last executing test programs: 6.864263143s ago: executing program 0 (id=15653): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd7d, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x2ee85000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x1ff, 0x0, &(0x7f0000000000)=0x1) 5.818118837s ago: executing program 4 (id=15677): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=0x1, r0, 0x2e, 0x10, 0x0, @link_id, r1}, 0x20) 5.611835129s ago: executing program 4 (id=15667): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x8001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) 5.260262206s ago: executing program 4 (id=15671): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0xc1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 4.87523659s ago: executing program 0 (id=15680): r0 = syz_io_uring_setup(0x5169, &(0x7f0000000e80)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)="127c362e0f904c9bd8c319dc037b9ff19e6043288e17efada5da42ba346470c87f0e294e83f6e320f943ec8784b0ef33d208d09020e99cdb3dd7f57242753155e9a3536d852576601138aeda71c5fdce0a5b3554089844bb58e0a1b42d1888f9700103d95a91388a7b996d64c63fd92bbcbaf801af2a521b70cb621e3ed047229ded9ccaa92f64564d4ccc3ad1cb6ef86266819a17f0c14e4d608affe1", 0x9d}, {&(0x7f0000000480)="f02b0e74e0f5976f1e328dfbeefdd546ec763881260251e6febb4a495b66feccf56f968861e43d6b0aadfc37529214534ba35b48bebb6adb1dbeaeebb8797acb67ecca5b91d5bab516d57550e03599bd5ce4753e6b8c", 0x56}, {&(0x7f0000000080)="71b46ff28b0ad6f8348eb0ceff6a2a7a1dce230552a170b0a54742d682e023172e323d7557c5a411913c8631a4162a46680d64f4c8", 0x35}, {&(0x7f0000000140)="3420a179cccf38cde29aa16b4a58fd833f8ddcab0a04ba42eb977ea4797f7ebd277718", 0x23}], 0x100000000000025e}, 0x0, 0x20040000}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 4.468658101s ago: executing program 0 (id=15685): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000140)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@age_extent_cache}, {@user_xattr}, {@noinline_xattr}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) fallocate(r0, 0x1, 0x4, 0x3) 3.820184068s ago: executing program 5 (id=15692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x48}}, 0x0) 3.626413085s ago: executing program 5 (id=15696): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) 3.383866606s ago: executing program 5 (id=15698): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xfffffffffffffdef}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x7c}}, 0x0) 3.076964504s ago: executing program 5 (id=15700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000300)={{0x0, 0x1}, 0x0, 0x400}) 3.000098976s ago: executing program 2 (id=15701): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)={r1}) 2.826270482s ago: executing program 5 (id=15702): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 2.752146401s ago: executing program 2 (id=15704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000020000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 2.480292868s ago: executing program 3 (id=15705): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000680)='./file1\x00', 0x3000801, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES8=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="265c375a51dd6e984fce8f35aa96c075b7a81828e19cae434dffff00000000000014aff7565f8f9989ef21cc069e9749731bd1c6a9829f608f227226f10458476d5a0b704f77d9b09077243e32c3c64966b7f87048ae31ebf117f3d51f91ba7edfec2ea21d2382804f40b80f00fc791879137b4c7b40f0fec0ee209e144676e71e63c3d74fc465d09f40982fd6c163c833e2a0c13bcb290e5e727197549ecb61473c5ced3d4d7684d79d50ab63ac97ad2228d9245ea6cd2b2716a000a9834983a3f1a768004374e58bcabab221000000fc0000000000000000000000000f21c0352cd526bfdee0c1be60fa5c002ed9f108f6", @ANYRESOCT], 0x2, 0x1e9, &(0x7f0000000a00)="$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") 2.371554123s ago: executing program 2 (id=15706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000500000000020000000000000802000000000000000000000a0300000000005f0061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.234742813s ago: executing program 3 (id=15708): creat(0x0, 0xd931d3864d39dcca) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 2.100115897s ago: executing program 2 (id=15709): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5d4, &(0x7f00000004c0)="$eJzs3c9vVNUeAPDvvZ0WSt977SMvT3FhGg2BRGlpAYM/FrAnBH/s3FhpIcjwI7RGiyaWBDcmxo0LElcuxP9CiW5dmbhw4caVIUFj2GiMjrkzd4ahnWmH0umtvZ9PMsz5MTPnTOm359xzz50JoLTGs3/SiD0RcTmJGG2rq0ReOd543N1f3z2d3ZKo1V7+JYkkL2s+PsnvR/In/zka8e1XSeweWNnu/OLV8zPV6tyVPD+5cOHy5Pzi1QPnLsycnTs7d3H6memjRw4fOTp18KHeX9qWPnH9jbdGPzj56mef/JFMff7DySSOxc9nGnXt72OjjMd4/Farvbe8PPu5Ht3oxgoy0Po9uSdZXsCWVcljZDAiHonRGGj73xyN918stHNAX9WSiBpQUon4h5JqzgOax/a9HQenfZ6VAJvhzvGoH/2vjP9KY20wxuprA3uXPa/Dkt66ZG188/XJ69ktuq7D7dyg1oB2S9d25Knl8Z/UY3Msj71dd9P71nmzGcCp/D4rf2md7Y8vy/djHR7obOlaRDzaaf6/dvy/1hb/r6+zffEPAAAAAAAAG+fW8Yh4utP5vzQ/N7cznqif/0sa5/++u3eF4LENaH/t83/p7Q1oBujgzvGIFzru/23t8R0byHP/buwGTM6cq84djIj/RMT+GNyR5adWaePAh7tvdKtr3/+X3bL2m3sB837cruy4/zmzMwszD/OegYY71yIeq3Tf/5ON/0n7+J/L/h5c7rGN3XtvnupWt3b8A/1S+zRiX8fxP2k9Jln98zkm6/OByeasYKXH3/noi27ti38oTjb+71o9/seS9s/rmX+w1x+KiEOLlVq3+vXO/4eSVwaar595e2Zh4cpUxFByYmX59IP1GbarZjw04yWL//1Prr7+15r/t8XhcEQs9djm//8a+bFb3XhELX9Z4z9ssiz+ZzuM/8Ndx/8HT0zfHPuyW/u9jf+H62P6/rzE+h+srtcALbqfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBPlEbEvyJJJ1rpNJ2YiBiJiP/FrrR6aX7hqTOX3rw4m9XVv/8/bX7T72gjnzS//3+sLT+9LH8oIv4bER8PDNfzE6cvVWeLfvMAAAAAAAAAAAAAAAAAAACwRYx0uf4/89NA0b0D+q6S34t3KJ9K0R0ACiP+obzEP5SX+IfyEv9QXuuMf6cLYBsw/kNZDfb2sJ397gdQBOM/AAAAAABsK7eef/ZGEhFLzw3Xb5mhvK51YnC4qN4B/ZQW3QGgMPbwQnnZ+gPl1ePmX2AbS1qp32ud6rvv/k/60yEAAAAAAAAAAAAAYIV9e259v+b1/8C2lEYcK7oPQDFc/w/l5fp/KK8ux/iOCaBE1rqK3/X/AAAAAAAAAAAAAFC8+cWr52eaXwI+U63OXamXSEg0ErVacb8bgxGxJX4Im54Yag/PzWg0IpZWlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvC3wEAAP//COEcHw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents64(r0, 0x0, 0x0) 2.083115204s ago: executing program 4 (id=15710): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3ffffffd}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0xe0a2ff6baa7cc2d2, 0x0, 0x4b3, 0x3}, {0x0, 0x1}, 0x3}}]}}]}, 0x60}}, 0x0) 2.049758055s ago: executing program 1 (id=15711): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000180)=0x200000000) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)="ee", 0x27, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={'sha512-ssse3\x00'}}) 1.928074997s ago: executing program 0 (id=15712): r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000300), &(0x7f0000000180)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.775192333s ago: executing program 1 (id=15713): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xfffffffffffffdef}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x7c}}, 0x0) 1.774976349s ago: executing program 3 (id=15714): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x1, 0x40000}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x21, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x11af, 0xdfd2, 0x0, 0x0, 0x0) 1.774783436s ago: executing program 5 (id=15715): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x7, {0x7, 0x8, "b30c5a7da7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.642451896s ago: executing program 2 (id=15716): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) 1.539286056s ago: executing program 4 (id=15717): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d3078303030303030303030303001003066581c000000000000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbdb8475f9b71f1eafd72d05729520434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b407eaa2083113d1bab6700000000000000", @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x0, 0x63b, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) unshare(0x60600) execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 1.483349437s ago: executing program 3 (id=15718): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000020000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 1.373667942s ago: executing program 4 (id=15719): syz_usb_connect(0x5, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xc7, 0xce, 0x36, 0x8, 0x763, 0x2080, 0xd0ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x3, 0xcb}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 1.368399132s ago: executing program 1 (id=15731): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x44, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x5, 0x0, 0x1, {0x1c, 0x4, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x3}]}}]}]}, 0x44}}, 0x0) 1.11726928s ago: executing program 1 (id=15720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x30}}, 0x0) 895.727248ms ago: executing program 3 (id=15721): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@local, 0x7b, r2}) 578.67436ms ago: executing program 3 (id=15722): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0xc1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 575.987956ms ago: executing program 1 (id=15735): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 305.234815ms ago: executing program 0 (id=15723): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000000)) 53.038652ms ago: executing program 2 (id=15724): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x1b}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 51.949055ms ago: executing program 1 (id=15725): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 0s ago: executing program 0 (id=15726): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x40}, 0x18) syncfs(r1) kernel console output (not intermixed with test programs): 6.411542][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.492069][ T6021] bridge_slave_0: entered allmulticast mode [ 1306.513360][ T6062] loop5: detected capacity change from 0 to 40427 [ 1306.520267][ T6021] bridge_slave_0: entered promiscuous mode [ 1306.549215][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.587323][ T6062] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1306.587602][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.622955][ T6092] loop2: detected capacity change from 0 to 1024 [ 1306.631006][ T6021] bridge_slave_1: entered allmulticast mode [ 1306.643919][ T6021] bridge_slave_1: entered promiscuous mode [ 1306.809518][ T6062] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1306.830042][ T6021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.901066][ T6062] syz.5.14347: attempt to access beyond end of device [ 1306.901066][ T6062] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1306.903019][ T6021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.952282][ T6062] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1307.175917][ T6021] team0: Port device team_slave_0 added [ 1307.225945][ T6021] team0: Port device team_slave_1 added [ 1307.454602][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.483170][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.577921][ T6021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.620123][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.650196][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.745724][ T6021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.987810][ T6021] hsr_slave_0: entered promiscuous mode [ 1308.025060][ T6021] hsr_slave_1: entered promiscuous mode [ 1308.039676][ T6021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1308.072237][ T6021] Cannot create hsr debugfs directory [ 1308.441797][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14375'. [ 1308.442227][ T6052] Bluetooth: hci0: command 0x041b tx timeout [ 1308.928113][ T6143] loop1: detected capacity change from 0 to 4096 [ 1308.984405][ T6143] ntfs3: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 1309.062956][ T6021] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.426068][ T6021] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.455599][ T6164] loop2: detected capacity change from 0 to 764 [ 1309.496465][ T6164] rock: directory entry would overflow storage [ 1309.506665][ T6164] rock: sig=0x4654, size=5, remaining=4 [ 1309.513568][ T6165] veth1_macvtap: left promiscuous mode [ 1309.538263][ T6164] rock: directory entry would overflow storage [ 1309.544747][ T6164] rock: sig=0x4f50, size=4, remaining=3 [ 1309.550465][ T6164] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1309.855213][ T6021] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.917769][ T6178] netlink: 88 bytes leftover after parsing attributes in process `syz.5.14395'. [ 1309.960939][ T6178] netem: invalid attributes len -24 [ 1310.011715][ T6178] netem: change failed [ 1310.240844][ T6021] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.530081][ T6192] sp0: Synchronizing with TNC [ 1310.531612][T20282] Bluetooth: hci0: command 0x041b tx timeout [ 1311.013934][ T6202] pimreg: entered allmulticast mode [ 1311.028018][ T6204] loop5: detected capacity change from 0 to 1024 [ 1311.081902][ T6204] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1311.094327][ T6202] pimreg: left allmulticast mode [ 1311.134364][ T6204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.381773][ T6021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1311.432892][ T2649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.446053][ T6021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1311.446193][ T6216] netlink: 'syz.2.14412': attribute type 1 has an invalid length. [ 1311.501924][ T6216] netlink: 9324 bytes leftover after parsing attributes in process `syz.2.14412'. [ 1311.511269][ T6216] netlink: 'syz.2.14412': attribute type 1 has an invalid length. [ 1311.548920][ T6021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1311.666808][ T6021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1312.003001][ T6228] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14417'. [ 1312.051678][ T6228] netlink: 'syz.5.14417': attribute type 2 has an invalid length. [ 1312.081912][ T6228] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14417'. [ 1312.222677][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.309489][ T6021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.321687][ T29] audit: type=1326 audit(2000000478.099:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.14422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1312.396181][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.403430][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.421932][ T29] audit: type=1326 audit(2000000478.099:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.14422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1312.507401][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.514722][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.532240][ T29] audit: type=1326 audit(2000000478.149:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.14422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1312.624090][ T6242] loop2: detected capacity change from 0 to 764 [ 1312.637014][T20282] Bluetooth: hci0: command 0x041b tx timeout [ 1312.701734][ T29] audit: type=1326 audit(2000000478.149:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.14422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1312.819713][ T29] audit: type=1326 audit(2000000478.149:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.14422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1313.019464][ T6253] loop2: detected capacity change from 0 to 64 [ 1313.054387][ T6253] hfs: unable to parse mount options [ 1313.084974][ T6249] loop5: detected capacity change from 0 to 4096 [ 1313.136117][ T6249] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1313.294425][ T6249] ntfs3: loop5: failed to convert "c46c" to maciceland [ 1313.465128][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.174346][ T6278] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14436'. [ 1314.214169][ T6278] net_ratelimit: 20 callbacks suppressed [ 1314.214190][ T6278] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1314.330390][ T6253] loop2: detected capacity change from 0 to 32768 [ 1314.408296][ T6253] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1314.563938][ T6021] veth0_vlan: entered promiscuous mode [ 1314.612647][ T6253] XFS (loop2): Ending clean mount [ 1314.651429][ T6021] veth1_vlan: entered promiscuous mode [ 1314.682205][T20282] Bluetooth: hci0: command 0x041b tx timeout [ 1314.864859][ T6021] veth0_macvtap: entered promiscuous mode [ 1314.930489][ T6021] veth1_macvtap: entered promiscuous mode [ 1314.983915][T28037] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1315.005201][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.067589][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.135733][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.156153][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.186058][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.210063][ T6300] netlink: 'syz.0.14442': attribute type 1 has an invalid length. [ 1315.223967][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.245846][ T6300] netlink: 3440 bytes leftover after parsing attributes in process `syz.0.14442'. [ 1315.257602][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.281028][ T6300] netlink: 'syz.0.14442': attribute type 1 has an invalid length. [ 1315.291082][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.311400][ T6300] netlink: 5888 bytes leftover after parsing attributes in process `syz.0.14442'. [ 1315.320736][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.346184][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.383907][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.415184][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.437708][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.460601][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.527167][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.589124][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.625999][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.658588][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.697097][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.753662][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.795843][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.841661][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.884044][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.907372][ T6313] loop2: detected capacity change from 0 to 4096 [ 1315.922958][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.943825][ T6313] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1315.953005][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.987777][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.018353][ T6313] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1316.028849][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.058407][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.107267][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.283930][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.395814][ T6021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.430236][ T6021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.471978][ T6021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.514528][ T6021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.706855][ T29] audit: type=1326 audit(2134218210.501:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.2.14456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf9317def9 code=0x0 [ 1316.835135][ T6336] loop0: detected capacity change from 0 to 64 [ 1317.150917][T28269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.172718][T28269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.390771][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.424353][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.917664][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14471'. [ 1318.395541][ T6389] tun0: tun_chr_ioctl cmd 1074025678 [ 1318.401082][ T6389] tun0: group set to 0 [ 1318.632909][ T5301] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1318.858311][ T5301] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1318.891774][ T5301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.932603][ T5301] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1318.969323][ T5301] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1318.983935][ T5301] usb 5-1: Manufacturer: syz [ 1318.999766][ T5301] usb 5-1: config 0 descriptor?? [ 1319.151709][ T5301] rc_core: IR keymap rc-hauppauge not found [ 1319.157717][ T5301] Registered IR keymap rc-empty [ 1319.196495][ T5301] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1319.233598][ T5301] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input92 [ 1319.757242][ T5301] usb 5-1: USB disconnect, device number 101 [ 1319.999752][ T6438] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14504'. [ 1320.193129][ T6443] netlink: 'syz.5.14507': attribute type 14 has an invalid length. [ 1320.237007][ T6446] loop2: detected capacity change from 0 to 64 [ 1320.330061][ T6446] hfs: request for non-existent node 1280 in B*Tree [ 1320.352961][ T6446] hfs: request for non-existent node 1280 in B*Tree [ 1320.383808][ T6449] hfs: request for non-existent node 1280 in B*Tree [ 1320.409699][ T6449] hfs: request for non-existent node 1280 in B*Tree [ 1320.483888][ T6424] loop1: detected capacity change from 0 to 32768 [ 1320.551016][ T6424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.14497 (6424) [ 1320.554258][ T6448] loop0: detected capacity change from 0 to 4096 [ 1320.620473][ T6424] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1320.678616][ T6424] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1320.711700][ T6424] BTRFS info (device loop1): using free-space-tree [ 1320.923713][ T6480] loop2: detected capacity change from 0 to 1024 [ 1321.280465][T31511] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1322.564939][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14533'. [ 1322.980137][T16810] kernel write not supported for file /dsp (pid: 16810 comm: kworker/0:4) [ 1323.259425][ T29] audit: type=1326 audit(2134218217.051:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.3.14544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd79c97def9 code=0x0 [ 1323.262884][ T6536] tun0: tun_chr_ioctl cmd 1074025680 [ 1323.676112][ T6548] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1323.830224][ T6551] loop5: detected capacity change from 0 to 64 [ 1323.848943][ T6551] hfs: unable to parse mount options [ 1324.290531][ T6529] loop0: detected capacity change from 0 to 32768 [ 1325.343296][ T6593] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14571'. [ 1325.654944][ T6606] loop5: detected capacity change from 0 to 256 [ 1325.672939][ T6606] exfat: Deprecated parameter 'utf8' [ 1325.686244][ T6606] exfat: Deprecated parameter 'utf8' [ 1325.697475][ T6606] exfat: Deprecated parameter 'utf8' [ 1325.729068][ T6606] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1325.902018][T16810] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1326.125171][T16810] usb 2-1: config 0 has no interfaces? [ 1326.130894][T16810] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e350, bcdDevice=f8.fa [ 1326.171664][T16810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.198990][T16810] usb 2-1: config 0 descriptor?? [ 1326.387419][ T6621] netlink: 'syz.3.14582': attribute type 5 has an invalid length. [ 1326.516516][T16810] usb 2-1: USB disconnect, device number 86 [ 1326.555124][ T6623] loop2: detected capacity change from 0 to 256 [ 1327.278854][ T6645] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1327.443925][ T6652] Bluetooth: MGMT ver 1.23 [ 1327.838220][ T6667] loop1: detected capacity change from 0 to 512 [ 1327.912234][ T6667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1327.980895][ T6667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.024775][ T6674] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 1328.062121][ T6667] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.190249][ T6667] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1328.426172][T31511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.699660][ T29] audit: type=1326 audit(2134218222.491:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1328.705396][ T6646] loop0: detected capacity change from 0 to 32768 [ 1328.782452][ T29] audit: type=1326 audit(2134218222.491:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1328.883709][ T29] audit: type=1326 audit(2134218222.521:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1329.012013][ T29] audit: type=1326 audit(2134218222.521:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1329.093083][ T29] audit: type=1326 audit(2134218222.531:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1329.231683][ T29] audit: type=1326 audit(2134218222.531:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1329.304456][ T29] audit: type=1326 audit(2134218222.531:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1329.352471][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14627'. [ 1329.384973][ T29] audit: type=1326 audit(2134218222.531:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1329.498725][ T29] audit: type=1326 audit(2134218222.531:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1329.605198][ T29] audit: type=1326 audit(2134218222.531:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.14615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892337def9 code=0x7ffc0000 [ 1330.097513][ T6739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14638'. [ 1330.151884][ T936] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1330.370085][ T936] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1330.393867][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.425894][ T936] usb 3-1: Product: syz [ 1330.435169][ T936] usb 3-1: Manufacturer: syz [ 1330.439812][ T936] usb 3-1: SerialNumber: syz [ 1330.510981][ T936] usb 3-1: config 0 descriptor?? [ 1330.888500][ T6762] loop1: detected capacity change from 0 to 512 [ 1330.912946][ T6762] EXT4-fs: Ignoring removed mblk_io_submit option [ 1330.952851][ T6762] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1330.995182][ T6762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 1331.004162][ T6762] System zones: 1-12 [ 1331.017927][ T6762] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.14649: corrupted in-inode xattr: e_value size too large [ 1331.041848][ T6762] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.14649: couldn't read orphan inode 15 (err -117) [ 1331.067357][ T6762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1331.349314][ T936] usb 3-1: f81604_write: reg: 105 data: f2 failed: -EPROTO [ 1331.358931][ T936] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1331.381995][ T936] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1331.418687][ T936] usb 3-1: USB disconnect, device number 56 [ 1331.477545][T31511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.688804][ T6745] loop5: detected capacity change from 0 to 40427 [ 1331.706683][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 1331.725542][ T6745] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1331.734983][ T6745] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1331.772448][ T6745] F2FS-fs (loop5): invalid crc value [ 1331.795530][ T6745] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1331.904057][ T6745] F2FS-fs (loop5): Start checkpoint disabled! [ 1331.937097][ T6745] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1331.951369][ T6745] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1331.965223][ T6760] loop0: detected capacity change from 0 to 32768 [ 1331.972099][T16810] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1332.056283][ T6760] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1332.175664][T16810] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.197307][T16810] usb 5-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 1332.216949][ T6760] XFS (loop0): Ending clean mount [ 1332.222290][T16810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.294323][T16810] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1332.311286][ T2925] kworker/u8:9: attempt to access beyond end of device [ 1332.311286][ T2925] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1332.345737][ T2925] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1332.359668][ T2925] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1332.375560][ T2925] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1332.383559][ T2925] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1332.410888][ T4947] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1332.464045][T16810] usb 5-1: USB disconnect, device number 102 [ 1332.520316][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14662'. [ 1333.163481][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14668'. [ 1334.220880][ T6844] input: syz1 as /devices/virtual/input/input93 [ 1334.227944][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14661'. [ 1334.601986][ T6856] netlink: 'syz.1.14685': attribute type 1 has an invalid length. [ 1334.689278][ T6859] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.14686'. [ 1334.845825][ T6863] loop0: detected capacity change from 0 to 2048 [ 1334.880981][ T6863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1334.999183][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1334.999206][ T29] audit: type=1804 audit(2134218228.791:1803): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.14688" name=2F6E6577726F6F742F3130392FE91F7189591E9233614B2FE91F7189591E9233614B dev="loop0" ino=1367 res=1 errno=0 [ 1335.042225][ T6872] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14692'. [ 1335.081126][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14692'. [ 1335.090718][ T6863] Process accounting resumed [ 1335.395755][ T6881] loop0: detected capacity change from 0 to 256 [ 1335.473240][ T6881] FAT-fs (loop0): Directory bread(block 64) failed [ 1335.511865][ T6881] FAT-fs (loop0): Directory bread(block 65) failed [ 1335.531899][ T6881] FAT-fs (loop0): Directory bread(block 66) failed [ 1335.541104][ T6881] FAT-fs (loop0): Directory bread(block 67) failed [ 1335.569308][ T6881] FAT-fs (loop0): Directory bread(block 68) failed [ 1335.599682][ T6881] FAT-fs (loop0): Directory bread(block 69) failed [ 1335.625663][ T6881] FAT-fs (loop0): Directory bread(block 70) failed [ 1335.649914][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.666477][ T6881] FAT-fs (loop0): Directory bread(block 71) failed [ 1335.682123][ T6881] FAT-fs (loop0): Directory bread(block 72) failed [ 1335.696097][ T6881] FAT-fs (loop0): Directory bread(block 73) failed [ 1335.702922][ T5301] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1335.878956][ T6899] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1335.885792][ T6899] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1335.916306][ T6899] vhci_hcd vhci_hcd.0: Device attached [ 1335.929838][ T6907] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1335.936401][ T6907] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1335.936531][ T6906] loop1: detected capacity change from 0 to 128 [ 1335.944155][ T5301] usb 6-1: Using ep0 maxpacket: 32 [ 1335.974131][ T5301] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.993336][ T6906] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1335.995738][ T5301] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.022909][ T6906] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.026535][ T6907] vhci_hcd vhci_hcd.0: Device attached [ 1336.084508][ T6899] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 1336.091091][ T6899] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1336.113583][ T5301] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1336.123139][ T8] vhci_hcd: vhci_device speed not set [ 1336.149085][ T5301] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1336.189713][ T5301] usb 6-1: Product: syz [ 1336.200119][ T6899] vhci_hcd vhci_hcd.0: Device attached [ 1336.210181][ T5301] usb 6-1: Manufacturer: syz [ 1336.215114][ T8] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 1336.226828][ T6907] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(8) [ 1336.233373][ T6907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1336.250593][T31511] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1336.262975][ T5301] hub 6-1:4.0: USB hub found [ 1336.274123][ T6907] vhci_hcd vhci_hcd.0: Device attached [ 1336.291300][ T6900] vhci_hcd: connection reset by peer [ 1336.301433][ T6908] vhci_hcd: connection closed [ 1336.302850][ T6914] vhci_hcd: connection closed [ 1336.309776][ T1106] vhci_hcd: stop threads [ 1336.346697][ T1106] vhci_hcd: release socket [ 1336.382883][ T1106] vhci_hcd: disconnect device [ 1336.418761][ T1106] vhci_hcd: stop threads [ 1336.448827][ T1106] vhci_hcd: release socket [ 1336.473228][ T6920] vhci_hcd: connection closed [ 1336.473641][ T1106] vhci_hcd: disconnect device [ 1336.493895][ T1106] vhci_hcd: stop threads [ 1336.498209][ T1106] vhci_hcd: release socket [ 1336.498217][ T5301] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1336.523287][ T1106] vhci_hcd: disconnect device [ 1336.530755][ T1106] vhci_hcd: stop threads [ 1336.538553][ T1106] vhci_hcd: release socket [ 1336.551644][ T1106] vhci_hcd: disconnect device [ 1336.937191][ T5301] usb 6-1: USB disconnect, device number 82 [ 1337.470916][ T6968] loop0: detected capacity change from 0 to 16 [ 1337.494967][ T6968] erofs: (device loop0): mounted with root inode @ nid 36. [ 1337.544788][ T6968] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 1337.632626][ T6968] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1337.825563][ T6984] bond0: option mode: unable to set because the bond device has slaves [ 1338.197444][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14747'. [ 1338.404911][ T5301] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1338.622209][ T5301] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1338.661731][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.692549][ T5301] usb 2-1: config 0 descriptor?? [ 1338.706642][ T5301] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1339.031620][ T29] audit: type=1326 audit(2134218232.821:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.14756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd79c97def9 code=0x0 [ 1339.137540][ T29] audit: type=1326 audit(2134218232.871:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.3.14756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fd79c97def9 code=0x0 [ 1339.320072][ T5301] gspca_cpia1: usb_control_msg 01, error -71 [ 1339.326290][ T5301] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1339.369136][ T5301] usb 2-1: USB disconnect, device number 87 [ 1339.610683][ T7026] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14761'. [ 1339.630768][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14761'. [ 1339.814707][ T7028] loop2: detected capacity change from 0 to 512 [ 1339.832348][ T7028] EXT4-fs: Ignoring removed mblk_io_submit option [ 1339.849719][ T7028] EXT4-fs (loop2): invalid inodes per group: 8 [ 1339.849719][ T7028] [ 1340.243099][ T7030] loop2: detected capacity change from 0 to 512 [ 1340.259709][ T7030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1340.306380][ T7030] EXT4-fs (loop2): 1 truncate cleaned up [ 1340.323192][ T7030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1340.422355][ T7030] EXT4-fs error (device loop2): swap_inode_boot_loader:384: inode #5: comm syz.2.14763: iget: bad extra_isize 46 (inode size 256) [ 1340.536718][T28037] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.542457][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14757'. [ 1340.992877][ T7048] loop2: detected capacity change from 0 to 4096 [ 1341.047657][ T7048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1341.134486][T28037] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.402339][ T8] vhci_hcd: vhci_device speed not set [ 1341.961862][ T5301] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1342.183531][ T5301] usb 6-1: Using ep0 maxpacket: 8 [ 1342.221835][ T5301] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 1342.260927][ T5301] usb 6-1: config 0 has no interface number 1 [ 1342.273510][ T5301] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1342.311967][ T5301] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1342.335650][ T7085] loop2: detected capacity change from 0 to 64 [ 1342.354783][ T5301] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1342.362381][ T7085] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 1342.402686][ T5301] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1342.415244][ T7085] MINIX-fs: bad superblock or unable to read bitmaps [ 1342.440020][ T5301] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1342.504005][ T5301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1342.551718][ T5301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1342.621020][ T5301] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1342.651004][ T5301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.701870][ T5301] usb 6-1: Product: syz [ 1342.716400][ T5301] usb 6-1: Manufacturer: syz [ 1342.727716][ T5301] usb 6-1: SerialNumber: syz [ 1342.756089][ T5301] usb 6-1: config 0 descriptor?? [ 1342.776909][ T7074] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1342.781843][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14789'. [ 1342.798048][ T5301] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1342.852394][ T5301] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1342.910775][ T5301] usb 6-1: invalid MIDI in EP 0 [ 1343.075490][ T5301] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1343.119228][ T5301] usb 6-1: USB disconnect, device number 83 [ 1343.411428][ T7102] loop1: detected capacity change from 0 to 128 [ 1343.474996][ T7102] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1343.573961][ T7110] loop2: detected capacity change from 0 to 128 [ 1343.592240][ T7102] ext4 filesystem being mounted at /471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.624479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.640290][ T7110] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1343.672991][ T7110] ext4 filesystem being mounted at /652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.923737][T28037] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1343.955051][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14799'. [ 1343.967047][T31511] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1344.421751][ T5316] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1344.435172][ T7131] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14806'. [ 1344.482601][ T7131] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 1344.652247][ T5316] usb 3-1: Using ep0 maxpacket: 16 [ 1344.662862][ T5316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.701791][ T5316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.731871][ T5316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1344.784757][ T5316] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1344.814371][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.818194][ T7145] loop1: detected capacity change from 0 to 2048 [ 1344.840398][ T5316] usb 3-1: config 0 descriptor?? [ 1344.898720][ T7145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.111072][T31511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.279138][ T5316] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 1345.318700][ T5316] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0090/input/input94 [ 1345.346292][ T7157] input: syz0 as /devices/virtual/input/input95 [ 1345.356623][ T5316] microsoft 0003:045E:07DA.0090: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1345.688035][ T5316] usb 3-1: USB disconnect, device number 57 [ 1345.954049][ T7171] loop0: detected capacity change from 0 to 128 [ 1346.893123][ T7191] loop5: detected capacity change from 0 to 4096 [ 1346.962002][ T7197] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1347.822264][ T5316] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1348.056365][ T5316] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1348.091888][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1348.118570][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1348.157279][ T5316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1348.182572][ T5316] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1348.217266][ T5316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.253053][ T5316] usb 2-1: config 0 descriptor?? [ 1348.262605][ T5301] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1348.481736][ T5301] usb 6-1: Using ep0 maxpacket: 32 [ 1348.499639][ T5301] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1348.529324][ T5301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.573130][ T5301] usb 6-1: config 0 descriptor?? [ 1348.590491][ T5301] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1348.670749][ T5316] plantronics 0003:047F:FFFF.0091: unknown main item tag 0x7 [ 1348.691949][ T5316] plantronics 0003:047F:FFFF.0091: unbalanced collection at end of report description [ 1348.712556][ T5316] plantronics 0003:047F:FFFF.0091: parse failed [ 1348.718957][ T5316] plantronics 0003:047F:FFFF.0091: probe with driver plantronics failed with error -22 [ 1348.874158][ T5300] usb 2-1: USB disconnect, device number 88 [ 1349.028137][ T7251] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 1349.400580][ T5301] gspca_nw80x: reg_r err -71 [ 1349.411888][ T5301] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 1349.429929][ T7231] loop0: detected capacity change from 0 to 32768 [ 1349.450380][ T5301] usb 6-1: USB disconnect, device number 84 [ 1349.542697][ T7231] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1349.825267][ T7231] XFS (loop0): Ending clean mount [ 1350.032451][ T4947] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1350.085718][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14868'. [ 1350.436112][ T29] audit: type=1326 audit(2134218244.221:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.5.14872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1350.553596][ T29] audit: type=1326 audit(2134218244.221:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.5.14872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1350.656682][ T29] audit: type=1326 audit(2134218244.281:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.5.14872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1350.803072][ T29] audit: type=1326 audit(2134218244.281:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.5.14872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1350.912119][ T29] audit: type=1326 audit(2134218244.281:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.5.14872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1351.183320][ T7312] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1351.308990][ T7267] loop1: detected capacity change from 0 to 40427 [ 1351.349353][ T7267] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1351.371866][ T7267] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1351.404327][ T7267] F2FS-fs (loop1): invalid crc value [ 1351.413308][ T7267] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1351.538151][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14889'. [ 1351.549961][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14889'. [ 1351.558592][ T7267] F2FS-fs (loop1): Start checkpoint disabled! [ 1351.582364][ T7267] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1351.599349][ T7329] gtp0: entered promiscuous mode [ 1351.600275][ T7267] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1351.611395][ T7329] gtp0: entered allmulticast mode [ 1351.945332][T30548] kworker/u8:1: attempt to access beyond end of device [ 1351.945332][T30548] loop1: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 1351.989720][T30548] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1352.014643][T30548] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1352.037492][T30548] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1352.056037][T30548] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1352.064906][ T7338] loop5: detected capacity change from 0 to 4096 [ 1352.075146][T30548] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1352.087998][ T7338] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 1352.172883][ T7338] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1352.290085][ T7338] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 1352.584857][ T29] audit: type=1326 audit(2134218246.381:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.3.14902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd79c97def9 code=0x0 [ 1353.080013][ T29] audit: type=1400 audit(2134218246.871:1812): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A656E6365643A20202020202020202020202030206B420A416E6F6E796D6F75733A2020202020202020202020202030206B420A4B534D3A2020202020202020202020202020202020202030206B420A4C617A79467265653A202020202020202020202020202030206B420A416E6F6E4875676550616765733A20202020202020202030206B420A53686D656D506D644D61707065643A202020202020202030206B420A46696C65506D644D61707065643A20202020202020202030206B420A5368617265645F48756765746C623A202020202020202030206B420A507269766174655F48756765746C623A2020202020202030206B420A537761703A20202020202020202020202020202020202030206B420A537761705073733A20202020202020202020202020202030206B420A4C6F636B65643A2020202020202020202020202020202030206B420A544850656C696769626C653A2020202020202020202020300A566D466C6167733A206D72206D77206D65207364200A32303030303030302D323130303030303020727778702030303030303030302030303A30302030200A53697A653A20202020202 [ 1353.272189][ T7370] netlink: 'syz.4.14907': attribute type 1 has an invalid length. [ 1353.537087][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14907'. [ 1354.776443][ T7413] loop5: detected capacity change from 0 to 128 [ 1355.642944][ T7443] netlink: 'syz.3.14941': attribute type 10 has an invalid length. [ 1355.829091][ T7443] team0: Port device wlan1 added [ 1355.937494][ T7447] netlink: 'syz.3.14941': attribute type 10 has an invalid length. [ 1356.063923][ T7447] batman_adv: batadv0: Adding interface: team0 [ 1356.122449][ T7447] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.205006][ T7447] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1356.236274][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14949'. [ 1356.250137][ T7462] vivid-003: disconnect [ 1356.283261][ T7461] vivid-003: reconnect [ 1356.512112][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14955'. [ 1356.547430][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14955'. [ 1356.618240][ T7473] loop5: detected capacity change from 0 to 1024 [ 1356.638670][ T7473] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1356.736062][ T7473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.786988][ T7439] loop2: detected capacity change from 0 to 40427 [ 1356.855961][ T7439] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1356.858132][ T2649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.871650][ T7439] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1356.932550][ T7439] F2FS-fs (loop2): invalid crc value [ 1356.942115][ T7439] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1357.182154][ T7439] F2FS-fs (loop2): Start checkpoint disabled! [ 1357.199744][ T7439] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1357.232183][ T7439] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1357.243913][ T7496] ptrace attach of "./syz-executor exec"[31511] was attempted by "./syz-executor exec"[7496] [ 1357.693283][T30548] kworker/u8:1: attempt to access beyond end of device [ 1357.693283][T30548] loop2: rw=2049, sector=40960, nr_sectors = 56 limit=40427 [ 1357.719238][ T7464] loop0: detected capacity change from 0 to 40427 [ 1357.725871][T30548] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1357.733258][T30548] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1357.740350][T30548] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1357.749983][ T7464] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1357.761680][T30548] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1357.779787][ T7464] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1357.789487][T30548] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1357.807742][T30548] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1357.816856][T30548] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1357.856479][ T7464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1358.044491][ T7464] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1358.065693][ T7464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1358.239967][ T29] audit: type=1804 audit(2134218252.021:1813): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.14952" name="/newroot/145/bus/file0" dev="loop0" ino=10 res=1 errno=0 [ 1358.728207][ T7529] loop1: detected capacity change from 0 to 1024 [ 1359.154304][T16810] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1359.363145][T16810] usb 6-1: Using ep0 maxpacket: 32 [ 1359.373909][T16810] usb 6-1: config 0 has no interfaces? [ 1359.385956][T16810] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1359.412034][T16810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.437257][T16810] usb 6-1: Product: syz [ 1359.466048][T16810] usb 6-1: Manufacturer: syz [ 1359.470703][T16810] usb 6-1: SerialNumber: syz [ 1359.513118][T16810] usb 6-1: config 0 descriptor?? [ 1359.727953][ T7534] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1359.752765][T16810] usb 6-1: USB disconnect, device number 85 [ 1359.905357][ T7560] binder: 7558:7560 ioctl c0306201 200002c0 returned -14 [ 1360.374327][ T5300] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1360.637477][ T5300] usb 2-1: config 0 has an invalid interface number: 103 but max is 0 [ 1360.651657][ T5300] usb 2-1: config 0 has no interface number 0 [ 1360.690131][ T5300] usb 2-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=de.4d [ 1360.729708][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.756565][ T5300] usb 2-1: Product: syz [ 1360.760795][ T5300] usb 2-1: Manufacturer: syz [ 1360.784635][ T5300] usb 2-1: SerialNumber: syz [ 1360.811332][ T5300] usb 2-1: config 0 descriptor?? [ 1361.052568][ T5300] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in warm state. [ 1361.092164][ T5300] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1361.142269][ T5300] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 1361.166023][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.176924][ T5300] usb 2-1: media controller created [ 1361.195244][ T5300] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1361.354356][ T7565] loop0: detected capacity change from 0 to 32768 [ 1361.359895][ T5300] DVB: Unable to find symbol dib8000_attach() [ 1361.381608][ T5300] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 1361.410862][ T5300] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1361.437006][ T5300] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 1361.458203][ T5300] usb 2-1: media controller created [ 1361.475577][ T5300] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1361.502560][ T29] audit: type=1800 audit(2134218255.301:1814): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14993" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1361.559954][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15007'. [ 1361.670496][ T5300] DVB: Unable to find symbol dib8000_attach() [ 1361.681904][ T5300] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 1361.697365][ T7600] binder: 7599:7600 ioctl 400c620e 200003c0 returned -22 [ 1361.738078][ T7605] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15011'. [ 1361.760218][ T7603] netlink: 'syz.3.15012': attribute type 13 has an invalid length. [ 1361.770530][ T7605] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1361.798987][ T7603] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.15012'. [ 1361.894905][ T5300] rc_core: IR keymap rc-dib0700-rc5 not found [ 1361.914991][ T5300] Registered IR keymap rc-empty [ 1361.933675][ T5300] dvb-usb: could not initialize remote control. [ 1361.956235][ T5300] dvb-usb: DiBcom STK8096-PVR reference design successfully initialized and connected. [ 1362.006476][ T5300] usb 2-1: USB disconnect, device number 89 [ 1362.090386][ T5300] dvb-usb: DiBcom STK8096-PVR reference design successfully deinitialized and disconnected. [ 1363.356338][ T7650] sctp: [Deprecated]: syz.5.15030 (pid 7650) Use of int in max_burst socket option. [ 1363.356338][ T7650] Use struct sctp_assoc_value instead [ 1363.390911][ T7655] netlink: 'syz.4.15033': attribute type 15 has an invalid length. [ 1363.625227][ T7663] loop2: detected capacity change from 0 to 256 [ 1363.656169][ T7663] exfat: Deprecated parameter 'utf8' [ 1363.675854][ T7663] exfat: Deprecated parameter 'namecase' [ 1363.706074][ T7663] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1363.828343][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15040'. [ 1364.360031][ T7686] tun0: tun_chr_ioctl cmd 1074025675 [ 1364.371710][ T7686] tun0: persist disabled [ 1365.132864][ T7707] loop1: detected capacity change from 0 to 1764 [ 1365.224784][ T7713] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15062'. [ 1365.266632][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15062'. [ 1365.314048][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.342913][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.350186][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.471431][ T7722] netlink: 'syz.1.15065': attribute type 1 has an invalid length. [ 1365.494256][ T7722] netlink: 'syz.1.15065': attribute type 2 has an invalid length. [ 1365.522326][ T7722] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1366.091705][ T5300] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1366.311926][ T5300] usb 2-1: Using ep0 maxpacket: 16 [ 1366.321148][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.366031][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.391976][ T5300] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1366.430792][ T5300] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1366.463745][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.499233][ T5300] usb 2-1: config 0 descriptor?? [ 1366.970809][ T5300] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 1367.054015][ T5300] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0092/input/input97 [ 1367.095258][ T5300] microsoft 0003:045E:07DA.0092: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1367.149500][ T7786] netlink: 'syz.0.15096': attribute type 11 has an invalid length. [ 1367.300630][ T5302] usb 2-1: USB disconnect, device number 90 [ 1368.074440][ T7814] loop0: detected capacity change from 0 to 1024 [ 1368.151402][ T7814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.269348][ T7790] loop2: detected capacity change from 0 to 40427 [ 1368.280894][ T7790] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 1368.287809][ T7790] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1368.292719][ T7814] EXT4-fs error (device loop0): ext4_xattr_ibody_list:797: inode #2: comm syz.0.15109: corrupted in-inode xattr: bad e_name length [ 1368.303640][ T7790] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1368.405627][ T4947] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2792: inode #2: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 1368.543936][ T7790] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1368.574040][ T7790] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1368.622922][ T29] audit: type=1800 audit(2134218262.421:1815): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15098" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 1368.647914][ T7790] syz.2.15098: attempt to access beyond end of device [ 1368.647914][ T7790] loop2: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 1368.673112][ T7790] syz.2.15098: attempt to access beyond end of device [ 1368.673112][ T7790] loop2: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 1368.708909][ T7790] syz.2.15098: attempt to access beyond end of device [ 1368.708909][ T7790] loop2: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 1368.739551][ T4947] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1368.766728][ T7843] syz.2.15098: attempt to access beyond end of device [ 1368.766728][ T7843] loop2: rw=2049, sector=53336, nr_sectors = 8 limit=40427 [ 1368.826285][ T4947] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1368.886280][ T7845] loop1: detected capacity change from 0 to 2048 [ 1369.000543][T28037] syz-executor: attempt to access beyond end of device [ 1369.000543][T28037] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1369.025427][ T7845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.044871][T28037] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1369.163795][T20282] Bluetooth: hci8: command 0x0405 tx timeout [ 1369.193205][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15126'. [ 1369.203623][T16810] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1369.280040][T31511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.353785][ T4947] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.417521][T16810] usb 5-1: Using ep0 maxpacket: 16 [ 1369.465346][T16810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.489338][T16810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.514696][T16810] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1369.555129][T16810] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1369.579211][T16810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.632941][T16810] usb 5-1: config 0 descriptor?? [ 1369.711871][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.059907][T16810] microsoft 0003:045E:07DA.0093: unknown main item tag 0x0 [ 1370.114494][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.133268][T16810] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0093/input/input98 [ 1370.196800][T16810] microsoft 0003:045E:07DA.0093: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1370.426972][T16810] usb 5-1: USB disconnect, device number 103 [ 1370.515833][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.552494][ T7874] block nbd5: shutting down sockets [ 1370.741787][ T5302] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1370.829155][ T7876] overlay: Unknown parameter '\*À¥$Àe\6Àå\>À\1À•\9ÀU\5ÀÕ\' [ 1370.915211][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.971845][ T5302] usb 3-1: Using ep0 maxpacket: 8 [ 1370.989565][ T5302] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1371.004822][ T5302] usb 3-1: config 179 has no interface number 0 [ 1371.047180][ T5302] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1371.105712][ T5302] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1371.172873][ T7886] trusted_key: encrypted_key: keyword 'upZate' not recognized [ 1371.175842][ T5302] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1371.192099][ T6052] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1371.205072][ T6052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1371.212289][ T5302] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1371.238332][ T6052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1371.261996][ T6052] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1371.268304][ T5302] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1371.286076][ T5302] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1371.295380][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.295654][ T6052] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1371.312407][ T6052] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1371.321967][ T7872] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1371.493537][ T7895] tun0: tun_chr_ioctl cmd 1074025677 [ 1371.499020][ T7895] tun0: linktype set to 778 [ 1371.542734][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15144'. [ 1371.658696][ T5302] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input99 [ 1371.794919][ T53] bridge_slave_1: left allmulticast mode [ 1371.801179][ T53] bridge_slave_1: left promiscuous mode [ 1371.862199][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.940124][ T5302] usb 3-1: USB disconnect, device number 58 [ 1371.946116][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1371.946167][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1371.993041][ T53] bridge_slave_0: left allmulticast mode [ 1372.021532][ T7908] 9pnet_fd: Insufficient options for proto=fd [ 1372.022969][ T53] bridge_slave_0: left promiscuous mode [ 1372.034208][ T5302] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1372.067117][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.205387][ T5239] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1372.411854][ T5239] usb 6-1: Using ep0 maxpacket: 8 [ 1372.435285][ T5239] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1372.457332][ T5239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.476671][ T5239] usb 6-1: Product: syz [ 1372.486690][ T5239] usb 6-1: Manufacturer: syz [ 1372.498131][ T5239] usb 6-1: SerialNumber: syz [ 1372.520806][ T5239] usb 6-1: config 0 descriptor?? [ 1372.542131][ T5239] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1372.892113][ T5300] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1373.149177][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.170271][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.198577][ T5300] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1373.235526][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.259943][ T5300] usb 2-1: config 0 descriptor?? [ 1373.366098][ T5239] gspca_sq930x: ucbus_write failed -71 [ 1373.372063][ T5239] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 1373.401369][ T5239] usb 6-1: USB disconnect, device number 86 [ 1373.414591][T20282] Bluetooth: hci1: command tx timeout [ 1373.479727][ T5300] usbhid 2-1:0.0: can't add hid device: -71 [ 1373.492957][ T5300] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1373.519841][ T5300] usb 2-1: USB disconnect, device number 91 [ 1373.563821][ T7927] vivid-004: ================= START STATUS ================= [ 1373.587933][ T7927] vivid-004: Radio HW Seek Mode: Bounded [ 1373.599075][ T7927] vivid-004: Radio Programmable HW Seek: false [ 1373.605443][ T7927] vivid-004: RDS Rx I/O Mode: Block I/O [ 1373.614287][ T7927] vivid-004: Generate RBDS Instead of RDS: false [ 1373.621475][ T7927] vivid-004: RDS Reception: true [ 1373.626647][ T7927] vivid-004: RDS Program Type: 0 inactive [ 1373.632874][ T7927] vivid-004: RDS PS Name: inactive [ 1373.645998][ T7927] vivid-004: RDS Radio Text: inactive [ 1373.661702][ T7927] vivid-004: RDS Traffic Announcement: false inactive [ 1373.671619][ T7927] vivid-004: RDS Traffic Program: false inactive [ 1373.682067][ T7927] vivid-004: RDS Music: false inactive [ 1373.692189][ T7927] vivid-004: ================== END STATUS ================== [ 1373.835032][ T7933] netlink: 188 bytes leftover after parsing attributes in process `syz.2.15159'. [ 1373.853167][ T7933] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15159'. [ 1374.149935][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.185433][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.200722][ T53] bond0 (unregistering): Released all slaves [ 1374.421915][ T7951] loop1: detected capacity change from 0 to 64 [ 1374.515655][ T7951] Trying to free block not in datazone [ 1374.567232][ T7951] Trying to free block not in datazone [ 1374.573368][ T7951] Trying to free block not in datazone [ 1374.589100][ T7951] Trying to free block not in datazone [ 1374.609325][ T7951] Trying to free block not in datazone [ 1374.635383][ T7951] minix_free_block (loop1:6): bit already cleared [ 1374.671772][ T7951] Trying to free block not in datazone [ 1374.701865][ T7951] Trying to free block not in datazone [ 1375.041411][ T7975] program syz.5.15177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1375.057534][ T7973] loop1: detected capacity change from 0 to 2048 [ 1375.157927][ T7978] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1375.163019][ T7977] loop2: detected capacity change from 0 to 512 [ 1375.182436][ T7977] EXT4-fs: Ignoring removed i_version option [ 1375.209357][ T7977] EXT4-fs: Ignoring removed nobh option [ 1375.234409][ T7977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1375.367414][ T7977] EXT4-fs (loop2): 1 truncate cleaned up [ 1375.442126][ T7977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.482006][T20282] Bluetooth: hci1: command tx timeout [ 1375.551977][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 1375.701989][T28037] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /722/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1375.802460][T28037] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1375.867431][T28037] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /722/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1375.906681][T28037] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1375.919280][ T7993] loop1: detected capacity change from 0 to 1024 [ 1375.935981][T28037] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /722/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1375.975952][T28037] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1375.996592][ T53] hsr_slave_0: left promiscuous mode [ 1376.022311][T28037] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /722/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1376.044247][ T53] hsr_slave_1: left promiscuous mode [ 1376.082936][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.090422][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.109892][T28037] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1376.171262][T28037] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /722/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1376.192977][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.193027][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.215665][T28037] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1376.273504][T28269] hfsplus: b-tree write err: -5, ino 4 [ 1376.342066][ T53] veth1_macvtap: left promiscuous mode [ 1376.350279][ T53] veth0_macvtap: left promiscuous mode [ 1376.422687][ T53] veth1_vlan: left promiscuous mode [ 1376.428116][ T53] veth0_vlan: left promiscuous mode [ 1376.872513][ T7980] loop5: detected capacity change from 0 to 40427 [ 1376.911874][ T7980] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1376.942385][ T7980] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1376.982739][ T7980] F2FS-fs (loop5): invalid crc value [ 1376.996001][ T7980] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1377.142562][ T7980] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1377.154321][ T7980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1377.224863][ T29] audit: type=1800 audit(2134218271.021:1816): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15179" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 1377.337747][ T7980] syz.5.15179: attempt to access beyond end of device [ 1377.337747][ T7980] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1377.405198][ T7980] syz.5.15179: attempt to access beyond end of device [ 1377.405198][ T7980] loop5: rw=2049, sector=77824, nr_sectors = 832 limit=40427 [ 1377.561839][ T6052] Bluetooth: hci1: command tx timeout [ 1377.601204][ T2649] syz-executor: attempt to access beyond end of device [ 1377.601204][ T2649] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1377.653027][ T2649] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1378.602047][ T6052] Bluetooth: hci3: command 0x0406 tx timeout [ 1379.260624][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1379.532039][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1379.642145][T20282] Bluetooth: hci1: command tx timeout [ 1381.221500][T28037] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.480379][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.518953][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.552413][ T7884] bridge_slave_0: entered allmulticast mode [ 1381.589151][ T7884] bridge_slave_0: entered promiscuous mode [ 1381.625908][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.641771][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.652688][ T7884] bridge_slave_1: entered allmulticast mode [ 1381.660312][ T7884] bridge_slave_1: entered promiscuous mode [ 1381.895767][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.935604][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.134335][ T7884] team0: Port device team_slave_0 added [ 1382.186164][ T7884] team0: Port device team_slave_1 added [ 1382.309384][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.329644][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.410379][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.449966][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.455098][ T6052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1382.474305][ T6052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1382.477576][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.509151][ T6052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1382.552723][ T6052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1382.560692][ T6052] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1382.571115][ T6052] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1382.571802][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.691456][ T6052] Bluetooth: hci6: unexpected event for opcode 0x2040 [ 1382.898222][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.958900][ T7884] hsr_slave_0: entered promiscuous mode [ 1382.978674][ T7884] hsr_slave_1: entered promiscuous mode [ 1383.005476][ T7884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1383.023722][ T7884] Cannot create hsr debugfs directory [ 1383.170009][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.362350][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.391744][ T5239] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1383.405274][ T8115] netlink: 'syz.1.15237': attribute type 21 has an invalid length. [ 1383.416923][ T8115] netlink: 'syz.1.15237': attribute type 1 has an invalid length. [ 1383.560560][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.633953][ T5239] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1383.643537][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.676142][ T5239] usb 5-1: config 0 descriptor?? [ 1383.686576][ T5239] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1383.798464][ T8130] 9p: Unknown access argument 18446744073709551615: -34 [ 1384.108348][ T8138] loop1: detected capacity change from 0 to 512 [ 1384.137542][ T8138] EXT4-fs: Ignoring removed bh option [ 1384.170455][ T8138] EXT4-fs error (device loop1): __ext4_iget:4985: inode #15: block 1803188595: comm syz.1.15248: invalid block [ 1384.234136][ T8138] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.15248: couldn't read orphan inode 15 (err -117) [ 1384.248539][ T8138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.452694][ T29] audit: type=1326 audit(2134218278.251:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.5.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1384.488325][ T29] audit: type=1326 audit(2134218278.251:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.5.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1384.501421][ T5239] gspca_cpia1: usb_control_msg 02, error -71 [ 1384.518599][ T29] audit: type=1326 audit(2134218278.251:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.5.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1384.523638][T31511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.541178][ T29] audit: type=1326 audit(2134218278.251:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.5.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1384.541241][ T29] audit: type=1326 audit(2134218278.261:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.5.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1384.541298][ T29] audit: type=1326 audit(2134218278.261:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.5.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc112d7def9 code=0x7ffc0000 [ 1384.591829][ T5239] gspca_cpia1: usb_control_msg 05, error -71 [ 1384.691889][ T5239] gspca_cpia1: usb_control_msg 04, error -71 [ 1384.692474][ T6052] Bluetooth: hci7: command tx timeout [ 1384.709550][ T5239] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 1384.734076][ T5239] usb 5-1: USB disconnect, device number 104 [ 1384.767954][ T53] bridge_slave_1: left allmulticast mode [ 1384.785930][ T53] bridge_slave_1: left promiscuous mode [ 1384.791823][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.842871][ T53] bridge_slave_0: left allmulticast mode [ 1384.848583][ T53] bridge_slave_0: left promiscuous mode [ 1384.872626][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.797137][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.813286][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.835059][ T53] bond0 (unregistering): Released all slaves [ 1386.051269][ C0] hrtimer: interrupt took 1650232 ns [ 1386.429586][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15260'. [ 1386.772325][ T6052] Bluetooth: hci7: command tx timeout [ 1386.861802][ T5239] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1387.091868][ T5239] usb 2-1: Using ep0 maxpacket: 8 [ 1387.122033][ T5239] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 1387.151982][ T5239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.166133][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15275'. [ 1387.191750][ T5239] usb 2-1: Product: syz [ 1387.221529][ T5239] usb 2-1: Manufacturer: syz [ 1387.249183][ T5239] usb 2-1: SerialNumber: syz [ 1387.293361][ T5239] usb 2-1: config 0 descriptor?? [ 1387.859815][ T8092] chnl_net:caif_netlink_parms(): no params data found [ 1387.979324][ T5239] usb 2-1: USB disconnect, device number 92 [ 1388.052386][ T53] hsr_slave_0: left promiscuous mode [ 1388.166879][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.188803][ T53] hsr_slave_1: left promiscuous mode [ 1388.255176][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1388.291810][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.342987][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.363153][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.457259][ T53] veth1_macvtap: left promiscuous mode [ 1388.475127][ T53] veth0_macvtap: left promiscuous mode [ 1388.489085][ T53] veth1_vlan: left promiscuous mode [ 1388.499939][ T53] @ÿÿÿ: left promiscuous mode [ 1388.852660][ T6052] Bluetooth: hci7: command tx timeout [ 1389.302066][ T5239] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1389.491894][ T5239] usb 6-1: Using ep0 maxpacket: 16 [ 1389.511389][ T5239] usb 6-1: too many configurations: 20, using maximum allowed: 8 [ 1389.564227][ T5239] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1389.575117][ T5239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=176 [ 1389.584422][ T5239] usb 6-1: Product: syz [ 1389.589316][ T5239] usb 6-1: Manufacturer: syz [ 1389.594517][ T5239] usb 6-1: SerialNumber: syz [ 1389.607080][ T5239] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1389.616462][ T5239] r8152-cfgselector 6-1: config 0 descriptor?? [ 1389.896680][ T5239] r8152-cfgselector 6-1: USB disconnect, device number 87 [ 1389.904811][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1389.990615][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1390.931895][ T6052] Bluetooth: hci7: command tx timeout [ 1391.218502][ T7884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1391.238163][ T7884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1391.371010][ T7884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1391.602711][ T7884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1391.609653][ T8230] loop1: detected capacity change from 0 to 128 [ 1391.632337][ T8221] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1391.638950][ T8221] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1392.041868][T16810] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1392.201734][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.210858][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.222479][ T8221] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1392.236277][ T8092] bridge_slave_0: entered allmulticast mode [ 1392.244250][ T8092] bridge_slave_0: entered promiscuous mode [ 1392.251910][T16810] usb 5-1: Using ep0 maxpacket: 8 [ 1392.257707][ T8221] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1392.268491][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.296415][T16810] usb 