last executing test programs: 44.99227284s ago: executing program 1 (id=1514): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="00777acda0b2", 0x0, 0x39, 0x10, 0x0, 0x0}) 44.412734438s ago: executing program 1 (id=1518): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)={0xd, 0x4}) 43.71568736s ago: executing program 1 (id=1525): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0xd0000002, 0x0, {[0x10001]}}, 0x0, 0x8, &(0x7f0000000000)) 43.073152708s ago: executing program 1 (id=1529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000940)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1afa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x1, 0x0, 0x6, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 42.320944143s ago: executing program 1 (id=1533): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 41.36520515s ago: executing program 1 (id=1540): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 26.127763152s ago: executing program 32 (id=1540): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 7.771835745s ago: executing program 2 (id=1706): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.572341379s ago: executing program 4 (id=1708): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 6.534194123s ago: executing program 0 (id=1709): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x6a, 0x10, 0x0, &(0x7f0000000080)) 5.4928171s ago: executing program 3 (id=1710): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) 4.124269s ago: executing program 0 (id=1711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 3.810429501s ago: executing program 4 (id=1712): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r0, 0xffffffffffffffff, 0x18) 3.681599051s ago: executing program 2 (id=1713): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000440)=""/88, 0x58}, {0x0}], 0x3, 0x2, 0xe064) 3.367489464s ago: executing program 3 (id=1714): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_ts_info}) 2.968822962s ago: executing program 0 (id=1715): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @private1}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x4}], 0x38) 2.790082793s ago: executing program 2 (id=1716): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)=ANY=[@ANYRES64]) 2.740871496s ago: executing program 4 (id=1717): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'syz_tun\x00', {0x2, 0x4e21, @local}}) 2.51854283s ago: executing program 3 (id=1718): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @random="00005403cb00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x18, 0x87, 0x0, @private2, @mcast2, {[@srh={0x3b, 0x2, 0x4, 0x1, 0x51, 0x20, 0x3ff, [@local]}]}}}}}, 0x0) 2.053213863s ago: executing program 2 (id=1719): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000000)={'veth1_vlan\x00', @multicast}) 2.036282455s ago: executing program 4 (id=1720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x701, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) 1.817949517s ago: executing program 3 (id=1721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x4}}}}]}, 0x38}}, 0x0) 1.459479476s ago: executing program 0 (id=1722): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x25, 0x148, 0x4a8, 0x60, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00', {0x4}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe8, 'syz1\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x1d}, 0x0, 0x150, 0x198, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [0x0, 0xff, 0xffffff00], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0x100000100, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0x7d9e38f8b54249d4, 0xffffffff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], 0x6, 0x2e, 0xa7, 0x4e24, 0x4e22, 0x4e21, 0x4e20, 0x800, 0x221}, 0x80, 0x8}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a0) 1.275286652s ago: executing program 2 (id=1723): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x3f5}, [], {0x14, 0x3f6}}, 0x28}}, 0x4010) 1.228937517s ago: executing program 4 (id=1724): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'syz_tun\x00'}) 1.076415324s ago: executing program 3 (id=1725): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x880, &(0x7f0000000180)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp737'}}, {@force}, {@gid}, {@nobarrier}, {@uid}]}, 0x1, 0x5e7, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 632.37219ms ago: executing program 0 (id=1726): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000ec0)=@in4={0x21, 0x1, 0x2, 0xf, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x24) 548.274229ms ago: executing program 2 (id=1727): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000111401002dbd7000000000230800010000000000080003000000000008004a000000000008004b"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x24000000) 496.790666ms ago: executing program 4 (id=1728): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xc, @tcp_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e24, 0x4e20, 0x7}, {0x0, @remote, 0xe, 0x5, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x5}, {0x0, @broadcast, 0x8, 0x9, [0xf, 0x9]}, 0xff, 0x3}}}) 89.505229ms ago: executing program 3 (id=1729): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) 0s ago: executing program 0 (id=1730): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): dding VLAN 0 to HW filter on device batadv0 [ 264.641630][ T5804] veth0_macvtap: entered promiscuous mode [ 264.719207][ T5804] veth1_macvtap: entered promiscuous mode [ 264.984357][ T5800] veth0_macvtap: entered promiscuous mode [ 265.059398][ T5800] veth1_macvtap: entered promiscuous mode [ 265.080624][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.196971][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.298480][ T5811] veth0_vlan: entered promiscuous mode [ 265.344135][ T5804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.354452][ T5804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.364338][ T5804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.373892][ T5804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.411018][ T5801] veth0_vlan: entered promiscuous mode [ 265.478993][ T5801] veth1_vlan: entered promiscuous mode [ 265.533951][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.589454][ T5811] veth1_vlan: entered promiscuous mode [ 265.653045][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.781114][ T5800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.791175][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.800480][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.809692][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.918502][ T5801] veth0_macvtap: entered promiscuous mode [ 265.979123][ T5811] veth0_macvtap: entered promiscuous mode [ 266.044462][ T5811] veth1_macvtap: entered promiscuous mode [ 266.086672][ T5801] veth1_macvtap: entered promiscuous mode [ 266.262293][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.333124][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.386486][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.450243][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.513254][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.525395][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.535392][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.544616][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.601565][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.610737][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.620274][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.629412][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.489086][ T5807] veth0_vlan: entered promiscuous mode [ 267.655948][ T5807] veth1_vlan: entered promiscuous mode [ 268.019425][ T5807] veth0_macvtap: entered promiscuous mode [ 268.076017][ T5807] veth1_macvtap: entered promiscuous mode [ 268.286497][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.359297][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.461774][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.471162][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.480411][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.491536][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.935502][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.943776][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.195127][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.204795][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.522272][ T5037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.531043][ T5037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.689411][ T5804] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 273.809655][ T5037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.818527][ T5037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.359920][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.368531][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.508139][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.516301][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.792681][ T3594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.801142][ T3594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.879701][ T3801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.893710][ T3801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.709391][ T5999] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 276.199753][ T4183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.208202][ T4183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.581559][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.596835][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.780399][ T6011] loop2: detected capacity change from 0 to 128 [ 276.917849][ T6011] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 277.030358][ T6011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.529369][ T5862] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 277.719008][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 277.757100][ T5862] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 277.766083][ T5862] usb 4-1: config 0 has no interface number 0 [ 277.854839][ T5862] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 277.864717][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.873256][ T5862] usb 4-1: Product: syz [ 277.878102][ T5862] usb 4-1: Manufacturer: syz [ 277.882951][ T5862] usb 4-1: SerialNumber: syz [ 278.007756][ T5862] usb 4-1: config 0 descriptor?? [ 278.064228][ T6013] loop1: detected capacity change from 0 to 4096 [ 278.075277][ T5862] hub 4-1:0.132: bad descriptor, ignoring hub [ 278.082385][ T5862] hub 4-1:0.132: probe with driver hub failed with error -5 [ 278.126118][ T6013] ======================================================= [ 278.126118][ T6013] WARNING: The mand mount option has been deprecated and [ 278.126118][ T6013] and is ignored by this kernel. Remove the mand [ 278.126118][ T6013] option from the mount to silence this warning. [ 278.126118][ T6013] ======================================================= [ 278.211640][ T5862] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input5 [ 278.313549][ T6027] loop4: detected capacity change from 0 to 512 [ 278.382131][ T6028] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.404014][ T6027] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 278.422455][ T5862] usb 4-1: USB disconnect, device number 2 [ 278.510679][ T6027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 278.554138][ T6027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 278.561137][ T6027] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.18: bad orphan inode 267 [ 278.616855][ T6027] EXT4-fs (loop4): Remounting filesystem read-only [ 278.626368][ T6027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 278.818361][ T6027] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.18: dx entry: limit 0 != root limit 125 [ 278.831360][ T6027] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.18: Corrupt directory, running e2fsck is recommended [ 279.453593][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 280.059442][ T6044] ip6t_rpfilter: unknown options [ 280.102260][ T6042] loop3: detected capacity change from 0 to 1024 [ 280.582457][ T6053] netlink: 128 bytes leftover after parsing attributes in process `syz.2.29'. [ 280.591873][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'. [ 281.193497][ T6060] ptrace attach of "./syz-executor exec"[5811] was attempted by ""[6060] [ 281.348164][ T6058] loop1: detected capacity change from 0 to 1764 [ 282.021340][ T6070] loop3: detected capacity change from 0 to 128 [ 282.146551][ T6077] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.199329][ T6070] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 282.291994][ T6070] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.846803][ T30] audit: type=1326 audit(1747867455.890:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 282.869531][ T30] audit: type=1326 audit(1747867455.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 283.053769][ T5811] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.080241][ T6081] loop4: detected capacity change from 0 to 512 [ 283.095624][ T30] audit: type=1326 audit(1747867455.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 283.119431][ T30] audit: type=1326 audit(1747867455.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8c32f8e9a3 code=0x7ffc0000 [ 283.145042][ T30] audit: type=1326 audit(1747867456.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8c32f8d41f code=0x7ffc0000 [ 283.169393][ T30] audit: type=1326 audit(1747867456.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8c32f8e9f7 code=0x7ffc0000 [ 283.192641][ T30] audit: type=1326 audit(1747867456.130:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c32f8d2d0 code=0x7ffc0000 [ 283.243221][ T30] audit: type=1326 audit(1747867456.