last executing test programs: 15.281537524s ago: executing program 1 (id=2493): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 14.747008331s ago: executing program 1 (id=2497): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) 14.382351958s ago: executing program 1 (id=2500): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x5411, &(0x7f0000000040)) 13.857036027s ago: executing program 1 (id=2502): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1010c16, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@umask={'umask', 0x3d, 0x2}}, {@errors_continue}, {@errors_remount}, {@namecase}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee01}}, {@umask={'umask', 0x3d, 0x243}}]}, 0x9, 0x1505, &(0x7f0000000180)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) 13.024213649s ago: executing program 1 (id=2510): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="008fed54558fbac87d9dcfdda88ee7fab40937e3f072e3fab06f7bb9c1b3d27b2086b61a0630e4238a7abf7ff3cecd20b2280b72a2784f828330d92a893efe7defa5f66a47a7de00499a9bf6b1120ccb4f9ef58e011a", @ANYBLOB="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", @ANYRESOCT, @ANYRESDEC], 0x1, 0x5d3, &(0x7f0000002100)="$eJzs3U9oHNcdB/DvrGXZ64KzSewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUIp6v9rjznkkB7UQ069pvQQmp576l13Q++6uczs7GptKYoUy9pV8/nA2/fevpk37/0887Qzi9kAX1mLb+b0RoosXnljvaxvbXZ6W5udB8NykjNJGsnMIEuxkhSfJTczSPl6+WbdXfF5x3n94ScfXv7g486gNlOnavvGfvsdzEadMpfkVJ0fVX+3n7q/YjTDMmCXhoGDSXu0y8Zhdn/K6xaYBsXg7+YureRckrP154DUq0PjeEd39A61ygEAAMAJ9dx2trOe85MeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwk9e//F3VqDMtzKYa//z9bv5e6fKJ9OukBAAAAAAAAAMAR+NZ2trOe88P6o6L6zv/VqnKhev1a3s1aulnN1axnKf30s5p2ktZYR7PrS/3+avsAey7suefC8cwXAAAAAAAAAP5P/TaLO9//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANCiSU4OsSheG5VYaM0nOJpktt9tI/jEsn2SfTnoAAAAAcAye28521nN+WH9UVPf8L1X3/WfzblbSz3L66aWbO9WzgMFdf2Nrs9Pb2uw8KNPufn/830MNo+oxg2cPex95vtri4miPxfwsv8iVzOVWVrOcX2Yp/XQzl59WpaUUadVPL1rDce493puP1W590VhfqUbSzN0sV2O7mtt5O73cSaOaQ7XN/kf8TRmd4ke1A8boTp2XM/pznU+HVhWR06OIzNexL6Px/P6ROOR58uSR2mmMnkFdeAYxP1fnZaz/ONUxXxg7+17aPxLJd/7zz1v3eiv3791duzI9U/qSnoxEZywSL3+lIjFbR2Owih5utXy12vd8lvPzvJ076eZ65tPOjcznB1lI57Ez7OIBrrXG4a61S9+uC80kf6rz6VDG9fmxuI6vdK2qbfydnSi9cPQr0sw36kJ5jN/V+XR4MhLtsUi8uH8k/vKofF3rrdxfvbf0zgGPd7nOy8v2D1O1NpfnywvlP1ZVe/zsKNte3LOtXbVdGLU1drVdHLV90ZU6W3+G293ToO3lPds6VdsrY217fcoBYOqde+3cbPNh89/Nj5q/b95rvnH2J2dunPnmbE7/a+bvp/7W+Gvjh8Vr+Si/3rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1996/v9TrdVcVFBQURoVJr0zAs3at/+Cda2vvvf/d5QdLb3Xf6q4s3Lh+43rn++3vXbu73OvOD14nPUrgWdj5oz/pkQAAAAAAAAAAAAAHdRz/nWDScwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtsU3c3ojRdrzV+fL+tZmp1emYXlny5kkjSTFr5Lis+RmBimtse6KzzvO6w8/+fDyBx93dvqaGW7f2G+/g9moU+aSnKrzo+rv9lP3V4xmWAbs0jBwMGn/CwAA//+tLA7Z") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x6880, 0x0) 12.423266984s ago: executing program 1 (id=2515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000100)) 9.520500725s ago: executing program 2 (id=2525): r0 = socket(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000040), &(0x7f0000000100)=@tcp=r0}, 0x20) 9.30441135s ago: executing program 3 (id=2527): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x85}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00008500000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.743732795s ago: executing program 2 (id=2529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="9eef", 0x2) 3.208735502s ago: executing program 3 (id=2537): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r0, r0, 0x8, 0x0) 3.036223109s ago: executing program 2 (id=2538): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfd, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x8, 0x12, 0x10000) 2.870956694s ago: executing program 0 (id=2539): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x12}, 0x18) 2.715630862s ago: executing program 3 (id=2540): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$rose(r0, 0x104, 0x2, 0x0, &(0x7f0000000700)) 2.432863947s ago: executing program 0 (id=2541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000000080003400000000a0900010073797a30000000000900020073797a"], 0x5c}}, 0x0) 2.343084587s ago: executing program 4 (id=2542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c41"], 0x30}}, 0x0) 2.129169982s ago: executing program 3 (id=2543): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x7fffffff, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000007a80)={0x2}) 2.10458975s ago: executing program 2 (id=2544): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, r0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 2.003555731s ago: executing program 0 (id=2545): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f00000002c0)='rmdF\x17\x16\xbc\xec', 0x40, 0x4, 0x0) mq_notify(r0, &(0x7f0000001200)={0x0, 0x3f, 0x1}) 1.916247008s ago: executing program 4 (id=2546): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)) 1.610678779s ago: executing program 3 (id=2547): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x5, 0x8}) 1.513150681s ago: executing program 4 (id=2548): r0 = socket$inet(0x2, 0x3, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 1.469805532s ago: executing program 0 (id=2549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 961.529958ms ago: executing program 2 (id=2550): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r0, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 955.112905ms ago: executing program 4 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 931.283328ms ago: executing program 3 (id=2552): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 683.733727ms ago: executing program 0 (id=2553): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="4003d4f64f32d3ad267b70290cc9704d", 0x10}, {&(0x7f00000002c0)="5cf28ab5e27130e3da89433ff6af50cbe97214379535b72d3d47b9bc1da8d8eb6164db005562bfc6a14390c0eb2c7213cc513ea3bdf0e71ad0a65e4a07ecb25972bac9d2b61c007df418083e6d5050c35d0605546cf11370f3274e99238a3fd3ec18180a2a9e78f42a883a99ae6b0202501fc4af96d8464b18ec0443c7e9e0f00a77d0c68fd912", 0x87}, {&(0x7f0000000380)="58cd50caa5528fb3431d4f16c9", 0xd}, {&(0x7f0000000e00)="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", 0x29c}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 472.983584ms ago: executing program 4 (id=2554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 370.873377ms ago: executing program 2 (id=2555): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'wg1\x00', {0x2, 0xfffd}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0xfffffffffffffdd9) 162.408523ms ago: executing program 0 (id=2556): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 0s ago: executing program 4 (id=2557): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40004100) kernel console output (not intermixed with test programs): 430.190350][ T8] kye 0003:0458:5013.001C: unknown main item tag 0x0 [ 430.197533][ T8] kye 0003:0458:5013.001C: unknown main item tag 0x0 [ 430.204766][ T8] kye 0003:0458:5013.001C: unknown main item tag 0x0 [ 430.237659][ T8] kye 0003:0458:5013.001C: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 430.259966][ T8] kye 0003:0458:5013.001C: tablet-enabling feature report not found [ 430.271274][ T8] kye 0003:0458:5013.001C: tablet enabling failed [ 430.339941][ T8] usb 4-1: USB disconnect, device number 13 [ 431.054816][ T7650] loop4: detected capacity change from 0 to 256 [ 431.122891][ T7650] exfat: Deprecated parameter 'utf8' [ 431.128736][ T7650] exfat: Deprecated parameter 'namecase' [ 431.244107][ T7650] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 432.274063][ T7667] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1018'. [ 432.888475][ T7677] loop2: detected capacity change from 0 to 512 [ 432.944252][ T7677] EXT4-fs: Ignoring removed orlov option [ 433.119961][ T7677] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 433.129449][ T7677] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 433.188495][ T7677] EXT4-fs (loop2): mount failed [ 434.428955][ T7707] loop2: detected capacity change from 0 to 1024 [ 434.475601][ T7707] EXT4-fs: Ignoring removed orlov option [ 434.481658][ T7707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.599279][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.827805][ T7710] loop1: detected capacity change from 0 to 2048 [ 434.912897][ T7710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.114287][ T5181] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.575082][ T5234] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 435.805905][ T5234] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 435.815446][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.849738][ T5234] usb 5-1: config 0 descriptor?? [ 436.324808][ T5234] hackrf 5-1:0.0: Board ID: 00 [ 436.329887][ T5234] hackrf 5-1:0.0: Firmware version: [ 436.424455][ T5234] hackrf 5-1:0.0: Registered as swradio16 [ 436.439468][ T5234] hackrf 5-1:0.0: Registered as swradio17 [ 436.448134][ T5234] hackrf 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 436.587904][ T4634] usb 5-1: USB disconnect, device number 17 [ 436.819072][ T7730] loop3: detected capacity change from 0 to 4096 [ 436.929018][ T7730] NILFS (loop3): invalid segment: Checksum error in segment payload [ 436.937590][ T7730] NILFS (loop3): trying rollback from an earlier position [ 436.983000][ T7744] loop1: detected capacity change from 0 to 64 [ 437.041874][ T7730] NILFS (loop3): recovery complete [ 437.056824][ T7747] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.596649][ T7738] loop2: detected capacity change from 0 to 4096 [ 437.657790][ T7738] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 439.074786][ T7738] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 439.240502][ T7738] ntfs3: loop2: ino=1e, "file1" failed to parse mft record [ 439.248394][ T7738] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 439.816534][ T7770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1062'. [ 441.168312][ T7793] loop4: detected capacity change from 0 to 256 [ 441.294188][ T7796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1074'. [ 441.369106][ T7801] 9pnet_fd: p9_fd_create_tcp (7801): problem binding to privport [ 441.748048][ T7804] loop2: detected capacity change from 0 to 512 [ 441.773478][ T7806] loop3: detected capacity change from 0 to 64 [ 441.804755][ T7804] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.1079: invalid block [ 441.862719][ T7804] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1079: couldn't read orphan inode 15 (err -117) [ 441.906053][ T7809] loop4: detected capacity change from 0 to 1024 [ 441.928290][ T7804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.971722][ T7809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.260453][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.452586][ T5181] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.301245][ T7834] loop4: detected capacity change from 0 to 1024 [ 443.432702][ T7834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.585863][ T5244] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 443.643283][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.811507][ T5244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.823293][ T5244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.833658][ T5244] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 443.843370][ T5244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.901953][ T5244] usb 3-1: config 0 descriptor?? [ 444.400957][ T5244] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x6 [ 444.408316][ T5244] lua 0003:1E7D:2C2E.001D: item fetching failed at offset 3/5 [ 444.482163][ T5244] lua 0003:1E7D:2C2E.001D: parse failed [ 444.491008][ T5244] lua 0003:1E7D:2C2E.001D: probe with driver lua failed with error -22 [ 444.689022][ T5244] usb 3-1: USB disconnect, device number 8 [ 444.974360][ T7844] loop4: detected capacity change from 0 to 4096 [ 445.008523][ T7844] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 445.800154][ T29] audit: type=1326 audit(1726300988.569:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.1105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95a777def9 code=0x0 [ 447.357842][ T7899] loop2: detected capacity change from 0 to 128 [ 447.423331][ T7899] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 447.451723][ T7899] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 449.831364][ T7934] loop2: detected capacity change from 0 to 2048 [ 449.891581][ T7936] loop3: detected capacity change from 0 to 512 [ 449.937684][ T7934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.130734][ T7936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.212011][ T7936] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.1136: bit already cleared for inode 15 [ 450.472262][ T6562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.381956][ T7942] loop2: detected capacity change from 0 to 16 [ 451.410769][ T7942] erofs: (device loop2): mounted with root inode @ nid 36. [ 451.481870][ T7942] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 451.493254][ T7942] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 454.856031][ T7952] loop4: detected capacity change from 0 to 1024 [ 455.014830][ T7952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.274660][ T7952] syz.4.1141 (7952) used greatest stack depth: 4568 bytes left [ 455.327124][ T7964] loop1: detected capacity change from 0 to 512 [ 455.361359][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.384630][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 455.482937][ T7964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 455.496957][ T7964] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.655696][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.667559][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.677784][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.691170][ T8] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 455.700732][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.750896][ T8] usb 3-1: config 0 descriptor?? [ 456.243811][ T8] zeroplus 0003:0C12:0030.001E: unknown main item tag 0x0 [ 456.324568][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 456.348791][ T8] zeroplus 0003:0C12:0030.001E: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0 [ 456.371389][ T8] zeroplus 0003:0C12:0030.001E: no inputs found [ 456.446894][ T8] usb 3-1: USB disconnect, device number 9 [ 457.159272][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 457.578609][ T7997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1162'. [ 458.075112][ T29] audit: type=1326 audit(1726301000.829:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 458.101568][ T29] audit: type=1326 audit(1726301000.829:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 458.125362][ T29] audit: type=1326 audit(1726301000.859:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 458.148278][ T29] audit: type=1326 audit(1726301000.859:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 458.171535][ T29] audit: type=1326 audit(1726301000.859:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 458.194400][ T29] audit: type=1326 audit(1726301000.869:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 458.219446][ T29] audit: type=1326 audit(1726301000.869:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 461.032152][ T8054] PM: Enabling pm_trace changes system date and time during resume. [ 461.032152][ T8054] PM: Correct system time has to be restored manually after resume. [ 461.852130][ T8069] loop3: detected capacity change from 0 to 1024 [ 461.894917][ T8072] loop4: detected capacity change from 0 to 64 [ 461.914788][ T8069] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 461.971875][ T8072] bio_check_eod: 4 callbacks suppressed [ 461.971960][ T8072] syz.4.1195: attempt to access beyond end of device [ 461.971960][ T8072] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 461.995777][ T8072] buffer_io_error: 4 callbacks suppressed [ 461.995855][ T8072] Buffer I/O error on dev loop4, logical block 4096, async page read [ 462.010616][ T8069] hfsplus: xattr searching failed [ 462.011444][ T8072] syz.4.1195: attempt to access beyond end of device [ 462.011444][ T8072] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 462.030341][ T8072] Buffer I/O error on dev loop4, logical block 4096, async page read [ 462.079383][ T8076] loop2: detected capacity change from 0 to 16 [ 462.085671][ T29] audit: type=1800 audit(1726301004.849:20): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1195" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 462.213891][ T8076] erofs: (device loop2): mounted with root inode @ nid 36. [ 462.546796][ T8081] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1198'. [ 462.556830][ T8081] net_ratelimit: 205 callbacks suppressed [ 462.556909][ T8081] netlink: zone id is out of range [ 462.568332][ T8081] netlink: zone id is out of range [ 462.574689][ T8081] netlink: zone id is out of range [ 462.580007][ T8081] netlink: zone id is out of range [ 462.585461][ T8081] netlink: zone id is out of range [ 462.590784][ T8081] netlink: zone id is out of range [ 462.596380][ T8081] netlink: zone id is out of range [ 462.604770][ T8081] netlink: zone id is out of range [ 462.610091][ T8081] netlink: zone id is out of range [ 462.618474][ T8081] netlink: zone id is out of range [ 463.742778][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 463.984403][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.997588][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.007978][ T8] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 464.017457][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.074969][ T8] usb 4-1: config 0 descriptor?? [ 464.168012][ T8109] futex_wake_op: syz.4.1213 tries to shift op by 144; fix this program [ 464.330500][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1215'. [ 464.593527][ T8] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 464.609458][ T8] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 464.617556][ T8] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 464.625208][ T8] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 464.632792][ T8] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 464.723899][ T8] zydacron 0003:13EC:0006.001F: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 464.823651][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 464.849713][ T8] usb 4-1: USB disconnect, device number 14 [ 465.463734][ T8129] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1222'. [ 466.532979][ T8151] loop2: detected capacity change from 0 to 256 [ 466.564071][ T8149] loop4: detected capacity change from 0 to 1024 [ 466.887859][ T8151] FAT-fs (loop2): Directory bread(block 64) failed [ 466.895132][ T8151] FAT-fs (loop2): Directory bread(block 65) failed [ 466.905323][ T8151] FAT-fs (loop2): Directory bread(block 66) failed [ 466.912150][ T8151] FAT-fs (loop2): Directory bread(block 67) failed [ 466.920399][ T8151] FAT-fs (loop2): Directory bread(block 68) failed [ 466.927500][ T8151] FAT-fs (loop2): Directory bread(block 69) failed [ 466.934596][ T8151] FAT-fs (loop2): Directory bread(block 70) failed [ 466.941393][ T8151] FAT-fs (loop2): Directory bread(block 71) failed [ 466.948622][ T8151] FAT-fs (loop2): Directory bread(block 72) failed [ 466.955673][ T8151] FAT-fs (loop2): Directory bread(block 73) failed [ 469.217730][ T8198] loop3: detected capacity change from 0 to 8 [ 469.325038][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 469.334553][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 470.497267][ T8218] loop2: detected capacity change from 0 to 1024 [ 470.546979][ T8221] loop1: detected capacity change from 0 to 128 [ 470.682135][ T8221] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 547) [ 470.695627][ T8221] FAT-fs (loop1): Filesystem has been set read-only [ 470.724076][ T8221] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 547) [ 470.760195][ T8221] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 547) [ 471.077657][ T8228] loop4: detected capacity change from 0 to 256 [ 471.313127][ T8228] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xa154a131, utbl_chksum : 0xe619d30d) [ 471.752634][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 471.972872][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 472.035378][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.047093][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.057227][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 472.070811][ T8] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 472.080258][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.137266][ T8] usb 4-1: config 0 descriptor?? [ 472.629554][ T8] uclogic 0003:2179:0053.0020: interface is invalid, ignoring [ 472.847771][ T8] usb 4-1: USB disconnect, device number 15 [ 473.641617][ T8274] loop4: detected capacity change from 0 to 128 [ 473.680548][ T8274] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 473.789424][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 473.789531][ T8277] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1293'. [ 474.061579][ T5196] sysv_free_block: trying to free block not in datazone [ 474.083863][ T5196] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 475.025354][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.032217][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.112904][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 475.330368][ T8299] loop4: detected capacity change from 0 to 1024 [ 475.350335][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.361864][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.372075][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.385496][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 475.394946][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.464586][ T8] usb 3-1: config 0 descriptor?? [ 475.557010][ T8299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.570369][ T8299] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.641395][ T29] audit: type=1800 audit(1726301018.439:21): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1304" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 475.916183][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.943732][ T8] playstation 0003:054C:0BA0.0021: unbalanced collection at end of report description [ 475.971896][ T8] playstation 0003:054C:0BA0.0021: Parse failed [ 475.978980][ T8] playstation 0003:054C:0BA0.0021: probe with driver playstation failed with error -22 [ 476.162593][ T5238] usb 3-1: USB disconnect, device number 10 [ 476.317535][ T8317] loop1: detected capacity change from 0 to 64 [ 476.348495][ T8316] loop3: detected capacity change from 0 to 1024 [ 476.365019][ T8316] EXT4-fs: inline encryption not supported [ 476.381494][ T8316] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 476.473810][ T29] audit: type=1800 audit(1726301019.249:22): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1310" name="file0" dev="loop1" ino=1 res=0 errno=0 [ 476.505377][ T8316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.718882][ T6562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.923971][ T8325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1314'. [ 476.933513][ T8325] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1314'. [ 477.081088][ T8330] loop3: detected capacity change from 0 to 256 [ 477.818914][ T8340] syz.3.1320 (8340): drop_caches: 4 [ 478.107413][ T8345] loop4: detected capacity change from 0 to 256 [ 478.158572][ T8346] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 478.493114][ T8345] FAT-fs (loop4): Directory bread(block 64) failed [ 478.500142][ T8345] FAT-fs (loop4): Directory bread(block 65) failed [ 478.507491][ T8345] FAT-fs (loop4): Directory bread(block 66) failed [ 478.514877][ T8345] FAT-fs (loop4): Directory bread(block 67) failed [ 478.521865][ T8345] FAT-fs (loop4): Directory bread(block 68) failed [ 478.529108][ T8345] FAT-fs (loop4): Directory bread(block 69) failed [ 478.536242][ T8345] FAT-fs (loop4): Directory bread(block 70) failed [ 478.543206][ T8345] FAT-fs (loop4): Directory bread(block 71) failed [ 478.550160][ T8345] FAT-fs (loop4): Directory bread(block 72) failed [ 478.557404][ T8345] FAT-fs (loop4): Directory bread(block 73) failed [ 478.794857][ T8345] syz.4.1323: attempt to access beyond end of device [ 478.794857][ T8345] loop4: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 478.992944][ T5244] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 479.500855][ T5244] usb 3-1: Using ep0 maxpacket: 16 [ 479.509219][ T5244] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 479.509378][ T5244] usb 3-1: config 0 has no interface number 0 [ 479.509528][ T5244] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.509720][ T5244] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 479.517367][ T5244] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 479.517558][ T5244] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 479.517706][ T5244] usb 3-1: Product: syz [ 479.517823][ T5244] usb 3-1: SerialNumber: syz [ 479.523846][ T5244] usb 3-1: config 0 descriptor?? [ 479.546128][ T5244] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 479.548970][ T5244] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input18 [ 479.921848][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.922362][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.922865][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.923435][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.923915][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.924386][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.924891][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.925375][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.925887][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 479.926366][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.061865][ T5244] usb 3-1: USB disconnect, device number 11 [ 481.062107][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 481.132242][ T5244] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 482.182657][ T8398] loop1: detected capacity change from 0 to 8 [ 482.227691][ T8395] delete_channel: no stack [ 482.279716][ T8402] loop4: detected capacity change from 0 to 256 [ 482.745221][ T8402] FAT-fs (loop4): Directory bread(block 64) failed [ 482.752396][ T8402] FAT-fs (loop4): Directory bread(block 65) failed [ 482.759405][ T8402] FAT-fs (loop4): Directory bread(block 66) failed [ 482.768536][ T8402] FAT-fs (loop4): Directory bread(block 67) failed [ 482.783601][ T8402] FAT-fs (loop4): Directory bread(block 68) failed [ 482.790431][ T8402] FAT-fs (loop4): Directory bread(block 69) failed [ 482.799908][ T8402] FAT-fs (loop4): Directory bread(block 70) failed [ 482.806940][ T8402] FAT-fs (loop4): Directory bread(block 71) failed [ 482.814258][ T8402] FAT-fs (loop4): Directory bread(block 72) failed [ 482.821148][ T8402] FAT-fs (loop4): Directory bread(block 73) failed [ 483.826846][ T8427] IPVS: stopping backup sync thread 8429 ... [ 484.400411][ T8437] loop1: detected capacity change from 0 to 1024 [ 484.613369][ T8437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.767900][ T8437] overlayfs: conflicting options: metacopy=off,verity=on [ 485.053008][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.383738][ T8460] sp0: Synchronizing with TNC [ 486.226649][ T8464] loop4: detected capacity change from 0 to 1764 [ 486.903687][ T8484] loop4: detected capacity change from 0 to 256 [ 487.145987][ T8484] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 487.313769][ T29] audit: type=1800 audit(1726301030.059:23): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1385" name="file0" dev="loop4" ino=1048673 res=0 errno=0 [ 487.635601][ T8491] loop2: detected capacity change from 0 to 2048 [ 487.735715][ T8498] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 487.843502][ T8491] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1389'. [ 488.360875][ T8508] loop1: detected capacity change from 0 to 128 [ 488.564771][ T8508] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 488.653046][ T8508] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.741451][ T8508] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.1397: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 489.095156][ T5630] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 490.826482][ T5182] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 490.835905][ T8555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.963840][ T5238] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 492.211835][ T5238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.224505][ T5238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.234823][ T5238] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 492.244400][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.310947][ T5238] usb 3-1: config 0 descriptor?? [ 492.450706][ T8588] loop3: detected capacity change from 0 to 256 [ 492.727511][ T8588] FAT-fs (loop3): Directory bread(block 64) failed [ 492.734605][ T8588] FAT-fs (loop3): Directory bread(block 65) failed [ 492.741672][ T8588] FAT-fs (loop3): Directory bread(block 66) failed [ 492.748782][ T8588] FAT-fs (loop3): Directory bread(block 67) failed [ 492.755882][ T8588] FAT-fs (loop3): Directory bread(block 68) failed [ 492.762823][ T8588] FAT-fs (loop3): Directory bread(block 69) failed [ 492.769811][ T8588] FAT-fs (loop3): Directory bread(block 70) failed [ 492.776718][ T8588] FAT-fs (loop3): Directory bread(block 71) failed [ 492.783927][ T8588] FAT-fs (loop3): Directory bread(block 72) failed [ 492.797687][ T8588] FAT-fs (loop3): Directory bread(block 73) failed [ 492.842848][ T5238] lg-g15 0003:046D:C222.0022: unknown main item tag 0x7 [ 492.899562][ T5238] lg-g15 0003:046D:C222.0022: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 493.005049][ T5238] usb 3-1: USB disconnect, device number 12 [ 493.523163][ T8602] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1439'. [ 493.931629][ T8608] delete_channel: no stack [ 494.148134][ T8613] mmap: syz.3.1447 (8613): VmData 37597184 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 494.853496][ T5182] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 494.864870][ T5182] Bluetooth: hci1: Injecting HCI hardware error event [ 494.873698][ T5182] Bluetooth: hci1: hardware error 0x00 [ 495.071870][ T8620] sit0: entered promiscuous mode [ 495.095748][ T8620] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 495.104173][ T8620] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1450'. [ 496.180042][ T4634] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 496.465944][ T4634] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.475555][ T4634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.585061][ T4634] usb 4-1: config 0 descriptor?? [ 496.636550][ T4634] cp210x 4-1:0.0: cp210x converter detected [ 496.924224][ T5182] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 