5-1: config index 0 descriptor too short (expected 237, got 36) [ 1392.297235][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.327010][ T8092] bridge_slave_1: entered allmulticast mode [ 1392.336155][T16810] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1392.339473][ T8092] bridge_slave_1: entered promiscuous mode [ 1392.349242][T16810] usb 5-1: config 0 has no interfaces? [ 1392.363670][T16810] usb 5-1: config index 1 descriptor too short (expected 237, got 36) [ 1392.373364][T16810] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1392.390198][T16810] usb 5-1: config 0 has no interfaces? [ 1392.407582][T16810] usb 5-1: config index 2 descriptor too short (expected 237, got 36) [ 1392.443761][T16810] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1392.488036][T16810] usb 5-1: config 0 has no interfaces? [ 1392.534252][ T8221] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1392.540951][ T8221] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1392.565115][T16810] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1392.575675][T16810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.594829][T16810] usb 5-1: Product: syz [ 1392.599655][T16810] usb 5-1: Manufacturer: syz [ 1392.630354][T16810] usb 5-1: SerialNumber: syz [ 1392.640277][T16810] usb 5-1: config 0 descriptor?? [ 1392.670373][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.804724][ T8253] loop1: detected capacity change from 0 to 64 [ 1392.846677][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.874645][ T8221] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1392.915658][ T8221] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1392.960631][ T5239] usb 5-1: USB disconnect, device number 105 [ 1393.144316][ T8092] team0: Port device team_slave_0 added [ 1393.170954][ T8092] team0: Port device team_slave_1 added [ 1393.309021][ T8221] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1393.339054][ T8221] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1393.436434][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.451069][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.517687][ T8092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.552141][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.566942][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.644126][ T8092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.885410][ T8221] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1393.962353][ T8221] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1394.005612][ T8221] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1394.012501][ T8221] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1394.193402][ T8092] hsr_slave_0: entered promiscuous mode [ 1394.222084][ T8092] hsr_slave_1: entered promiscuous mode [ 1394.250902][ T8092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1394.269225][ T8092] Cannot create hsr debugfs directory [ 1394.348869][ T8274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15308'. [ 1394.400575][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.635998][ T8284] binder: BC_ACQUIRE_RESULT not supported [ 1394.662965][ T8284] binder: 8283:8284 ioctl c0306201 20000480 returned -22 [ 1394.686681][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.804353][T28269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.813551][T28269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.836814][T28269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.844056][T28269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.871306][ T8286] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15313'. [ 1395.910875][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.265421][ T7884] veth0_vlan: entered promiscuous mode [ 1396.320218][ T7884] veth1_vlan: entered promiscuous mode [ 1396.498338][ T8092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1396.537692][ T7884] veth0_macvtap: entered promiscuous mode [ 1396.585228][ T8092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1396.636736][ T8092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1396.704157][ T7884] veth1_macvtap: entered promiscuous mode [ 1396.734612][ T8092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1396.858858][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.881375][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.909568][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.930938][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.950721][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.987355][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.024203][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.059640][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.088547][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.108474][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.127004][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.145477][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.168433][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1397.206697][ T8351] netlink: 'syz.1.15340': attribute type 1 has an invalid length. [ 1397.255037][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.280152][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.302721][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.358155][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.385574][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.416519][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.438316][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.456669][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.473551][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.496956][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.530978][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.542421][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.562960][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.639071][ T7884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.694446][ T7884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.725970][ T7884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.761097][ T7884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.157267][ T8092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.241828][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.269358][ T8092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.281918][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.365354][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.372603][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.431857][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.439327][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.502001][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.509877][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.358863][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.542872][ T8368] loop5: detected capacity change from 0 to 32768 [ 1399.643514][ T8092] veth0_vlan: entered promiscuous mode [ 1399.708553][ T8092] veth1_vlan: entered promiscuous mode [ 1399.931336][ T8092] veth0_macvtap: entered promiscuous mode [ 1399.984313][ T8092] veth1_macvtap: entered promiscuous mode [ 1400.097113][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.159348][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.199886][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.252722][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.311440][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.354251][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.396938][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.442422][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.453821][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.467761][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.479185][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.490121][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.500279][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.546805][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.579863][ T8426] loop1: detected capacity change from 0 to 256 [ 1400.605349][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.660268][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.693631][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.728629][ T8426] FAT-fs (loop1): Directory bread(block 64) failed [ 1400.745581][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.759479][ T8426] FAT-fs (loop1): Directory bread(block 65) failed [ 1400.787435][ T8426] FAT-fs (loop1): Directory bread(block 66) failed [ 1400.794416][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.822889][ T8426] FAT-fs (loop1): Directory bread(block 67) failed [ 1400.829592][ T8426] FAT-fs (loop1): Directory bread(block 68) failed [ 1400.848155][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.902076][ T8426] FAT-fs (loop1): Directory bread(block 69) failed [ 1400.908969][ T8426] FAT-fs (loop1): Directory bread(block 70) failed [ 1400.922108][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.942275][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.956777][ T8426] FAT-fs (loop1): Directory bread(block 71) failed [ 1400.969033][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.988023][ T8426] FAT-fs (loop1): Directory bread(block 72) failed [ 1401.001486][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.023011][ T8426] FAT-fs (loop1): Directory bread(block 73) failed [ 1401.039760][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.065012][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.100216][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.131713][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.170867][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.206874][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.344668][ T8092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.386970][ T8092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.411780][ T8092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.445196][ T8092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.860716][ T8456] macsec1: entered promiscuous mode [ 1401.892548][ T8456] macsec1: entered allmulticast mode [ 1401.913316][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.954587][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.087990][T28269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.128398][T28269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.559509][ T8476] netlink: 'syz.5.15397': attribute type 10 has an invalid length. [ 1402.604401][ T7890] kernel write not supported for file /amidi2 (pid: 7890 comm: kworker/1:1) [ 1403.108213][ T8495] loop0: detected capacity change from 0 to 256 [ 1403.165769][ T8495] exfat: Deprecated parameter 'namecase' [ 1403.222249][ T8495] exfat: Deprecated parameter 'utf8' [ 1403.353602][ T8495] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1403.379412][ T8500] loop5: detected capacity change from 0 to 2048 [ 1403.468083][ T8500] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1403.644386][ T7890] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1403.683431][ T5301] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1403.848900][ T7890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.879442][ T7890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1403.910828][ T7890] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1403.926850][ T5301] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1403.940613][ T7890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1403.958495][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.971482][ T7890] usb 3-1: SerialNumber: syz [ 1403.991340][ T5301] usb 5-1: config 0 descriptor?? [ 1404.013280][ T5301] cp210x 5-1:0.0: cp210x converter detected [ 1404.230448][ T8526] loop5: detected capacity change from 0 to 512 [ 1404.233177][ T7890] usb 3-1: 0:2 : does not exist [ 1404.307559][ T7890] usb 3-1: USB disconnect, device number 59 [ 1404.758401][ T8512] loop1: detected capacity change from 0 to 32768 [ 1404.821818][ T8512] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1404.854250][ T5301] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1404.873053][ T5301] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1404.905927][ T5301] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1404.936030][ T5301] usb 5-1: USB disconnect, device number 106 [ 1404.963114][ T5301] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1404.982885][ T8512] XFS (loop1): Ending clean mount [ 1405.012358][ T5301] cp210x 5-1:0.0: device disconnected [ 1405.314354][T31511] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1406.040409][ T8570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15440'. [ 1406.153557][ T8573] ALSA: mixer_oss: invalid OSS volume '' [ 1406.415494][ T8582] loop5: detected capacity change from 0 to 128 [ 1406.466927][ T8582] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1406.482038][ T8582] ext4 filesystem being mounted at /470/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.511783][ T5239] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1406.549075][ T8588] loop2: detected capacity change from 0 to 1024 [ 1406.598594][ T2649] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1406.647459][ T8588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.734334][ T8591] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1406.737492][ T5239] usb 5-1: Using ep0 maxpacket: 8 [ 1406.815274][ T5239] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1406.841732][ T5239] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1406.868625][ T5239] usb 5-1: config 0 has no interface number 0 [ 1406.886032][ T5239] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1406.931336][ T5239] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1406.971764][ T5239] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1407.033979][ T5239] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1407.074741][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1407.109011][ T8092] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1407.135016][ T5239] usb 5-1: Product: syz [ 1407.150879][ T8092] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1407.153499][ T5239] usb 5-1: config 0 descriptor?? [ 1407.187487][ T8603] netlink: 136 bytes leftover after parsing attributes in process `syz.0.15452'. [ 1407.209271][ T8] IPVS: starting estimator thread 0... [ 1407.220227][ T8575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1407.239292][ T8603] netlink: 89 bytes leftover after parsing attributes in process `syz.0.15452'. [ 1407.332514][ T8604] IPVS: using max 16 ests per chain, 38400 per kthread [ 1407.584802][ T8609] loop0: detected capacity change from 0 to 1024 [ 1407.696918][ T8092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.831012][T28269] hfsplus: b-tree write err: -5, ino 4 [ 1407.923831][ T5239] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input102 [ 1408.041441][ T8620] loop0: detected capacity change from 0 to 128 [ 1408.113232][ T8620] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1408.127297][ T8620] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.154147][ T8620] fscrypt (loop0, inode 12): Unsupported encryption flags (0xf9) [ 1408.252278][ T7884] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1408.335264][ T2944] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.501401][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1408.512589][ T5239] usb 5-1: USB disconnect, device number 107 [ 1408.606373][ T2944] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.908711][ T2944] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.232434][ T2944] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.511991][ T936] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1409.742125][ T936] usb 2-1: Using ep0 maxpacket: 16 [ 1409.778298][ T936] usb 2-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 1409.832704][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.892464][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 101, changing to 10 [ 1409.958020][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24675, setting to 1024 [ 1410.021763][ T936] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1410.064275][T20282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1410.082422][T20282] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1410.095144][ T936] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1410.108845][T20282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1410.123528][T20282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1410.131963][ T936] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1410.140444][ T2944] bridge_slave_1: left allmulticast mode [ 1410.140717][T20282] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1410.155720][T20282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1410.163926][ T2944] bridge_slave_1: left promiscuous mode [ 1410.169941][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.181799][ T936] usb 2-1: Manufacturer: syz [ 1410.248049][ T936] usb 2-1: config 0 descriptor?? [ 1410.286071][ T936] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 1410.307607][ T2944] bridge_slave_0: left allmulticast mode [ 1410.321839][ T936] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 1410.341921][ T2944] bridge_slave_0: left promiscuous mode [ 1410.369107][ T936] usbhid 2-1:0.0: can't add hid device: -22 [ 1410.385990][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.411895][ T936] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1410.556642][ T936] usb 2-1: USB disconnect, device number 93 [ 1410.901230][ T8630] loop0: detected capacity change from 0 to 40427 [ 1410.930280][ T8630] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1410.959312][ T8630] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1411.020504][ T8630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1411.298874][ T8630] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1411.306496][ T8630] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1411.335810][ T8661] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.15477'. [ 1411.411388][ T8661] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 1412.313830][ T6052] Bluetooth: hci7: command tx timeout [ 1412.661413][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.689370][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.763704][ T2944] bond0 (unregistering): Released all slaves [ 1412.803096][ T8664] loop5: detected capacity change from 0 to 32768 [ 1413.001359][ T8664] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1413.275210][ T8664] XFS (loop5): Ending clean mount [ 1413.289307][ T8664] XFS (loop5): Quotacheck needed: Please wait. [ 1413.420104][ T8664] XFS (loop5): Quotacheck: Done. [ 1413.574541][ T8680] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1414.272308][ T8703] loop0: detected capacity change from 0 to 512 [ 1414.362619][ T6052] Bluetooth: hci7: command tx timeout [ 1414.459074][ T8703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.512034][ T8703] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1414.607887][ T2649] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1414.764479][ T8713] loop1: detected capacity change from 0 to 1024 [ 1414.831922][ T2944] hsr_slave_0: left promiscuous mode [ 1414.844312][ T7884] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.875622][ T2944] hsr_slave_1: left promiscuous mode [ 1414.941451][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1414.962245][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.013111][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.046459][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.283480][ T2944] veth1_macvtap: left promiscuous mode [ 1415.295981][ T2944] veth0_macvtap: left promiscuous mode [ 1415.317865][ T2944] veth1_vlan: left promiscuous mode [ 1415.334937][ T2944] veth0_vlan: left promiscuous mode [ 1415.672583][ T8738] loop5: detected capacity change from 0 to 256 [ 1416.453561][ T6052] Bluetooth: hci7: command tx timeout [ 1418.522331][ T6052] Bluetooth: hci7: command tx timeout [ 1418.623260][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 1418.788069][ T2944] team0 (unregistering): Port device team_slave_0 removed [ 1420.050731][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15498'. [ 1420.487206][ T8643] chnl_net:caif_netlink_parms(): no params data found [ 1420.699714][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15538'. [ 1420.876931][ T8806] loop5: detected capacity change from 0 to 4096 [ 1420.922208][ T8806] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 1421.036196][ T8806] ntfs3: loop5: Failed to load $Extend (-22). [ 1421.077607][ T8806] ntfs3: loop5: Failed to initialize $Extend. [ 1421.244058][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.272058][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.308958][ T8643] bridge_slave_0: entered allmulticast mode [ 1421.360171][ T8643] bridge_slave_0: entered promiscuous mode [ 1421.405620][ T8643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.428506][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.452528][ T8643] bridge_slave_1: entered allmulticast mode [ 1421.461159][ T8643] bridge_slave_1: entered promiscuous mode [ 1421.716035][ T8643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.794074][ T8643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.947288][ T8842] loop5: detected capacity change from 0 to 512 [ 1421.981890][ T8842] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1422.052651][ T8842] EXT4-fs (loop5): 1 truncate cleaned up [ 1422.070946][ T8842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.165250][ T8643] team0: Port device team_slave_0 added [ 1422.213872][ T8643] team0: Port device team_slave_1 added [ 1422.291317][ T8847] loop0: detected capacity change from 0 to 512 [ 1422.363538][ T2649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.392692][ T8847] EXT4-fs: Ignoring removed bh option [ 1422.399075][ T8847] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1422.490381][ T8847] EXT4-fs (loop0): 1 truncate cleaned up [ 1422.500019][ T8847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.612441][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.668277][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.691642][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.708220][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15555'. [ 1422.756381][ T7884] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.771259][ T8643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.858103][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.897803][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.011453][ T8643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.082006][ T8861] loop5: detected capacity change from 0 to 512 [ 1423.126244][ T8861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.154819][ T8861] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1423.267077][ T8643] hsr_slave_0: entered promiscuous mode [ 1423.284731][ T8643] hsr_slave_1: entered promiscuous mode [ 1423.323312][ T8643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1423.349566][ T8643] Cannot create hsr debugfs directory [ 1423.496227][ T2649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.788903][ T8857] orangefs_mount: mount request failed with -4 [ 1425.541971][ T8643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1425.568376][ T8643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1425.599300][ T8643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1425.648933][ T8643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1425.884599][ T8897] loop1: detected capacity change from 0 to 1024 [ 1425.967762][ T8897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1425.973008][ T8899] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1426.020974][ T8897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1426.055526][ T8899] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1426.093348][ T8897] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.15573: reserved inode found cleared - inode=18 [ 1426.180285][T31511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.424129][ T8643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.520019][ T8643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.578839][T28269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.586170][T28269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.630081][T28269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.637325][T28269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.052909][ T8] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1427.291780][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1427.327961][ T8] usb 6-1: config 0 has no interfaces? [ 1427.350978][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1427.392335][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.426389][ T8] usb 6-1: Product: syz [ 1427.444820][ T8] usb 6-1: Manufacturer: syz [ 1427.465211][ T8] usb 6-1: SerialNumber: syz [ 1427.510413][ T8] usb 6-1: config 0 descriptor?? [ 1427.590050][ T8643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.781427][ T8643] veth0_vlan: entered promiscuous mode [ 1427.804351][ T5239] usb 6-1: USB disconnect, device number 88 [ 1427.859940][ T8643] veth1_vlan: entered promiscuous mode [ 1427.981341][ T8643] veth0_macvtap: entered promiscuous mode [ 1428.064331][ T8643] veth1_macvtap: entered promiscuous mode [ 1428.158567][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.192550][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.241809][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.272053][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.302542][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.335981][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.386038][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.431732][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.472501][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.511750][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.561117][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.602336][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.617437][ T8917] loop1: detected capacity change from 0 to 40427 [ 1428.655040][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.667549][ T8917] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1428.701763][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.715909][ T8917] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1428.729986][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.753851][ T8917] F2FS-fs (loop1): invalid crc value [ 1428.804423][ T8917] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1428.816064][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.863427][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.870704][ T8929] loop0: detected capacity change from 0 to 32768 [ 1428.893673][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.952730][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.965943][ T8929] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1429.004868][ T8929] XFS (loop0): Ending clean mount [ 1429.031439][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.107880][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.118157][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.128781][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.140081][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.152506][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.163537][ T8917] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1429.175903][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.188252][ T8917] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1429.202170][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.234422][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.279059][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.317855][ T8965] usb usb8: usbfs: process 8965 (syz.4.15596) did not claim interface 0 before use [ 1429.322670][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.347118][ T7884] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1429.426975][ T8643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.438216][ T8643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.450015][ T8643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.471749][ T8643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.834475][T28269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.861897][T28269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.982046][T28269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.042266][T28269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.136311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.332911][ T9031] CIFS mount error: No usable UNC path provided in device string! [ 1432.332911][ T9031] [ 1432.422153][ T9031] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1432.579398][ T9037] loop0: detected capacity change from 0 to 512 [ 1432.719826][ T9037] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1432.748389][ T9037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1432.796426][ T9037] System zones: 0-1, 15-15, 18-18, 34-34 [ 1432.853452][ T9037] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1432.860709][ T9037] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1432.967973][ T9055] ip6gretap0: entered promiscuous mode [ 1432.979598][ T9037] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1433.002374][ T9037] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1433.017503][ T9037] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.15627: bad orphan inode 16 [ 1433.052475][ T9055] ip6gretap0: left promiscuous mode [ 1433.070209][ T9037] ext4_test_bit(bit=15, block=18) = 1 [ 1433.115132][ T9037] is_bad_inode(inode)=0 [ 1433.119350][ T9037] NEXT_ORPHAN(inode)=0 [ 1433.162189][ T9037] max_ino=32 [ 1433.165461][ T9037] i_nlink=2 [ 1433.170168][ T9037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1433.285994][ T9061] loop5: detected capacity change from 0 to 24 [ 1433.374115][ T9061] overlayfs: failed to clone lowerpath [ 1433.513513][ T7884] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.758492][ T9070] loop0: detected capacity change from 0 to 8 [ 1433.915633][ T9077] kernel read not supported for file /cpuacct.usage_percpu_user (pid: 9077 comm: syz.5.15643) [ 1433.976175][ T29] audit: type=1800 audit(2134218327.761:1823): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15643" name="cpuacct.usage_percpu_user" dev="mqueue" ino=130013 res=0 errno=0 [ 1434.581863][ T5302] IPVS: starting estimator thread 0... [ 