last executing test programs: 16.026497153s ago: executing program 1 (id=1421): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000208000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c0001"], 0xac}}, 0x0) 13.437161501s ago: executing program 1 (id=1426): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000001040)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000000,dmode=00000000000000004000005,dmode=00000000000000000000153,shortad,shortad,undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB=',utf8,umask=00000000000000000000006,dmode=00000000000000000000011,nostrict,dmo00000000000005254,umask=00000000000000000000005,\x00'/136], 0x2, 0xc2d, &(0x7f00000001c0)="$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") unlink(&(0x7f0000000280)='./file1\x00') chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) 10.743753921s ago: executing program 3 (id=1433): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x3, 0xcf, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000030000000000000000851000000600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000040000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 9.862457066s ago: executing program 1 (id=1436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800090000000000000000001c14"], 0x24}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 9.178040061s ago: executing program 2 (id=1437): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) ioprio_get$uid(0x2, r1) socket(0x10, 0x0, 0x0) mremap(&(0x7f000075e000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) 8.443823547s ago: executing program 3 (id=1439): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xa, 0x7, 0x209, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x3ff, r0}, 0x38) 8.312775226s ago: executing program 2 (id=1440): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r0, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) 8.053052873s ago: executing program 4 (id=1441): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) 7.599764389s ago: executing program 1 (id=1442): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000300)='./file0\x00', 0xa00000, &(0x7f0000001c40)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@uid_ignore}, {@uid}, {@undelete}, {@fileset={'fileset', 0x3d, 0x101}}, {@volume={'volume', 0x3d, 0xaad}}, {@uid_forget}, {@uid}]}, 0x1, 0xc4d, &(0x7f0000001d40)="$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") ioprio_set$pid(0x2, 0x0, 0x2004) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) 7.08282458s ago: executing program 2 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}]}, 0x48}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 6.997949733s ago: executing program 4 (id=1444): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}}, 0x0) 6.33638585s ago: executing program 0 (id=1368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 5.689326088s ago: executing program 2 (id=1445): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 4.936423154s ago: executing program 0 (id=1446): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="9fcef773371e4e035a4ff190bea4efd68642046c23be8a9aae70a0043860f98931e9a9d2a4cb9b6cbfab8d88542eafc9851179a8bc28dad0fbfc05804b2b"], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file1\x00') rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='./file0\x00') 4.360727391s ago: executing program 3 (id=1447): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x800000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) 4.160189358s ago: executing program 4 (id=1448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) io_setup(0xbf, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 4.110076053s ago: executing program 1 (id=1449): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x5, 0x5825}) close_range(r0, 0xffffffffffffffff, 0x0) 3.953053221s ago: executing program 0 (id=1450): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"cb02a6be95eab5700900a190c6d8cb00fc18137f1caf3e48018b251f7320a0e8", r1, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x300, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 3.945991228s ago: executing program 2 (id=1451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000001880), 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2.885564185s ago: executing program 0 (id=1452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ff9000/0x4000)=nil, 0x3) 2.585292791s ago: executing program 4 (id=1453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}, 0x0) 2.506171599s ago: executing program 3 (id=1454): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7ffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.121981064s ago: executing program 3 (id=1455): madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 1.680975609s ago: executing program 2 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x452f, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x8100, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xdd86}}}}}}}, 0xfdef) 1.200935969s ago: executing program 4 (id=1457): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="f9", 0x1}], 0x1) write$binfmt_aout(r0, &(0x7f0000000b40)=ANY=[], 0x926) 1.141806774s ago: executing program 1 (id=1458): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) 918.302422ms ago: executing program 0 (id=1459): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, 0x0}, 0x240020d9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 359.550851ms ago: executing program 4 (id=1460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 125.727812ms ago: executing program 3 (id=1461): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000020002000000010000000000000004000200040001"], 0x40}}, 0x0) 0s ago: executing program 0 (id=1462): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): VLAN 0 to HW filter on device bond0 [ 381.819354][ T6366] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.865679][ T6585] loop4: detected capacity change from 0 to 256 [ 381.911353][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.919361][ T3836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.936300][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.944198][ T3836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.960701][ T6585] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 382.145161][ T5177] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 382.152555][ T5177] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 382.160233][ T5177] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 382.168231][ T5177] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 382.182787][ T5177] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 382.190435][ T5177] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 382.200104][ T5177] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 382.208524][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.217986][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.229863][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.324956][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.337826][ T5177] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 382.345262][ T5177] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 382.352998][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.362424][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.371582][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.693602][ T5177] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 382.700610][ T5177] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 382.710844][ T5177] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 382.722507][ T5177] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 382.730112][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.740290][ T5177] NILFS (loop2): discard dirty page: offset=131072, ino=3 [ 382.748019][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.757543][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 382.766930][ T5177] NILFS (loop2): discard dirty block: blocknr=46, size=1024 [ 382.774744][ T5177] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 383.505618][ T1593] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 384.259254][ T5258] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 384.262990][ T1593] usb 4-1: Using ep0 maxpacket: 8 [ 384.367583][ T6366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.598480][ T6366] veth0_vlan: entered promiscuous mode [ 384.636050][ T6366] veth1_vlan: entered promiscuous mode [ 384.747669][ T6366] veth0_macvtap: entered promiscuous mode [ 384.790603][ T6366] veth1_macvtap: entered promiscuous mode [ 384.917510][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.928572][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.938958][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.949985][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.960500][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.970000][ T1593] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 384.974445][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.980502][ T1593] usb 4-1: config 179 has no interface number 0 [ 384.991779][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.991885][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.998017][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.998976][ T1593] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 385.043159][ T1593] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 385.054979][ T1593] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 385.070140][ T1593] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 385.082829][ T1593] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 385.097026][ T1593] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 385.106563][ T1593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.211140][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.222088][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.236048][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.247468][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.257655][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.258596][ T6596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.268365][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.291446][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.303603][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.319617][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.432010][ T6366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.445749][ T6366] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.457401][ T6366] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.466822][ T6366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.804115][ T5258] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 385.813776][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.139038][ T5258] usb 3-1: config 0 descriptor?? [ 386.674142][ T5258] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 386.763422][ T1919] usb 4-1: USB disconnect, device number 7 [ 386.763427][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 387.388619][ T5258] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 387.406286][ T5258] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 387.492682][ T5232] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 387.660212][ T5232] usb 5-1: Using ep0 maxpacket: 8 [ 387.711566][ T5232] usb 5-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=47.b7 [ 387.721410][ T5232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.887501][ T5232] usb 5-1: config 0 descriptor?? [ 387.973832][ T5232] usb 5-1: selecting invalid altsetting 1 [ 387.979904][ T5232] snd-usb-caiaq 5-1:0.0: can't set alt interface. [ 387.987010][ T5232] usb 5-1: unable to init card! (ret=-5) [ 387.994247][ T5232] snd-usb-caiaq 5-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 388.046688][ T5261] usb 3-1: USB disconnect, device number 3 [ 388.585899][ T5232] usb 5-1: USB disconnect, device number 5 [ 389.873965][ T6646] Process accounting resumed [ 390.182811][ T6663] loop2: detected capacity change from 0 to 64 [ 390.676430][ T6671] loop1: detected capacity change from 0 to 16 [ 390.794360][ T6671] erofs: (device loop1): mounted with root inode @ nid 36. [ 390.934653][ T6675] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 390.987730][ T6664] loop3: detected capacity change from 0 to 2048 [ 390.992888][ T6675] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 391.010168][ T6675] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 391.314404][ T6664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.484917][ T6681] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 391.644387][ T6664] EXT4-fs (loop3): shut down requested (2) [ 392.170966][ T6693] warning: `syz.1.460' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 392.180605][ T6691] loop2: detected capacity change from 0 to 512 [ 392.345679][ T6691] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 392.353842][ T6691] UDF-fs: Scanning with blocksize 512 failed [ 392.386043][ T5176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.452072][ T6691] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 392.460146][ T6691] UDF-fs: Scanning with blocksize 1024 failed [ 392.722943][ T6691] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 392.730731][ T6691] UDF-fs: Scanning with blocksize 2048 failed [ 392.799911][ T6691] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 392.930832][ T6691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.953312][ T5236] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 393.271323][ T6706] loop3: detected capacity change from 0 to 256 [ 393.442708][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.454963][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.468137][ T5236] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 393.478344][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.579116][ T5236] usb 2-1: config 0 descriptor?? [ 394.745737][ T5236] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 394.755452][ T5236] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 394.764067][ T5236] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 394.772768][ T5236] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 394.780978][ T5236] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 394.915519][ T6723] loop3: detected capacity change from 0 to 128 [ 395.027247][ T5236] usb 2-1: USB disconnect, device number 