497.162195][ T4634] usb 4-1: cp210x converter now attached to ttyUSB0 [ 497.413540][ T5244] usb 4-1: USB disconnect, device number 16 [ 497.477764][ T5244] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 498.936805][ T8639] loop1: detected capacity change from 0 to 4096 [ 498.981183][ T8639] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 499.132732][ T5263] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 499.372685][ T5263] usb 5-1: Using ep0 maxpacket: 8 [ 499.412817][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.423608][ T5263] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 499.433213][ T5263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.486857][ T5263] usb 5-1: config 0 descriptor?? [ 500.030431][ T5263] logitech 0003:046D:C295.0023: unknown main item tag 0x0 [ 500.038200][ T5263] logitech 0003:046D:C295.0023: unknown main item tag 0x0 [ 500.049429][ T5263] logitech 0003:046D:C295.0023: unknown main item tag 0x0 [ 500.102042][ T8639] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 500.165735][ T5263] logitech 0003:046D:C295.0023: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.4-1/input0 [ 500.177732][ T5263] logitech 0003:046D:C295.0023: no inputs found [ 500.203356][ T5244] cp210x 4-1:0.0: device disconnected [ 500.263988][ T5263] usb 5-1: USB disconnect, device number 18 [ 500.361618][ T8647] loop2: detected capacity change from 0 to 64 [ 500.469561][ T29] audit: type=1800 audit(1726301043.239:24): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1461" name="file2" dev="loop2" ino=19 res=0 errno=0 [ 500.685106][ T5244] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 500.913135][ T5244] usb 4-1: Using ep0 maxpacket: 8 [ 500.948717][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 500.960835][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.971278][ T5244] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 500.981116][ T5244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.060458][ T5244] usb 4-1: config 0 descriptor?? [ 501.563675][ T5244] hid-alps 0003:044E:1215.0024: unknown main item tag 0x0 [ 501.571231][ T5244] hid-alps 0003:044E:1215.0024: item fetching failed at offset 2/5 [ 501.637805][ T5244] hid-alps 0003:044E:1215.0024: parse failed [ 501.644745][ T5244] hid-alps 0003:044E:1215.0024: probe with driver hid-alps failed with error -22 [ 501.758689][ T5244] usb 4-1: USB disconnect, device number 17 [ 501.856895][ T8666] (syz.0.1471,8666,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 501.866986][ T8666] (syz.0.1471,8666,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 501.939645][ T8669] autofs: Bad value for 'fd' [ 502.813689][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1479'. [ 503.493859][ T8698] loop4: detected capacity change from 0 to 64 [ 503.580661][ T8701] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 503.580661][ T8701] program syz.1.1488 not setting count and/or reply_len properly [ 503.728373][ T29] audit: type=1800 audit(1726301046.497:25): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1487" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 503.752806][ T5263] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 504.004156][ T5263] usb 4-1: Using ep0 maxpacket: 8 [ 504.045346][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.057217][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.067516][ T5263] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 504.079688][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.154744][ T5263] usb 4-1: config 0 descriptor?? [ 504.684910][ T5263] waltop 0003:172F:0034.0025: collection stack underflow [ 504.698458][ T5263] waltop 0003:172F:0034.0025: item 0 0 0 12 parsing failed [ 504.768432][ T5263] waltop 0003:172F:0034.0025: probe with driver waltop failed with error -22 [ 504.913064][ T25] usb 4-1: USB disconnect, device number 18 [ 506.172589][ T5234] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 506.382490][ T5234] usb 2-1: Using ep0 maxpacket: 32 [ 506.402548][ T5234] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 506.412187][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.482136][ T5234] usb 2-1: config 0 descriptor?? [ 506.506730][ T5234] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 506.759428][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 507.163623][ T5234] gspca_nw80x: reg_w err -71 [ 507.168855][ T5234] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 507.211558][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 507.220622][ T5234] usb 2-1: USB disconnect, device number 14 [ 507.287728][ T8763] loop4: detected capacity change from 0 to 256 [ 507.419162][ T8] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 507.432528][ T8] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 507.445395][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.464482][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 507.477955][ T8] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 507.487438][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.512812][ T8] usb 3-1: config 0 descriptor?? [ 507.522572][ T5263] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 507.542062][ T8] usb-storage 3-1:0.0: USB Mass Storage device detected [ 507.600550][ T8] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 507.747077][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.763895][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.775200][ T5263] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 507.784787][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.819783][ T25] usb 3-1: USB disconnect, device number 13 [ 507.881685][ T5263] usb 4-1: config 0 descriptor?? [ 508.239653][ T8775] loop4: detected capacity change from 0 to 512 [ 508.304993][ T8775] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 508.313757][ T8775] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 508.331646][ T8775] EXT4-fs (loop4): 1 truncate cleaned up [ 508.341208][ T8775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.414846][ T8775] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 508.452018][ T5263] asus 0003:048D:CE50.0026: unknown main item tag 0xd [ 508.522742][ T5263] asus 0003:048D:CE50.0026: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input0 [ 508.534389][ T5263] asus 0003:048D:CE50.0026: Asus input not registered [ 508.566058][ T5263] asus 0003:048D:CE50.0026: probe with driver asus failed with error -12 [ 508.649679][ T5263] usb 4-1: USB disconnect, device number 19 [ 508.711699][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.659057][ T8800] loop2: detected capacity change from 0 to 16 [ 509.764145][ T8800] erofs: (device loop2): mounted with root inode @ nid 36. [ 509.848720][ T8804] loop1: detected capacity change from 0 to 512 [ 509.918987][ T8804] EXT4-fs: Ignoring removed oldalloc option [ 509.972047][ T8804] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 510.034304][ T8804] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1536: invalid indirect mapped block 2683928664 (level 1) [ 510.058322][ T8] kernel write not supported for file 632/task/633/clear_refs (pid: 8 comm: kworker/0:0) [ 510.168736][ T8804] EXT4-fs (loop1): 1 truncate cleaned up [ 510.177491][ T8804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.288216][ T8804] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1536: Invalid block bitmap block 3 in block_group 0 [ 510.467499][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.905126][ T8822] loop1: detected capacity change from 0 to 128 [ 510.930152][ T8822] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 510.969768][ T8822] sysv_free_block: flc_count > flc_size [ 510.976187][ T8822] sysv_free_block: flc_count > flc_size [ 510.982146][ T8822] sysv_free_block: flc_count > flc_size [ 510.988223][ T8822] sysv_free_block: flc_count > flc_size [ 510.994149][ T8822] sysv_free_block: flc_count > flc_size [ 510.999900][ T8822] sysv_free_block: flc_count > flc_size [ 511.005974][ T8822] sysv_free_block: flc_count > flc_size [ 511.011735][ T8822] sysv_free_block: flc_count > flc_size [ 511.017656][ T8822] sysv_free_block: flc_count > flc_size [ 511.023738][ T8822] sysv_free_block: flc_count > flc_size [ 511.075873][ T8822] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 511.599213][ T8831] loop3: detected capacity change from 0 to 64 [ 511.822681][ T29] audit: type=1800 audit(1726301054.597:26): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1548" name="bus" dev="loop3" ino=21 res=0 errno=0 [ 512.591679][ T8849] loop2: detected capacity change from 0 to 8 [ 513.261807][ T8860] loop1: detected capacity change from 0 to 512 [ 513.362982][ T8860] EXT4-fs (loop1): filesystem is read-only [ 513.388503][ T8860] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 513.456676][ T8860] EXT4-fs (loop1): filesystem is read-only [ 513.463192][ T8860] EXT4-fs (loop1): orphan cleanup on readonly fs [ 513.490898][ T8860] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1563: bg 0: block 64: padding at end of block bitmap is not set [ 513.626699][ T8860] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 513.674343][ T8860] EXT4-fs (loop1): 1 orphan inode deleted [ 513.682173][ T8860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 513.923089][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 513.994896][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.157590][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 514.188676][ T8] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 514.198697][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.207122][ T8] usb 4-1: Product: syz [ 514.217823][ T8] usb 4-1: Manufacturer: syz [ 514.224819][ T8] usb 4-1: SerialNumber: syz [ 514.242220][ T8876] loop4: detected capacity change from 0 to 2048 [ 514.280093][ T8] usb 4-1: config 0 descriptor?? [ 514.370027][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 514.398045][ T8879] mkiss: ax0: crc mode is auto. [ 514.409245][ T8876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.999554][ T8] gspca_stk1135: reg_w 0x3 err -71 [ 515.009347][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 515.017580][ T8] gspca_stk1135: Sensor write failed [ 515.023744][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 515.040238][ T8] gspca_stk1135: Sensor write failed [ 515.048465][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 515.055121][ T8] gspca_stk1135: Sensor read failed [ 515.060624][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 515.067625][ T8] gspca_stk1135: Sensor read failed [ 515.073171][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 515.080076][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 515.086804][ T8] gspca_stk1135: Sensor read failed [ 515.095421][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 515.101979][ T8] gspca_stk1135: Sensor read failed [ 515.107577][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 515.114250][ T8] gspca_stk1135: Sensor write failed [ 515.119824][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 515.126483][ T8] gspca_stk1135: Sensor write failed [ 515.145841][ T8] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 515.164598][ T8] usb 4-1: USB disconnect, device number 20 [ 515.532856][ T5234] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 515.691170][ T8898] Invalid architecture in ELF header: 0 [ 515.780313][ T5234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.791991][ T5234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.802528][ T5234] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 515.812084][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.845337][ T5234] usb 2-1: config 0 descriptor?? [ 516.070647][ T29] audit: type=1326 audit(1726301058.837:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.0.1582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f900d57def9 code=0x0 [ 516.634380][ T5234] wacom 0003:056A:003F.0027: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.1-1/input0 [ 516.948177][ T5234] usb 2-1: USB disconnect, device number 15 [ 517.696688][ T8915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1588'. [ 518.182884][ T8925] hugetlbfs: Bad value '%' for mount option 'nr_inodes' [ 518.182884][ T8925] [ 519.292670][ T5234] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 520.364825][ T8959] loop3: detected capacity change from 0 to 256 [ 521.749344][ T8948] loop1: detected capacity change from 0 to 32768 [ 521.758993][ T8948] btrfs: Unknown parameter 'mask' [ 522.248049][ T5234] usb 5-1: Using ep0 maxpacket: 32 [ 522.375361][ T5234] usb 5-1: device descriptor read/all, error -71 [ 522.698457][ T8976] tipc: Enabling of bearer rejected, failed to enable media [ 522.885680][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1619'. [ 523.229949][ T8] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 523.379151][ T8990] netlink: 'syz.0.1625': attribute type 30 has an invalid length. [ 523.493677][ T8] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 523.503390][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.511840][ T8] usb 4-1: Product: syz [ 523.516973][ T8] usb 4-1: Manufacturer: syz [ 523.521830][ T8] usb 4-1: SerialNumber: syz [ 523.558580][ T8] usb 4-1: config 0 descriptor?? [ 523.854521][ T8] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 523.923453][ T5263] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 524.032908][ T8998] loop2: detected capacity change from 0 to 512 [ 524.048675][ T8] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 524.056020][ T8] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 524.063597][ T8] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 524.145999][ T5263] usb 2-1: Using ep0 maxpacket: 16 [ 524.159613][ T8998] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1628: casefold flag without casefold feature [ 524.168849][ T8] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 524.203747][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.215335][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.217661][ T8998] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1628: couldn't read orphan inode 15 (err -117) [ 524.225584][ T5263] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 524.250195][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.297198][ T8998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.325628][ T5263] usb 2-1: config 0 descriptor?? [ 524.386314][ T8] usb 4-1: USB disconnect, device number 21 [ 524.743784][ T5181] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.823031][ T5263] chicony 0003:04F2:1421.0028: item fetching failed at offset 3/5 [ 524.853219][ T5263] chicony 0003:04F2:1421.0028: Chicony hid parse failed: -22 [ 524.867392][ T5263] chicony 0003:04F2:1421.0028: probe with driver chicony failed with error -22 [ 525.100547][ T5263] usb 2-1: USB disconnect, device number 16 [ 525.212654][ T5244] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 525.360806][ T9018] loop3: detected capacity change from 0 to 64 [ 525.407324][ T5244] usb 5-1: Using ep0 maxpacket: 16 [ 525.435368][ T5244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.446986][ T5244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.457223][ T5244] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 525.466711][ T5244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.491216][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1638'. [ 525.514739][ T5244] usb 5-1: config 0 descriptor?? [ 526.064172][ T5244] hid-led 0003:1294:1320.0029: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 