last executing test programs: 1m43.05801789s ago: executing program 3 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8d, 0x0, 0x89}]}) 1m42.671329531s ago: executing program 3 (id=182): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) fcntl$getflags(r0, 0x401) 1m41.669438994s ago: executing program 3 (id=191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r2, 0x121, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x94) 1m41.42161868s ago: executing program 3 (id=192): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m41.246460861s ago: executing program 3 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) 1m40.615229057s ago: executing program 3 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c61677300070200000000020000000002000000000802000000000200000000020000000004001d", 0x4f) 1m39.924801143s ago: executing program 32 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c61677300070200000000020000000002000000000802000000000200000000020000000004001d", 0x4f) 1m13.407202553s ago: executing program 1 (id=354): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x6, 0x4) 1m13.241527464s ago: executing program 1 (id=356): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1m10.488221787s ago: executing program 1 (id=371): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xee00, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0xc408, 0x103) 1m9.132651675s ago: executing program 1 (id=376): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='./file0\x00') 1m8.250524077s ago: executing program 1 (id=379): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x53, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1f4750895ab09308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000007c0)={0x40, 0xa, 0x8, "503ce288add3a584"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m4.683027069s ago: executing program 1 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x20000, 0x4) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 1m3.918963169s ago: executing program 33 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x20000, 0x4) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 4.469391263s ago: executing program 4 (id=732): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000100)={0x20, r1, 0x13a8a16702787d01, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008800) 4.371351151s ago: executing program 2 (id=734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, r1, 0x211, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="3d59d1"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}, 0x1, 0x0, 0x0, 0xf040}, 0x4004) 4.251143983s ago: executing program 4 (id=735): mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000180)={'full', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x10) 4.037716242s ago: executing program 2 (id=737): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.934141361s ago: executing program 4 (id=739): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.733124658s ago: executing program 5 (id=740): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x10000001}) 3.643153734s ago: executing program 2 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) sendfile(r1, r1, 0x0, 0x1) 3.441149941s ago: executing program 5 (id=742): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xffffeffe, 0x3, 0x8, 0x7ffffbfe, 0x8, "48b6299abd3991045b0800000013ed2ee2f4fd"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x4006) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0xffffffff, 0x2, 0x86, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) 3.201130115s ago: executing program 5 (id=743): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0xb94b8ea7609ebf9f) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) 3.1177523s ago: executing program 2 (id=744): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000100)={0x20, r1, 0x13a8a16702787d01, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008800) 3.072476529s ago: executing program 0 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, r1, 0x211, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="3d59d1"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}, 0x1, 0x0, 0x0, 0xf040}, 0x4004) 2.850973229s ago: executing program 5 (id=746): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.830275893s ago: executing program 2 (id=747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 2.665211843s ago: executing program 5 (id=748): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='f', 0x1) 2.616026852s ago: executing program 0 (id=749): bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x9, 0x1, "ae"}, 0x9) 2.585055678s ago: executing program 2 (id=750): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.333491274s ago: executing program 5 (id=751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330abd11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.749297401s ago: executing program 34 (id=751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330abd11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.733431204s ago: executing program 0 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1.239971824s ago: executing program 0 (id=754): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) 1.239886774s ago: executing program 4 (id=755): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551, 0x200}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 681.071566ms ago: executing program 0 (id=756): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p', 0x1) 253.685874ms ago: executing program 0 (id=757): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 253.528234ms ago: executing program 4 (id=758): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 0s ago: executing program 4 (id=759): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@orlov}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}]}, 0x1, 0x507, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x1, 0x7, 0x5, 0xfffffffffffffff8, 0x5, 0x7, 0x20f68}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. syzkaller login: [ 77.538961][ T5764] cgroup: Unknown subsys name 'net' [ 77.677547][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.301982][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.387095][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.387095][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.404621][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.412137][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.420515][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.427783][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.434842][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.441817][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.450437][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.457930][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.466222][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.471508][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.475205][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.484884][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.490899][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.497586][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.511414][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.513710][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.520514][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.527537][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.534379][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.547098][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.594048][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.604676][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.993840][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.184999][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.215018][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.223391][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.230990][ T5778] bridge_slave_0: entered allmulticast mode [ 82.238597][ T5778] bridge_slave_0: entered promiscuous mode [ 82.256344][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.263640][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.270897][ T5778] bridge_slave_1: entered allmulticast mode [ 82.278333][ T5778] bridge_slave_1: entered promiscuous mode [ 82.286607][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.336354][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.376499][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.397091][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 82.501034][ T5778] team0: Port device team_slave_0 added [ 82.531766][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.539220][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.546431][ T5779] bridge_slave_0: entered allmulticast mode [ 82.553970][ T5779] bridge_slave_0: entered promiscuous mode [ 82.573468][ T5778] team0: Port device team_slave_1 added [ 82.596278][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.603684][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.611604][ T5779] bridge_slave_1: entered allmulticast mode [ 82.618664][ T5779] bridge_slave_1: entered promiscuous mode [ 82.627801][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.635826][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.643202][ T5776] bridge_slave_0: entered allmulticast mode [ 82.650755][ T5776] bridge_slave_0: entered promiscuous mode [ 82.701232][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.708498][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.719005][ T5776] bridge_slave_1: entered allmulticast mode [ 82.726151][ T5776] bridge_slave_1: entered promiscuous mode [ 82.744993][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.754316][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.783430][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.806486][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.827457][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.834819][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.864058][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.895306][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.917916][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.932238][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.006003][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.013587][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.021095][ T5777] bridge_slave_0: entered allmulticast mode [ 83.028116][ T5777] bridge_slave_0: entered promiscuous mode [ 83.040825][ T5779] team0: Port device team_slave_0 added [ 83.060992][ T5776] team0: Port device team_slave_0 added [ 83.067380][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.074856][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.082512][ T5777] bridge_slave_1: entered allmulticast mode [ 83.089950][ T5777] bridge_slave_1: entered promiscuous mode [ 83.097949][ T5779] team0: Port device team_slave_1 added [ 83.111439][ T5778] hsr_slave_0: entered promiscuous mode [ 83.118270][ T5778] hsr_slave_1: entered promiscuous mode [ 83.139348][ T5776] team0: Port device team_slave_1 added [ 83.243351][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.250396][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.276676][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.290925][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.297913][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.324043][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.337935][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.345770][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.372018][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.386713][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.404471][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.414232][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.421433][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.447451][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.504001][ T5777] team0: Port device team_slave_0 added [ 83.545180][ T5777] team0: Port device team_slave_1 added [ 83.594324][ T51] Bluetooth: hci2: command tx timeout [ 83.594388][ T5783] Bluetooth: hci3: command tx timeout [ 83.600417][ T5785] Bluetooth: hci1: command tx timeout [ 83.637056][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.645347][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.671447][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.680969][ T5785] Bluetooth: hci0: command tx timeout [ 83.707664][ T5776] hsr_slave_0: entered promiscuous mode [ 83.714311][ T5776] hsr_slave_1: entered promiscuous mode [ 83.721200][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.729304][ T5776] Cannot create hsr debugfs directory [ 83.735588][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.742802][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.769026][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.791737][ T5779] hsr_slave_0: entered promiscuous mode [ 83.799106][ T5779] hsr_slave_1: entered promiscuous mode [ 83.805302][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.813976][ T5779] Cannot create hsr debugfs directory [ 83.933868][ T5777] hsr_slave_0: entered promiscuous mode [ 83.940442][ T5777] hsr_slave_1: entered promiscuous mode [ 83.946664][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.954522][ T5777] Cannot create hsr debugfs directory [ 