5 [ 395.068496][ T2528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.076981][ T2528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.158471][ T29] audit: type=1800 audit(1726830653.659:10): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.467" name="file1" dev="loop3" ino=1048608 res=0 errno=0 [ 395.180305][ T29] audit: type=1800 audit(1726830653.669:11): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.467" name="file1" dev="loop3" ino=1048608 res=0 errno=0 [ 395.301329][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.312831][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.297814][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 396.307532][ T6737] netlink: 68 bytes leftover after parsing attributes in process `syz.1.471'. [ 396.317498][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 397.920977][ T6750] loop0: detected capacity change from 0 to 2048 [ 398.188259][ T5258] IPVS: starting estimator thread 0... [ 398.230310][ T6748] loop1: detected capacity change from 0 to 4096 [ 398.363252][ T6760] IPVS: using max 192 ests per chain, 9600 per kthread [ 398.447421][ T6750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.058596][ T6366] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.480335][ T29] audit: type=1800 audit(1726830657.969:12): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.476" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 400.008210][ T6775] loop4: detected capacity change from 0 to 1024 [ 400.075112][ T6775] EXT4-fs: Ignoring removed oldalloc option [ 400.346551][ T6775] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 400.440674][ T5184] Bluetooth: hci5: command 0x0406 tx timeout [ 400.557598][ T6775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.571673][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 401.680906][ T5189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.880106][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 402.286368][ T6802] loop1: detected capacity change from 0 to 64 [ 402.773009][ T6804] loop4: detected capacity change from 0 to 2048 [ 402.958449][ T6804] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.767708][ T6820] geneve0: entered promiscuous mode [ 404.217498][ T6820] geneve0: left promiscuous mode [ 405.028273][ T6827] loop0: detected capacity change from 0 to 512 [ 405.386911][ T6827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.401297][ T6827] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.562960][ T5236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 405.958725][ T5236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.969302][ T5236] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.067035][ T5236] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 406.077104][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 406.085729][ T5236] usb 2-1: SerialNumber: syz [ 406.354215][ T6366] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.484918][ T5236] usb 2-1: 0:2 : does not exist [ 406.613803][ T6848] input: syz1 as /devices/virtual/input/input6 [ 406.768868][ T6850] loop4: detected capacity change from 0 to 256 [ 406.922718][ T5236] usb 2-1: USB disconnect, device number 6 [ 407.140574][ T6850] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 407.181256][ T6852] loop0: detected capacity change from 0 to 64 [ 407.246634][ T5514] udevd[5514]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.456067][ T6875] syz.1.520 (6875) used greatest stack depth: 4352 bytes left [ 410.716805][ T6896] Bluetooth: hci3: Frame reassembly failed (-84) [ 411.664593][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.531'. [ 412.758273][ T5184] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 413.658335][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.665644][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.620431][ T6956] loop0: detected capacity change from 0 to 2048 [ 415.717341][ T6956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.015935][ T6962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.023600][ T6962] IPv6: NLM_F_CREATE should be set when creating new route [ 418.690215][ T6988] loop3: detected capacity change from 0 to 16 [ 418.730221][ T6988] erofs: (device loop3): mounted with root inode @ nid 36. [ 419.560608][ T7004] loop2: detected capacity change from 0 to 64 [ 420.003547][ T7008] loop1: detected capacity change from 0 to 256 [ 420.677957][ T7019] loop2: detected capacity change from 0 to 16 [ 421.793234][ T7034] loop4: detected capacity change from 0 to 256 [ 423.040988][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 423.057775][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 424.753188][ T5236] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 424.852455][ T7066] loop3: detected capacity change from 0 to 512 [ 425.118438][ T7066] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 425.234900][ T7066] EXT4-fs (loop3): Remounting filesystem read-only [ 425.243274][ T7066] EXT4-fs (loop3): 1 truncate cleaned up [ 425.251370][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.744235][ T5236] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 425.790097][ T5176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.369436][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.609'. [ 427.281547][ T7102] /dev/nullb0: Can't open blockdev [ 427.387167][ T7094] loop2: detected capacity change from 0 to 2048 [ 427.445508][ T7094] EXT4-fs: Ignoring removed orlov option [ 427.660009][ T7094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.812764][ T5258] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 427.910886][ T7094] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 427.935509][ T7111] loop0: detected capacity change from 0 to 164 [ 427.957479][ T7094] EXT4-fs (loop2): Remounting filesystem read-only [ 428.040072][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.054306][ T5258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.065752][ T5258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.077904][ T5258] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.088011][ T5258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.130319][ T7111] ALSA: mixer_oss: invalid OSS volume '0000007f,map=normal,map=acorn,o' [ 428.198521][ T5258] usb 4-1: config 0 descriptor?? [ 428.640579][ T5258] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 428.739126][ T5258] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input8 [ 429.051281][ T5258] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 429.091458][ T7117] loop1: detected capacity change from 0 to 1764 [ 429.141138][ T5258] usb 4-1: USB disconnect, device number 8 [ 429.372034][ T7117] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 429.413561][ T7124] loop4: detected capacity change from 0 to 512 [ 429.502748][ T7124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.517089][ T7124] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.153941][ T7134] loop1: detected capacity change from 0 to 512 [ 430.183093][ T7134] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 430.200597][ T7132] loop3: detected capacity change from 0 to 64 [ 430.238783][ T7132] hfs: unable to locate alternate MDB [ 430.246867][ T7132] hfs: continuing without an alternate MDB [ 430.276466][ T7134] EXT4-fs (loop1): 1 truncate cleaned up [ 430.286222][ T7134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.314143][ T5189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.475545][ T7134] syz.1.626 (pid 7134) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 430.623336][ T29] audit: type=1800 audit(1726830689.129:13): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.627" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 430.644441][ T29] audit: type=1800 audit(1726830689.129:14): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.627" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 430.992852][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.733642][ T7151] Bluetooth: MGMT ver 1.23 [ 434.485736][ T7189] 9p: Unknown uid 00000000004294967295 [ 435.415910][ T7203] loop0: detected capacity change from 0 to 512 [ 435.496669][ T7203] EXT4-fs error (device loop0): __ext4_iget:4982: inode #15: block 1803188595: comm syz.0.654: invalid block [ 435.524111][ T7203] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.654: couldn't read orphan inode 15 (err -117) [ 435.543807][ T7203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.613799][ T7203] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.654: invalid indirect mapped block 234881024 (level 0) [ 435.673720][ T5236] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 435.944045][ T5236] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 435.953852][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.055576][ T5236] usb 3-1: config 0 descriptor?? [ 436.101062][ T6366] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.729018][ T5236] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 437.067052][ T7219] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 437.170986][ T7217] loop4: detected capacity change from 0 to 512 [ 437.249300][ T7217] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 437.474239][ T5236] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 437.484792][ T5236] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 437.595086][ T7217] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 437.631172][ T5236] usb 3-1: USB disconnect, device number 4 [ 437.640732][ T7217] EXT4-fs (loop4): 1 truncate cleaned up [ 437.650258][ T7217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.955956][ T7217] EXT4-fs error (device loop4): ext4_nfs_get_inode:1537: inode #18: comm syz.4.657: iget: bad extra_isize 46 (inode size 256) [ 438.559732][ T5189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.962958][ T7236] loop2: detected capacity change from 0 to 1024 [ 439.078884][ T7236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.570978][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.419213][ T7255] misc userio: No port type given on /dev/userio [ 440.775269][ T7255] misc userio: The device must be registered before sending interrupts [ 440.923437][ T7260] input: syz1 as /devices/virtual/input/input9 [ 441.340794][ T7266] loop1: detected capacity change from 0 to 512 [ 441.871341][ T7266] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 441.882774][ T7266] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 441.893465][ T7266] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.676: Failed to acquire dquot type 1 [ 441.925888][ T7275] loop3: detected capacity change from 0 to 256 [ 441.959686][ T7275] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 442.022488][ T7266] EXT4-fs (loop1): 1 truncate cleaned up [ 442.064437][ T7266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.078111][ T7266] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.117006][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 442.136931][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 442.157157][ T7279] netlink: 104 bytes leftover after parsing attributes in process `syz.4.683'. [ 442.166933][ T7279] netlink: 104 bytes leftover after parsing attributes in process `syz.4.683'. [ 442.447090][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.160535][ T7290] loop3: detected capacity change from 0 to 1024 [ 443.506520][ T7290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.704261][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.028491][ T5176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.337130][ T7307] overlay: filesystem on ./bus not supported as upperdir [ 444.469874][ T7309] loop3: detected capacity change from 0 to 1024 [ 444.617268][ T7309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.630307][ T7309] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.843569][ T29] audit: type=1800 audit(1726830703.369:15): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 444.963742][ T29] audit: type=1800 audit(1726830703.439:16): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 444.987381][ T29] audit: type=1800 audit(1726830703.459:17): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 445.203024][ T5176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.888244][ T7315] loop0: detected capacity change from 0 to 4096 [ 446.966874][ T7315] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 447.134980][ T7335] tmpfs: Bad value for 'mpol' [ 447.821018][ T7315] ntfs3: loop0: ino=3, ntfs_iget5 [ 449.648274][ T7364] loop3: detected capacity change from 0 to 1764 [ 449.902919][ T7373] loop2: detected capacity change from 0 to 2048 [ 449.925820][ T5184] Bluetooth: Frame is too long (len 16, expected len 4) [ 449.999750][ T7370] netlink: 'syz.4.718': attribute type 11 has an invalid length. [ 450.115554][ T5261] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 450.390537][ T7373] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.719: bad orphan inode 8192 [ 450.437411][ T7373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.536959][ T5261] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 450.548724][ T5261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.560247][ T5261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.570505][ T5261] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 450.634168][ T29] audit: type=1800 audit(1726830709.109:18): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.719" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 450.764416][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.791753][ T5261] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 450.802372][ T5261] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 450.813961][ T5261] usb 2-1: Manufacturer: syz [ 450.831082][ T5261] usb 2-1: config 0 descriptor?? [ 451.278756][ T5261] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 451.292963][ T5261] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 451.349331][ T5261] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 451.661100][ T5258] usb 2-1: USB disconnect, device number 7 [ 451.806973][ T7391] loop0: detected capacity change from 0 to 1024 [ 452.056065][ T7391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.564386][ T7401] vlan2: entered promiscuous mode [ 452.569758][ T7401] veth0_virt_wifi: entered promiscuous mode [ 452.634451][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.731'. [ 452.782774][ T7401] veth0_virt_wifi: left promiscuous mode [ 452.953726][ T6366] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.886019][ T7423] loop2: detected capacity change from 0 to 128 [ 453.897888][ T7423] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.964376][ T7423] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 456.079079][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 456.776513][ T7464] loop2: detected capacity change from 0 to 128 [ 457.167380][ T7464] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 457.458030][ T7464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.752738][ T5258] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 457.972845][ T5258] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.985502][ T5258] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 457.996514][ T5258] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.006346][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.181707][ T7476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 458.238771][ T5258] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.330138][ T7481] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 458.339935][ T7481] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 458.587344][ T29] audit: type=1326 audit(1726830717.049:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.0.763" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x0 [ 458.605384][ T7489] loop3: detected capacity change from 0 to 256 [ 458.613187][ T29] audit: type=1326 audit(1726830717.119:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.764" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x0 [ 458.617559][ T7485] loop2: detected capacity change from 0 to 8 [ 458.694370][ T7485] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 458.790893][ T5258] usb 2-1: USB disconnect, device number 8 [ 458.841292][ T7489] Process accounting resumed [ 458.846708][ T7489] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 458.857625][ T7489] FAT-fs (loop3): Filesystem has been set read-only [ 458.940475][ T7489] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 459.143521][ T5514] udevd[5514]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.641725][ T7509] 9p: Unknown uid 00000000004294967295 [ 460.791910][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 460.881210][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 460.997292][ T7506] loop1: detected capacity change from 0 to 1024 [ 461.075630][ T7506] EXT4-fs: Ignoring removed bh option [ 461.081741][ T7506] EXT4-fs: Ignoring removed orlov option [ 461.088588][ T7506] ext4: Unknown parameter 'fsmagic' [ 461.125025][ T7517] loop4: detected capacity change from 0 to 64 [ 461.326781][ T7506] input: syz0 as /devices/virtual/input/input10 [ 461.826821][ T7525] loop3: detected capacity change from 0 to 16 [ 461.937217][ T7525] erofs: (device loop3): mounted with root inode @ nid 36. [ 461.947942][ T7529] loop4: detected capacity change from 0 to 64 [ 462.047297][ T7525] syz.3.778: attempt to access beyond end of device [ 462.047297][ T7525] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 462.061358][ T7525] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 462.221019][ T7533] loop0: detected capacity change from 0 to 512 [ 462.694904][ T7533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.708333][ T7533] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.888470][ T29] audit: type=1800 audit(1726830721.419:21): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.784" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 462.953318][ T29] audit: type=1800 audit(1726830721.449:22): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.784" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 462.973824][ T7543] 9p: Unknown uid 00000000004294967295 [ 463.099812][ T6366] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.221142][ T7548] loop1: detected capacity change from 0 to 512 [ 463.432994][ T7548] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 463.440793][ T7548] UDF-fs: Scanning with blocksize 512 failed [ 463.481455][ T7548] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 463.489807][ T7548] UDF-fs: Scanning with blocksize 1024 failed [ 463.520794][ T7548] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 463.529586][ T7548] UDF-fs: Scanning with blocksize 2048 failed [ 463.565504][ T7548] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 463.667143][ T7548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.952324][ T7554] loop3: detected capacity change from 0 to 64 [ 464.184215][ T7554] hfs: request for non-existent node 1280 in B*Tree [ 464.191410][ T7554] hfs: request for non-existent node 1280 in B*Tree [ 464.530014][ T7558] syz_tun: entered promiscuous mode [ 464.914831][ T7567] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 465.199307][ T7558] syz_tun: left promiscuous mode [ 465.603482][ T5232] IPVS: starting estimator thread 0... [ 465.714024][ T7573] IPVS: using max 240 ests per chain, 12000 per kthread [ 465.722921][ T5258] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 465.965574][ T5258] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 465.973639][ T5258] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 465.983353][ T5258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.079779][ T5258] usb 5-1: config 0 descriptor?? [ 466.356857][ T5258] usb 5-1: USB disconnect, device number 6 [ 466.400563][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 467.079169][ T7597] loop3: detected capacity change from 0 to 64 [ 467.946319][ T7609] loop2: detected capacity change from 0 to 2048 [ 468.146683][ T7609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.225021][ T7609] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 468.359897][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 468.369562][ T7619] netlink: 'syz.4.816': attribute type 7 has an invalid length. [ 468.377758][ T7619] netlink: 'syz.4.816': attribute type 8 has an invalid length. [ 468.385893][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 468.411367][ T7609] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 468.429354][ T29] audit: type=1800 audit(1726830726.879:23): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.815" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 468.489510][ T7609] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 468.503519][ T7609] EXT4-fs (loop2): This should not happen!! Data will be lost [ 468.503519][ T7609] [ 468.513837][ T7609] EXT4-fs (loop2): Total free blocks count 0 [ 468.520129][ T7609] EXT4-fs (loop2): Free/Dirty block details [ 468.526542][ T7609] EXT4-fs (loop2): free_blocks=66060288 [ 468.532524][ T7609] EXT4-fs (loop2): dirty_blocks=16 [ 468.537923][ T7609] EXT4-fs (loop2): Block reservation details [ 468.544350][ T7609] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 468.552068][ T5258] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 468.816474][ T5258] usb 1-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 468.826394][ T5258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.834975][ T5258] usb 1-1: Product: syz [ 468.841608][ T5258] usb 1-1: Manufacturer: syz [ 468.846736][ T5258] usb 1-1: SerialNumber: syz [ 468.965744][ T5258] usb 1-1: config 0 descriptor?? [ 469.072089][ T7626] loop1: detected capacity change from 0 to 512 [ 469.175586][ T7626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.189371][ T7626] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 469.415217][ T5258] usb 1-1: USB disconnect, device number 5 [ 469.847152][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.131371][ T7643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.148406][ T7641] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 471.395210][ T7661] loop0: detected capacity change from 0 to 16 [ 471.429185][ T7661] erofs: (device loop0): mounted with root inode @ nid 36. [ 471.492360][ T7661] syz.0.831: attempt to access beyond end of device [ 471.492360][ T7661] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 471.506560][ T7661] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 472.682370][ T7681] loop2: detected capacity change from 0 to 1024 [ 472.749092][ T7682] loop7: detected capacity change from 0 to 1036 [ 472.780066][ T7676] loop0: detected capacity change from 0 to 2048 [ 472.913139][ T7681] hfsplus: bad catalog entry type [ 472.985948][ T7676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.999317][ T7676] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.039939][ T7689] loop1: detected capacity change from 0 to 256 [ 473.215860][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 473.244393][ T2528] hfsplus: b-tree write err: -5, ino 4 [ 473.442740][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 473.501317][ T6366] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.740982][ T10] usb 5-1: config 0 has no interfaces? [ 473.747086][ T10] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 473.758773][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.296098][ T10] usb 5-1: config 0 descriptor?? [ 474.580389][ T5258] usb 5-1: USB disconnect, device number 7 [ 474.755855][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 475.083625][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.089523][ T10] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.090540][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.101255][ T10] usb 1-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.120335][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 475.264259][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 475.274103][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.282971][ T10] usb 1-1: Product: syz [ 475.287438][ T10] usb 1-1: Manufacturer: syz [ 475.292501][ T10] usb 1-1: SerialNumber: syz [ 475.649339][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11 [ 475.674304][ T4598] bcm5974 1-1:1.0: could not read from device [ 475.729386][ T4598] bcm5974 1-1:1.0: could not read from device [ 475.764968][ T7716] loop4: detected capacity change from 0 to 1764 [ 475.830080][ T4598] bcm5974 1-1:1.0: could not read from device [ 475.983291][ T4598] bcm5974 1-1:1.0: could not read from device [ 476.102923][ T7724] hsr0: entered promiscuous mode [ 476.172767][ T7724] hsr_slave_0: left promiscuous mode [ 476.253054][ T7724] hsr_slave_1: left promiscuous mode [ 476.358992][ T7724] hsr0 (unregistering): left promiscuous mode [ 476.415221][ T10] usb 1-1: USB disconnect, device number 6 [ 476.497362][ T7726] input: syz1 as /devices/virtual/input/input12 [ 477.895454][ T5261] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 478.112686][ T5261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.124658][ T5261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.135107][ T5261] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 478.144801][ T5261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.206286][ T5261] usb 2-1: config 0 descriptor?? [ 478.803666][ T5261] steelseries 0003:1038:12B6.0009: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 479.201704][ T5261] usb 2-1: USB disconnect, device number 9 [ 479.263359][ T7758] syzkaller1: entered promiscuous mode [ 479.269403][ T7758] syzkaller1: entered allmulticast mode [ 480.715858][ T7773] loop1: detected capacity change from 0 to 1024 [ 481.764093][ T7787] loop9: detected capacity change from 0 to 7 [ 481.800743][ T7787] Dev loop9: unable to read RDB block 7 [ 481.807039][ T7787] loop9: unable to read partition table [ 481.859194][ T7787] loop9: partition table beyond EOD, truncated [ 481.869165][ T7787] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.505598][ T5184] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 486.120888][ T7841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.277402][ T5190] Bluetooth: hci1: Malformed Event: 0x02 [ 486.404592][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'. [ 487.454873][ T5190] Bluetooth: hci1: command 0x0406 tx timeout [ 487.542912][ T5190] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 487.551754][ T5190] Bluetooth: hci5: Injecting HCI hardware error event [ 487.559731][ T5181] Bluetooth: hci5: hardware error 0x00 [ 487.652795][ T5232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 487.879585][ T5232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.891478][ T5232] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 487.902109][ T5232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 487.911827][ T5232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.971105][ T5261] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 487.987073][ T7862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 488.091773][ T5232] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.282967][ T5261] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 488.293282][ T5261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.360933][ T5261] usb 1-1: config 0 descriptor?? [ 488.787529][ T1593] usb 3-1: USB disconnect, device number 5 [ 489.018459][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.921'. [ 489.496444][ T5261] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 489.702585][ T5181] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 489.777483][ T5261] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 489.814326][ T5261] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 489.964412][ T7885] loop1: detected capacity change from 0 to 2048 [ 490.092577][ T10] usb 1-1: USB disconnect, device number 7 [ 490.296167][ T7885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.666857][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.735490][ T7900] netlink: 60 bytes leftover after parsing attributes in process `syz.4.930'. [ 491.196123][ T7901] loop3: detected capacity change from 0 to 2048 [ 491.244923][ T7901] EXT4-fs: Ignoring removed orlov option [ 491.384085][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.694956][ T7901] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 491.790587][ T7901] EXT4-fs (loop3): Remounting filesystem read-only [ 492.006896][ T5176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.442446][ T7936] loop2: detected capacity change from 0 to 164 [ 493.607702][ T7936] ALSA: mixer_oss: invalid OSS volume '0000007f,map=normal,map=acorn,o' [ 493.660042][ T7939] loop3: detected capacity change from 0 to 1024 [ 493.727847][ T7939] EXT4-fs: Ignoring removed orlov option [ 493.772815][ T7939] EXT4-fs (loop3): Test dummy encryption mode enabled [ 493.801871][ T7939] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 