526.081197][ T5244] hid-led 0003:1294:1320.0029: Riso Kagaku Webmail Notifier initialized [ 526.162558][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 526.372625][ T5244] usb 5-1: USB disconnect, device number 21 [ 526.412938][ T5263] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 526.436017][ T8] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 526.447086][ T5263] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 526.449092][ T5263] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 526.455908][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.456051][ T8] usb 4-1: Product: syz [ 526.456181][ T8] usb 4-1: Manufacturer: syz [ 526.456303][ T8] usb 4-1: SerialNumber: syz [ 526.508461][ T8] usb 4-1: config 0 descriptor?? [ 526.526895][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 527.180666][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 527.205993][ T8] gspca_sunplus: reg_r err -71 [ 527.211348][ T8] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 527.268532][ T8] usb 4-1: USB disconnect, device number 22 [ 527.720706][ T9049] netlink: 'syz.0.1649': attribute type 32 has an invalid length. [ 527.736413][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 527.842782][ T5234] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 528.080747][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.096823][ T5234] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 528.107891][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.175016][ T5234] usb 5-1: config 0 descriptor?? [ 528.670061][ T9064] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1658'. [ 528.755892][ T5234] aquacomputer_d5next 0003:0C70:F00B.002A: hidraw0: USB HID v0.00 Device [HID 0c70:f00b] on usb-dummy_hcd.4-1/input0 [ 528.940253][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 529.025398][ T25] usb 5-1: USB disconnect, device number 22 [ 529.321840][ T9076] cgroup: No subsys list or none specified [ 530.007155][ T9085] netlink: 'syz.4.1668': attribute type 2 has an invalid length. [ 530.016025][ T9085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1668'. [ 530.551440][ T9094] loop4: detected capacity change from 0 to 256 [ 530.612843][ T9094] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 530.624152][ T9094] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 530.751964][ T9094] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe563dbae, utbl_chksum : 0xe619d30d) [ 531.305486][ T9106] loop3: detected capacity change from 0 to 512 [ 531.524588][ T9106] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 531.624912][ T9106] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1678: invalid indirect mapped block 4278190080 (level 0) [ 531.684050][ T9106] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1678: invalid indirect mapped block 1 (level 1) [ 531.753004][ T9106] EXT4-fs (loop3): 1 truncate cleaned up [ 531.760813][ T9106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.200740][ T6562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.815822][ T9133] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 532.815914][ T9133] overlayfs: missing 'lowerdir' [ 532.884688][ T9134] loop1: detected capacity change from 0 to 256 [ 532.980640][ T9134] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 533.952793][ T5244] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 534.183028][ T5244] usb 2-1: Using ep0 maxpacket: 32 [ 534.216880][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.228669][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.238975][ T5244] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 534.248565][ T5244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.306568][ T5244] usb 2-1: config 0 descriptor?? [ 534.419988][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1706'. [ 534.749501][ T5234] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 534.828317][ T5244] kye 0003:0458:5016.002B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 534.880817][ T5244] kye 0003:0458:5016.002B: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 534.892578][ T5244] kye 0003:0458:5016.002B: tablet-enabling feature report not found [ 534.907002][ T5244] kye 0003:0458:5016.002B: tablet enabling failed [ 534.960261][ T5234] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 534.969037][ T5234] usb 5-1: config 0 has no interface number 0 [ 534.977173][ T5234] usb 5-1: config 0 interface 4 has no altsetting 0 [ 534.984236][ T5234] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 534.993723][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.054793][ T5234] usb 5-1: config 0 descriptor?? [ 535.073295][ T5244] usb 2-1: USB disconnect, device number 17 [ 535.081541][ T5234] cp210x 5-1:0.4: cp210x converter detected [ 535.472703][ T9177] loop2: detected capacity change from 0 to 64 [ 535.530005][ T5234] cp210x 5-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 535.551978][ T5234] usb 5-1: cp210x converter now attached to ttyUSB0 [ 535.574142][ T5234] usb 5-1: USB disconnect, device number 23 [ 535.603769][ T5234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.620869][ T5234] cp210x 5-1:0.4: device disconnected [ 536.481729][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.489266][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.077540][ T9204] netlink: 'syz.4.1723': attribute type 12 has an invalid length. [ 537.086203][ T9204] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1723'. [ 537.096056][ T9203] loop3: detected capacity change from 0 to 64 [ 537.197617][ T29] audit: type=1326 audit(1726301079.897:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.2.1724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f759097def9 code=0x0 [ 537.262765][ T9203] hfs: bad catalog folder thread [ 537.322794][ T9209] ax25_connect(): syz.1.1728 uses autobind, please contact jreuter@yaina.de [ 538.062527][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 538.094260][ T9220] dvmrp8: entered allmulticast mode [ 538.183265][ T9219] dvmrp8: left allmulticast mode [ 538.253631][ T9222] program syz.0.1734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.261188][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1735'. [ 538.312572][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 538.341922][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 538.353642][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.364986][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.381644][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 538.397119][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 538.406581][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.454971][ T8] usb 2-1: config 0 descriptor?? [ 538.886567][ T9229] loop4: detected capacity change from 0 to 512 [ 538.988869][ T8] kye 0003:0458:5010.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 539.045466][ T9229] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1738: bg 0: block 5: invalid block bitmap [ 539.107273][ T8] kye 0003:0458:5010.002C: unknown main item tag 0x0 [ 539.114624][ T8] kye 0003:0458:5010.002C: unknown main item tag 0x0 [ 539.121817][ T8] kye 0003:0458:5010.002C: unknown main item tag 0x0 [ 539.129095][ T8] kye 0003:0458:5010.002C: unknown main item tag 0x0 [ 539.139058][ T8] kye 0003:0458:5010.002C: unknown main item tag 0x0 [ 539.143238][ T9229] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 539.146418][ T8] kye 0003:0458:5010.002C: unknown main item tag 0x0 [ 539.161939][ T8] kye 0003:0458:5010.002C: unknown main item tag 0x0 [ 539.186893][ T9229] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1738: invalid indirect mapped block 3 (level 2) [ 539.255730][ T8] kye 0003:0458:5010.002C: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 539.263049][ T9229] EXT4-fs (loop4): 1 orphan inode deleted [ 539.267637][ T8] kye 0003:0458:5010.002C: tablet-enabling feature report not found [ 539.273005][ T9229] EXT4-fs (loop4): 1 truncate cleaned up [ 539.280779][ T8] kye 0003:0458:5010.002C: tablet enabling failed [ 539.288373][ T9229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.362616][ T8] usb 2-1: USB disconnect, device number 18 [ 539.711832][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.314418][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 540.609038][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.620547][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.637242][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 540.650961][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.704289][ T8] usb 3-1: config 0 descriptor?? [ 541.299320][ T25] kernel write not supported for file /vcs (pid: 25 comm: kworker/1:0) [ 541.381213][ T8] wacom 0003:056A:032C.002D: unknown main item tag 0x0 [ 541.392955][ T5244] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 541.423547][ T8] wacom 0003:056A:032C.002D: hidraw0: USB HID vf4.0d Device [HID 056a:032c] on usb-dummy_hcd.2-1/input0 [ 541.587840][ T5234] usb 3-1: USB disconnect, device number 14 [ 541.645828][ T5244] usb 4-1: Using ep0 maxpacket: 8 [ 541.722110][ T5244] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 541.731974][ T5244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.740466][ T5244] usb 4-1: Product: syz [ 541.745062][ T5244] usb 4-1: Manufacturer: syz [ 541.749921][ T5244] usb 4-1: SerialNumber: syz [ 541.792778][ T5244] usb 4-1: config 0 descriptor?? [ 541.810559][ T5244] gspca_main: sq930x-2.14.0 probing 2770:930c [ 542.200655][ T9278] loop1: detected capacity change from 0 to 64 [ 542.284719][ T9277] netlink: 'syz.4.1760': attribute type 3 has an invalid length. [ 542.542860][ T5244] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 542.707891][ T9280] loop2: detected capacity change from 0 to 256 [ 542.745351][ T9280] exfat: Deprecated parameter 'utf8' [ 542.751160][ T9280] exfat: Deprecated parameter 'namecase' [ 542.757830][ T9280] exfat: Deprecated parameter 'namecase' [ 542.763947][ T9280] exfat: Deprecated parameter 'utf8' [ 542.803211][ T5244] gspca_sq930x: Sensor ov9630 not yet treated [ 542.809952][ T5244] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 542.824862][ T5244] usb 4-1: USB disconnect, device number 23 [ 543.057403][ T9280] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 543.592741][ T5244] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 543.858133][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.870013][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.882553][ T5244] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 543.891933][ T5244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.908140][ T9304] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1772'. [ 543.920579][ T9304] net_ratelimit: 123 callbacks suppressed [ 543.920662][ T9304] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 543.978340][ T5244] usb 2-1: config 0 descriptor?? [ 544.514155][ T5244] cougar 0003:060B:700A.002E: item fetching failed at offset 4/5 [ 544.580590][ T5244] cougar 0003:060B:700A.002E: parse failed [ 544.587287][ T5244] cougar 0003:060B:700A.002E: probe with driver cougar failed with error -22 [ 544.728126][ T5263] usb 2-1: USB disconnect, device number 19 [ 544.737931][ T9315] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1777'. [ 545.833508][ T5234] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 545.862638][ T9334] loop2: detected capacity change from 0 to 256 [ 545.927340][ T9334] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 545.942794][ T5239] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 546.089914][ T5234] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 546.099551][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.152483][ T5239] usb 4-1: Using ep0 maxpacket: 16 [ 546.187079][ T5234] usb 5-1: config 0 descriptor?? [ 546.210506][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.224835][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.235394][ T5239] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 546.249156][ T5239] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 546.261628][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.303818][ T5239] usb 4-1: config 0 descriptor?? [ 546.471814][ T9338] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 546.480381][ T9338] netlink: 616 bytes leftover after parsing attributes in process `syz.2.1788'. [ 546.754516][ T5234] gs_usb 5-1:0.0: Configuring for 15 interfaces [ 546.761230][ T5234] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 546.770529][ T5234] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 546.841226][ T5239] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 546.849088][ T5239] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 546.857660][ T5239] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 546.865401][ T5239] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 546.873092][ T5239] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 546.891181][ T5239] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 546.901990][ T5239] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 546.909722][ T5239] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 546.966588][ T5239] microsoft 0003:045E:07DA.002F: No inputs registered, leaving [ 547.023345][ T5239] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 547.035401][ T5239] microsoft 0003:045E:07DA.002F: no inputs found [ 547.041999][ T5239] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 547.088166][ T5234] usb 5-1: USB disconnect, device number 24 [ 547.144158][ T5239] usb 4-1: USB disconnect, device number 24 [ 547.541109][ T9348] loop1: detected capacity change from 0 to 16 [ 547.564109][ T9348] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 547.653364][ T9348] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 547.680077][ T9348] CIFS mount error: No usable UNC path provided in device string! [ 547.680077][ T9348] [ 547.691255][ T9348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 548.288807][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 548.306353][ T9352] loop2: detected capacity change from 0 to 2048 [ 548.330180][ T9360] loop1: detected capacity change from 0 to 128 [ 548.392653][ T9352] EXT4-fs (loop2): failed to initialize system zone (-117) [ 548.404750][ T9360] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.421591][ T9352] EXT4-fs (loop2): mount failed [ 548.495467][ T9360] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 548.905479][ T5630] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.060228][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 549.407543][ T9376] loop1: detected capacity change from 0 to 256 [ 549.588714][ T9382] loop4: detected capacity change from 0 to 512 [ 549.626945][ T9382] EXT4-fs: Ignoring removed nobh option [ 549.709019][ T9382] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 549.754404][ T9382] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 549.764685][ T9382] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.1808: casefold flag without casefold feature [ 549.780809][ T9382] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1808: couldn't read orphan inode 13 (err -117) [ 549.802856][ T9382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.013795][ T9382] EXT4-fs: Ignoring removed orlov option [ 550.022671][ T9382] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.1808: Abort forced by user [ 550.079923][ T9382] EXT4-fs (loop4): Remounting filesystem read-only [ 550.171139][ T9382] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 