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c32f8e56b code=0x7ffc0000 [ 283.270542][ T30] audit: type=1326 audit(1747867456.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8c32f8d5ca code=0x7ffc0000 [ 283.294016][ T30] audit: type=1326 audit(1747867456.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.4.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8c32f8d5ca code=0x7ffc0000 [ 283.438914][ T6081] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 283.579235][ T6081] EXT4-fs (loop4): orphan cleanup on readonly fs [ 283.642395][ T6081] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.41: Failed to acquire dquot type 1 [ 283.730868][ T6081] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.41: bg 0: block 40: padding at end of block bitmap is not set [ 283.822761][ T6081] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 283.910996][ T6081] EXT4-fs (loop4): 1 truncate cleaned up [ 283.922131][ T6081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.053705][ T6093] loop1: detected capacity change from 0 to 512 [ 284.133630][ T6093] EXT4-fs: Ignoring removed orlov option [ 284.398461][ T6093] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c018, mo2=0041] [ 284.406864][ T6093] System zones: 0-2, 18-18, 34-34 [ 284.599147][ T6093] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.46: Failed to acquire dquot type 0 [ 284.665694][ T6093] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.46: Failed to acquire dquot type 0 [ 284.707220][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.812269][ T6093] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.46: Failed to acquire dquot type 0 [ 284.928298][ T6093] EXT4-fs (loop1): 1 orphan inode deleted [ 284.936465][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.950510][ T6093] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.194396][ T6093] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.46: Failed to acquire dquot type 0 [ 285.999136][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.295712][ T6130] loop0: detected capacity change from 0 to 512 [ 287.439241][ T6130] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 287.453868][ T6130] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.631531][ T6130] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.61: bg 0: block 384: padding at end of block bitmap is not set [ 287.748299][ T6130] EXT4-fs (loop0): Remounting filesystem read-only [ 287.755455][ T6130] EXT4-fs (loop0): 1 truncate cleaned up [ 287.765413][ T6130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.391218][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.369040][ T6160] loop3: detected capacity change from 0 to 256 [ 289.665778][ T6160] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 289.946596][ T6168] loop4: detected capacity change from 0 to 256 [ 290.434773][ T6174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.80'. [ 290.530327][ T6168] FAT-fs (loop4): Directory bread(block 64) failed [ 290.537146][ T6168] FAT-fs (loop4): Directory bread(block 65) failed [ 290.544445][ T6168] FAT-fs (loop4): Directory bread(block 66) failed [ 290.551404][ T6168] FAT-fs (loop4): Directory bread(block 67) failed [ 290.558619][ T6168] FAT-fs (loop4): Directory bread(block 68) failed [ 290.565407][ T6168] FAT-fs (loop4): Directory bread(block 69) failed [ 290.572639][ T6168] FAT-fs (loop4): Directory bread(block 70) failed [ 290.579712][ T6168] FAT-fs (loop4): Directory bread(block 71) failed [ 290.586645][ T6168] FAT-fs (loop4): Directory bread(block 72) failed [ 290.593685][ T6168] FAT-fs (loop4): Directory bread(block 73) failed [ 290.840344][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 290.840423][ T30] audit: type=1800 audit(1747867463.890:19): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.79" name="file1" dev="loop4" ino=1048600 res=0 errno=0 [ 290.962179][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.969619][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.328941][ T6194] PKCS8: Unsupported PKCS#8 version [ 293.435047][ T5888] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 293.693660][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.704265][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.781675][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 293.793962][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.803263][ T5888] usb 5-1: SerialNumber: syz [ 293.909778][ T5888] usb 5-1: 0:2 : does not exist [ 294.446029][ T5862] usb 5-1: USB disconnect, device number 2 [ 294.638904][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 294.674711][ T6216] loop2: detected capacity change from 0 to 4096 [ 294.743775][ T6216] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 295.778369][ T30] audit: type=1400 audit(1747867468.810:20): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F2603 pid=6234 comm="syz.0.113" [ 296.245989][ T30] audit: type=1326 audit(1747867469.280:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 296.403227][ T30] audit: type=1326 audit(1747867469.340:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 296.426077][ T30] audit: type=1326 audit(1747867469.340:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 296.451930][ T30] audit: type=1326 audit(1747867469.340:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 297.160697][ T6101] udevd[6101]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.895569][ T6260] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 298.359840][ T6266] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 299.372918][ T6280] loop0: detected capacity change from 0 to 256 [ 299.408717][ T6280] exfat: Deprecated parameter 'namecase' [ 299.598389][ T6280] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 300.522762][ T6294] loop0: detected capacity change from 0 to 1024 [ 301.082560][ T3801] hfsplus: b-tree write err: -5, ino 4 [ 301.416501][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.263853][ T6319] loop2: detected capacity change from 0 to 16 [ 302.364862][ T6319] erofs (device loop2): mounted with root inode @ nid 36. [ 302.452179][ T6319] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 302.460161][ T6319] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 302.468357][ T6319] erofs (device loop2): read error -117 @ 0 of nid 89 [ 302.507005][ T30] audit: type=1800 audit(1747867475.530:25): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.154" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 304.686103][ T6352] warning: `syz.2.170' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 304.877282][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 305.000777][ T6358] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 305.068989][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 305.109625][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 305.119368][ T5888] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 305.129532][ T5888] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 305.146381][ T5888] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 305.160437][ T5888] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 305.171536][ T5888] usb 2-1: config 1 interface 0 has no altsetting 0 [ 305.178729][ T5888] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 305.188212][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.493919][ T5888] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 305.723014][ T5888] scsi host1: usb-storage 2-1:1.0 [ 306.001690][ T5888] usb 2-1: USB disconnect, device number 2 [ 306.972164][ T6381] netlink: 400 bytes leftover after parsing attributes in process `syz.0.183'. [ 307.161709][ T6383] trusted_key: encrypted_key: keylen parameter is missing [ 307.288418][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 307.499816][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 307.586787][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 307.600718][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 307.613563][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 307.740346][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 307.753455][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.762037][ T5888] usb 3-1: Product: syz [ 307.762146][ T5888] usb 3-1: Manufacturer: syz [ 307.762248][ T5888] usb 3-1: SerialNumber: syz [ 307.850778][ T5888] usb 3-1: config 0 descriptor?? [ 307.880209][ T6380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.920058][ T5888] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 307.920174][ T5888] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 308.196260][ T11] usb 3-1: USB disconnect, device number 2 [ 308.527870][ T5862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 308.757986][ T5862] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 308.766763][ T5862] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 308.776267][ T5862] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 308.787186][ T5862] usb 5-1: config 220 has no interface number 2 [ 308.794102][ T5862] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 308.808082][ T5862] usb 5-1: config 220 interface 0 has no altsetting 0 [ 308.815155][ T5862] usb 5-1: config 220 interface 76 has no altsetting 0 [ 308.822561][ T5862] usb 5-1: config 220 interface 1 has no altsetting 0 [ 308.900216][ T5862] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 308.909855][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.918315][ T5862] usb 5-1: Product: syz [ 308.922779][ T5862] usb 5-1: Manufacturer: syz [ 308.927743][ T5862] usb 5-1: SerialNumber: syz [ 309.264993][ T5862] usb 5-1: selecting invalid altsetting 0 [ 309.271783][ T5862] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 309.279487][ T5862] usb 5-1: No valid video chain found. [ 309.412752][ T5862] usb 5-1: selecting invalid altsetting 0 [ 309.419258][ T5862] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 309.529648][ T5862] usb 5-1: USB disconnect, device number 3 [ 310.855491][ T5862] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 311.071273][ T5862] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 311.080986][ T5862] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 311.097932][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.238366][ T5862] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.248169][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.256517][ T5862] usb 5-1: Product: syz [ 311.261166][ T5862] usb 5-1: Manufacturer: syz [ 311.266013][ T5862] usb 5-1: SerialNumber: syz [ 311.328657][ T6432] netlink: 'syz.2.207': attribute type 10 has an invalid length. [ 311.337217][ T6432] bridge0: port 3(team0) entered blocking state [ 311.344295][ T6432] bridge0: port 3(team0) entered disabled state [ 311.351541][ T6432] team0: entered allmulticast mode [ 311.356902][ T6432] team_slave_0: entered allmulticast mode [ 311.363095][ T6432] team_slave_1: entered allmulticast mode [ 311.563197][ T6432] team0: entered promiscuous mode [ 311.568717][ T6432] team_slave_0: entered promiscuous mode [ 311.575699][ T6432] team_slave_1: entered promiscuous mode [ 311.585538][ T6432] bridge0: port 3(team0) entered blocking state [ 311.592456][ T6432] bridge0: port 3(team0) entered forwarding state [ 311.829578][ T5866] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 311.874498][ T5862] usb 5-1: 0:2 : does not exist [ 312.069252][ T5862] usb 5-1: USB disconnect, device number 4 [ 312.088088][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 312.129545][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.199383][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 312.209248][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.220266][ T5866] usb 2-1: Product: syz [ 312.224700][ T5866] usb 2-1: Manufacturer: syz [ 312.230966][ T5866] usb 2-1: SerialNumber: syz [ 312.256061][ T6440] loop3: detected capacity change from 0 to 64 [ 312.297372][ T5866] usb 2-1: config 0 descriptor?? [ 312.330474][ T5866] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 312.337019][ T5866] gspca_stv06xx: st6422 sensor detected [ 312.419411][ T6443] xt_ecn: cannot match TCP bits for non-tcp packets [ 312.845068][ T5866] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 312.953236][ T6248] udevd[6248]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.961073][ T5866] usb 2-1: USB disconnect, device number 3 [ 314.088317][ T30] audit: type=1326 audit(1747867487.140:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 314.111354][ T30] audit: type=1326 audit(1747867487.140:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 314.160837][ T6452] loop0: detected capacity change from 0 to 4096 [ 314.597076][ T6452] ntfs3(loop0): ino=5, "/" indx_read [ 314.604387][ T6452] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 314.793502][ T6466] loop2: detected capacity change from 0 to 64 [ 315.042970][ T6466] hfs: hfs: Invalid key length: 94 [ 315.519909][ T5804] hfs: node 4:3 still has 1 user(s)! [ 315.788806][ T6476] netlink: 252 bytes leftover after parsing attributes in process `syz.1.229'. [ 315.901962][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 316.624965][ T6490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.103638][ T6512] overlayfs: missing 'lowerdir' [ 318.599974][ T6519] affs: No valid root block on device nbd1 [ 318.665237][ T6522] loop2: detected capacity change from 0 to 8 [ 318.676778][ T30] audit: type=1326 audit(1747867491.720:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 318.689897][ T6521] syz.4.251 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 318.718840][ T30] audit: type=1326 audit(1747867491.740:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 318.808953][ T30] audit: type=1326 audit(1747867491.860:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 318.831811][ T30] audit: type=1326 