last executing test programs: 20.063110215s ago: executing program 0 (id=2427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @random="79cfaf0bf3ce", @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x2, 0x7, 0x34, 0x67, 0x0, 0xb, 0x6, 0x0, @remote, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x5, [0x8, 0xffffffff]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x3, 0x0, 0xe7}}}}}}, 0x0) 19.340838709s ago: executing program 2 (id=2431): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket(0x10, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x200440c0, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 18.853784018s ago: executing program 0 (id=2432): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000003c0)=0x4a1, 0x4) 18.417473093s ago: executing program 2 (id=2435): r0 = socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xc, 0x2a}, 0x90) 17.548538426s ago: executing program 2 (id=2438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010) close(0x4) 16.425549914s ago: executing program 2 (id=2442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x6) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 15.071292469s ago: executing program 0 (id=2447): sched_setattr(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 14.97833986s ago: executing program 2 (id=2448): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xac}], 0x2, 0x10001, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 13.878403612s ago: executing program 0 (id=2452): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x503c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000ab2200000065"], 0x0}, 0x0) 13.698662547s ago: executing program 2 (id=2454): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x11, 0x6ed, &(0x7f00000003c0)="$eJzs3U1sHFcdAPD/rNf2bioct03TIFWqaaWCsEj8IRfMJQYhZKQKVUGCs9U4jZXNB7aL3B6IC0hcOXBFKgdzgRMIISEhRSpnuFXcLE4VSFx6Snpg0Hytx+6uvY7rj9DfL5rMm3nz3vznPzNvdleyJoDPrMXJaD6IdixOvraRLW9vzXa2t2ZvF+VGJyJGI6IR0ay1St6PWIhiis9nK6qKfvv55cr8tQ8+2v6wWGqWUyOK/9r9A2wOchSb5RQTETFUzo9gV39vPF5/ozvFpJuZLGEvV4mD0zYcEekuP7y4U9NLOlRb6Hu/A0+OpHhu1hT3/3jEuYhoVQ+0zaKycfIRHuhQY9Hm8cUBAAAAZ8b5h/cjNmLstOMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ0n5/v+knB5V5YlIqvf/j9TesT9yyuH2t39krarwoHESwQAAAAAAAADA8XrxYfz2WpqOVctpEo3vD5UL7XL+VqzFcjPicmzEUqzHeqzGdESM1zoa2VhaX1+djpfypQsfp2kaTxUtY3VXy5meLWcGDLh91CMGAAAAAAAAgP8rV+dG8/lPYjHGTjsYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoSyKGilk+XajK49FoRkQrIkay7TYj/l6Vz5DmYRs8OJ44AAAA4Ew5/zAexkaMVctpkn/nv5h/72/FW3En1mMl1qMTy3E9/y2g+Nbf2N6a7Wxvzd7OpogY3t3vN/6zU/7D2IFh5D1G8dtD7z1fyrdox41YyddcjjfibnTiejTylplLVTy1uGrezWJKrhbSNEYHSdD1cp4d+S/K+YloH7TBeJ6R4W5GprLYkiKPT++fifrZGcDePU1Ho/vLz4X+e+r+GFPl/Oq+e0n+m6ZF6Vy1JuKp7+yb8/x6GT7UwRzJ3kzM1K6+i/vnPOKLf/zdD2527ty6mWxOnthl9Fhe7L169J/VGaoyUdiM5ZitZeL5gTNxY+2MZ6Kv3b80NuK5bnkxvh3fi8mYiNdjNVbiR7EU67EcE/GtvLRUXs/Z/+P7Z2ph19LrB8U0Up6XoT0xfeF8Md8vppfytmOxEt+Nu3E9luPV/N9MTMdXYy7mYr52hp8bYKRt9Ljr/9Q/+Je/VBayge/nOwPgCd7d/WR5fbqW1/qYO57X1dc0Ii2fLM8c4nm0/9hY2XlkZWfip7V78PR1M9GK7lOiiu7ZKgPDPTPx63xYWevcubV6c+nenn6Tzd77eyV2H/7ZGUiy6+WZ7hix++rI6p7tWTed113o1jX21v2m3a076E4dKT/DfbKnmbzu+Yj4VRltVpfJxvCs7lKtXfZ5q5XXfZymafF5C4Az79yXz420/93+W/u99s/aN9uvtb45+rXRF0Zi+K/DX29ODb3SeCH5fbwXP46Dv6EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHWnv7nVtLnc7y6p5Cmqb3+1QdSyGaEbvW/OXPtW3yd41FxOAdZlsvNCLyNc0oCwM0/1dElGvuP97hvPu4SfhHeU5OJOH7FJKBN271vX7Kwt3PlYfzKE3TEz+c6l1th26elk7tFHzKheoVWZ+oSpoRfVqdynAEnKAr67fvXVl7+52vrNxeenP5zeU783Nz81Pzc6/OXrmx0mmddnjAMcqf9fnnnNOOBAAAAAAAAAAAABjUYH+ck9xaimJNs9dfERzUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAIFiej+SCSmJ66PJUtb2/NdrKpKmfzoXzLRxHRiIhkIiJ5P2IhiinGa90l/fazGXHtg4+2PyyWmuWUb984+lFsllNMlOFO9N6u1Wtler9ff0nez73+/Q0oKaeh7pqFI/UHn5L/BQAA//+nTAii") syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 10.015423973s ago: executing program 0 (id=2455): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 8.961830324s ago: executing program 0 (id=2462): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x6, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 8.116450187s ago: executing program 4 (id=2464): syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x1, 0x246, &(0x7f00000016c0)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 6.365335864s ago: executing program 4 (id=2467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 5.676864916s ago: executing program 1 (id=2468): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x7, 0x1) 5.177017281s ago: executing program 3 (id=2469): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='\"', @ANYRES16=r0], 0x33) close(r1) 4.539890725s ago: executing program 3 (id=2470): ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000480)={&(0x7f0000000380)=""/32, 0x20}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.889490179s ago: executing program 3 (id=2471): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000040)={0xb, 0x3, 0x1, 0xb, '\x00', 0x6}) 3.524258964s ago: executing program 4 (id=2472): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000001100)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@shortname_win95}, {@shortname_win95}, {@shortname_lower}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 3.446547102s ago: executing program 1 (id=2473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000f61f"], 0x1c}}, 0x0) read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020) 3.135893267s ago: executing program 3 (id=2474): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x24, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}}, 0x0) 2.46186901s ago: executing program 1 (id=2475): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) mount_setattr(r1, 0x0, 0x8000, &(0x7f0000000080)={0x100080, 0x0, 0x80000, {r1}}, 0x20) 2.343144008s ago: executing program 4 (id=2476): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4e1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) 2.299383145s ago: executing program 3 (id=2477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.673971328s ago: executing program 1 (id=2478): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r1, r2], 0x2, 0x80800}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2}) 1.44108334s ago: executing program 4 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) 750.543019ms ago: executing program 1 (id=2480): unshare(0x8000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r0, 0xffffffffffffffff, 0x4}, 0x10) 565.03559ms ago: executing program 3 (id=2481): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x4}) write$P9_RCLUNK(r0, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) 405.251939ms ago: executing program 4 (id=2482): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 0s ago: executing program 1 (id=2483): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xc0}) kernel console output (not intermixed with test programs): t since last fsck: 1 [ 403.254455][ C1] EXT4-fs (loop4): initial error at time 1771267378: ext4_iget_extra_inode:5025: inode 15 [ 403.264826][ C1] EXT4-fs (loop4): last error at time 1771267378: ext4_iget_extra_inode:5025: inode 15 [ 403.281230][ T7876] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.808: couldn't read orphan inode 15 (err -117) [ 403.342571][ T7876] loop4: lost filesystem error report for type 5 error -117 [ 403.346069][ T7876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.011753][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.107787][ T7888] macvtap1: entered promiscuous mode [ 404.115529][ T7888] macvtap1: entered allmulticast mode [ 404.134302][ T7888] syz_tun: entered promiscuous mode [ 404.171518][ T7888] syz_tun: entered allmulticast mode [ 404.211033][ T7888] team0: Device macvtap1 failed to register rx_handler [ 404.279892][ T7888] syz_tun: left allmulticast mode [ 404.310782][ T7888] syz_tun: left promiscuous mode [ 405.140028][ T7896] netlink: 284 bytes leftover after parsing attributes in process `syz.4.816'. [ 405.591091][ T5828] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 405.821495][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.858270][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.878270][ T5828] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 405.930036][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.970948][ T5828] usb 1-1: config 0 descriptor?? [ 406.550006][ T5828] stadia 0003:18D1:9400.000A: collection stack underflow [ 406.587522][ T5828] stadia 0003:18D1:9400.000A: item 0 4 0 12 parsing failed [ 406.653489][ T5828] stadia 0003:18D1:9400.000A: parse failed [ 406.665367][ T5828] stadia 0003:18D1:9400.000A: probe with driver stadia failed with error -22 [ 406.749661][ T5828] usb 1-1: USB disconnect, device number 5 [ 407.207830][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 409.232209][ T5779] Bluetooth: hci5: command 0x1003 tx timeout [ 409.239469][ T5784] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 409.290946][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 409.470513][ T57] wlan1: Trigger new scan to find an IBSS to join [ 409.743846][ T7950] faux_driver vgem: [drm] Unknown color mode 32769; guessing buffer size. [ 410.533563][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 411.098656][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 411.373746][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.398440][ T10] usb 1-1: config 0 has no interface number 0 [ 411.442105][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 411.496235][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.514310][ T10] usb 1-1: Product: syz [ 411.539302][ T10] usb 1-1: Manufacturer: syz [ 411.544813][ T10] usb 1-1: SerialNumber: syz [ 411.586651][ T10] usb 1-1: config 0 descriptor?? [ 411.599641][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'. [ 411.943731][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 412.053639][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 412.118576][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 412.126871][ T10] usb 1-1: media controller created [ 412.389506][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.510731][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.853'. [ 412.520441][ T154] wlan1: Trigger new scan to find an IBSS to join [ 413.279467][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 413.802664][ T7996] delete_channel: no stack [ 413.889022][ T10] usb 1-1: USB disconnect, device number 6 [ 414.600924][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 415.427932][ T8005] loop1: detected capacity change from 0 to 4096 [ 415.436972][ T8010] team0: entered promiscuous mode [ 415.469954][ T8010] team_slave_0: entered promiscuous mode [ 415.472452][ T154] wlan1: Creating new IBSS network, BSSID ee:4f:e4:d9:ce:08 [ 415.488401][ T8010] team_slave_1: entered promiscuous mode [ 415.537643][ T8005] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 415.667667][ T991] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.687755][ T991] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.714318][ T8008] team0: left promiscuous mode [ 415.728736][ T8008] team_slave_0: left promiscuous mode [ 415.750401][ T8008] team_slave_1: left promiscuous mode [ 415.794863][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.858971][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.968566][ T8005] ntfs3(loop1): ino=19, mi_enum_attr [ 415.974152][ T8005] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 416.224098][ T8005] ntfs3(loop1): failed to convert "c46c" to cp874 [ 416.281465][ T8005] ntfs3(loop1): ino=20, mi_enum_attr [ 421.164515][ T8077] Bluetooth: MGMT ver 1.23 [ 422.401773][ T8092] loop2: detected capacity change from 0 to 512 [ 422.638719][ T8092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.732672][ T8092] EXT4-fs (loop2): shut down requested (2) [ 423.128993][ T5831] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 423.152663][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.308552][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 423.379644][ T5831] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 423.420590][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.446984][ T5831] usb 2-1: Product: syz [ 423.452271][ T5831] usb 2-1: Manufacturer: syz [ 423.464212][ T5831] usb 2-1: SerialNumber: syz [ 423.536390][ T5831] usb 2-1: config 0 descriptor?? [ 423.654125][ T5831] gspca_main: se401-2.14.0 probing 047d:5003 [ 424.435247][ T5831] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 425.007914][ T8119] loop3: detected capacity change from 0 to 4096 [ 425.060099][ T8119] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 425.089841][ T5831] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 425.111953][ T5831] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 425.170990][ T5831] usb 2-1: USB disconnect, device number 9 [ 426.273872][ T8128] loop4: detected capacity change from 0 to 4096 [ 426.326460][ T8128] EXT4-fs: Ignoring removed mblk_io_submit option [ 426.418270][ T8128] EXT4-fs (loop4): Test dummy encryption mode enabled [ 426.537500][ T8128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.935852][ T8141] loop3: detected capacity change from 0 to 512 [ 427.095692][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 427.182739][ T8141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.235367][ T8141] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.262453][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.874598][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.142965][ T8163] loop4: detected capacity change from 0 to 4096 [ 429.209323][ T8163] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 429.320468][ T8170] loop3: detected capacity change from 0 to 512 [ 429.365035][ T8170] EXT4-fs: Ignoring removed nobh option [ 429.434289][ T8170] EXT4-fs (loop3): Test dummy encryption mode enabled [ 429.500085][ T8170] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 1: comm syz.3.931: invalid block [ 429.507189][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.933'. [ 429.550378][ T8170] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 429.558125][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 429.574169][ C0] EXT4-fs (loop3): initial error at time 1771267404: __ext4_iget:5378: inode 11: block 1 [ 429.584522][ C0] EXT4-fs (loop3): last error at time 1771267404: __ext4_iget:5378: inode 11: block 1 [ 429.598464][ T8170] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.931: couldn't read orphan inode 11 (err -117) [ 429.639645][ T8170] loop3: lost filesystem error report for type 5 error -117 [ 429.663824][ T8163] ntfs3(loop4): ino=19, mi_enum_attr [ 429.687687][ T8170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.719137][ T8163] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 429.881480][ T8163] ntfs3(loop4): failed to convert "c46c" to cp874 [ 429.902625][ T8163] ntfs3(loop4): ino=20, mi_enum_attr [ 430.122061][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.390204][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.934'. [ 431.692646][ T8192] netlink: 'syz.3.941': attribute type 13 has an invalid length. [ 431.808437][ T8192] netlink: 152 bytes leftover after parsing attributes in process `syz.3.941'. [ 431.876110][ T8192] syz_tun: refused to change device tx_queue_len [ 431.954349][ T8192] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 432.198342][ T5831] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 432.351306][ T8201] loop4: detected capacity change from 0 to 256 [ 432.376029][ T8201] exfat: Deprecated parameter 'utf8' [ 432.398409][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 432.444563][ T5831] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 432.469816][ T8201] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 432.488333][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.531787][ T5831] usb 1-1: Product: syz [ 432.538368][ T5831] usb 1-1: Manufacturer: syz [ 432.560602][ T5831] usb 1-1: SerialNumber: syz [ 432.626291][ T5831] usb 1-1: config 0 descriptor?? [ 432.667368][ T5831] gspca_main: se401-2.14.0 probing 047d:5003 [ 432.877305][ T8200] loop1: detected capacity change from 0 to 4096 [ 433.161417][ T5831] gspca_se401: Wrong descriptor type [ 433.425091][ T5831] usb 1-1: USB disconnect, device number 7 [ 433.742952][ T8209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.948'. [ 435.746914][ T8227] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 435.791090][ C1] Illegal XDP return value 16128 on prog (id 24) dev bond0, expect packet loss! [ 437.644747][ T8258] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 437.651561][ T8258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.694893][ T8258] vhci_hcd vhci_hcd.0: Device attached [ 437.735171][ T8263] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 437.741962][ T8263] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 437.838717][ T5831] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 437.919418][ T8263] vhci_hcd vhci_hcd.0: Device attached [ 437.933681][ T8258] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.958100][ T5301] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 438.040950][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 438.069547][ T8258] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 438.076437][ T8258] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 438.106873][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.122089][ T5831] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 438.138893][ T8258] vhci_hcd vhci_hcd.0: Device attached [ 438.176195][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.199560][ T8264] vhci_hcd: connection closed [ 438.214576][ T12] vhci_hcd vhci_hcd.3: stop threads [ 438.230088][ T8259] vhci_hcd: connection reset by peer [ 438.259568][ T12] vhci_hcd vhci_hcd.3: release socket [ 438.271129][ T5831] usb 3-1: config 0 descriptor?? [ 438.277848][ T8267] vhci_hcd: connection closed [ 438.294956][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 438.334019][ T12] vhci_hcd vhci_hcd.3: stop threads [ 438.356028][ T12] vhci_hcd vhci_hcd.3: release socket [ 438.384614][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 438.413709][ T12] vhci_hcd vhci_hcd.3: stop threads [ 438.433580][ T12] vhci_hcd vhci_hcd.3: release socket [ 438.463639][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 438.815711][ T5831] mcp2221 0003:04D8:00DD.000B: unexpected long global item [ 438.878907][ T5831] mcp2221 0003:04D8:00DD.000B: can't parse reports [ 438.886082][ T5831] mcp2221 0003:04D8:00DD.000B: probe with driver mcp2221 failed with error -22 [ 439.041042][ T5831] usb 3-1: USB disconnect, device number 11 [ 439.261991][ T5784] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 439.332450][ T8283] sch_fq: defrate 0 ignored. [ 442.326695][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 442.438398][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 442.662953][ T10] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 442.693303][ T10] usb 4-1: config 1 has no interface number 0 [ 442.724424][ T10] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 442.792080][ T10] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 442.812621][ T8327] tap0: tun_chr_ioctl cmd 1074812118 [ 442.828551][ T10] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.907317][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 442.936456][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.986454][ T10] usb 4-1: Product: syz [ 443.008336][ T10] usb 4-1: Manufacturer: syz [ 443.008456][ T10] usb 4-1: SerialNumber: syz [ 443.050352][ T8321] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 443.059027][ T5301] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 443.331141][ T8321] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 443.645627][ T10] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 444.017154][ T10] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 444.099706][ T10] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 444.199867][ T10] usb 4-1: USB disconnect, device number 6 [ 444.279740][ T10] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 444.389184][ T10] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 447.951746][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.642828][ T8402] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1032'. [ 448.656633][ T8402] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1032'. [ 449.941381][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.959150][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.073867][ T5831] kernel read not supported for file /448/net/ip_mr_cache (pid: 5831 comm: kworker/1:5) [ 450.681919][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 450.761279][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 450.884086][ T8428] tipc: Started in network mode [ 450.903736][ T8428] tipc: Node identity ac14140f, cluster identity 4711 [ 450.916018][ T8428] tipc: New replicast peer: 255.255.255.255 [ 451.006443][ T8428] tipc: Enabled bearer , priority 10 [ 451.400827][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 452.098529][ T10] tipc: Node number set to 2886997007 [ 453.718391][ T5831] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 453.823460][ T8464] binder: 8463:8464 ioctl c0306201 80000640 returned -22 [ 453.912324][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 453.978525][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.998334][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.042483][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 454.088681][ T5831] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 454.128244][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.189354][ T5831] usb 1-1: config 0 descriptor?? [ 454.732289][ T5831] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 455.051219][ T5831] microsoft 0003:045E:07DA.000C: implement() called with n (56) > 32! (kworker/1:5) [ 455.172734][ T5831] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 455.199129][ T5831] microsoft 0003:045E:07DA.000C: no inputs found [ 455.205749][ T5831] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 455.369383][ T5831] usb 1-1: USB disconnect, device number 8 [ 455.801393][ T8478] fido_id[8478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 456.071123][ T5831] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 456.112899][ T29] audit: type=1326 audit(1771267431.043:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6f6c code=0x7ffc0000 [ 456.184091][ T29] audit: type=1326 audit(1771267431.053:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6f6c code=0x7ffc0000 [ 456.262381][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 456.293353][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.306663][ T29] audit: type=1326 audit(1771267431.093:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7fa6f6c code=0x7ffc0000 [ 456.347254][ T5831] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 456.348657][ T29] audit: type=1326 audit(1771267431.093:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6f6c code=0x7ffc0000 [ 456.402588][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.467412][ T5831] usb 4-1: config 0 descriptor?? [ 456.512574][ T29] audit: type=1326 audit(1771267431.093:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6f6c code=0x7ffc0000 [ 456.653920][ T29] audit: type=1326 audit(1771267431.123:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7fa6f6c code=0x7ffc0000 [ 456.802374][ T29] audit: type=1326 audit(1771267431.123:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6f6c code=0x7ffc0000 [ 456.833430][ T5831] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 456.909122][ T29] audit: type=1326 audit(1771267431.123:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6f6c code=0x7ffc0000 [ 457.032683][ T5831] usb 4-1: USB disconnect, device number 7 [ 457.158224][ T5301] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 457.357015][ T5301] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 457.373895][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.409236][ T5301] usb 2-1: config 0 descriptor?? [ 457.449663][ T5301] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 457.894843][ T5301] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 457.995067][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 458.054874][ T8497] netlink: 'syz.2.1076': attribute type 14 has an invalid length. [ 458.086905][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1076'. [ 458.288543][ T5301] gspca_cpia1: usb_control_msg 02, error -71 [ 458.306470][ T5301] gspca_cpia1: usb_control_msg 05, error -71 [ 458.328809][ T5301] cpia1 2-1:0.0: unexpected systemstate: 00 [ 458.362241][ T5301] usb 2-1: USB disconnect, device number 10 [ 458.593825][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 458.776761][ T10] usb 1-1: config 8 has an invalid interface number: 235 but max is 0 [ 458.812093][ T10] usb 1-1: config 8 has no interface number 0 [ 458.839878][ T8505] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.848150][ T10] usb 1-1: config 8 interface 235 has no altsetting 0 [ 458.848908][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 458.898579][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.018376][ T8507] loop3: detected capacity change from 0 to 512 [ 459.125499][ T8507] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 459.208999][ T8507] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.245848][ T10] usb 1-1: string descriptor 0 read error: -71 [ 459.286240][ T10] keyspan 1-1:8.235: Keyspan - (without firmware) converter detected [ 459.372394][ T10] usb 1-1: USB disconnect, device number 9 [ 459.460601][ T10] keyspan 1-1:8.235: device disconnected [ 461.649705][ T8535] macvlan0: entered promiscuous mode [ 461.689566][ T8535] syz_tun: entered promiscuous mode [ 461.712307][ T8535] hsr1: entered promiscuous mode [ 461.868565][ T5779] Bluetooth: hci5: command 0x1003 tx timeout [ 461.878493][ T5784] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 463.618884][ T5301] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 463.844529][ T5301] usb 2-1: config 8 has an invalid interface number: 235 but max is 0 [ 463.915057][ T5301] usb 2-1: config 8 has no interface number 0 [ 463.935797][ T5301] usb 2-1: config 8 interface 235 has no altsetting 0 [ 463.975303][ T5301] usb 2-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 463.995793][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.341597][ T5301] usb 2-1: string descriptor 0 read error: -71 [ 464.449250][ T5301] keyspan 2-1:8.235: Keyspan - (without firmware) converter detected [ 464.502280][ T5301] usb 2-1: USB disconnect, device number 11 [ 464.543980][ T5301] keyspan 2-1:8.235: device disconnected [ 465.803835][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 466.630028][ T8590] ip6tnl1: entered allmulticast mode [ 467.588436][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 467.803506][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 467.822728][ T10] usb 5-1: config 1 has no interface number 0 [ 467.848497][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 467.888560][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 467.930244][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.973849][ T8605] loop1: detected capacity change from 0 to 1024 [ 467.986998][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 468.013651][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.056882][ T10] usb 5-1: Product: syz [ 468.069203][ T10] usb 5-1: Manufacturer: syz [ 468.084974][ T10] usb 5-1: SerialNumber: syz [ 468.155433][ T8598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 468.194985][ T8605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 468.249242][ T8605] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.433632][ T8598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 468.608984][ T8605] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.1120: lblock 0 mapped to illegal pblock 0 (length 1) [ 468.742646][ T10] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 468.777588][ T8605] EXT4-fs (loop1): Remounting filesystem read-only [ 469.105346][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 469.203567][ T10] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 469.263555][ T10] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 469.349196][ T10] usb 5-1: USB disconnect, device number 9 [ 469.364507][ T10] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 469.493679][ T10] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 469.794870][ T8604] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 469.999159][ T8615] loop3: detected capacity change from 0 to 4096 [ 470.060905][ T8615] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 470.428371][ T8615] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 470.445841][ T8615] ntfs3(loop3): Failed to load $Extend (-22). [ 470.476643][ T8615] ntfs3(loop3): Failed to initialize $Extend. [ 472.379104][ T8639] block nbd1: not configured, cannot reconfigure [ 472.583631][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 