11586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.624331][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.650968][T11586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.701996][T11582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.709769][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.736552][T11582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.238131][T11583] hsr_slave_0: entered promiscuous mode [ 724.251444][T11583] hsr_slave_1: entered promiscuous mode [ 724.262770][T11583] debugfs: 'hsr0' already exists in 'hsr' [ 724.271407][T11583] Cannot create hsr debugfs directory [ 724.482265][T11582] hsr_slave_0: entered promiscuous mode [ 724.493279][T11582] hsr_slave_1: entered promiscuous mode [ 724.502992][T11582] debugfs: 'hsr0' already exists in 'hsr' [ 724.509142][T11582] Cannot create hsr debugfs directory [ 724.539315][T11586] hsr_slave_0: entered promiscuous mode [ 724.550706][T11586] hsr_slave_1: entered promiscuous mode [ 724.560429][T11586] debugfs: 'hsr0' already exists in 'hsr' [ 724.566374][T11586] Cannot create hsr debugfs directory [ 724.705961][ T58] IPVS: stop unused estimator thread 0... [ 724.718455][ T58] IPVS: stop unused estimator thread 0... [ 724.930208][T11683] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2576'. [ 724.942245][T11686] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2576'. [ 725.422236][T11691] loop4: detected capacity change from 0 to 128 [ 725.441462][T11691] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 725.510930][T11691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.734386][T11692] loop5: detected capacity change from 0 to 2048 [ 725.849583][T11692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.926668][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 726.277693][T11583] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 726.318382][T11583] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 726.376520][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.386079][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.477561][T11583] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 726.539494][T11583] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 726.848657][T11586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 726.883635][T11586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 726.938035][T11586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 726.991606][T11586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 727.243614][T11582] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 727.308911][T11582] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 727.460668][T11582] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 727.551550][T11582] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 727.898116][T11583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.113883][T11583] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.186808][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.194757][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.290905][T11586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.346512][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.354245][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.567653][T11713] program syz.5.2587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 728.583694][T11586] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.750567][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.758537][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.878331][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.885898][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.985996][T11583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 729.185311][T11582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.500930][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.575693][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.583415][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.603084][T11718] loop5: detected capacity change from 0 to 1024 [ 729.680657][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.688443][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.056264][T11583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.369650][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.668319][T11740] loop4: detected capacity change from 0 to 512 [ 731.723039][T11740] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 731.776313][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.846087][T11740] EXT4-fs (loop4): 1 truncate cleaned up [ 731.854937][T11740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.290467][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.319683][T11583] veth0_vlan: entered promiscuous mode [ 733.403658][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 733.404066][T11583] veth1_vlan: entered promiscuous mode [ 733.744377][T11583] veth0_macvtap: entered promiscuous mode [ 733.798268][T11583] veth1_macvtap: entered promiscuous mode [ 734.031003][T11586] veth0_vlan: entered promiscuous mode [ 734.126615][T11583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.166323][T11586] veth1_vlan: entered promiscuous mode [ 734.194438][T11582] veth0_vlan: entered promiscuous mode [ 734.258865][T11583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.346009][ T1854] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.371415][T11582] veth1_vlan: entered promiscuous mode [ 734.440436][ T4432] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.470375][ T4432] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.509936][ T3541] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.678317][T11775] loop5: detected capacity change from 0 to 128 [ 734.707667][T11586] veth0_macvtap: entered promiscuous mode [ 734.758219][T11775] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 734.815270][T11582] veth0_macvtap: entered promiscuous mode [ 734.850176][T11586] veth1_macvtap: entered promiscuous mode [ 734.860981][T11775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 734.932982][T11582] veth1_macvtap: entered promiscuous mode [ 735.134199][T11586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.232899][T11582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.288417][T11586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.374386][T11779] loop4: detected capacity change from 0 to 256 [ 735.385761][T11582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.407297][ T1854] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.418889][T10426] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.478352][ T4084] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.523260][ T4084] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.558791][ T4084] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.659328][ T4084] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.693163][ T4084] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.761922][ T4084] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.891301][T11779] FAT-fs (loop4): Directory bread(block 64) failed [ 735.898515][T11779] FAT-fs (loop4): Directory bread(block 65) failed [ 735.905457][T11779] FAT-fs (loop4): Directory bread(block 66) failed [ 735.917507][T11779] FAT-fs (loop4): Directory bread(block 67) failed [ 735.924567][T11779] FAT-fs (loop4): Directory bread(block 68) failed [ 735.931623][T11779] FAT-fs (loop4): Directory bread(block 69) failed [ 735.946328][T11779] FAT-fs (loop4): Directory bread(block 70) failed [ 735.954612][T11779] FAT-fs (loop4): Directory bread(block 71) failed [ 735.961741][T11779] FAT-fs (loop4): Directory bread(block 72) failed [ 735.968677][T11779] FAT-fs (loop4): Directory bread(block 73) failed [ 736.267372][ T5910] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 736.497446][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 736.533453][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.546578][ T5910] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 736.558271][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.645953][ T5910] usb 6-1: config 0 descriptor?? [ 737.192535][ T5910] hkems 0003:2006:0118.0023: report_id 491335 is invalid [ 737.200413][ T5910] hkems 0003:2006:0118.0023: item 0 4 1 8 parsing failed [ 737.262521][ T5910] hkems 0003:2006:0118.0023: parse failed [ 737.270527][ T5910] hkems 0003:2006:0118.0023: probe with driver hkems failed with error -22 [ 737.451320][ T5876] usb 6-1: USB disconnect, device number 8 [ 740.458218][ T4717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.466368][ T4717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.705340][ T1865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.713584][ T1865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.178597][T11785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.186666][T11785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.317226][T11785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.325359][T11785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.498059][T11851] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2611'. [ 741.624253][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.632793][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.021683][ T1854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.030131][ T1854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.909244][T11885] netlink: 774 bytes leftover after parsing attributes in process `syz.8.2624'. [ 745.243214][T11891] loop6: detected capacity change from 0 to 164 [ 745.371807][T11891] Unable to read rock-ridge attributes [ 745.442039][T11891] Unable to read rock-ridge attributes [ 745.515083][T11893] loop7: detected capacity change from 0 to 64 [ 745.654206][T11895] loop4: detected capacity change from 0 to 16 [ 745.748156][T11895] erofs (device loop4): mounted with root inode @ nid 36. [ 746.824324][T11907] loop6: detected capacity change from 0 to 1024 [ 746.882853][T11907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 746.990275][T11907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.426008][T11917] CUSE: info not properly terminated [ 747.555785][T11582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.354341][T11924] loop6: detected capacity change from 0 to 256 [ 748.555548][T11924] FAT-fs (loop6): Directory bread(block 64) failed [ 748.562954][T11924] FAT-fs (loop6): Directory bread(block 65) failed [ 748.570705][T11924] FAT-fs (loop6): Directory bread(block 66) failed [ 748.578257][T11924] FAT-fs (loop6): Directory bread(block 67) failed [ 748.585861][T11924] FAT-fs (loop6): Directory bread(block 68) failed [ 748.593295][T11924] FAT-fs (loop6): Directory bread(block 69) failed [ 748.601530][T11924] FAT-fs (loop6): Directory bread(block 70) failed [ 748.608806][T11924] FAT-fs (loop6): Directory bread(block 71) failed [ 748.616373][T11924] FAT-fs (loop6): Directory bread(block 72) failed [ 748.624410][T11924] FAT-fs (loop6): Directory bread(block 73) failed [ 749.924547][T11940] loop8: detected capacity change from 0 to 256 [ 750.024466][T11940] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 750.119272][T11940] exFAT-fs (loop8): failed to exfat_utf8_to_utf16 (err : -22) nls len : 2 [ 751.829332][T11958] option changes via remount are deprecated (pid=11957 comm=syz.8.2658) [ 753.671113][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2667'. [ 754.960136][T11994] loop6: detected capacity change from 0 to 256 [ 754.981225][T11994] exfat: Deprecated parameter 'namecase' [ 755.109641][T11988] loop8: detected capacity change from 0 to 4096 [ 755.111734][T11994] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 755.378745][T11988] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 755.385617][T11988] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 755.963633][ T4344] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22. [ 755.986666][T11583] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 755.994935][T11583] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 756.002647][T11583] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 756.067310][T10426] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22. [ 