audit(1747867491.870:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 318.958701][ T6522] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 322.579604][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'. [ 325.119008][ T5858] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 325.346339][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 325.403488][ T5858] usb 1-1: config 0 has an invalid interface number: 145 but max is 1 [ 325.412478][ T5858] usb 1-1: config 0 has an invalid interface number: 43 but max is 1 [ 325.424126][ T5858] usb 1-1: config 0 has no interface number 0 [ 325.436034][ T5858] usb 1-1: config 0 has no interface number 1 [ 325.443526][ T5858] usb 1-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 325.460856][ T5858] usb 1-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 325.476331][ T5858] usb 1-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 325.490278][ T5858] usb 1-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 325.502195][ T5858] usb 1-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 325.514055][ T5858] usb 1-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.527802][ T5858] usb 1-1: config 0 interface 145 has no altsetting 0 [ 325.537756][ T5858] usb 1-1: config 0 interface 43 has no altsetting 0 [ 325.584117][ T5858] usb 1-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 325.593754][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.602285][ T5858] usb 1-1: Product: syz [ 325.606706][ T5858] usb 1-1: Manufacturer: syz [ 325.611822][ T5858] usb 1-1: SerialNumber: syz [ 325.622694][ T5858] usb 1-1: config 0 descriptor?? [ 325.965562][ T5858] keyspan_pda 1-1:0.145: required endpoints missing [ 326.052858][ T5858] keyspan_pda 1-1:0.43: Keyspan PDA converter detected [ 326.139672][ T5858] usb 1-1: Keyspan PDA converter now attached to ttyUSB0 [ 326.220194][ T5858] usb 1-1: USB disconnect, device number 2 [ 326.225464][ T6622] netlink: 228 bytes leftover after parsing attributes in process `syz.3.300'. [ 326.340332][ T5858] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 326.356026][ T5858] keyspan_pda 1-1:0.43: device disconnected [ 327.189246][ T6633] netlink: 'syz.1.304': attribute type 4 has an invalid length. [ 327.917760][ T6642] loop3: detected capacity change from 0 to 1024 [ 327.956448][ T6642] EXT4-fs: Ignoring removed nobh option [ 327.962559][ T6642] EXT4-fs: Ignoring removed bh option [ 328.165349][ T6642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.730789][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.288110][ T30] audit: type=1326 audit(1747867502.320:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 329.413162][ T30] audit: type=1326 audit(1747867502.380:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 329.438523][ T30] audit: type=1326 audit(1747867502.390:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 329.462296][ T30] audit: type=1326 audit(1747867502.390:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 329.485173][ T30] audit: type=1326 audit(1747867502.390:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 330.496031][ T6675] loop4: detected capacity change from 0 to 2048 [ 330.688477][ T6675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.262278][ T6685] loop2: detected capacity change from 0 to 128 [ 331.480544][ T6685] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.567993][ T6685] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 331.838186][ T6693] dvmrp0: entered allmulticast mode [ 332.195283][ T5804] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.723623][ T6703] loop4: detected capacity change from 0 to 256 [ 333.184495][ T6703] FAT-fs (loop4): Directory bread(block 64) failed [ 333.194438][ T6703] FAT-fs (loop4): Directory bread(block 65) failed [ 333.201625][ T6703] FAT-fs (loop4): Directory bread(block 66) failed [ 333.208619][ T6703] FAT-fs (loop4): Directory bread(block 67) failed [ 333.218835][ T6703] FAT-fs (loop4): Directory bread(block 68) failed [ 333.225656][ T6703] FAT-fs (loop4): Directory bread(block 69) failed [ 333.233779][ T6703] FAT-fs (loop4): Directory bread(block 70) failed [ 333.264813][ T6703] FAT-fs (loop4): Directory bread(block 71) failed [ 333.277818][ T6703] FAT-fs (loop4): Directory bread(block 72) failed [ 333.284645][ T6703] FAT-fs (loop4): Directory bread(block 73) failed [ 334.560143][ T6723] tmpfs: Bad value for 'mpol' [ 336.049338][ T6734] loop1: detected capacity change from 0 to 4096 [ 336.104409][ T6734] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 336.306005][ T6745] netlink: 'syz.3.358': attribute type 7 has an invalid length. [ 336.314306][ T6745] netlink: 'syz.3.358': attribute type 8 has an invalid length. [ 338.483506][ T6771] loop3: detected capacity change from 0 to 2048 [ 338.668109][ T6771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.819235][ T6791] netlink: 'syz.1.380': attribute type 5 has an invalid length. [ 339.827178][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 339.836791][ T6791] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 341.288351][ T5858] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 341.589590][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 341.655383][ T5858] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 341.664719][ T5858] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.674943][ T5858] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.686001][ T5858] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.696828][ T5858] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.712989][ T5858] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.723497][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.741670][ T5858] usb 3-1: USB disconnect, device number 3 [ 344.040466][ T6841] loop2: detected capacity change from 0 to 512 [ 344.076977][ T6839] loop1: detected capacity change from 0 to 1024 [ 344.111463][ T6844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.180789][ T6839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.264867][ T6841] EXT4-fs (loop2): orphan cleanup on readonly fs [ 344.368413][ T6841] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.402: bg 0: block 248: padding at end of block bitmap is not set [ 344.459053][ T6841] Quota error (device loop2): write_blk: dquota write failed [ 344.467204][ T6841] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 344.481704][ T6841] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.402: Failed to acquire dquot type 1 [ 344.609214][ T6841] EXT4-fs (loop2): 1 truncate cleaned up [ 344.660607][ T6841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.806585][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.180284][ T6841] syz.2.402 (6841) used greatest stack depth: 3168 bytes left [ 345.250716][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.099275][ T6867] loop4: detected capacity change from 0 to 1764 [ 346.299479][ T6867] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 346.729854][ T6878] netlink: 252 bytes leftover after parsing attributes in process `syz.1.418'. [ 347.894622][ T6894] loop4: detected capacity change from 0 to 128 [ 348.204511][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 348.214311][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 348.220739][ T6894] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.223529][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 348.319817][ T6894] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.792571][ T5807] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.542097][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 352.370011][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.376750][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.499472][ T30] audit: type=1326 audit(1747867527.550:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 354.655075][ T30] audit: type=1326 audit(1747867527.610:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 354.678384][ T30] audit: type=1326 audit(1747867527.610:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 354.701690][ T30] audit: type=1326 audit(1747867527.610:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 355.009961][ T6988] loop2: detected capacity change from 0 to 2048 [ 355.092621][ T6988] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 355.266520][ T6995] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.311578][ T7013] loop2: detected capacity change from 0 to 164 [ 356.405783][ T7013] grow_buffers: requested out-of-range block 18446744073709549798 for device loop2 [ 356.415876][ T7013] Unable to read rock-ridge attributes [ 356.788476][ T7015] netlink: 'syz.4.484': attribute type 14 has an invalid length. [ 356.796568][ T7015] netlink: 168 bytes leftover after parsing attributes in process `syz.4.484'. [ 356.937241][ T7019] netlink: 148 bytes leftover after parsing attributes in process `syz.1.486'. [ 356.946723][ T7019] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 357.368606][ T7021] netlink: 'syz.2.487': attribute type 22 has an invalid length. [ 357.384083][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 357.799946][ T30] audit: type=1326 audit(1747867530.860:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18e969 code=0x7ffc0000 [ 357.960815][ T30] audit: type=1326 audit(1747867530.880:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18e969 code=0x7ffc0000 [ 357.987386][ T30] audit: type=1326 audit(1747867530.910:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb92e18e969 code=0x7ffc0000 [ 358.012766][ T30] audit: type=1326 audit(1747867530.920:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18e969 code=0x7ffc0000 [ 358.038358][ T30] audit: type=1326 audit(1747867530.930:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18e969 code=0x7ffc0000 [ 358.834212][ T7041] 8021q: VLANs not supported on ipvlan0 [ 360.215881][ T7061] loop2: detected capacity change from 0 to 512 [ 360.499120][ T7061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.514893][ T7061] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.949080][ T7072] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 361.080415][ T7074] loop4: detected capacity change from 0 to 512 [ 361.109989][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.385407][ T7074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.399404][ T7074] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.559831][ T7070] loop3: detected capacity change from 0 to 4096 [ 361.653145][ T7070] ntfs3(loop3): It is recommened to use chkdsk. [ 361.757091][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 361.765940][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 361.774521][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 361.790256][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 361.800843][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 361.809207][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 361.817612][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 361.825849][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 361.834410][ T7070] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 362.050465][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.752964][ T7092] loop0: detected capacity change from 0 to 512 [ 362.823809][ T7092] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 362.889024][ T7092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 362.968427][ T7092] System zones: 1-12 [ 362.973494][ T7092] EXT4-fs (loop0): orphan cleanup on readonly fs [ 362.980444][ T7092] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.520: Inode bitmap for bg 0 marked uninitialized [ 363.048966][ T7092] EXT4-fs (loop0): Remounting filesystem read-only [ 363.058477][ T7092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 363.547810][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.887779][ T30] audit: type=1326 audit(1747867536.940:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 364.015862][ T30] audit: type=1326 audit(1747867536.970:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 364.041130][ T30] audit: type=1326 audit(1747867537.050:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 364.064628][ T30] audit: type=1326 audit(1747867537.050:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 364.087371][ T30] audit: type=1326 audit(1747867537.050:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 364.632289][ T7117] loop2: detected capacity change from 0 to 736 [ 365.250999][ T7117] rock: directory entry would overflow storage [ 365.257407][ T7117] rock: sig=0x5850, size=36, remaining=14 [ 366.654243][ T7143] loop1: detected capacity change from 0 to 64 [ 367.285363][ T7150] loop3: detected capacity change from 0 to 128 [ 367.506491][ T7150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 367.568025][ T7150] System zones: 1-3, 19-19, 35-36 [ 367.625955][ T7150] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.674639][ T7150] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.775291][ T7159] loop1: detected capacity change from 0 to 512 [ 367.845030][ T7150] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 368.009357][ T7159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.022559][ T7159] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.080931][ T7163] netlink: 292 bytes leftover after parsing attributes in process `syz.0.553'. [ 368.311258][ T7165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 368.489274][ T5811] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.800332][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.216529][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.560'. [ 370.557184][ T7196] loop2: detected capacity change from 0 to 8 [ 370.686562][ T7196] process 'syz.2.566' launched './file2' with NULL argv: empty string added [ 371.642325][ T7210] loop1: detected capacity change from 0 to 8 [ 371.897083][ T30] audit: type=1800 