84.176463][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.213936][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.224596][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.265546][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.356290][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.387294][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.398313][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.435512][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.483169][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.507970][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.519617][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.544500][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.611087][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.645655][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.671878][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.696945][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.712138][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.735878][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.771054][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.778440][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.790626][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.797850][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.883467][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.969429][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.994875][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.012428][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.046593][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.053793][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.088288][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.095573][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.132656][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.139899][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.170682][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.177858][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.226743][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.306203][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.336767][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.344017][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.376660][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.383874][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.593214][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.670524][ T5785] Bluetooth: hci3: command tx timeout [ 85.670543][ T5783] Bluetooth: hci1: command tx timeout [ 85.675978][ T5785] Bluetooth: hci2: command tx timeout [ 85.748632][ T5778] veth0_vlan: entered promiscuous mode [ 85.754747][ T5785] Bluetooth: hci0: command tx timeout [ 85.807777][ T5778] veth1_vlan: entered promiscuous mode [ 85.838575][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.954950][ T5778] veth0_macvtap: entered promiscuous mode [ 85.985872][ T5778] veth1_macvtap: entered promiscuous mode [ 86.003958][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.036655][ T5779] veth0_vlan: entered promiscuous mode [ 86.069802][ T5779] veth1_vlan: entered promiscuous mode [ 86.090968][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.115993][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.148421][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.162647][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.172335][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.181385][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.190466][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.226612][ T5779] veth0_macvtap: entered promiscuous mode [ 86.243333][ T5779] veth1_macvtap: entered promiscuous mode [ 86.260571][ T5776] veth0_vlan: entered promiscuous mode [ 86.337875][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.349499][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.361209][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.369750][ T5776] veth1_vlan: entered promiscuous mode [ 86.381145][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.392208][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.403898][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.456200][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.466187][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.475810][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.484838][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.514029][ T5777] veth0_vlan: entered promiscuous mode [ 86.553266][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.565830][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.580872][ T5776] veth0_macvtap: entered promiscuous mode [ 86.626031][ T5776] veth1_macvtap: entered promiscuous mode [ 86.645517][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.654637][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.665222][ T5777] veth1_vlan: entered promiscuous mode [ 86.737341][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.767654][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.785616][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.804867][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.815338][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.826213][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.839391][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.874131][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.886442][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.896885][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.908578][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.921598][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.943672][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.964639][ T5777] veth0_macvtap: entered promiscuous mode [ 86.971491][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.006555][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.037622][ T5843] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.046501][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.068887][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.077687][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.137972][ T5777] veth1_macvtap: entered promiscuous mode [ 87.275271][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.307877][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.338983][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.365710][ T5847] syz.3.6[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.369674][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.393333][ T5847] loop3: detected capacity change from 0 to 128 [ 87.399580][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.428158][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.461225][ T5847] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.480495][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.534807][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.577923][ T5847] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.588464][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.614667][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.652648][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.678801][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.686786][ T5847] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 87.699438][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.730418][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.749433][ T5785] Bluetooth: hci2: command tx timeout [ 87.755444][ T51] Bluetooth: hci1: command tx timeout [ 87.761017][ T5783] Bluetooth: hci3: command tx timeout [ 87.815270][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.829163][ T5783] Bluetooth: hci0: command tx timeout [ 87.859224][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.868000][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.919937][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.958800][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.025503][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.051569][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.227472][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.255307][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.282479][ T5858] loop3: detected capacity change from 0 to 512 [ 88.305632][ T5858] ======================================================= [ 88.305632][ T5858] WARNING: The mand mount option has been deprecated and [ 88.305632][ T5858] and is ignored by this kernel. Remove the mand [ 88.305632][ T5858] option from the mount to silence this warning. [ 88.305632][ T5858] ======================================================= [ 88.374808][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.422505][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.505076][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.551787][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.855250][ T5865] loop0: detected capacity change from 0 to 256 [ 89.078050][ T5867] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 89.482609][ T5878] cramfs: checking physical address 0x00000000239f1000 for linear cramfs image [ 89.499098][ T5878] cramfs: wrong magic [ 89.506248][ T5878] cramfs: wrong magic [ 89.569793][ T5861] loop2: detected capacity change from 0 to 32768 [ 89.700118][ T5861] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 89.830511][ T5783] Bluetooth: hci3: command tx timeout [ 89.830529][ T5785] Bluetooth: hci2: command tx timeout [ 89.830556][ T5785] Bluetooth: hci1: command tx timeout [ 89.874975][ T5861] XFS (loop2): Ending clean mount [ 89.908876][ T5785] Bluetooth: hci0: command tx timeout [ 90.009195][ T5766] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.093795][ T5877] loop1: detected capacity change from 0 to 40427 [ 90.132444][ T5869] loop3: detected capacity change from 0 to 32768 [ 90.140356][ T5877] F2FS-fs (loop1): invalid crc value [ 90.199620][ T5877] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.220479][ T5766] usb 1-1: Using ep0 maxpacket: 16 [ 90.241457][ T5766] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 90.278255][ T5766] usb 1-1: config 0 has no interface number 0 [ 90.300306][ T5766] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 90.355989][ T5766] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 90.386863][ T5766] usb 1-1: config 0 interface 41 has no altsetting 0 [ 90.401466][ T5766] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 90.419224][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.449080][ T5877] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.456948][ T5766] usb 1-1: Product: syz [ 90.467474][ T5766] usb 1-1: Manufacturer: syz [ 90.487328][ T5766] usb 1-1: SerialNumber: syz [ 90.528225][ T5766] usb 1-1: config 0 descriptor?? [ 90.547591][ T5884] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.563187][ T5884] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.587299][ T5889] f2fs_ckpt-7:1: attempt to access beyond end of device [ 90.587299][ T5889] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.653216][ T5889] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 90.671055][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.872678][ T5884] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.911519][ T5884] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.336667][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 91.463171][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.634756][ T5766] sr9700 1-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet, 62:e4:64:fc:13:8e [ 91.692427][ T5766] usb 1-1: USB disconnect, device number 2 [ 91.701552][ T5766] sr9700 1-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet [ 91.790151][ T5915] Illegal XDP return value 4291137600 on prog (id 2) dev N/A, expect packet loss! [ 92.082344][ T9] cfg80211: failed to load regulatory.db [ 92.172776][ T5929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31'. [ 92.344171][ T5937] loop1: detected capacity change from 0 to 512 [ 92.367409][ T5937] EXT4-fs: inline encryption not supported [ 92.376170][ T5937] EXT4-fs (loop1): Test dummy encryption mode enabled [ 92.388208][ T5937] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.410495][ T5937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.499304][ T5937] EXT4-fs (loop1): 1 truncate cleaned up [ 92.506435][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.603578][ T5937] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #12: comm syz.1.35: bad extra_isize 62 (inode size 256) [ 92.622103][ T5937] EXT4-fs (loop1): Remounting filesystem read-only [ 92.629488][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.715257][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.818881][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 92.828011][ T23] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.848822][ T23] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.870637][ T23] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 92.898884][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.915877][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 92.936500][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.974370][ T23] usb 1-1: config 0 descriptor?? [ 93.116089][ T5955] block2mtd: too many arguments [ 93.375453][ T5946] loop3: detected capacity change from 0 to 40427 [ 93.396935][ T5946] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 93.413484][ T5946] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 93.426074][ T23] hid (null): nested delimiters [ 