756.173058][T11996] loop4: detected capacity change from 0 to 4096 [ 757.102365][T11592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 757.113628][T11592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 757.169691][T11592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 757.190288][T11592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 757.203563][T11592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 758.362575][T12010] chnl_net:caif_netlink_parms(): no params data found [ 759.301208][T11592] Bluetooth: hci5: command tx timeout [ 759.409315][T12030] loop7: detected capacity change from 0 to 4096 [ 759.437392][T12030] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 759.609502][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 759.737990][T12030] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 759.891423][T12030] ntfs3(loop7): ino=1b, mi_enum_attr [ 759.897276][T12030] ntfs3(loop7): ino=1b, mi_enum_attr [ 759.954589][T12041] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 760.035654][T12010] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.043704][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.052991][T12010] bridge_slave_0: entered allmulticast mode [ 760.063263][T12010] bridge_slave_0: entered promiscuous mode [ 760.339809][T12010] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.347810][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.355717][T12010] bridge_slave_1: entered allmulticast mode [ 760.366258][T12010] bridge_slave_1: entered promiscuous mode [ 760.524905][ T4432] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.745216][ T4432] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.866767][T12049] loop8: detected capacity change from 0 to 128 [ 760.983770][ T4432] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.023349][T12010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.064993][T12010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.105919][ T4432] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.167306][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 761.167391][ T30] audit: type=1326 audit(1768439480.339:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 761.192048][T12049] smb3: Unexpected value for 'acl' [ 761.202687][T12049] CIFS mount error: No usable UNC path provided in device string! [ 761.202687][T12049] [ 761.214244][T12049] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 761.378565][T11592] Bluetooth: hci5: command tx timeout [ 761.397541][ T30] audit: type=1326 audit(1768439480.379:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 761.420255][ T30] audit: type=1326 audit(1768439480.449:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 761.445669][ T30] audit: type=1326 audit(1768439480.449:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 761.469356][ T30] audit: type=1326 audit(1768439480.459:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 761.492830][ T30] audit: type=1326 audit(1768439480.459:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 761.515349][ T30] audit: type=1326 audit(1768439480.459:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 761.545332][ T30] audit: type=1326 audit(1768439480.459:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 761.678376][T12010] team0: Port device team_slave_0 added [ 761.857354][T12010] team0: Port device team_slave_1 added [ 761.954412][ T4432] bond0: left allmulticast mode [ 761.960349][ T4432] bond_slave_0: left allmulticast mode [ 761.966053][ T4432] bond_slave_1: left allmulticast mode [ 761.980365][ T4432] bond0: left promiscuous mode [ 761.985501][ T4432] bond_slave_0: left promiscuous mode [ 761.992996][ T4432] bond_slave_1: left promiscuous mode [ 762.000732][ T4432] bridge0: port 3(bond0) entered disabled state [ 762.071282][ T4432] bridge_slave_1: left allmulticast mode [ 762.079621][ T4432] bridge_slave_1: left promiscuous mode [ 762.088519][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.143385][ T4432] bridge_slave_0: left allmulticast mode [ 762.149669][ T4432] bridge_slave_0: left promiscuous mode [ 762.163504][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.714921][ T4432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.747745][ T4432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.964589][ T4432] bond0 (unregistering): Released all slaves [ 762.994887][ T4432] bond1 (unregistering): Released all slaves [ 763.467816][T11592] Bluetooth: hci5: command tx timeout [ 763.943539][T12010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.950853][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.977376][T12010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.989847][ T4432] tipc: Left network mode [ 764.005652][T12010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.013134][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.040065][T12010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.529271][T12079] devtmpfs: Cannot change global quota limit on remount [ 764.680187][ T4432] hsr_slave_0: left promiscuous mode [ 764.700497][ T4432] hsr_slave_1: left promiscuous mode [ 764.709163][ T4432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.721778][ T4432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.785503][ T4432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.794638][ T4432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.859441][T12078] loop7: detected capacity change from 0 to 4096 [ 764.890387][ T4432] team_slave_0: left promiscuous mode [ 764.896068][ T4432] team_slave_1: left promiscuous mode [ 764.902395][ T4432] veth1_macvtap: left promiscuous mode [ 764.908514][ T4432] veth0_macvtap: left promiscuous mode [ 764.923625][ T4432] veth1_vlan: left promiscuous mode [ 764.929424][ T4432] veth0_vlan: left promiscuous mode [ 765.308488][T12086] netlink: 'syz.6.2715': attribute type 1 has an invalid length. [ 765.316590][T12086] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2715'. [ 765.326711][T12086] NCSI netlink: No device for ifindex 0 [ 765.339254][T12084] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 765.537798][T11592] Bluetooth: hci5: command tx timeout [ 765.995592][ T4432] team0 (unregistering): Port device team_slave_1 removed [ 766.034784][ T4432] team0 (unregistering): Port device team_slave_0 removed [ 766.790021][T12010] hsr_slave_0: entered promiscuous mode [ 766.801194][T12010] hsr_slave_1: entered promiscuous mode [ 767.108780][T12099] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 767.207206][ T4432] IPVS: stop unused estimator thread 0... [ 768.071224][T12010] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 768.187752][T12010] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 768.259118][T12010] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 768.321111][T12010] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 769.417590][T12010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.587425][T12010] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.653433][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.661224][T10427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.758615][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.766298][T10427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.358296][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.656754][ T42] IPVS: starting estimator thread 0... [ 771.767334][T12152] IPVS: using max 192 ests per chain, 9600 per kthread [ 772.287804][T12158] loop7: detected capacity change from 0 to 736 [ 772.575862][T12164] loop4: detected capacity change from 0 to 8 [ 773.244547][T12010] veth0_vlan: entered promiscuous mode [ 773.339659][T12010] veth1_vlan: entered promiscuous mode [ 773.586745][T12010] veth0_macvtap: entered promiscuous mode [ 773.656270][T12010] veth1_macvtap: entered promiscuous mode [ 773.846281][T12010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.920825][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.051163][ T4084] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.062397][ T4084] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.085778][ T4084] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.121774][ T4084] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.365806][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 774.581383][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.592095][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 774.608264][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 774.617836][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.755193][ T9] usb 5-1: config 0 descriptor?? [ 774.798412][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 774.805455][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 774.858985][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 774.890020][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 774.900125][ T9] usb 5-1: media controller created [ 774.946598][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 775.031534][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 775.038249][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 775.051290][T12180] dvb-usb: bulk message failed: -22 (2/0) [ 775.103740][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 775.189839][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 775.197192][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 775.233531][ T9] usb 5-1: USB disconnect, device number 11 [ 775.341488][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 776.016401][T12201] loop7: detected capacity change from 0 to 1024 [ 776.061800][T12203] loop8: detected capacity change from 0 to 512 [ 776.136244][T12203] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.150399][T12203] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 776.484221][T11583] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.543616][ T4977] hfsplus: b-tree write err: -5, ino 4 [ 778.310418][T12238] loop7: detected capacity change from 0 to 1024 [ 778.379398][T12238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 778.448074][T12238] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 778.525593][T12245] netlink: 536 bytes leftover after parsing attributes in process `syz.8.2774'. [ 778.535861][T12245] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2774'. [ 778.553221][T12238] System zones: 0-1, 3-36 [ 778.570922][T12238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.993286][T11586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.957633][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.965770][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.151851][T12261] mkiss: ax0: crc mode is auto. [ 780.164593][T10427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.172905][T10427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.397347][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2782'. [ 780.407719][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 780.597468][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 780.634182][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.645703][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.656600][ T42] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.670151][ T42] usb 9-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 780.679791][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.722128][ T42] usb 9-1: config 0 descriptor?? [ 780.880196][ T30] audit: type=1326 audit(1768439500.059:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12266 comm="syz.4.2783" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66539 code=0x0 [ 781.198368][ T42] nzxt-kraken2 0003:1E71:170E.0024: unknown main item tag 0x0 [ 781.214950][ T42] nzxt-kraken2 0003:1E71:170E.0024: unknown main item tag 0x0 [ 781.223417][ T42] nzxt-kraken2 0003:1E71:170E.0024: unknown main item tag 0x0 [ 781.231407][ T42] nzxt-kraken2 0003:1E71:170E.0024: unknown main item tag 0x0 [ 781.239373][ T42] nzxt-kraken2 0003:1E71:170E.0024: item fetching failed at offset 4/5 [ 781.349925][ T42] nzxt-kraken2 0003:1E71:170E.0024: hid parse failed with -22 [ 781.358644][ T42] nzxt-kraken2 0003:1E71:170E.0024: probe with driver nzxt-kraken2 failed with error -22 [ 