472.647862][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 472.774699][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 472.928343][ T5301] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 473.150652][ T5301] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 473.185212][ T5301] usb 1-1: config 1 has no interface number 0 [ 473.204591][ T5301] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 473.248422][ T5301] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 473.286264][ T5301] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.339156][ T5301] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 473.355934][ T5301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.402459][ T5301] usb 1-1: Product: syz [ 473.406953][ T5301] usb 1-1: Manufacturer: syz [ 473.440358][ T5301] usb 1-1: SerialNumber: syz [ 473.488299][ T8644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 473.572069][ T8649] loop4: detected capacity change from 0 to 4096 [ 473.722521][ T8644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 473.736427][ T8649] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 473.821596][ T8649] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 473.960839][ T8657] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 474.025187][ T5301] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 474.328829][ T8649] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 474.337858][ T8649] overlayfs: missing 'lowerdir' [ 474.415896][ T5301] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 474.503729][ T5301] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 474.643820][ T5301] usb 1-1: USB disconnect, device number 10 [ 474.677378][ T5301] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 475.028744][ T5301] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 475.512544][ T8662] loop1: detected capacity change from 0 to 1024 [ 475.822841][ T8662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.856813][ T8666] netlink: 'syz.0.1148': attribute type 8 has an invalid length. [ 476.633781][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.901313][ T8674] overlayfs: upper fs does not support file handles, falling back to index=off. [ 476.950945][ T8674] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 477.101986][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.153403][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.236566][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.287021][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.298284][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.352065][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.406008][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.418549][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.426316][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.493582][ T5301] hid-generic 0103:0004:0000.000D: unknown main item tag 0x0 [ 477.547067][ T5301] hid-generic 0103:0004:0000.000D: hidraw0: HID v0.05 Device [syz0] on syz1 [ 478.218505][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 478.370319][ T8689] fido_id[8689]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 478.408984][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 478.451081][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.499408][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.538296][ T5826] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 478.568462][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 478.577785][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.651487][ T10] usb 3-1: config 0 descriptor?? [ 478.772662][ T5826] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.793466][ T5826] usb 4-1: config 0 has no interface number 0 [ 478.859698][ T5826] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 478.894074][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.949270][ T5826] usb 4-1: Product: syz [ 478.953826][ T5826] usb 4-1: Manufacturer: syz [ 478.979098][ T5826] usb 4-1: SerialNumber: syz [ 478.996637][ T5826] usb 4-1: config 0 descriptor?? [ 479.162513][ T10] kye 0003:0458:5013.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 479.284907][ T5826] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 479.294745][ T10] kye 0003:0458:5013.000E: hidraw0: USB HID vff.fc Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 479.335662][ T5826] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 479.353558][ T10] kye 0003:0458:5013.000E: tablet-enabling feature report not found [ 479.378609][ T10] kye 0003:0458:5013.000E: tablet enabling failed [ 479.396994][ T5826] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 479.440804][ T5826] usb 4-1: media controller created [ 479.459235][ T10] usb 3-1: USB disconnect, device number 12 [ 479.686219][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.902501][ T5301] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 479.950160][ T991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 480.019489][ T5826] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 480.098473][ T5301] usb 5-1: Using ep0 maxpacket: 16 [ 480.126727][ T8700] fido_id[8700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 480.194811][ T5301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.248782][ T5301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.292364][ T5301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 480.346274][ T5301] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 480.413871][ T5301] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.510653][ T5301] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 480.554634][ T5301] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 480.630692][ T5301] usb 5-1: Manufacturer: syz [ 480.728832][ T5301] usb 5-1: config 0 descriptor?? [ 480.899238][ T5826] usb 4-1: USB disconnect, device number 8 [ 481.301086][ T8712] netlink: 'syz.3.1166': attribute type 6 has an invalid length. [ 481.344663][ T8712] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1166'. [ 481.431917][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.440758][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.449489][ T5301] rc_core: IR keymap rc-hauppauge not found [ 481.455591][ T5301] Registered IR keymap rc-empty [ 481.509450][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.569656][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.621790][ T5301] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 481.692975][ T5301] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 481.809968][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.885323][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.959133][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.983992][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.050022][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.074713][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.158723][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.188543][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.221410][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.284874][ T5301] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.313926][ T5301] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 482.373130][ T5301] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 482.469324][ T5301] usb 5-1: USB disconnect, device number 10 [ 484.899465][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 485.217766][ T8747] loop2: detected capacity change from 0 to 4096 [ 485.371004][ T8753] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 487.371871][ T8770] loop2: detected capacity change from 0 to 1024 [ 487.549113][ T8770] hfsplus: xattr searching failed [ 488.173318][ T8781] loop1: detected capacity change from 0 to 512 [ 488.277125][ T8781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 488.331478][ T8784] program syz.4.1197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.390280][ T8781] EXT4-fs (loop1): 1 truncate cleaned up [ 488.409287][ T8781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.710190][ T8781] fscrypt (loop1, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 489.545332][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.871391][ T8810] loop4: detected capacity change from 0 to 2048 [ 491.011399][ T8810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.590370][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 491.615092][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.784155][ T8827] loop2: detected capacity change from 0 to 4096 [ 492.812809][ T8827] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 493.190861][ T8827] ntfs3(loop2): ino=1d, mi_enum_attr [ 493.213250][ T8827] ntfs3(loop2): ino=1d, mi_enum_attr [ 493.259145][ T8827] ntfs3(loop2): ino=1d, mi_enum_attr [ 493.665445][ T8841] loop3: detected capacity change from 0 to 2048 [ 493.809240][ T8841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.650379][ T8844] loop4: detected capacity change from 0 to 4096 [ 494.842918][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'. [ 495.091071][ T8844] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 495.151872][ T5301] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 495.212840][ T8852] bond0: entered promiscuous mode [ 495.231609][ T8844] ntfs3(loop4): Failed to load $Extend (-22). [ 495.262756][ T8844] ntfs3(loop4): Failed to initialize $Extend. [ 495.265827][ T8852] bond_slave_0: entered promiscuous mode [ 495.313933][ T8852] bond_slave_1: entered promiscuous mode [ 495.335541][ T5301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.401800][ T5301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.432520][ T8852] batadv0: entered promiscuous mode [ 495.448765][ T5301] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 495.478388][ T5301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.525825][ T8852] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 495.564457][ T5301] usb 1-1: config 0 descriptor?? [ 495.707225][ T8852] bond0: left promiscuous mode [ 495.728205][ T8852] bond_slave_0: left promiscuous mode [ 495.734998][ T8852] bond_slave_1: left promiscuous mode [ 495.844997][ T8852] batadv0: left promiscuous mode [ 496.071590][ T5301] hid_parser_main: 14 callbacks suppressed [ 496.071698][ T5301] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 496.148350][ T5301] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 496.167245][ T5301] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 496.238409][ T5301] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 496.288558][ T5301] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 496.384461][ T5301] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 496.522616][ T5301] playstation 0003:054C:0DF2.000F: Invalid reportID received, expected 9 got 32 [ 496.569658][ T5301] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 496.633674][ T5301] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 496.702525][ T5301] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 496.774655][ T5301] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -22 [ 496.905149][ T5301] usb 1-1: USB disconnect, device number 11 [ 496.983149][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 497.054105][ T8859] netem: incorrect ge model size [ 497.065134][ T8861] loop6: detected capacity change from 0 to 524288000 [ 497.073983][ T8859] netem: change failed [ 497.280063][ T8863] support for the xor transformation has been removed. [ 497.300170][ T8856] fido_id[8856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 498.623254][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 498.893763][ T8872] loop3: detected capacity change from 0 to 4096 [ 498.948887][ T8872] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 499.636631][ T8872] ntfs3(loop3): ino=1d, mi_enum_attr [ 499.651440][ T8872] ntfs3(loop3): ino=1d, mi_enum_attr [ 499.699082][ T8872] ntfs3(loop3): ino=1d, mi_enum_attr [ 500.472445][ T8890] loop2: detected capacity change from 0 to 256 [ 500.586999][ T8890] exfat: Deprecated parameter 'namecase' [ 500.668520][ T8890] exfat: Deprecated parameter 'namecase' [ 500.852212][ T8890] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 500.930518][ T29] audit: type=1326 audit(1771267475.873:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.0.1244" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa7f6c code=0x0 [ 503.434557][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1255'. [ 506.225881][ T8946] fuse: Unknown parameter 'racerPid: 0 [ 506.225881][ T8946] Uid: 0 0 0 0 [ 506.225881][ T8946] Gid: 0 0 0 0 [ 506.225881][ T8946] FDSize: 256 [ 506.225881][ T8946] Groups: 0 10 [ 506.225881][ T8946] NStgid: 559 [ 506.225881][ T8946] NSpid: 560 [ 506.225881][ T8946] NSpgid: 559 [ 506.225881][ T8946] NSsid: 0 [ 506.225881][ T8946] Kthread: 0 [ 506.225881][ T8946] VmPeak: 104044 kB [ 506.225881][ T8946] VmSize: 104044 kB [ 506.225881][ T8946] VmLck: 0 kB [ 506.225881][ T8946] VmPin: 0 kB [ 506.225881][ T8946] VmHWM: 24432 kB [ 506.225881][ T8946] VmRSS: 24432 kB [ 506.225881][ T8946] RssAnon: 1280 kB [ 506.225881][ T8946] RssFile: 23152 kB [ 506.225881][ T8946] RssShmem: 0 kB [ 506.225881][ T8946] VmData: 36496 kB [ 506.225881][ T8946] VmStk: 132 kB [ 506.225881][ T8946] VmExe: 1776 kB [ 506.225881][ T8946] VmLib: 12 kB [ 506.225881][ T8946] VmPTE: 112 kB [ 506.225881][ T8946] VmSwap: 0 kB [ 506.225881][ T8946] HugetlbPages: 0 kB [ 506.225881][ T8946] CoreDumping: 0 [ 506.225881][ T8946] THP_enabled: 1 [ 506.225881][ T8946] untag_mask: 0xffffffffffffffff [ 506.225881][ T8946] Threads: 2 [ 506.225881][ T8946] SigQ: 0/25973 [ 506.225881][ T8946] SigPnd: 0000000000000000 [ 506.225881][ T8946] ShdPnd: 0000000000000000 [ 506.225881][ T8946] SigBlk: 0000000000000000 [ 506.225881][ T8946] SigIgn: fffffffefffaba35 [ 506.225881][ T8946] SigCgt: 0000000100010440 [ 506.225881][ T8946] CapInh: 0000000000000000 [ 506.225881][ T8946] CapPrm: 000001ffff77ffff [ 506.225881][ T8946] CapEff: 000001ffff77ffff [ 506.225881][ T8946] CapBnd: 000001ffffffffff [ 506.225881][ T8946] CapAmb: 0000000000000000 [ 506.225881][ T8946] NoNewPrivs: 0 [ 506.225881][ T8946] Seccomp: 0 [ 506.225881][ T8946] Seccomp_filters: 0 [ 506.225881][ T8946] Speculation_Store_Bypass: thread vulnerable [ 506.225881][ T8946] SpeculationIndirectBranch: conditional enabled [ 506.225881][ T8946] Cpus_allowed: 3 [ 506.638337][ T5831] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 506.862793][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 506.881720][ T5831] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 