93.451272][ T5946] F2FS-fs (loop3): invalid crc value [ 93.457604][ T23] hid (null): report_id 24797 is invalid [ 93.464659][ T23] hid (null): bogus close delimiter [ 93.668031][ T5766] usb 1-1: USB disconnect, device number 3 [ 93.735324][ T5946] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 93.743363][ T5946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.762399][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.825303][ T5946] syz.3.37: attempt to access beyond end of device [ 93.825303][ T5946] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 93.872494][ T5778] syz-executor: attempt to access beyond end of device [ 93.872494][ T5778] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.894815][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 93.996708][ T5821] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.997056][ T5973] ip_tables: iptables: counters copy to user failed while replacing table [ 94.016937][ T5821] usb 2-1: config 0 has no interface number 0 [ 94.030985][ T5821] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 94.042134][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.050662][ T5821] usb 2-1: Product: syz [ 94.054885][ T5821] usb 2-1: Manufacturer: syz [ 94.059993][ T5821] usb 2-1: SerialNumber: syz [ 94.070399][ T5821] usb 2-1: config 0 descriptor?? [ 94.309429][ T5821] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 94.335186][ T5821] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 94.356537][ T5821] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 94.379069][ T5821] usb 2-1: media controller created [ 94.425778][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.759312][ T5987] loop3: detected capacity change from 0 to 512 [ 94.814566][ T5975] loop2: detected capacity change from 0 to 32768 [ 94.855128][ T5975] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 95.044021][ T5975] XFS (loop2): Ending clean mount [ 95.226718][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 95.606911][ T5821] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 95.691879][ T5821] usb 2-1: USB disconnect, device number 2 [ 95.923949][ T1204] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.087133][ T6016] loop3: detected capacity change from 0 to 1024 [ 96.122471][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 96.143555][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.159205][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 96.179245][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 96.201549][ T1204] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 96.211361][ T1204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.226621][ T1204] usb 3-1: Product: syz [ 96.245247][ T1204] usb 3-1: Manufacturer: syz [ 96.257546][ T6018] loop0: detected capacity change from 0 to 64 [ 96.264237][ T1204] usb 3-1: SerialNumber: syz [ 96.283204][ T1204] usb 3-1: config 0 descriptor?? [ 96.580240][ T1204] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 96.774287][ T6006] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 96.785732][ T1204] usb 3-1: USB disconnect, device number 2 [ 96.903308][ T9] smpboot: CPU 1 is now offline [ 97.092224][ T6039] loop0: detected capacity change from 0 to 2048 [ 97.177429][ T6039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.248410][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.436102][ T6046] sd 0:0:1:0: PR command failed: 1026 [ 97.476790][ T6046] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 97.532378][ T6046] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 97.931814][ T6050] loop2: detected capacity change from 0 to 8192 [ 98.001270][ T6050] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.095990][ T6050] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 98.129045][ T5821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.174589][ T6050] REISERFS (device loop2): using ordered data mode [ 98.213856][ T6050] reiserfs: using flush barriers [ 98.260168][ T6050] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.336341][ T6050] REISERFS (device loop2): checking transaction log (loop2) [ 98.358815][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 98.415734][ T5785] Bluetooth: hci3: Malformed LE Event: 0x0d [ 98.440366][ T5821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.489267][ T5821] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 98.514922][ T5821] usb 2-1: can't read configurations, error -71 [ 98.605505][ T6050] REISERFS (device loop2): Using tea hash to sort names [ 98.633899][ T6050] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 99.331911][ T6077] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 99.740456][ T6093] syz.3.98 (6093) used greatest stack depth: 19112 bytes left [ 100.263098][ T6108] loop1: detected capacity change from 0 to 256 [ 100.287993][ T6108] exfat: Deprecated parameter 'utf8' [ 100.367657][ T6108] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 100.787470][ T27] audit: type=1326 audit(1790756863.019:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.1.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f982999e159 code=0x0 [ 100.832192][ T6120] process 'syz.2.110' launched '/dev/fd/4' with NULL argv: empty string added [ 100.998017][ T6125] Bluetooth: MGMT ver 1.22 [ 101.692414][ T27] audit: type=1400 audit(1790756863.939:3): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=6144 comm="syz.2.122" name="foo" offset=35 [ 102.055867][ T6157] netlink: 104 bytes leftover after parsing attributes in process `syz.1.128'. [ 102.069445][ T6154] pimreg: tun_chr_ioctl cmd 1074025677 [ 102.075044][ T6154] pimreg: linktype set to 776 [ 102.408284][ T6166] block2mtd: parameter too long [ 102.597345][ T6173] pim6reg: tun_chr_ioctl cmd 1074025676 [ 102.638117][ T6173] pim6reg: owner set to 0 [ 102.681312][ T6176] loop2: detected capacity change from 0 to 1024 [ 102.706756][ T6179] loop3: detected capacity change from 0 to 512 [ 102.722393][ T6176] EXT4-fs: Ignoring removed bh option [ 102.759821][ T6176] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.803407][ T6179] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.862723][ T6176] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 102.922847][ T6179] EXT4-fs (loop3): 1 truncate cleaned up [ 102.967956][ T6179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.038364][ T6176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.131344][ T6179] EXT4-fs error (device loop3): ext4_empty_dir:3179: inode #2: block 13: comm syz.3.138: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 103.205925][ T6179] EXT4-fs (loop3): Remounting filesystem read-only [ 103.216796][ T6176] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.136: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=76 fake=0 [ 103.295984][ T6176] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 103.323026][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.482225][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.547090][ T6193] loop1: detected capacity change from 0 to 4096 [ 103.622427][ T6193] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 103.748291][ T6193] ntfs3: loop1: ino=19, mi_enum_attr [ 103.789901][ T6193] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 103.855192][ T6199] loop3: detected capacity change from 0 to 2048 [ 103.865609][ T6193] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 103.911238][ T6199] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 103.929558][ T6199] loop3: partition table partially beyond EOD, truncated [ 103.955664][ T6199] loop3: p1 start 3405774849 is beyond EOD, truncated [ 103.964787][ T6201] loop2: detected capacity change from 0 to 8 [ 103.982824][ T6199] loop3: p2 start 53543428 is beyond EOD, truncated [ 104.061228][ T6199] loop3: p3 start 4284289 is beyond EOD, truncated [ 104.132618][ T6199] loop3: p5 start 3405774849 is beyond EOD, truncated [ 104.165833][ T6199] loop3: p6 start 53543428 is beyond EOD, truncated [ 104.358821][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.568818][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 104.587984][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 104.637103][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024 [ 104.683380][ T5839] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.715876][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.744136][ T6216] loop1: detected capacity change from 0 to 1024 [ 104.755697][ T5839] usb 4-1: config 0 descriptor?? [ 104.780439][ T5839] hub 4-1:0.0: USB hub found [ 104.863713][ T6216] hfsplus: invalid length 1280 has been corrected to 255 [ 104.971325][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.021729][ T5839] hub 4-1:0.0: 26 ports detected [ 105.059322][ T5839] hub 4-1:0.0: insufficient power available to use all downstream ports [ 105.104565][ T6220] jffs2: notice: (6220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.189189][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 105.203869][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.217426][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 105.235351][ T5839] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 105.257739][ T5839] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 105.279465][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 105.312258][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.325882][ T5839] usbhid 4-1:0.0: can't add hid device: -71 [ 105.347899][ T5839] usbhid: probe of 4-1:0.0 failed with error -71 [ 105.372384][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.394858][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.406916][ T9] usb 3-1: SerialNumber: syz [ 105.417574][ T5839] usb 4-1: USB disconnect, device number 2 [ 105.431344][ T6214] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.479492][ T6214] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.518353][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 105.531745][ T5821] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.541541][ T9] hub: probe of 3-1:1.0 failed with error -5 [ 105.602259][ T6228] loop0: detected capacity change from 0 to 256 [ 105.667458][ T6228] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 105.707681][ T27] audit: type=1800 audit(1790757123.947:4): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.155" name="file0" dev="loop0" ino=1048598 res=0 errno=0 [ 105.756176][ T6214] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.768897][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 105.781952][ T5821] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 105.793762][ T6214] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.811045][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.824517][ T5821] usb 2-1: Product: syz [ 105.834076][ T5821] usb 2-1: Manufacturer: syz [ 105.859751][ T5821] usb 2-1: SerialNumber: syz [ 105.887294][ T5821] usb 2-1: config 0 descriptor?? [ 105.918599][ T5821] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 106.038064][ T9] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 106.132046][ T9] usb 3-1: USB disconnect, device number 3 [ 106.187281][ C0] sd 0:0:1:0: [sda] tag#285 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 106.197757][ C0] sd 0:0:1:0: [sda] tag#285 CDB: Read(6) 08 00 00 00 00 00 [ 106.394980][ T6234] tap0: tun_chr_ioctl cmd 1074025675 [ 106.406832][ T6234] tap0: persist disabled [ 106.628354][ T6241] ip_tables: iptables: counters copy to user failed while replacing table [ 106.643950][ T6241] C: renamed from lo (while UP) [ 106.651525][ T6241] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 106.768913][ T5821] ssu100: probe of 2-1:0.0 failed with error -71 [ 106.808988][ T5821] usb 2-1: USB disconnect, device number 5 [ 106.900320][ T6245] loop2: detected capacity change from 0 to 256 [ 107.193519][ T6250] loop3: detected capacity change from 0 to 512 [ 107.216613][ T6250] EXT4-fs: Ignoring removed orlov option [ 107.322413][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.418896][ T6250] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.663533][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.703886][ T6283] ubi0: attaching mtd0 [ 108.868419][ T6278] loop2: detected capacity change from 0 to 32768 [ 108.945085][ T6285] loop1: detected capacity change from 0 to 2048 [ 109.078468][ T6285] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 109.127831][ T6278] JBD2: Ignoring recovery information on journal [ 109.185308][ T6285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.325011][ T6278] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.727160][ T6278] syz.2.177 (6278) used greatest stack depth: 18776 bytes left [ 109.914877][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 110.324068][ T6308] loop2: detected capacity change from 0 to 2048 [ 110.358259][ T6308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.146384][ T6329] input: syz1 as /devices/virtual/input/input5 [ 111.578828][ T5821] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 111.634279][ T6337] loop2: detected capacity change from 0 to 256 [ 111.676567][ T6337] exfat: Deprecated parameter 'utf8' [ 111.719510][ T6337] exfat: Deprecated parameter 'utf8' [ 111.772490][ T6337] exfat: Deprecated parameter 'namecase' [ 111.804896][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.815590][ T5821] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 111.843817][ T5821] usb 2-1: config 127 has no interface number 0 [ 111.865686][ T6337] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 111.918772][ T5821] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 111.976113][ T5821] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 112.022666][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.055918][ T5821] usb 2-1: Product: syz [ 112.069669][ T5821] usb 2-1: Manufacturer: syz [ 112.078437][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.104063][ T5821] usb 2-1: SerialNumber: syz [ 112.124376][ T6332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.262803][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.522663][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.602699][ T6332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.845147][ T5821] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 112.909343][ T5821] asix: probe of 2-1:127.57 failed with error -71 [ 112.975580][ T5821] usb 2-1: USB disconnect, device number 6 [ 113.339940][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.358335][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.367321][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.376336][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.384111][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.392444][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.838969][ T5766] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.049039][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 114.090642][ T5766] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 114.136861][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.165455][ T5766] usb 3-1: Product: syz [ 114.187159][ T5766] usb 3-1: Manufacturer: syz [ 114.208796][ T5766] usb 3-1: SerialNumber: syz [ 114.243319][ T5766] usb 3-1: config 0 descriptor?? [ 114.260687][ T6344] loop0: detected capacity change from 0 to 32768 [ 114.286627][ T5766] gspca_main: se401-2.14.0 probing 047d:5003 [ 114.458393][ T6344] JBD2: Ignoring recovery information on journal [ 114.715004][ T6344] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.726143][ T5766] gspca_se401: ExtraFeatures: 86 [ 114.754381][ T5766] gspca_se401: Too many frame sizes [ 114.974223][ T5766] usb 3-1: USB disconnect, device number 4 [ 115.275688][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 115.423641][ T48] hsr_slave_0: left promiscuous mode [ 115.460889][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 115.473888][ T48] hsr_slave_1: left promiscuous mode [ 115.486426][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.509041][ T51] Bluetooth: hci2: command tx timeout [ 115.528448][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.673861][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.709715][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.739821][ T48] bridge_slave_1: left allmulticast mode [ 115.799201][ T48] bridge_slave_1: left promiscuous mode [ 115.822918][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.892490][ T48] bridge_slave_0: left allmulticast mode [ 115.898182][ T48] bridge_slave_0: left promiscuous mode [ 115.944336][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.212574][ T48] veth1_macvtap: left promiscuous mode [ 116.250271][ T48] veth0_macvtap: left promiscuous mode [ 116.280199][ T48] veth1_vlan: left promiscuous mode [ 116.285797][ T48] veth0_vlan: left promiscuous mode [ 116.774558][ T6406] loop5: detected capacity change from 0 to 6 [ 116.850568][ T6406] loop5: [POWERTEC] p1 p2 p3 [ 116.877472][ T6406] loop5: p1 start 2738982409 is beyond EOD, truncated [ 116.928878][ T6406] loop5: p2 start 3318134482 is beyond EOD, truncated [ 116.986369][ T6406] loop5: p3 start 3832978868 is beyond EOD, truncated [ 117.591941][ T51] Bluetooth: hci2: command tx timeout [ 117.935462][ T6421] 9p: Unknown access argument : -22 [ 118.251891][ T6425] program syz.1.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.372884][ T48] team0 (unregistering): Port device team_slave_1 removed [ 118.422027][ T6427] mtrr: base(0x20000000) is not aligned on a size(0x40000000) boundary [ 118.472902][ T48] team0 (unregistering): Port device team_slave_0 removed [ 118.568077][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.668409][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.387925][ T48] bond0 (unregistering): Released all slaves [ 119.586856][ T6417] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 119.668795][ T51] Bluetooth: hci2: command tx timeout [ 120.077561][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.099063][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.106272][ T6350] bridge_slave_0: entered allmulticast mode [ 120.135037][ T6350] bridge_slave_0: entered promiscuous mode [ 120.145806][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.198743][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.241691][ T6452] capability: warning: `syz.2.236' uses 32-bit capabilities (legacy support in use) [ 120.251338][ T6350] bridge_slave_1: entered allmulticast mode [ 120.258374][ T6350] bridge_slave_1: entered promiscuous mode [ 120.354328][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.391564][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.535217][ T6350] team0: Port device team_slave_0 added [ 120.582471][ T6350] team0: Port device team_slave_1 added [ 120.744696][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.767757][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.872883][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.975144][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.009480][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.138731][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.420577][ T6350] hsr_slave_0: entered promiscuous mode [ 121.455154][ T6350] hsr_slave_1: entered promiscuous mode [ 121.714629][ T6480] ªªªªªª: renamed from vlan0 (while UP) [ 121.748857][ T51] Bluetooth: hci2: command tx timeout [ 122.299027][ T6350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.323355][ T6469] loop1: detected capacity change from 0 to 32768 [ 122.344775][ T6350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.413961][ T6469] JBD2: Ignoring recovery information on journal [ 122.450970][ T6350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.503302][ T6350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.591645][ T6469] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 122.703136][ T6490] loop0: detected capacity change from 0 to 8192 [ 122.878168][ T6501] loop2: detected capacity change from 0 to 128 [ 122.885279][ T6490] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.954695][ T6469] UBIFS error (pid: 6469): cannot open "ubi:0", error -19 [ 123.088887][ T6490] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 123.112605][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.197532][ T5779] (syz-executor,5779,0):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 123.263507][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.297763][ T6490] REISERFS (device loop0): using ordered data mode [ 123.347142][ T6490] reiserfs: using flush barriers [ 123.389906][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.397066][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.420560][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 123.440664][ T6490] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.510229][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.517421][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.607722][ T6490] REISERFS (device loop0): checking transaction log (loop0) [ 123.745581][ T6350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.134879][ T6490] REISERFS (device loop0): Using tea hash to sort names [ 124.202076][ T6490] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 124.338922][ T6490] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 124.587662][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.279213][ T6545] loop1: detected capacity change from 0 to 2048 [ 125.360575][ T6545] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.770209][ T6350] veth0_vlan: entered promiscuous mode [ 125.823784][ T6350] veth1_vlan: entered promiscuous mode [ 125.954916][ T6350] veth0_macvtap: entered promiscuous mode [ 125.998894][ T6559] WARNING! power/level is deprecated; use power/control instead [ 126.012978][ T6350] veth1_macvtap: entered promiscuous mode [ 126.109158][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.161402][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.192196][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.227425][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.268935][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.301515][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.355230][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.428416][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.479203][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.518817][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.552727][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.579710][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.609050][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.638575][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.697554][ T6350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.736836][ T6350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.766166][ T6350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.803307][ T6350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.927915][ T6579] loop1: detected capacity change from 0 to 512 [ 127.092707][ T6579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.158415][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.218799][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.230289][ T6579] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.356744][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.394024][ T27] audit: type=1800 audit(1790757145.637:5): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.267" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 127.427005][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.569307][ T6590] program syz.2.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.620565][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.083355][ T5821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.139037][ T6608] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.300580][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.343425][ T5821] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 128.383374][ T5821] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 128.448968][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.488209][ T5821] usb 5-1: config 0 descriptor?? [ 128.937957][ T5821] Bluetooth: Can't get state to change to load configuration err [ 128.968187][ T5821] Bluetooth: Loading sysconfig file failed [ 129.008785][ T5821] ath3k: probe of 5-1:0.0 failed with error -16 [ 129.723422][ T6616] loop1: detected capacity change from 0 to 40427 [ 129.785886][ T6616] F2FS-fs (loop1): invalid crc value [ 129.827492][ T6616] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.044036][ T6616] F2FS-fs (loop1): Start checkpoint disabled! [ 130.097783][ T6616] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 130.173405][ T6643] loop2: detected capacity change from 0 to 164 [ 130.278192][ T6616] syz.1.276: attempt to access beyond end of device [ 130.278192][ T6616] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 130.708437][ T6650] loop0: detected capacity change from 0 to 256 [ 130.742287][ T59] kworker/u4:4: attempt to access beyond end of device [ 130.742287][ T59] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 130.833205][ T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.862359][ T5821] usb 5-1: USB disconnect, device number 2 [ 130.911663][ T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.756175][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.764061][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.313984][ T6687] loop1: detected capacity change from 0 to 256 [ 132.410594][ T6687] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 133.771504][ T6712] loop0: detected capacity change from 0 to 256 [ 133.799475][ T6714] kAFS: bad VL server IP address [ 133.843658][ T6712] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.923970][ T6718] loop2: detected capacity change from 0 to 256 [ 134.015255][ T6712] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.897210][ T6743] program syz.4.