781.447745][ T42] usb 9-1: USB disconnect, device number 2 [ 781.656010][T12274] nbd: must specify at least one socket [ 782.232139][T12280] vivid-000: disconnect [ 782.300684][T12278] vivid-000: reconnect [ 782.872038][T12292] tipc: Enabling of bearer rejected, failed to enable media [ 783.976520][T12304] loop9: detected capacity change from 0 to 2048 [ 784.006044][T12310] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 784.048035][T12309] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 784.142466][T12304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 784.433660][T12315] loop6: detected capacity change from 0 to 64 [ 784.465295][T12315] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 784.480734][ T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 784.667133][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 784.705216][ T42] usb 8-1: unable to get BOS descriptor or descriptor too short [ 784.729714][ T42] usb 8-1: config 4 has an invalid interface number: 136 but max is 0 [ 784.738664][ T42] usb 8-1: config 4 has no interface number 0 [ 784.745027][ T42] usb 8-1: config 4 interface 136 has no altsetting 0 [ 784.816596][ T42] usb 8-1: string descriptor 0 read error: -22 [ 784.823802][ T42] usb 8-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice= d.c8 [ 784.833503][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.926685][ T42] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 784.935700][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 784.941903][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 784.952855][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 784.958995][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 784.998107][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.007833][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.045901][ T42] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 785.054815][ T42] usb 8-1: media controller created [ 785.062085][T12322] ip6tnl1: entered allmulticast mode [ 785.200228][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.207684][T12313] dvb-usb: bulk message failed: -22 (7/0) [ 785.214898][T12313] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 785.228130][T12313] ttusb2: i2c transfer failed. [ 785.447281][T12326] loop8: detected capacity change from 0 to 512 [ 785.461670][T12326] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 785.484903][ T42] ttusb2: set interface to alts=3 failed [ 785.509908][T12326] EXT4-fs (loop8): orphan cleanup on readonly fs [ 785.611966][T12326] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2809: bad orphan inode 15 [ 785.665508][T12326] ext4_test_bit(bit=14, block=18) = 1 [ 785.675200][T12326] is_bad_inode(inode)=0 [ 785.680070][T12326] NEXT_ORPHAN(inode)=1023 [ 785.684562][T12326] max_ino=32 [ 785.688102][T12326] i_nlink=0 [ 785.737772][T12326] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2971: inode #15: comm syz.8.2809: corrupted xattr block 19: e_value size too large [ 785.787612][T12334] loop9: detected capacity change from 0 to 128 [ 785.789185][T12326] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 785.810693][T12326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 785.925888][ T42] DVB: Unable to find symbol tda10023_attach() [ 785.932470][ T42] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 785.985156][ T30] audit: type=1800 audit(1768439505.159:92): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2812" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 786.377097][ T42] rc_core: IR keymap rc-tt-1500 not found [ 786.383070][ T42] Registered IR keymap rc-empty [ 786.396693][ T42] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 786.410337][ T42] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input18 [ 786.479794][T11583] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.544316][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 786.551695][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 786.557961][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 786.568678][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 786.574603][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 786.592041][ T42] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 786.707436][T12014] dvb-usb: bulk message failed: -22 (4/0) [ 786.713712][T12014] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 786.724379][T12014] dvb-usb: error -5 while querying for an remote control event. [ 786.751199][ T42] usb 8-1: USB disconnect, device number 2 [ 787.091405][T12347] hugetlbfs: Bad value 'B' for mount option 'size' [ 787.091405][T12347] [ 787.189565][ T42] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 787.621226][T12355] loop9: detected capacity change from 0 to 64 [ 787.676428][T12355] hfs: unable to locate alternate MDB [ 787.682562][T12355] hfs: continuing without an alternate MDB [ 787.803314][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.810275][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.748802][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2830'. [ 790.862492][T12397] tipc: Started in network mode [ 790.867945][T12397] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 790.877797][T12397] tipc: Enabling of bearer rejected, failed to enable media [ 791.332929][T12402] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2845'. [ 792.327812][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 792.497146][ T42] usb 10-1: Using ep0 maxpacket: 8 [ 792.522864][ T42] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 792.613931][ T42] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 792.623777][ T42] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 792.632438][ T42] usb 10-1: Product: syz [ 792.637119][ T42] usb 10-1: Manufacturer: syz [ 792.642105][ T42] usb 10-1: SerialNumber: syz [ 792.940760][ T42] usb 10-1: Handspring Visor / Palm OS: port 0, is for Console use [ 792.949307][ T42] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 792.957792][ T42] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 793.143124][ T42] usb 10-1: palm_os_3_probe - error -71 getting bytes available request [ 793.152150][ T42] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 793.167915][ T42] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 793.212004][ T42] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 793.248879][ T42] usb 10-1: USB disconnect, device number 2 [ 793.334731][ T42] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 793.468503][ T42] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 793.479683][ T42] visor 10-1:1.0: device disconnected [ 794.149710][T12436] tipc: Enabling of bearer rejected, failed to enable media [ 794.591233][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 794.630699][T12446] netlink: 'syz.4.2868': attribute type 1 has an invalid length. [ 794.752578][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 794.788161][ T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 794.800162][ T9] usb 8-1: config 0 has no interface number 0 [ 794.806493][ T9] usb 8-1: config 0 interface 184 has no altsetting 0 [ 794.907195][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 794.916622][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.931583][ T9] usb 8-1: Product: syz [ 794.935975][ T9] usb 8-1: Manufacturer: syz [ 794.943245][ T9] usb 8-1: SerialNumber: syz [ 795.030030][ T9] usb 8-1: config 0 descriptor?? [ 795.046068][ T9] smsc75xx v1.0.0 [ 795.370959][T12456] loop9: detected capacity change from 0 to 64 [ 795.415198][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 795.426616][ T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 795.502346][ T9] usb 8-1: USB disconnect, device number 3 [ 795.777874][T10426] hfs: request for non-existent node 1280 in B*Tree [ 795.784818][T10426] hfs: request for non-existent node 1280 in B*Tree [ 796.835028][T12473] loop4: detected capacity change from 0 to 2048 [ 796.875727][T12473] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 796.953754][T12478] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 798.381443][T12497] loop4: detected capacity change from 0 to 64 [ 798.442249][T12497] hfs: unable to locate alternate MDB [ 798.448107][T12497] hfs: continuing without an alternate MDB [ 798.883508][T12503] loop8: detected capacity change from 0 to 8 [ 799.422635][T12512] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 800.072549][T12520] loop7: detected capacity change from 0 to 256 [ 800.212393][T12520] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 800.571629][T12522] loop8: detected capacity change from 0 to 2048 [ 800.809845][T12522] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.135218][T12531] loop4: detected capacity change from 0 to 1024 [ 802.672328][T12553] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 803.828156][T12528] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 805.833104][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'. [ 806.218253][T12604] syz_tun: entered promiscuous mode [ 806.223937][T12604] macvtap1: entered promiscuous mode [ 806.342956][T12604] syz_tun: left promiscuous mode [ 807.559760][T12615] loop4: detected capacity change from 0 to 4096 [ 807.604930][T12615] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 807.808506][T12615] ntfs3(loop4): Failed to load $Secure (-22). [ 807.814879][T12615] ntfs3(loop4): Failed to initialize $Secure (-22). [ 808.537941][T12014] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 808.750825][T12014] usb 10-1: Using ep0 maxpacket: 16 [ 808.773218][T12014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.784993][T12014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.795616][T12014] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 808.809279][T12014] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 808.819031][T12014] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.889452][T12014] usb 10-1: config 0 descriptor?? [ 809.474583][T12014] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 809.518016][T12014] microsoft 0003:045E:07DA.0025: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 809.530905][T12014] microsoft 0003:045E:07DA.0025: no inputs found [ 809.537802][T12014] microsoft 0003:045E:07DA.0025: could not initialize ff, continuing anyway [ 809.693498][T12014] usb 10-1: USB disconnect, device number 3 [ 811.500660][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 812.061522][T12684] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2979'. [ 812.309750][T12688] loop9: detected capacity change from 0 to 64 [ 813.140824][T12701] loop9: detected capacity change from 0 to 256 [ 813.171764][T12701] exfat: Deprecated parameter 'namecase' [ 813.178522][T12701] exfat: Deprecated parameter 'utf8' [ 813.234535][T12701] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 813.842516][T12710] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 814.429245][T12014] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 814.603064][ T30] audit: type=1326 audit(1768439533.779:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.9.2997" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 814.608467][T12014] usb 5-1: Using ep0 maxpacket: 8 [ 814.703102][T12014] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 814.712281][T12014] usb 5-1: config 2 has no interface number 0 [ 814.719351][T12014] usb 5-1: config 2 interface 31 has no altsetting 0 [ 814.775583][T12014] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 814.786040][T12014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.798561][T12014] usb 5-1: Product: syz [ 814.803050][T12014] usb 5-1: Manufacturer: syz [ 814.809406][T12014] usb 5-1: SerialNumber: syz [ 815.529277][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3001'. [ 815.539854][T12732] IPVS: Error connecting to the multicast addr [ 815.581440][T12014] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 815.647160][T12014] usb 5-1: USB disconnect, device number 12 [ 817.270754][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3014'. [ 817.280437][T12759] netlink: 'syz.7.3014': attribute type 5 has an invalid length. [ 