last executing test programs: 5.55628845s ago: executing program 0 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}}, 0x0) 4.593405049s ago: executing program 0 (id=3031): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x69e, &(0x7f00000008c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 4.512987639s ago: executing program 2 (id=3032): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 3.900522086s ago: executing program 4 (id=3035): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "6b4f0da2"}}}}}, 0x0) 3.90017747s ago: executing program 2 (id=3036): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x300}, 0x0) 3.856394533s ago: executing program 0 (id=3037): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000000c002b80080003000e00000008000a"], 0x34}}, 0x0) 3.850463994s ago: executing program 3 (id=3038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000017001c00038018f503801400010076657468315f766972745f776966690014000000110001"], 0x70}}, 0x0) 3.334058168s ago: executing program 1 (id=3040): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) 3.230072929s ago: executing program 4 (id=3041): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 3.144297448s ago: executing program 2 (id=3042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) nanosleep(&(0x7f0000000580)={0x0, 0x3938700}, 0x0) socket(0x0, 0x0, 0x0) 2.998117858s ago: executing program 0 (id=3043): unshare(0x8040480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), 0x0, 0x0, r1}, 0x38) 2.96624867s ago: executing program 3 (id=3044): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 2.624234287s ago: executing program 1 (id=3045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005e0025"], 0x18}], 0x1}, 0x0) 2.530636787s ago: executing program 3 (id=3046): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0xfffffffffffffe99, 0x4}]}}}]}, 0x90}}, 0x0) 2.344207748s ago: executing program 4 (id=3047): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$dsp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)='g', 0x157c}, {&(0x7f0000001200)="97", 0x1}], 0x2) 2.227573381s ago: executing program 0 (id=3048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8}]}, 0x44}}, 0x0) 2.095225391s ago: executing program 2 (id=3049): r0 = io_uring_setup(0x2e05, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.873936858s ago: executing program 3 (id=3050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c400000010000100"/20, @ANYRES32=r2, @ANYBLOB="20000000000000009c001680980001800c000700ff070000050000000c000400090000000200000014000a00010400000000000000000000100000000c0004c027428991e16166000c000900070000000600000040000c8014"], 0xc4}}, 0x0) 1.808307279s ago: executing program 1 (id=3051): capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000004a40), 0x0, 0x0) r1 = dup(r0) ioctl$CAPI_GET_ERRCODE(r1, 0xc0104320, 0x0) 1.701139229s ago: executing program 0 (id=3052): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000d40)=ANY=[@ANYBLOB="00001b5c29b17d955f465b67d9bf68b6c6b4", @ANYRES64, @ANYBLOB="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"], 0x26, 0x2bd, &(0x7f0000000900)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000209412201300000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1d1918000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.550566217s ago: executing program 2 (id=3053): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000010c0)=0x15) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000380)='\n', 0x160a}], 0x1) 1.301924587s ago: executing program 1 (id=3054): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) 1.080547517s ago: executing program 3 (id=3055): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000680)={[{@nobh}, {@barrier}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noquota}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}]}, 0xfe, 0x576, &(0x7f00000024c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x0, 0x8001) lseek(r0, 0x0, 0x3) 980.962255ms ago: executing program 4 (id=3056): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="580000001400add4273200000000b4560a117fffffff81000e220e227f000001000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000c335237676a8e5dc968b2bf8ec", 0x58}], 0x1) 767.590927ms ago: executing program 2 (id=3057): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 689.562675ms ago: executing program 1 (id=3058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "adff360dad"}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x58}}, 0x0) 406.356871ms ago: executing program 4 (id=3059): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 77.642816ms ago: executing program 1 (id=3060): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 416.717µs ago: executing program 3 (id=3061): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e0, 0x270, 0x340, 0x2, 0x270, 0xd0, 0x1a0, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'ipvlan1\x00', 'nicvf0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'caif0\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @local, [], [], 'pimreg\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @remote, [], [], 'caif0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r0, 0x40204706, 0x20000004) 0s ago: executing program 4 (id=3062): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 694.568528][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 694.620791][ T44] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 694.633438][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.644459][ T44] usb 5-1: Product: syz [ 694.648902][ T44] usb 5-1: Manufacturer: syz [ 694.654814][ T44] usb 5-1: SerialNumber: syz [ 694.717682][ T44] usb 5-1: config 0 descriptor?? [ 694.756552][ T44] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 694.964673][ T44] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 695.466361][T10036] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 695.496478][T10035] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 695.792205][ T44] usb 5-1: device descriptor read/64, error -71 [ 696.090154][ T44] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 696.150287][T10042] loop3: detected capacity change from 0 to 512 [ 696.277612][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 696.279672][T10042] EXT4-fs (loop3): 1 truncate cleaned up [ 696.295176][T10042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.459640][T10042] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 696.672512][ T44] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 696.683248][ T44] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 696.740797][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.020987][ T44] usb 5-1: USB disconnect, device number 15 [ 697.683268][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 697.896368][ T44] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 697.906373][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.043301][ T44] usb 1-1: config 0 descriptor?? [ 698.117509][ T44] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 698.966614][ T44] gspca_cpia1: usb_control_msg 01, error -71 [ 698.972963][ T44] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 699.014818][ T44] usb 1-1: USB disconnect, device number 17 [ 699.175214][T10072] Process accounting resumed [ 700.265611][T10086] loop1: detected capacity change from 0 to 512 [ 700.404418][T10086] EXT4-fs (loop1): 1 truncate cleaned up [ 700.412336][T10086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.485252][T10086] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 700.635711][ T6991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.725114][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 700.760604][T10095] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 700.768825][T10095] netlink: 'syz.0.1987': attribute type 2 has an invalid length. [ 700.937150][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 700.970148][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.984557][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.998341][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 701.011721][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 701.021090][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.107751][ T44] usb 3-1: config 0 descriptor?? [ 701.111075][T10099] loop1: detected capacity change from 0 to 512 [ 701.412969][T10099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.426443][T10099] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 701.747392][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input19 [ 701.815891][ T29] audit: type=1804 audit(1723728730.067:167): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1990" name="/newroot/267/bus/file1" dev="loop1" ino=15 res=1 errno=0 [ 702.168758][ T6991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.320577][ T44] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 702.445698][ T44] usb 3-1: USB disconnect, device number 12 [ 703.455303][ T5237] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 703.768161][ T5237] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 703.777655][ T5237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.815084][ T5237] usb 2-1: config 0 descriptor?? [ 703.901391][ T5237] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 704.252939][T10124] MPI: mpi too large (16392 bits) [ 704.586088][ T5237] gspca_cpia1: usb_control_msg 01, error -71 [ 704.592537][ T5237] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 704.639853][ T5237] usb 2-1: USB disconnect, device number 19 [ 705.064959][ T44] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 705.292474][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 705.380568][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 705.443393][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 705.455703][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.464087][ T44] usb 1-1: Product: syz [ 705.468551][ T44] usb 1-1: Manufacturer: syz [ 705.473487][ T44] usb 1-1: SerialNumber: syz [ 705.489066][ T44] usb 1-1: config 0 descriptor?? [ 705.544808][ T44] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 705.599688][ T5240] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 705.906854][ T5240] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 705.915853][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 705.930993][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33295, setting to 1024 [ 705.943672][ T5240] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 705.956474][ T5240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.975195][ T5240] usb 4-1: config 0 descriptor?? [ 706.133522][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 706.260803][ T44] gspca_zc3xx: reg_w_i err -71 [ 706.608556][ T5240] corsair 0003:1B1C:1B3E.0017: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 706.894987][ T44] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 706.904840][ T44] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 706.969925][ T5237] usb 4-1: USB disconnect, device number 21 [ 707.009096][ T44] usb 1-1: USB disconnect, device number 18 [ 707.130336][T10153] netlink: 'syz.1.2024': attribute type 18 has an invalid length. [ 707.483763][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 708.087241][T10161] loop4: detected capacity change from 0 to 512 [ 708.096075][T10161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 708.237662][T10161] EXT4-fs (loop4): Test dummy encryption mode enabled [ 708.237762][T10161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 708.240347][T10161] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 708.240459][T10161] EXT4-fs (loop4): group descriptors corrupted! [ 708.445053][ T44] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 708.497560][T10171] loop2: detected capacity change from 0 to 512 [ 708.654972][ T44] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 708.655152][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 708.655353][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33295, setting to 1024 [ 708.655607][ T44] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 708.655783][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.671018][ T44] usb 2-1: config 0 descriptor?? [ 708.682854][T10171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.683388][T10171] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 708.904736][ T29] audit: type=1804 audit(1723728737.127:168): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2018" name="/newroot/375/bus/file1" dev="loop2" ino=15 res=1 errno=0 [ 709.257155][ T44] corsair 0003:1B1C:1B3E.