494.124304][ T7939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.843205][ T7952] loop2: detected capacity change from 0 to 1764 [ 494.843855][ T7939] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 494.889509][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 494.928026][ T7952] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 495.134320][ T5176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.289494][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.301889][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.312744][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.322548][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.366682][ T10] usb 5-1: config 0 descriptor?? [ 496.070863][ T10] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 496.095313][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input13 [ 496.779192][ T10] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 496.904416][ T10] usb 5-1: USB disconnect, device number 8 [ 497.352858][ T5514] udevd[5514]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 497.453193][ T5514] udevd[5514]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 498.230476][ T7991] loop1: detected capacity change from 0 to 256 [ 498.478046][ T7991] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 499.183433][ T5261] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 499.442881][ T5261] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.455574][ T5261] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 499.466413][ T5261] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.476036][ T5261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.527933][ T8000] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.594798][ T5261] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.490251][ T5261] usb 1-1: USB disconnect, device number 8 [ 500.670854][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.792456][ T8026] sctp: [Deprecated]: syz.4.973 (pid 8026) Use of int in max_burst socket option deprecated. [ 500.792456][ T8026] Use struct sctp_assoc_value instead [ 501.202942][ T8028] loop4: detected capacity change from 0 to 128 [ 501.561615][ T8035] geneve0: entered promiscuous mode [ 501.576701][ T29] audit: type=1800 audit(1726830760.109:24): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.979" name="file1" dev="loop4" ino=1048633 res=0 errno=0 [ 501.629991][ T8035] geneve0: left promiscuous mode [ 501.638816][ T4376] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 501.638976][ T4376] FAT-fs (loop4): Filesystem has been set read-only [ 501.639190][ T4376] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 501.645333][ T8028] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 501.645486][ T8028] FAT-fs (loop4): Filesystem has been set read-only [ 501.705348][ T29] audit: type=1800 audit(1726830760.149:25): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.979" name="file1" dev="loop4" ino=1048633 res=0 errno=0 [ 502.589839][ T8042] loop2: detected capacity change from 0 to 2048 [ 502.823103][ T8042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.868560][ T8061] loop2: detected capacity change from 0 to 256 [ 505.783710][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.422901][ T5261] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 506.647006][ T5261] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 506.658719][ T5261] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 506.669360][ T5261] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.679119][ T5261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.865125][ T8075] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.925341][ T5261] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.638873][ T8082] loop2: detected capacity change from 0 to 7 [ 507.676314][ T8082] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 507.682080][ T8082] loop2: partition table partially beyond EOD, truncated [ 507.690975][ T8082] loop2: p1 size 6333 extends beyond EOD, truncated [ 508.150760][ T5514] udevd[5514]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 510.466005][ T5261] usb 5-1: USB disconnect, device number 9 [ 510.561206][ T6079] udevd[6079]: setting mode of /dev/midi3 to 020660 failed: No such file or directory [ 510.632035][ T6079] udevd[6079]: setting owner of /dev/midi3 to uid=0, gid=29 failed: No such file or directory [ 510.881512][ T6079] udevd[6079]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.710258][ T8112] loop3: detected capacity change from 0 to 1024 [ 511.769303][ T8112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.965277][ T8112] Process accounting resumed [ 512.021384][ T8116] loop2: detected capacity change from 0 to 64 [ 513.178874][ T8126] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 513.190944][ T8126] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 513.707573][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.731642][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.835975][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.851998][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.878713][ T5184] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 513.889170][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 515.427594][ T8142] loop2: detected capacity change from 0 to 1024 [ 516.270025][ T5184] Bluetooth: hci3: command tx timeout [ 517.379920][ T3836] hfsplus: b-tree write err: -5, ino 4 [ 518.018884][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 518.346172][ T5184] Bluetooth: hci3: command tx timeout [ 520.426528][ T5184] Bluetooth: hci3: command tx timeout [ 521.003827][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 521.065718][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.075161][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.083471][ T8131] bridge_slave_0: entered allmulticast mode [ 521.093462][ T8131] bridge_slave_0: entered promiscuous mode [ 521.189574][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.197761][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.206016][ T8131] bridge_slave_1: entered allmulticast mode [ 521.215997][ T8131] bridge_slave_1: entered promiscuous mode [ 521.233354][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 521.257960][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.269790][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.280366][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 521.290437][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.417170][ T10] usb 5-1: config 0 descriptor?? [ 521.611244][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.761551][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.993522][ T10] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0934.000B/input/input15 [ 522.195787][ T10] uclogic 0003:28BD:0934.000B: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.4-1/input0 [ 522.298094][ T8131] team0: Port device team_slave_0 added [ 522.322960][ T10] usb 5-1: USB disconnect, device number 10 [ 522.387357][ T8131] team0: Port device team_slave_1 added [ 522.553527][ T5184] Bluetooth: hci3: command tx timeout [ 522.727113][ T8195] loop2: detected capacity change from 0 to 256 [ 523.008122][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.015768][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.043631][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.224442][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.231832][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.258768][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.862507][ T8205] loop2: detected capacity change from 0 to 512 [ 525.367630][ T8131] hsr_slave_0: entered promiscuous mode [ 525.482610][ T8131] hsr_slave_1: entered promiscuous mode [ 526.326282][ T8205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.339864][ T8205] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.864283][ T29] audit: type=1326 audit(1726830785.399:26): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.0.1050" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x0 [ 527.098311][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.289690][ T8131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.630777][ T8131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.098919][ T8131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.724676][ T8131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.057168][ T8240] loop4: detected capacity change from 0 to 256 [ 531.279611][ T8240] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 531.417529][ T8131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.605170][ T8131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.630500][ T8131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.656329][ T8131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 532.142528][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 532.421489][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 532.431557][ T10] usb 1-1: config 1 has no interface number 0 [ 532.438205][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.449669][ T10] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 532.459169][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.984567][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.994578][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.003087][ T10] usb 1-1: Product: syz [ 533.007634][ T10] usb 1-1: Manufacturer: syz [ 533.012736][ T10] usb 1-1: SerialNumber: syz [ 534.285051][ T8255] loop4: detected capacity change from 0 to 256 [ 534.341963][ T8255] exfat: Deprecated parameter 'namecase' [ 534.350610][ T8255] exfat: Deprecated parameter 'utf8' [ 534.397891][ T10] cdc_ncm 1-1:1.1: bind() failure [ 534.678728][ T10] usb 1-1: USB disconnect, device number 9 [ 534.781861][ T8255] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 534.943235][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.061667][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.198346][ T8131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 535.209168][ T8131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.319318][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.327273][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.344896][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.352891][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.218390][ T8258] loop3: detected capacity change from 0 to 512 [ 536.292465][ T8258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 536.492915][ T8258] EXT4-fs (loop3): 1 truncate cleaned up [ 536.500865][ T8258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.539303][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.546327][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.566517][ T8268] loop0: detected capacity change from 0 to 512 [ 537.708592][ T8268] EXT4-fs: Ignoring removed mblk_io_submit option [ 537.716437][ T8268] ext4: Unknown parameter 'noacl' [ 537.736689][ T5176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.063253][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'. [ 539.230760][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.392974][ T8131] veth0_vlan: entered promiscuous mode [ 539.431026][ T8131] veth1_vlan: entered promiscuous mode [ 539.537727][ T8131] veth0_macvtap: entered promiscuous mode [ 539.562615][ T8131] veth1_macvtap: entered promiscuous mode [ 539.622998][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.634089][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.644288][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.655134][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.666154][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.677184][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.688166][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.699726][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.709997][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.720981][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.737170][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.758315][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.769224][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.779705][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.791753][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.802952][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.813955][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.824589][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.835718][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.846094][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.857030][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.873773][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.896786][ T8131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.906084][ T8131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.915745][ T8131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.925074][ T8131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.520517][ T8297] loop4: detected capacity change from 0 to 64 [ 542.791061][ T8299] loop3: detected capacity change from 0 to 22 [ 542.975846][ T8299] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 543.084728][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.093592][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.103542][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.112971][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.121517][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.130983][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.139492][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.147726][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.155851][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.164405][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.173077][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.181246][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.189851][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.198072][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.206182][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.214342][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.222685][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.230575][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.239281][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.247348][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.255557][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.263761][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.274534][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.282875][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.291017][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.300203][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.310478][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.319252][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.327486][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.335636][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.343700][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 