audit(1747867544.950:51): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.574" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 372.258395][ T7220] loop3: detected capacity change from 0 to 16 [ 372.384968][ T7220] erofs (device loop3): mounted with root inode @ nid 36. [ 372.628080][ T30] audit: type=1326 audit(1747867545.670:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036d78e969 code=0x7ffc0000 [ 372.653949][ T30] audit: type=1326 audit(1747867545.670:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036d78e969 code=0x7ffc0000 [ 372.677850][ T30] audit: type=1326 audit(1747867545.720:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f036d78e969 code=0x7ffc0000 [ 372.705426][ T30] audit: type=1326 audit(1747867545.720:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036d78e969 code=0x7ffc0000 [ 373.093614][ T7228] loop1: detected capacity change from 0 to 64 [ 373.105503][ T7226] loop4: detected capacity change from 0 to 764 [ 373.200418][ T7226] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 373.291352][ T7232] loop3: detected capacity change from 0 to 256 [ 373.419988][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.429390][ T7232] FAT-fs (loop3): Filesystem has been set read-only [ 373.436481][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.445875][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.464205][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.475854][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.485162][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.494479][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.509625][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.518855][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.528156][ T7232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 373.572908][ T7232] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 373.584741][ T30] audit: type=1800 audit(1747867546.620:56): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.586" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 374.892215][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 374.894563][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 374.898766][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 374.898902][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 374.899036][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 375.496999][ T7260] netlink: 156 bytes leftover after parsing attributes in process `syz.0.600'. [ 377.257328][ T7280] loop3: detected capacity change from 0 to 164 [ 378.786475][ T5862] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 379.048182][ T5862] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 379.058038][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.066354][ T5862] usb 3-1: Product: syz [ 379.071036][ T5862] usb 3-1: Manufacturer: syz [ 379.075931][ T5862] usb 3-1: SerialNumber: syz [ 379.266505][ T5862] r8152-cfgselector 3-1: Unknown version 0x0000 [ 379.273585][ T5862] r8152-cfgselector 3-1: config 0 descriptor?? [ 379.820629][ T5862] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 380.434952][ T7320] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 381.673557][ T7341] netlink: 'syz.4.641': attribute type 8 has an invalid length. [ 382.065637][ T7346] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.643'. [ 382.075419][ T7346] netlink: zone id is out of range [ 382.081192][ T7346] netlink: get zone limit has 8 unknown bytes [ 382.290214][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 383.198046][ T5858] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 383.447791][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 383.496974][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 383.508308][ T5858] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 383.609955][ T5858] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 383.619456][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 383.628076][ T5858] usb 3-1: Product: syz [ 383.632451][ T5858] usb 3-1: Manufacturer: syz [ 383.637287][ T5858] usb 3-1: SerialNumber: syz [ 383.801789][ T5858] usb 3-1: config 0 descriptor?? [ 384.094344][ T5858] usb 3-1: USB disconnect, device number 5 [ 384.456371][ T7380] loop3: detected capacity change from 0 to 16 [ 384.543980][ T7380] erofs (device loop3): mounted with root inode @ nid 36. [ 385.283993][ T7390] loop2: detected capacity change from 0 to 16 [ 385.352253][ T7390] erofs (device loop2): mounted with root inode @ nid 36. [ 385.451023][ T7390] erofs (device loop2): read error -117 @ 72 of nid 36 [ 387.062468][ T7417] loop4: detected capacity change from 0 to 256 [ 387.141808][ T7417] exfat: Deprecated parameter 'utf8' [ 387.269281][ T7417] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 388.787783][ T5862] IPVS: starting estimator thread 0... [ 388.918907][ T7447] IPVS: using max 192 ests per chain, 9600 per kthread [ 389.537873][ T7457] Cannot find del_set index 65534 as target [ 389.997051][ T7465] loop3: detected capacity change from 0 to 256 [ 392.141857][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.719'. [ 392.159010][ T5858] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 392.353739][ T5858] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 392.364273][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.440789][ T5858] usb 2-1: config 0 descriptor?? [ 392.929982][ T5866] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 392.942495][ T5858] usb 2-1: Cannot set MAC address [ 392.948784][ T5858] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 393.026441][ T5858] usb 2-1: USB disconnect, device number 4 [ 393.177417][ T5866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.188381][ T5866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.251336][ T5866] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.261110][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.270089][ T5866] usb 4-1: SerialNumber: syz [ 393.670420][ T5866] usb 4-1: 0:2 : does not exist [ 393.675647][ T5866] usb 4-1: unit 5: unexpected type 0x03 [ 393.939160][ T5866] usb 4-1: USB disconnect, device number 3 [ 394.764661][ T7525] loop2: detected capacity change from 0 to 512 [ 395.058057][ T7525] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 395.073667][ T7525] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 395.139060][ T7525] EXT4-fs (loop2): 1 truncate cleaned up [ 395.147228][ T7525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.273062][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'. [ 395.465136][ T7525] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 395.671979][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.144100][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.197782][ T7553] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 397.206202][ T7553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 398.299736][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.749'. [ 398.554536][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 398.876526][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.749'. [ 399.387807][ T30] audit: type=1326 audit(1747867572.440:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 399.514054][ T30] audit: type=1326 audit(1747867572.510:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 399.536838][ T30] audit: type=1326 audit(1747867572.510:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 399.674927][ T7581] loop0: detected capacity change from 0 to 1024 [ 399.765628][ T7581] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.268652][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 400.323491][ T7595] loop1: detected capacity change from 0 to 512 [ 400.497895][ T7595] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.761: bad orphan inode 15 [ 400.608078][ T7595] ext4_test_bit(bit=14, block=18) = 1 [ 400.613742][ T7595] is_bad_inode(inode)=0 [ 400.618629][ T7595] NEXT_ORPHAN(inode)=1023 [ 400.623159][ T7595] max_ino=32 [ 400.626559][ T7595] i_nlink=0 [ 400.713083][ T7595] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.761: corrupted xattr block 19: invalid header [ 400.784691][ T7604] loop0: detected capacity change from 0 to 8 [ 400.801614][ T7595] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 400.814004][ T7595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 400.903109][ T7595] ext4 filesystem being mounted at /151/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 400.931061][ T7604] SQUASHFS error: Failed to read block 0x738: -5 [ 400.937814][ T7604] SQUASHFS error: Unable to read metadata cache entry [736] [ 400.992182][ T7595] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz.1.761: Directory hole found for htree leaf block 0 [ 401.450705][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 401.947717][ T7617] lo: entered promiscuous mode [ 401.952790][ T7617] lo: entered allmulticast mode [ 401.963684][ T7617] tunl0: entered promiscuous mode [ 401.969276][ T7617] tunl0: entered allmulticast mode [ 401.979424][ T7617] gre0: entered promiscuous mode [ 401.984636][ T7617] gre0: entered allmulticast mode [ 401.994851][ T7617] gretap0: entered promiscuous mode [ 402.000533][ T7617] gretap0: entered allmulticast mode [ 402.011164][ T7617] erspan0: entered promiscuous mode [ 402.016625][ T7617] erspan0: entered allmulticast mode [ 402.031827][ T7617] ip_vti0: entered promiscuous mode [ 402.037296][ T7617] ip_vti0: entered allmulticast mode [ 402.046761][ T7621] tmpfs: Group quota block hardlimit too large. [ 402.050384][ T7617] ip6_vti0: entered promiscuous mode [ 402.058984][ T7617] ip6_vti0: entered allmulticast mode [ 402.069567][ T7617] sit0: entered promiscuous mode [ 402.074774][ T7617] sit0: entered allmulticast mode [ 402.084605][ T7617] ip6tnl0: entered promiscuous mode [ 402.090326][ T7617] ip6tnl0: entered allmulticast mode [ 402.100266][ T7617] ip6gre0: entered promiscuous mode [ 402.105741][ T7617] ip6gre0: entered allmulticast mode [ 402.115790][ T7617] syz_tun: entered promiscuous mode [ 402.121390][ T7617] syz_tun: entered allmulticast mode [ 402.136107][ T7617] ip6gretap0: entered promiscuous mode [ 402.141986][ T7617] ip6gretap0: entered allmulticast mode [ 402.152800][ T7617] bridge0: entered promiscuous mode [ 402.158463][ T7617] bridge0: entered allmulticast mode [ 402.169729][ T7617] vcan0: entered promiscuous mode [ 402.175041][ T7617] vcan0: entered allmulticast mode [ 402.182192][ T7617] bond0: entered promiscuous mode [ 402.187602][ T7617] bond_slave_0: entered promiscuous mode [ 402.194527][ T7617] bond_slave_1: entered promiscuous mode [ 402.201744][ T7617] bond0: entered allmulticast mode [ 402.207114][ T7617] bond_slave_0: entered allmulticast mode [ 402.213620][ T7617] bond_slave_1: entered allmulticast mode [ 402.239497][ T7617] dummy0: entered promiscuous mode [ 402.244908][ T7617] dummy0: entered allmulticast mode [ 402.255245][ T7617] nlmon0: entered promiscuous mode [ 402.260809][ T7617] nlmon0: entered allmulticast mode [ 402.369362][ T7617] caif0: entered promiscuous mode [ 402.374675][ T7617] caif0: entered allmulticast mode [ 402.381081][ T7617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.707361][ T7625] loop0: detected capacity change from 0 to 512 [ 402.751024][ T7625] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 402.762628][ T7625] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 402.773206][ T7625] EXT4-fs (loop0): group descriptors corrupted! [ 403.188410][ T5862] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 403.448149][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 403.454211][ T7637] netlink: 'syz.3.781': attribute type 1 has an invalid length. [ 403.499687][ T5862] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 403.508684][ T5862] usb 1-1: config 0 has no interface number 0 [ 403.515068][ T5862] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x82 has an invalid bInterval 147, changing to 11 [ 403.696078][ T5862] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 403.706217][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.714747][ T5862] usb 1-1: Product: syz [ 403.719429][ T5862] usb 1-1: Manufacturer: syz [ 403.724277][ T5862] usb 1-1: SerialNumber: syz [ 403.803132][ T5862] usb 1-1: config 0 descriptor?? [ 403.861085][ T7639] loop1: detected capacity change from 0 to 64 [ 403.912286][ T7639] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 404.246811][ T7641] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 404.300268][ T5862] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 404.308746][ T5862] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 404.385763][ T5862] usb 1-1: USB disconnect, device number 3 [ 404.433373][ T7634] infiniband syz1: set down [ 404.438662][ T7634] infiniband syz1: added ipvlan0 [ 404.471828][ T7634] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 404.532683][ T7634] infiniband syz1: Couldn't open port 1 [ 404.723998][ T7634] RDS/IB: syz1: added [ 404.728693][ T7634] smc: adding ib device syz1 with port count 1 [ 404.735095][ T7634] smc: ib device syz1 port 1 has pnetid [ 406.928931][ T7671] openvswitch: netlink: Key type 278 is out of range max 32 [ 408.218468][ T7688] netlink: 'syz.1.804': attribute type 1 has an invalid length. [ 408.226405][ T7688] netlink: 'syz.1.804': attribute type 3 has an invalid length. [ 408.234569][ T7688] netlink: 224 bytes leftover after parsing attributes in process `syz.1.804'. [ 409.400719][ T30] audit: type=1326 audit(1747867582.360:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 409.423569][ T30] audit: type=1326 audit(1747867582.370:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 409.446506][ T30] audit: type=1326 audit(1747867582.480:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 409.475117][ T30] audit: type=1326 audit(1747867582.480:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 409.501103][ T30] audit: type=1326 