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 709.268166][ T5876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.476748][ T5240] usb 2-1: USB disconnect, device number 20 [ 709.608555][T10184] loop3: detected capacity change from 0 to 512 [ 709.740240][T10184] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2026: invalid block [ 709.761129][T10184] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2026: invalid indirect mapped block 4294967295 (level 1) [ 709.810057][T10184] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2026: invalid indirect mapped block 4294967295 (level 1) [ 709.918474][T10184] EXT4-fs (loop3): 2 truncates cleaned up [ 709.929325][T10184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.067422][T10189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2027'. [ 710.108762][T10184] EXT4-fs error (device loop3): ext4_get_parent:1858: inode #11: comm syz.3.2026: bad parent inode number: 3 [ 710.487329][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.615125][T10193] netlink: 'syz.2.2029': attribute type 18 has an invalid length. [ 711.035721][T10202] pim6reg: entered allmulticast mode [ 711.198431][T10201] pim6reg: left allmulticast mode [ 712.405591][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 712.632499][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 712.692679][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.703139][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 712.711459][ T44] usb 1-1: SerialNumber: syz [ 713.764881][ T44] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 713.819283][ T44] usb 1-1: USB disconnect, device number 19 [ 714.301521][T10241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2052'. [ 714.784010][T10247] pim6reg: entered allmulticast mode [ 714.887482][T10244] pim6reg: left allmulticast mode [ 715.380139][T10258] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 715.689876][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.698624][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.215691][ T5241] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 716.464008][ T5241] usb 4-1: Using ep0 maxpacket: 32 [ 716.488834][ T5241] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 716.499327][ T5241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.569960][ T5241] usb 4-1: config 0 descriptor?? [ 716.597558][ T5241] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 716.934238][T10278] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 717.379436][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2071'. [ 717.448186][T10285] pim6reg: entered allmulticast mode [ 717.497845][ T5241] gspca_nw80x: reg_r err -71 [ 717.503149][ T5241] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 717.548070][ T5241] usb 4-1: USB disconnect, device number 22 [ 717.589995][T10283] pim6reg: left allmulticast mode [ 719.603944][T10312] netlink: 'syz.0.2086': attribute type 6 has an invalid length. [ 719.612362][T10312] netlink: 'syz.0.2086': attribute type 30 has an invalid length. [ 719.623861][T10312] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2086'. [ 719.637411][T10312] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 719.648700][T10312] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 720.137562][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 720.704781][ T44] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 720.718213][T10326] loop1: detected capacity change from 0 to 256 [ 720.839727][T10326] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 720.927868][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 720.940931][T10326] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 720.954907][T10326] exFAT-fs (loop1): Filesystem has been set read-only [ 720.992939][ T44] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 721.006210][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.042320][ T44] usb 1-1: config 0 descriptor?? [ 721.077860][ T44] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 721.103073][T10326] exFAT-fs (loop1): hint_cluster is invalid (1), rewind to the first cluster [ 721.112527][T10326] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 721.121484][T10326] exFAT-fs (loop1): error, failed to bmap (inode : ffff888037a397f0 iblock : 9, err : -5) [ 721.237376][T10326] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 721.965468][ T44] gspca_nw80x: reg_r err -71 [ 721.970613][ T44] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 722.073732][ T44] usb 1-1: USB disconnect, device number 20 [ 722.771896][T10344] vivid-000: disconnect [ 722.818295][T10343] vivid-000: reconnect [ 723.977799][T10361] batman_adv: batadv0: Adding interface: wlan1 [ 723.984415][T10361] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.013236][T10361] batman_adv: batadv0: Interface activated: wlan1 [ 724.040396][T10360] loop4: detected capacity change from 0 to 256 [ 724.139998][T10360] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 724.285866][T10360] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 724.296604][T10360] exFAT-fs (loop4): Filesystem has been set read-only [ 724.373580][T10360] exFAT-fs (loop4): hint_cluster is invalid (1), rewind to the first cluster [ 724.386873][T10360] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 724.396325][T10360] exFAT-fs (loop4): error, failed to bmap (inode : ffff888037a3a1e0 iblock : 9, err : -5) [ 724.437401][T10360] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 724.520866][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 724.631262][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2109'. [ 725.062581][ T5240] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 725.062662][ T5240] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.151317][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.212819][ T5240] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.260506][ T5240] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.372800][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.522524][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.662873][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.743238][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.848602][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.957996][ T5288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 726.224920][ T5237] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 726.420331][T10385] loop0: detected capacity change from 0 to 128 [ 726.472163][ T5237] usb 3-1: Using ep0 maxpacket: 32 [ 726.508682][ T5237] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 726.518382][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.539667][T10386] loop4: detected capacity change from 0 to 1024 [ 726.550167][ T5237] usb 3-1: config 0 descriptor?? [ 726.579510][ T5237] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 726.650785][T10385] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 726.733917][T10385] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.127680][ T3244] hfsplus: b-tree write err: -5, ino 4 [ 727.450957][ T5237] gspca_nw80x: reg_r err -71 [ 727.456340][ T5237] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 727.495629][ T8261] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 727.511076][T10394] loop3: detected capacity change from 0 to 512 [ 727.520897][ T5237] usb 3-1: USB disconnect, device number 13 [ 727.583930][T10394] EXT4-fs: Ignoring removed mblk_io_submit option [ 727.640772][ T29] audit: type=1326 audit(1723728755.937:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10395 comm="syz.1.2123" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x0 [ 727.690768][T10394] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 727.720897][T10394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 727.731465][T10394] System zones: 1-12 [ 727.752232][T10394] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2133: corrupted in-inode xattr: e_value size too large [ 727.779032][T10394] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2133: couldn't read orphan inode 15 (err -117) [ 727.837818][T10394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.211381][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.389881][T10415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 730.175180][T10425] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2136'. [ 730.295857][T10427] loop4: detected capacity change from 0 to 512 [ 730.317526][T10427] EXT4-fs: Ignoring removed mblk_io_submit option [ 730.348932][T10427] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 730.403485][T10427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 730.485914][T10427] System zones: 1-12 [ 730.497257][T10427] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2139: corrupted in-inode xattr: e_value size too large [ 730.556919][T10427] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2139: couldn't read orphan inode 15 (err -117) [ 730.615777][T10427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.684468][ T29] audit: type=1326 audit(1723728758.947:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.2.2141" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0 [ 731.057658][ T8864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.487620][T10457] loop3: detected capacity change from 0 to 512 [ 732.538499][T10457] ext4: Bad value for 'resuid' [ 732.543955][T10457] ext4: Bad value for 'resuid' [ 733.596878][ T5240] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 733.832559][ T5240] usb 1-1: Using ep0 maxpacket: 16 [ 733.867202][ T5240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.878749][ T5240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.891959][ T5240] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 733.902456][ T5240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.976664][ T5240] usb 1-1: config 0 descriptor?? [ 734.697376][ T5240] bigben 0003:146B:0902.0019: unexpected rdesc, please submit for review [ 734.982300][ T5240] bigben 0003:146B:0902.0019: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 734.999664][ T5240] bigben 0003:146B:0902.0019: missing HID_OUTPUT_REPORT 0 [ 735.014606][ T5240] bigben 0003:146B:0902.0019: no output report found [ 735.128482][ T5240] usb 1-1: USB disconnect, device number 21 [ 735.158308][ T29] audit: type=1326 audit(1723728763.347:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.2159" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x0 [ 736.228557][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 736.266742][ T44] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 736.404587][T10495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2176'. [ 736.501774][T10498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.509586][T10498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.533144][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.544681][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.550306][T10498] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 736.557694][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 736.585169][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.665613][ T44] usb 3-1: config 0 descriptor?? [ 736.913534][ T44] appletouch 3-1:0.0: Failed to read mode from device. [ 736.921561][ T44] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 736.961416][ T44] usb 3-1: USB disconnect, device number 14 [ 738.738714][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'. [ 740.026704][T10525] loop3: detected capacity change from 0 to 4096 [ 740.063386][T10525] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 740.207376][ T5240] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 740.470116][ T5240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.484505][ T5240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.494808][ T5240] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 740.504548][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.589170][ T5240] usb 5-1: config 0 descriptor?? [ 740.900003][ T5240] appletouch 5-1:0.0: Failed to read mode from device. [ 740.911263][ T5240] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 740.975758][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 741.010243][ T5240] usb 5-1: USB disconnect, device number 16 [ 743.917866][T10580] loop3: detected capacity change from 0 to 256 [ 744.215330][T10580] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 744.516848][T10589] sd 0:0:1:0: device reset [ 745.958917][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 746.057529][T10612] delete_channel: no stack [ 748.436650][T10631] loop0: detected capacity change from 0 to 4096 [ 748.679443][T10648] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 749.748021][T10663] loop4: detected capacity change from 0 to 524288000 [ 751.219709][T10682] loop4: detected capacity change from 0 to 1024 [ 751.311077][T10682] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 751.321595][T10682] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 751.452642][T10682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 751.674540][T10679] loop0: detected capacity change from 0 to 4096 [ 751.740391][T10679] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 752.039397][ T8864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.065683][T10680] loop3: detected capacity change from 0 to 4096 [ 752.131341][T10680] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 752.683981][T10694] loop4: detected capacity change from 0 to 1024 [ 752.710586][ T29] audit: type=1800 audit(1723728780.917:172): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2252" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 752.893824][T10694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.198510][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2262'. [ 753.433613][ T8864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.553774][ T5183] Bluetooth: hci1: command 0x0405 tx timeout [ 753.845866][T10708] netlink: 'syz.2.2266': attribute type 15 has an invalid length. [ 754.799681][T10718] loop2: detected capacity change from 0 to 1024 [ 754.853198][T10718] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 754.863568][T10718] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 754.993688][T10718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 755.042112][T10725] loop0: detected capacity change from 0 to 512 [ 755.200533][T10725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 755.216883][T10725] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.287542][ T5876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.486792][T10731] loop3: detected capacity change from 0 to 2048 [ 755.608539][T10731] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 755.707462][T10731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 755.728779][ T8261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 755.799574][T10734] loop4: detected capacity change from 0 to 524288000 [ 756.184099][T10721] loop1: detected capacity change from 0 to 4096 [ 756.196715][T10738] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 756.231274][T10721] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 757.625886][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2283'. [ 757.985198][T10743] loop3: detected capacity change from 0 to 4096 [ 758.034829][T10743] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 758.253362][T10758] 8021q: VLANs not supported on ipvlan1 [ 758.387918][T10743] ntfs3: loop3: failed to convert "c46c" to iso8859-2 [ 758.868496][T10769] loop0: detected capacity change from 0 to 128 [ 758.964318][T10769] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 758.996723][T10769] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 