817.288700][T12759] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3014'. [ 817.375868][T12759] geneve2: entered promiscuous mode [ 817.381938][T12759] geneve2: entered allmulticast mode [ 817.415744][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 817.615370][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 817.642773][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.658449][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.673123][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 817.680240][ T9] usb 9-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 817.689775][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.754336][ T9] usb 9-1: config 0 descriptor?? [ 818.220910][ T9] zeroplus 0003:0C12:0030.0026: unbalanced collection at end of report description [ 818.234059][T12770] loop6: detected capacity change from 0 to 8 [ 818.251212][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3019'. [ 818.255662][ T9] zeroplus 0003:0C12:0030.0026: parse failed [ 818.271131][ T9] zeroplus 0003:0C12:0030.0026: probe with driver zeroplus failed with error -22 [ 818.307343][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3019'. [ 818.435501][T12014] usb 9-1: USB disconnect, device number 3 [ 818.794232][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3021'. [ 818.868529][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3021'. [ 819.558984][T12786] macvtap1: entered promiscuous mode [ 819.564558][T12786] syz_tun: entered promiscuous mode [ 819.593285][T12786] syz_tun: left promiscuous mode [ 820.454464][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3033'. [ 820.638279][T10427] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.775510][T10427] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.840615][T12802] loop7: detected capacity change from 0 to 2048 [ 820.964174][T10427] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.166587][T10427] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.578886][T10427] bridge_slave_1: left allmulticast mode [ 821.584887][T10427] bridge_slave_1: left promiscuous mode [ 821.592043][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.621884][T10427] bridge_slave_0: left allmulticast mode [ 821.628028][T10427] bridge_slave_0: left promiscuous mode [ 821.634785][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.198947][T10427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.241514][T10427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.269627][T10427] bond0 (unregistering): Released all slaves [ 822.716296][T10427] hsr_slave_0: left promiscuous mode [ 822.758187][T10427] hsr_slave_1: left promiscuous mode [ 822.766701][T10427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.782376][T10427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.813652][T10427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.822238][T10427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.911645][T12812] loop9: detected capacity change from 0 to 512 [ 822.925543][T10427] veth1_macvtap: left promiscuous mode [ 822.931541][T10427] veth0_macvtap: left promiscuous mode [ 822.937725][T10427] veth1_vlan: left promiscuous mode [ 822.943398][T10427] veth0_vlan: left promiscuous mode [ 823.342564][T12812] EXT4-fs (loop9): 1 truncate cleaned up [ 823.359868][T12812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.483126][T12812] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.9.3042: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 823.525953][T11585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.543473][T11585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.568091][T11585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.591020][T11585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.607162][T11585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 823.993433][T10427] team0 (unregistering): Port device team_slave_1 removed [ 824.081187][T12010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.097313][T10427] team0 (unregistering): Port device team_slave_0 removed [ 824.571996][T12823] syz_tun: entered promiscuous mode [ 824.577961][T12823] macvtap1: entered promiscuous mode [ 824.664236][T12823] syz_tun: left promiscuous mode [ 825.225013][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3047'. [ 825.363914][T12831] loop7: detected capacity change from 0 to 256 [ 825.777736][T11592] Bluetooth: hci0: command tx timeout [ 826.331624][T12818] chnl_net:caif_netlink_parms(): no params data found [ 827.770554][T12818] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.778516][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.786316][T12818] bridge_slave_0: entered allmulticast mode [ 827.801852][T12818] bridge_slave_0: entered promiscuous mode [ 827.846407][T12818] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.855481][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.864017][T12818] bridge_slave_1: entered allmulticast mode [ 827.874537][T12818] bridge_slave_1: entered promiscuous mode [ 827.877654][T11592] Bluetooth: hci0: command tx timeout [ 828.135543][T12818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.251892][T12818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.593247][T12818] team0: Port device team_slave_0 added [ 828.650919][T12818] team0: Port device team_slave_1 added [ 828.977868][T12818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.985110][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.015023][T12818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.106055][T12818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.113929][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.146778][T12818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.504274][T12818] hsr_slave_0: entered promiscuous mode [ 829.519154][T12818] hsr_slave_1: entered promiscuous mode [ 829.530422][T12818] debugfs: 'hsr0' already exists in 'hsr' [ 829.540100][T12818] Cannot create hsr debugfs directory [ 829.560255][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3071'. [ 829.947652][T11592] Bluetooth: hci0: command tx timeout [ 831.030783][T12818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 831.075825][T12818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 831.105814][T12818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 831.164759][T12818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 831.448791][T12904] syz_tun: entered promiscuous mode [ 831.454607][T12904] macvtap1: entered promiscuous mode [ 831.521996][T12904] syz_tun: left promiscuous mode [ 831.538552][T12014] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 831.708312][T12014] usb 9-1: Using ep0 maxpacket: 32 [ 831.742007][T12014] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.753450][T12014] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 831.767077][T12014] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 831.776477][T12014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.896528][T12908] loop4: detected capacity change from 0 to 1024 [ 831.910109][T12014] usb 9-1: config 0 descriptor?? [ 832.020264][T11592] Bluetooth: hci0: command tx timeout [ 832.322039][T12818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.434691][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.442444][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.450851][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.458581][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.466016][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.473713][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.481442][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.489058][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.496498][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.508891][T12014] zydacron 0003:13EC:0006.0027: unknown main item tag 0x0 [ 832.631584][T12818] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.645761][ T4717] hfsplus: b-tree write err: -5, ino 4 [ 832.646668][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3085'. [ 832.692723][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.700385][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.836265][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.844004][T10426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.108226][T12014] zydacron 0003:13EC:0006.0027: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.8-1/input0 [ 833.210501][T12014] usb 9-1: USB disconnect, device number 4 [ 834.779789][T12818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.332973][T12818] veth0_vlan: entered promiscuous mode [ 835.406567][T12818] veth1_vlan: entered promiscuous mode [ 835.711065][T12818] veth0_macvtap: entered promiscuous mode [ 835.761288][T11592] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 835.863921][T12818] veth1_macvtap: entered promiscuous mode [ 835.938558][T11592] Bluetooth: hci3: command 0x0406 tx timeout [ 835.938810][T11585] Bluetooth: hci1: command 0x0406 tx timeout [ 836.038687][T12818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.146010][T12818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.230290][T11785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.272828][ T5860] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 836.298993][T11785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.347349][ T4717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.382130][ T4717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.470901][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3099'. [ 836.480209][T12946] netlink: 'syz.8.3099': attribute type 5 has an invalid length. [ 836.488351][T12946] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3099'. [ 836.548225][T12946] geneve2: entered promiscuous mode [ 836.553667][T12946] geneve2: entered allmulticast mode [ 836.564624][ T5860] usb 10-1: Using ep0 maxpacket: 8 [ 836.606130][ T5860] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.620993][ T5860] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.631326][ T5860] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.644841][ T5860] usb 10-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 836.657915][ T5860] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.678877][ T5860] usb 10-1: config 0 descriptor?? [ 837.164914][ T5860] nzxt-kraken2 0003:1E71:170E.0028: item fetching failed at offset 4/5 [ 837.232408][ T5860] nzxt-kraken2 0003:1E71:170E.0028: hid parse failed with -22 [ 837.244302][ T5860] nzxt-kraken2 0003:1E71:170E.0028: probe with driver nzxt-kraken2 failed with error -22 [ 837.374058][ T5860] usb 10-1: USB disconnect, device number 4 [ 838.052645][ T5860] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 838.199273][T12964] tipc: Enabling of bearer rejected, failed to enable media [ 838.242884][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 838.275800][ T5860] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.288928][ T5860] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.302621][ T5860] usb 5-1: config 0 interface 0 has no altsetting 0 [ 838.309684][ T5860] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 838.319298][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.413473][ T5860] usb 5-1: config 0 descriptor?? [ 838.920868][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3108'. [ 839.080831][ T5860] usb 5-1: string descriptor 0 read error: -71 [ 839.101174][ T5860] uclogic 0003:5543:0045.0029: failed retrieving string descriptor #200: -71 [ 839.110772][ T5860] uclogic 0003:5543:0045.0029: failed retrieving pen parameters: -71 [ 839.124838][ T5860] uclogic 0003:5543:0045.0029: failed probing pen v2 parameters: -71 [ 839.133650][ T5860] uclogic 0003:5543:0045.0029: failed probing parameters: -71 [ 839.142080][ T5860] uclogic 0003:5543:0045.0029: probe with driver uclogic failed with error -71 [ 839.264527][ T5860] usb 5-1: USB disconnect, device number 13 [ 839.602597][T12980] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3110'. [ 840.245397][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3122'. [ 840.270925][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3111'. [ 840.280344][T12987] netlink: 'syz.9.3111': attribute type 5 has