audit(1747867582.480:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 409.927385][ T7701] loop4: detected capacity change from 0 to 2048 [ 410.002570][ T7704] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.118703][ T7701] NILFS (loop4): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 410.705182][ T7710] loop1: detected capacity change from 0 to 1024 [ 410.760959][ T7714] netlink: 56 bytes leftover after parsing attributes in process `syz.2.815'. [ 411.628548][ T7715] loop3: detected capacity change from 0 to 4096 [ 412.329982][ T7715] ntfs3(loop3): ino=b, mi_enum_attr [ 412.335503][ T7715] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 412.438547][ T7715] ntfs3(loop3): Failed to load $Extend (-22). [ 412.451287][ T7715] ntfs3(loop3): Failed to initialize $Extend. [ 412.813492][ T7715] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 413.162020][ T7734] loop4: detected capacity change from 0 to 8 [ 413.467342][ T7736] loop2: detected capacity change from 0 to 64 [ 413.796735][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.808088][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.898115][ T7742] mmap: syz.0.830 (7742) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 414.485088][ T7744] loop4: detected capacity change from 0 to 1024 [ 415.500121][ T7758] block device autoloading is deprecated and will be removed. [ 415.999807][ T7764] loop1: detected capacity change from 0 to 64 [ 416.112499][ T7764] hfs: get root inode failed [ 417.168439][ T7780] bond1: entered promiscuous mode [ 417.932481][ T7794] loop4: detected capacity change from 0 to 64 [ 418.258367][ T7797] netlink: 'syz.3.856': attribute type 3 has an invalid length. [ 418.266290][ T7797] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 418.275119][ T7797] netlink: 220 bytes leftover after parsing attributes in process `syz.3.856'. [ 419.548671][ T7819] nfs: Deprecated parameter 'nointr' [ 419.723520][ T7822] loop2: detected capacity change from 0 to 8 [ 419.741962][ T5866] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 419.912156][ T7822] SQUASHFS error: Failed to read block 0x738: -5 [ 419.918924][ T7822] SQUASHFS error: Unable to read metadata cache entry [736] [ 419.977733][ T5866] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 419.986897][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 419.996475][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.006764][ T5866] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.00 [ 420.016253][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.188329][ T5866] usb 4-1: config 0 descriptor?? [ 420.215581][ T5866] ttusbir 4-1:0.0: cannot find expected altsetting [ 420.297678][ T5866] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 420.427012][ T5866] usb 4-1: USB disconnect, device number 4 [ 421.040539][ T7835] loop1: detected capacity change from 0 to 1764 [ 421.244230][ T7835] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 421.839730][ T7838] loop2: detected capacity change from 0 to 4096 [ 421.962124][ T7838] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 424.119911][ T7874] loop2: detected capacity change from 0 to 256 [ 424.418870][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 424.443322][ T7876] loop0: detected capacity change from 0 to 1024 [ 425.117043][ T51] hfsplus: b-tree write err: -5, ino 4 [ 425.758067][ T5862] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 425.926557][ T7896] loop4: detected capacity change from 0 to 1024 [ 425.977754][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 426.004900][ T7896] EXT4-fs: Ignoring removed orlov option [ 426.103563][ T5862] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 426.113694][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.122254][ T5862] usb 2-1: Product: syz [ 426.126755][ T5862] usb 2-1: Manufacturer: syz [ 426.131748][ T5862] usb 2-1: SerialNumber: syz [ 426.218303][ T5862] usb 2-1: config 0 descriptor?? [ 426.239835][ T5862] gspca_main: sq930x-2.14.0 probing 2770:930c [ 426.270326][ T7896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.366538][ T7905] loop0: detected capacity change from 0 to 64 [ 426.688014][ T5862] gspca_sq930x: ucbus_write failed -71 [ 426.694137][ T5862] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 426.819309][ T5862] usb 2-1: USB disconnect, device number 5 [ 426.962434][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.035958][ T7908] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 427.975810][ T7919] netlink: 60 bytes leftover after parsing attributes in process `syz.1.916'. [ 429.533777][ T7945] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 430.578098][ T7959] @ÿ: renamed from bond_slave_0 (while UP) [ 430.898354][ T7964] loop2: detected capacity change from 0 to 256 [ 431.680263][ T7971] random: crng reseeded on system resumption [ 432.478521][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.945'. [ 433.269132][ T30] audit: type=1326 audit(1747867606.320:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 433.351380][ T30] audit: type=1326 audit(1747867606.370:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 433.377050][ T30] audit: type=1326 audit(1747867606.380:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 433.399336][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.406621][ T30] audit: type=1326 audit(1747867606.380:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 433.429493][ T30] audit: type=1326 audit(1747867606.380:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422d8e969 code=0x7ffc0000 [ 433.451854][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.679136][ T7999] ceph: Bad value for 'source' [ 434.679777][ T8004] loop1: detected capacity change from 0 to 4096 [ 435.028853][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.963'. [ 435.038364][ T8018] netlink: 'syz.3.963': attribute type 1 has an invalid length. [ 435.628388][ T5862] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 435.822725][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 435.909303][ T5862] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 435.924553][ T5862] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 435.937140][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.180446][ T5862] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.190151][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.198781][ T5862] usb 1-1: Product: syz [ 436.203182][ T5862] usb 1-1: Manufacturer: syz [ 436.208136][ T5862] usb 1-1: SerialNumber: syz [ 436.589561][ T8036] SET target dimension over the limit! [ 436.858298][ T5862] usb 1-1: 0:2 : does not exist [ 436.989819][ T5862] usb 1-1: USB disconnect, device number 4 [ 437.091150][ T5971] udevd[5971]: setting mode of /dev/bus/usb/001/004 to 020664 failed: No such file or directory [ 437.167223][ T5971] udevd[5971]: setting owner of /dev/bus/usb/001/004 to uid=0, gid=0 failed: No such file or directory [ 437.699307][ T6248] udevd[6248]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.780409][ T8048] [U] [ 437.783522][ T8048] [U] [ 437.786606][ T8048] [U] [ 437.789660][ T8048] [U] [ 437.890030][ T8048] [U] [ 437.893147][ T8048] [U] [ 437.896210][ T8048] [U] [ 437.899414][ T8048] [U] [ 437.970159][ T8048] [U] [ 437.973275][ T8048] [U] [ 437.976350][ T8048] [U] [ 438.080914][ T8047] [U] [ 438.869906][ T8063] loop0: detected capacity change from 0 to 256 [ 439.089714][ T8066] loop2: detected capacity change from 0 to 512 [ 439.422481][ T8066] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.986: iget: bad extended attribute block 1 [ 439.485351][ T8066] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.986: couldn't read orphan inode 15 (err -117) [ 439.630598][ T8066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.337544][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.886691][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.994'. [ 440.896306][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 441.069653][ T8091] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 441.081580][ T8091] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 441.131253][ T8088] loop0: detected capacity change from 0 to 1024 [ 441.789385][ T76] hfsplus: b-tree write err: -5, ino 4 [ 442.159002][ T8101] loop4: detected capacity change from 0 to 256 [ 442.962644][ T8103] loop0: detected capacity change from 0 to 4096 [ 443.049576][ T8103] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 443.631761][ T8103] ntfs3(loop0): ino=19, mi_enum_attr [ 443.637803][ T8103] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 443.750689][ T8103] ntfs3(loop0): failed to convert "c46c" to cp862 [ 443.768559][ T8103] ntfs3(loop0): ino=20, mi_enum_attr [ 444.512255][ T8135] loop3: detected capacity change from 0 to 16 [ 444.588833][ T8135] erofs (device loop3): mounted with root inode @ nid 36. [ 444.711660][ T8135] syz.3.1019: attempt to access beyond end of device [ 444.711660][ T8135] loop3: rw=0, sector=206161919992, nr_sectors = 8 limit=16 [ 445.878043][ T5862] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 446.077708][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 446.129055][ T5862] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 446.138967][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.147300][ T5862] usb 3-1: Product: syz [ 446.151963][ T5862] usb 3-1: Manufacturer: syz [ 446.162752][ T5862] usb 3-1: SerialNumber: syz [ 446.402032][ T5862] usb 3-1: config 0 descriptor?? [ 446.481367][ T5862] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 446.870439][ T5862] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 446.956365][ T5862] usb 3-1: USB disconnect, device number 6 [ 447.507922][ T5866] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 447.750082][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 447.831611][ T5866] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 447.841525][ T5866] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 447.850250][ T5866] usb 2-1: config 0 has no interface number 0 [ 447.856647][ T5866] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.868802][ T5866] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 447.880519][ T5866] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.088618][ T5866] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 448.098273][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 448.109641][ T5866] usb 2-1: Product: syz [ 448.189474][ T5866] usb 2-1: config 0 descriptor?? [ 448.219920][ T8167] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 448.630306][ T5866] usb 2-1: USB disconnect, device number 6 [ 448.643747][ T6021] udevd[6021]: setting mode of /dev/bus/usb/002/006 to 020664 failed: No such file or directory [ 448.712828][ T6021] udevd[6021]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory [ 449.365318][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 449.375046][ T8195] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1048'. [ 449.469994][ T8196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1049'. [ 450.058733][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 452.223230][ T8236] delete_channel: no stack [ 453.108626][ T8248] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 453.882213][ T8263] loop3: detected capacity change from 0 to 512 [ 453.913647][ T8263] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.035909][ T8263] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 454.170207][ T8263] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1080: attempt to clear invalid blocks 2 len 1 [ 454.211696][ T8263] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 454.227039][ T8263] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1080: invalid indirect mapped block 1819239214 (level 0) [ 454.390260][ T8263] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1080: invalid indirect mapped block 1819239214 (level 1) [ 454.475950][ T8263] EXT4-fs (loop3): 1 truncate cleaned up [ 454.484661][ T8263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.051581][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.754605][ T8289] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1093'. [ 455.791926][ T5817] Bluetooth: unknown link type 6 [ 455.797172][ T5817] Bluetooth: hci2: connection err: -111 [ 455.968541][ T8286] loop4: detected capacity change from 0 to 2048 [ 456.050591][ T8286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.289109][ T8296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1096'. [ 456.544305][ T8299] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 457.545963][ T8314] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1106'. [ 457.555447][ T8314] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1106'. [ 458.224186][ T8327] AppArmor: change_hat: Invalid input '0' [ 458.269787][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1112'. [ 458.285422][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1112'. [ 458.466390][ T8330] loop3: detected capacity change from 0 to 1024 [ 458.505356][ T8330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.716979][ T8330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.181875][ T5862] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 459.391208][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.417077][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 459.486488][ T5862] usb 3-1: config 255 has an invalid interface number: 242 but max is 0 [ 459.495452][ T5862] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 459.506430][ T5862] usb 3-1: config 255 has no interface number 0 [ 459.513493][ T5862] usb 3-1: config 255 interface 242 altsetting 6 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.524007][ T5862] usb 3-1: config 255 interface 242 has no altsetting 0 [ 459.547127][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 459.750688][ T5862] usb 3-1: New USB device