543.351510][ T1593] hid-generic 0000:04AD:0000.000C: unknown main item tag 0x0 [ 544.182474][ T5261] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 544.658096][ T5261] usb 3-1: config 0 has no interfaces? [ 544.665051][ T5261] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 544.674895][ T5261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.924070][ T5261] usb 3-1: config 0 descriptor?? [ 545.368587][ T44] usb 3-1: USB disconnect, device number 6 [ 545.948184][ T1593] hid-generic 0000:04AD:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 546.484188][ T8318] team0: entered promiscuous mode [ 546.489748][ T8318] team_slave_0: entered promiscuous mode [ 546.497577][ T8318] team_slave_1: entered promiscuous mode [ 546.714510][ T8316] team0: left promiscuous mode [ 546.719940][ T8316] team_slave_0: left promiscuous mode [ 546.726721][ T8316] team_slave_1: left promiscuous mode [ 547.195454][ T8323] hub 2-0:1.0: USB hub found [ 547.263566][ T8323] hub 2-0:1.0: 1 port detected [ 549.238705][ T8336] loop2: detected capacity change from 0 to 512 [ 549.325624][ T8336] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.422981][ T8336] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 549.896201][ T8344] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 549.960411][ T1593] IPVS: starting estimator thread 0... [ 550.071914][ T8336] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1093: corrupted in-inode xattr: e_value out of bounds [ 550.152635][ T8345] IPVS: using max 192 ests per chain, 9600 per kthread [ 550.213268][ T8336] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1093: couldn't read orphan inode 15 (err -117) [ 550.274467][ T8336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.994774][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.241576][ T8383] syz.2.1108[8383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.242733][ T8383] syz.2.1108[8383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.470975][ T2528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.479393][ T2528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.621108][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.629687][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.714467][ T4613] udevd[4613]: worker [5514] terminated by signal 33 (Unknown signal 33) [ 555.902635][ T4613] udevd[4613]: worker [5514] failed while handling '/devices/virtual/block/loop2' [ 555.926698][ T4613] udevd[4613]: worker [5359] terminated by signal 33 (Unknown signal 33) [ 555.952527][ T4613] udevd[4613]: worker [5359] failed while handling '/devices/virtual/block/loop0' [ 556.018078][ T4613] udevd[4613]: worker [6079] terminated by signal 33 (Unknown signal 33) [ 556.061741][ T8393] loop4: detected capacity change from 0 to 64 [ 556.062769][ T4613] udevd[4613]: worker [6079] failed while handling '/devices/virtual/block/loop4' [ 556.514990][ T8395] virtio-fs: tag <(null)> not found [ 556.680334][ T8401] loop2: detected capacity change from 0 to 512 [ 556.890545][ T8400] loop3: detected capacity change from 0 to 1024 [ 556.905183][ T8400] EXT4-fs: Ignoring removed orlov option [ 556.911879][ T8400] EXT4-fs: Ignoring removed i_version option [ 556.926184][ T8400] EXT4-fs (loop3): Test dummy encryption mode enabled [ 556.950529][ T8401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.964189][ T8401] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.970736][ T8400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.976046][ T1593] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 557.352529][ T1593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.390497][ T1593] usb 1-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 557.400252][ T1593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.411081][ T1593] usb 1-1: Product: syz [ 557.416397][ T1593] usb 1-1: Manufacturer: syz [ 557.421406][ T1593] usb 1-1: SerialNumber: syz [ 557.446741][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.498552][ T1593] usb 1-1: config 0 descriptor?? [ 557.532758][ T1593] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 557.553092][ T5176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.574512][ T1593] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 557.581210][ T1593] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 557.731109][ T1593] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 557.738051][ T1593] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 557.803814][ T1593] usb 1-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 557.943304][ T1593] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 558.074942][ T1593] usb 1-1: USB disconnect, device number 10 [ 558.159374][ T8411] Bluetooth: MGMT ver 1.23 [ 558.164572][ T8411] Bluetooth: hci3: unsupported parameter 13618 [ 558.171235][ T8411] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 558.255484][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'. [ 558.361272][ T8417] loop1: detected capacity change from 0 to 128 [ 559.060269][ T8425] loop4: detected capacity change from 0 to 64 [ 559.188393][ T8419] loop2: detected capacity change from 0 to 2048 [ 559.220426][ T8419] EXT4-fs: Ignoring removed mblk_io_submit option [ 559.343886][ T8419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.460250][ T3836] kworker/u8:18: attempt to access beyond end of device [ 559.460250][ T3836] loop1: rw=1, sector=145, nr_sectors = 72 limit=128 [ 559.524519][ T3836] kworker/u8:18: attempt to access beyond end of device [ 559.524519][ T3836] loop1: rw=1, sector=225, nr_sectors = 392 limit=128 [ 559.555443][ T8419] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1120: bg 0: block 234: padding at end of block bitmap is not set [ 559.631890][ T8419] EXT4-fs (loop2): Remounting filesystem read-only [ 559.804992][ T8430] input: syz0 as /devices/virtual/input/input17 [ 560.047743][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.196251][ T8438] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 560.207963][ T8438] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 561.225148][ T8447] tipc: Started in network mode [ 561.230476][ T8447] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 561.239464][ T8447] tipc: Enabled bearer , priority 0 [ 561.252587][ T5258] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 561.319431][ T8445] tipc: Cannot configure node identity twice [ 561.672644][ T5258] usb 3-1: Using ep0 maxpacket: 16 [ 561.686050][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.697624][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.708458][ T5258] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 561.721856][ T5258] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 561.731559][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.764248][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 561.778588][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 561.821970][ T5258] usb 3-1: config 0 descriptor?? [ 562.290050][ T5258] HID 045e:07da: Invalid code 65791 type 1 [ 562.336499][ T5258] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input18 [ 562.433940][ T1593] tipc: Node number set to 11578026 [ 562.519328][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'. [ 562.732752][ T5258] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 562.792504][ T5258] usb 3-1: USB disconnect, device number 7 [ 563.776414][ T1593] kernel write not supported for file /vcsa1 (pid: 1593 comm: kworker/1:2) [ 564.932448][ T8480] input: syz1 as /devices/virtual/input/input19 [ 565.512492][ T1593] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 565.931361][ T1593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.945181][ T1593] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 565.955184][ T1593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.989585][ T1593] usb 2-1: config 0 descriptor?? [ 566.524724][ T5184] Bluetooth: hci2: unexpected event for opcode 0x201c [ 566.669039][ T8494] loop0: detected capacity change from 0 to 256 [ 566.774234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 566.785671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 566.804439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 566.910482][ T8494] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 567.695001][ T1593] usbhid 2-1:0.0: can't add hid device: -71 [ 567.700879][ T8500] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 567.703787][ T1593] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 567.721750][ T8500] lo: entered allmulticast mode [ 567.727303][ T1593] usb 2-1: USB disconnect, device number 10 [ 568.339792][ T8504] loop1: detected capacity change from 0 to 64 [ 568.372941][ T8504] Trying to free block not in datazone [ 568.378727][ T8504] Trying to free block not in datazone [ 568.384768][ T8504] Trying to free block not in datazone [ 568.390471][ T8504] Trying to free block not in datazone [ 568.396507][ T8504] minix_free_block (loop1:6): bit already cleared [ 568.403619][ T8504] Trying to free block not in datazone [ 568.409395][ T8504] Trying to free block not in datazone [ 568.933004][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 568.940876][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 568.949284][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 568.957400][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 568.965906][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 568.973932][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 568.984731][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 568.994371][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.002378][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.010191][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.018231][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.026768][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.034720][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.042926][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.050779][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.059177][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.067255][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.075169][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.086123][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.094862][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.103063][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.110865][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.118920][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.126963][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.135045][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.143142][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.150942][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.159013][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.167088][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.175106][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.185799][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.194778][ T1593] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 569.242899][ T1593] hid-generic 0000:04AD:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 569.475888][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 569.658452][ T44] usb 1-1: config 0 has no interfaces? [ 569.664823][ T44] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 569.674444][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.805601][ T44] usb 1-1: config 0 descriptor?? [ 570.206035][ T44] usb 1-1: USB disconnect, device number 11 [ 570.349191][ T8520] loop1: detected capacity change from 0 to 512 [ 570.414346][ T8522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1166'. [ 570.671019][ T5184] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 570.679917][ T5184] Bluetooth: hci2: Injecting HCI hardware error event [ 570.687752][ T5184] Bluetooth: hci2: hardware error 0x00 [ 570.736960][ T8520] EXT4-fs (loop1): failed to initialize system zone (-117) [ 570.907777][ T8520] EXT4-fs (loop1): mount failed [ 571.380540][ T8520] loop1: detected capacity change from 0 to 128 [ 571.703908][ T5190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 571.731902][ T5190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 571.782942][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 571.935583][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 571.969223][ T8520] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 572.013177][ T8520] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 572.015751][ T52] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 572.045567][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.075343][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.610754][ T8540] syz_tun: entered promiscuous mode [ 572.617591][ T8540] macvtap1: entered promiscuous mode [ 572.624524][ T8540] macvtap1: entered allmulticast mode [ 572.630357][ T8540] syz_tun: entered allmulticast mode [ 572.842970][ T5184] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 572.859493][ T8131] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.882066][ T8540] syz_tun: left allmulticast mode [ 572.889072][ T8540] syz_tun: left promiscuous mode [ 573.547411][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 573.796043][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 573.833893][ T44] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 573.842894][ T44] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.851500][ T44] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.860943][ T44] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.869902][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 573.879636][ T44] usb 1-1: config 0 has no interface number 0 [ 573.886277][ T44] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 573.901623][ T44] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 