550.508726][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.520895][ T9396] loop2: detected capacity change from 0 to 128 [ 550.545615][ T9396] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 550.650861][ T9396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.621960][ T9412] loop4: detected capacity change from 0 to 2048 [ 551.797418][ T9424] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 553.272891][ T5263] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 553.317018][ T9449] loop2: detected capacity change from 0 to 16 [ 553.512962][ T5263] usb 5-1: Using ep0 maxpacket: 32 [ 553.553281][ T5263] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 553.602778][ T5263] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 553.612400][ T5263] usb 5-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3 [ 553.620717][ T5263] usb 5-1: Manufacturer: syz [ 553.625839][ T5263] usb 5-1: SerialNumber: syz [ 553.665304][ T5263] usb 5-1: config 0 descriptor?? [ 553.677970][ T9443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 553.755650][ T5263] hub 5-1:0.0: bad descriptor, ignoring hub [ 553.761891][ T5263] hub 5-1:0.0: probe with driver hub failed with error -5 [ 553.778334][ T5263] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 554.079022][ T9443] loop4: detected capacity change from 0 to 256 [ 554.164936][ T9459] loop1: detected capacity change from 0 to 64 [ 554.274432][ T5234] usb 5-1: USB disconnect, device number 25 [ 554.274694][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 556.308298][ T5234] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 556.573804][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.585372][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.595755][ T5234] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 556.611499][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.724257][ T5234] usb 5-1: config 0 descriptor?? [ 557.417364][ T5234] logitech-djreceiver 0003:046D:C534.0030: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.4-1/input0 [ 557.603406][ T5234] usb 5-1: USB disconnect, device number 26 [ 558.194814][ T9502] tmpfs: Bad value for 'mpol' [ 559.182807][ T9520] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 560.149515][ T9540] sock: sock_timestamping_bind_phc: sock not bind to device [ 560.252675][ T5234] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 560.479579][ T5234] usb 4-1: config 0 has an invalid interface number: 54 but max is 1 [ 560.488269][ T5234] usb 4-1: config 0 has an invalid interface number: 2 but max is 1 [ 560.503187][ T5234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.515686][ T5234] usb 4-1: config 0 has no interface number 0 [ 560.522041][ T5234] usb 4-1: config 0 has no interface number 1 [ 560.528579][ T5234] usb 4-1: config 0 interface 54 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 560.630057][ T5234] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice=c7.66 [ 560.639946][ T5234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.648552][ T5234] usb 4-1: Product: syz [ 560.653167][ T5234] usb 4-1: Manufacturer: syz [ 560.658026][ T5234] usb 4-1: SerialNumber: syz [ 560.724041][ T5234] usb 4-1: config 0 descriptor?? [ 560.745589][ T5234] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.754035][ T5234] snd-usb-audio 4-1:0.54: probe with driver snd-usb-audio failed with error -2 [ 560.774875][ T5234] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.886277][ T5234] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 560.993588][ T5244] usb 4-1: USB disconnect, device number 25 [ 563.296728][ T9581] loop4: detected capacity change from 0 to 2048 [ 563.336338][ T9581] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 563.442595][ T9590] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 563.694060][ T5239] kernel write not supported for file /869/uid_map (pid: 5239 comm: kworker/0:4) [ 564.401478][ T9594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 564.403868][ T9595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 564.408019][ T9594] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 564.414233][ T9595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 564.540848][ T9595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.544705][ T9594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 564.547493][ T9595] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 564.553272][ T9594] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 564.621661][ T9594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.628849][ T9594] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 564.734955][ T9597] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 568.610324][ T9661] loop3: detected capacity change from 0 to 1024 [ 568.987445][ T9661] Process accounting resumed [ 569.107815][ T3021] hfsplus: b-tree write err: -5, ino 4 [ 569.728374][ T9678] loop4: detected capacity change from 0 to 256 [ 569.883648][ T9678] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097162) [ 569.891798][ T9678] FAT-fs (loop4): Filesystem has been set read-only [ 569.904799][ T29] audit: type=1800 audit(1726301112.657:29): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1941" name="file1" dev="loop4" ino=1048688 res=0 errno=0 [ 570.066322][ T9682] loop3: detected capacity change from 0 to 256 [ 570.973347][ T9694] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 573.764029][ T5182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.791121][ T5182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.818588][ T5182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.838918][ T5182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.883184][ T5182] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 573.905041][ T5182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.959622][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.978507][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 574.023711][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 574.060889][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 574.080793][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 574.124329][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 575.135100][ T9740] loop3: detected capacity change from 0 to 2048 [ 575.271823][ T9740] hpfs: hpfs_map_sector(): read error [ 575.380373][ T9755] loop1: detected capacity change from 0 to 128 [ 575.685491][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 575.717661][ T9735] chnl_net:caif_netlink_parms(): no params data found [ 576.205405][ T5182] Bluetooth: hci5: command tx timeout [ 577.474463][ T9782] loop3: detected capacity change from 0 to 128 [ 577.567300][ T9782] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 577.706801][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.714856][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.723152][ T9735] bridge_slave_0: entered allmulticast mode [ 577.732630][ T9735] bridge_slave_0: entered promiscuous mode [ 577.880578][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.888734][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.896810][ T9735] bridge_slave_1: entered allmulticast mode [ 577.916390][ T9735] bridge_slave_1: entered promiscuous mode [ 578.286406][ T5182] Bluetooth: hci5: command tx timeout [ 578.350284][ T9735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.480957][ T9735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.838432][ T9735] team0: Port device team_slave_0 added [ 578.909950][ T9735] team0: Port device team_slave_1 added [ 579.098188][ T5239] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 579.151880][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.159255][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.185790][ T9735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.261703][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.269097][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.295794][ T9735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.342791][ T5239] usb 2-1: Using ep0 maxpacket: 32 [ 579.373574][ T5239] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 579.385252][ T5239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.396748][ T5239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.406920][ T5239] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 579.420439][ T5239] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 579.429957][ T5239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.496126][ T9796] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 579.535814][ T5239] usb 2-1: config 0 descriptor?? [ 579.844337][ T9735] hsr_slave_0: entered promiscuous mode [ 579.965881][ T9735] hsr_slave_1: entered promiscuous mode [ 580.013172][ T9735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.021212][ T9735] Cannot create hsr debugfs directory [ 580.173823][ T5239] wacom 0003:056A:00B3.0031: unknown main item tag 0x0 [ 580.200241][ T5239] wacom 0003:056A:00B3.0031: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 580.295256][ T5239] wacom 0003:056A:00B3.0031: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.1-1/input0 [ 580.310318][ T5239] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B3.0031/input/input28 [ 580.363824][ T5182] Bluetooth: hci5: command tx timeout [ 580.504886][ T5239] usb 2-1: USB disconnect, device number 20 [ 580.969055][ T9735] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.152917][ T5234] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 581.169233][ T9735] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.422873][ T4634] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 581.444377][ T5234] usb 5-1: Using ep0 maxpacket: 32 [ 581.500429][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.512849][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.523059][ T5234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.528825][ T9735] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.536441][ T5234] usb 5-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 581.536615][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.585537][ T5234] usb 5-1: config 0 descriptor?? [ 581.743494][ T4634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.755571][ T4634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.765866][ T4634] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 581.775384][ T4634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.831056][ T9735] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.865164][ T4634] usb 4-1: config 0 descriptor?? [ 582.167063][ T5234] thrustmaster 0003:044F:B65A.0032: unknown main item tag 0x0 [ 582.239512][ T5234] thrustmaster 0003:044F:B65A.0032: hidraw0: USB HID vbc.30 Device [HID 044f:b65a] on usb-dummy_hcd.4-1/input0 [ 582.252206][ T5234] thrustmaster 0003:044F:B65A.0032: no inputs found [ 582.333365][ T5234] usb 5-1: USB disconnect, device number 27 [ 582.462571][ T5182] Bluetooth: hci5: command tx timeout [ 582.469057][ T4634] wacom 0003:056A:0045.0033: unbalanced delimiter at end of report description [ 582.498771][ T4634] wacom 0003:056A:0045.0033: parse failed [ 582.505696][ T4634] wacom 0003:056A:0045.0033: probe with driver wacom failed with error -22 [ 582.529653][ T9832] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2009'. [ 582.543406][ T9832] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 582.564772][ T9735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 582.644722][ T9735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 582.679642][ T5234] usb 4-1: USB disconnect, device number 26 [ 582.728059][ T9735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 582.788085][ T4079] bridge_slave_1: left allmulticast mode [ 582.796282][ T4079] bridge_slave_1: left promiscuous mode [ 582.807387][ T4079] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.873427][ T4079] bridge_slave_0: left allmulticast mode [ 582.886547][ T4079] bridge_slave_0: left promiscuous mode [ 582.893435][ T4079] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.611882][ T4079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.701287][ T4079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.755392][ T4079] bond0 (unregistering): Released all slaves [ 583.834014][ T9735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 583.864731][ T9843] loop1: detected capacity change from 0 to 512 [ 583.889485][ T9843] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.916019][ T9843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 584.030253][ T9843] EXT4-fs (loop1): 1 truncate cleaned up [ 584.039558][ T9843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.108483][ T9843] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 584.494593][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.934077][ T4079] hsr_slave_0: left promiscuous mode [ 584.985325][ T4079] hsr_slave_1: left promiscuous mode [ 585.007202][ T4079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.017467][ T4079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.046591][ T4079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.054758][ T4079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.131968][ T4079] veth1_macvtap: left promiscuous mode [ 585.138076][ T4079] veth0_macvtap: left promiscuous mode [ 585.144466][ T4079] veth1_vlan: left promiscuous mode [ 585.150111][ T4079] veth0_vlan: left promiscuous mode [ 585.720600][ T9871] smb3: Bad value for 'uid' [ 585.725601][ T9871] smb3: Bad value for 'uid' [ 585.728587][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2024'. [ 585.749119][ T9870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2024'. [ 586.305045][ T4079] team0 (unregistering): Port device team_slave_1 removed [ 586.345813][ T4079] team0 (unregistering): Port device team_slave_0 removed [ 586.595718][ T9867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2022'. [ 586.612720][ T9867] syz_tun: entered promiscuous mode [ 587.497669][ T9735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.769170][ T9735] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.832761][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.840568][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.965510][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.973399][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.031933][ T9896] overlayfs: disabling nfs_export due to verity=require [ 588.042812][ T9896] overlayfs: missing 'lowerdir' [ 590.037634][ T9932] Bluetooth: MGMT ver 1.23 [ 590.206712][ T9735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.668310][ T9942] overlayfs: missing 'lowerdir' [ 590.697304][ T9823] IPVS: starting estimator thread 0... [ 590.756942][ T9735] veth0_vlan: entered promiscuous mode [ 590.836492][ T9943] IPVS: using max 192 ests per chain, 9600 per kthread [ 590.893425][ T9735] veth1_vlan: entered promiscuous mode [ 591.210873][ T9735] veth0_macvtap: entered promiscuous mode [ 591.301809][ T9735] veth1_macvtap: entered promiscuous mode [ 591.527679][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.538660][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.548844][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.562397][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.573033][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.583885][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.594299][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.605143][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.620495][ T9735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.860008][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.870888][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.881175][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.892030][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.902471][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.913293][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.923590][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.937928][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.954652][ T9735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.169599][ T9959] loop1: detected capacity change from 0 to 1764 [ 592.219979][ T9735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.229901][ T9735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.242781][ T9735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.251892][ T9735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.462972][T10024] netlink: 'syz.4.2088': attribute type 8 has an invalid length. [ 596.452780][ T5244] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 596.722171][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.733979][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.747158][ T5244] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 596.757546][ T5244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.825006][ T5244] usb 2-1: config 0 descriptor?? [ 597.279462][ T9823] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 597.348536][ T5244] topre 0003:0853:0146.0034: hidraw0: USB HID v0.00 Device [HID 0853:0146] on usb-dummy_hcd.1-1/input0 [ 597.534663][ T9823] usb 4-1: Using ep0 maxpacket: 32 [ 597.623308][ T5244] usb 2-1: USB disconnect, device number 21 [ 597.623589][ T9823] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 597.639045][ T9823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.648346][ T9823] usb 4-1: Product: syz [ 597.653398][ T9823] usb 4-1: Manufacturer: syz [ 597.658355][ T9823] usb 4-1: SerialNumber: syz [ 597.695163][ T9823] usb 4-1: config 0 descriptor?? [ 597.708778][ T3155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.717223][ T3155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.736326][ T9823] hub 4-1:0.0: bad descriptor, ignoring hub [ 597.742711][ T9823] hub 4-1:0.0: probe with driver hub failed with error -5 [ 597.757155][ T9823] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 597.893603][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.901925][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.914430][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 597.921754][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.425142][ T9823] gspca_vc032x: reg_r err -71 [ 598.430174][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.435981][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.441487][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.447199][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.452926][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.458539][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.464143][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.469654][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.475267][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.480866][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.495331][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.500847][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.508611][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.514245][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.519747][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.525641][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.531145][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.536814][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.542454][ T9823] gspca_vc032x: I2c Bus Busy Wait 00 [ 598.547967][ T9823] gspca_vc032x: Unknown sensor... [ 598.554138][ T9823] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 598.683462][ T9823] usb 4-1: USB disconnect, device number 27 [ 598.989655][T10072] program syz.4.2105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.531246][T10077] loop4: detected capacity change from 0 to 512 [ 599.575975][T10077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 599.618458][T10077] EXT4-fs: old and new quota format mixing [ 599.645179][T10079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2110'. [ 599.737459][T10081] loop3: detected capacity change from 0 to 512 [ 599.802976][T10081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 599.990077][T10081] EXT4-fs (loop3): 1 truncate cleaned up [ 599.998031][T10081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.999191][T10077] loop4: detected capacity change from 0 to 1764 [ 600.255475][T10081] tmpfs: Cannot retroactively limit inodes [ 600.313798][T10093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.689471][ T6562] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 600.757561][ T6562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.982897][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 601.157712][T10101] loop1: detected capacity change from 0 to 2048 [ 601.203144][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 601.228226][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 601.240107][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.254887][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 601.265987][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.301104][T10101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.314140][T10101] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.357841][ T25] usb 3-1: config 0 descriptor?? [ 601.704110][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.049146][ T25] usb 3-1: string descriptor 0 read error: -71 [ 602.083918][ T25] uclogic 0003:256C:006E.0035: failed retrieving string descriptor #200: -71 [ 602.093423][ T25] uclogic 0003:256C:006E.0035: failed retrieving pen parameters: -71 [ 602.101797][ T25] uclogic 0003:256C:006E.0035: failed probing pen v2 parameters: -71 [ 602.110811][ T25] uclogic 0003:256C:006E.0035: failed probing parameters: -71 [ 602.119138][ T25] uclogic 0003:256C:006E.0035: probe with driver uclogic failed with error -71 [ 602.228499][ T25] usb 3-1: USB disconnect, device number 15 [ 602.823861][T10133] netlink: 'syz.0.2135': attribute type 2 has an invalid length. [ 603.242628][T10139] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 603.242628][T10139] SÃȘØÈžZ§6ŸÂ' [ 605.021829][T10174] program syz.1.2154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.699444][T10187] loop3: detected capacity change from 0 to 4096 [ 606.912784][ T9823] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 607.153265][ T9823] usb 2-1: Using ep0 maxpacket: 32 [ 607.202577][ T9823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 607.214549][ T9823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 607.229071][ T9823] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 607.238722][ T9823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.284634][ T9823] usb 2-1: config 0 descriptor?? [ 607.299531][T10205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.428968][ T9823] hub 2-1:0.0: USB hub found [ 607.674273][ T9823] hub 2-1:0.0: 7 ports detected [ 607.680773][ T9823] hub 2-1:0.0: insufficient power available to use all downstream ports [ 607.887155][ T9823] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 607.894331][ T9823] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 607.949224][ T9823] usbhid 2-1:0.0: can't add hid device: -71 [ 607.957331][ T9823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 608.017243][ T9823] usb 2-1: USB disconnect, device number 22 [ 608.258045][T10221] loop2: detected capacity change from 0 to 2048 [ 608.313737][T10221] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 608.371881][T10227] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 608.392857][T10228] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 608.394301][T10221] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 608.583322][T10221] Remounting filesystem read-only [ 609.310212][T10238] loop1: detected capacity change from 0 to 64 [ 609.534016][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2188'. [ 610.714191][T10262] loop3: detected capacity change from 0 to 512 [ 610.736251][T10262] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 611.479547][T10270] loop2: detected capacity change from 0 to 1024 [ 611.552600][T10270] EXT4-fs: Ignoring removed oldalloc option [ 611.624102][T10270] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 611.750174][T10270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.848288][T10281] loop3: detected capacity change from 0 to 16 [ 612.230874][ T9735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.661576][T10291] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 612.672400][T10291] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 613.318003][T10311] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 613.709192][T10315] loop2: detected capacity change from 0 to 256 [ 613.853026][T10315] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 614.002644][ T29] audit: type=1800 audit(1726301156.747:30): pid=10315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2219" name="bus" dev="loop2" ino=1048693 res=0 errno=0 [ 614.349617][T10325] netlink: 'syz.1.2224': attribute type 62 has an invalid length. [ 614.393856][T10328] loop2: detected capacity change from 0 to 128 [ 614.420969][T10329] loop4: detected capacity change from 0 to 256 [ 614.464423][T10329] exfat: Deprecated parameter 'utf8' [ 614.510086][T10328] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 614.542754][T10328] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 614.671707][T10329] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 614.854197][T10328] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: writeback. [ 615.244265][ T9735] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.173714][ T9823] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 616.412744][ T9823] usb 2-1: Using ep0 maxpacket: 16 [ 616.447940][ T9823] usb 2-1: config index 0 descriptor too short (expected 58916, got 36) [ 616.457027][ T9823] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 616.465850][ T9823] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 616.475187][ T9823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.486536][ T9823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.496766][ T9823] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 616.511926][ T9823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.559013][ T9823] usb 2-1: config 0 descriptor?? [ 617.079324][ T9823] savu 0003:1E7D:2D5A.0036: unknown main item tag 0x0 [ 617.090338][ T9823] savu 0003:1E7D:2D5A.0036: unknown main item tag 0x0 [ 617.097742][ T9823] savu 0003:1E7D:2D5A.0036: unknown main item tag 0x0 [ 617.104992][ T9823] savu 0003:1E7D:2D5A.0036: unknown main item tag 0x0 [ 617.112140][ T9823] savu 0003:1E7D:2D5A.0036: unknown main item tag 0x0 [ 617.177651][ T9823] savu 0003:1E7D:2D5A.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 617.343044][ T5244] usb 2-1: USB disconnect, device number 23 [ 617.765533][T10379] loop3: detected capacity change from 0 to 64 [ 617.899681][T10379] hfs: small file entry [ 619.298060][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 619.434983][T10403] fuse: Unexpected value for 'default_permissions' [ 619.501621][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.501823][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.502050][ T25] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 619.502399][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.520407][ T25] usb 3-1: config 0 descriptor?? [ 619.731385][T10405] loop1: detected capacity change from 0 to 1024 [ 619.999619][ T25] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor [ 620.064908][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0037/input/input31 [ 620.104274][ T4079] hfsplus: b-tree write err: -5, ino 4 [ 620.172624][ T5263] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 620.263870][ T25] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 620.352571][ T25] usb 3-1: USB disconnect, device number 16 [ 620.436652][ T5263] usb 4-1: Using ep0 maxpacket: 8 [ 620.538685][ T5263] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 620.548288][ T5263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.556892][ T5263] usb 4-1: Product: syz [ 620.561326][ T5263] usb 4-1: Manufacturer: syz [ 620.566323][ T5263] usb 4-1: SerialNumber: syz [ 620.600757][ T5263] usb 4-1: config 0 descriptor?? [ 620.873987][ T5263] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 621.260736][ T5263] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 621.307206][ T5263] usb 4-1: USB disconnect, device number 28 [ 621.356401][T10427] loop2: detected capacity change from 0 to 64 [ 621.580878][T10429] loop1: detected capacity change from 0 to 512 [ 621.609127][T10429] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 621.619767][T10429] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 622.053776][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2279'. [ 622.519062][T10443] loop4: detected capacity change from 0 to 1024 [ 622.543887][T10443] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 622.560430][T10443] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 622.588119][T10443] EXT4-fs (loop4): journal inode is deleted [ 622.738440][T10443] openvswitch: netlink: Key type 12336 is out of range max 32 [ 623.057994][T10452] loop3: detected capacity change from 0 to 256 [ 623.120194][T10456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.305633][T10452] FAT-fs (loop3): Directory bread(block 64) failed [ 623.320875][T10452] FAT-fs (loop3): Directory bread(block 65) failed [ 623.328183][T10452] FAT-fs (loop3): Directory bread(block 66) failed [ 623.335199][T10452] FAT-fs (loop3): Directory bread(block 67) failed [ 623.342176][T10452] FAT-fs (loop3): Directory bread(block 68) failed [ 623.349145][T10452] FAT-fs (loop3): Directory bread(block 69) failed [ 623.356313][T10452] FAT-fs (loop3): Directory bread(block 70) failed [ 623.364503][T10452] FAT-fs (loop3): Directory bread(block 71) failed [ 623.378867][T10452] FAT-fs (loop3): Directory bread(block 72) failed [ 623.387931][T10452] FAT-fs (loop3): Directory bread(block 73) failed [ 623.663706][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2291'. [ 623.673176][T10461] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2291'. [ 623.689001][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 623.700221][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 623.709510][T10461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2291'. [ 623.965276][T10466] devtmpfs: Bad value for 'size' [ 625.033667][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 625.290800][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 625.300545][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.309268][ T25] usb 5-1: Product: syz [ 625.317597][ T25] usb 5-1: Manufacturer: syz [ 625.323659][ T25] usb 5-1: SerialNumber: syz [ 625.388043][ T25] usb 5-1: config 0 descriptor?? [ 625.436643][ T25] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 625.576247][T10494] loop2: detected capacity change from 0 to 1024 [ 625.939827][ T25] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 626.171241][ T9823] usb 5-1: USB disconnect, device number 28 [ 626.428114][ T29] audit: type=1326 