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.047494][ T6749] loop2: detected capacity change from 0 to 1024 [ 135.136375][ T6749] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 135.869358][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.322'. [ 136.343218][ T6783] batman_adv: batadv0: Adding interface: macsec1 [ 136.401240][ T6783] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.537833][ T6783] batman_adv: batadv0: Interface activated: macsec1 [ 136.818949][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.330'. [ 136.962775][ T6795] loop0: detected capacity change from 0 to 1024 [ 137.099682][ T6795] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 137.172313][ T6804] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.336'. [ 137.200247][ T6795] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 137.247912][ T6804] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.336'. [ 137.277619][ T6795] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.331: Failed to acquire dquot type 0 [ 137.364169][ T6795] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 137.491331][ T6795] EXT4-fs (loop0): 1 truncate cleaned up [ 137.529695][ T6795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.736558][ T6795] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 137.809670][ T6795] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 137.871669][ T6795] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.331: Failed to acquire dquot type 0 [ 137.914646][ T6820] bonding: no command found in bonding_masters - use +ifname or -ifname [ 138.110806][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.434178][ T6838] loop4: detected capacity change from 0 to 32768 [ 139.598867][ T27] audit: type=1800 audit(1790757157.837:6): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.351" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 139.675529][ T6838] ERROR: (device loop4): diWrite: ixpxd invalid [ 139.675529][ T6838] [ 139.737590][ T6838] ERROR: (device loop4): remounting filesystem as read-only [ 139.778114][ T6838] ERROR: (device loop4): txCommit: [ 139.778114][ T6838] [ 140.517239][ T6850] loop1: detected capacity change from 0 to 40427 [ 140.590731][ T6850] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 140.650010][ T6850] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 140.746351][ T6850] F2FS-fs (loop1): invalid crc value [ 140.900942][ T6882] bridge0: port 3(netdevsim0) entered blocking state [ 140.907896][ T6882] bridge0: port 3(netdevsim0) entered disabled state [ 140.958198][ T6882] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 141.016578][ T6882] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 141.114713][ T6850] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 141.158919][ T6850] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.227681][ T6887] loop4: detected capacity change from 0 to 64 [ 141.352506][ T6850] syz.1.356: attempt to access beyond end of device [ 141.352506][ T6850] loop1: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 141.470021][ T6894] syz.1.356: attempt to access beyond end of device [ 141.470021][ T6894] loop1: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 141.542613][ T6893] loop0: detected capacity change from 0 to 1764 [ 141.716913][ T5779] syz-executor: attempt to access beyond end of device [ 141.716913][ T5779] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.736969][ T6896] loop4: detected capacity change from 0 to 128 [ 141.787452][ T6896] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 141.844260][ T5779] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 141.904890][ T27] audit: type=1800 audit(1790757160.147:7): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.370" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 142.320323][ T6898] loop4: detected capacity change from 0 to 4096 [ 142.377680][ T6898] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 142.510365][ T6898] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 142.570206][ T6898] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 142.608870][ T6898] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 142.678930][ T6898] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 142.707151][ T6898] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 142.768430][ T6898] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 142.808934][ T6898] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 142.874192][ T6898] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 142.911680][ T6898] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 142.981247][ T6898] ntfs: volume version 3.1. [ 143.129059][ T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.177829][ T6911] loop1: detected capacity change from 0 to 512 [ 143.282599][ T6911] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 143.323651][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 143.338948][ T6911] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.376: inode #15: comm syz.1.376: iget: illegal inode # [ 143.397655][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.444562][ T788] usb 1-1: no configurations [ 143.462228][ T6911] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.376: couldn't read orphan inode 15 (err -117) [ 143.496612][ T788] usb 1-1: can't read configurations, error -22 [ 143.569857][ T6911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.706677][ T6921] loop4: detected capacity change from 0 to 64 [ 143.869915][ T6921] hfs: request for non-existent node 131072 in B*Tree [ 143.928957][ T6921] hfs: request for non-existent node 131072 in B*Tree [ 144.477441][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 144.606826][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 144.750717][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 144.848992][ T6942] netlink: 'syz.0.384': attribute type 63 has an invalid length. [ 144.889999][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 144.929258][ T6942] netlink: 44 bytes leftover after parsing attributes in process `syz.0.384'. [ 145.036060][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 145.175642][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 145.323601][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 145.474918][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 145.576807][ T6963] loop2: detected capacity change from 0 to 256 [ 145.597280][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 145.640730][ T6963] exfat: Deprecated parameter 'utf8' [ 145.646086][ T6963] exfat: Deprecated parameter 'namecase' [ 145.724398][ T6963] exfat: Deprecated parameter 'namecase' [ 145.774845][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 145.795174][ T6963] exfat: Deprecated parameter 'utf8' [ 145.879372][ T6963] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 146.015163][ T6972] erspan0: entered promiscuous mode [ 146.989372][ T6996] loop4: detected capacity change from 0 to 512 [ 147.087931][ T6996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.171213][ T6996] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.334880][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.492272][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.732245][ T2926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.024369][ T2926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.264688][ T2926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.658044][ T2926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.945913][ T7012] loop4: detected capacity change from 0 to 32768 [ 148.962228][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.191681][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 149.230990][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 149.261433][ T7012] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.339158][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 149.348258][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.451243][ T9] usb 1-1: Product: syz [ 149.493709][ T9] usb 1-1: Manufacturer: syz [ 149.503212][ T7012] XFS (loop4): Ending clean mount [ 149.528868][ T9] usb 1-1: SerialNumber: syz [ 149.565778][ T9] usb 1-1: config 0 descriptor?? [ 149.643772][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.707410][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.720680][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.729745][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.738231][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.746311][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.753667][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.812597][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.200407][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.207750][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.320255][ T6350] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.776708][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 150.987030][ T9] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 151.049020][ T9] usb 1-1: USB disconnect, device number 6 [ 151.301663][ T7064] loop9: detected capacity change from 0 to 7 [ 151.374689][ T7064] Dev loop9: unable to read RDB block 7 [ 151.440298][ T7064] loop9: unable to read partition table [ 151.462508][ T7064] loop9: partition table beyond EOD, truncated [ 151.523444][ T7064] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 151.603210][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 151.838800][ T5785] Bluetooth: hci3: command tx timeout [ 152.079979][ T7076] jffs2: notice: (7076) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.459417][ T7084] loop2: detected capacity change from 0 to 4096 [ 152.538981][ T2926] hsr_slave_0: left promiscuous mode [ 152.608927][ T2926] hsr_slave_1: left promiscuous mode [ 152.677609][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.691787][ T7092] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.728863][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.767957][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.805404][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.831315][ T2926] bridge_slave_1: left allmulticast mode [ 152.856891][ T2926] bridge_slave_1: left promiscuous mode [ 152.887020][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.925638][ T2926] bridge_slave_0: left allmulticast mode [ 152.941547][ T2926] bridge_slave_0: left promiscuous mode [ 152.962556][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.064553][ T2926] veth1_macvtap: left promiscuous mode [ 153.076291][ T2926] veth0_macvtap: left promiscuous mode [ 153.088050][ T2926] veth1_vlan: left promiscuous mode [ 153.105143][ T2926] veth0_vlan: left promiscuous mode [ 153.552535][ T7103] input: syz1 as /devices/virtual/input/input6 [ 153.908817][ T5785] Bluetooth: hci3: command tx timeout [ 155.285936][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 155.381999][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 155.482771][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.572176][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.644439][ T7112] loop0: detected capacity change from 0 to 40427 [ 155.694426][ T7112] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 155.765457][ T7112] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 155.826160][ T7112] F2FS-fs (loop0): invalid crc value [ 155.851732][ T7112] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.991025][ T5785] Bluetooth: hci3: command tx timeout [ 156.029820][ T7112] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 156.062718][ T7112] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.372864][ T2926] bond0 (unregistering): Released all slaves [ 156.577576][ T7097] warning: `syz.4.422' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 156.619839][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.638833][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.646057][ T7038] bridge_slave_0: entered allmulticast mode [ 156.710659][ T7038] bridge_slave_0: entered promiscuous mode [ 156.743027][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.788233][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.827164][ T7038] bridge_slave_1: entered allmulticast mode [ 156.857995][ T7038] bridge_slave_1: entered promiscuous mode [ 157.020907][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.076637][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.290369][ T7038] team0: Port device team_slave_0 added [ 157.298420][ T7038] team0: Port device team_slave_1 added [ 157.507915][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.580198][ T7138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'. [ 157.602417][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.743292][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.810540][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.817528][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.938019][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.012574][ T7145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.021734][ T7145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.030515][ T7145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.039244][ T7145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.086923][ T5785] Bluetooth: hci3: command tx timeout [ 158.141438][ T7145] Zero length message leads to an empty skb [ 158.332497][ T7038] hsr_slave_0: entered promiscuous mode [ 158.395742][ T7038] hsr_slave_1: entered promiscuous mode [ 158.439342][ T7038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.457962][ T7038] Cannot create hsr debugfs directory [ 158.508444][ T7157] loop2: detected capacity change from 0 to 512 [ 159.169517][ T7170] loop0: detected capacity change from 0 to 256 [ 159.190521][ T7038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.242599][ T7038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.309565][ T7170] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 159.365271][ T7038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.417999][ T7038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.451272][ T7177] loop4: detected capacity change from 0 to 128 [ 159.792963][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.892750][ T7038] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.943483][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.950767][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.033985][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.041205][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.354071][ T7194] loop2: detected capacity change from 0 to 256 [ 161.038036][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.285139][ T7214] loop2: detected capacity change from 0 to 2048 [ 161.391672][ T7214] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 161.504508][ T7214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.265160][ T7038] veth0_vlan: entered promiscuous mode [ 162.364042][ T7038] veth1_vlan: entered promiscuous mode [ 162.484369][ T7038] veth0_macvtap: entered promiscuous mode [ 162.535954][ T7038] veth1_macvtap: entered promiscuous mode [ 162.651364][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.686898][ T7238] loop0: detected capacity change from 0 to 2048 [ 162.706095][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.738437][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.797771][ T7227] loop4: detected capacity change from 0 to 32768 [ 162.816578][ T7238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.827827][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.884668][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.921212][ T7227] JBD2: Ignoring recovery information on journal [ 162.949864][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.024350][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.108494][ T7227] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 163.127811][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.198210][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.260997][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.306157][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.359832][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.407071][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.450054][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.543716][ T7038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.596055][ T7038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.629202][ T7038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.637947][ T7038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.772098][ T6350] ocfs2: Unmounting device (7,4) on (node local) [ 163.897915][ T7234] loop2: detected capacity change from 0 to 40427 [ 163.992960][ T7234] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 164.056204][ T7234] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 164.077180][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.116927][ T7234] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 164.129328][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.198246][ T7234] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 164.274202][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.291032][ T7234] F2FS-fs (loop2): Image doesn't support compression [ 164.341354][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.367829][ T7234] F2FS-fs (loop2): invalid crc value [ 164.490228][ T7234] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.800645][ T7234] F2FS-fs (loop2): Start checkpoint disabled! [ 164.898497][ T7234] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 164.940421][ T7234] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 165.370307][ T5821] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 165.581659][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 165.614284][ T5821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.624851][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.660205][ T5821] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 165.712240][ T5821] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.764462][ T5821] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 165.790851][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.835243][ T5821] usb 6-1: Product: syz [ 165.841894][ T5821] usb 6-1: Manufacturer: syz [ 165.869098][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.887782][ T5821] usb 6-1: SerialNumber: syz [ 165.933874][ T9] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 165.963233][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.009822][ T9] usb 5-1: Product: syz [ 166.018055][ T9] usb 5-1: Manufacturer: syz [ 166.044361][ T9] usb 5-1: SerialNumber: syz [ 166.077485][ T9] sisusb 5-1:1.0: Invalid USB2VGA device [ 166.114206][ T9] sisusb: probe of 5-1:1.0 failed with error -22 [ 166.211177][ T5821] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 166.272019][ T5821] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 166.553322][ T5821] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 166.640884][ T5821] usb 6-1: USB disconnect, device number 2 [ 166.756523][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.232536][ T7273] loop0: detected capacity change from 0 to 40427 [ 167.284949][ T7273] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 167.339273][ T7273] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 167.417002][ T7273] F2FS-fs (loop0): invalid crc value [ 167.422890][ T5821] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 167.629348][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 167.647351][ T5821] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.666917][ T5821] usb 6-1: config 0 has no interface number 0 [ 167.695633][ T5821] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.727628][ T5821] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.752450][ T5821] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 167.780458][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.815933][ T5821] usb 6-1: config 0 descriptor?? [ 167.821903][ T5766] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.865387][ T7273] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 167.886966][ T7273] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.028815][ T5766] usb 3-1: Using ep0 maxpacket: 16 [ 168.049324][ T5766] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 168.089185][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.116835][ T5766] usb 3-1: Product: syz [ 168.141031][ T5766] usb 3-1: Manufacturer: syz [ 168.161065][ T5766] usb 3-1: SerialNumber: syz [ 168.186995][ T5766] usb 3-1: config 0 descriptor?? [ 168.215209][ T5766] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 168.429264][ T5766] usb 5-1: USB disconnect, device number 3 [ 168.493116][ T5821] uclogic 0003:28BD:0094.0002: pen parameters not found [ 168.549346][ T5821] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 168.574860][ T9] usb 3-1: USB disconnect, device number 5 [ 168.627875][ T5821] usb 6-1: USB disconnect, device number 3 [ 169.181460][ T7341] loop4: detected capacity change from 0 to 1024 [ 169.896939][ T7360] loop4: detected capacity change from 0 to 512 [ 169.946302][ T7360] EXT4-fs: Ignoring removed nobh option [ 170.034605][ T7360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.131289][ T7360] EXT4-fs (loop4): 1 truncate cleaned up [ 170.181614][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.446259][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.489'. [ 170.600005][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.749573][ T9] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 9 comm: kworker/0:1) [ 171.668506][ T7412] netlink: 'syz.0.503': attribute type 30 has an invalid length. [ 171.677318][ T7408] loop4: detected capacity change from 0 to 4096 [ 171.737237][ T7408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.909542][ T7412] bond1: option arp_missed_max: invalid value (0) [ 171.974748][ T7412] bond1: option arp_missed_max: allowed values 1 - 255 [ 172.063256][ T7412] bond1 (unregistering): Released all slaves [ 172.129819][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.155681][ T7444] loop0: detected capacity change from 0 to 2048 [ 173.291390][ T7444] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 173.439718][ T7444] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 173.447417][ T7444] UDF-fs: Scanning with blocksize 512 failed [ 173.640601][ T7444] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.746820][ T7430] loop4: detected capacity change from 0 to 40427 [ 173.822206][ T7430] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff [ 173.896314][ T7430] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x30e4 [ 173.953793][ T7430] F2FS-fs (loop4): invalid crc value [ 174.012420][ T7430] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.200883][ T7430] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 174.365629][ T7430] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.550843][ T7430] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 174.604163][ T7466] loop2: detected capacity change from 0 to 4096 [ 174.645404][ T7430] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x100b/0x1a00 [ 174.685152][ T7475] netlink: 'syz.5.522': attribute type 3 has an invalid length. [ 174.765585][ T7430] syz.4.507: attempt to access beyond end of device [ 174.765585][ T7430] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.919534][ T7466] ntfs: volume version 3.1. [ 174.924465][ T7430] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 175.264354][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 175.264366][ T27] audit: type=1400 audit(1790757193.507:8): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=7484 comm="syz.5.525" name="foo" offset=35 [ 176.339314][ T7506] program syz.5.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.829107][ T7522] kAFS: bad VL server IP address [ 176.899622][ T5821] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.098845][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 177.139001][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.187740][ T5821] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.242149][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.311761][ T5821] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 177.365188][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.381663][ T7538] loop5: detected capacity change from 0 to 2048 [ 177.418076][ T5821] usb 3-1: Product: syz [ 177.490740][ T5821] usb 3-1: Manufacturer: syz [ 177.516408][ T7540] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.548188][ T5821] usb 3-1: SerialNumber: syz [ 177.606565][ T5821] usb 3-1: config 0 descriptor?? [ 177.685307][ T27] audit: type=1800 audit(1790757195.927:9): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.542" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 178.089003][ T5821] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 178.298388][ T5821] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 178.405493][ T5821] gs_usb: probe of 3-1:0.0 failed with error -22 [ 178.501940][ T9] usb 3-1: USB disconnect, device number 6 [ 178.710664][ T7554] loop5: detected capacity change from 0 to 8 [ 178.777744][ T7554] Major/Minor mismatch, trying to mount newer 4.1792 filesystem [ 178.821328][ T7554] Please update your kernel [ 178.870963][ T5795] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.161754][ T7562] loop5: detected capacity change from 0 to 1764 [ 179.267489][ T7564] program syz.0.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.316308][ T7547] loop4: detected capacity change from 0 to 32768 [ 179.340978][ T7568] loop2: detected capacity change from 0 to 256 [ 179.444834][ T7547] blkno = 8ed2c, nblocks = 1 [ 179.503315][ T7547] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 179.503315][ T7547] [ 179.532403][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 179.611130][ T7569] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 179.611130][ T7569] [ 179.661737][ T7569] ERROR: (device loop4): remounting filesystem as read-only [ 179.720615][ T7547] ERROR: (device loop4): remounting filesystem as read-only [ 179.778743][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 179.786113][ T7569] syz.4.544: attempt to access beyond end of device [ 179.786113][ T7569] loop4: rw=2049, sector=4680032, nr_sectors = 8 limit=32768 [ 179.817455][ T7574] loop0: detected capacity change from 0 to 764 [ 179.839784][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.893863][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.906730][ T7547] ialloc: diAlloc returned -17! [ 179.982490][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.042415][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.077193][ T112] blkno = 8ed2c, nblocks = 1 [ 180.103940][ T9] usb 6-1: config 0 descriptor?? [ 180.118886][ T112] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 180.118886][ T112] [ 180.158053][ T9] hub 6-1:0.0: USB hub found [ 180.248927][ T5821] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.368975][ T9] hub 6-1:0.0: 27 ports detected [ 180.387045][ T9] hub 6-1:0.0: insufficient power available to use all downstream ports [ 180.464988][ T5821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.528802][ T5821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.570296][ T9] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 180.608852][ T5821] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 180.619145][ T9] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 180.663526][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.697712][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 180.707654][ T9] usbhid: probe of 6-1:0.0 failed with error -71 [ 180.791468][ T9] usb 6-1: USB disconnect, device number 4 [ 181.212575][ T5821] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 181.320494][ T5821] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 181.386523][ T7595] loop4: detected capacity change from 0 to 256 [ 181.451868][ T5821] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0003/input/input7 [ 181.475050][ T7595] exfat: Deprecated parameter 'namecase' [ 181.506333][ T7598] loop5: detected capacity change from 0 to 512 [ 181.538838][ T7595] exfat: Deprecated parameter 'namecase' [ 181.591934][ T7598] EXT4-fs: Ignoring removed oldalloc option [ 181.601819][ T7595] exfat: Deprecated parameter 'namecase' [ 181.697662][ T7598] EXT4-fs (loop5): Test dummy encryption mode enabled [ 181.746187][ T5821] usb 3-1: USB disconnect, device number 7 [ 181.768749][ T7595] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 181.842865][ T7596] fido_id[7596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 181.963649][ T7598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.338540][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.482265][ T7646] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 183.536815][ T7646] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 183.577629][ T7646] iwpm_send_hello: Unable to send a nlmsg [ 184.333620][ T7676] kAFS: bad VL server IP address [ 184.939187][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.592'. [ 184.988981][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 185.146871][ T7701] genirq: Flags mismatch irq 1. 