573.912789][ T44] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.923719][ T44] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.937431][ T44] usb 1-1: config 0 interface 125 has no altsetting 0 [ 573.944855][ T44] usb 1-1: config 0 interface 125 has no altsetting 2 [ 574.086712][ T8550] loop4: detected capacity change from 0 to 256 [ 574.176159][ T44] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 574.185984][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.194697][ T44] usb 1-1: Product: syz [ 574.201471][ T44] usb 1-1: Manufacturer: syz [ 574.207118][ T44] usb 1-1: SerialNumber: syz [ 574.338185][ T44] usb 1-1: config 0 descriptor?? [ 574.372550][ T44] usb 1-1: selecting invalid altsetting 2 [ 574.395961][ T8550] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 574.432574][ T5184] Bluetooth: hci6: command tx timeout [ 574.978110][ T8528] chnl_net:caif_netlink_parms(): no params data found [ 575.604568][ T44] usb 1-1: USB disconnect, device number 12 [ 575.662611][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 575.942999][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 576.094653][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 576.104947][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.113617][ T10] usb 3-1: Product: syz [ 576.118081][ T10] usb 3-1: Manufacturer: syz [ 576.123252][ T10] usb 3-1: SerialNumber: syz [ 576.138302][ T10] usb 3-1: config 0 descriptor?? [ 576.162969][ T10] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 576.171046][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 576.518145][ T5184] Bluetooth: hci6: command tx timeout [ 576.688697][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.700435][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.713362][ T10] radio-raremono 3-1:0.0: this is not Thanko's Raremono. [ 576.721462][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 576.843775][ T10] usb 3-1: USB disconnect, device number 8 [ 577.503742][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.511648][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.519964][ T8528] bridge_slave_0: entered allmulticast mode [ 577.530457][ T8528] bridge_slave_0: entered promiscuous mode [ 577.756886][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.765094][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.773484][ T8528] bridge_slave_1: entered allmulticast mode [ 577.787790][ T8528] bridge_slave_1: entered promiscuous mode [ 578.229251][ T8528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.341078][ T8528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.582806][ T5184] Bluetooth: hci6: command tx timeout [ 578.977972][ T8579] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1187'. [ 578.989373][ T8579] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1187'. [ 579.065027][ T8528] team0: Port device team_slave_0 added [ 579.124803][ T8528] team0: Port device team_slave_1 added [ 579.576073][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.583618][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.610367][ T8528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.837307][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.845620][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.872568][ T8528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.408712][ T8528] hsr_slave_0: entered promiscuous mode [ 580.504522][ T8528] hsr_slave_1: entered promiscuous mode [ 580.612956][ T8528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.620835][ T8528] Cannot create hsr debugfs directory [ 580.664011][ T5184] Bluetooth: hci6: command tx timeout [ 580.915737][ T8595] loop1: detected capacity change from 0 to 8 [ 581.094740][ T8595] SQUASHFS error: zlib decompression failed, data probably corrupt [ 581.104298][ T8595] SQUASHFS error: Failed to read block 0x9b: -5 [ 581.114470][ T8595] SQUASHFS error: Unable to read metadata cache entry [99] [ 581.122042][ T8595] SQUASHFS error: Unable to read inode 0x127 [ 581.618364][ T8601] loop2: detected capacity change from 0 to 2048 [ 581.887047][ T8601] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 581.895264][ T8601] UDF-fs: Scanning with blocksize 512 failed [ 582.098868][ T8601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.414115][ T8528] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.597555][ T8610] loop1: detected capacity change from 0 to 64 [ 582.932772][ T8528] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.190894][ T8528] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.519789][ T8528] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.146411][ T8626] loop2: detected capacity change from 0 to 128 [ 584.228438][ T8528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 584.342833][ T8528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 584.369023][ T8528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 584.414074][ T8528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 584.547387][ T8624] loop4: detected capacity change from 0 to 1024 [ 584.557516][ T8624] EXT4-fs: Ignoring removed mblk_io_submit option [ 585.073322][ T8624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.388567][ T8624] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 585.738578][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.828497][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.913653][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.921617][ T2476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.939224][ T2476] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.947428][ T2476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.173950][ T5189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.771332][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.804198][ T8660] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 587.844120][ T8661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.931985][ T8658] bridge0: port 3(macvlan2) entered blocking state [ 587.939618][ T8658] bridge0: port 3(macvlan2) entered disabled state [ 587.947493][ T8658] macvlan2: entered allmulticast mode [ 587.963810][ T8658] macvlan2: entered promiscuous mode [ 588.355343][ T8528] veth0_vlan: entered promiscuous mode [ 588.419968][ T8528] veth1_vlan: entered promiscuous mode [ 588.837941][ T8528] veth0_macvtap: entered promiscuous mode [ 588.958756][ T8528] veth1_macvtap: entered promiscuous mode [ 589.326251][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.337275][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.347799][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.363092][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.373449][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.384652][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.394948][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.405850][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.416233][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.427127][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.437409][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.448338][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.468375][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.691085][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.702067][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.713793][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.726455][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.736637][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.747504][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.757868][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.769694][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.779985][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.790966][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.804341][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.818198][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.834704][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.048276][ T8528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.057738][ T8528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.067102][ T8528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.079476][ T8528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.973856][ T8683] sctp: [Deprecated]: syz.0.1222 (pid 8683) Use of int in max_burst socket option deprecated. [ 590.973856][ T8683] Use struct sctp_assoc_value instead [ 591.780898][ T8692] syz.4.1226 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 593.468017][ T8709] Process accounting resumed [ 595.336312][ T8732] netlink: 'syz.0.1239': attribute type 3 has an invalid length. [ 595.344678][ T8732] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 595.930513][ T8738] loop1: detected capacity change from 0 to 128 [ 595.950822][ T8738] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 598.005507][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.013517][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.945295][ T3836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.954521][ T3836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.168037][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.176348][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.777627][ T8773] loop1: detected capacity change from 0 to 1024 [ 599.875137][ T8773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.475603][ T8131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.744914][ T8804] kernel read not supported for file /!selinuxselinux (pid: 8804 comm: syz.2.1263) [ 602.815235][ T29] audit: type=1800 audit(1726830861.289:27): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1263" name="!selinuxselinux" dev="mqueue" ino=19844 res=0 errno=0 [ 603.097085][ T8810] loop3: detected capacity change from 0 to 64 [ 604.052447][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 604.341633][ T8820] loop2: detected capacity change from 0 to 1024 [ 604.470621][ T8821] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1272'. [ 604.470991][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 604.574271][ T8528] hfs: node 4:3 still has 1 user(s)! [ 604.623350][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.635109][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.645471][ T10] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 604.655369][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.751556][ T8823] hfsplus: request for non-existent node 134217728 in B*Tree [ 604.760032][ T8823] hfsplus: request for non-existent node 134217728 in B*Tree [ 604.765770][ T10] usb 5-1: config 0 descriptor?? [ 605.321104][ T10] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 605.332741][ T10] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 605.339893][ T10] elo 0003:04E7:0009.000F: item fetching failed at offset 2/7 [ 605.437342][ T10] elo 0003:04E7:0009.000F: parse failed [ 605.443963][ T10] elo 0003:04E7:0009.000F: probe with driver elo failed with error -22 [ 605.703526][ T10] usb 5-1: USB disconnect, device number 11 [ 607.604621][ T8851] loop1: detected capacity change from 0 to 256 [ 607.617485][ T8851] vfat: Unknown parameter 'uni_' [ 609.267659][ C1] sd 0:0:1:0: [sda] tag#5772 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 609.268026][ C1] sd 0:0:1:0: [sda] tag#5772 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 610.503428][ T8880] delete_channel: no stack [ 611.176523][ T8889] loop4: detected capacity change from 0 to 512 [ 611.303885][ T8889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 611.521384][ T8889] EXT4-fs (loop4): 1 orphan inode deleted [ 611.527717][ T8889] EXT4-fs (loop4): 1 truncate cleaned up [ 611.538176][ T8889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.789669][ T8895] loop0: detected capacity change from 0 to 512 [ 611.947996][ T8895] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1303: casefold flag without casefold feature [ 612.068842][ T8895] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1303: couldn't read orphan inode 15 (err -117) [ 612.156217][ T8895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.225413][ T5189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.561840][ T6366] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.792935][ T8902] loop1: detected capacity change from 0 to 2048 [ 613.450382][ T8902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.215023][ T8928] loop0: detected capacity change from 0 to 256 [ 616.382884][ T8941] loop2: detected capacity change from 0 to 2048 [ 616.713012][ T8941] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 616.775120][ T8131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.853235][ T8941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.724185][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 617.818142][ T8955] loop2: detected capacity change from 0 to 64 [ 617.918210][ T8956] loop1: detected capacity change from 0 to 256 [ 617.931765][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 617.946245][ T8956] exfat: Deprecated parameter 'namecase' [ 617.964867][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.976813][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.987221][ T44] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 617.996912][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.115529][ T44] usb 1-1: config 0 descriptor?? [ 618.173172][ T8956] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 618.783009][ T44] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 618.856128][ T8962] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1329'. [ 618.865989][ T8962] netlink: 'syz.2.1329': attribute type 2 has an invalid length. [ 619.067989][ T44] ft260 0003:0403:6030.0010: chip code: 5e81 abf2 [ 619.475044][ T8966] loop2: detected capacity change from 0 to 256 [ 619.548961][ T5261] usb 1-1: USB disconnect, device number 13 [ 619.580895][ T8966] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 619.843881][ T8966] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 619.853596][ T8966] exFAT-fs (loop2): Filesystem has been set read-only [ 619.914816][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1331'. [ 621.138459][ T8979] input: syz1 as /devices/virtual/input/input20 [ 621.776835][ T8987] unknown channel width for channel at 909000KHz? [ 623.220867][ T8997] netlink: 'syz.3.1344': attribute type 4 has an invalid length. [ 624.027821][ T9013] loop0: detected capacity change from 0 to 512 [ 624.037117][ T9013] EXT4-fs: Ignoring removed orlov option [ 624.043568][ T9013] EXT4-fs: Ignoring removed i_version option [ 624.049891][ T9013] EXT4-fs: Ignoring removed nomblk_io_submit option [ 624.217952][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 624.237727][ T9013] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 624.246356][ T9013] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 624.295496][ T9013] EXT4-fs (loop0): orphan cleanup on readonly fs [ 624.302944][ T9013] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 624.313485][ T9013] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 624.328659][ T9013] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 624.358050][ T9013] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1350: bg 0: block 40: padding at end of block bitmap is not set [ 624.382672][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 624.395869][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.407524][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.417968][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 624.427600][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.455317][ T10] usb 5-1: config 0 descriptor?? [ 624.506035][ T9013] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 624.507020][ T10] hub 5-1:0.0: USB hub found [ 624.550529][ T9013] EXT4-fs (loop0): 1 truncate cleaned up [ 624.558816][ T9013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.797757][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 624.877963][ T10] hub 5-1:0.0: 1 port detected [ 625.049264][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.061435][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.071991][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.085810][ T44] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 625.097636][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.164401][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 625.171315][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 625.195367][ T9026] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1350: bad symlink. [ 625.201830][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 625.213679][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 625.264226][ T10] usb 5-1: USB disconnect, device number 12 [ 625.516028][ T44] usb 3-1: config 0 descriptor?? [ 626.175440][ T9031] loop3: detected capacity change from 0 to 1024 [ 626.209548][ T44] elecom 0003:056E:00FD.0011: item fetching failed at offset 10/11 [ 626.329942][ T44] elecom 0003:056E:00FD.0011: probe with driver elecom failed with error -22 [ 626.446115][ T29] audit: type=1800 audit(1726830884.959:28): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1357" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 626.542995][ T44] usb 3-1: USB disconnect, device number 9 [ 626.994326][ T3288] hfsplus: b-tree write err: -5, ino 4 [ 627.197987][ T9039] loop4: detected capacity change from 0 to 128 [ 627.426058][ T9039] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 627.610995][ T9039] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 627.978201][ T9045] loop1: detected capacity change from 0 to 1024 [ 627.986981][ T29] audit: type=1804 audit(1726830886.469:29): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1361" name="/newroot/314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=12 res=1 errno=0 [ 628.365966][ T9045] hfsplus: creator requires a 4 character value [ 628.375412][ T9045] hfsplus: unable to parse mount options [ 628.664478][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 628.679249][ T5189] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 628.842454][ T8760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.929591][ T2476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.147419][ T2476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.398755][ T2476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.959782][ T2476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.701419][ T2476] macvlan2: left allmulticast mode [ 630.707286][ T2476] macvlan2: left promiscuous mode [ 630.713638][ T2476] bridge0: port 3(macvlan2) entered disabled state [ 630.973499][ T2476] bridge_slave_1: left allmulticast mode [ 630.979498][ T2476] bridge_slave_1: left promiscuous mode [ 630.987648][ T2476] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.173580][ T2476] bridge_slave_0: left allmulticast mode [ 631.179543][ T2476] bridge_slave_0: left promiscuous mode [ 631.186947][ T2476] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.858883][ T9067] loop4: detected capacity change from 0 to 64 [ 633.054192][ T2476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.225399][ T9067] hfs: keylen 94 too large [ 633.441736][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.456828][ T2476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.467689][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.484604][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.514817][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.639285][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 633.643252][ T2476] bond0 (unregistering): Released all slaves [ 633.649385][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.147737][ T9080] loop1: detected capacity change from 0 to 512 [ 634.278305][ T9080] EXT4-fs: Ignoring removed nobh option [ 634.300648][ T9080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 634.360436][ T9080] EXT4-fs (loop1): 1 truncate cleaned up [ 634.368647][ T9080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.621518][ T9067] hfs: keylen 94 too large [ 634.626993][ T9067] hfs: request for non-existent node 1818584064 in B*Tree [ 634.634686][ T9067] hfs: request for non-existent node 1818584064 in B*Tree [ 634.758053][ T29] audit: type=1804 audit(1726830893.269:30): pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1373" name="/newroot/43/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 635.054664][ T2476] hsr_slave_0: left promiscuous mode [ 635.135947][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 635.157733][ T2476] hsr_slave_1: left promiscuous mode [ 635.187538][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.197543][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.257810][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.266056][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.340458][ T8131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.494209][ T2476] veth1_macvtap: left promiscuous mode [ 635.500333][ T2476] veth0_macvtap: left promiscuous mode [ 635.506582][ T2476] veth1_vlan: left promiscuous mode [ 635.512408][ T2476] veth0_vlan: left promiscuous mode [ 635.571584][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 635.581472][ T10] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 635.590544][ T10] usb 4-1: Manufacturer: syz [ 635.612883][ T10] usb 4-1: config 0 descriptor?? [ 635.782923][ T52] Bluetooth: hci1: command tx timeout [ 636.155236][ T10] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 637.129476][ T2476] team0 (unregistering): Port device team_slave_1 removed [ 637.305549][ T2476] team0 (unregistering): Port device team_slave_0 removed [ 637.441542][ T5258] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 637.862948][ T52] Bluetooth: hci1: command tx timeout [ 637.873488][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 637.940172][ T5258] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 637.952319][ T5258] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 637.962773][ T5258] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 637.972640][ T5258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.983775][ T10] usb 4-1: USB disconnect, device number 10 [ 638.115064][ T9103] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 638.217474][ T5258] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.141008][ T44] usb 5-1: USB disconnect, device number 13 [ 639.463525][ T9074] chnl_net:caif_netlink_parms(): no params data found [ 639.519077][ T2476] IPVS: stop unused estimator thread 0... [ 639.530915][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 639.757316][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 639.770859][ T10] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 639.779690][ T10] usb 4-1: config 0 has no interface number 0 [ 639.943330][ T52] Bluetooth: hci1: command tx timeout [ 640.235033][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 640.244978][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.255859][ T10] usb 4-1: Product: syz [ 640.260331][ T10] usb 4-1: Manufacturer: syz [ 640.266055][ T10] usb 4-1: SerialNumber: syz [ 640.283794][ T10] usb 4-1: config 0 descriptor?? [ 640.316553][ T10] radio-usb-si4713 4-1:0.128: Si4713 development board discovered: (10C4:8244) [ 640.984016][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 641.685900][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.697035][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.705212][ T9074] bridge_slave_0: entered allmulticast mode [ 641.715415][ T9074] bridge_slave_0: entered promiscuous mode [ 641.806258][ T10] radio-usb-si4713 4-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 641.817349][ T10] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 641.831014][ T10] usb 4-1: USB disconnect, device number 11 [ 641.877744][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.893178][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.903041][ T9074] bridge_slave_1: entered allmulticast mode [ 641.916923][ T9074] bridge_slave_1: entered promiscuous mode [ 641.935384][ T9136] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 642.024980][ T5184] Bluetooth: hci1: command tx timeout [ 642.129040][ T9074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.152047][ T9074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.408120][ T9074] team0: Port device team_slave_0 added [ 642.643669][ T9074] team0: Port device team_slave_1 added [ 643.040449][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.048271][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.075199][ T9074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.198112][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.205696][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.236190][ T9074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.355035][ T9146] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 643.942423][ T5184] Bluetooth: hci0: command tx timeout [ 644.227250][ T9074] hsr_slave_0: entered promiscuous mode [ 644.260196][ T9157] loop4: detected capacity change from 0 to 256 [ 644.405673][ T9074] hsr_slave_1: entered promiscuous mode [ 644.479425][ T9074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.489843][ T9074] Cannot create hsr debugfs directory [ 644.585605][ T9157] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 646.736322][ T9177] loop2: detected capacity change from 0 to 1024 [ 647.178519][ T9177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.288767][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.461470][ T9074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 648.670639][ T9074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 648.844007][ T9074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 648.981851][ T9074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.122794][ T1593] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 649.540365][ T1593] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 649.551251][ T1593] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 649.560055][ T1593] usb 4-1: config 0 has no interface number 0 [ 649.568853][ T1593] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 649.580179][ T1593] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 649.589864][ T1593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.603897][ T1593] usb 4-1: config 0 descriptor?? [ 649.635637][ T9197] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 650.283584][ T9210] loop1: detected capacity change from 0 to 256 [ 650.698049][ T1593] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input21 [ 651.263232][ T5258] usb 4-1: USB disconnect, device number 12 [ 651.263276][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 651.440377][ T5184] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 651.440529][ T5184] Bluetooth: hci4: Unknown advertising packet type: 0x20 [ 651.448118][ T5184] Bluetooth: hci4: Malformed LE Event: 0x0d [ 651.856267][ T9074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.035187][ T9074] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.087003][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.094869][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.134823][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.142682][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.472804][ T9074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 652.483673][ T9074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.074274][ T44] kernel write not supported for file /vcsa1 (pid: 44 comm: kworker/1:1) [ 653.314711][ T9227] loop3: detected capacity change from 0 to 128 [ 653.825620][ T9227] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 653.881291][ T9227] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 654.956290][ T9074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.049398][ T8528] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 655.471248][ T9074] veth0_vlan: entered promiscuous mode [ 655.519194][ T9074] veth1_vlan: entered promiscuous mode [ 655.746966][ T9074] veth0_macvtap: entered promiscuous mode [ 655.775527][ T9074] veth1_macvtap: entered promiscuous mode [ 