audit(1726301169.197:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 626.454937][ T29] audit: type=1326 audit(1726301169.197:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 626.478947][ T29] audit: type=1326 audit(1726301169.207:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 626.501664][ T29] audit: type=1326 audit(1726301169.217:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 626.524988][ T29] audit: type=1326 audit(1726301169.317:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 626.551080][ T29] audit: type=1326 audit(1726301169.317:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 626.575011][ T29] audit: type=1326 audit(1726301169.317:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365c77def9 code=0x7ffc0000 [ 627.136816][T10518] loop1: detected capacity change from 0 to 256 [ 627.221434][T10518] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xa154a131, utbl_chksum : 0xe619d30d) [ 627.374697][T10518] syz.1.2319: attempt to access beyond end of device [ 627.374697][T10518] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 627.588465][T10518] syz.1.2319: attempt to access beyond end of device [ 627.588465][T10518] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 627.603032][T10518] syz.1.2319: attempt to access beyond end of device [ 627.603032][T10518] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 627.702677][ T29] audit: type=1800 audit(1726301170.437:38): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2319" name="file1" dev="loop1" ino=1048714 res=0 errno=0 [ 628.333548][ T9823] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 628.407180][T10540] loop1: detected capacity change from 0 to 256 [ 628.553608][ T9823] usb 3-1: Using ep0 maxpacket: 16 [ 628.587540][ T9823] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 628.608291][ T9823] usb 3-1: config 0 has no interface number 0 [ 628.620121][ T9823] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 628.630636][ T9823] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 628.681486][ T9823] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 628.691264][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.707191][ T9823] usb 3-1: Product: syz [ 628.711717][ T9823] usb 3-1: Manufacturer: syz [ 628.716967][ T9823] usb 3-1: SerialNumber: syz [ 628.760905][ T9823] usb 3-1: config 0 descriptor?? [ 628.769992][T10534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 628.793372][T10534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 629.075898][T10534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 629.123924][T10534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 629.363888][ T9823] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 629.374644][ T9823] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 629.393183][ T9823] asix 3-1:0.251: probe with driver asix failed with error -5 [ 629.531802][ T9823] usb 3-1: USB disconnect, device number 17 [ 629.571543][T10554] netlink: 'syz.3.2336': attribute type 1 has an invalid length. [ 629.580056][T10554] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2336'. [ 630.122844][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 631.039459][T10583] loop3: detected capacity change from 0 to 512 [ 631.317562][T10583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.331033][T10583] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 631.431731][ T5182] Bluetooth: hci5: link tx timeout [ 631.437385][ T5182] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 631.916366][T10598] loop4: detected capacity change from 0 to 1024 [ 632.003997][ T6562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.199706][ T4079] hfsplus: b-tree write err: -5, ino 4 [ 632.837851][T10615] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 633.483384][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 633.504066][T10629] loop2: detected capacity change from 0 to 256 [ 634.342073][T10646] loop4: detected capacity change from 0 to 64 [ 635.076392][T10661] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 635.129430][T10662] netlink: 'syz.3.2383': attribute type 3 has an invalid length. [ 635.311695][T10658] loop1: detected capacity change from 0 to 1764 [ 635.406950][T10666] loop4: detected capacity change from 0 to 8 [ 635.564848][T10669] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2387'. [ 636.079142][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 636.759980][T10670] loop3: detected capacity change from 0 to 4096 [ 636.914860][ T5263] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 637.162778][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 637.174731][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 637.186342][ T5263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 637.203547][ T5263] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 637.214414][ T5263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.249992][ T5263] usb 5-1: config 0 descriptor?? [ 637.258533][T10685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 637.483010][ T5244] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 637.737979][ T5263] plantronics 0003:047F:FFFF.0038: unknown main item tag 0xd [ 637.753770][ T5244] usb 3-1: Using ep0 maxpacket: 16 [ 637.803466][ T5244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.818761][ T5244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.830287][ T5244] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 637.839895][ T5244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.889785][ T5263] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 637.923928][ T5244] usb 3-1: config 0 descriptor?? [ 637.951337][ T5263] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 637.982828][ T5263] usb 5-1: USB disconnect, device number 29 [ 638.460399][ T5244] wacom 0003:056A:00B1.0039: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 638.486689][ T5244] wacom 0003:056A:00B1.0039: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.2-1/input0 [ 638.502141][ T5244] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B1.0039/input/input35 [ 638.653942][ T5244] usb 3-1: USB disconnect, device number 18 [ 639.094034][ T5182] Bluetooth: hci5: command 0x0405 tx timeout [ 639.604750][T10730] loop4: detected capacity change from 0 to 256 [ 639.677197][T10730] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 639.758933][T10730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2415'. [ 640.611569][T10743] loop4: detected capacity change from 0 to 256 [ 640.833731][T10743] FAT-fs (loop4): Directory bread(block 64) failed [ 640.840679][T10743] FAT-fs (loop4): Directory bread(block 65) failed [ 640.851328][T10743] FAT-fs (loop4): Directory bread(block 66) failed [ 640.859153][T10743] FAT-fs (loop4): Directory bread(block 67) failed [ 640.866389][T10743] FAT-fs (loop4): Directory bread(block 68) failed [ 640.873420][T10743] FAT-fs (loop4): Directory bread(block 69) failed [ 640.888665][T10743] FAT-fs (loop4): Directory bread(block 70) failed [ 640.895616][T10743] FAT-fs (loop4): Directory bread(block 71) failed [ 640.902777][T10743] FAT-fs (loop4): Directory bread(block 72) failed [ 640.909590][T10743] FAT-fs (loop4): Directory bread(block 73) failed [ 642.146126][T10770] netlink: 'syz.4.2435': attribute type 1 has an invalid length. [ 642.198083][T10770] netlink: 'syz.4.2435': attribute type 9 has an invalid length. [ 642.692686][ T5239] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 642.913024][ T5239] usb 4-1: Using ep0 maxpacket: 16 [ 642.947574][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.959146][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.969392][ T5239] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 642.979028][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.079926][ T5239] usb 4-1: config 0 descriptor?? [ 643.200777][T10784] loop1: detected capacity change from 0 to 512 [ 643.246636][T10784] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.299776][T10784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 643.357570][T10784] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 643.430314][T10784] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 643.463773][T10784] EXT4-fs (loop1): orphan cleanup on readonly fs [ 643.507312][T10784] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2442: Invalid block bitmap block 0 in block_group 0 [ 643.528552][T10784] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2442: Invalid block bitmap block 0 in block_group 0 [ 643.576745][ T5239] uclogic 0003:28BD:0071.003A: interface is invalid, ignoring [ 643.597985][T10784] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2442: Invalid block bitmap block 0 in block_group 0 [ 643.626099][T10784] Quota error (device loop1): write_blk: dquota write failed [ 643.635523][T10784] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 643.653439][T10784] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2442: Failed to acquire dquot type 1 [ 643.715910][T10784] EXT4-fs (loop1): 1 orphan inode deleted [ 643.731735][ T3021] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 643.741839][ T3021] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u8:9: Failed to release dquot type 1 [ 643.759135][T10793] loop4: detected capacity change from 0 to 64 [ 643.933654][T10793] hfs: walked past end of dir [ 643.984915][T10784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 644.023953][ T25] usb 4-1: USB disconnect, device number 29 [ 644.584866][T10784] syz.1.2442 (10784) used greatest stack depth: 4312 bytes left [ 644.724905][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.668081][T10813] loop3: detected capacity change from 0 to 256 [ 646.692817][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 646.697244][T10813] exfat: Deprecated parameter 'namecase' [ 646.803189][T10816] loop1: detected capacity change from 0 to 128 [ 646.835018][T10813] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 646.870329][T10816] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 646.910665][T10816] sysv_count_free_blocks: free block count was -2041545935, correcting to 0 [ 646.935637][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 646.947912][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 646.959557][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 646.969921][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.983453][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.992984][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.054536][ T25] usb 5-1: config 0 descriptor?? [ 647.476521][T10816] sysv_count_free_inodes: unable to read inode table [ 647.528908][T10826] loop3: detected capacity change from 0 to 64 [ 647.572969][ T25] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 647.580792][ T25] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 647.588754][ T25] plantronics 0003:047F:FFFF.003B: unbalanced collection at end of report description [ 647.700109][ T25] plantronics 0003:047F:FFFF.003B: parse failed [ 647.710902][ T25] plantronics 0003:047F:FFFF.003B: probe with driver plantronics failed with error -22 [ 647.778962][ T5630] sysv_free_block: trying to free block not in datazone [ 647.787665][ T5630] sysv_free_block: trying to free block not in datazone [ 647.794986][ T5630] sysv_free_block: trying to free block not in datazone [ 647.802464][ T5630] sysv_free_block: trying to free block not in datazone [ 647.809800][ T5630] sysv_free_block: trying to free block not in datazone [ 647.817210][ T5630] sysv_free_block: trying to free block not in datazone [ 647.824507][ T5630] sysv_free_block: trying to free block not in datazone [ 647.877928][ T5630] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 647.879585][ T9823] usb 5-1: USB disconnect, device number 30 [ 647.966645][T10829] dvmrp5: entered allmulticast mode [ 648.033668][T10829] dvmrp5: left allmulticast mode [ 648.794769][T10842] loop2: detected capacity change from 0 to 512 [ 648.965773][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 649.010502][T10842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.023907][T10842] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 649.170435][T10852] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2473'. [ 649.545223][ T9735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.477204][ T29] audit: type=1326 audit(1726301193.207:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.4.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d7437def9 code=0x0 [ 651.163615][T10888] loop3: detected capacity change from 0 to 64 [ 652.023554][T10903] loop3: detected capacity change from 0 to 256 [ 652.095912][T10903] exfat: Deprecated parameter 'namecase' [ 652.102480][T10903] exfat: Deprecated parameter 'utf8' [ 652.108375][T10903] exfat: Deprecated parameter 'namecase' [ 652.271832][T10903] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 652.908615][T10917] tipc: Started in network mode [ 652.913920][T10917] tipc: Node identity 101, cluster identity 4711 [ 652.920588][T10917] tipc: Node number set to 257 [ 652.931378][T10917] tipc: Cannot configure node identity twice [ 652.944237][T10919] loop1: detected capacity change from 0 to 256 [ 652.965867][T10919] exfat: Deprecated parameter 'namecase' [ 653.048597][T10919] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 653.395726][T10927] loop4: detected capacity change from 0 to 64 [ 653.921762][T10931] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2512'. [ 654.147391][ T3577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.310959][ T3577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.465423][ T3577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.617979][ T3577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.933196][ T3577] bridge_slave_1: left allmulticast mode [ 654.933310][ T3577] bridge_slave_1: left promiscuous mode [ 654.934297][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.959297][ T3577] bridge_slave_0: left allmulticast mode [ 654.959940][ T3577] bridge_slave_0: left promiscuous mode [ 654.962105][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.597734][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.764028][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.809809][ T3577] bond0 (unregistering): Released all slaves [ 656.793669][ T3577] hsr_slave_0: left promiscuous mode [ 656.858283][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 656.866355][ T3577] hsr_slave_1: left promiscuous mode [ 656.889472][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 656.897756][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.906306][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.960037][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 656.996458][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 657.018817][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 657.035531][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.043578][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.054557][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 657.147204][ T3577] veth1_macvtap: left promiscuous mode [ 657.153629][ T3577] veth0_macvtap: left promiscuous mode [ 657.164710][ T3577] veth1_vlan: left promiscuous mode [ 657.170324][ T3577] veth0_vlan: left promiscuous mode [ 657.675298][ T5263] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 658.307056][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 658.341459][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 659.163419][ T51] Bluetooth: hci0: command tx timeout [ 