759.028950][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.202107][ T44] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 759.434895][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.446794][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.459769][ T44] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 759.474823][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.529761][ T8261] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 759.545466][ T44] usb 5-1: config 0 descriptor?? [ 759.931096][T10781] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2298'. [ 760.036438][ T44] elecom 0003:056E:011C.001A: unknown main item tag 0x0 [ 760.046729][ T44] elecom 0003:056E:011C.001A: unknown main item tag 0xe [ 760.054208][ T44] elecom 0003:056E:011C.001A: unknown main item tag 0x5 [ 760.061522][ T44] elecom 0003:056E:011C.001A: unknown main item tag 0x4 [ 760.072946][ T5241] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 760.086158][ T44] elecom 0003:056E:011C.001A: ignoring exceeding usage max [ 760.104851][ T44] elecom 0003:056E:011C.001A: usage index exceeded [ 760.114808][ T44] elecom 0003:056E:011C.001A: item 0 0 2 0 parsing failed [ 760.153201][ T44] elecom 0003:056E:011C.001A: probe with driver elecom failed with error -22 [ 760.284380][T10785] loop1: detected capacity change from 0 to 128 [ 760.313236][ T5241] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.325136][ T5241] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 760.337999][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.359432][ T44] usb 5-1: USB disconnect, device number 17 [ 760.397173][ T5241] usb 3-1: config 0 descriptor?? [ 760.707264][ T5241] usb 3-1: USB disconnect, device number 15 [ 760.871484][T10791] loop1: detected capacity change from 0 to 512 [ 761.014333][T10791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 761.030678][T10791] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.266169][ T6991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 761.844824][T10804] loop3: detected capacity change from 0 to 128 [ 761.895409][T10804] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.942868][T10804] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 761.975286][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.375805][ T8733] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.726127][T10816] @: renamed from vlan0 (while UP) [ 762.734871][ T44] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 762.927137][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.941461][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.955440][ T44] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 762.965458][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.043862][ T44] usb 2-1: config 0 descriptor?? [ 763.625808][T10825] @: renamed from vlan0 (while UP) [ 763.766328][ T44] hid-led 0003:0FC5:B080.001B: probe with driver hid-led failed with error -71 [ 763.796731][ T44] usb 2-1: USB disconnect, device number 21 [ 764.442889][T10834] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.454769][T10834] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.463989][T10834] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.478635][T10834] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.490601][T10834] vxlan0: entered promiscuous mode [ 764.496071][T10834] vxlan0: entered allmulticast mode [ 764.578274][T10834] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.590557][T10834] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.600092][T10834] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.609512][T10834] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.610495][ T5241] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 764.895756][ T5241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.909519][ T5241] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 764.919104][ T5241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.984828][T10836] tap0: tun_chr_ioctl cmd 1074025677 [ 764.988894][ T5241] usb 1-1: config 0 descriptor?? [ 764.990856][T10836] tap0: linktype set to 773 [ 765.265276][ T5241] usb 1-1: USB disconnect, device number 22 [ 765.488632][ T5187] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 766.505376][T10858] tap0: tun_chr_ioctl cmd 1074025677 [ 766.511310][T10858] tap0: linktype set to 825 [ 767.136463][T10866] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2334'. [ 767.186166][T10864] loop3: detected capacity change from 0 to 2048 [ 767.358913][T10864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.560766][T10873] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.570195][T10873] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.579454][T10873] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.592398][T10873] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.602021][T10873] vxlan0: entered promiscuous mode [ 767.607426][T10873] vxlan0: entered allmulticast mode [ 767.665075][T10873] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.677564][T10873] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.687223][T10873] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.698029][T10873] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.980506][T10879] loop4: detected capacity change from 0 to 256 [ 768.017951][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.246331][T10879] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 768.726018][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 768.800930][T10888] loop2: detected capacity change from 0 to 128 [ 768.880917][T10888] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 768.932401][T10888] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 769.122119][ T5237] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 769.160992][T10894] loop3: detected capacity change from 0 to 136 [ 769.182489][ T5876] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.277031][T10892] loop4: detected capacity change from 0 to 1024 [ 769.343197][ T5237] usb 1-1: Using ep0 maxpacket: 32 [ 769.392621][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.407491][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.418338][ T5237] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 769.427825][ T5237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.467687][ T5237] usb 1-1: config 0 descriptor?? [ 769.528117][ T5237] hub 1-1:0.0: USB hub found [ 769.584704][T10892] syz.4.2345: attempt to access beyond end of device [ 769.584704][T10892] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 769.666054][T10897] syz.4.2345: attempt to access beyond end of device [ 769.666054][T10897] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 769.684380][T10897] Buffer I/O error on dev loop4, logical block 2889, async page read [ 769.720090][T10897] syz.4.2345: attempt to access beyond end of device [ 769.720090][T10897] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 769.860240][ T5237] hub 1-1:0.0: 1 port detected [ 770.050175][ T5237] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 770.058443][ T5237] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 770.151334][ T5237] usbhid 1-1:0.0: can't add hid device: -71 [ 770.158331][ T5237] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 770.260452][ T5237] usb 1-1: USB disconnect, device number 23 [ 771.058137][T10913] loop1: detected capacity change from 0 to 256 [ 771.207852][T10913] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 771.260695][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 771.301399][T10919] loop0: detected capacity change from 0 to 128 [ 772.288927][ T3148] kworker/u8:16: attempt to access beyond end of device [ 772.288927][ T3148] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 773.182953][ T5241] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 773.235756][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2364'. [ 773.245437][T10945] bond0: option ad_select: unable to set because the bond device is up [ 773.387332][ T5241] usb 5-1: Using ep0 maxpacket: 32 [ 773.431941][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.446197][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.456455][ T5241] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 773.465992][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.534892][ T5241] usb 5-1: config 0 descriptor?? [ 773.590879][ T5241] hub 5-1:0.0: USB hub found [ 773.798145][ T5241] hub 5-1:0.0: 1 port detected [ 773.941322][T10949] loop0: detected capacity change from 0 to 256 [ 774.002344][ T5241] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 774.009011][ T5241] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 774.058943][ T5241] usbhid 5-1:0.0: can't add hid device: -71 [ 774.065941][ T5241] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 774.138537][T10949] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 774.173669][ T5241] usb 5-1: USB disconnect, device number 18 [ 774.279030][T10951] loop1: detected capacity change from 0 to 64 [ 774.382559][T10951] syz.1.2373: attempt to access beyond end of device [ 774.382559][T10951] loop1: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 774.428797][T10951] syz.1.2373: attempt to access beyond end of device [ 774.428797][T10951] loop1: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 774.445594][T10951] Buffer I/O error on dev loop1, logical block 4096, async page read [ 774.497476][ T29] audit: type=1800 audit(1723728802.757:173): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2373" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 774.981174][T10959] loop2: detected capacity change from 0 to 128 [ 775.806763][ T1063] kworker/u8:8: attempt to access beyond end of device [ 775.806763][ T1063] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 775.866735][T10967] loop4: detected capacity change from 0 to 2048 [ 775.869997][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2381'. [ 775.889716][T10973] bond0: option ad_select: unable to set because the bond device is up [ 775.946704][T10967] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 776.011102][T10967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 776.267996][T10975] loop0: detected capacity change from 0 to 512 [ 776.329750][T10975] EXT4-fs: journaled quota format not specified [ 776.545631][T10979] loop3: detected capacity change from 0 to 64 [ 776.562939][T10979] hfs: unable to locate alternate MDB [ 776.568670][T10979] hfs: continuing without an alternate MDB [ 776.597131][T10981] loop2: detected capacity change from 0 to 64 [ 776.761910][ T5240] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 776.802605][ T5241] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 777.032424][ T5241] usb 2-1: Using ep0 maxpacket: 16 [ 777.050143][ T5240] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 777.090836][ T5241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.101283][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.102618][ T5241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.111438][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.122398][ T5241] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 777.134798][ T5241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.250528][ T5241] usb 2-1: config 0 descriptor?? [ 777.340348][ T5240] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 777.350045][ T5240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.692579][ T5240] usb 1-1: string descriptor 0 read error: -71 [ 777.699943][ T5240] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 777.712398][ T5240] usb 1-1: No valid video chain found. [ 777.734637][ T5240] usb 1-1: USB disconnect, device number 24 [ 777.860023][ T5241] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 778.025226][ T5241] corsair 0003:1B1C:1B02.001C: Read invalid backlight brightness: b0. [ 778.307157][ T5288] usb 2-1: USB disconnect, device number 22 [ 779.207671][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2398'. [ 779.479649][T11013] program syz.0.2399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.843031][T11016] loop4: detected capacity change from 0 to 1024 [ 780.022639][T11016] hfsplus: bad catalog entry type [ 780.267393][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2406'. [ 780.300159][ T3148] hfsplus: b-tree write err: -5, ino 4 [ 780.915341][ T5240] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 781.114343][T11033] loop1: detected capacity change from 0 to 2048 [ 781.137692][T11033] EXT4-fs: Ignoring removed mblk_io_submit option [ 781.172670][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.187120][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.197353][ T5240] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 781.207987][ T5240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.236616][T11038] loop4: detected capacity change from 0 to 64 [ 781.266898][ T5240] usb 4-1: config 0 descriptor?? [ 781.329846][T11033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.545186][T11043] loop0: detected capacity change from 0 to 64 [ 781.564704][T11033] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2411: bg 0: block 234: padding at end of block bitmap is not set [ 781.645183][T11033] EXT4-fs (loop1): Remounting filesystem read-only [ 781.767828][ T5240] konepure 0003:1E7D:2DB4.001D: unknown main item tag 0x0 [ 781.781524][ T5240] konepure 0003:1E7D:2DB4.001D: unknown main item tag 0x0 [ 781.790308][ T5240] konepure 0003:1E7D:2DB4.001D: item fetching failed at offset 10/11 [ 781.859805][ T5240] konepure 0003:1E7D:2DB4.001D: parse failed [ 781.869698][ T5240] konepure 0003:1E7D:2DB4.001D: probe with driver konepure failed with error -22 [ 782.007775][ T6991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.022827][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'. [ 782.088434][ T5240] usb 4-1: USB disconnect, device number 23 [ 782.370487][T11052] program syz.1.2416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 782.597305][T11054] hsr0: VLAN not yet supported [ 784.372858][T11080] loop2: detected capacity change from 0 to 256 [ 784.548508][T11084] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 