506.939399][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.030417][ T5831] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 507.888879][ T5831] gspca_nw80x: reg_r err -71 [ 507.894038][ T5831] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 507.999443][ T5831] usb 3-1: USB disconnect, device number 13 [ 508.050138][ T8964] mkiss: ax0: crc mode is auto. [ 509.120076][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 510.373015][ T8991] loop1: detected capacity change from 0 to 128 [ 510.656552][ T8991] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.768198][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 510.800950][ T8991] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.958802][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 511.007101][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 511.053754][ T9] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.131631][ T9002] loop3: detected capacity change from 0 to 512 [ 511.138256][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 511.138459][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 511.138610][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.251124][ T9] usb 3-1: config 0 descriptor?? [ 511.356455][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.375930][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.801556][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.123022][ T991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 512.255008][ T9] input: HID 28bd:0933 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.0010/input/input17 [ 512.462464][ T9] uclogic 0003:28BD:0933.0010: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 512.558604][ T9] usb 3-1: USB disconnect, device number 14 [ 513.480025][ T9012] fido_id[9012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 513.999983][ T9025] loop3: detected capacity change from 0 to 256 [ 514.415986][ T9025] FAT-fs (loop3): Directory bread(block 64) failed [ 514.446109][ T9025] FAT-fs (loop3): Directory bread(block 65) failed [ 514.498649][ T9025] FAT-fs (loop3): Directory bread(block 66) failed [ 514.579131][ T9025] FAT-fs (loop3): Directory bread(block 67) failed [ 514.602607][ T9025] FAT-fs (loop3): Directory bread(block 68) failed [ 514.672582][ T9025] FAT-fs (loop3): Directory bread(block 69) failed [ 514.689041][ T9025] FAT-fs (loop3): Directory bread(block 70) failed [ 514.695850][ T9025] FAT-fs (loop3): Directory bread(block 71) failed [ 514.768531][ T9025] FAT-fs (loop3): Directory bread(block 72) failed [ 514.775316][ T9025] FAT-fs (loop3): Directory bread(block 73) failed [ 515.140514][ T9031] loop1: detected capacity change from 0 to 2048 [ 515.409341][ T9031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.914782][ T9031] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 516.069034][ T9031] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 516.148233][ T9031] EXT4-fs (loop1): This should not happen!! Data will be lost [ 516.148233][ T9031] [ 516.246829][ T9031] EXT4-fs (loop1): Total free blocks count 0 [ 516.328341][ T9031] EXT4-fs (loop1): Free/Dirty block details [ 516.334486][ T9031] EXT4-fs (loop1): free_blocks=2415919504 [ 516.459357][ T9031] EXT4-fs (loop1): dirty_blocks=48 [ 516.521215][ T9031] EXT4-fs (loop1): Block reservation details [ 516.548491][ T9031] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 517.234192][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 517.969290][ T5831] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 518.215699][ T5831] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 518.275639][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.316337][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 518.382496][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 518.403965][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.463092][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 518.505070][ T5301] kernel write not supported for file bpf-map (pid: 5301 comm: kworker/1:3) [ 518.528346][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 518.580347][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.628310][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 518.703107][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 518.715655][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.898641][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 518.919384][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 518.960726][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 518.979733][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 519.008401][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 519.040177][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 519.077349][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 519.108368][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 519.141195][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 519.186186][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 519.228584][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 519.252968][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 519.265648][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 519.341002][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 519.401320][ T5831] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 519.433897][ T5831] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 519.462375][ T5831] usb 4-1: Product: syz [ 519.466802][ T5831] usb 4-1: Manufacturer: syz [ 519.497127][ T5831] usb 4-1: SerialNumber: syz [ 519.530518][ T5831] usb 4-1: config 0 descriptor?? [ 519.641456][ T5831] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 519.848380][ T9] usb 4-1: USB disconnect, device number 9 [ 519.899346][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 520.151117][ T9089] loop4: detected capacity change from 0 to 256 [ 521.201559][ T9096] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1330'. [ 522.708407][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 524.228725][ T5831] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 524.388473][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 524.445698][ T5831] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 524.478481][ T5831] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 524.486871][ T5831] usb 1-1: config 0 has no interface number 0 [ 524.532619][ T5831] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.582055][ T5831] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.619150][ T5831] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 524.686107][ T5831] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 524.727818][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 524.736453][ T5831] usb 1-1: Product: syz [ 524.792973][ T5831] usb 1-1: config 0 descriptor?? [ 525.434133][ T5301] kernel write not supported for file /sequencer (pid: 5301 comm: kworker/1:3) [ 525.462483][ T5831] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input18 [ 525.578905][ T5831] input: failed to attach handler kbd to device input18, error: -5 [ 525.669459][ T5831] usb 1-1: USB disconnect, device number 12 [ 526.851166][ T9155] loop1: detected capacity change from 0 to 256 [ 527.077356][ T9155] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 528.013883][ T9169] loop3: detected capacity change from 0 to 512 [ 528.073503][ T9169] EXT4-fs: Ignoring removed nobh option [ 528.282642][ T9169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.389289][ T9169] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 528.604029][ T9169] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 3: comm syz.3.1364: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 528.724744][ T9177] loop4: detected capacity change from 0 to 128 [ 528.814370][ T9177] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 528.882768][ T9177] hpfs: filesystem error: improperly stopped [ 528.912233][ T9177] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 528.958476][ T9177] hpfs: You really don't want any checks? You are crazy... [ 528.993634][ T9177] hpfs: hpfs_map_sector(): read error [ 529.028616][ T9177] hpfs: code page support is disabled [ 529.063236][ T9177] hpfs: hpfs_map_4sectors(): unaligned read [ 529.088602][ T9177] hpfs: hpfs_map_4sectors(): unaligned read [ 529.101053][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.128436][ T9177] hpfs: filesystem error: unable to find root dir [ 529.270397][ T9177] hpfs: hpfs_map_4sectors(): unaligned read [ 529.276803][ T9177] hpfs: hpfs_map_sector(): read error [ 530.376701][ T9194] loop4: detected capacity change from 0 to 512 [ 530.519512][ T9194] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1373: invalid block [ 530.628488][ T9194] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 530.631973][ T9194] EXT4-fs (loop4): Remounting filesystem read-only [ 530.641678][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 530.641783][ C0] EXT4-fs (loop4): initial error at time 1771267505: ext4_get_branch:178: inode 11: block 4294967295 [ 530.641995][ C0] EXT4-fs (loop4): last error at time 1771267505: ext4_get_branch:178: inode 11: block 4294967295 [ 530.756141][ T9194] EXT4-fs (loop4): 2 truncates cleaned up [ 530.775521][ T9194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.925934][ T9203] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 531.248626][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.852654][ T9214] netlink: 'syz.4.1380': attribute type 39 has an invalid length. [ 532.046468][ T9214] bridge_slave_0 (unregistering): left allmulticast mode [ 532.063275][ T9214] bridge_slave_0 (unregistering): left promiscuous mode [ 532.081682][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.866009][ T9223] loop2: detected capacity change from 0 to 1024 [ 532.887231][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 532.911294][ T9223] EXT4-fs: Ignoring removed orlov option [ 532.929798][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 532.937517][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 532.957099][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 532.967556][ T9223] EXT4-fs: Ignoring removed nobh option [ 532.992603][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 533.037225][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 533.050328][ T9223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.087618][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 533.101825][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 533.115993][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 533.135081][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 533.148686][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 533.159635][ T9218] hid-generic 0103:0004:0000.0011: unknown main item tag 0x0 [ 533.194741][ T9218] hid-generic 0103:0004:0000.0011: hidraw0: HID v0.02 Device [syz0] on syz1 [ 534.130079][ T9239] fido_id[9239]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 534.275605][ T9246] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 534.536405][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.538970][ T9259] loop4: detected capacity change from 0 to 512 [ 535.570754][ T9259] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 536.475615][ T9272] loop1: detected capacity change from 0 to 128 [ 536.511970][ T9271] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1402'. [ 536.630038][ T9272] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 536.719670][ T9272] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 537.047049][ T9272] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 537.533121][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.916151][ T9306] loop4: detected capacity change from 0 to 4096 [ 540.161614][ T9318] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.296682][ T9319] program syz.2.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.334312][ T9306] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 540.450739][ T9306] Remounting filesystem read-only [ 540.805819][ T9326] netlink: 75 bytes leftover after parsing attributes in process `syz.0.1427'. [ 540.866709][ T5775] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 542.209036][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 542.506660][ T9344] netlink: 'syz.0.1436': attribute type 39 has an invalid length. [ 542.673907][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.836165][ T9344] bridge_slave_0 (unregistering): left allmulticast mode [ 542.862259][ T9344] bridge_slave_0 (unregistering): left promiscuous mode [ 542.878983][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.961531][ T991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 546.267671][ T9392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1457'. [ 548.291485][ T9418] loop1: detected capacity change from 0 to 512 [ 548.359587][ T9418] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 548.447234][ T9423] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1472'. [ 548.492272][ T9418] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1470: bad orphan inode 131083 [ 548.615443][ T9418] loop1: lost filesystem error report for type 5 error -117 [ 548.618161][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 548.632442][ C1] EXT4-fs (loop1): initial error at time 1771267523: ext4_orphan_get:1417 [ 548.641357][ C1] EXT4-fs (loop1): last error at time 1771267523: ext4_orphan_get:1417 [ 548.661319][ T9418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.769503][ T9418] EXT4-fs (loop1): shut down requested (0) [ 548.982350][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1472'. [ 549.212318][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.987253][ T9558] loop2: detected capacity change from 0 to 64 [ 559.141748][ T29] audit: type=1800 audit(1771267534.083:31): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1525" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 559.214984][ T29] audit: type=1800 audit(1771267534.123:32): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1525" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 559.250043][ T9560] loop1: detected capacity change from 0 to 128 [ 560.775983][ T9567] loop1: detected capacity change from 0 to 4096 [ 561.061767][ T9567] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 561.106368][ T9567] ntfs3(loop1): ino=1a, mi_enum_attr [ 561.149465][ T9567] ntfs3(loop1): ino=1a, mi_enum_attr [ 561.155039][ T9567] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 561.303849][ T9567] ntfs3(loop1): ino=21, "file1" direct i/o + compressed not supported [ 562.312000][ T9581] loop3: detected capacity change from 0 to 64 [ 562.400147][ T9581] hfs: Unknown parameter 'dir_0000000000001tor' [ 563.435162][ T9591] loop1: detected capacity change from 0 to 64 [ 563.664746][ T29] audit: type=1800 audit(1771267538.603:33): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1538" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 563.745162][ T29] audit: type=1800 audit(1771267538.643:34): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1538" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 564.862786][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 564.872958][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1546'. [ 566.840330][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 566.957598][ T9635] loop1: detected capacity change from 0 to 128 [ 568.918240][ T9662] sp0: Synchronizing with TNC [ 570.117582][ T9676] loop4: detected capacity change from 0 to 256 [ 570.208783][ T9676] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 571.412249][ T9683] overlayfs: workdir and upperdir must be separate subtrees [ 572.774187][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.781126][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.234691][ T9706] sp0: Synchronizing with TNC [ 573.502811][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'. [ 574.058810][ T9714] program syz.2.1590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.948728][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.295892][ T9745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 576.941081][ T9748] tap0: tun_chr_ioctl cmd 1074025678 [ 576.968348][ T9748] tap0: group set to 0 [ 577.031245][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 577.289274][ T9754] macvtap1: entered promiscuous mode [ 577.305697][ T9754] bridge0: entered promiscuous mode [ 577.350646][ T9754] macvtap1: entered allmulticast mode [ 577.378836][ T9754] bridge0: entered allmulticast mode [ 577.439445][ T9754] bridge0: port 1(macvtap1) entered blocking state [ 577.452367][ T9754] bridge0: port 1(macvtap1) entered disabled state [ 577.530905][ T9754] bridge0: left allmulticast mode [ 577.536176][ T9754] bridge0: left promiscuous mode [ 582.084317][ T9801] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 582.639608][ T9808] netlink: 'syz.3.1630': attribute type 10 has an invalid length. [ 582.647742][ T9808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1630'. [ 582.862750][ T9808] team0: Port device netdevsim1 added [ 582.891627][ T9812] loop1: detected capacity change from 0 to 128 [ 583.094813][ T9812] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 583.199498][ T9812] ext4 filesystem being mounted at /307/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 583.313369][ T9812] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x18) [ 583.844118][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 583.875754][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 583.928289][ T9823] block nbd0: Unsupported socket: should be TCP or UNIX. [ 586.409134][ T9853] loop3: detected capacity change from 0 to 4096 [ 587.359167][ T9861] loop2: detected capacity change from 0 to 4096 [ 587.403685][ T9861] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 587.765026][ T9861] ntfs3(loop2): ino=1a, mi_enum_attr [ 587.788601][ T9861] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 587.838891][ T9861] ntfs3(loop2): ino=1a, mi_enum_attr [ 587.844460][ T9861] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 588.617828][ T9883] evm: overlay not supported [ 589.931636][ T9895] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 589.994384][ T9895] @0Ù: renamed from bond_slave_1 (while UP) [ 590.445923][ T9900] sg_write: process 804 (syz.0.1668) changed security contexts after opening file descriptor, this is not allowed. [ 591.192467][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 591.317662][ T9911] bridge0: entered promiscuous mode [ 591.334730][ T9911] macvtap1: entered promiscuous mode [ 591.402761][ T9911] macvtap1: entered allmulticast mode [ 591.424909][ T9911] bridge0: entered allmulticast mode [ 591.482839][ T9911] bridge0: port 3(macvtap1) entered blocking state [ 591.515307][ T9911] bridge0: port 3(macvtap1) entered disabled state [ 591.578628][ T9911] bridge0: left allmulticast mode [ 591.597675][ T9911] bridge0: left promiscuous mode [ 591.669505][ T9218] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 591.848234][ T9218] usb 5-1: Using ep0 maxpacket: 16 [ 591.902411][ T9218] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 591.938546][ T9218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.946892][ T9218] usb 5-1: Product: syz [ 591.988593][ T9218] usb 5-1: Manufacturer: syz [ 591.993561][ T9218] usb 5-1: SerialNumber: syz [ 592.042597][ T9218] usb 5-1: config 0 descriptor?? [ 592.089734][ T9218] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 592.400142][ T9] usb 5-1: USB disconnect, device number 11 [ 592.912610][ T9930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1680'. [ 593.498519][ T9218] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 593.681980][ T9218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.738667][ T9218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 593.778462][ T9218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 593.818848][ T9218] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 593.904098][ T9218] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 593.953804][ T9218] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 594.018782][ T9218] usb 2-1: Manufacturer: syz [ 594.075730][ T9218] usb 2-1: config 0 descriptor?? [ 594.427250][ T9948] loop4: detected capacity change from 0 to 8 [ 594.830259][ T9218] rc_core: IR keymap rc-hauppauge not found [ 594.862914][ T9218] Registered IR keymap rc-empty [ 594.879038][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 594.918515][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 594.942663][ T9952] loop2: detected capacity change from 0 to 2048 [ 595.001208][ T9218] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 595.037966][ C0] hrtimer: interrupt took 239399 ns [ 595.143207][ T9218] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 595.179178][ T9955] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 595.252968][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.362304][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.389087][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.419446][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.460604][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.529233][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.618761][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.670925][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.713957][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.778962][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.829559][ T9218] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.891571][ T9218] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 595.942108][ T9218] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 596.124513][ T9218] usb 2-1: USB disconnect, device number 12 [ 600.570046][T10015] tun0: tun_chr_ioctl cmd 1074025673 [ 601.132012][T10022] ALSA: seq fatal error: cannot create timer (-22) [ 602.034838][T10038] netlink: 'syz.3.1725': attribute type 15 has an invalid length. [ 602.054257][T10038] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1725'. [ 603.998369][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 604.189656][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 604.250493][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 604.281653][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 604.317820][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 604.378849][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.387140][ T9] usb 1-1: Product: syz [ 604.434978][ T9] usb 1-1: Manufacturer: syz [ 604.455749][ T9] usb 1-1: SerialNumber: syz [ 604.524322][ T9] usb 1-1: config 0 descriptor?? [ 604.589527][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 604.638144][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 605.213186][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 605.422318][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 605.463245][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 605.488891][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 605.519337][ T9] usb 1-1: USB disconnect, device number 13 [ 605.560310][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 605.605874][ T9] em28xx 1-1:0.0: Freeing device [ 606.375351][T10090] loop4: detected capacity change from 0 to 256 [ 606.497107][T10090] FAT-fs (loop4): unable to read block(536870912) for building NFS inode [ 606.530215][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'. [ 607.954097][ T139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 608.047329][T10110] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 608.072127][T10110] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 609.477072][T10128] loop1: detected capacity change from 0 to 256 [ 609.687352][T10128] FAT-fs (loop1): unable to read block(536870912) for building NFS inode [ 609.824507][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 611.377619][T10152] loop4: detected capacity change from 0 to 1024 [ 611.581245][T10152] hfsplus: xattr searching failed [ 611.609333][ T29] audit: type=1800 audit(1771267586.553:35): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1773" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 611.650684][T10157] hfsplus: xattr searching failed [ 611.728505][T10152] hfsplus: xattr searching failed [ 611.802198][T10154] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 612.428478][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 612.630421][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 612.685704][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1778'. [ 612.701376][ T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 612.728629][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.773747][ T9] usb 4-1: Product: syz [ 612.780436][ T9] usb 4-1: Manufacturer: syz [ 612.785586][ T9] usb 4-1: SerialNumber: syz [ 613.072062][ T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 613.122949][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 613.208343][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 613.218546][ T9] usb 4-1: media controller created [ 613.540654][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 613.639827][T10173] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 613.747005][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 613.999811][T10167] loop1: detected capacity change from 0 to 4096 [ 614.038332][T10167] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 614.376199][ T9] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 614.487223][ T9] usb 4-1: USB disconnect, device number 10 [ 614.574934][T10167] ntfs3(loop1): ino=19, mi_enum_attr [ 615.023291][T10184] loop3: detected capacity change from 0 to 64 [ 615.111232][T10184] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 616.639962][T10200] loop2: detected capacity change from 0 to 256 [ 616.871296][T10197] loop1: detected capacity change from 0 to 4096 [ 617.010164][T10200] FAT-fs (loop2): Directory bread(block 64) failed [ 617.052747][T10200] FAT-fs (loop2): Directory bread(block 65) failed [ 617.071618][T10200] FAT-fs (loop2): Directory bread(block 66) failed [ 617.108516][T10200] FAT-fs (loop2): Directory bread(block 67) failed [ 617.160525][T10200] FAT-fs (loop2): Directory bread(block 68) failed [ 617.167320][T10200] FAT-fs (loop2): Directory bread(block 69) failed [ 617.219440][T10200] FAT-fs (loop2): Directory bread(block 70) failed [ 617.268714][T10200] FAT-fs (loop2): Directory bread(block 71) failed [ 617.275723][T10200] FAT-fs (loop2): Directory bread(block 72) failed [ 617.331949][T10197] ntfs3(loop1): ino=b, mi_enum_attr [ 617.337632][T10197] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 617.372906][T10200] FAT-fs (loop2): Directory bread(block 73) failed [ 617.398479][T10197] ntfs3(loop1): Failed to load $Extend (-22). [ 617.404809][T10197] ntfs3(loop1): Failed to initialize $Extend. [ 617.538226][ T29] audit: type=1800 audit(1771267592.453:36): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1794" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 617.705396][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 617.761716][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 617.793232][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 618.010134][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 618.038432][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.046711][ T9] usb 5-1: Product: syz [ 618.099552][ T9] usb 5-1: Manufacturer: syz [ 618.104415][ T9] usb 5-1: SerialNumber: syz [ 618.140036][ T9] usb 5-1: config 0 descriptor?? [ 618.257037][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 012 [ 618.637498][ T9] (null): failure reading functionality [ 618.697292][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 618.902620][ T9] usb 5-1: USB disconnect, device number 12 [ 621.199546][T10251] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 621.207029][T10251] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 621.218315][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 621.304839][T10251] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 621.312279][T10251] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 621.324837][T10249] loop2: detected capacity change from 0 to 2048 [ 621.458516][T10249] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 621.478771][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.518334][T10249] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 621.552649][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.578316][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 621.583346][T10249] UDF-fs: Scanning with blocksize 512 failed [ 621.607065][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 621.664311][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.692828][ T9] usb 1-1: config 0 descriptor?? [ 621.844472][T10249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.177471][ T9] plantronics 0003:047F:FFFF.0012: item 0 4 0 8 parsing failed [ 622.261178][ T9] plantronics 0003:047F:FFFF.0012: parse failed [ 622.308515][ T9] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 622.390523][ T9] usb 1-1: USB disconnect, device