659.423352][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.430351][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.903069][ T5239] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 661.139318][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.151045][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.165106][ T5239] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 661.176198][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.253666][ T51] Bluetooth: hci0: command tx timeout [ 661.309490][ T5239] usb 5-1: config 0 descriptor?? [ 661.328626][T10955] chnl_net:caif_netlink_parms(): no params data found [ 661.823002][ T5239] petalynx 0003:18B1:0037.003C: collection stack underflow [ 661.830768][ T5239] petalynx 0003:18B1:0037.003C: item 0 1 0 12 parsing failed [ 661.887816][ T5239] petalynx 0003:18B1:0037.003C: parse failed [ 661.894777][ T5239] petalynx 0003:18B1:0037.003C: probe with driver petalynx failed with error -22 [ 662.018078][ T5239] usb 5-1: USB disconnect, device number 31 [ 663.332922][ T51] Bluetooth: hci0: command tx timeout [ 663.414831][ T5263] usb 4-1: device not accepting address 30, error -71 [ 663.859624][T10991] loop2: detected capacity change from 0 to 1024 [ 663.984785][T10991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.378922][ T9735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.386569][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.396664][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.405520][T10955] bridge_slave_0: entered allmulticast mode [ 664.414941][T10955] bridge_slave_0: entered promiscuous mode [ 664.479480][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.489380][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.497409][T10955] bridge_slave_1: entered allmulticast mode [ 664.507347][T10955] bridge_slave_1: entered promiscuous mode [ 664.855302][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.937365][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.112472][T10955] team0: Port device team_slave_0 added [ 665.183220][T10955] team0: Port device team_slave_1 added [ 665.371993][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.379502][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.406176][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.412952][ T51] Bluetooth: hci0: command tx timeout [ 665.511060][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.518460][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.545481][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.857441][T10955] hsr_slave_0: entered promiscuous mode [ 665.921011][T10955] hsr_slave_1: entered promiscuous mode [ 665.947330][T10955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.955836][T10955] Cannot create hsr debugfs directory [ 666.722680][ C0] ===================================================== [ 666.730026][ C0] BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 666.738265][ C0] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 666.744162][ C0] nf_send_reset6+0xd84/0x15b0 [ 666.749154][ C0] nft_reject_inet_eval+0x3c1/0x880 [ 666.754665][ C0] nft_do_chain+0x438/0x22a0 [ 666.759472][ C0] nft_do_chain_inet+0x41a/0x4f0 [ 666.764783][ C0] nf_hook_slow+0xf4/0x400 [ 666.769396][ C0] ip6_input+0x2fe/0x430 [ 666.773968][ C0] ip6_rcv_finish+0x617/0x970 [ 666.778861][ C0] ipv6_rcv+0xde/0x390 [ 666.783213][ C0] __netif_receive_skb+0x1da/0xa00 [ 666.788580][ C0] process_backlog+0x4ad/0xa50 [ 666.793671][ C0] __napi_poll+0xe7/0x980 [ 666.798233][ C0] net_rx_action+0xa5a/0x19b0 [ 666.803243][ C0] handle_softirqs+0x1ce/0x800 [ 666.808239][ C0] __do_softirq+0x14/0x1a [ 666.812864][ C0] do_softirq+0x9a/0x100 [ 666.817428][ C0] __local_bh_enable_ip+0x9f/0xb0 [ 666.822763][ C0] __dev_queue_xmit+0x2692/0x5610 [ 666.828030][ C0] neigh_resolve_output+0x9ca/0xae0 [ 666.833551][ C0] ip6_finish_output2+0x2347/0x2ba0 [ 666.838966][ C0] ip6_finish_output+0xbb8/0x14b0 [ 666.844321][ C0] ip6_output+0x356/0x620 [ 666.848877][ C0] ip6_xmit+0x1ba6/0x25d0 [ 666.853549][ C0] inet6_csk_xmit+0x442/0x530 [ 666.858450][ C0] __tcp_transmit_skb+0x3b07/0x4880 [ 666.863939][ C0] tcp_connect+0x35b6/0x7130 [ 666.868732][ C0] tcp_v6_connect+0x1bcc/0x1e40 [ 666.873858][ C0] __inet_stream_connect+0x2ef/0x1730 [ 666.879492][ C0] inet_stream_connect+0x6a/0xd0 [ 666.884751][ C0] kernel_connect+0x9f/0xe0 [ 666.889439][ C0] smc_connect+0xda0/0x1350 [ 666.894248][ C0] __sys_connect+0x606/0x690 [ 666.899062][ C0] __x64_sys_connect+0x91/0xe0 [ 666.904114][ C0] x64_sys_call+0x27a5/0x3ba0 [ 666.909029][ C0] do_syscall_64+0xcd/0x1e0 [ 666.913835][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.919987][ C0] [ 666.922481][ C0] Uninit was stored to memory at: [ 666.927780][ C0] nf_reject_ip6_tcphdr_put+0x60c/0x6c0 [ 666.933629][ C0] nf_send_reset6+0xd84/0x15b0 [ 666.938609][ C0] nft_reject_inet_eval+0x3c1/0x880 [ 666.944095][ C0] nft_do_chain+0x438/0x22a0 [ 666.948913][ C0] nft_do_chain_inet+0x41a/0x4f0 [ 666.954177][ C0] nf_hook_slow+0xf4/0x400 [ 666.958790][ C0] ip6_input+0x2fe/0x430 [ 666.963307][ C0] ip6_rcv_finish+0x617/0x970 [ 666.968188][ C0] ipv6_rcv+0xde/0x390 [ 666.972519][ C0] __netif_receive_skb+0x1da/0xa00 [ 666.977880][ C0] process_backlog+0x4ad/0xa50 [ 666.982988][ C0] __napi_poll+0xe7/0x980 [ 666.987558][ C0] net_rx_action+0xa5a/0x19b0 [ 666.992556][ C0] handle_softirqs+0x1ce/0x800 [ 666.997559][ C0] __do_softirq+0x14/0x1a [ 667.002106][ C0] [ 667.004619][ C0] Uninit was stored to memory at: [ 667.009924][ C0] nf_reject_ip6_tcphdr_put+0x2ca/0x6c0 [ 667.015771][ C0] nf_send_reset6+0xd84/0x15b0 [ 667.020761][ C0] nft_reject_inet_eval+0x3c1/0x880 [ 667.026373][ C0] nft_do_chain+0x438/0x22a0 [ 667.031202][ C0] nft_do_chain_inet+0x41a/0x4f0 [ 667.036513][ C0] nf_hook_slow+0xf4/0x400 [ 667.041132][ C0] ip6_input+0x2fe/0x430 [ 667.045662][ C0] ip6_rcv_finish+0x617/0x970 [ 667.050538][ C0] ipv6_rcv+0xde/0x390 [ 667.054890][ C0] __netif_receive_skb+0x1da/0xa00 [ 667.060252][ C0] process_backlog+0x4ad/0xa50 [ 667.065339][ C0] __napi_poll+0xe7/0x980 [ 667.069906][ C0] net_rx_action+0xa5a/0x19b0 [ 667.074928][ C0] handle_softirqs+0x1ce/0x800 [ 667.079931][ C0] __do_softirq+0x14/0x1a [ 667.084554][ C0] [ 667.086990][ C0] Uninit was created at: [ 667.091500][ C0] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 667.097699][ C0] kmalloc_reserve+0x13d/0x4a0 [ 667.102785][ C0] __alloc_skb+0x363/0x7b0 [ 667.107424][ C0] nf_send_reset6+0x98d/0x15b0 [ 667.112475][ C0] nft_reject_inet_eval+0x3c1/0x880 [ 667.117906][ C0] nft_do_chain+0x438/0x22a0 [ 667.122756][ C0] nft_do_chain_inet+0x41a/0x4f0 [ 667.127913][ C0] nf_hook_slow+0xf4/0x400 [ 667.132599][ C0] ip6_input+0x2fe/0x430 [ 667.137059][ C0] ip6_rcv_finish+0x617/0x970 [ 667.141981][ C0] ipv6_rcv+0xde/0x390 [ 667.146322][ C0] __netif_receive_skb+0x1da/0xa00 [ 667.151725][ C0] process_backlog+0x4ad/0xa50 [ 667.156821][ C0] __napi_poll+0xe7/0x980 [ 667.161399][ C0] net_rx_action+0xa5a/0x19b0 [ 667.166526][ C0] handle_softirqs+0x1ce/0x800 [ 667.171558][ C0] __do_softirq+0x14/0x1a [ 667.176189][ C0] [ 667.178647][ C0] CPU: 0 UID: 0 PID: 11035 Comm: syz.4.2557 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 667.189724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 667.200048][ C0] ===================================================== [ 667.207204][ C0] Disabling lock debugging due to kernel taint [ 667.213573][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 667.220147][ C0] CPU: 0 UID: 0 PID: 11035 Comm: syz.4.2557 Tainted: G B 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 667.232628][ C0] Tainted: [B]=BAD_PAGE [ 667.236892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 667.247097][ C0] Call Trace: [ 667.250490][ C0] [ 667.253437][ C0] dump_stack_lvl+0x216/0x2d0 [ 667.258319][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.264358][ C0] dump_stack+0x1e/0x30 [ 667.268708][ C0] panic+0x4e2/0xcd0 [ 667.272892][ C0] ? kmsan_get_metadata+0x81/0x1c0 [ 667.278235][ C0] kmsan_report+0x2c7/0x2d0 [ 667.282960][ C0] ? kmsan_metadata_is_contiguous+0x1c0/0x1e0 [ 667.289247][ C0] ? x64_sys_call+0x27a5/0x3ba0 [ 667.294301][ C0] ? __msan_warning+0x95/0x120 [ 667.299264][ C0] ? nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 667.305216][ C0] ? nf_send_reset6+0xd84/0x15b0 [ 667.310348][ C0] ? nft_reject_inet_eval+0x3c1/0x880 [ 667.315923][ C0] ? nft_do_chain+0x438/0x22a0 [ 667.320874][ C0] ? nft_do_chain_inet+0x41a/0x4f0 [ 667.326171][ C0] ? nf_hook_slow+0xf4/0x400 [ 667.330940][ C0] ? ip6_input+0x2fe/0x430 [ 667.335533][ C0] ? ip6_rcv_finish+0x617/0x970 [ 667.340572][ C0] ? ipv6_rcv+0xde/0x390 [ 667.344984][ C0] ? __netif_receive_skb+0x1da/0xa00 [ 667.350569][ C0] ? process_backlog+0x4ad/0xa50 [ 667.355728][ C0] ? __napi_poll+0xe7/0x980 [ 667.360436][ C0] ? net_rx_action+0xa5a/0x19b0 [ 667.365526][ C0] ? handle_softirqs+0x1ce/0x800 [ 667.370685][ C0] ? __do_softirq+0x14/0x1a [ 667.375370][ C0] ? do_softirq+0x9a/0x100 [ 667.380154][ C0] ? __local_bh_enable_ip+0x9f/0xb0 [ 667.385559][ C0] ? __dev_queue_xmit+0x2692/0x5610 [ 667.390968][ C0] ? neigh_resolve_output+0x9ca/0xae0 [ 667.396554][ C0] ? ip6_finish_output2+0x2347/0x2ba0 [ 667.402113][ C0] ? ip6_finish_output+0xbb8/0x14b0 [ 667.407558][ C0] ? ip6_output+0x356/0x620 [ 667.412274][ C0] ? ip6_xmit+0x1ba6/0x25d0 [ 667.417089][ C0] ? inet6_csk_xmit+0x442/0x530 [ 667.422143][ C0] ? __tcp_transmit_skb+0x3b07/0x4880 [ 667.427720][ C0] ? tcp_connect+0x35b6/0x7130 [ 667.432658][ C0] ? tcp_v6_connect+0x1bcc/0x1e40 [ 667.437849][ C0] ? __inet_stream_connect+0x2ef/0x1730 [ 667.443634][ C0] ? inet_stream_connect+0x6a/0xd0 [ 667.448966][ C0] ? kernel_connect+0x9f/0xe0 [ 667.453808][ C0] ? smc_connect+0xda0/0x1350 [ 667.458709][ C0] ? __sys_connect+0x606/0x690 [ 667.463755][ C0] ? __x64_sys_connect+0x91/0xe0 [ 667.468892][ C0] ? x64_sys_call+0x27a5/0x3ba0 [ 667.473952][ C0] ? do_syscall_64+0xcd/0x1e0 [ 667.478827][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.485117][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.491406][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.496821][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.502328][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.508390][ C0] ? csum_partial+0x45e/0x4b0 [ 667.513260][ C0] __msan_warning+0x95/0x120 [ 667.518157][ C0] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 667.523934][ C0] nf_send_reset6+0xd84/0x15b0 [ 667.528932][ C0] nft_reject_inet_eval+0x3c1/0x880 [ 667.534338][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.539768][ C0] ? __pfx_nft_reject_inet_eval+0x10/0x10 [ 667.545787][ C0] nft_do_chain+0x438/0x22a0 [ 667.550660][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.556086][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.561614][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.567030][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.573076][ C0] nft_do_chain_inet+0x41a/0x4f0 [ 667.578204][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 667.583870][ C0] nf_hook_slow+0xf4/0x400 [ 667.588470][ C0] ip6_input+0x2fe/0x430 [ 667.592907][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 667.598498][ C0] ? __pfx_ip6_input+0x10/0x10 [ 667.603455][ C0] ip6_rcv_finish+0x617/0x970 [ 667.608360][ C0] ipv6_rcv+0xde/0x390 [ 667.612695][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 667.618119][ C0] __netif_receive_skb+0x1da/0xa00 [ 667.623450][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.628873][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.634917][ C0] process_backlog+0x4ad/0xa50 [ 667.639932][ C0] ? __pfx_process_backlog+0x10/0x10 [ 667.645551][ C0] __napi_poll+0xe7/0x980 [ 667.650131][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.655561][ C0] net_rx_action+0xa5a/0x19b0 [ 667.660462][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.665885][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.671946][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 667.677306][ C0] handle_softirqs+0x1ce/0x800 [ 667.682335][ C0] __do_softirq+0x14/0x1a [ 667.686873][ C0] do_softirq+0x9a/0x100 [ 667.691345][ C0] [ 667.694406][ C0] [ 667.697466][ C0] __local_bh_enable_ip+0x9f/0xb0 [ 667.702721][ C0] __dev_queue_xmit+0x2692/0x5610 [ 667.707981][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.714047][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.719464][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.725497][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.730932][ C0] ? __dev_queue_xmit+0x352/0x5610 [ 667.736364][ C0] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 667.742854][ C0] neigh_resolve_output+0x9ca/0xae0 [ 667.748307][ C0] ? __pfx_eth_header+0x10/0x10 [ 667.753385][ C0] ? __pfx_neigh_resolve_output+0x10/0x10 [ 667.759321][ C0] ip6_finish_output2+0x2347/0x2ba0 [ 667.764708][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.770168][ C0] ip6_finish_output+0xbb8/0x14b0 [ 667.775447][ C0] ip6_output+0x356/0x620 [ 667.779996][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 667.785697][ C0] ? __pfx_ip6_output+0x10/0x10 [ 667.790765][ C0] ? __pfx_ip6_output+0x10/0x10 [ 667.795833][ C0] ip6_xmit+0x1ba6/0x25d0 [ 667.800476][ C0] ? __pfx_dst_output+0x10/0x10 [ 667.805610][ C0] inet6_csk_xmit+0x442/0x530 [ 667.810549][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 667.815973][ C0] __tcp_transmit_skb+0x3b07/0x4880 [ 667.821381][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.826805][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.832871][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.838925][ C0] tcp_connect+0x35b6/0x7130 [ 667.843699][ C0] ? tcp_fastopen_defer_connect+0x65/0x430 [ 667.849781][ C0] tcp_v6_connect+0x1bcc/0x1e40 [ 667.854855][ C0] ? __pfx_tcp_v6_connect+0x10/0x10 [ 667.860223][ C0] __inet_stream_connect+0x2ef/0x1730 [ 667.865824][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 667.872388][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.877798][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.883862][ C0] ? __local_bh_enable_ip+0x74/0xb0 [ 667.889292][ C0] ? _raw_spin_unlock_bh+0x2d/0x40 [ 667.894685][ C0] ? lock_sock_nested+0x1de/0x200 [ 667.899996][ C0] inet_stream_connect+0x6a/0xd0 [ 667.905172][ C0] ? __pfx_inet_stream_connect+0x10/0x10 [ 667.911052][ C0] kernel_connect+0x9f/0xe0 [ 667.915752][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.921168][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.927209][ C0] smc_connect+0xda0/0x1350 [ 667.931955][ C0] __sys_connect+0x606/0x690 [ 667.936752][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.942173][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 667.948726][ C0] ? __pfx_smc_connect+0x10/0x10 [ 667.953902][ C0] __x64_sys_connect+0x91/0xe0 [ 667.958875][ C0] x64_sys_call+0x27a5/0x3ba0 [ 667.963760][ C0] do_syscall_64+0xcd/0x1e0 [ 667.968473][ C0] ? clear_bhb_loop+0x25/0x80 [ 667.973366][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.979485][ C0] RIP: 0033:0x7f8d7437def9 [ 667.984045][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.003856][ C0] RSP: 002b:00007f8d750fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 668.012471][ C0] RAX: ffffffffffffffda RBX: 00007f8d74535f80 RCX: 00007f8d7437def9 [ 668.020615][ C0] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 668.028758][ C0] RBP: 00007f8d743f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 668.036891][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.045040][ C0] R13: 0000000000000000 R14: 00007f8d74535f80 R15: 00007fff59176cc8 [ 668.053205][ C0] [ 668.056588][ C0] Kernel Offset: disabled [ 668.061084][ C0] Rebooting in 86400 seconds..