784.640086][T11084] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 786.130779][T11104] loop2: detected capacity change from 0 to 1024 [ 786.363212][T11104] hfsplus: bad catalog entry type [ 786.695099][ T3244] hfsplus: b-tree write err: -5, ino 4 [ 786.963390][T11118] loop3: detected capacity change from 0 to 512 [ 787.021364][T11118] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 787.092784][T11118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 787.148791][T11118] System zones: 1-12 [ 787.157683][T11118] EXT4-fs (loop3): orphan cleanup on readonly fs [ 787.164523][T11118] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.2448: Inode bitmap for bg 0 marked uninitialized [ 787.200251][T11118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 787.676608][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.408076][T11137] loop3: detected capacity change from 0 to 2048 [ 788.455536][T11137] EXT4-fs: Ignoring removed mblk_io_submit option [ 788.612770][T11137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.992041][T11137] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2456: bg 0: block 234: padding at end of block bitmap is not set [ 789.030788][T11137] EXT4-fs (loop3): Remounting filesystem read-only [ 789.385052][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.090200][T11161] loop2: detected capacity change from 0 to 8 [ 790.929578][T11169] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 791.436264][ T5288] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 791.676898][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 791.698792][ T5288] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 791.713110][ T5288] usb 4-1: config 0 has no interface number 0 [ 791.719497][ T5288] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 791.755279][ T5288] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 791.767632][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.776032][ T5288] usb 4-1: Product: syz [ 791.780480][ T5288] usb 4-1: Manufacturer: syz [ 791.785474][ T5288] usb 4-1: SerialNumber: syz [ 791.837077][ T5288] usb 4-1: config 0 descriptor?? [ 792.566358][ T5288] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 792.662586][ T5288] usb 4-1: USB disconnect, device number 24 [ 793.953701][T11205] loop3: detected capacity change from 0 to 256 [ 795.690340][T11227] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2498'. [ 796.040990][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 796.703514][T11244] loop1: detected capacity change from 0 to 256 [ 796.855865][T11244] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011fbe, chksum : 0xeb6f636c, utbl_chksum : 0xe619d30d) [ 797.063106][T11244] exFAT-fs (loop1): hint_cluster is invalid (1), rewind to the first cluster [ 797.076665][T11244] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 797.087376][T11244] exFAT-fs (loop1): Filesystem has been set read-only [ 797.094880][T11244] exFAT-fs (loop1): error, failed to bmap (inode : ffff888037990760 iblock : 9, err : -5) [ 797.232774][T11244] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 797.315434][T11244] syz.1.2506: attempt to access beyond end of device [ 797.315434][T11244] loop1: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 798.560369][ T5288] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 798.923664][ T5288] usb 2-1: Using ep0 maxpacket: 8 [ 798.960179][ T5288] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 799.021202][ T5288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 799.032734][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.041027][ T5288] usb 2-1: Product: syz [ 799.049162][ T5288] usb 2-1: Manufacturer: syz [ 799.054159][ T5288] usb 2-1: SerialNumber: syz [ 799.296988][T11275] loop4: detected capacity change from 0 to 1024 [ 799.446247][ T5240] usb 2-1: USB disconnect, device number 23 [ 799.641821][ T78] hfsplus: b-tree write err: -5, ino 4 [ 799.857806][T11277] loop0: detected capacity change from 0 to 256 [ 800.435238][T11283] loop4: detected capacity change from 0 to 256 [ 800.491422][T11282] loop2: detected capacity change from 0 to 1024 [ 800.543925][T11282] hfsplus: invalid attributes max_key_len 0 [ 800.557741][T11282] hfsplus: failed to load attributes file [ 802.335049][ T5241] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 802.576258][ T5241] usb 1-1: Using ep0 maxpacket: 8 [ 802.614930][ T5241] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.626454][ T5241] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.695460][ T5241] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 802.705939][ T5241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.715290][ T5241] usb 1-1: Product: syz [ 802.720068][ T5241] usb 1-1: Manufacturer: syz [ 802.728087][ T5241] usb 1-1: SerialNumber: syz [ 802.929758][T11310] netlink: 'syz.1.2538': attribute type 11 has an invalid length. [ 802.938094][T11310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2538'. [ 803.495618][ T5241] hid (null): report_id 2668810406 is invalid [ 803.583345][ T5241] asus 0003:0B05:19B6.001E: report_id 2668810406 is invalid [ 803.596688][ T5241] asus 0003:0B05:19B6.001E: item 0 4 1 8 parsing failed [ 803.653816][ T5241] asus 0003:0B05:19B6.001E: Asus hid parse failed: -22 [ 803.661400][ T5241] asus 0003:0B05:19B6.001E: probe with driver asus failed with error -22 [ 803.748380][ T5241] usb 1-1: USB disconnect, device number 25 [ 804.168372][T11319] loop4: detected capacity change from 0 to 1024 [ 804.289981][T11319] hfsplus: invalid attributes max_key_len 0 [ 804.314494][T11319] hfsplus: failed to load attributes file [ 804.431068][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'. [ 806.690953][T11337] loop1: detected capacity change from 0 to 16 [ 806.750686][T11337] erofs: (device loop1): mounted with root inode @ nid 36. [ 808.492018][ T44] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 808.732078][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 808.779953][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 808.884594][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 808.897165][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.905553][ T44] usb 4-1: Product: syz [ 808.912670][ T44] usb 4-1: Manufacturer: syz [ 808.917539][ T44] usb 4-1: SerialNumber: syz [ 809.288725][ T5241] usb 4-1: USB disconnect, device number 25 [ 809.953632][T11357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2570'. [ 810.630249][T11363] loop0: detected capacity change from 0 to 16 [ 810.718614][T11363] erofs: (device loop0): mounted with root inode @ nid 36. [ 810.907688][T11365] loop1: detected capacity change from 0 to 1024 [ 810.991186][T11365] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 811.134415][T11365] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 812.588972][ T3244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.754584][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 812.767566][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 812.777556][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 812.795768][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 812.817779][ T5183] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 812.830556][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 812.878518][ T3244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.233802][ T3244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.506008][ T3244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.047922][ T3244] bridge_slave_1: left allmulticast mode [ 814.054099][ T3244] bridge_slave_1: left promiscuous mode [ 814.060965][ T3244] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.096136][ T3244] bridge_slave_0: left allmulticast mode [ 814.105356][ T3244] bridge_slave_0: left promiscuous mode [ 814.112269][ T3244] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.995014][ T5183] Bluetooth: hci4: command tx timeout [ 815.330022][ T3244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.459566][ T3244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.523600][ T3244] bond0 (unregistering): Released all slaves [ 816.011325][ T5288] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 816.320108][ T5288] usb 1-1: Using ep0 maxpacket: 8 [ 816.350725][ T5288] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 816.375240][ T5187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.389911][ T5187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.416494][ T4556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.430667][ T4556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.453299][ T4556] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 816.475985][ T5288] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 816.485611][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.498622][ T5288] usb 1-1: Product: syz [ 816.503702][ T5288] usb 1-1: Manufacturer: syz [ 816.508553][ T5288] usb 1-1: SerialNumber: syz [ 816.516948][ T4556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 816.532945][ T4556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.546085][ T4556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.563433][ T4556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.636208][ T4556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.672942][ T4556] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 816.687760][ T4556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 816.891093][ T3244] hsr_slave_0: left promiscuous mode [ 816.909779][ T3244] hsr_slave_1: left promiscuous mode [ 816.916261][ T5288] usb 1-1: USB disconnect, device number 26 [ 816.951124][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.959012][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.036392][ T3244] veth1_macvtap: left promiscuous mode [ 817.043580][ T3244] veth0_macvtap: left promiscuous mode [ 817.050909][ T3244] veth1_vlan: left promiscuous mode [ 817.059433][ T3244] veth0_vlan: left promiscuous mode [ 817.077857][ T5187] Bluetooth: hci4: command tx timeout [ 817.180428][T11400] loop3: detected capacity change from 0 to 1024 [ 817.349803][T11400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.765783][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.088808][T11405] loop0: detected capacity change from 0 to 1024 [ 818.152005][T11405] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 818.275424][T11405] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 818.522469][ T3244] team0 (unregistering): Port device team_slave_1 removed [ 818.601230][ T5187] Bluetooth: hci0: command tx timeout [ 818.730453][ T3244] team0 (unregistering): Port device team_slave_0 removed [ 818.836204][ T5187] Bluetooth: hci5: command tx timeout [ 819.161520][ T5187] Bluetooth: hci4: command tx timeout [ 819.568200][T11377] chnl_net:caif_netlink_parms(): no params data found [ 820.108167][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2581'. [ 820.571400][ T3244] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.674637][ T5187] Bluetooth: hci0: command tx timeout [ 820.776637][ T3244] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.915209][ T5187] Bluetooth: hci5: command tx timeout [ 820.957964][ T3244] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.099584][T11394] chnl_net:caif_netlink_parms(): no params data found [ 821.166821][ T3244] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.274950][ T5187] Bluetooth: hci4: command tx timeout [ 821.371222][T11392] chnl_net:caif_netlink_parms(): no params data found [ 821.958414][ T3244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.104607][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.115576][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.130036][T11377] bridge_slave_0: entered allmulticast mode [ 822.139847][T11377] bridge_slave_0: entered promiscuous mode [ 822.267892][ T3244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.335491][T11377] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.346236][T11377] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.354608][T11377] bridge_slave_1: entered allmulticast mode [ 822.367108][T11377] bridge_slave_1: entered promiscuous mode [ 822.462999][ T3244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.667697][ T4556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 822.681418][ T4556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 822.698547][ T4556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 822.739036][ T4556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 822.755427][ T4556] Bluetooth: hci0: command tx timeout [ 822.756803][ T5183] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 822.769389][ T3244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.794260][ T5183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 822.804388][T11377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.846135][T11377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.023526][ T5183] Bluetooth: hci5: command tx timeout [ 823.212158][T11394] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.220036][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.230124][T11394] bridge_slave_0: entered allmulticast mode [ 823.244656][T11394] bridge_slave_0: entered promiscuous mode [ 823.407499][T11377] team0: Port device team_slave_0 added [ 823.418778][T11392] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.429867][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.437807][T11392] bridge_slave_0: entered allmulticast mode [ 823.447363][T11392] bridge_slave_0: entered promiscuous mode [ 823.469663][T11394] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.478592][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.489289][T11394] bridge_slave_1: entered allmulticast mode [ 823.500907][T11394] bridge_slave_1: entered promiscuous mode [ 823.691170][T11377] team0: Port device team_slave_1 added [ 823.736600][T11392] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.749469][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.761831][T11392] bridge_slave_1: entered allmulticast mode [ 823.771287][T11392] bridge_slave_1: entered promiscuous mode [ 823.893661][ T3244] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.085729][T11392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.096912][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'. [ 824.140808][ T3244] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.183597][T11394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.360001][T11392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.404665][ T3244] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.431073][T11394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.482073][T11377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.489442][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.518930][T11377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.790738][ T3244] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.818626][T11377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.826107][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.832113][ T5183] Bluetooth: hci0: command tx timeout [ 824.853972][T11377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.953732][T11394] team0: Port device team_slave_0 added [ 824.996883][ T5183] Bluetooth: hci1: command tx timeout [ 825.002283][T11392] team0: Port device team_slave_0 added [ 825.036600][T11394] team0: Port device team_slave_1 added [ 825.082830][ T5183] Bluetooth: hci5: command tx timeout [ 825.206742][ T1722] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 825.278239][T11392] team0: Port device team_slave_1 added [ 825.414582][ T1722] usb 4-1: Using ep0 maxpacket: 16 [ 825.427347][T11392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.434701][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.465053][T11392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.484114][ T1722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.489935][T11394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.498378][ T1722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.505733][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.547536][T11394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.550588][ T1722] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 825.570754][ T1722] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 825.579705][ T1722] usb 4-1: Product: syz [ 825.587047][ T1722] usb 4-1: Manufacturer: syz [ 825.597197][ T1722] usb 4-1: config 0 descriptor?? [ 825.615874][T11377] hsr_slave_0: entered promiscuous mode [ 825.630236][T11377] hsr_slave_1: entered promiscuous mode [ 825.641516][T11377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.651313][T11377] Cannot create hsr debugfs directory [ 825.717819][T11392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.725997][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.758850][T11392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.774534][T11394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.784810][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.819371][T11394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.018410][ T3244] bridge_slave_1: left allmulticast mode [ 826.027663][ T3244] bridge_slave_1: left promiscuous mode [ 826.037064][ T3244] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.049473][ T1722] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0xd [ 826.072548][ T1722] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 826.085643][ T3244] bridge_slave_0: left allmulticast mode [ 826.091533][ T3244] bridge_slave_0: left promiscuous mode [ 826.098224][ T3244] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.115423][ T3244] bridge_slave_1: left allmulticast mode [ 826.123394][ T3244] bridge_slave_1: left promiscuous mode [ 826.130417][ T3244] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.145565][ T3244] bridge_slave_0: left allmulticast mode [ 826.151459][ T3244] bridge_slave_0: left promiscuous mode [ 826.171297][ T3244] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.199961][ T3244] bridge_slave_1: left allmulticast mode [ 826.209734][ T3244] bridge_slave_1: left promiscuous mode [ 826.219917][ T3244] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.236425][ T3244] bridge_slave_0: left allmulticast mode [ 826.247110][ T3244] bridge_slave_0: left promiscuous mode [ 826.254201][ T3244] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.074772][ T5183] Bluetooth: hci1: command tx timeout [ 827.110899][ T1722] kovaplus 0003:1E7D:2D50.001F: couldn't init struct kovaplus_device [ 827.124848][ T1722] kovaplus 0003:1E7D:2D50.001F: couldn't install mouse [ 827.149473][ T1722] kovaplus 0003:1E7D:2D50.001F: probe with driver kovaplus failed with error -71 [ 827.191250][ T1722] usb 4-1: USB disconnect, device number 26 [ 828.132818][ T3244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.167976][ T3244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.184444][ T3244] bond0 (unregistering): Released all slaves [ 828.203829][ T3244] bond0 (unregistering): left promiscuous mode [ 828.211353][ T3244] bond_slave_0: left promiscuous mode [ 828.218266][ T3244] bond_slave_1: left promiscuous mode [ 828.258911][ T3244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.295842][ T3244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.314867][ T3244] bond0 (unregistering): Released all slaves [ 828.350007][ T3244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.407763][ T3244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.425834][ T3244] bond0 (unregistering): Released all slaves [ 828.798147][ T3244] tipc: Disabling bearer [ 828.804230][ T3244] tipc: Left network mode [ 829.070273][T11392] hsr_slave_0: entered promiscuous mode [ 829.088866][T11392] hsr_slave_1: entered promiscuous mode [ 829.098583][T11392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.106483][T11392] Cannot create hsr debugfs directory [ 829.128492][T11394] hsr_slave_0: entered promiscuous mode [ 829.141001][T11394] hsr_slave_1: entered promiscuous mode [ 829.149456][T11394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.157446][T11394] Cannot create hsr debugfs directory [ 829.164574][ T5183] Bluetooth: hci1: command tx timeout [ 829.629967][T11427] chnl_net:caif_netlink_parms(): no params data found [ 829.715751][ T3244] mac80211_hwsim hwsim19 wlan1 (unregistering): left allmulticast mode [ 830.414951][ T3244] batman_adv: batadv0: Interface deactivated: wlan1 [ 830.449849][ T3244] batman_adv: batadv0: Removing interface: wlan1 [ 830.838148][ T3244] hsr_slave_0: left promiscuous mode [ 830.848996][ T3244] hsr_slave_1: left promiscuous mode [ 830.858392][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.874345][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.889178][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.899853][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.926038][ T3244] hsr_slave_0: left promiscuous mode [ 830.935375][ T3244] hsr_slave_1: left promiscuous mode [ 830.945099][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.956105][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.975056][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.985687][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.015942][ T3244] hsr_slave_0: left promiscuous mode [ 831.027479][ T3244] hsr_slave_1: left promiscuous mode [ 831.038681][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.046601][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.062415][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.070182][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.134529][ T3244] veth1_macvtap: left promiscuous mode [ 831.140271][ T3244] veth0_macvtap: left promiscuous mode [ 831.146226][ T3244] veth1_vlan: left promiscuous mode [ 831.151900][ T3244] veth0_vlan: left promiscuous mode [ 831.158949][ T3244] veth1_macvtap: left promiscuous mode [ 831.167504][ T3244] veth0_macvtap: left promiscuous mode [ 831.173546][ T3244] veth1_vlan: left promiscuous mode [ 831.179155][ T3244] veth0_vlan: left promiscuous mode [ 831.187370][ T3244] veth1_macvtap: left promiscuous mode [ 831.196192][ T3244] veth0_macvtap: left promiscuous mode [ 831.202254][ T3244] veth1_vlan: left promiscuous mode [ 831.207772][ T3244] veth0_vlan: left promiscuous mode [ 831.255990][ T5183] Bluetooth: hci1: command tx timeout [ 832.460693][ T3244] team0 (unregistering): Port device team_slave_1 removed [ 832.521069][ T3244] team0 (unregistering): Port device team_slave_0 removed [ 833.150712][ T3244] team0 (unregistering): Port device team_slave_1 removed [ 833.230628][ T3244] team0 (unregistering): Port device team_slave_0 removed [ 833.923766][ T3244] team0 (unregistering): Port device team_slave_1 removed [ 833.975580][ T3244] team0 (unregistering): Port device team_slave_0 removed [ 834.525449][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.533758][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.541821][T11427] bridge_slave_0: entered allmulticast mode [ 834.551032][T11427] bridge_slave_0: entered promiscuous mode [ 834.578579][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.588927][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.601116][T11427] bridge_slave_1: entered allmulticast mode [ 834.612639][T11427] bridge_slave_1: entered promiscuous mode [ 834.765486][T11427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.808374][T11427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.984400][T11427] team0: Port device team_slave_0 added [ 835.002607][T11427] team0: Port device team_slave_1 added [ 835.120256][T11427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.131060][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.160304][T11427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.180159][T11427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.190332][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.219789][T11427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.397144][T11427] hsr_slave_0: entered promiscuous mode [ 835.415805][T11427] hsr_slave_1: entered promiscuous mode [ 836.141535][T11392] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 836.181374][T11392] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 836.224763][T11392] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 836.280654][T11392] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 836.305757][T11377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 836.361461][T11377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 836.437773][T11377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 836.475357][T11377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 836.980762][T11394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 837.058553][T11394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 837.108681][T11394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 837.133903][T11394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 837.419067][T11427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 837.458451][T11427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 837.485556][T11427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 837.560814][T11392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.622294][T11427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 837.735071][T11377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.891485][T11392] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.950920][T11377] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.997974][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.005902][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.109203][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.117038][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.133561][ T3148] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.141277][ T3148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.225731][ T3148] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.233600][ T3148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.577123][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.583930][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.934874][T11394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.122906][T11394] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.270039][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.277917][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.423684][T11427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.448297][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.456077][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.699887][T11427] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.818102][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.825956][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.906130][T11394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 839.951764][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.959513][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.128059][T11392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.418241][T11377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.821314][T11394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.842543][T11392] veth0_vlan: entered promiscuous mode [ 841.913204][T11392] veth1_vlan: entered promiscuous mode [ 842.271548][T11377] veth0_vlan: entered promiscuous mode [ 842.310327][T11392] veth0_macvtap: entered promiscuous mode [ 842.409076][T11427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.427910][T11392] veth1_macvtap: entered promiscuous mode [ 842.486469][T11377] veth1_vlan: entered promiscuous mode [ 842.729695][T11392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.908727][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.924742][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.940144][T11392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.012107][T11377] veth0_macvtap: entered promiscuous mode [ 843.088972][T11392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.101401][T11392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.114120][T11392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.123285][T11392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.174091][T11377] veth1_macvtap: entered promiscuous mode [ 