number 14 [ 624.251585][T10280] loop4: detected capacity change from 0 to 1 [ 624.332438][T10280] Dev loop4: unable to read RDB block 1 [ 624.346101][T10280] loop4: unable to read partition table [ 624.383120][T10280] loop4: partition table beyond EOD, truncated [ 624.408923][T10280] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 624.593166][T10284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1834'. [ 625.038271][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 625.207552][T10288] bond0: entered promiscuous mode [ 625.228946][T10288] bond_slave_0: entered promiscuous mode [ 625.263792][T10288] bond_slave_1: entered promiscuous mode [ 625.379468][T10288] bond0: left promiscuous mode [ 625.398206][T10288] bond_slave_0: left promiscuous mode [ 625.452923][T10288] bond_slave_1: left promiscuous mode [ 625.703860][T10297] loop3: detected capacity change from 0 to 512 [ 625.725156][T10297] FAT-fs (loop3): bogus number of FAT sectors [ 625.752552][T10297] FAT-fs (loop3): Can't find a valid FAT filesystem [ 626.649050][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 626.759442][T10307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1844'. [ 626.879657][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 626.934534][ T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 626.982501][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.025985][ T9] usb 1-1: Product: syz [ 627.031826][ T9] usb 1-1: Manufacturer: syz [ 627.036648][ T9] usb 1-1: SerialNumber: syz [ 627.096909][ T9] usb 1-1: config 0 descriptor?? [ 627.165375][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 627.773352][ T9] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 627.866021][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 628.023372][ T9] usb 1-1: USB disconnect, device number 15 [ 629.269252][T10335] program syz.0.1856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.993489][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.001239][T10339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.234732][T10339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 632.362047][T10418] loop4: detected capacity change from 0 to 128 [ 632.930433][T10418] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 633.231265][T10418] ext4 filesystem being mounted at /386/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 633.957760][ T5775] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 634.216276][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.224294][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.052823][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 635.126663][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 637.046428][T10473] netlink: 'syz.2.1882': attribute type 6 has an invalid length. [ 637.211196][T10462] loop3: detected capacity change from 0 to 8192 [ 638.737127][T10488] program syz.1.1890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.971430][T10412] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 640.115923][T10507] loop3: detected capacity change from 0 to 128 [ 640.164738][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 640.245416][T10507] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 640.362477][T10507] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 640.520475][T10507] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 640.881076][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 641.996839][T10531] program syz.1.1906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.308998][T10522] loop3: detected capacity change from 0 to 8192 [ 643.323947][T10543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1910'. [ 643.429990][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1910'. [ 643.446686][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 643.499726][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1910'. [ 644.423915][T10552] loop3: detected capacity change from 0 to 4096 [ 644.882300][T10552] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 644.966333][T10552] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 645.106023][T10552] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 645.172918][T10548] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 645.388663][T10416] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 645.418618][ T5770] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 645.450674][ T5770] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 645.492872][ T5770] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 645.549260][T10412] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 646.524274][T10574] loop2: detected capacity change from 0 to 512 [ 646.621829][T10574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 646.715089][T10574] EXT4-fs (loop2): orphan cleanup on readonly fs [ 646.809337][T10574] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1924: Block bitmap for bg 0 marked uninitialized [ 646.886192][T10574] loop2: lost filesystem error report for type 5 error -117 [ 646.888122][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 646.902706][ C0] EXT4-fs (loop2): initial error at time 1771267621: ext4_read_block_bitmap_nowait:517 [ 646.912715][ C0] EXT4-fs (loop2): last error at time 1771267621: ext4_read_block_bitmap_nowait:517 [ 646.956429][T10574] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 646.966172][T10574] loop2: lost filesystem error report for type 5 error -117 [ 646.970124][T10574] EXT4-fs (loop2): 1 orphan inode deleted [ 647.089814][T10574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 647.228787][T10574] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 647.331492][T10574] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 647.386946][ T29] audit: type=1800 audit(1771267622.323:37): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1924" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 647.419622][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1926'. [ 647.674082][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.514068][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 648.748297][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 648.792670][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 648.828239][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 648.878373][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 648.914421][ T9] usb 1-1: config 1 has no interface number 0 [ 648.928500][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.998352][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 649.058585][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 649.108668][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.236590][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 649.448228][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 649.897218][ T9] usb 1-1: USB disconnect, device number 16 [ 649.930823][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 650.244573][T10602] macsec2: entered promiscuous mode [ 651.772331][T10622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1946'. [ 652.214034][T10618] loop4: detected capacity change from 0 to 4096 [ 652.338295][ T794] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 652.536613][ T794] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 652.593478][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.650973][ T794] usb 1-1: config 0 descriptor?? [ 652.731194][ T794] cp210x 1-1:0.0: cp210x converter detected [ 652.957220][T10618] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 652.997716][T10617] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 653.121971][ T794] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 653.207819][ T794] usb 1-1: cp210x converter now attached to ttyUSB0 [ 653.403928][ T794] usb 1-1: USB disconnect, device number 17 [ 653.459138][ T794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 653.559612][ T794] cp210x 1-1:0.0: device disconnected [ 653.624525][T10635] loop1: detected capacity change from 0 to 128 [ 653.895762][ T29] audit: type=1800 audit(1771267628.833:38): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1952" name="file1" dev="loop1" ino=1048616 res=0 errno=0 [ 654.014452][T10635] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 654.030807][T10635] FAT-fs (loop1): Filesystem has been set read-only [ 654.331954][T10641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.900935][T10644] veth1_macvtap: left promiscuous mode [ 656.126642][T10661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1963'. [ 656.586308][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 656.692225][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 656.854449][T10670] netlink: 'syz.2.1967': attribute type 11 has an invalid length. [ 657.664785][T10680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1971'. [ 657.747415][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 659.689353][T10708] loop3: detected capacity change from 0 to 64 [ 662.157513][T10730] program syz.2.1993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.213437][T10729] input: syz1 as /devices/virtual/input/input21 [ 663.508126][ T29] audit: type=1326 audit(1771267638.443:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 663.643630][ T29] audit: type=1326 audit(1771267638.443:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 663.792035][ T29] audit: type=1326 audit(1771267638.443:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 663.881878][ T29] audit: type=1326 audit(1771267638.443:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 664.001693][ T29] audit: type=1326 audit(1771267638.493:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 664.098645][ T29] audit: type=1326 audit(1771267638.493:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 664.222431][ T29] audit: type=1326 audit(1771267638.493:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 664.354724][ T29] audit: type=1326 audit(1771267638.493:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 664.488289][ T29] audit: type=1326 audit(1771267638.493:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 664.638644][ T29] audit: type=1326 audit(1771267638.443:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.1.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38f6c code=0x7ffc0000 [ 666.391809][T10774] sctp: [Deprecated]: syz.4.2010 (pid 10774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 666.391809][T10774] Use struct sctp_sack_info instead [ 666.811963][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 667.068296][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.098028][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.107320][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 667.169256][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.197117][ T9] usb 3-1: config 0 descriptor?? [ 667.542928][ T10] usb 3-1: USB disconnect, device number 15 [ 668.831585][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 668.889841][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 669.075724][T10804] pimreg: tun_chr_ioctl cmd 2147767507 [ 670.740129][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 670.961857][T10825] bond_slave_0: entered promiscuous mode [ 670.968144][T10825] @0Ù: entered promiscuous mode [ 671.121781][T10825] bond_slave_0: left promiscuous mode [ 671.127696][T10825] @0Ù: left promiscuous mode [ 671.489396][ T9218] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 671.695451][ T9218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 671.736245][ T9218] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 671.775396][ T9218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.844904][ T9218] usb 2-1: config 0 descriptor?? [ 671.949129][T10410] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 672.177279][T10836] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 672.763187][ T9218] video4linux radio48: keene_cmd_main failed (-71) [ 672.773957][ T9218] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 672.871376][ T9218] usb 2-1: USB disconnect, device number 13 [ 673.146864][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 674.420710][T10858] QAT: Invalid ioctl 21531 [ 675.425009][T10410] Bluetooth: hci5: Frame reassembly failed (-84) [ 677.228518][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 677.410289][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.435143][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 677.468842][T10502] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 677.470729][ T5784] Bluetooth: hci5: command 0x1003 tx timeout [ 677.492581][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.535946][ T10] usb 1-1: config 0 descriptor?? [ 678.107158][ T10] nintendo 0003:057E:200E.0013: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 678.188488][ T10] nintendo 0003:057E:200E.0013: Failed charging grip handshake [ 678.197527][ T10] nintendo 0003:057E:200E.0013: Failed to initialize controller; ret=-110 [ 678.240159][ T10] nintendo 0003:057E:200E.0013: probe - fail = -110 [ 678.259078][ T10] nintendo 0003:057E:200E.0013: probe with driver nintendo failed with error -110 [ 678.350309][ T10] usb 1-1: USB disconnect, device number 18 [ 679.092157][T10894] fido_id[10894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 681.124700][T10412] Bluetooth: hci5: Frame reassembly failed (-84) [ 681.259263][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 681.504842][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 681.530680][ T9] usb 5-1: no configurations [ 681.535545][ T9] usb 5-1: can't read configurations, error -22 [ 682.694671][T10936] loop4: detected capacity change from 0 to 128 [ 682.888895][T10936] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 682.981544][T10936] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.148486][T10502] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 683.450147][ T5775] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 685.562471][T10962] input: syz1 as /devices/virtual/input/input24 [ 685.598186][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 685.801743][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 685.840908][ T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.877157][ T9] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 685.921368][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 685.995033][ T9] usb 1-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 686.041780][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.110067][ T9] usb 1-1: config 0 descriptor?? [ 686.621715][T10967] loop2: detected