655.907636][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.921580][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.933804][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.945931][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.957447][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.968474][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.978927][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.989909][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.000215][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.011182][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.024430][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.036087][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.052031][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.294156][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.305075][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.315634][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.329419][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.340322][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.351208][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.361554][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.372955][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.383395][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.394626][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.405453][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.416298][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.437874][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.693569][ T9074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.703579][ T9074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.712947][ T9074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.722483][ T9074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.517147][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 657.582384][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 657.864079][ T9267] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1425'. [ 657.873794][ T9267] netlink: 'syz.4.1425': attribute type 2 has an invalid length. [ 657.881975][ T9267] netlink: 'syz.4.1425': attribute type 2 has an invalid length. [ 657.890908][ T9267] netlink: 'syz.4.1425': attribute type 4 has an invalid length. [ 657.899317][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 659.406809][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.414014][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.729641][ T9273] loop1: detected capacity change from 0 to 2048 [ 660.062734][ T9273] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 661.066229][ T9306] loop2: detected capacity change from 0 to 128 [ 663.384577][ T9327] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1436'. [ 664.044908][ T9338] loop3: detected capacity change from 0 to 512 [ 664.260409][ T3836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.268916][ T3836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.415757][ T9338] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 664.679107][ T9338] System zones: 0-2, 18-18, 34-35 [ 664.726066][ T3836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.734581][ T3836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.881059][ T9338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.894799][ T9338] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.090332][ T9337] loop1: detected capacity change from 0 to 2048 [ 665.102763][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 665.419980][ T44] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 665.432340][ T44] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.448962][ T44] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 665.459683][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.507444][ T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 665.516252][ T44] usb 5-1: invalid MIDI out EP 0 [ 665.658713][ T44] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 666.187261][ T9337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.201704][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 666.406753][ T44] usb 5-1: USB disconnect, device number 14 [ 666.500278][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.702775][ T9359] loop0: detected capacity change from 0 to 64 [ 666.930584][ T8528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.299890][ T9375] loop2: detected capacity change from 0 to 512 [ 668.347804][ T9375] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 668.564798][ T9375] EXT4-fs (loop2): 1 truncate cleaned up [ 668.573202][ T9375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.765325][ T5177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.334466][ T9410] ===================================================== [ 671.341959][ T9410] BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 671.350429][ T9410] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 671.356520][ T9410] nf_send_reset6+0xd84/0x15b0 [ 671.361607][ T9410] nft_reject_inet_eval+0x3c1/0x880 [ 671.367268][ T9410] nft_do_chain+0x426/0x2290 [ 671.372207][ T9410] nft_do_chain_inet+0x41a/0x4f0 [ 671.377457][ T9410] nf_hook_slow+0xf4/0x400 [ 671.382471][ T9410] ipv6_rcv+0x29b/0x390 [ 671.386882][ T9410] __netif_receive_skb+0x1da/0xa00 [ 671.392387][ T9410] netif_receive_skb+0x58/0x660 [ 671.397459][ T9410] tun_rx_batched+0x3ee/0x980 [ 671.402624][ T9410] tun_get_user+0x5783/0x6c60 [ 671.407817][ T9410] tun_chr_write_iter+0x3ac/0x5d0 [ 671.413229][ T9410] vfs_write+0xb28/0x1540 [ 671.417913][ T9410] ksys_write+0x20f/0x4c0 [ 671.422669][ T9410] __ia32_sys_write+0x91/0xe0 [ 671.427620][ T9410] ia32_sys_call+0x2e34/0x40d0 [ 671.432859][ T9410] __do_fast_syscall_32+0xb0/0x110 [ 671.438217][ T9410] do_fast_syscall_32+0x38/0x80 [ 671.443456][ T9410] do_SYSENTER_32+0x1f/0x30 [ 671.448187][ T9410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.455090][ T9410] [ 671.457546][ T9410] Uninit was stored to memory at: [ 671.462991][ T9410] nf_reject_ip6_tcphdr_put+0x60c/0x6c0 [ 671.468777][ T9410] nf_send_reset6+0xd84/0x15b0 [ 671.473934][ T9410] nft_reject_inet_eval+0x3c1/0x880 [ 671.479366][ T9410] nft_do_chain+0x426/0x2290 [ 671.484328][ T9410] nft_do_chain_inet+0x41a/0x4f0 [ 671.489535][ T9410] nf_hook_slow+0xf4/0x400 [ 671.494385][ T9410] ipv6_rcv+0x29b/0x390 [ 671.498800][ T9410] __netif_receive_skb+0x1da/0xa00 [ 671.504293][ T9410] netif_receive_skb+0x58/0x660 [ 671.509387][ T9410] tun_rx_batched+0x3ee/0x980 [ 671.514477][ T9410] tun_get_user+0x5783/0x6c60 [ 671.519398][ T9410] tun_chr_write_iter+0x3ac/0x5d0 [ 671.524815][ T9410] vfs_write+0xb28/0x1540 [ 671.529394][ T9410] ksys_write+0x20f/0x4c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 671.534127][ T9410] __ia32_sys_write+0x91/0xe0 [ 671.539061][ T9410] ia32_sys_call+0x2e34/0x40d0 [ 671.544276][ T9410] __do_fast_syscall_32+0xb0/0x110 [ 671.549778][ T9410] do_fast_syscall_32+0x38/0x80 [ 671.555036][ T9410] do_SYSENTER_32+0x1f/0x30 [ 671.559772][ T9410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.566780][ T9410] [ 671.569235][ T9410] Uninit was stored to memory at: [ 671.574665][ T9410] nf_reject_ip6_tcphdr_put+0x2ca/0x6c0 [ 671.580479][ T9410] nf_send_reset6+0xd84/0x15b0 [ 671.585623][ T9410] nft_reject_inet_eval+0x3c1/0x880 [ 671.591063][ T9410] nft_do_chain+0x426/0x2290 [ 671.596052][ T9410] nft_do_chain_inet+0x41a/0x4f0 [ 671.601273][ T9410] nf_hook_slow+0xf4/0x400 [ 671.606300][ T9410] ipv6_rcv+0x29b/0x390 [ 671.610712][ T9410] __netif_receive_skb+0x1da/0xa00 [ 671.616222][ T9410] netif_receive_skb+0x58/0x660 [ 671.621332][ T9410] tun_rx_batched+0x3ee/0x980 [ 671.626439][ T9410] tun_get_user+0x5783/0x6c60 [ 671.631372][ T9410] tun_chr_write_iter+0x3ac/0x5d0 [ 671.637051][ T9410] vfs_write+0xb28/0x1540 [ 671.641669][ T9410] ksys_write+0x20f/0x4c0 [ 671.646537][ T9410] __ia32_sys_write+0x91/0xe0 [ 671.651588][ T9410] ia32_sys_call+0x2e34/0x40d0 [ 671.656812][ T9410] __do_fast_syscall_32+0xb0/0x110 [ 671.662413][ T9410] do_fast_syscall_32+0x38/0x80 [ 671.667623][ T9410] do_SYSENTER_32+0x1f/0x30 [ 671.672622][ T9410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.679282][ T9410] [ 671.681803][ T9410] Uninit was created at: [ 671.686492][ T9410] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 671.692758][ T9410] kmalloc_reserve+0x13d/0x4a0 [ 671.697793][ T9410] __alloc_skb+0x363/0x7b0 [ 671.702617][ T9410] nf_send_reset6+0x98d/0x15b0 [ 671.707604][ T9410] nft_reject_inet_eval+0x3c1/0x880 [ 671.713156][ T9410] nft_do_chain+0x426/0x2290 [ 671.717951][ T9410] nft_do_chain_inet+0x41a/0x4f0 [ 671.723238][ T9410] nf_hook_slow+0xf4/0x400 [ 671.727881][ T9410] ipv6_rcv+0x29b/0x390 [ 671.732412][ T9410] __netif_receive_skb+0x1da/0xa00 [ 671.737734][ T9410] netif_receive_skb+0x58/0x660 [ 671.742912][ T9410] tun_rx_batched+0x3ee/0x980 [ 671.747859][ T9410] tun_get_user+0x5783/0x6c60 [ 671.752870][ T9410] tun_chr_write_iter+0x3ac/0x5d0 [ 671.758106][ T9410] vfs_write+0xb28/0x1540 [ 671.762815][ T9410] ksys_write+0x20f/0x4c0 [ 671.767384][ T9410] __ia32_sys_write+0x91/0xe0 [ 671.772870][ T9410] ia32_sys_call+0x2e34/0x40d0 [ 671.777871][ T9410] __do_fast_syscall_32+0xb0/0x110 [ 671.783394][ T9410] do_fast_syscall_32+0x38/0x80 [ 671.788435][ T9410] do_SYSENTER_32+0x1f/0x30 [ 671.793285][ T9410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.799872][ T9410] [ 671.802444][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.4.1460 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 671.813579][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 671.824070][ T9410] ===================================================== [ 671.831261][ T9410] Disabling lock debugging due to kernel taint [ 671.838308][ T9411] ===================================================== [ 671.838323][ T9410] Kernel panic - not syncing: kmsan.panic set ... [ 671.852411][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.4.1460 Tainted: G B 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 671.864495][ T9410] Tainted: [B]=BAD_PAGE [ 671.868746][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 671.879197][ T9410] Call Trace: [ 671.882862][ T9410] [ 671.886002][ T9410] dump_stack_lvl+0x216/0x2d0 [ 671.890847][ T9410] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 671.897042][ T9410] dump_stack+0x1e/0x30 [ 671.901353][ T9410] panic+0x4e2/0xcf0 [ 671.905399][ T9410] ? kmsan_get_metadata+0x41/0x1c0 [ 671.910728][ T9410] kmsan_report+0x2c7/0x2d0 [ 671.915409][ T9410] ? kmsan_internal_chain_origin+0x90/0xd0 [ 671.921392][ T9410] ? __msan_warning+0x95/0x120 [ 671.926319][ T9410] ? nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 671.932298][ T9410] ? nf_send_reset6+0xd84/0x15b0 [ 671.937385][ T9410] ? nft_reject_inet_eval+0x3c1/0x880 [ 671.943015][ T9410] ? nft_do_chain+0x426/0x2290 [ 671.947919][ T9410] ? nft_do_chain_inet+0x41a/0x4f0 [ 671.953267][ T9410] ? nf_hook_slow+0xf4/0x400 [ 671.958066][ T9410] ? ipv6_rcv+0x29b/0x390 [ 671.962596][ T9410] ? __netif_receive_skb+0x1da/0xa00 [ 671.968073][ T9410] ? netif_receive_skb+0x58/0x660 [ 671.973362][ T9410] ? tun_rx_batched+0x3ee/0x980 [ 671.979449][ T9410] ? tun_get_user+0x5783/0x6c60 [ 671.984909][ T9410] ? tun_chr_write_iter+0x3ac/0x5d0 [ 671.990399][ T9410] ? vfs_write+0xb28/0x1540 [ 671.995206][ T9410] ? ksys_write+0x20f/0x4c0 [ 671.999888][ T9410] ? __ia32_sys_write+0x91/0xe0 [ 672.004931][ T9410] ? ia32_sys_call+0x2e34/0x40d0 [ 672.010416][ T9410] ? __do_fast_syscall_32+0xb0/0x110 [ 672.015912][ T9410] ? do_fast_syscall_32+0x38/0x80 [ 672.021228][ T9410] ? do_SYSENTER_32+0x1f/0x30 [ 672.026062][ T9410] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.032801][ T9410] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.039515][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.044935][ T9410] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 672.050932][ T9410] ? kmem_cache_alloc_node_noprof+0x6df/0xb80 [ 672.057266][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.062651][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.068029][ T9410] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 672.074129][ T9410] ? csum_partial+0x45e/0x4b0 [ 672.079009][ T9410] __msan_warning+0x95/0x120 [ 672.083840][ T9410] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 672.089699][ T9410] nf_send_reset6+0xd84/0x15b0 [ 672.094859][ T9410] nft_reject_inet_eval+0x3c1/0x880 [ 672.100263][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.105677][ T9410] ? __pfx_nft_reject_inet_eval+0x10/0x10 [ 672.111585][ T9410] nft_do_chain+0x426/0x2290 [ 672.116330][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.121729][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.127147][ T9410] ? ipv6_find_hdr+0xe8d/0x12f0 [ 672.132256][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.137694][ T9410] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 672.143739][ T9410] nft_do_chain_inet+0x41a/0x4f0 [ 672.149082][ T9410] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 672.154740][ T9410] nf_hook_slow+0xf4/0x400 [ 672.159353][ T9410] ipv6_rcv+0x29b/0x390 [ 672.163701][ T9410] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 672.169099][ T9410] __netif_receive_skb+0x1da/0xa00 [ 672.174567][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.180048][ T9410] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 672.186150][ T9410] netif_receive_skb+0x58/0x660 [ 672.191252][ T9410] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 672.197276][ T9410] ? tun_rx_batched+0x37c/0x980 [ 672.202343][ T9410] tun_rx_batched+0x3ee/0x980 [ 672.207219][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.212691][ T9410] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 672.218703][ T9410] tun_get_user+0x5783/0x6c60 [ 672.223605][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.229066][ T9410] ? kmsan_get_metadata+0x13e/0x1c0 [ 672.234476][ T9410] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 672.241030][ T9410] tun_chr_write_iter+0x3ac/0x5d0 [ 672.246254][ T9410] vfs_write+0xb28/0x1540 [ 672.250780][ T9410] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 672.256523][ T9410] ksys_write+0x20f/0x4c0 [ 672.261069][ T9410] __ia32_sys_write+0x91/0xe0 [ 672.265973][ T9410] ia32_sys_call+0x2e34/0x40d0 [ 672.270979][ T9410] __do_fast_syscall_32+0xb0/0x110 [ 672.276412][ T9410] ? irqentry_exit+0x16/0x60 [ 672.281253][ T9410] do_fast_syscall_32+0x38/0x80 [ 672.286289][ T9410] do_SYSENTER_32+0x1f/0x30 [ 672.290991][ T9410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.297569][ T9410] RIP: 0023:0xf7f1f579 [ 672.301801][ T9410] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 672.321709][ T9410] RSP: 002b:00000000f56a6530 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 672.330448][ T9410] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000340 [ 672.338572][ T9410] RDX: 000000000000004a RSI: 00000000f73abff4 RDI: 0000000000000000 [ 672.346692][ T9410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 672.354815][ T9410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 672.362919][ T9410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 672.371144][ T9410] [ 673.830905][ T9410] Shutting down cpus with NMI [ 673.836036][ T9410] Kernel Offset: disabled [ 673.840452][ T9410] Rebooting in 86400 seconds..