an invalid length. [ 840.295256][T12987] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3111'. [ 840.338383][T12987] geneve2: entered promiscuous mode [ 840.343965][T12987] geneve2: entered allmulticast mode [ 840.967952][T12996] loop4: detected capacity change from 0 to 1024 [ 841.111908][T12996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.678831][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.138334][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.146485][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.381510][T10427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.390554][T10427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.580581][T13020] loop7: detected capacity change from 0 to 64 [ 843.112037][T13021] loop9: detected capacity change from 0 to 4096 [ 843.177434][T13021] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 843.370589][T13029] loop7: detected capacity change from 0 to 128 [ 843.396172][T13021] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 843.413454][T13029] EXT4-fs (loop7): Test dummy encryption mode enabled [ 843.456758][T13021] ntfs3(loop9): ino=1b, mi_enum_attr [ 843.474778][T13029] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 843.477291][T13021] ntfs3(loop9): ino=1b, mi_enum_attr [ 843.570900][T13029] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 843.594324][T13027] loop2: detected capacity change from 0 to 2048 [ 843.602555][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 843.612374][T13035] netlink: 'syz.4.3129': attribute type 5 has an invalid length. [ 843.620592][T13035] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3129'. [ 843.684669][T13027] EXT4-fs: Ignoring removed bh option [ 843.726168][T13035] geneve2: entered promiscuous mode [ 843.732075][T13035] geneve2: entered allmulticast mode [ 843.820550][T13027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 843.984976][T11586] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 844.113774][T12818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.649373][T13043] loop4: detected capacity change from 0 to 256 [ 844.679663][T13043] exfat: Deprecated parameter 'utf8' [ 844.685322][T13043] exfat: Deprecated parameter 'utf8' [ 844.700542][T13043] exfat: Deprecated parameter 'utf8' [ 844.925806][T13043] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 845.443128][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3137'. [ 845.763111][T13059] sg_write: data in/out 262115/14 bytes for SCSI command 0x0-- guessing data in; [ 845.763111][T13059] program syz.7.3142 not setting count and/or reply_len properly [ 846.555602][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 846.565608][T13069] netlink: 'syz.2.3145': attribute type 5 has an invalid length. [ 846.573920][T13069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3145'. [ 846.672446][T13069] geneve2: entered promiscuous mode [ 846.678302][T13069] geneve2: entered allmulticast mode [ 847.465578][T13075] loop9: detected capacity change from 0 to 4096 [ 847.487191][T13075] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 847.490616][T13075] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 4096) [ 847.608241][T13083] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 847.668599][T13075] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 847.683902][T13075] Remounting filesystem read-only [ 847.789575][T13085] loop7: detected capacity change from 0 to 256 [ 847.792309][T13085] exfat: Deprecated parameter 'utf8' [ 847.792425][T13085] exfat: Deprecated parameter 'utf8' [ 847.914627][T13085] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 848.036505][T13088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.733985][T13096] loop4: detected capacity change from 0 to 512 [ 848.846761][T13096] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3159: attempt to clear invalid blocks 2 len 1 [ 848.964917][T13096] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 848.980666][T13096] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3159: invalid indirect mapped block 1819239214 (level 0) [ 849.117789][T13096] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3159: invalid indirect mapped block 1819239214 (level 1) [ 849.172682][T13096] EXT4-fs (loop4): 1 truncate cleaned up [ 849.181455][T13096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.257212][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.264259][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.316297][T13094] loop7: detected capacity change from 0 to 4096 [ 849.696542][T13094] ntfs3(loop7): ino=1a, mi_enum_attr [ 849.696702][T13094] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 849.740710][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.351118][ T30] audit: type=1326 audit(1768439572.519:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13151 comm="syz.7.3186" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 854.180942][T13161] loop9: detected capacity change from 0 to 512 [ 854.288092][T13161] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.3192: Parent and EA inode have the same ino 15 [ 854.372233][T13161] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.3192: Parent and EA inode have the same ino 15 [ 854.387447][T13161] EXT4-fs (loop9): 1 orphan inode deleted [ 854.396125][T13161] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.543345][T13161] EXT4-fs warning (device loop9): __ext4_unlink:3276: inode #15: comm syz.9.3192: Deleting file 'file1' with no links [ 854.941139][T12010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.097291][ T42] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 856.285057][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 856.297206][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.307581][ T42] usb 10-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 856.317157][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.390588][ T42] usb 10-1: config 0 descriptor?? [ 856.661696][T13199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3208'. [ 856.851045][ T42] bigben 0003:146B:0902.002A: unexpected rdesc, please submit for review [ 856.935348][ T42] bigben 0003:146B:0902.002A: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.9-1/input0 [ 856.947298][ T42] bigben 0003:146B:0902.002A: not enough fields in HID_OUTPUT_REPORT 0 [ 856.955896][ T42] bigben 0003:146B:0902.002A: no output report found [ 857.086765][ T42] usb 10-1: USB disconnect, device number 5 [ 857.133045][T13205] tipc: Started in network mode [ 857.138693][T13205] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 857.148305][T13205] tipc: Enabled bearer , priority 10 [ 857.563822][T13211] loop7: detected capacity change from 0 to 22 [ 857.647116][T13211] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 858.169961][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3218'. [ 858.257305][ T42] tipc: Node number set to 10398378 [ 859.509428][T13231] loop7: detected capacity change from 0 to 2048 [ 859.559033][T13231] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 859.619230][T13236] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 859.721045][T13235] loop2: detected capacity change from 0 to 1024 [ 859.821959][T13235] hfsplus: invalid length 32517 has been corrected to 255 [ 859.987830][T13236] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 859.999188][T13236] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 860.087483][T13236] Remounting filesystem read-only [ 860.102437][T11586] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 862.842045][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3243'. [ 864.734131][T13302] loop7: detected capacity change from 0 to 1024 [ 864.930876][T13302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 864.943951][T13302] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.983950][T13309] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 865.152736][ T30] audit: type=1800 audit(1768439584.329:95): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3256" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 865.184678][T13302] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.3256: Freeing blocks not in datazone - block = 0, count = 16 [ 865.613496][T11586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 865.896591][T13320] Bluetooth: MGMT ver 1.23 [ 866.442238][T13328] loop9: detected capacity change from 0 to 256 [ 866.716436][T13328] FAT-fs (loop9): Directory bread(block 64) failed [ 866.724736][T13328] FAT-fs (loop9): Directory bread(block 65) failed [ 866.735184][T13328] FAT-fs (loop9): Directory bread(block 66) failed [ 866.742133][T13328] FAT-fs (loop9): Directory bread(block 67) failed [ 866.749274][T13328] FAT-fs (loop9): Directory bread(block 68) failed [ 866.756017][T13328] FAT-fs (loop9): Directory bread(block 69) failed [ 866.766514][T13328] FAT-fs (loop9): Directory bread(block 70) failed [ 866.771449][ T30] audit: type=1800 audit(1768439585.909:96): pid=13334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3270" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 866.773432][T13328] FAT-fs (loop9): Directory bread(block 71) failed [ 866.803743][T13328] FAT-fs (loop9): Directory bread(block 72) failed [ 866.815457][T13328] FAT-fs (loop9): Directory bread(block 73) failed [ 867.464919][T13341] loop7: detected capacity change from 0 to 128 [ 867.852429][ T42] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 868.049894][ T42] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 868.060579][ T42] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 868.072609][ T42] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 868.157352][ T42] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 868.167022][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.175345][ T42] usb 8-1: Product: syz [ 868.179983][ T42] usb 8-1: Manufacturer: syz [ 868.184862][ T42] usb 8-1: SerialNumber: syz [ 868.246202][T13351] comedi: valid board names for 8255 driver are: [ 868.253009][T13351] 8255 [ 868.256063][T13351] comedi: valid board names for vmk80xx driver are: [ 868.265333][T13351] vmk80xx [ 868.269228][T13351] comedi: valid board names for usbduxsigma driver are: [ 868.276352][T13351] usbduxsigma [ 868.280087][T13351] comedi: valid board names for usbduxfast driver are: [ 868.287263][T13351] usbduxfast [ 868.290713][T13351] comedi: valid board names for usbdux driver are: [ 868.297597][T13351] usbdux [ 868.300723][T13351] comedi: valid board names for ni6501 driver are: [ 868.307757][T13351] ni6501 [ 868.310870][T13351] comedi: valid board names for dt9812 driver are: [ 868.317706][T13351] dt9812 [ 868.320818][T13351] comedi: valid board names for ni_labpc_cs driver are: [ 868.329418][T13351] ni_labpc_cs [ 868.329823][T11590] Bluetooth: hci0: command 0x0c1a tx timeout [ 868.332932][T13351] comedi: valid board names for ni_daq_700 driver are: [ 868.333001][T13351] ni_daq_700 [ 868.346127][ T5807] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 868.361232][T13351] comedi: valid board names for labpc_pci driver are: [ 868.368559][T13351] labpc_pci [ 868.371983][T13351] comedi: valid board names for adl_pci9118 driver are: [ 868.379241][T13351] pci9118dg [ 868.382583][T13351] pci9118hg [ 868.385869][T13351] pci9118hr [ 868.389257][T13351] comedi: valid board names for 8255_pci driver are: [ 868.396038][T13351] 8255_pci [ 868.399427][T13351] comedi: valid board names for s526 driver are: [ 868.405923][T13351] s526 [ 868.409024][T13351] comedi: valid board names for multiq3 driver are: [ 868.415884][T13351] multiq3 [ 868.423214][T13351] comedi: valid board names for pcmuio driver are: [ 868.431092][T13351] pcmuio48 [ 868.434366][T13351] pcmuio96 [ 868.437897][T13351] comedi: valid board names for pcmmio driver are: [ 868.449231][T13351] pcmmio [ 868.452364][T13351] comedi: valid board names for pcmda12 driver are: [ 868.460685][T13351] pcmda12 [ 868.463867][T13351] comedi: valid board names for pcmad driver are: [ 868.470678][T13351] pcmad12 [ 868.473850][T13351] pcmad16 [ 868.477180][T13351] comedi: valid board names for ni_labpc driver are: [ 868.484108][T13351] lab-pc-1200 [ 868.487808][T13351] lab-pc-1200ai [ 868.491501][T13351] lab-pc+ [ 868.494673][T13351] comedi: valid board names for atmio16 driver are: [ 868.501644][T13351] atmio16 [ 868.504810][T13351] atmio16d [ 868.508252][T13351] comedi: valid board names for ni_at_ao driver are: [ 868.515179][T13351] at-ao-6 [ 868.518682][T13351] at-ao-10 [ 868.521942][T13351] comedi: valid board names for ni_at_a2150 driver are: [ 868.529211][T13351] ni_at_a2150 [ 868.532732][T13351] comedi: valid board names for adq12b driver are: [ 868.539604][T13351] adq12b [ 868.542794][T13351] comedi: valid board names for mpc624 driver are: [ 868.553495][T13351] mpc624 [ 868.556604][T13351] comedi: valid board names for c6xdigio driver are: [ 868.564821][T13351] c6xdigio [ 868.568247][T13351] comedi: valid board names for aio_iiro_16 driver are: [ 868.575347][T13351] aio_iiro_16 [ 868.580148][T13351] comedi: valid board names for aio_aio12_8 driver are: [ 868.587603][T13351] aio_aio12_8 [ 868.591127][T13351] aio_ai12_8 [ 868.594567][T13351] aio_ao12_4 [ 868.598292][T13351] comedi: valid board names for fl512 driver are: [ 868.604873][T13351] fl512 [ 868.608146][T13351] comedi: valid board names for dmm32at driver are: [ 868.614915][T13351] dmm32at [ 868.618369][T13351] comedi: valid board names for dt282x driver are: [ 868.625039][T13351] dt2821 [ 868.628386][T13351] dt2821-f [ 868.631723][T13351] dt2821-g [ 868.635012][T13351] dt2823 [ 868.638534][T13351] dt2824-pgh [ 868.641966][T13351] dt2824-pgl [ 868.645416][T13351] dt2825 [ 868.652769][T13351] dt2827 [ 868.655860][T13351] dt2828 [ 868.660376][T13351] dt2829 [ 868.663474][T13351] dt21-ez [ 868.666652][T13351] dt23-ez [ 868.670018][T13351] dt24-ez [ 868.673184][T13351] dt24-ez-pgl [ 868.676695][T13351] comedi: valid board names for dt2817 driver are: [ 868.683760][T13351] dt2817 [ 868.687004][T13351] comedi: valid board names for dt2815 driver are: [ 868.693683][T13351] dt2815 [ 868.697536][T13351] comedi: valid board names for dt2814 driver are: [ 868.704199][T13351] dt2814 [ 868.707436][T13351] comedi: valid board names for dt2811 driver are: [ 868.714127][T13351] dt2811-pgh [ 868.717849][T13351] dt2811-pgl [ 868.721295][T13351] comedi: valid board names for dt2801 driver are: [ 868.728223][T13351] dt2801 [ 868.731323][T13351] comedi: valid board names for das6402 driver are: [ 868.740425][T13351] das6402-12 [ 868.743866][T13351] das6402-16 [ 868.747906][T13351] comedi: valid board names for das1800 driver are: [ 868.758818][T13351] das-1701st [ 868.762278][T13351] das-1701st-da [ 868.767505][T13351] das-1702st [ 868.770978][T13351] das-1702st-da [ 868.774706][T13351] das-1702hr [ 868.778424][T13351] das-1702hr-da [ 868.782131][T13351] das-1701ao [ 868.785561][T13351] das-1702ao [ 868.789338][T13351] das-1801st [ 868.792885][T13351] das-1801st-da [ 868.796659][T13351] das-1802st [ 868.800481][T13351] das-1802st-da [ 868.804199][T13351] das-1802hr [ 868.807900][T13351] das-1802hr-da [ 868.811633][T13351] das-1801hc [ 868.815066][T13351] das-1802hc [ 868.818795][T13351] das-1801ao [ 868.822246][T13351] das-1802ao [ 868.825699][T13351] comedi: valid board names for das800 driver are: [ 868.832677][T13351] das-800 [ 868.835901][T13351] cio-das800 [ 868.839657][T13351] das-801 [ 868.842891][T13351] cio-das801 [ 868.846351][T13351] das-802 [ 868.849857][T13351] cio-das802 [ 868.857732][T13351] cio-das802/16 [ 868.861451][T13351] comedi: valid board names for isa-das08 driver are: [ 868.869856][T13351] isa-das08 [ 868.873256][T13351] das08-pgm [ 868.876627][T13351] das08-pgh [ 868.880148][T13351] das08-pgl [ 868.883496][T13351] das08-aoh [ 868.887035][T13351] das08-aol [ 868.890377][T13351] das08-aom [ 868.893733][T13351] das08/jr-ao [ 868.897489][T13351] das08jr-16-ao [ 868.901196][T13351] pc104-das08 [ 868.904729][T13351] das08jr/16 [ 868.908437][T13351] comedi: valid board names for das16m1 driver are: [ 868.915207][T13351] das16m1 [ 868.918543][T13351] comedi: valid board names for dac02 driver are: [ 868.925130][T13351] dac02 [ 868.928373][T13351] comedi: valid board names for rti802 driver are: [ 868.935055][T13351] rti802 [ 868.938379][T13351] comedi: valid board names for rti800 driver are: [ 868.945056][T13351] rti800 [ 868.948369][T13351] rti815 [ 868.951454][T13351] comedi: valid board names for pcm3724 driver are: [ 868.962363][T13351] pcm3724 [ 868.965548][T13351] comedi: valid board names for pcl818 driver are: [ 868.973764][T13351] pcl818l [ 868.977174][T13351] pcl818h [ 868.980353][T13351] pcl818hd [ 868.983631][T13351] pcl818hg [ 868.987158][T13351] pcl818 [ 868.990373][T13351] pcl718 [ 868.993475][T13351] pcm3718 [ 868.996663][T13351] comedi: valid board names for pcl816 driver are: [ 869.003652][T13351] pcl816 [ 869.006769][T13351] pcl814b [ 869.010460][T13351] comedi: valid board names for pcl812 driver are: [ 869.017415][T13351] pcl812 [ 869.020505][T13351] pcl812pg [ 869.023798][T13351] acl8112pg [ 869.027514][T13351] acl8112dg [ 869.030877][T13351] acl8112hg [ 869.034346][T13351] a821pgl [ 869.037984][T13351] a821pglnda [ 869.041445][T13351] a821pgh [ 869.044637][T13351] a822pgl [ 869.048078][T13351] a822pgh [ 869.051251][T13351] a823pgl [ 869.054427][T13351] a823pgh [ 869.062844][T13351] pcl813 [ 869.068002][T13351] pcl813b [ 869.071188][T13351] acl8113 [ 869.074357][T13351] iso813 [ 869.077718][T13351] acl8216 [ 869.080914][T13351] a826pg [ 869.084012][T13351] comedi: valid board names for pcl730 driver are: [ 869.091027][T13351] pcl730 [ 869.094126][T13351] iso730 [ 869.097516][T13351] acl7130 [ 869.100730][T13351] pcm3730 [ 869.103911][T13351] pcl725 [ 869.107225][T13351] p8r8dio [ 869.110408][T13351] acl7225b [ 869.113666][T13351] p16r16dio [ 869.117217][T13351] pcl733 [ 869.120305][T13351] pcl734 [ 869.123397][T13351] opmm-1616-xt [ 869.127284][T13351] pearl-mm-p [ 869.130800][T13351] ir104-pbf [ 869.134134][T13351] comedi: valid board names for pcl726 driver are: [ 869.141141][T13351] pcl726 [ 869.144236][T13351] pcl727 [ 869.147607][T13351] pcl728 [ 869.150698][T13351] acl6126 [ 869.153871][T13351] acl6128 [ 869.157265][T13351] comedi: valid board names for pcl724 driver are: [ 869.168170][T13351] pcl724 [ 869.172812][T13351] pcl722 [ 869.175919][T13351] pcl731 [ 869.179321][T13351] acl7122 [ 869.182528][T13351] acl7124 [ 869.185729][T13351] pet48dio [ 869.189281][T13351] pcmio48 [ 869.192520][T13351] onyx-mm-dio [ 869.196054][T13351] comedi: valid board names for pcl711 driver are: [ 869.203028][T13351] pcl711 [ 869.206237][T13351] pcl711b [ 869.209733][T13351] acl8112hg [ 869.213114][T13351] acl8112dg [ 869.216495][T13351] comedi: valid board names for amplc_pc263 driver are: [ 869.223972][T13351] pc263 [ 869.227111][T13351] comedi: valid board names for amplc_pc236 driver are: [ 869.234221][T13351] pc36at [ 869.237587][T13351] comedi: valid board names for amplc_dio200 driver are: [ 869.244789][T13351] pc212e [ 869.248121][T13351] pc214e [ 869.251203][T13351] pc215e [ 869.254280][T13351] pc218e [ 869.257653][T13351] pc272e [ 869.260764][T13351] comedi: valid board names for comedi_parport driver are: [ 869.272577][T13351] comedi_parport [ 869.276387][T13351] comedi: valid board names for comedi_test driver are: [ 869.284955][T13351] comedi_test [ 869.288672][T13351] comedi: valid board names for comedi_bond driver are: [ 869.295803][T13351] comedi_bond [ 869.310379][ T42] usb 8-1: config 0 descriptor?? [ 869.376689][T13341] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 869.401337][T13341] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 869.433696][ T42] usb 8-1: ucan: probing device on interface #0 [ 869.651370][ T42] usb 8-1: ucan: device protocol version -536739880 is not supported [ 869.660187][ T42] usb 8-1: ucan: probe failed; try to update the device firmware [ 869.905602][ T9] usb 8-1: USB disconnect, device number 4 [ 870.764049][T13375] tipc: Enabling of bearer rejected, failed to enable media [ 871.441621][T13385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3294'. [ 872.491028][T13397] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3301'. [ 873.616659][T13411] loop4: detected capacity change from 0 to 256 [ 873.634010][T13411] exfat: Deprecated parameter 'utf8' [ 873.640428][T13411] exfat: Deprecated parameter 'namecase' [ 873.647678][T13411] exfat: Deprecated parameter 'namecase' [ 873.715349][T13411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 874.312517][T13420] support for cryptoloop has been removed. Use dm-crypt instead. [ 874.453808][T13424] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 874.545418][T13425] loop9: detected capacity change from 0 to 256 [ 874.580124][T13425] exfat: Deprecated parameter 'namecase' [ 874.721360][T13425] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 875.362206][T13433] loop4: detected capacity change from 0 to 1024 [ 875.398935][T13433] EXT4-fs: Ignoring removed nobh option [ 875.429083][T13429] loop7: detected capacity change from 0 to 4096 [ 875.438380][T13433] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 875.477349][ T9] hid_parser_main: 912 callbacks suppressed [ 875.477464][ T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 875.488895][T13437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3321'. [ 875.507151][T13429] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 875.541980][T13433] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.3318: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 875.562909][T13433] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3318: couldn't read orphan inode 11 (err -117) [ 875.577592][ T9] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 875.583865][T13433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.698855][T13433] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3318: Invalid block bitmap block 0 in block_group 0 [ 875.747027][T13433] Quota error (device loop4): write_blk: dquota write failed [ 875.754870][T13433] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 875.766154][T13433] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3318: Failed to acquire dquot type 0 [ 875.826237][T13429] ntfs3(loop7): Failed to load $Secure (-22). [ 875.832955][T13429] ntfs3(loop7): Failed to initialize $Secure (-22). [ 876.167765][ T3541] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm kworker/u8:12: Invalid inode table block 8589934593 in block_group 0 [ 876.246317][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.416397][ T42] kernel write not supported for file /dsp (pid: 42 comm: kworker/1:1) [ 877.902727][T13470] loop4: detected capacity change from 0 to 512 [ 877.976613][T13470] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 877.997074][T13470] EXT4-fs (loop4): 1 truncate cleaned up [ 878.005379][T13470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.484724][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.535097][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3339'. [ 878.727930][ T42] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 878.919300][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 878.948144][ T42] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 878.956712][ T42] usb 3-1: config 0 has no interface number 0 [ 878.963423][ T42] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 878.975090][ T42] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 879.081243][ T42] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 879.091040][ T42] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 879.103479][ T42] usb 3-1: Product: syz [ 879.109407][ T42] usb 3-1: SerialNumber: syz [ 879.154202][ T42] usb 3-1: config 0 descriptor?? [ 879.201863][ T42] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 879.213392][ T42] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input20 [ 879.437462][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 879.440822][ T9] usb 3-1: USB disconnect, device number 9 [ 879.444754][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 879.479377][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 881.240089][T13518] loop9: detected capacity change from 0 to 8 [ 881.418082][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3357'. [ 