843.195936][T11427] veth0_vlan: entered promiscuous mode [ 843.285677][T11427] veth1_vlan: entered promiscuous mode [ 843.408868][T11377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.421574][T11377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.437556][T11377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.589672][T11377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.600748][T11377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.611061][T11377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.621882][T11377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.644747][T11377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.766332][T11377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.776420][T11377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.785763][T11377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.799150][T11377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.847592][T11427] veth0_macvtap: entered promiscuous mode [ 843.916115][T11427] veth1_macvtap: entered promiscuous mode [ 844.262921][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.278378][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.289613][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.300477][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.319409][T11427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.388600][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.399533][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.409773][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.420551][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.430709][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.442532][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.458837][T11427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.578264][T11427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.587535][T11427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.596875][T11427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.606059][T11427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.908786][T11394] veth0_vlan: entered promiscuous mode [ 845.058741][T11394] veth1_vlan: entered promiscuous mode [ 845.426985][T11394] veth0_macvtap: entered promiscuous mode [ 845.487197][T11394] veth1_macvtap: entered promiscuous mode [ 845.687727][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.701840][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.714389][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.731121][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.743033][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.756919][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.773001][T11394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.981029][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.997812][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.008112][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.018981][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.034016][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.048399][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.058643][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.072537][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.089012][T11394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.143045][T11394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.152345][T11394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.161400][T11394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.173732][T11394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.579843][ T8851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.588904][ T8851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.640536][T11392] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 849.653834][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.774543][T11493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.782753][T11493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.250486][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.258850][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.379287][T11377] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 850.393559][T11377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.511833][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.520114][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.942191][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 851.216976][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 851.258025][ T10] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.269494][ T10] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.280381][ T10] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 851.297322][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 851.379733][ T10] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 851.380678][T11427] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 851.392921][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.398978][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.408954][ T10] usb 2-1: Product: syz [ 851.409075][ T10] usb 2-1: Manufacturer: syz [ 851.409195][ T10] usb 2-1: SerialNumber: syz [ 851.427084][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.443895][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.789876][ T10] usbhid 2-1:1.0: can't add hid device: -22 [ 851.796860][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 851.810372][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.821784][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.853062][ T10] usb 2-1: USB disconnect, device number 24 [ 852.797932][T11570] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 852.805912][T11570] macvlan2: entered allmulticast mode [ 852.814838][T11570] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 852.857041][T11570] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 852.864800][T11570] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 853.030136][ T3244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.038771][ T3244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.120742][T11394] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 853.132779][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.217972][T11493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.226363][T11493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.745188][T11579] lo speed is unknown, defaulting to 1000 [ 853.758068][T11579] lo speed is unknown, defaulting to 1000 [ 853.770326][T11579] lo speed is unknown, defaulting to 1000 [ 854.028132][T11583] loop2: detected capacity change from 0 to 64 [ 854.370816][T11579] infiniband syz1: set active [ 854.380603][T11579] infiniband syz1: added lo [ 854.432662][ T10] lo speed is unknown, defaulting to 1000 [ 854.621800][ T29] audit: type=1804 audit(1723728882.797:174): pid=11583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2602" name="/newroot/3/file0/file1" dev="loop2" ino=5 res=1 errno=0 [ 854.625525][T11579] RDS/IB: syz1: added [ 854.650344][T11579] smc: adding ib device syz1 with port count 1 [ 854.656926][T11579] smc: ib device syz1 port 1 has pnetid [ 854.665102][T11579] lo speed is unknown, defaulting to 1000 [ 855.039965][ T10] lo speed is unknown, defaulting to 1000 [ 855.351197][T11579] lo speed is unknown, defaulting to 1000 [ 855.937709][T11579] lo speed is unknown, defaulting to 1000 [ 856.549008][T11596] loop2: detected capacity change from 0 to 512 [ 856.555195][T11579] lo speed is unknown, defaulting to 1000 [ 856.904220][T11596] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.2606: iget: bogus i_mode (0) [ 857.008274][T11596] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2606: couldn't read orphan inode 17 (err -117) [ 857.078831][T11590] loop4: detected capacity change from 0 to 4096 [ 857.114769][T11596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.284306][T11579] lo speed is unknown, defaulting to 1000 [ 857.342544][T11590] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 857.422244][T11596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2606: bg 0: block 7: invalid block bitmap [ 857.997339][T11590] ntfs3: loop4: Failed to read $UpCase (-4). [ 858.075917][T11377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.732364][ T8710] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 858.973696][ T8710] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 858.986695][ T8710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.064230][ T8710] usb 3-1: config 0 descriptor?? [ 859.110606][ T8710] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 859.405872][ T8710] gp8psk: usb in 128 operation failed. [ 859.478389][T11629] loop1: detected capacity change from 0 to 16 [ 859.547960][T11629] erofs: (device loop1): mounted with root inode @ nid 36. [ 859.656570][ T8710] gp8psk: FW Version = 72.83.24 (0x485318) Build 2115/34/119 [ 859.878557][ T8710] gp8psk: usb in 149 operation failed. [ 859.888897][ T8710] gp8psk: failed to get FPGA version [ 859.903094][ T8710] gp8psk: usb in 138 operation failed. [ 859.914053][ T8710] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-22) [ 859.929256][ T8710] dvb_usb_gp8psk 3-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 859.974341][T11633] vivid-006: disconnect [ 859.997009][T11632] vivid-006: reconnect [ 860.000241][ T8710] usb 3-1: USB disconnect, device number 16 [ 860.507560][T11626] loop0: detected capacity change from 0 to 4096 [ 860.909955][T11643] loop1: detected capacity change from 0 to 256 [ 862.141778][T11648] loop3: detected capacity change from 0 to 4096 [ 862.165294][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'. [ 862.247942][T11648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.258680][T11658] netlink: 'syz.0.2632': attribute type 1 has an invalid length. [ 862.278006][T11658] netlink: 'syz.0.2632': attribute type 2 has an invalid length. [ 862.636863][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.744160][ T5235] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 862.993606][ T5235] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 863.003413][ T5235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.050725][ T5235] usb 2-1: config 0 descriptor?? [ 863.097540][ T5235] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 863.750764][ T5235] gp8psk: usb in 128 operation failed. [ 863.994907][ T5235] gp8psk: usb in 137 operation failed. [ 864.007744][ T5235] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-22) [ 864.019478][ T5235] dvb_usb_gp8psk 2-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 864.059592][ T5235] usb 2-1: USB disconnect, device number 25 [ 864.161974][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 864.590644][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 864.627867][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 864.882073][ T8710] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 865.153142][ T8710] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 865.162780][ T8710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.207322][ T8710] usb 5-1: config 0 descriptor?? [ 865.246600][ T8710] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 865.650519][ T29] audit: type=1326 audit(1723728893.877:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.0.2651" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 866.113486][ T8710] gspca_sonixj: reg_r err -71 [ 866.118720][ T8710] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 866.134929][ T8710] usb 5-1: USB disconnect, device number 19 [ 867.480482][T11723] gretap0: entered promiscuous mode [ 867.493029][T11723] macsec1: entered promiscuous mode [ 867.639888][T11723] gretap0: left promiscuous mode [ 868.105315][T11728] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 869.811533][T11743] netlink: 'syz.3.2671': attribute type 6 has an invalid length. [ 870.934996][T11755] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 871.691021][T11761] loop0: detected capacity change from 0 to 2048 [ 871.780473][T11761] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 871.812581][T11753] loop2: detected capacity change from 0 to 4096 [ 871.837105][T11753] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 871.862951][T11765] loop3: detected capacity change from 0 to 64 [ 871.872921][T11761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.042234][T11765] Process accounting resumed [ 872.103939][T11427] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.451453][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'. [ 873.864758][T11778] loop3: detected capacity change from 0 to 4096 [ 873.974123][T11790] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 874.495372][T11778] overlayfs: upper fs does not support tmpfile. [ 874.571927][T11778] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 874.579765][T11778] overlayfs: conflicting lowerdir path [ 875.250062][T11805] loop2: detected capacity change from 0 to 1024 [ 875.773645][ T1063] hfsplus: b-tree write err: -5, ino 4 [ 876.732255][ T8710] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 876.942057][ T8710] usb 4-1: Using ep0 maxpacket: 8 [ 876.987025][ T8710] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.001758][ T8710] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.015232][ T8710] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 877.032632][ T8710] usb 4-1: config 1 interface 0 has no altsetting 0 [ 877.082579][T11831] tap0: tun_chr_ioctl cmd 1074025677 [ 877.088799][T11831] tap0: linktype set to 821 [ 877.097819][ T8710] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 877.098002][ T8710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.098151][ T8710] usb 4-1: Product: syz [ 877.098269][ T8710] usb 4-1: Manufacturer: syz [ 877.098386][ T8710] usb 4-1: SerialNumber: syz [ 877.371219][ T8710] usbhid 4-1:1.0: can't add hid device: -22 [ 877.378383][ T8710] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 877.429272][ T8710] usb 4-1: USB disconnect, device number 27 [ 877.713963][T11834] loop4: detected capacity change from 0 to 16 [ 877.749775][T11834] erofs: (device loop4): mounted with root inode @ nid 