00000000 (pc212e) vs. 00000080 (i8042) [ 185.167145][ T7701] comedi comedi1: warning! irq 1 unavailable! [ 185.203739][ T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.243566][ T788] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.302730][ T788] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 185.354774][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.366740][ T7682] loop2: detected capacity change from 0 to 32768 [ 185.411211][ T788] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 185.513904][ T7682] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.796614][ T7682] XFS (loop2): Ending clean mount [ 185.849741][ T7682] XFS (loop2): Quotacheck needed: Please wait. [ 185.969427][ T788] usb 1-1: USB disconnect, device number 7 [ 186.027286][ T7682] XFS (loop2): Quotacheck: Done. [ 186.068110][ T2321] usb 1-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 186.116792][ T2321] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 186.286068][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.380210][ T7727] kAFS: bad VL server IP address [ 186.427474][ T7726] loop5: detected capacity change from 0 to 4096 [ 186.545271][ T7728] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.722449][ T7726] NILFS (loop5): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 186.820593][ T7726] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 186.864945][ T7726] Remounting filesystem read-only [ 186.902221][ T7726] NILFS (loop5): error -5 preparing GC: cannot mark copying blocks dirty [ 187.040759][ T7737] loop0: detected capacity change from 0 to 256 [ 187.187119][ T7737] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 187.490519][ T4357] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 187.912539][ T7759] loop0: detected capacity change from 0 to 256 [ 188.035332][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.612'. [ 188.048811][ T7759] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 188.558768][ T5766] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 188.675644][ T7774] loop0: detected capacity change from 0 to 1024 [ 188.771211][ T5766] usb 6-1: Using ep0 maxpacket: 8 [ 188.802977][ T5766] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 188.835459][ T7774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.857904][ T5766] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.888578][ T5766] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.929587][ T5766] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.969066][ T7784] ip_tables: iptables: counters copy to user failed while replacing table [ 188.985547][ T5766] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.023359][ T5766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.293815][ T5766] usb 6-1: GET_CAPABILITIES returned 0 [ 189.309868][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.328773][ T5766] usbtmc 6-1:16.0: can't read capabilities [ 189.443612][ T27] audit: type=1800 audit(1790757207.687:10): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.623" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 189.567808][ T5839] usb 6-1: USB disconnect, device number 5 [ 190.243204][ T7814] block2mtd: error: cannot open device i² ì [ 190.243204][ T7814] Ò [ 190.392587][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 190.718261][ T7832] Falling back ldisc for ttyS3. [ 190.949540][ T7838] block nbd5: NBD_DISCONNECT [ 191.777898][ T7844] loop5: detected capacity change from 0 to 32768 [ 191.899384][ T7844] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.646 (7844) [ 192.106275][ T7844] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.185528][ T7844] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 192.252151][ T7844] BTRFS info (device loop5): setting nodatasum [ 192.288076][ T7844] BTRFS info (device loop5): force zlib compression, level 3 [ 192.350692][ T7844] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 192.424737][ T7844] BTRFS info (device loop5): use lzo compression, level 0 [ 192.471120][ T7844] BTRFS info (device loop5): turning on flush-on-commit [ 192.538206][ T7844] BTRFS info (device loop5): enabling auto defrag [ 192.585583][ T7844] BTRFS info (device loop5): max_inline at 4096 [ 192.638381][ T7844] BTRFS info (device loop5): using free space tree [ 192.928706][ T5766] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.938834][ T7844] BTRFS info (device loop5): enabling ssd optimizations [ 193.148770][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 193.185776][ T5766] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 193.257831][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 193.304853][ T7038] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.338919][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.403656][ T5766] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.497250][ T5766] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.572155][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.888875][ T5766] usb 3-1: GET_CAPABILITIES returned 0 [ 193.940588][ T5766] usbtmc 3-1:16.0: can't read capabilities [ 193.968776][ T5839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.185803][ T9] usb 3-1: USB disconnect, device number 8 [ 194.191976][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 194.237659][ T5839] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 194.297925][ T5839] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 194.338752][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 194.388282][ T5839] usb 5-1: config 1 has no interface number 0 [ 194.432480][ T5839] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.495870][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.505553][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.558726][ T5839] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 194.646489][ T5839] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 194.693143][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.774623][ T5839] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 194.995923][ T7905] loop4: detected capacity change from 0 to 512 [ 195.166248][ T7905] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.659: bg 0: block 16: invalid block bitmap [ 195.314804][ T7905] EXT4-fs (loop4): Remounting filesystem read-only [ 195.380419][ T7905] EXT4-fs (loop4): 1 truncate cleaned up [ 195.387211][ T7905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.402706][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.664'. [ 195.442907][ T7898] loop0: detected capacity change from 0 to 40427 [ 195.530281][ T7898] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 195.555256][ T5839] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 195.643564][ T7898] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 195.750457][ T7898] F2FS-fs (loop0): Image doesn't support compression [ 195.757246][ T7898] F2FS-fs (loop0): Image doesn't support compression [ 195.906562][ T7898] F2FS-fs (loop0): invalid crc value [ 196.037663][ T5821] usb 5-1: USB disconnect, device number 4 [ 196.073894][ T5821] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 196.229748][ T5839] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 196.385010][ T7898] F2FS-fs (loop0): Start checkpoint disabled! [ 196.444142][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 196.474680][ T5839] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 196.522879][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.577668][ T5839] usb 3-1: config 0 descriptor?? [ 196.670787][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.878864][ T5839] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 196.922460][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.004553][ T5839] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 197.037818][ T5839] usb 3-1: media controller created [ 197.143950][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.264710][ T5839] az6027: usb out operation failed. (-71) [ 197.320700][ T5839] az6027: usb out operation failed. (-71) [ 197.352506][ T5839] stb0899_attach: Driver disabled by Kconfig [ 197.382636][ T5839] az6027: no front-end attached [ 197.382636][ T5839] [ 197.429724][ T5839] az6027: usb out operation failed. (-71) [ 197.465934][ T5839] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 197.543826][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 197.604564][ T7953] loop5: detected capacity change from 0 to 32768 [ 197.657418][ T7953] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.671 (7953) [ 197.681468][ T5839] dvb-usb: schedule remote query interval to 400 msecs. [ 197.688463][ T5839] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 197.825858][ T7953] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 197.843699][ T5839] usb 3-1: USB disconnect, device number 9 [ 197.893364][ T7953] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 197.964623][ T7953] BTRFS info (device loop5): force clearing of disk cache [ 197.998796][ T7953] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 198.078275][ T7953] BTRFS info (device loop5): use zstd compression, level 3 [ 198.119754][ T7953] BTRFS info (device loop5): using free space tree [ 198.241286][ T5839] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 198.440768][ T7953] BTRFS info (device loop5): enabling ssd optimizations [ 198.524484][ T7953] BTRFS info (device loop5): rebuilding free space tree [ 199.152719][ T8010] loop4: detected capacity change from 0 to 256 [ 199.219013][ T8010] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 199.480732][ T7038] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 199.930508][ T8025] netlink: 'syz.0.688': attribute type 2 has an invalid length. [ 200.149968][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 200.389502][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 200.417191][ T5839] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.457443][ T5839] usb 3-1: config 0 has no interface number 0 [ 200.502617][ T5839] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.564792][ T5839] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.600151][ T5839] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 200.631710][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.640479][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 200.677588][ T5839] usb 3-1: config 0 descriptor?? [ 200.843135][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 200.878479][ T9] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 200.899785][ T9] usb 6-1: config 0 has no interface number 0 [ 200.939672][ T9] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.981907][ T9] usb 6-1: config 0 interface 85 has no altsetting 0 [ 201.008004][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 201.037250][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.075715][ T9] usb 6-1: Product: syz [ 201.098042][ T9] usb 6-1: Manufacturer: syz [ 201.123673][ T9] usb 6-1: SerialNumber: syz [ 201.151756][ T9] usb 6-1: config 0 descriptor?? [ 201.415028][ T5839] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0004/input/input12 [ 201.516611][ T5839] uclogic 0003:28BD:0094.0004: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 201.665133][ T5839] usb 3-1: USB disconnect, device number 10 [ 201.854482][ T9] appletouch 6-1:0.85: Geyser mode initialized. [ 201.881002][ T8047] fido_id[8047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 201.916968][ T9] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input11 [ 202.166979][ T5766] usb 6-1: USB disconnect, device number 6 [ 202.226445][ T5766] appletouch 6-1:0.85: input: appletouch disconnected [ 203.034011][ T8079] loop4: detected capacity change from 0 to 128 [ 203.157824][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 203.250119][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 203.330308][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:4' failed: Read-only file system [ 203.489656][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 203.611644][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 203.629464][ T8088] netlink: 452 bytes leftover after parsing attributes in process `syz.4.703'. [ 205.148823][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 205.365827][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.401251][ T9] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 205.451665][ T8135] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 205.459188][ T9] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 