881.498807][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3357'. [ 881.799438][T13526] vim2m vim2m.0: vidioc_s_fmt queue busy [ 882.020651][ T5807] Bluetooth: hci5: command 0x0406 tx timeout [ 882.443662][T11583] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.833256][ T58] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.046255][ T58] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.222208][ T58] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.414851][ T58] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.772300][ T58] bridge_slave_1: left allmulticast mode [ 883.778464][ T58] bridge_slave_1: left promiscuous mode [ 883.785120][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.816013][ T58] bridge_slave_0: left allmulticast mode [ 883.822457][ T58] bridge_slave_0: left promiscuous mode [ 883.832896][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.432545][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.461174][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.491343][ T58] bond0 (unregistering): Released all slaves [ 884.633188][ T58] tipc: Disabling bearer [ 884.643107][ T58] tipc: Left network mode [ 885.203163][ T58] hsr_slave_0: left promiscuous mode [ 885.250063][ T58] hsr_slave_1: left promiscuous mode [ 885.262838][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.270553][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.370317][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.381505][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.514091][ T58] veth1_macvtap: left promiscuous mode [ 885.520139][ T58] veth0_macvtap: left promiscuous mode [ 885.526106][ T58] veth1_vlan: left promiscuous mode [ 885.531915][ T58] veth0_vlan: left promiscuous mode [ 886.041258][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 886.126208][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 886.136649][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 886.152615][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 886.179513][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 886.573374][ T58] team0 (unregistering): Port device team_slave_1 removed [ 886.677980][ T58] team0 (unregistering): Port device team_slave_0 removed [ 886.711014][T13570] loop4: detected capacity change from 0 to 64 [ 886.800955][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 886.980874][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.995269][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.006508][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.023128][ T9] usb 10-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 887.032794][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.105454][ T9] usb 10-1: config 0 descriptor?? [ 887.903098][ T9] betop 0003:11C2:2208.002C: unknown main item tag 0x0 [ 887.915070][ T9] betop 0003:11C2:2208.002C: unknown main item tag 0x0 [ 887.923648][ T9] betop 0003:11C2:2208.002C: unknown main item tag 0x0 [ 887.934286][ T9] betop 0003:11C2:2208.002C: unknown main item tag 0x0 [ 887.941888][ T9] betop 0003:11C2:2208.002C: unknown main item tag 0x0 [ 887.963074][ T9] betop 0003:11C2:2208.002C: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.9-1/input0 [ 887.974808][ T9] betop 0003:11C2:2208.002C: no inputs found [ 888.112222][ T42] usb 10-1: USB disconnect, device number 6 [ 888.338156][T11590] Bluetooth: hci1: command tx timeout [ 888.477714][T13563] chnl_net:caif_netlink_parms(): no params data found [ 889.732381][T13563] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.740257][T13563] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.753120][T13563] bridge_slave_0: entered allmulticast mode [ 889.763743][T13563] bridge_slave_0: entered promiscuous mode [ 889.797094][T13563] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.804951][T13563] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.812968][T13563] bridge_slave_1: entered allmulticast mode [ 889.823274][T13563] bridge_slave_1: entered promiscuous mode [ 890.064232][T13563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.092164][T13563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.283093][T13563] team0: Port device team_slave_0 added [ 890.342949][T13563] team0: Port device team_slave_1 added [ 890.438358][T11590] Bluetooth: hci1: command tx timeout [ 890.603537][T13563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.610876][T13563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.642235][T13563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.707791][T13563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.714965][T13563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.745125][T13563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.848972][T13610] loop9: detected capacity change from 0 to 1024 [ 891.118653][T13563] hsr_slave_0: entered promiscuous mode [ 891.133541][T13563] hsr_slave_1: entered promiscuous mode [ 891.143035][T13563] debugfs: 'hsr0' already exists in 'hsr' [ 891.149278][T13563] Cannot create hsr debugfs directory [ 891.349160][ T4432] hfsplus: b-tree write err: -5, ino 4 [ 892.500594][T11590] Bluetooth: hci1: command tx timeout [ 892.822944][T13563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 892.882587][T13563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 892.948878][T13563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 893.012655][T13563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 893.360937][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 893.595879][ T9] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 893.608836][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.617565][ T9] usb 8-1: Product: syz [ 893.621941][ T9] usb 8-1: Manufacturer: syz [ 893.626738][ T9] usb 8-1: SerialNumber: syz [ 893.732110][ T9] usb 8-1: config 0 descriptor?? [ 893.782412][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 893.858572][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 893.885733][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 893.899328][ T9] usb 8-1: media controller created [ 894.013495][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 894.166546][T13563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.324906][T13563] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.393695][ T4084] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.401414][ T4084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.521087][ T4084] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.528803][ T4084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.622843][T11590] Bluetooth: hci1: command tx timeout [ 894.932593][ T9] DVB: Unable to find symbol mt352_attach() [ 895.458493][ T9] DVB: Unable to find symbol nxt6000_attach() [ 895.464851][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 895.531407][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input21 [ 895.631343][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 895.638788][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 895.649440][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 895.655360][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 895.750953][ T9] usb 8-1: USB disconnect, device number 5 [ 896.174887][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 896.371090][T13673] loop2: detected capacity change from 0 to 128 [ 896.441836][T13673] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 896.562071][T13673] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.727831][T13563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.040154][T12818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 897.286202][T13563] veth0_vlan: entered promiscuous mode [ 897.345171][T13681] loop7: detected capacity change from 0 to 512 [ 897.420697][T13681] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 897.439570][T13681] System zones: 0-2, 18-18, 34-34 [ 897.468703][T13563] veth1_vlan: entered promiscuous mode [ 897.536004][T13687] erspan0: entered promiscuous mode [ 897.542075][T13687] macsec1: entered allmulticast mode [ 897.547958][T13687] erspan0: entered allmulticast mode [ 897.565267][T13687] erspan0: left allmulticast mode [ 897.571071][T13687] erspan0: left promiscuous mode [ 897.578030][T13681] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 897.641433][T13681] EXT4-fs (loop7): Remounting filesystem read-only [ 897.690022][T13681] EXT4-fs (loop7): 1 truncate cleaned up [ 897.712349][T13681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.725989][T13681] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.770341][ T3541] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 897.784898][ T3541] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 897.796058][ T3541] Quota error (device loop7): write_blk: dquota write failed [ 897.803932][ T3541] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 897.814505][ T3541] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 897.825556][ T3541] Quota error (device loop7): write_blk: dquota write failed [ 897.837062][ T3541] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 897.848789][ T3541] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 897.859507][ T3541] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 897.868794][ T3541] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 897.882110][ T3541] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 897.984663][T13563] veth0_macvtap: entered promiscuous mode [ 898.019384][T13563] veth1_macvtap: entered promiscuous mode [ 898.178148][T13563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.263687][T13563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.333994][ T1865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.429914][ T1865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.470920][T10427] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.485793][T11586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.503111][T10427] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.916156][T13696] loop9: detected capacity change from 0 to 1024 [ 898.997458][T13696] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 899.052862][T13696] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 899.128837][T13696] EXT4-fs (loop9): orphan cleanup on readonly fs [ 899.184458][T13696] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.3433: Freeing blocks not in datazone - block = 0, count = 4096 [ 899.200533][T13700] loop7: detected capacity change from 0 to 512 [ 899.222692][T13700] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 899.246518][T13696] EXT4-fs (loop9): 1 orphan inode deleted [ 899.255194][T13696] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 899.278367][T13700] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3434: bad orphan inode 131083 [ 899.314325][T13700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.431311][T13700] EXT4-fs error (device loop7): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.7.3434: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 899.560358][T13700] EXT4-fs error (device loop7) in ext4_delete_entry:2737: Corrupt filesystem [ 899.739916][T12010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.980051][T11586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.411193][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3440'. [ 900.602988][T13720] loop2: detected capacity change from 0 to 256 [ 900.625916][T13720] exfat: Deprecated parameter 'namecase' [ 900.634157][T13720] exfat: Deprecated parameter 'namecase' [ 900.768121][T13720] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 902.125646][T13739] loop2: detected capacity change from 0 to 16 [ 902.697900][ T42] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 902.907730][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 902.958399][ T42] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 902.971555][ T42] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 902.985643][ T42] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 902.997699][ T42] usb 8-1: config 0 interface 0 has no altsetting 0 [ 903.072424][ T42] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 903.085051][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.093531][ T42] usb 8-1: Product: syz [ 903.098149][ T42] usb 8-1: Manufacturer: syz [ 903.102955][ T42] usb 8-1: SerialNumber: syz [ 903.113324][ T42] usb 8-1: config 0 descriptor?? [ 903.372498][ T42] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input22 [ 903.716247][ T9] usb 8-1: USB disconnect, device number 6 [ 903.858262][T11590] Bluetooth: hci1: command tx timeout [ 904.762734][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.772485][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.022175][ T4115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.033780][ T4115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.840819][T13785] loop1: detected capacity change from 0 to 64 [ 905.963642][T13785] hfs: bad catalog entry type 65535 [ 906.205833][T13791] loop7: detected capacity change from 0 to 128 [ 906.310251][T13791] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 906.324913][T13791] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 906.371498][T13793] loop4: detected capacity change from 0 to 1024 [ 906.586175][T11586] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 907.796470][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3477'. [ 907.906463][T13817] [U]  [ 907.912936][T13817] [U] K{ [ 907.918425][T13817] [U] T 1ŠFFˊ`GJǘGO/MC [ 907.927902][T13817] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 907.948009][T13817] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 907.961219][T13817] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 908.008296][T13817] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 908.042764][T13817] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 908.056007][T13817] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 908.075667][T13817] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 908.208434][T13817] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 908.220102][T13817] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 908.237854][T13817] [U] 22Ʃ۩X?0;3U [ 908.243876][T13817] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 908.274859][T13817] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 908.287830][T13817] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 908.301546][T13817] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 908.308776][T13817] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 908.321689][T13817] [U] EC [ 908.325631][T13817] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 908.440519][T13816] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 909.927280][ T42] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 910.092181][T12014] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 910.117170][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 910.130601][ T42] usb 2-1: config 0 has no interface number 0 [ 910.139447][ T42] usb 2-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 910.151696][ T42] usb 2-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 910.162936][ T42] usb 2-1: config 0 interface 1 has no altsetting 0 [ 910.170004][ T42] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 910.179750][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.288433][ T42] usb 2-1: config 0 descriptor?? [ 910.303769][T13835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 910.352997][T12014] usb 10-1: Using ep0 maxpacket: 32 [ 910.392693][T12014] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 910.401635][T12014] usb 10-1: config 0 has no interface number 0 [ 910.408409][T12014] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 910.508031][T12014] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 910.517924][T12014] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.526405][T12014] usb 10-1: Product: syz [ 910.536174][T12014] usb 10-1: Manufacturer: syz [ 910.543086][T12014] usb 10-1: SerialNumber: syz [ 910.614316][T12014] usb 10-1: config 0 descriptor?? [ 910.680202][T12014] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 910.690640][T12014] em28xx 10-1:0.132: Video interface 132 found: [ 910.703138][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.710254][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 910.811710][ T42] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 910.819978][ T42] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 910.828287][ T42] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 910.836315][ T42] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 910.852551][ T42] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 910.862692][ T42] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 910.870864][ T42] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 910.879123][ T42] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 910.903261][ T42] holtek_mouse 0003:04D9:A067.002D: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input1 [ 911.073587][ T42] usb 2-1: USB disconnect, device number 7 [ 911.155518][T12014] em28xx 10-1:0.132: chip ID is em2860 [ 911.437750][T12014] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 911.446963][T12014] em28xx 10-1:0.132: board has no eeprom [ 911.561470][T12014] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 911.571830][T12014] em28xx 10-1:0.132: analog set to bulk mode. [ 911.582465][T10429] em28xx 10-1:0.132: Registering V4L2 extension [ 911.663427][T12014] usb 10-1: USB disconnect, device number 7 [ 911.671675][T12014] em28xx 10-1:0.132: Disconnecting em28xx [ 912.010410][ T30] audit: type=1326 audit(1768439631.159:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.2.3500" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x0 [ 912.545932][T13869] loop7: detected capacity change from 0 to 64 [ 912.564893][T10429] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 912.572984][T10429] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 912.588200][T10429] em28xx 10-1:0.132: No AC97 audio processor [ 912.616380][T10429] videodev: could not get a free minor [ 912.622436][T10429] em28xx 10-1:0.132: unable to register vbi device [ 912.630333][T10429] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 912.640977][T10429] em28xx 10-1:0.132: Remote control support is not available for this card. [ 912.650594][T12014] em28xx 10-1:0.132: Closing input extension [ 912.666743][T12014] em28xx 10-1:0.132: Freeing device [ 912.978520][ T9] IPVS: starting estimator thread 0... [ 913.067709][T13874] IPVS: using max 192 ests per chain, 9600 per kthread [ 913.928710][ T1865] ===================================================== [ 913.935939][ T1865] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x420/0x9e0 [ 913.946616][ T1865] n_tty_receive_buf_closing+0x420/0x9e0 [ 913.953015][ T1865] n_tty_receive_buf_common+0x19e9/0x2630 [ 913.960060][ T1865] n_tty_receive_buf2+0x4c/0x60 [ 913.965106][ T1865] tty_ldisc_receive_buf+0xc6/0x2c0 [ 913.970793][ T1865] tty_port_default_receive_buf+0xd7/0x1a0 [ 913.976985][ T1865] flush_to_ldisc+0x43e/0xe30 [ 913.981878][ T1865] process_scheduled_works+0xb91/0x1d80 [ 913.987954][ T1865] worker_thread+0xedf/0x1590 [ 913.992828][ T1865] kthread+0xd5c/0xf00 [ 913.997197][ T1865] ret_from_fork+0x208/0x710 [ 914.002078][ T1865] ret_from_fork_asm+0x1a/0x30 [ 914.007213][ T1865] [ 914.009636][ T1865] Uninit was stored to memory at: [ 914.020479][ T1865] n_tty_receive_buf_closing+0x419/0x9e0 [ 914.026377][ T1865] n_tty_receive_buf_common+0x19e9/0x2630 [ 914.036345][ T1865] n_tty_receive_buf2+0x4c/0x60 [ 914.042046][ T1865] tty_ldisc_receive_buf+0xc6/0x2c0 [ 914.048291][ T1865] tty_port_default_receive_buf+0xd7/0x1a0 [ 914.054340][ T1865] flush_to_ldisc+0x43e/0xe30 [ 914.059412][ T1865] process_scheduled_works+0xb91/0x1d80 [ 914.065200][ T1865] worker_thread+0xedf/0x1590 [ 914.070343][ T1865] kthread+0xd5c/0xf00 [ 914.074618][ T1865] ret_from_fork+0x208/0x710 [ 914.080210][ T1865] ret_from_fork_asm+0x1a/0x30 [ 914.085242][ T1865] [ 914.087865][ T1865] Uninit was created at: [ 914.092388][ T1865] __kmalloc_noprof+0xaf2/0x1c20 [ 914.097813][ T1865] __tty_buffer_request_room+0x3d4/0x7a0 [ 914.103768][ T1865] __tty_insert_flip_string_flags+0x157/0x6f0 [ 914.110385][ T1865] uart_insert_char+0x368/0x930 [ 914.121931][ T1865] serial8250_read_char+0x1ba/0x670 [ 914.129063][ T1865] serial8250_handle_irq+0x930/0x1110 [ 914.134690][ T1865] serial8250_default_handle_irq+0x116/0x370 [ 914.141115][ T1865] serial8250_interrupt+0xcb/0x430 [ 914.146458][ T1865] __handle_irq_event_percpu+0x118/0xeb0 [ 914.152533][ T1865] handle_irq_event+0xe0/0x2a0 [ 914.157714][ T1865] handle_edge_irq+0x2a9/0xb50 [ 914.162686][ T1865] __common_interrupt+0x9d/0x180 [ 914.168334][ T1865] common_interrupt+0x4c/0xb0 [ 914.173380][ T1865] asm_common_interrupt+0x2b/0x40 [ 914.178896][ T1865] [ 914.181353][ T1865] CPU: 1 UID: 0 PID: 1865 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(none) [ 914.192885][ T1865] Tainted: [L]=SOFTLOCKUP [ 914.197660][ T1865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 914.208092][ T1865] Workqueue: events_unbound flush_to_ldisc [ 914.214168][ T1865] ===================================================== [ 914.226232][ T1865] Disabling lock debugging due to kernel taint [ 914.234412][ T1865] Kernel panic - not syncing: kmsan.panic set ... [ 914.241002][ T1865] CPU: 1 UID: 0 PID: 1865 Comm: kworker/u8:11 Tainted: G B L syzkaller #0 PREEMPT(none) [ 914.252369][ T1865] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 914.258198][ T1865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 914.268418][ T1865] Workqueue: events_unbound flush_to_ldisc [ 914.274497][ T1865] Call Trace: [ 914.277897][ T1865] [ 914.280938][ T1865] __dump_stack+0x26/0x30 [ 914.285473][ T1865] dump_stack_lvl+0x50/0x1c0 [ 914.290226][ T1865] ? dump_stack+0x12/0x25 [ 914.294762][ T1865] dump_stack+0x1e/0x25 [ 914.299121][ T1865] vpanic+0x435/0xd30 [ 914.303433][ T1865] panic+0x15d/0x160 [ 914.307612][ T1865] kmsan_report+0x31c/0x320 [ 914.312619][ T1865] ? __msan_warning+0x1b/0x30 [ 914.317621][ T1865] ? n_tty_receive_buf_closing+0x420/0x9e0 [ 914.323762][ T1865] ? n_tty_receive_buf_common+0x19e9/0x2630 [ 914.329942][ T1865] ? n_tty_receive_buf2+0x4c/0x60 [ 914.335167][ T1865] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 914.340773][ T1865] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 914.347088][ T1865] ? flush_to_ldisc+0x43e/0xe30 [ 914.352167][ T1865] ? process_scheduled_works+0xb91/0x1d80 [ 914.358231][ T1865] ? worker_thread+0xedf/0x1590 [ 914.363332][ T1865] ? kthread+0xd5c/0xf00 [ 914.367775][ T1865] ? ret_from_fork+0x208/0x710 [ 914.372817][ T1865] ? ret_from_fork_asm+0x1a/0x30 [ 914.377980][ T1865] ? ret_from_fork_asm+0x1a/0x30 [ 914.383144][ T1865] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 914.389234][ T1865] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 914.395163][ T1865] ? __update_load_avg_se+0xd02/0x11c0 [ 914.400939][ T1865] ? kmsan_get_metadata+0xfb/0x160 [ 914.406460][ T1865] ? kmsan_get_metadata+0xfb/0x160 [ 914.411890][ T1865] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 914.418034][ T1865] ? kmsan_get_metadata+0xfb/0x160 [ 914.423398][ T1865] __msan_warning+0x1b/0x30 [ 914.428227][ T1865] n_tty_receive_buf_closing+0x420/0x9e0 [ 914.434112][ T1865] n_tty_receive_buf_common+0x19e9/0x2630 [ 914.440143][ T1865] n_tty_receive_buf2+0x4c/0x60 [ 914.445182][ T1865] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 914.450921][ T1865] tty_ldisc_receive_buf+0xc6/0x2c0 [ 914.456372][ T1865] tty_port_default_receive_buf+0xd7/0x1a0 [ 914.462544][ T1865] flush_to_ldisc+0x43e/0xe30 [ 914.467580][ T1865] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 914.474268][ T1865] ? __pfx_flush_to_ldisc+0x10/0x10 [ 914.479739][ T1865] process_scheduled_works+0xb91/0x1d80 [ 914.485632][ T1865] worker_thread+0xedf/0x1590 [ 914.490633][ T1865] kthread+0xd5c/0xf00 [ 914.494926][ T1865] ? __pfx_worker_thread+0x10/0x10 [ 914.500269][ T1865] ? __pfx_kthread+0x10/0x10 [ 914.505094][ T1865] ret_from_fork+0x208/0x710 [ 914.509929][ T1865] ? __switch_to+0x53d/0x790 [ 914.514730][ T1865] ? __pfx_kthread+0x10/0x10 [ 914.519521][ T1865] ret_from_fork_asm+0x1a/0x30 [ 914.524561][ T1865] [ 914.528263][ T1865] Kernel Offset: disabled [ 914.532736][ T1865] Rebooting in 86400 seconds..