36. [ 877.788728][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.798388][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'. [ 877.820782][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2715'. [ 878.317456][T11829] loop2: detected capacity change from 0 to 4096 [ 878.994129][T11829] overlayfs: upper fs does not support tmpfile. [ 879.041508][T11829] overlayfs: workdir/#12 already exists [ 879.698701][T11855] loop0: detected capacity change from 0 to 512 [ 879.818979][T11855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 879.832492][T11855] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 879.940002][T11855] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 879.951935][T11855] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 879.962374][T11855] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.2733: Failed to acquire dquot type 0 [ 880.279851][T11865] tap0: tun_chr_ioctl cmd 1074025677 [ 880.292590][T11865] tap0: linktype set to 821 [ 880.331504][T11427] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 880.432944][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2726'. [ 880.638260][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.645957][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'. [ 881.150527][T11878] loop4: detected capacity change from 0 to 8 [ 881.407755][ T5235] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 881.682347][ T5235] usb 4-1: Using ep0 maxpacket: 16 [ 881.721388][T11872] loop2: detected capacity change from 0 to 4096 [ 881.737191][ T5235] usb 4-1: config 1 has an invalid interface number: 184 but max is 0 [ 881.745951][ T5235] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.756438][ T5235] usb 4-1: config 1 has no interface number 0 [ 881.762874][ T5235] usb 4-1: too many endpoints for config 1 interface 184 altsetting 156: 219, using maximum allowed: 30 [ 881.774455][ T5235] usb 4-1: config 1 interface 184 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 881.788340][ T5235] usb 4-1: config 1 interface 184 has no altsetting 0 [ 881.812861][T11872] ntfs3: loop2: try to read out of volume at offset 0x1ffc00 [ 881.824942][T11872] ntfs3: loop2: Failed to load $MFT. [ 881.854153][ T5235] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 881.863897][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 881.872401][ T5235] usb 4-1: SerialNumber: syz [ 881.950683][ T5235] usb-storage 4-1:1.184: USB Mass Storage device detected [ 882.016133][ T5235] usb-storage 4-1:1.184: Quirks match for vid 04e6 pid 0007: 1 [ 882.031130][ T5235] usb-storage 4-1:1.184: This device (04e6,0007,0175 S ff P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.11.0-rc3-syzkaller-00066-g1fb918967b56) [ 882.031130][ T5235] Please send a copy of this message to and [ 882.159114][ T5235] usb 4-1: USB disconnect, device number 28 [ 882.359477][T11892] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 882.368823][T11892] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 882.381292][T11892] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 882.390688][T11892] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 882.413191][T11892] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 882.952629][T11886] loop1: detected capacity change from 0 to 4096 [ 883.148419][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.162929][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 883.778824][T11886] overlayfs: upper fs does not support tmpfile. [ 883.810493][T11886] overlayfs: workdir/#14 already exists [ 884.772172][T11920] loop2: detected capacity change from 0 to 1764 [ 885.108513][T11912] loop3: detected capacity change from 0 to 4096 [ 885.138623][T11912] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 885.509171][T11912] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 886.767375][T11948] netlink: 'syz.0.2761': attribute type 4 has an invalid length. [ 886.782877][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2762'. [ 887.960462][T11961] netlink: 'syz.1.2769': attribute type 4 has an invalid length. [ 888.125032][T11965] loop4: detected capacity change from 0 to 256 [ 889.102578][T11980] gretap0: entered promiscuous mode [ 889.108223][T11980] macsec1: entered promiscuous mode [ 889.200741][T11980] gretap0: left promiscuous mode [ 889.917519][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 890.924267][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 891.713373][T12018] loop2: detected capacity change from 0 to 512 [ 891.742195][T12018] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 891.908454][T12018] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 891.933178][T12018] EXT4-fs (loop2): 1 truncate cleaned up [ 891.941062][T12018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.198660][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2794'. [ 892.293653][T11377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.395585][T12029] block nbd0: not configured, cannot reconfigure [ 892.846134][T12035] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 893.566227][T12047] ip6gretap0: entered promiscuous mode [ 893.589150][T12043] loop0: detected capacity change from 0 to 1764 [ 893.656018][T12047] ip6gretap0: left promiscuous mode [ 893.657376][T12043] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 893.657831][T12043] ISOFS: unable to read i-node block [ 893.657912][T12043] isofs_fill_super: get root inode failed [ 895.213192][T12058] delete_channel: no stack [ 895.239063][T12057] delete_channel: no stack [ 896.418455][T12073] netlink: 'syz.2.2814': attribute type 29 has an invalid length. [ 896.472092][T12076] netlink: 'syz.2.2814': attribute type 29 has an invalid length. [ 896.563143][T12073] netlink: 'syz.2.2814': attribute type 29 has an invalid length. [ 897.467479][T12086] loop1: detected capacity change from 0 to 1024 [ 897.866204][ T3097] hfsplus: b-tree write err: -5, ino 4 [ 899.572011][ T44] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 899.835187][ T44] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 899.849280][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.891452][ T44] usb 5-1: config 0 descriptor?? [ 899.929749][ T44] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 899.996817][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.004398][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.713541][ T44] gp8psk: usb in 128 operation failed. [ 900.924685][ T44] gp8psk: usb in 137 operation failed. [ 900.930528][ T44] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-22) [ 900.940282][ T44] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 900.983045][ T44] usb 5-1: USB disconnect, device number 20 [ 901.331448][T12124] loop1: detected capacity change from 0 to 24 [ 901.355863][T12124] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 902.900524][T12142] netlink: 'syz.2.2847': attribute type 5 has an invalid length. [ 904.229913][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'. [ 904.261983][ T44] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 904.464398][T12161] netlink: 'syz.2.2854': attribute type 29 has an invalid length. [ 904.537718][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 904.546502][T12161] netlink: 'syz.2.2854': attribute type 29 has an invalid length. [ 904.580690][ T44] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 904.590005][ T44] usb 5-1: config 150 has no interface number 0 [ 904.596702][ T44] usb 5-1: config 150 interface 204 has no altsetting 0 [ 904.604052][ T44] usb 5-1: config 150 interface 1 has no altsetting 0 [ 904.606123][T12162] netlink: 'syz.2.2854': attribute type 29 has an invalid length. [ 904.721761][ T44] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 904.731368][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.739897][ T44] usb 5-1: Product: syz [ 904.744658][ T44] usb 5-1: Manufacturer: syz [ 904.749598][ T44] usb 5-1: SerialNumber: syz [ 905.082138][ T44] xr_serial 5-1:150.204: xr_serial converter detected [ 905.793134][ T44] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 905.800154][ T44] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 905.861360][ T44] usb 5-1: USB disconnect, device number 21 [ 905.870315][ T44] xr_serial 5-1:150.204: device disconnected [ 906.167970][T12174] loop3: detected capacity change from 0 to 256 [ 907.724872][ T5240] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 907.970709][ T5240] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=16.ba [ 907.980580][ T5240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.062304][ T5240] usb 1-1: config 0 descriptor?? [ 908.088415][ T5240] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 908.449794][ T5240] usb 1-1: USB disconnect, device number 27 [ 909.528764][T12221] block nbd1: not configured, cannot reconfigure [ 909.968186][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2879'. [ 910.160590][ T29] audit: type=1326 audit(1723728938.397:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 910.187425][ T29] audit: type=1326 audit(1723728938.427:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 910.216056][ T29] audit: type=1326 audit(1723728938.457:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 910.240942][ T29] audit: type=1326 audit(1723728938.457:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 910.349879][ T29] audit: type=1326 audit(1723728938.597:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 910.373442][ T29] audit: type=1326 audit(1723728938.597:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 910.400340][ T29] audit: type=1326 audit(1723728938.607:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 910.424181][ T29] audit: type=1326 audit(1723728938.607:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73ed5a7 code=0x7ffc0000 [ 910.446996][ T29] audit: type=1326 audit(1723728938.607:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 910.469509][ T29] audit: type=1326 audit(1723728938.607:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73ed5a7 code=0x7ffc0000 [ 911.546223][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2891'. [ 911.574932][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2891'. [ 912.631350][T12256] loop1: detected capacity change from 0 to 512 [ 912.678205][T12256] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 912.692678][T12255] loop0: detected capacity change from 0 to 1024 [ 912.931962][T12256] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 913.007057][T12256] EXT4-fs (loop1): 1 truncate cleaned up [ 913.018218][T12256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.049492][T12261] loop4: detected capacity change from 0 to 1764 [ 913.126498][T12261] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 913.136657][T12261] ISOFS: unable to read i-node block [ 913.142325][T12261] isofs_fill_super: get root inode failed [ 913.306046][ T3148] hfsplus: b-tree write err: -5, ino 4 [ 913.405762][T11392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.702010][T12274] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 914.421445][T12284] loop0: detected capacity change from 0 to 256 [ 914.498316][T12284] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 915.186199][T12291] loop3: detected capacity change from 0 to 512 [ 915.222333][T12292] misc userio: Can't change port type on an already running userio instance [ 915.245070][T12291] EXT4-fs: Ignoring removed orlov option [ 915.266735][T12291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 915.326865][T12291] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2912: casefold flag without casefold feature [ 915.397047][T12291] EXT4-fs (loop3): Remounting filesystem read-only [ 915.413551][T12291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.784673][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.997953][T12303] serio: Serial port ttynull [ 917.131994][T12309] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 917.822495][T12329] netlink: 'syz.3.2929': attribute type 64 has an invalid length. [ 917.834142][T12329] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 918.205196][T12335] netlink: 'syz.0.2931': attribute type 3 has an invalid length. [ 918.341191][T12334] netlink: 'syz.1.2932': attribute type 5 has an invalid length. [ 918.435140][ T5183] Bluetooth: hci0: command 0x0401 tx timeout [ 918.731000][T12342] loop3: detected capacity change from 0 to 256 [ 918.918811][T12342] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010530, chksum : 0x90502ed2, utbl_chksum : 0xe619d30d) [ 919.405649][ T5240] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 919.649180][ T5240] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.663045][ T5240] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.736035][ T5240] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 919.745813][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 919.757274][ T5240] usb 5-1: SerialNumber: syz [ 919.870740][T12350] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 920.033763][ T5240] usb 5-1: 0:2 : does not exist [ 920.120186][ T5240] usb 5-1: USB disconnect, device number 22 [ 920.184579][T12361] input: syz1 as /devices/virtual/input/input25 [ 920.777010][T12367] loop0: detected capacity change from 0 to 24 [ 920.810669][T12365] loop2: detected capacity change from 0 to 2048 [ 920.868943][T12367] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 920.929833][T12365] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 921.152698][T12370] loop4: detected capacity change from 0 to 256 [ 921.168593][ T5183] Bluetooth: hci0: command 0x0401 tx timeout [ 921.191215][T12370] vfat: Bad value for 'time_offset' [ 923.062037][T12386] loop3: detected capacity change from 0 to 2048 [ 923.126993][T12386] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 923.138135][T12386] UDF-fs: Scanning with blocksize 512 failed [ 923.140341][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 923.230150][T12386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 923.335285][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 923.335364][ T29] audit: type=1800 audit(1723728951.637:198): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2954" name="file2" dev="loop3" ino=819 