205.488209][ T9] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 205.549871][ T9] usb 5-1: config 129 has no interface number 0 [ 205.590562][ T9] usb 5-1: config 129 has no interface number 1 [ 205.597486][ T9] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 205.664374][ T9] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 205.731476][ T9] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 205.808977][ T9] usb 5-1: config 129 interface 135 has no altsetting 0 [ 205.846378][ T9] usb 5-1: config 129 interface 5 has no altsetting 0 [ 205.890111][ T9] usb 5-1: string descriptor 0 read error: -22 [ 205.924947][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 205.989748][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.074190][ T9] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 206.148980][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 206.163594][ T8141] loop0: detected capacity change from 0 to 8192 [ 206.304316][ T8157] loop2: detected capacity change from 0 to 512 [ 206.369451][ T9] usb 5-1: USB disconnect, device number 5 [ 206.572765][ T8157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.632105][ T5780] udevd[5780]: symlink '../../loop2' '/dev/disk/by-diskseq/252.tmp-b7:2' failed: Read-only file system [ 206.749107][ T8157] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.772862][ T5780] udevd[5780]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 206.799195][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 206.805291][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 206.925908][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/251.tmp-b7:0' failed: Read-only file system [ 206.946639][ T8164] udevd[8164]: symlink '../../loop2' '/dev/disk/by-diskseq/252.tmp-b7:2' failed: Read-only file system [ 207.008272][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 207.163502][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.481304][ T8175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.729'. [ 207.619897][ T8179] program syz.2.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.066558][ T8194] loop5: detected capacity change from 0 to 256 [ 208.171161][ T8194] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 208.250853][ T8164] udevd[8164]: symlink '../../loop5' '/dev/disk/by-diskseq/255.tmp-b7:5' failed: Read-only file system [ 208.327595][ T8164] udevd[8164]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 208.473895][ T8164] udevd[8164]: symlink '../../loop5' '/dev/disk/by-diskseq/255.tmp-b7:5' failed: Read-only file system [ 208.584530][ T8204] loop0: detected capacity change from 0 to 2048 [ 208.593952][ T8164] udevd[8164]: symlink '../../loop5' '/dev/disk/by-diskseq/255.tmp-b7:5' failed: Read-only file system [ 208.629773][ T5766] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 208.703318][ T8204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.768467][ T8164] udevd[8164]: symlink '../../loop0' '/dev/disk/by-diskseq/257.tmp-b7:0' failed: Read-only file system [ 208.829875][ T5766] usb 5-1: not running at top speed; connect to a high speed hub [ 208.840753][ T8164] udevd[8164]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system [ 208.871374][ T5766] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.882418][ T8204] CacheFiles: Failed to register: -95 [ 208.914786][ T8164] udevd[8164]: symlink '../../loop0' '/dev/disk/by-uuid/1234567812345678.tmp-b7:0' failed: Read-only file system [ 208.927916][ T5766] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 208.981842][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.042318][ T5766] usb 5-1: Found UVC 1.00 device (046d:0825) [ 209.116514][ T8164] udevd[8164]: symlink '../../loop0' '/dev/disk/by-diskseq/257.tmp-b7:0' failed: Read-only file system [ 209.164334][ T8164] udevd[8164]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system [ 209.216222][ T8164] udevd[8164]: symlink '../../loop0' '/dev/disk/by-uuid/1234567812345678.tmp-b7:0' failed: Read-only file system [ 209.864101][ T5766] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 209.899764][ T5766] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 209.982886][ T5766] usb 5-1: USB disconnect, device number 6 [ 210.060122][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 210.251220][ T4357] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.265980][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 210.292490][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 210.312606][ T9] usb 3-1: config 0 has no interface number 0 [ 210.352192][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 210.396078][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 210.462477][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 210.501807][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 210.568749][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.597775][ T9] usb 3-1: Product: syz [ 210.616188][ T4357] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.638692][ T9] usb 3-1: Manufacturer: syz [ 210.643361][ T9] usb 3-1: SerialNumber: syz [ 210.687631][ T9] usb 3-1: config 0 descriptor?? [ 210.721672][ T8224] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.773059][ T8224] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.009652][ T4357] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.082448][ T8224] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.082586][ T8224] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.422395][ T4357] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.652524][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.664602][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.678913][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.687066][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.695018][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.702733][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.807193][ T9] sr9700 3-1:0.41 eth9: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 1a:fd:53:dd:57:75 [ 211.872301][ T9] usb 3-1: USB disconnect, device number 11 [ 211.883156][ T9] sr9700 3-1:0.41 eth9: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 212.071113][ T11] wlan1: Trigger new scan to find an IBSS to join [ 212.180906][ T2932] ------------[ cut here ]------------ [ 212.186848][ T2932] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 212.198116][ T2932] WARNING: CPU: 0 PID: 2932 at net/mac80211/rate.c:385 __rate_control_send_low+0x632/0x880 [ 212.208215][ T2932] Modules linked in: [ 212.212164][ T2932] CPU: 0 PID: 2932 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 212.219741][ T2932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.229832][ T2932] Workqueue: events_unbound cfg80211_wiphy_work [ 212.236135][ T2932] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 212.242449][ T2932] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 c0 22 e0 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 8e 86 4a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 212.262094][ T2932] RSP: 0018:ffffc9000bc47400 EFLAGS: 00010246 [ 212.268171][ T2932] RAX: fdb06ecaf1028800 RBX: 000000000000000c RCX: ffff88802c010000 [ 212.276181][ T2932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 212.284184][ T2932] RBP: 0000000000000084 R08: ffffc9000bc47007 R09: 1ffff92001788e00 [ 212.292183][ T2932] R10: dffffc0000000000 R11: fffff52001788e01 R12: 0000000000000040 [ 212.300183][ T2932] R13: dffffc0000000000 R14: ffff88807e7a33b8 R15: ffff88807afee028 [ 212.308174][ T2932] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 212.317135][ T2932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.323747][ T2932] CR2: 00007fb075b556c8 CR3: 0000000068bf2000 CR4: 00000000003506f0 [ 212.331746][ T2932] Call Trace: [ 212.335047][ T2932] [ 212.337990][ T2932] rate_control_send_low+0x194/0x790 [ 212.343329][ T2932] rate_control_get_rate+0x20b/0x5c0 [ 212.348648][ T2932] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 212.354307][ T2932] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 212.360324][ T2932] ? __lock_acquire+0x1262/0x7d80 [ 212.365383][ T2932] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 212.371539][ T2932] invoke_tx_handlers_late+0xb1/0x17c0 [ 212.377027][ T2932] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 212.382898][ T2932] ieee80211_tx+0x2d8/0x460 [ 212.387445][ T2932] ? ieee80211_skb_resize+0x610/0x610 [ 212.392880][ T2932] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 212.398368][ T2932] ? ieee80211_xmit+0x2e0/0x3c0 [ 212.403288][ T2932] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 212.409296][ T2932] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 212.415136][ T2932] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 212.421524][ T2932] ieee80211_scan_state_send_probe+0x57f/0x930 [ 212.427706][ T2932] ieee80211_scan_work+0x42e/0x1b30 [ 212.432942][ T2932] ? _raw_spin_unlock_irq+0x23/0x50 [ 212.438155][ T2932] cfg80211_wiphy_work+0x228/0x260 [ 212.443308][ T2932] ? process_scheduled_works+0x975/0x1600 [ 212.449076][ T2932] process_scheduled_works+0xa60/0x1600 [ 212.454774][ T2932] ? worker_attach_to_pool+0x370/0x370 [ 212.460280][ T2932] ? assign_work+0x3cc/0x5d0 [ 212.464883][ T2932] worker_thread+0xa5e/0xfe0 [ 212.469518][ T2932] ? _raw_spin_unlock+0x40/0x40 [ 212.474383][ T2932] ? __kthread_parkme+0x71/0x1c0 [ 212.479360][ T2932] kthread+0x2fa/0x390 [ 212.483456][ T2932] ? pr_cont_work+0x550/0x550 [ 212.488142][ T2932] ? kthread_blkcg+0xd0/0xd0 [ 212.492779][ T2932] ret_from_fork+0x48/0x80 [ 212.497205][ T2932] ? kthread_blkcg+0xd0/0xd0 [ 212.501835][ T2932] ret_from_fork_asm+0x11/0x20 [ 212.506622][ T2932] [ 212.509667][ T2932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.516980][ T2932] CPU: 0 PID: 2932 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 212.524543][ T2932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.534603][ T2932] Workqueue: events_unbound cfg80211_wiphy_work [ 212.540861][ T2932] Call Trace: [ 212.544145][ T2932] [ 212.547089][ T2932] dump_stack_lvl+0x18c/0x250 [ 212.551792][ T2932] ? show_regs_print_info+0x20/0x20 [ 212.557023][ T2932] ? load_image+0x420/0x420 [ 212.561542][ T2932] panic+0x2ca/0x720 [ 212.565444][ T2932] ? bpf_jit_dump+0xd0/0xd0 [ 212.569961][ T2932] ? ret_from_fork_asm+0x11/0x20 [ 212.574928][ T2932] __warn+0x2e0/0x470 [ 212.578916][ T2932] ? __rate_control_send_low+0x632/0x880 [ 212.584573][ T2932] ? __rate_control_send_low+0x632/0x880 [ 212.590232][ T2932] report_bug+0x2be/0x4f0 [ 212.594613][ T2932] ? __rate_control_send_low+0x632/0x880 [ 212.600296][ T2932] ? __rate_control_send_low+0x632/0x880 [ 212.605937][ T2932] ? __rate_control_send_low+0x634/0x880 [ 212.611575][ T2932] handle_bug+0xcf/0x120 [ 212.615831][ T2932] exc_invalid_op+0x1a/0x50 [ 212.620361][ T2932] asm_exc_invalid_op+0x1a/0x20 [ 212.625222][ T2932] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 212.631492][ T2932] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 c0 22 e0 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 8e 86 4a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 212.651121][ T2932] RSP: 0018:ffffc9000bc47400 EFLAGS: 00010246 [ 212.657201][ T2932] RAX: fdb06ecaf1028800 RBX: 000000000000000c RCX: ffff88802c010000 [ 212.665184][ T2932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 212.673166][ T2932] RBP: 0000000000000084 R08: ffffc9000bc47007 R09: 1ffff92001788e00 [ 212.681138][ T2932] R10: dffffc0000000000 R11: fffff52001788e01 R12: 0000000000000040 [ 212.689125][ T2932] R13: dffffc0000000000 R14: ffff88807e7a33b8 R15: ffff88807afee028 [ 212.697127][ T2932] rate_control_send_low+0x194/0x790 [ 212.702426][ T2932] rate_control_get_rate+0x20b/0x5c0 [ 212.707724][ T2932] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 212.713378][ T2932] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 212.719374][ T2932] ? __lock_acquire+0x1262/0x7d80 [ 212.724413][ T2932] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 212.730495][ T2932] invoke_tx_handlers_late+0xb1/0x17c0 [ 212.735963][ T2932] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 212.741785][ T2932] ieee80211_tx+0x2d8/0x460 [ 212.746303][ T2932] ? ieee80211_skb_resize+0x610/0x610 [ 212.751695][ T2932] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 212.757173][ T2932] ? ieee80211_xmit+0x2e0/0x3c0 [ 212.762057][ T2932] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 212.768050][ T2932] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 212.773864][ T2932] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 212.780300][ T2932] ieee80211_scan_state_send_probe+0x57f/0x930 [ 212.786477][ T2932] ieee80211_scan_work+0x42e/0x1b30 [ 212.791686][ T2932] ? _raw_spin_unlock_irq+0x23/0x50 [ 212.796891][ T2932] cfg80211_wiphy_work+0x228/0x260 [ 212.802014][ T2932] ? process_scheduled_works+0x975/0x1600 [ 212.807756][ T2932] process_scheduled_works+0xa60/0x1600 [ 212.813329][ T2932] ? worker_attach_to_pool+0x370/0x370 [ 212.818797][ T2932] ? assign_work+0x3cc/0x5d0 [ 212.823428][ T2932] worker_thread+0xa5e/0xfe0 [ 212.828041][ T2932] ? _raw_spin_unlock+0x40/0x40 [ 212.832923][ T2932] ? __kthread_parkme+0x71/0x1c0 [ 212.837890][ T2932] kthread+0x2fa/0x390 [ 212.841975][ T2932] ? pr_cont_work+0x550/0x550 [ 212.846667][ T2932] ? kthread_blkcg+0xd0/0xd0 [ 212.851271][ T2932] ret_from_fork+0x48/0x80 [ 212.855698][ T2932] ? kthread_blkcg+0xd0/0xd0 [ 212.860291][ T2932] ret_from_fork_asm+0x11/0x20 [ 212.865076][ T2932] [ 212.868166][ T2932] Kernel Offset: disabled [ 212.872605][ T2932] Rebooting in 86400 seconds..