found, idVendor=8569, idProduct=ee9d, bcdDevice=7f.9f [ 459.760663][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.769281][ T5862] usb 3-1: Product: syz [ 459.773715][ T5862] usb 3-1: Manufacturer: syz [ 459.784719][ T5862] usb 3-1: SerialNumber: syz [ 460.210062][ T5862] usb 3-1: bad CDC descriptors [ 460.300685][ T5862] usb 3-1: USB disconnect, device number 7 [ 460.488489][ T8350] loop0: detected capacity change from 0 to 1024 [ 460.632195][ T8350] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=56c018, mo2=0002] [ 460.690657][ T8350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.243224][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.581030][ T8367] loop4: detected capacity change from 0 to 256 [ 461.734127][ T8367] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7b943f, utbl_chksum : 0xe619d30d) [ 462.722381][ T8383] loop3: detected capacity change from 0 to 256 [ 463.230137][ T8387] loop1: detected capacity change from 0 to 256 [ 463.713534][ T8387] FAT-fs (loop1): Directory bread(block 64) failed [ 463.720801][ T8387] FAT-fs (loop1): Directory bread(block 65) failed [ 463.727991][ T8387] FAT-fs (loop1): Directory bread(block 66) failed [ 463.734795][ T8387] FAT-fs (loop1): Directory bread(block 67) failed [ 463.742070][ T8387] FAT-fs (loop1): Directory bread(block 68) failed [ 463.749035][ T8387] FAT-fs (loop1): Directory bread(block 69) failed [ 463.755993][ T8387] FAT-fs (loop1): Directory bread(block 70) failed [ 463.763026][ T8387] FAT-fs (loop1): Directory bread(block 71) failed [ 463.777330][ T8387] FAT-fs (loop1): Directory bread(block 72) failed [ 463.786294][ T8387] FAT-fs (loop1): Directory bread(block 73) failed [ 464.479872][ T8399] loop0: detected capacity change from 0 to 4096 [ 464.559105][ T8399] EXT4-fs: Ignoring removed orlov option [ 464.565109][ T8399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 464.894014][ T8399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.139463][ T8399] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 465.151103][ T8399] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 465.161300][ T8399] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1144: Failed to acquire dquot type 1 [ 465.497819][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1151'. [ 465.507166][ T8415] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1151'. [ 465.592025][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.356416][ T8424] netlink: 'syz.2.1156': attribute type 10 has an invalid length. [ 466.364986][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1156'. [ 466.378096][ T5858] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 466.381034][ T8424] bridge0: port 3(team0) entered disabled state [ 466.481765][ T8424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 466.603555][ T8429] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 466.627326][ T5858] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 466.639383][ T5858] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 466.649607][ T5858] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 466.660202][ T5858] usb 5-1: config 220 has no interface number 2 [ 466.666720][ T5858] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 466.680271][ T5858] usb 5-1: config 220 interface 0 has no altsetting 0 [ 466.687295][ T5858] usb 5-1: config 220 interface 76 has no altsetting 0 [ 466.694587][ T5858] usb 5-1: config 220 interface 1 has no altsetting 0 [ 466.866706][ T5858] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 466.876678][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.885281][ T5858] usb 5-1: Product: syz [ 466.890337][ T5858] usb 5-1: Manufacturer: syz [ 466.895197][ T5858] usb 5-1: SerialNumber: syz [ 467.249120][ T5858] usb 5-1: selecting invalid altsetting 0 [ 467.260147][ T5858] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 467.266932][ T5858] usb 5-1: No valid video chain found. [ 467.390193][ T5858] usb 5-1: selecting invalid altsetting 0 [ 467.396244][ T5858] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 467.499365][ T5858] usb 5-1: USB disconnect, device number 5 [ 467.500031][ T8439] cgroup: none used incorrectly [ 468.309986][ T8449] syz.4.1167: attempt to access beyond end of device [ 468.309986][ T8449] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 468.319000][ T8451] capability: warning: `syz.0.1168' uses deprecated v2 capabilities in a way that may be insecure [ 469.059745][ T8461] ieee802154 phy0 wpan0: encryption failed: -22 [ 471.025325][ T8496] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 473.440159][ T8538] trusted_key: encrypted_key: hex blob is missing [ 473.979333][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 474.997843][ T5858] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 475.247113][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.253079][ T5858] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 475.254438][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.263563][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.383602][ T5858] usb 3-1: config 0 descriptor?? [ 475.451036][ T5858] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 475.729843][ T5858] gspca_cpia1: usb_control_msg 05, error -71 [ 475.776364][ T5858] gspca_cpia1: usb_control_msg 01, error -71 [ 475.785421][ T5858] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 475.942020][ T5858] usb 3-1: USB disconnect, device number 8 [ 476.109331][ T8569] xt_CT: No such helper "netbios-ns" [ 476.449599][ T8575] netlink: 'syz.0.1227': attribute type 21 has an invalid length. [ 476.458289][ T8575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1227'. [ 477.108755][ T8579] macvlan0: entered promiscuous mode [ 477.115394][ T8579] macvlan0: entered allmulticast mode [ 477.121463][ T8579] veth1_vlan: entered allmulticast mode [ 478.363505][ T8595] loop3: detected capacity change from 0 to 2048 [ 478.468632][ T8595] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 478.660959][ T8601] loop1: detected capacity change from 0 to 64 [ 478.671054][ T8595] syz.3.1236: attempt to access beyond end of device [ 478.671054][ T8595] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 478.688942][ T8603] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 478.861906][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 478.873196][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 478.982019][ T8595] Remounting filesystem read-only [ 478.993369][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.004573][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.434167][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.448996][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.514550][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.526002][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.555121][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.565870][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.624592][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.635552][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.666083][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.676943][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.709164][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.721009][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.737947][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.754998][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.774436][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.785560][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.918338][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.929183][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 479.964371][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 479.977123][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 480.022910][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 480.033704][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 480.089522][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 480.100381][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 480.187223][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 480.198520][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 480.262945][ T8595] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 480.274201][ T8595] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 480.307853][ T30] audit: type=1800 audit(1747867653.350:70): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1236" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 481.296564][ T8615] loop2: detected capacity change from 0 to 4096 [ 481.349458][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 481.559386][ T8621] netlink: 'syz.3.1249': attribute type 16 has an invalid length. [ 481.567940][ T8621] netlink: 'syz.3.1249': attribute type 17 has an invalid length. [ 481.704499][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.715996][ T5862] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.726481][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.735875][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.746033][ T8621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.906160][ T8619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 481.936821][ T5862] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.397814][ T5862] usb 1-1: USB disconnect, device number 5 [ 483.622442][ T8627] loop1: detected capacity change from 0 to 8192 [ 483.948579][ T8627] syz.1.1252: attempt to access beyond end of device [ 483.948579][ T8627] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 484.079951][ T8627] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 484.088603][ T8627] FAT-fs (loop1): Filesystem has been set read-only [ 484.221910][ T8627] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 484.288621][ T8646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 484.302500][ T8627] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 484.333541][ T8647] loop4: detected capacity change from 0 to 64 [ 485.588647][ T8661] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1268'. [ 487.768204][ T8683] loop3: detected capacity change from 0 to 4096 [ 487.848195][ T5858] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 488.085209][ T5858] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 488.094932][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.103603][ T5858] usb 2-1: Product: syz [ 488.108205][ T5858] usb 2-1: Manufacturer: syz [ 488.113046][ T5858] usb 2-1: SerialNumber: syz [ 488.199153][ T5858] usb 2-1: config 0 descriptor?? [ 488.486487][ T8683] ntfs3(loop3): ino=9, attr_set_size [ 488.544863][ T5858] hso 2-1:0.0: Failed to find BULK IN ep [ 488.750014][ T5858] usb 2-1: USB disconnect, device number 7 [ 488.779413][ T6248] udevd[6248]: setting mode of /dev/bus/usb/002/007 to 020664 failed: No such file or directory [ 488.865486][ T6248] udevd[6248]: setting owner of /dev/bus/usb/002/007 to uid=0, gid=0 failed: No such file or directory [ 490.196190][ T8718] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 492.380080][ T8750] binder: 8748:8750 ioctl c0306201 200000000500 returned -14 [ 495.538781][ T8795] loop2: detected capacity change from 0 to 164 [ 496.917837][ T5858] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 497.092366][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 497.123381][ T5858] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 497.132371][ T5858] usb 4-1: config 0 has no interface number 0 [ 497.193111][ T5858] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 497.202890][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.211496][ T5858] usb 4-1: Product: syz [ 497.220177][ T5858] usb 4-1: Manufacturer: syz [ 497.225046][ T5858] usb 4-1: SerialNumber: syz [ 497.298236][ T5858] usb 4-1: config 0 descriptor?? [ 497.779269][ T5858] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.007013][ T5858] usb 4-1: USB disconnect, device number 5 [ 498.338292][ T8826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1349'. [ 498.348292][ T8826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1349'. [ 498.837747][ T5862] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 498.956254][ T6079] udevd[6079]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.058829][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 499.077998][ T8836] block nbd3: NBD_DISCONNECT [ 499.118008][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 499.164236][ T5862] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 499.174020][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.182585][ T5862] usb 5-1: Product: syz [ 499.188704][ T5862] usb 5-1: Manufacturer: syz [ 499.193568][ T5862] usb 5-1: SerialNumber: syz [ 499.340651][ T5862] usb 5-1: config 0 descriptor?? [ 499.361067][ T8830] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.374531][ T8841] netlink: 'syz.1.1356': attribute type 39 has an invalid length. [ 499.407830][ T30] audit: type=1326 audit(1747867672.460:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 499.425696][ T5862] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.557720][ T30] audit: type=1326 audit(1747867672.530:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 499.581142][ T30] audit: type=1326 audit(1747867672.530:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 499.603963][ T30] audit: type=1326 audit(1747867672.530:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5d8e969 code=0x7ffc0000 [ 499.809907][ T5862] usb 5-1: USB disconnect, device number 6 [ 500.011701][ T8848] tmpfs: Bad value for 'mpol' [ 500.699316][ T8845] loop3: detected capacity change from 0 to 4096 [ 500.731772][ T8853] smc: removing ib device syz1 [ 500.900909][ T8855] loop2: detected capacity change from 0 to 512 [ 501.536927][ T8855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 501.550669][ T8855] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.161998][ T8845] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 502.412166][ T8855] Quota error (device loop2): do_check_range: Getting dqdh_next_free 327680 out of range 0-7 [ 502.432046][ T8855] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 502.451017][ T8855] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1362: Failed to acquire dquot type 1 [ 502.534276][ T6101] udevd[6101]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.573506][ T8845] ntfs3(loop3): ino=1f, "file2" attr_set_size [ 502.635293][ T8863] loop1: detected capacity change from 0 to 2048 [ 503.060678][ T8866] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.390862][ T8863] NILFS (loop1): error -2 truncating bmap (ino=16) [ 503.791880][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 503.805394][ T5811] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 504.082501][ T8866] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 504.094882][ T8866] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 504.263381][ T8866] Remounting filesystem read-only [ 504.298804][ T5800] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 504.501007][ T8874] openvswitch: netlink: Key type 30 is not supported [ 505.405642][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 505.736971][ T8891] xt_TPROXY: Can be used only with -p tcp or -p udp [ 506.387630][ T8902] loop0: detected capacity change from 0 to 256 [ 506.815845][ T8902] FAT-fs (loop0): Directory bread(block 64) failed [ 506.823079][ T8902] FAT-fs (loop0): Directory bread(block 65) failed [ 506.830214][ T8902] FAT-fs (loop0): Directory bread(block 66) failed [ 506.837018][ T8902] FAT-fs (loop0): Directory bread(block 67) failed [ 506.844180][ T8902] FAT-fs (loop0): Directory bread(block 68) failed [ 506.851199][ T8902] FAT-fs (loop0): Directory bread(block 69) failed [ 506.858465][ T8902] FAT-fs (loop0): Directory bread(block 70) failed [ 506.865263][ T8902] FAT-fs (loop0): Directory bread(block 71) failed [ 506.872346][ T8902] FAT-fs (loop0): Directory bread(block 72) failed [ 506.879406][ T8902] FAT-fs (loop0): Directory bread(block 73) failed [ 506.942972][ T8905] netlink: 'syz.1.1386': attribute type 1 has an invalid length. [ 506.951215][ T8905] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1386'. [ 507.235107][ T8910] loop4: detected capacity change from 0 to 64 [ 508.689126][ T8929] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1398'. [ 508.698844][ T8929] 0ªX¹¦À: renamed from caif0 [ 508.838872][ T8929] 0ªX¹¦À: entered allmulticast mode [ 508.844560][ T8929] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 510.952244][ T5858] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 511.000576][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.012424][ T8964] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 511.026331][ T8964] bond0: (slave sit0): Error -95 calling set_mac_address [ 511.188456][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 511.209990][ T5858] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 511.218822][ T5858] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 511.230295][ T5858] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 511.241814][ T5858] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 511.255516][ T5858] usb 1-1: config 0 interface 0 has no altsetting 0 [ 511.366396][ T5858] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 511.376521][ T5858] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 511.388046][ T5858] usb 1-1: Product: syz [ 511.392464][ T5858] usb 1-1: Manufacturer: syz [ 511.397289][ T5858] usb 1-1: SerialNumber: syz [ 511.541805][ T5858] usb 1-1: config 0 descriptor?? [ 511.607575][ T5858] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 511.725062][ T5858] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 511.911109][ T5862] usb 1-1: USB disconnect, device number 6 [ 511.926084][ T5862] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 514.219812][ T9001] loop2: detected capacity change from 0 to 4096 [ 514.410592][ T5858] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 514.651906][ T5858] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 514.661893][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.772920][ T5858] usb 4-1: config 0 descriptor?? [ 515.115124][ T5858] usbhid 4-1:0.0: can't add hid device: -71 [ 515.123730][ T5858] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 515.238956][ T5858] usb 4-1: USB disconnect, device number 6 [ 516.208613][ T9034] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1444'. [ 516.457178][ T9032] loop1: detected capacity change from 0 to 2048 [ 516.627826][ T9032] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 517.469494][ T9049] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 517.795077][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1452'. [ 521.791072][ T9111] lo speed is unknown, defaulting to 1000 [ 521.801820][ T9111] lo speed is unknown, defaulting to 1000 [ 521.859879][ T9111] lo speed is unknown, defaulting to 1000 [ 523.002661][ T9111] infiniband syz0: set active [ 523.007776][ T9111] infiniband syz0: added lo [ 523.013434][ T5858] lo speed is unknown, defaulting to 1000 [ 523.116184][ T9111] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 523.147308][ T9111] infiniband syz0: Couldn't open port 1 [ 523.178493][ T9129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.342282][ T9111] RDS/IB: syz0: added [ 523.346605][ T9111] smc: adding ib device syz0 with port count 1 [ 523.355125][ T9111] smc: ib device syz0 port 1 has pnetid [ 523.364401][ T9111] lo speed is unknown, defaulting to 1000 [ 523.854709][ T9111] lo speed is unknown, defaulting to 1000 [ 523.873891][ T5858] lo speed is unknown, defaulting to 1000 [ 524.295718][ T9143] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1487'. [ 524.413463][ T9111] lo speed is unknown, defaulting to 1000 [ 524.888557][ T9152] capability: warning: `syz.2.1489' uses 32-bit capabilities (legacy support in use) [ 525.403909][ T9111] lo speed is unknown, defaulting to 1000 [ 526.183680][ T9163] loop2: detected capacity change from 0 to 2048 [ 526.396101][ T9111] lo speed is unknown, defaulting to 1000 [ 527.211994][ T9163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.225804][ T9163] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.368499][ T9173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 192: padding at end of block bitmap is not set [ 527.458860][ T9163] EXT4-fs error (device loop2): ext4_xattr_block_find:1869: inode #15: comm syz.2.1494: corrupted xattr block 128: bad e_name length [ 528.025036][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.938000][ T9223] dlm: non-version read from control device 4096 [ 531.758229][ T5862] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 531.995802][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 532.032824][ T5862] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 532.083293][ T5862] usb 5-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 532.093166][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.101822][ T5862] usb 5-1: Product: syz [ 532.106313][ T5862] usb 5-1: Manufacturer: syz [ 532.111311][ T5862] usb 5-1: SerialNumber: syz [ 532.475752][ T5862] ftdi_sio 5-1:64.0: Ignoring interface reserved for JTAG [ 532.578755][ T5862] usb 5-1: USB disconnect, device number 7 [ 532.870156][ T9250] loop1: detected capacity change from 0 to 512 [ 532.988799][ T9250] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 533.000499][ T9250] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1533: invalid indirect mapped block 2683928664 (level 1) [ 533.037970][ T9250] EXT4-fs (loop1): Remounting filesystem read-only [ 533.123108][ T9250] EXT4-fs (loop1): 1 truncate cleaned up [ 533.131701][ T9250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.558570][ T9260] netlink: 'syz.2.1537': attribute type 8 has an invalid length. [ 534.178369][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1542'. [ 534.891434][ T9280] loop2: detected capacity change from 0 to 8 [ 535.091798][ T9280] SQUASHFS error: Failed to read block 0xdfa: -5 [ 535.098780][ T9280] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 535.140732][ T9280] SQUASHFS error: Failed to read block 0x4e8: -5 [ 535.558412][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.565550][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.573516][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.580732][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.587962][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.595087][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.602441][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.609853][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.616971][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.624300][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.631619][ T9280] SQUASHFS error: Failed to read block 0x4de: -5 [ 535.638989][ T9280] SQUASHFS error: Failed to read block 0x4e8: -5 [ 535.646749][ T30] audit: type=1800 audit(1747867708.700:75): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1547" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 535.763111][ T9288] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 536.676902][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.686691][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.519747][ T9308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1560'. [ 537.564903][ T9309] netlink: 'syz.4.1561': attribute type 3 has an invalid length. [ 537.573205][ T9309] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1561'. [ 539.223871][ T9330] xt_hashlimit: max too large, truncated to 1048576 [ 539.915469][ T9336] binfmt_misc: register: failed to install interpreter file ./file0 [ 540.300548][ T9340] loop0: detected capacity change from 0 to 512 [ 540.376704][ T9340] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 540.458356][ T9340] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1576: casefold flag without casefold feature [ 540.505595][ T9340] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1576: couldn't read orphan inode 15 (err -117) [ 540.579951][ T9340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.762522][ T9340] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1576: bg 0: block 5: invalid block bitmap [ 541.164115][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.550823][ T9354] loop3: detected capacity change from 0 to 512 [ 541.630511][ T9354] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1583: casefold flag without casefold feature [ 541.657087][ T9354] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1583: couldn't read orphan inode 15 (err -117) [ 541.750247][ T9354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.758166][ T5862] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 541.938184][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 541.976625][ T5862] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 541.986903][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.999106][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 542.014171][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 542.054049][ T9359] loop4: detected capacity change from 0 to 2048 [ 542.174219][ T9359] NILFS (loop4): ifile inode (checkpoint number=2) corrupted [ 542.182231][ T5862] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 542.182389][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.192041][ T9359] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2) [ 542.199994][ T5862] usb 1-1: Product: syz [ 542.218517][ T5862] usb 1-1: Manufacturer: syz [ 542.223367][ T5862] usb 1-1: SerialNumber: syz [ 542.330881][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.371467][ T5862] usb 1-1: config 0 descriptor?? [ 542.380059][ T9356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 542.660361][ T9356] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 542.667199][ T9356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.675399][ T9356] vhci_hcd vhci_hcd.0: Device attached [ 542.801946][ T9362] vhci_hcd: connection closed [ 542.828528][ T5862] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 542.850597][ T5862] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 542.857802][ T3724] vhci_hcd: stop threads [ 542.865232][ T3724] vhci_hcd: release socket [ 542.870115][ T3724] vhci_hcd: disconnect device [ 542.907599][ T5858] vhci_hcd: vhci_device speed not set [ 543.154669][ C0] powermate: config urb returned -71 [ 543.161874][ C0] powermate: config urb returned -71 [ 543.168900][ C0] powermate: config urb returned -71 [ 543.174767][ C0] powermate: config urb returned -71 [ 543.200687][ T5862] usb 1-1: USB disconnect, device number 7 [ 543.200926][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 544.828631][ T5862] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 545.048116][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 545.100518][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 545.111952][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 545.187060][ T5862] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 545.196630][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.205150][ T5862] usb 3-1: Product: syz [ 545.209915][ T5862] usb 3-1: Manufacturer: syz [ 545.214764][ T5862] usb 3-1: SerialNumber: syz [ 545.322386][ T5862] usb 3-1: config 0 descriptor?? [ 545.399257][ T5862] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 545.616372][ T5862] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 545.637176][ T5862] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 545.820862][ T5858] usb 3-1: USB disconnect, device number 9 [ 546.901182][ T9407] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 546.909028][ T9407] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 548.207642][ T30] audit: type=1326 audit(1747867721.250:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.4.