res=0 errno=0 [ 923.752610][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 923.830087][T12391] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 923.963428][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 924.455339][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 925.082729][ T5183] Bluetooth: hci0: command 0x0401 tx timeout [ 925.200888][T12421] loop3: detected capacity change from 0 to 16 [ 925.283514][T12421] erofs: (device loop3): mounted with root inode @ nid 36. [ 926.011355][T12417] loop2: detected capacity change from 0 to 4096 [ 926.107751][T12417] EXT4-fs: Ignoring removed nobh option [ 926.113860][T12417] EXT4-fs: Ignoring removed i_version option [ 926.235719][T12417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.404747][ T29] audit: type=1800 audit(2000000001.120:199): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2967" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 926.661834][ T8710] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 926.926793][ T8710] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 926.938780][ T8710] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 926.951999][ T8710] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 926.961427][ T8710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.029938][T12435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 927.105819][ T8710] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 927.217463][T12443] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 927.275665][T11377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.471393][ T5235] usb 5-1: USB disconnect, device number 23 [ 927.859335][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2981'. [ 928.664912][ T1043] Bluetooth: hci3: Frame reassembly failed (-84) [ 928.897412][T12466] loop2: detected capacity change from 0 to 1024 [ 929.215673][ T11] hfsplus: b-tree write err: -5, ino 4 [ 929.270459][T12473] input: syz0 as /devices/virtual/input/input26 [ 929.869410][T12470] loop3: detected capacity change from 0 to 4096 [ 929.896293][T12470] EXT4-fs: Ignoring removed nobh option [ 929.905917][T12470] EXT4-fs: Ignoring removed i_version option [ 929.980978][T12470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.211094][ T29] audit: type=1800 audit(2000000004.890:200): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2991" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 930.675002][ T5183] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 930.744501][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.672211][ T8710] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 931.940250][ T8710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.954970][ T8710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.965326][ T8710] usb 4-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 931.977203][ T8710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.039504][ T8710] usb 4-1: config 0 descriptor?? [ 932.604151][ T8710] wacom 0003:056A:00B0.0020: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 932.676159][ T8710] wacom 0003:056A:00B0.0020: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.3-1/input0 [ 932.691312][ T8710] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B0.0020/input/input27 [ 932.897654][ T8710] usb 4-1: USB disconnect, device number 29 [ 933.310421][T12518] loop2: detected capacity change from 0 to 2048 [ 933.367277][T12518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 933.616231][ T5183] Bluetooth: hci0: unexpected event for opcode 0x080d [ 933.688847][T12516] loop4: detected capacity change from 0 to 4096 [ 933.707018][T12516] EXT4-fs: Ignoring removed nobh option [ 933.713644][T12516] EXT4-fs: Ignoring removed i_version option [ 933.805003][T12516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.827193][T12529] loop0: detected capacity change from 0 to 1024 [ 933.861061][T11377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.929249][ T29] audit: type=1800 audit(2000000008.640:201): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3011" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 934.019607][T12529] hfsplus: bad catalog entry type [ 934.325446][ T3097] hfsplus: b-tree write err: -5, ino 4 [ 934.456572][ T1722] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 934.492120][T11394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.750290][ T1722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.751137][T12537] loop2: detected capacity change from 0 to 2048 [ 934.765351][ T1722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.765610][ T1722] usb 4-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00 [ 934.765782][ T1722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.804238][ T1722] usb 4-1: config 0 descriptor?? [ 934.889709][T12537] EXT4-fs: Ignoring removed orlov option [ 935.010931][T12537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 935.162721][T12544] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 935.194893][T12544] EXT4-fs (loop2): Remounting filesystem read-only [ 935.285241][ T1722] hid-generic 0003:05AC:0062.0021: unbalanced delimiter at end of report description [ 935.313720][T12546] loop1: detected capacity change from 0 to 1024 [ 935.334773][ T1722] hid-generic 0003:05AC:0062.0021: probe with driver hid-generic failed with error -22 [ 935.484225][T11377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.519070][ T8710] usb 4-1: USB disconnect, device number 30 [ 935.644619][ T3097] hfsplus: b-tree write err: -5, ino 4 [ 936.120633][T12559] batadv0: entered promiscuous mode [ 936.127152][T12559] macsec1: entered promiscuous mode [ 936.133792][T12559] macsec1: entered allmulticast mode [ 936.139329][T12559] batadv0: entered allmulticast mode [ 936.319665][T12559] batadv0: left allmulticast mode [ 936.329375][T12559] batadv0: left promiscuous mode [ 936.634799][T12565] loop4: detected capacity change from 0 to 1764 [ 936.679742][T12565] iso9660: Unknown parameter 'ÿÿÿÿ' [ 937.106103][T12570] loop0: detected capacity change from 0 to 1024 [ 937.633332][ T5187] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 937.645091][ T5187] Bluetooth: hci0: Injecting HCI hardware error event [ 937.652883][ T5187] Bluetooth: hci0: hardware error 0x00 [ 937.863065][T12581] bridge_slave_1: left allmulticast mode [ 937.869009][T12581] bridge_slave_1: left promiscuous mode [ 937.873604][ T4556] Bluetooth: hci4: command 0x0406 tx timeout [ 937.876142][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.983229][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3038'. [ 938.043567][T12581] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 938.613886][T12593] IPv6: NLM_F_CREATE should be specified when creating new route [ 938.622789][T12593] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3041'. [ 939.150256][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3046'. [ 939.732741][ T5187] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 939.775585][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3050'. [ 939.797102][T12614] loop0: detected capacity change from 0 to 256 [ 939.838921][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3050'. [ 940.080643][T12616] [U] [ 940.083831][T12616] [U] [ 940.086877][T12616] [U] [ 940.089890][T12616] [U] [ 940.193968][ T1722] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 940.218599][T12616] [U] [ 940.221713][T12616] [U] [ 940.224756][T12616] [U] [ 940.227813][T12616] [U] [ 940.252757][T12616] [U] [ 940.255895][T12616] [U] [ 940.259048][T12616] [U] [ 940.315221][T12615] [U] [ 940.396663][ T1722] usb 1-1: Using ep0 maxpacket: 32 [ 940.427202][ T1722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.438805][ T1722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.449046][ T1722] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 940.458529][ T1722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.504302][ T1722] usb 1-1: config 0 descriptor?? [ 940.673979][T12620] loop3: detected capacity change from 0 to 1024 [ 940.697300][T12620] EXT4-fs: Ignoring removed nobh option [ 940.811509][T12620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.062994][ T1722] hid-led 0003:1294:1320.0022: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 941.081071][ T1722] hid-led 0003:1294:1320.0022: Riso Kagaku Webmail Notifier initialized [ 941.263205][ T8733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.270122][ T8710] usb 1-1: USB disconnect, device number 28 [ 941.321963][ T5240] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 941.322119][ T5235] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 941.340037][ T5240] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 941.350438][ T5240] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 941.597856][ T5235] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 941.625619][ T3148] ===================================================== [ 941.633361][ T3148] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x539/0xb40 [ 941.641852][ T3148] n_tty_receive_buf_closing+0x539/0xb40 [ 941.647725][ T3148] n_tty_receive_buf_common+0x196b/0x2490 [ 941.653804][ T3148] n_tty_receive_buf2+0x4c/0x60 [ 941.658878][ T3148] tty_ldisc_receive_buf+0xd0/0x290 [ 941.664578][ T3148] tty_port_default_receive_buf+0xdf/0x190 [ 941.670670][ T3148] flush_to_ldisc+0x473/0xdb0 [ 941.675725][ T3148] process_scheduled_works+0xae0/0x1c40 [ 941.681623][ T3148] worker_thread+0xea5/0x1520 [ 941.686533][ T3148] kthread+0x3dd/0x540 [ 941.690845][ T3148] ret_from_fork+0x6d/0x90 [ 941.695674][ T3148] ret_from_fork_asm+0x1a/0x30 [ 941.700682][ T3148] [ 941.703368][ T3148] Uninit was created at: [ 941.707897][ T3148] __kmalloc_noprof+0x661/0xf30 [ 941.713126][ T3148] __tty_buffer_request_room+0x36e/0x6d0 [ 941.719049][ T3148] __tty_insert_flip_string_flags+0x140/0x570 [ 941.729883][ T3148] uart_insert_char+0x39e/0xa10 [ 941.736344][ T3148] serial8250_read_char+0x1a7/0x5d0 [ 941.741890][ T3148] serial8250_handle_irq+0x77a/0xb80 [ 941.747429][ T3148] serial8250_default_handle_irq+0x120/0x2b0 [ 941.753761][ T3148] serial8250_interrupt+0xc5/0x360 [ 941.759089][ T3148] __handle_irq_event_percpu+0x118/0xca0 [ 941.765194][ T3148] handle_irq_event+0xef/0x2c0 [ 941.770160][ T3148] handle_edge_irq+0x340/0xfb0 [ 941.775276][ T3148] __common_interrupt+0x97/0x1f0 [ 941.780469][ T3148] common_interrupt+0x8f/0xa0 [ 941.785529][ T3148] asm_common_interrupt+0x2b/0x40 [ 941.790785][ T3148] [ 941.793381][ T3148] CPU: 1 UID: 0 PID: 3148 Comm: kworker/u8:16 Not tainted 6.11.0-rc3-syzkaller-00066-g1fb918967b56 #0 [ 941.804671][ T3148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 941.815009][ T3148] Workqueue: events_unbound flush_to_ldisc [ 941.821085][ T3148] ===================================================== [ 941.832784][ T3148] Disabling lock debugging due to kernel taint [ 941.839090][ T3148] Kernel panic - not syncing: kmsan.panic set ... [ 941.845676][ T3148] CPU: 1 UID: 0 PID: 3148 Comm: kworker/u8:16 Tainted: G B 6.11.0-rc3-syzkaller-00066-g1fb918967b56 #0 [ 941.858349][ T3148] Tainted: [B]=BAD_PAGE [ 941.862634][ T3148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 941.872865][ T3148] Workqueue: events_unbound flush_to_ldisc [ 941.879015][ T3148] Call Trace: [ 941.882433][ T3148] [ 941.885489][ T3148] dump_stack_lvl+0x216/0x2d0 [ 941.890405][ T3148] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 941.896469][ T3148] dump_stack+0x1e/0x30 [ 941.900949][ T3148] panic+0x4e2/0xcd0 [ 941.905064][ T3148] ? kmsan_get_metadata+0x41/0x1c0 [ 941.910442][ T3148] kmsan_report+0x2c7/0x2d0 [ 941.915184][ T3148] ? kmsan_get_metadata+0x13e/0x1c0 [ 941.920645][ T3148] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 941.926718][ T3148] ? __msan_warning+0x95/0x120 [ 941.931709][ T3148] ? n_tty_receive_buf_closing+0x539/0xb40 [ 941.937845][ T3148] ? n_tty_receive_buf_common+0x196b/0x2490 [ 941.944067][ T3148] ? n_tty_receive_buf2+0x4c/0x60 [ 941.949322][ T3148] ? tty_ldisc_receive_buf+0xd0/0x290 [ 941.954957][ T3148] ? tty_port_default_receive_buf+0xdf/0x190 [ 941.961216][ T3148] ? flush_to_ldisc+0x473/0xdb0 [ 941.966319][ T3148] ? process_scheduled_works+0xae0/0x1c40 [ 941.972276][ T3148] ? worker_thread+0xea5/0x1520 [ 941.977367][ T3148] ? kthread+0x3dd/0x540 [ 941.981857][ T3148] ? ret_from_fork+0x6d/0x90 [ 941.986661][ T3148] ? ret_from_fork_asm+0x1a/0x30 [ 941.991842][ T3148] ? kmsan_get_metadata+0x13e/0x1c0 [ 941.997286][ T3148] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 942.003373][ T3148] ? kmsan_get_metadata+0x13e/0x1c0 [ 942.008815][ T3148] ? kmsan_get_metadata+0x13e/0x1c0 [ 942.014272][ T3148] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 942.020340][ T3148] ? kmsan_get_metadata+0x13e/0x1c0 [ 942.025787][ T3148] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 942.031859][ T3148] ? kmsan_get_metadata+0x13e/0x1c0 [ 942.037333][ T3148] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 942.043391][ T3148] ? kmsan_get_metadata+0x13e/0x1c0 [ 942.048815][ T3148] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 942.054851][ T3148] __msan_warning+0x95/0x120 [ 942.059645][ T3148] n_tty_receive_buf_closing+0x539/0xb40 [ 942.065512][ T3148] n_tty_receive_buf_common+0x196b/0x2490 [ 942.071493][ T3148] n_tty_receive_buf2+0x4c/0x60 [ 942.076543][ T3148] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 942.082288][ T3148] tty_ldisc_receive_buf+0xd0/0x290 [ 942.087752][ T3148] tty_port_default_receive_buf+0xdf/0x190 [ 942.093828][ T3148] flush_to_ldisc+0x473/0xdb0 [ 942.098770][ T3148] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 942.105440][ T3148] ? __pfx_flush_to_ldisc+0x10/0x10 [ 942.111068][ T3148] process_scheduled_works+0xae0/0x1c40 [ 942.116862][ T3148] worker_thread+0xea5/0x1520 [ 942.121782][ T3148] kthread+0x3dd/0x540 [ 942.126057][ T3148] ? __pfx_worker_thread+0x10/0x10 [ 942.131383][ T3148] ? __pfx_kthread+0x10/0x10 [ 942.136209][ T3148] ret_from_fork+0x6d/0x90 [ 942.140818][ T3148] ? __pfx_kthread+0x10/0x10 [ 942.145639][ T3148] ret_from_fork_asm+0x1a/0x30 [ 942.150652][ T3148] [ 942.154121][ T3148] Kernel Offset: disabled [ 942.158537][ T3148] Rebooting in 86400 seconds..