capacity change from 0 to 512 [ 686.654793][ T9] hid_parser_main: 1 callbacks suppressed [ 686.654899][ T9] chicony 0003:04F2:1123.0014: unknown main item tag 0x0 [ 686.693426][T10967] EXT4-fs: Ignoring removed mblk_io_submit option [ 686.721383][ T9] chicony 0003:04F2:1123.0014: unknown main item tag 0x0 [ 686.770533][T10967] EXT4-fs (loop2): can't mount with both data=journal and dax [ 686.787785][ T9] chicony 0003:04F2:1123.0014: unknown main item tag 0x0 [ 686.826773][ T9] chicony 0003:04F2:1123.0014: unknown main item tag 0x0 [ 686.874196][ T9] chicony 0003:04F2:1123.0014: unknown main item tag 0x0 [ 687.086216][ T9] chicony 0003:04F2:1123.0014: unknown main item tag 0x0 [ 687.105184][ T9] chicony 0003:04F2:1123.0014: unknown main item tag 0x0 [ 687.138848][ T9] chicony 0003:04F2:1123.0014: unknown main item tag 0x0 [ 687.259508][ T9] chicony 0003:04F2:1123.0014: hidraw0: USB HID v0.04 Device [HID 04f2:1123] on usb-dummy_hcd.0-1/input0 [ 687.375239][ T9] usb 1-1: USB disconnect, device number 19 [ 688.315946][T10976] fido_id[10976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 689.880044][T10992] loop1: detected capacity change from 0 to 4096 [ 689.938471][T10992] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 691.027825][T11009] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 691.997149][T11019] loop4: detected capacity change from 0 to 64 [ 692.046670][T11019] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 692.189435][T11019] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 693.518490][T11034] can0: slcan on ttyS3. [ 693.812958][T11037] can0 (unregistered): slcan off ttyS3. [ 693.861531][T11037] Falling back ldisc for ttyS3. [ 695.146006][T11053] geneve2: entered promiscuous mode [ 695.175042][T11053] geneve2: entered allmulticast mode [ 695.244516][T10414] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 695.322080][T10414] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 695.394209][T10414] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 695.443751][T10414] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 695.659005][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.665721][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.462295][T11067] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2137'. [ 697.473108][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2143'. [ 698.082397][T11088] tipc: Enabling of bearer rejected, already enabled [ 698.176812][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 698.239446][T11088] tipc: Disabling bearer [ 698.608148][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 698.838472][ T9] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 698.847619][ T9] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 698.918331][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 698.968371][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.110588][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 699.314398][ T9] gspca_sn9c2028: read1 error -32 [ 699.354818][ T9] gspca_sn9c2028: read1 error -32 [ 699.621199][ T9218] usb 2-1: USB disconnect, device number 14 [ 702.076665][T11128] sctp: [Deprecated]: syz.4.2167 (pid 11128) Use of int in maxseg socket option. [ 702.076665][T11128] Use struct sctp_assoc_value instead [ 702.219166][T11133] loop1: detected capacity change from 0 to 512 [ 702.384063][T11133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.411256][T11133] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.287730][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.953796][T10414] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 704.331302][T11155] loop2: detected capacity change from 0 to 512 [ 706.868594][T11181] tap0: tun_chr_ioctl cmd 1074025672 [ 706.895195][T11181] tap0: ignored: set checksum enabled [ 706.905098][T11185] loop1: detected capacity change from 0 to 512 [ 706.942201][T11185] EXT4-fs: Ignoring removed oldalloc option [ 707.102028][T11185] EXT4-fs (loop1): 1 truncate cleaned up [ 707.130785][T11185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.316940][T11185] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.2188: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 707.383321][T11185] EXT4-fs (loop1): Remounting filesystem read-only [ 707.591165][T11191] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2191'. [ 707.784704][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.751635][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 710.803736][T11230] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2208'. [ 711.299163][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2210'. [ 712.290793][ T9218] IPVS: starting estimator thread 0... [ 712.408611][T11249] IPVS: using max 192 ests per chain, 9600 per kthread [ 713.386266][T11266] loop3: detected capacity change from 0 to 512 [ 717.741320][T11305] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 717.748483][T11305] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 719.108698][T11321] input: syz0 as /devices/virtual/input/input25 [ 720.191042][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 720.438365][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 720.488342][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 720.628871][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 720.683401][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.725256][ T10] usb 5-1: Product: syz [ 720.733168][ T10] usb 5-1: Manufacturer: syz [ 720.739475][ T10] usb 5-1: SerialNumber: syz [ 721.022953][ T10] cdc_ncm 5-1:1.0: bind() failure [ 721.116718][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 721.148813][ T10] cdc_ncm 5-1:1.1: bind() failure [ 721.269741][ T10] usb 5-1: USB disconnect, device number 15 [ 722.612073][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 725.808746][T11384] geneve2: entered promiscuous mode [ 725.824185][T11384] geneve2: entered allmulticast mode [ 727.249055][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 727.458146][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 727.499420][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 727.535924][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30 [ 727.574895][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 727.667023][ T10] usb 1-1: config 0 interface 0 has no altsetting 1 [ 727.726309][ T10] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 727.758076][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 727.809137][ T10] usb 1-1: SerialNumber: syz [ 727.861924][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 727.884371][ T10] usb 1-1: config 0 descriptor?? [ 727.942306][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 728.061158][ T10] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 728.306582][ T10] usb 1-1: USB disconnect, device number 20 [ 728.417193][T11415] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2285'. [ 728.614283][T11417] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 728.630808][T11417] syzkaller0: linktype set to 825 [ 729.172909][T11423] loop3: detected capacity change from 0 to 256 [ 730.492598][T11436] loop3: detected capacity change from 0 to 512 [ 730.518953][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 730.578843][T11436] EXT4-fs: Ignoring removed bh option [ 730.595895][T11436] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 730.758021][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 730.767453][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.820925][ T10] usb 2-1: config 0 descriptor?? [ 730.843208][ T10] cp210x 2-1:0.0: cp210x converter detected [ 730.848342][T11436] EXT4-fs (loop3): 1 truncate cleaned up [ 730.883624][T11436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.364134][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 731.407767][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 731.608360][ T9218] usb 2-1: USB disconnect, device number 15 [ 731.680918][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.703721][ T9218] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 731.940443][ T9218] cp210x 2-1:0.0: device disconnected [ 734.252532][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'. [ 734.363575][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'. [ 735.889075][T11486] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2314'. [ 735.912352][T11486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2314'. [ 735.952522][T10406] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 736.073806][T11489] loop2: detected capacity change from 0 to 512 [ 736.104226][T11489] EXT4-fs: Ignoring removed i_version option [ 736.198706][T11489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 736.376872][T11489] EXT4-fs (loop2): 1 truncate cleaned up [ 736.410596][T11489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.955837][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.383681][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'. [ 737.449919][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 738.738558][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 738.919562][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 738.948669][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 738.981231][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 739.034259][ T10] usb 3-1: config 220 has no interface number 2 [ 739.054423][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 739.118766][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 739.162668][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 739.185888][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 739.255613][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 739.278136][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.308530][ T10] usb 3-1: Product: syz [ 739.336482][ T10] usb 3-1: Manufacturer: syz [ 739.343171][ T10] usb 3-1: SerialNumber: syz [ 739.645601][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 739.708505][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 739.758390][ T10] usb 3-1: selecting invalid altsetting 0 [ 739.867361][ T10] usb 3-1: selecting invalid altsetting 0 [ 739.902759][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 739.962403][ T10] usb 3-1: USB disconnect, device number 16 [ 741.170407][T11546] loop2: detected capacity change from 0 to 256 [ 741.554058][T11546] FAT-fs (loop2): Directory bread(block 64) failed [ 741.618889][T11546] FAT-fs (loop2): Directory bread(block 65) failed [ 741.625874][T11546] FAT-fs (loop2): Directory bread(block 66) failed [ 741.697257][T11546] FAT-fs (loop2): Directory bread(block 67) failed [ 741.808454][T11546] FAT-fs (loop2): Directory bread(block 68) failed [ 741.815269][T11546] FAT-fs (loop2): Directory bread(block 69) failed [ 741.899046][T11546] FAT-fs (loop2): Directory bread(block 70) failed [ 741.926866][T11546] FAT-fs (loop2): Directory bread(block 71) failed [ 741.962847][T11546] FAT-fs (loop2): Directory bread(block 72) failed [ 742.012538][T11546] FAT-fs (loop2): Directory bread(block 73) failed [ 742.374214][T11553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'. [ 742.461167][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'. [ 743.557572][T11558] loop4: detected capacity change from 0 to 4096 [ 743.722634][T11563] hpfs: Bad magic ... probably not HPFS [ 743.796348][T11566] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 743.842735][T11565] hpfs: Bad magic ... probably not HPFS [ 743.918708][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 743.918796][ T29] audit: type=1800 audit(1771267974.827:62): pid=11558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2345" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 744.117003][T11569] tmpfs: Too small a size for current use [ 745.439474][T11581] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 747.253105][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 747.372433][T11606] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2367'. [ 747.459408][ T10] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 747.513017][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 747.555034][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 747.614617][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 747.639814][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 747.667368][ T10] usb 3-1: Product: syz [ 747.673306][ T10] usb 3-1: Manufacturer: syz [ 747.693841][ T10] usb 3-1: SerialNumber: syz [ 747.776270][ T10] usb 3-1: config 0 descriptor?? [ 747.837514][ T10] usb 3-1: selecting invalid altsetting 0 [ 748.362546][T11602] usb 3-1: cannot submit urb 0, error -90: internal error [ 748.424836][T11602] usb 3-1: cannot submit urb 0, error -90: internal error [ 748.448711][T11602] usb 3-1: cannot submit urb 0, error -90: internal error [ 748.529468][T11602] usb 3-1: cannot submit urb 0, error -90: internal error [ 748.552612][ T10] usb 3-1: USB disconnect, device number 17 [ 748.584544][T11602] usb 3-1: cannot submit urb 0, error -19: no device [ 748.902946][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.312470][T11620] loop1: detected capacity change from 0 to 16 [ 749.375413][T11620] erofs (device loop1): mounted with root inode @ nid 36. [ 751.542076][T11642] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2384'. [ 751.893249][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 753.393482][T11662] loop4: detected capacity change from 0 to 2048 [ 753.557150][T11662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 753.749437][ T9218] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 753.918120][ T9218] usb 4-1: Using ep0 maxpacket: 16 [ 753.975363][ T9218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 754.001096][ T9218] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 754.036380][ T9218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.111197][ T9218] usb 4-1: config 0 descriptor?? [ 755.292593][ T9218] usb 4-1: USB disconnect, device number 11 [ 755.835253][T11678] loop2: detected capacity change from 0 to 2048 [ 755.984380][T11678] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 756.038142][T11678] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 756.087799][T11678] UDF-fs: Scanning with blocksize 512 failed [ 756.124427][T11682] loop1: detected capacity change from 0 to 512 [ 756.207551][T11684] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 756.255077][T11678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 756.280245][T11682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.374704][T11682] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.570471][ T29] audit: type=1800 audit(1771267987.507:63): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2399" name="file1" dev="loop2" ino=838 res=0 errno=0 [ 756.590934][ T9218] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 756.761256][ T9218] usb 1-1: Using ep0 maxpacket: 16 [ 756.828893][ T9218] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 756.871989][ T9218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.943562][ T9218] usb 1-1: Product: syz [ 756.974658][ T9218] usb 1-1: Manufacturer: syz [ 757.011557][ T9218] usb 1-1: SerialNumber: syz [ 757.110794][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.142602][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.155449][ T9218] usb 1-1: config 0 descriptor?? [ 757.219320][ T9218] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 757.341294][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.911679][T11697] loop2: detected capacity change from 0 to 128 [ 758.059296][ T9218] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 758.071688][T11697] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 758.099090][ T9218] usb 1-1: USB disconnect, device number 21 [ 758.232374][T11697] ext4 filesystem being mounted at /479/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 758.572225][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 758.704484][T11704] loop3: detected capacity change from 0 to 256 [ 758.932539][T11704] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 758.991462][T11706] loop2: detected capacity change from 0 to 136 [ 762.287475][T11738] loop1: detected capacity change from 0 to 512 [ 762.404483][T11738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.434442][T11738] ext4 filesystem being mounted at /468/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.464498][T11734] loop4: detected capacity change from 0 to 2048 [ 762.546294][T11734] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 762.589013][ T29] audit: type=1800 audit(1771267993.517:64): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2425" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 762.688100][T11734] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 762.711009][ T29] audit: type=1800 audit(1771267993.557:65): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2425" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 762.737262][T11734] UDF-fs: Scanning with blocksize 512 failed [ 762.973706][T11734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.233967][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.017261][T11782] cgroup: fork rejected by pids controller in /syz2 [ 767.377750][T11787] loop3: detected capacity change from 0 to 1024 [ 767.661609][T11787] hfsplus: walked past end of dir [ 767.800389][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 767.885509][T11789] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2445'. [ 767.925664][T11789] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2445'. [ 767.958707][T10412] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 768.997071][ T5771] syz_tun (unregistering): left promiscuous mode [ 769.159315][T11801] loop3: detected capacity change from 0 to 2048 [ 769.234717][ T139] batman_adv: batadv0: Removing interface: netdevsim3 [ 769.252933][T11801] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 769.277517][ T139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.569648][ T139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.748447][ T9218] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 769.779055][T10783] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 769.804973][ T139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.958366][T10783] usb 4-1: Using ep0 maxpacket: 8 [ 769.975188][ T9218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.999958][ T9218] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 770.011884][ T139] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 770.036760][T10783] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 770.045842][ T9218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.062878][ T139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.088799][T10783] usb 4-1: config 179 has no interface number 0 [ 770.095348][T10783] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 770.116477][ T9218] usb 1-1: config 0 descriptor?? [ 770.158318][T10783] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 770.218639][T10783] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 25300, setting to 1024 [ 770.264940][T10783] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 770.328078][T10783] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 770.378657][T10783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.480188][T11801] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 770.797234][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.881285][ T9218] hid-generic 0003:18D1:503C.0016: unbalanced delimiter at end of report description [ 770.940128][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.089130][ T9218] hid-generic 0003:18D1:503C.0016: probe with driver hid-generic failed with error -22 [ 771.283519][ T9218] usb 1-1: USB disconnect, device number 22 [ 771.415218][ T5828] usb 4-1: USB disconnect, device number 12 [ 771.415218][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 771.415640][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 771.580632][ T139] bridge_slave_1: left allmulticast mode [ 771.586526][ T139] bridge_slave_1: left promiscuous mode [ 771.604209][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.673007][ T139] bridge_slave_0: left allmulticast mode [ 771.689313][ T139] bridge_slave_0: left promiscuous mode [ 771.698139][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.704854][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.725550][ T139] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 772.753614][ T139] bond0 (unregistering): Released all slaves [ 774.359126][T10502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 774.377195][T10502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 774.387215][T10502] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 774.421348][T10502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 774.449233][T10502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 774.470553][ T139] macvlan0: left promiscuous mode [ 774.678615][ T139] hsr_slave_0: left promiscuous mode [ 774.810500][ T139] hsr_slave_1: left promiscuous mode [ 774.845047][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.868382][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.931034][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.988408][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.120996][ T139] veth1_macvtap: left promiscuous mode [ 775.149782][ T139] veth0_macvtap: left promiscuous mode [ 775.188979][ T139] veth1_vlan: left promiscuous mode [ 775.194591][ T139] veth0_vlan: left promiscuous mode [ 775.291619][T11835] loop4: detected capacity change from 0 to 512 [ 776.509067][ T5784] Bluetooth: hci3: command tx timeout [ 778.010904][ T139] team0 (unregistering): Port device team_slave_1 removed [ 778.148714][T11857] ALSA: mixer_oss: invalid OSS volume '' [ 778.150117][ T139] team0 (unregistering): Port device team_slave_0 removed [ 778.588176][ T5784] Bluetooth: hci3: command tx timeout [ 778.688530][T11859] binder: 11858:11859 ioctl c0306201 80000480 returned -14 [ 778.906180][ T29] audit: type=1800 audit(1771268009.847:66): pid=11848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2467" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 778.913927][T11848] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 778.974658][T11848] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 779.055992][T11848] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 779.902426][T11865] loop4: detected capacity change from 0 to 256 [ 780.008046][ T139] IPVS: stop unused estimator thread 0... [ 780.669674][ T5784] Bluetooth: hci3: command tx timeout [ 781.587489][T11827] chnl_net:caif_netlink_parms(): no params data found [ 781.869844][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 782.753450][ T5784] Bluetooth: hci3: command tx timeout [ 783.012327][T10406] ===================================================== [ 783.020051][T10406] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 783.027211][T10406] __inet6_bind+0x4ac/0x1830 [ 783.035644][T10406] inet6_bind+0x11e/0x1a0 [ 783.041149][T10406] kernel_bind+0xd6/0x130 [ 783.045679][T10406] rds_tcp_conn_path_connect+0x952/0xff0 [ 783.051638][T10406] rds_connect_worker+0x353/0x4d0 [ 783.059410][T10406] process_scheduled_works+0xb21/0x1e30 [ 783.066019][T10406] worker_thread+0xede/0x1580 [ 783.071053][T10406] kthread+0x53f/0x600 [ 783.075358][T10406] ret_from_fork+0x20f/0x910 [ 783.080282][T10406] ret_from_fork_asm+0x1a/0x30 [ 783.085297][T10406] [ 783.087738][T10406] Uninit was stored to memory at: [ 783.093305][T10406] kernel_bind+0x92/0x130 [ 783.098065][T10406] rds_tcp_conn_path_connect+0x952/0xff0 [ 783.103920][T10406] rds_connect_worker+0x353/0x4d0 [ 783.111227][T10406] process_scheduled_works+0xb21/0x1e30 [ 783.117200][T10406] worker_thread+0xede/0x1580 [ 783.122231][T10406] kthread+0x53f/0x600 [ 783.126532][T10406] ret_from_fork+0x20f/0x910 [ 783.131438][T10406] ret_from_fork_asm+0x1a/0x30 [ 783.141269][T10406] [ 783.143764][T10406] Uninit was stored to memory at: [ 783.149730][T10406] rds_tcp_conn_path_connect+0xae5/0xff0 [ 783.155584][T10406] rds_connect_worker+0x353/0x4d0 [ 783.160966][T10406] process_scheduled_works+0xb21/0x1e30 [ 783.166718][T10406] worker_thread+0xede/0x1580 [ 783.171686][T10406] kthread+0x53f/0x600 [ 783.175990][T10406] ret_from_fork+0x20f/0x910 [ 783.181022][T10406] ret_from_fork_asm+0x1a/0x30 [ 783.186023][T10406] [ 783.188522][T10406] Uninit was created at: [ 783.193029][T10406] kmem_cache_alloc_noprof+0x37b/0x1270 [ 783.198910][T10406] rds_tcp_conn_alloc+0x7b/0xbb0 [ 783.204194][T10406] __rds_conn_create+0x267f/0x34e0 [ 783.209655][T10406] rds_conn_create+0x5d/0x80 [ 783.214436][T10406] rds_tcp_accept_one+0x784/0x17d0 [ 783.219847][T10406] rds_tcp_accept_worker+0x38/0x100 [ 783.225258][T10406] process_scheduled_works+0xb21/0x1e30 [ 783.231201][T10406] worker_thread+0xede/0x1580 [ 783.239671][T10406] kthread+0x53f/0x600 [ 783.243970][T10406] ret_from_fork+0x20f/0x910 [ 783.250599][T10406] ret_from_fork_asm+0x1a/0x30 [ 783.255621][T10406] [ 783.258204][T10406] CPU: 0 UID: 0 PID: 10406 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.269725][T10406] Tainted: [L]=SOFTLOCKUP [ 783.274178][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.284716][T10406] Workqueue: krds_cp_wq#3/0 rds_connect_worker [ 783.291464][T10406] ===================================================== [ 783.298643][T10406] Disabling lock debugging due to kernel taint [ 783.503825][T10406] Kernel panic - not syncing: kmsan.panic set ... [ 783.510457][T10406] CPU: 0 UID: 0 PID: 10406 Comm: kworker/u8:21 Tainted: G B L syzkaller #0 PREEMPT(full) [ 783.521920][T10406] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 783.527689][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.537926][T10406] Workqueue: krds_cp_wq#3/0 rds_connect_worker [ 783.544384][T10406] Call Trace: [ 783.547803][T10406] [ 783.550843][T10406] __dump_stack+0x26/0x30 [ 783.555402][T10406] dump_stack_lvl+0x50/0x1c0 [ 783.560213][T10406] ? dump_stack+0x12/0x25 [ 783.564763][T10406] dump_stack+0x1e/0x25 [ 783.569158][T10406] vpanic+0x7b4/0x1430 [ 783.573481][T10406] panic+0x15d/0x160 [ 783.577638][T10406] kmsan_report+0x31a/0x320 [ 783.582561][T10406] ? __msan_warning+0x1b/0x30 [ 783.587462][T10406] ? __inet6_bind+0x4ac/0x1830 [ 783.592448][T10406] ? inet6_bind+0x11e/0x1a0 [ 783.597176][T10406] ? kernel_bind+0xd6/0x130 [ 783.601914][T10406] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 783.607949][T10406] ? rds_connect_worker+0x353/0x4d0 [ 783.613402][T10406] ? process_scheduled_works+0xb21/0x1e30 [ 783.619337][T10406] ? worker_thread+0xede/0x1580 [ 783.624459][T10406] ? kthread+0x53f/0x600 [ 783.628933][T10406] ? ret_from_fork+0x20f/0x910 [ 783.633898][T10406] ? ret_from_fork_asm+0x1a/0x30 [ 783.639086][T10406] ? stack_depot_save+0x12/0x20 [ 783.644159][T10406] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 783.650200][T10406] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 783.656234][T10406] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 783.662796][T10406] ? __msan_memcpy+0x105/0x1c0 [ 783.667784][T10406] ? kernel_bind+0x92/0x130 [ 783.672513][T10406] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 783.678523][T10406] ? rds_connect_worker+0x353/0x4d0 [ 783.683968][T10406] ? process_scheduled_works+0xb21/0x1e30 [ 783.689898][T10406] ? worker_thread+0xede/0x1580 [ 783.694959][T10406] ? kthread+0x53f/0x600 [ 783.699439][T10406] ? ret_from_fork+0x20f/0x910 [ 783.704486][T10406] ? ret_from_fork_asm+0x1a/0x30 [ 783.709657][T10406] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 783.715734][T10406] ? stack_depot_save_flags+0x610/0x790 [ 783.721525][T10406] ? kmsan_get_metadata+0xf1/0x160 [ 783.726884][T10406] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 783.732946][T10406] ? kmsan_get_metadata+0xf1/0x160 [ 783.738326][T10406] __msan_warning+0x1b/0x30 [ 783.743057][T10406] __inet6_bind+0x4ac/0x1830 [ 783.747866][T10406] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 783.753969][T10406] inet6_bind+0x11e/0x1a0 [ 783.758506][T10406] ? __pfx_inet6_bind+0x10/0x10 [ 783.763561][T10406] kernel_bind+0xd6/0x130 [ 783.768106][T10406] ? kmsan_get_metadata+0xf1/0x160 [ 783.773478][T10406] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 783.779639][T10406] rds_tcp_conn_path_connect+0x952/0xff0 [ 783.785499][T10406] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 783.792062][T10406] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 783.798411][T10406] rds_connect_worker+0x353/0x4d0 [ 783.803674][T10406] ? __pfx_rds_connect_worker+0x10/0x10 [ 783.809437][T10406] process_scheduled_works+0xb21/0x1e30 [ 783.815232][T10406] worker_thread+0xede/0x1580 [ 783.820137][T10406] kthread+0x53f/0x600 [ 783.824413][T10406] ? __pfx_worker_thread+0x10/0x10 [ 783.829721][T10406] ? __pfx_kthread+0x10/0x10 [ 783.834593][T10406] ret_from_fork+0x20f/0x910 [ 783.839367][T10406] ? __switch_to+0x51c/0x750 [ 783.844174][T10406] ? __pfx_kthread+0x10/0x10 [ 783.848977][T10406] ret_from_fork_asm+0x1a/0x30 [ 783.854099][T10406] [ 783.857880][T10406] Kernel Offset: disabled [ 783.862321][T10406] Rebooting in 86400 seconds..