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 548.339372][ T30] audit: type=1326 audit(1747867721.330:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.4.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 548.364752][ T30] audit: type=1326 audit(1747867721.360:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.4.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 548.388545][ T30] audit: type=1326 audit(1747867721.360:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.4.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 548.411417][ T30] audit: type=1326 audit(1747867721.360:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.4.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 550.340324][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.352962][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.364989][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.386449][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.409901][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 550.692272][ T9445] lo speed is unknown, defaulting to 1000 [ 551.642306][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 552.458638][ T9473] loop4: detected capacity change from 0 to 256 [ 552.487946][ T5810] Bluetooth: hci5: command tx timeout [ 553.553342][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.580253][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.802911][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.124659][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.333330][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.567904][ T5810] Bluetooth: hci5: command tx timeout [ 555.299404][ T51] bridge_slave_1: left allmulticast mode [ 555.305421][ T51] bridge_slave_1: left promiscuous mode [ 555.312758][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.371605][ T9504] loop0: detected capacity change from 0 to 64 [ 555.483606][ T51] bridge_slave_0: left allmulticast mode [ 555.489763][ T51] bridge_slave_0: left promiscuous mode [ 555.496525][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.603158][ T9504] Trying to free block not in datazone [ 555.609663][ T9504] Trying to free block not in datazone [ 555.615636][ T9504] Trying to free block not in datazone [ 555.622492][ T9504] Trying to free block not in datazone [ 555.632111][ T9504] minix_free_block (loop0:6): bit already cleared [ 555.640019][ T9504] Trying to free block not in datazone [ 555.645786][ T9504] Trying to free block not in datazone [ 556.048964][ T9512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1657'. [ 556.058679][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 556.625920][ T9516] loop2: detected capacity change from 0 to 128 [ 556.650013][ T5810] Bluetooth: hci5: command tx timeout [ 556.694220][ T9516] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 556.830035][ T9516] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.843538][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.019480][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.090559][ T51] bond0 (unregistering): Released all slaves [ 557.213907][ T9445] chnl_net:caif_netlink_parms(): no params data found [ 557.386144][ T5804] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 557.486814][ T9524] loop0: detected capacity change from 0 to 1764 [ 558.170811][ T9531] loop3: detected capacity change from 0 to 512 [ 558.373708][ T9531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.392674][ T9531] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.739424][ T5810] Bluetooth: hci5: command tx timeout [ 558.987751][ T51] hsr_slave_0: left promiscuous mode [ 559.009379][ T51] hsr_slave_1: left promiscuous mode [ 559.019835][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.028763][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.155851][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.164959][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.281174][ T51] veth1_macvtap: left promiscuous mode [ 559.287065][ T51] veth0_macvtap: left promiscuous mode [ 559.293179][ T51] veth1_vlan: left promiscuous mode [ 559.298994][ T51] veth0_vlan: left promiscuous mode [ 559.367006][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.469318][ T9558] IPVS: set_ctl: invalid protocol: 255 172.20.20.55:20004 [ 561.057611][ T51] team0 (unregistering): Port device team_slave_1 removed [ 561.083284][ T51] team0 (unregistering): Port device team_slave_0 removed [ 562.300208][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.308496][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.316289][ T9445] bridge_slave_0: entered allmulticast mode [ 562.325969][ T9445] bridge_slave_0: entered promiscuous mode [ 562.424427][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.432230][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.440500][ T9445] bridge_slave_1: entered allmulticast mode [ 562.450166][ T9445] bridge_slave_1: entered promiscuous mode [ 562.918982][ T9584] xt_cgroup: path and classid specified [ 563.106450][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.216791][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.705629][ T9445] team0: Port device team_slave_0 added [ 563.799853][ T9445] team0: Port device team_slave_1 added [ 564.256797][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.264676][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.291296][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.389008][ T9602] netlink: 'syz.2.1690': attribute type 9 has an invalid length. [ 564.397150][ T9602] netlink: 'syz.2.1690': attribute type 6 has an invalid length. [ 564.498022][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.505236][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.535660][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.035497][ T9445] hsr_slave_0: entered promiscuous mode [ 565.050880][ T9445] hsr_slave_1: entered promiscuous mode [ 566.434301][ T9626] loop3: detected capacity change from 0 to 256 [ 566.769598][ T9627] loop0: detected capacity change from 0 to 2048 [ 566.819151][ T9627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.215346][ T9445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.320654][ T9445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.394527][ T9445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.465656][ T9445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.689405][ T5865] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 567.779895][ T30] audit: type=1326 audit(1747867740.830:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 567.803586][ T30] audit: type=1326 audit(1747867740.830:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 567.904092][ T5865] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 567.916064][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.928287][ T5865] usb 3-1: config 0 has no interface number 0 [ 567.934691][ T5865] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 567.945127][ T5865] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.140273][ T30] audit: type=1326 audit(1747867740.910:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 568.163303][ T30] audit: type=1326 audit(1747867740.910:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 568.188122][ T30] audit: type=1326 audit(1747867740.910:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x7ffc0000 [ 568.240610][ T5865] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 568.254425][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.262895][ T5865] usb 3-1: Product: syz [ 568.267297][ T5865] usb 3-1: Manufacturer: syz [ 568.272253][ T5865] usb 3-1: SerialNumber: syz [ 568.682190][ T5865] usb 3-1: config 0 descriptor?? [ 569.452400][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1708'. [ 569.462165][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1708'. [ 569.480436][ T5865] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 569.962097][ T5865] usb 3-1: USB disconnect, device number 10 [ 571.200906][ T9445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.450809][ T9445] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.579637][ T3833] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.587247][ T3833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.757860][ T3833] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.765454][ T3833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.336724][ T9445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.389178][ T9763] loop3: detected capacity change from 0 to 1024 [ 574.950951][ T5811] ===================================================== [ 574.959173][ T5811] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 574.967052][ T5811] hfsplus_delete_cat+0x1195/0x13d0 [ 574.973145][ T5811] hfsplus_rmdir+0x13c/0x310 [ 574.981220][ T5811] vfs_rmdir+0x5b6/0x800 [ 574.985674][ T5811] do_rmdir+0x87b/0xf30 [ 574.991177][ T5811] __x64_sys_unlinkat+0x166/0x210 [ 574.996435][ T5811] x64_sys_call+0x2be5/0x3db0 [ 575.001572][ T5811] do_syscall_64+0xd9/0x1b0 [ 575.006324][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.012587][ T5811] [ 575.015219][ T5811] Uninit was created at: [ 575.020001][ T5811] __alloc_frozen_pages_noprof+0x689/0xf00 [ 575.026069][ T5811] alloc_pages_mpol+0x328/0x860 [ 575.031367][ T5811] alloc_frozen_pages_noprof+0xf7/0x200 [ 575.037176][ T5811] allocate_slab+0x24d/0x1210 [ 575.042235][ T5811] ___slab_alloc+0xfec/0x3480 [ 575.047140][ T5811] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 575.054332][ T5811] hfsplus_alloc_inode+0x5a/0xd0 [ 575.060207][ T5811] alloc_inode+0x87/0x4a0 [ 575.064778][ T5811] iget_locked+0x239/0x12d0 [ 575.069688][ T5811] hfsplus_iget+0x5c/0xb80 [ 575.074342][ T5811] hfsplus_btree_open+0x132/0x1c90 [ 575.083053][ T5811] hfsplus_fill_super+0x1161/0x2740 [ 575.089496][ T5811] get_tree_bdev_flags+0x6e6/0x920 [ 575.094847][ T5811] get_tree_bdev+0x38/0x50 [ 575.099845][ T5811] hfsplus_get_tree+0x35/0x40 [ 575.104790][ T5811] vfs_get_tree+0xb3/0x5c0 [ 575.109662][ T5811] do_new_mount+0x738/0x1610 [ 575.114472][ T5811] path_mount+0x6db/0x1e90 [ 575.119293][ T5811] __se_sys_mount+0x6eb/0x7d0 [ 575.124205][ T5811] __x64_sys_mount+0xe4/0x150 [ 575.129277][ T5811] x64_sys_call+0xfa7/0x3db0 [ 575.134102][ T5811] do_syscall_64+0xd9/0x1b0 [ 575.138948][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.145099][ T5811] [ 575.147769][ T5811] CPU: 0 UID: 0 PID: 5811 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(undef) [ 575.160548][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.171013][ T5811] ===================================================== [ 575.178225][ T5811] Disabling lock debugging due to kernel taint [ 575.187757][ T5811] Kernel panic - not syncing: kmsan.panic set ... [ 575.194320][ T5811] CPU: 0 UID: 0 PID: 5811 Comm: syz-executor Tainted: G B 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(undef) [ 575.208449][ T5811] Tainted: [B]=BAD_PAGE [ 575.212747][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.222991][ T5811] Call Trace: [ 575.226394][ T5811] [ 575.229458][ T5811] __dump_stack+0x26/0x30 [ 575.233987][ T5811] dump_stack_lvl+0x53/0x270 [ 575.238791][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 575.244860][ T5811] dump_stack+0x1e/0x25 [ 575.249221][ T5811] panic+0x4bd/0xd50 [ 575.253370][ T5811] kmsan_report+0x29d/0x2a0 [ 575.258116][ T5811] ? __msan_warning+0x96/0x120 [ 575.263088][ T5811] ? hfsplus_delete_cat+0x1195/0x13d0 [ 575.268669][ T5811] ? hfsplus_rmdir+0x13c/0x310 [ 575.273600][ T5811] ? vfs_rmdir+0x5b6/0x800 [ 575.278218][ T5811] ? do_rmdir+0x87b/0xf30 [ 575.282742][ T5811] ? __x64_sys_unlinkat+0x166/0x210 [ 575.288170][ T5811] ? x64_sys_call+0x2be5/0x3db0 [ 575.293352][ T5811] ? do_syscall_64+0xd9/0x1b0 [ 575.298256][ T5811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.304515][ T5811] ? hfsplus_bnode_read+0x2d3/0x350 [ 575.309943][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 575.315483][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 575.321544][ T5811] ? hfsplus_bnode_dump+0x50a/0x560 [ 575.326958][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 575.332399][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 575.338463][ T5811] ? hfsplus_brec_remove+0x92f/0xa60 [ 575.344076][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 575.349508][ T5811] __msan_warning+0x96/0x120 [ 575.354323][ T5811] hfsplus_delete_cat+0x1195/0x13d0 [ 575.359731][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 575.365778][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 575.371281][ T5811] hfsplus_rmdir+0x13c/0x310 [ 575.376109][ T5811] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 575.381419][ T5811] vfs_rmdir+0x5b6/0x800 [ 575.385892][ T5811] do_rmdir+0x87b/0xf30 [ 575.390317][ T5811] __x64_sys_unlinkat+0x166/0x210 [ 575.395564][ T5811] x64_sys_call+0x2be5/0x3db0 [ 575.400472][ T5811] do_syscall_64+0xd9/0x1b0 [ 575.405209][ T5811] ? irqentry_exit+0x16/0x60 [ 575.410020][ T5811] ? clear_bhb_loop+0x40/0x90 [ 575.414890][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.420983][ T5811] RIP: 0033:0x7fb92e18df47 [ 575.425553][ T5811] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.445467][ T5811] RSP: 002b:00007ffccd02cad8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 575.454061][ T5811] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fb92e18df47 [ 575.462180][ T5811] RDX: 0000000000000200 RSI: 00007ffccd02dc80 RDI: 00000000ffffff9c [ 575.470395][ T5811] RBP: 00007fb92e21089d R08: 0000000000000000 R09: 0000000000000000 [ 575.478597][ T5811] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffccd02dc80 [ 575.486714][ T5811] R13: 00007fb92e21089d R14: 000000000008c42e R15: 00007ffccd02fe40 [ 575.494862][ T5811] [ 575.498359][ T5811] Kernel Offset: disabled [ 575.502798][ T5811] Rebooting in 86400 seconds..