1434.701691][ T9098] IPVS: using max 16 ests per chain, 38400 per kthread [ 1435.512154][ T9121] bond_slave_0: entered promiscuous mode [ 1435.545282][ T9119] bond_slave_0: left promiscuous mode [ 1436.254063][ T9139] loop1: detected capacity change from 0 to 16 [ 1436.315128][ T9142] netlink: 'syz.5.15669': attribute type 6 has an invalid length. [ 1436.322059][ T9139] erofs: (device loop1): mounted with root inode @ nid 36. [ 1436.360344][ T29] audit: type=1800 audit(2134218330.151:1824): pid=9139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15668" name="file0" dev="loop1" ino=49 res=0 errno=0 [ 1438.156428][ T9199] loop2: detected capacity change from 0 to 256 [ 1438.370076][ T9201] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15698'. [ 1438.929784][ T9178] loop0: detected capacity change from 0 to 40427 [ 1438.954626][ T9178] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1438.991794][ T9178] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1439.028067][ T9178] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x1fffff [ 1439.061279][ T9178] F2FS-fs (loop0): invalid crc value [ 1439.085394][ T9178] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1439.319169][ T9178] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1439.361764][ T9178] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1439.665520][ T9230] loop2: detected capacity change from 0 to 1024 [ 1439.689912][ T7884] syz-executor: attempt to access beyond end of device [ 1439.689912][ T7884] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1439.695172][ T9230] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1439.727565][ T9230] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1439.750871][ T7884] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1439.775496][ T9230] EXT4-fs (loop2): invalid journal inode [ 1439.781375][ T9230] EXT4-fs (loop2): can't get journal size [ 1439.833358][ T9230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1439.885434][ T9230] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 37: comm syz.2.15709: path /33/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1439.921283][ T9230] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.15709: path /33/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 1440.024327][ T9239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15713'. [ 1440.035455][ T8643] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.330050][ T5301] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1440.562004][ T5301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.606304][ T5301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.643707][ T5301] usb 6-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 1440.654314][T16810] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1440.680865][ T5301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.712961][ T5301] usb 6-1: config 0 descriptor?? [ 1440.851730][T16810] usb 5-1: Using ep0 maxpacket: 8 [ 1440.871699][T16810] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 1440.889419][T16810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.898768][T16810] usb 5-1: Product: syz [ 1440.919230][T16810] usb 5-1: Manufacturer: syz [ 1440.933783][T16810] usb 5-1: SerialNumber: syz [ 1440.967797][T16810] usb 5-1: config 0 descriptor?? [ 1441.226319][ T5301] wacom 0003:056A:00B5.0094: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 1441.231116][ T9260] loop1: detected capacity change from 0 to 1024 [ 1441.265250][ T5301] wacom 0003:056A:00B5.0094: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.5-1/input0 [ 1441.308258][ T5301] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B5.0094/input/input103 [ 1441.456797][ T5301] usb 6-1: USB disconnect, device number 89 [ 1441.556870][T16810] usb 5-1: USB disconnect, device number 108 [ 1441.803830][ T30] INFO: task syz.4.14204:5720 blocked for more than 143 seconds. [ 1441.823395][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 1441.868883][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1441.920821][ T30] task:syz.4.14204 state:D stack:24856 pid:5720 tgid:5709 ppid:20279 flags:0x00004004 [ 1441.951873][ T30] Call Trace: [ 1441.961897][ T30] [ 1441.965501][ T30] __schedule+0x1800/0x4a60 [ 1441.970997][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1441.977819][ T30] ? __pfx___schedule+0x10/0x10 [ 1441.986019][ T30] ? __blk_flush_plug+0x449/0x500 [ 1441.992162][ T30] ? __pfx_lock_release+0x10/0x10 [ 1441.997955][ T30] ? __blk_flush_plug+0x449/0x500 [ 1442.004086][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1442.010915][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1442.017262][ T30] ? schedule+0x90/0x320 [ 1442.035972][ T30] schedule+0x14b/0x320 [ 1442.040942][ T30] io_schedule+0x8d/0x110 [ 1442.045911][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1442.051524][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1442.057809][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1442.063536][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1442.068913][ T30] z_erofs_runqueue+0xa8c/0x2010 [ 1442.075228][ T30] ? __pfx_z_erofs_runqueue+0x10/0x10 [ 1442.080840][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.086695][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1442.091767][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.097537][ T30] ? lockref_put_or_lock+0x75/0xc0 [ 1442.102865][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.108641][ T30] z_erofs_readahead+0xbae/0xf00 [ 1442.114083][ T30] ? __pfx_z_erofs_readahead+0x10/0x10 [ 1442.119671][ T30] ? __pfx_lock_release+0x10/0x10 [ 1442.125476][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.131249][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.152358][ T30] ? blk_start_plug+0x70/0x1b0 [ 1442.159521][ T30] read_pages+0x180/0x840 [ 1442.168664][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 1442.178729][ T30] ? __pfx_read_pages+0x10/0x10 [ 1442.189808][ T30] ? filemap_add_folio+0x26d/0x650 [ 1442.199987][ T30] ? __pfx_filemap_add_folio+0x10/0x10 [ 1442.211791][ T30] page_cache_ra_unbounded+0x6ce/0x7f0 [ 1442.218008][ T30] force_page_cache_ra+0x280/0x2f0 [ 1442.223361][ T30] generic_fadvise+0x528/0x840 [ 1442.228179][ T30] ? __pfx_generic_fadvise+0x10/0x10 [ 1442.233885][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.239560][ T30] ? __fget_files+0x3f6/0x470 [ 1442.248272][ T30] ? __fget_files+0x29/0x470 [ 1442.253328][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.259012][ T30] __x64_sys_fadvise64+0x145/0x190 [ 1442.265425][ T30] do_syscall_64+0xf3/0x230 [ 1442.269975][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.276063][ T30] RIP: 0033:0x7f1f2637def9 [ 1442.280536][ T30] RSP: 002b:00007f1f25dde038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 1442.289666][ T30] RAX: ffffffffffffffda RBX: 00007f1f26536058 RCX: 00007f1f2637def9 [ 1442.299037][ T30] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000005 [ 1442.307126][ T30] RBP: 00007f1f263f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 1442.315256][ T30] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1442.323310][ T30] R13: 0000000000000000 R14: 00007f1f26536058 R15: 00007ffd9141cd88 [ 1442.331364][ T30] [ 1442.334555][ T30] [ 1442.334555][ T30] Showing all locks held in the system: [ 1442.343411][ T30] 1 lock held by khungtaskd/30: [ 1442.349720][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1442.364027][ T30] 2 locks held by kworker/u8:8/2919: [ 1442.369338][ T30] #0: ffff888020362948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1442.382123][ T30] #1: ffffc9000996fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1442.394410][ T30] 4 locks held by kworker/u8:10/2944: [ 1442.399835][ T30] 2 locks held by getty/4986: [ 1442.405788][ T30] #0: ffff888034eaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1442.416011][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1442.426217][ T30] 3 locks held by kworker/0:5/5301: [ 1442.431456][ T30] #0: ffff8880226c5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1442.451973][ T30] #1: ffffc90003defd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1442.465288][ T30] #2: ffff8880291be190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1442.481606][ T30] 3 locks held by kworker/u8:1/30548: [ 1442.487002][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1442.501358][ T30] #1: ffffc90002dbfd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1442.515870][ T30] #2: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: batadv_nc_purge_paths+0xe8/0x3b0 [ 1442.526435][ T30] 1 lock held by syz.4.14204/5720: [ 1442.531639][ T30] #0: ffff88805481f850 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 1442.543042][ T30] 1 lock held by syz.3.15722/9261: [ 1442.548284][ T30] #0: ffff8880340c5868 (&pipe->mutex){+.+.}-{3:3}, at: pipe_release+0x4e/0x330 [ 1442.559530][ T30] 1 lock held by syz.3.15722/9262: [ 1442.564795][ T30] #0: ffff8880340c5868 (&pipe->mutex){+.+.}-{3:3}, at: splice_file_to_pipe+0x2e/0x500 [ 1442.574736][ T30] [ 1442.577079][ T30] ============================================= [ 1442.577079][ T30] [ 1442.589039][ T30] NMI backtrace for cpu 1 [ 1442.593398][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 1442.603920][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1442.614000][ T30] Call Trace: [ 1442.617288][ T30] [ 1442.620227][ T30] dump_stack_lvl+0x241/0x360 [ 1442.624931][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.630149][ T30] ? __pfx__printk+0x10/0x10 [ 1442.634753][ T30] ? vprintk_emit+0x667/0x7c0 [ 1442.639626][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1442.644676][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1442.649665][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1442.655151][ T30] ? _printk+0xd5/0x120 [ 1442.659322][ T30] ? __pfx__printk+0x10/0x10 [ 1442.663929][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1442.668804][ T30] ? __pfx__printk+0x10/0x10 [ 1442.673407][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.679062][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1442.684129][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1442.690147][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1442.696161][ T30] watchdog+0xff4/0x1040 [ 1442.700433][ T30] ? watchdog+0x1ea/0x1040 [ 1442.704887][ T30] ? __pfx_watchdog+0x10/0x10 [ 1442.709766][ T30] kthread+0x2f2/0x390 [ 1442.713847][ T30] ? __pfx_watchdog+0x10/0x10 [ 1442.718547][ T30] ? __pfx_kthread+0x10/0x10 [ 1442.723152][ T30] ret_from_fork+0x4d/0x80 [ 1442.727594][ T30] ? __pfx_kthread+0x10/0x10 [ 1442.732198][ T30] ret_from_fork_asm+0x1a/0x30 [ 1442.737007][ T30] [ 1442.740080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1442.747774][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1442.753495][ C0] NMI backtrace for cpu 0 [ 1442.753510][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 1442.753538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1442.753553][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1442.753582][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 bb 93 b0 0a f3 0f 1e fa 89 f6 31 d2 e9 73 53 ad 03 0f 1f [ 1442.753602][ C0] RSP: 0018:ffffc90000007e68 EFLAGS: 00000046 [ 1442.753623][ C0] RAX: 0000000000000a30 RBX: 0000000000000020 RCX: 0000000000000838 [ 1442.753638][ C0] RDX: 0000000000000000 RSI: 0000000000000a30 RDI: 0000000000000838 [ 1442.753653][ C0] RBP: 0000000000000a30 R08: ffffffff81840609 R09: 1ffffffff2030ebd [ 1442.753671][ C0] R10: dffffc0000000000 R11: ffffffff813e7570 R12: 000000000000a308 [ 1442.753687][ C0] R13: dffffc0000000000 R14: 000000000ffffe52 R15: ffff8880b8828340 [ 1442.753708][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1442.753727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1442.753744][ C0] CR2: 00007fc112f06ab8 CR3: 000000007f97a000 CR4: 0000000000350ef0 [ 1442.753763][ C0] Call Trace: [ 1442.753772][ C0] [ 1442.753782][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1442.753814][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1442.753852][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1442.753882][ C0] ? nmi_handle+0x2a/0x5a0 [ 1442.753919][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1442.753949][ C0] ? nmi_handle+0x151/0x5a0 [ 1442.753972][ C0] ? nmi_handle+0x2a/0x5a0 [ 1442.753996][ C0] ? native_apic_msr_write+0x39/0x50 [ 1442.754020][ C0] ? default_do_nmi+0x63/0x160 [ 1442.754053][ C0] ? exc_nmi+0x123/0x1f0 [ 1442.754084][ C0] ? end_repeat_nmi+0xf/0x53 [ 1442.754119][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 1442.754156][ C0] ? clockevents_program_event+0x189/0x350 [ 1442.754193][ C0] ? native_apic_msr_write+0x39/0x50 [ 1442.754219][ C0] ? native_apic_msr_write+0x39/0x50 [ 1442.754247][ C0] ? native_apic_msr_write+0x39/0x50 [ 1442.754272][ C0] [ 1442.754280][ C0] [ 1442.754288][ C0] lapic_next_event+0x11/0x20 [ 1442.754322][ C0] clockevents_program_event+0x1c3/0x350 [ 1442.754360][ C0] hrtimer_interrupt+0x54a/0x990 [ 1442.754407][ C0] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 1442.754448][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1442.754489][ C0] [ 1442.754497][ C0] [ 1442.754506][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1442.754538][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1442.754567][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 eb 07 0f 00 2d b5 73 b0 00 f3 0f 1e fa fb f4 e9 f4 6f 36 00 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1442.754586][ C0] RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 [ 1442.754604][ C0] RAX: ffffffff8e694680 RBX: ffff8880216b1864 RCX: 00000000000653a9 [ 1442.754622][ C0] RDX: 0000000000000001 RSI: ffff8880216b1800 RDI: ffff8880216b1864 [ 1442.754639][ C0] RBP: 000000000003a678 R08: ffff8880b8837c7b R09: 1ffff11017106f8f [ 1442.754656][ C0] R10: dffffc0000000000 R11: ffffffff8bb9ccc0 R12: ffff8880213ea800 [ 1442.754673][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0e4220 [ 1442.754693][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1442.754731][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.754765][ C0] acpi_idle_enter+0xe4/0x140 [ 1442.754795][ C0] cpuidle_enter_state+0x114/0x480 [ 1442.754822][ C0] ? __pfx_menu_select+0x10/0x10 [ 1442.754858][ C0] cpuidle_enter+0x5d/0xa0 [ 1442.754885][ C0] do_idle+0x375/0x5d0 [ 1442.754921][ C0] ? __pfx_do_idle+0x10/0x10 [ 1442.754949][ C0] ? poll_idle+0xb0/0xb0 [ 1442.754986][ C0] ? rest_init+0x31/0x300 [ 1442.755013][ C0] cpu_startup_entry+0x42/0x60 [ 1442.755040][ C0] rest_init+0x2dc/0x300 [ 1442.755069][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1442.755106][ C0] start_kernel+0x47a/0x500 [ 1442.755137][ C0] x86_64_start_reservations+0x2a/0x30 [ 1442.755171][ C0] x86_64_start_kernel+0x9f/0xa0 [ 1442.755203][ C0] common_startup_64+0x13e/0x147 [ 1442.755243][ C0] [ 1442.781873][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1442.781893][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 1442.781926][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1442.781943][ T30] Call Trace: [ 1442.781957][ T30] [ 1442.781969][ T30] dump_stack_lvl+0x241/0x360 [ 1442.782009][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.782040][ T30] ? __pfx__printk+0x10/0x10 [ 1442.782063][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1442.782111][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.782150][ T30] ? vscnprintf+0x5d/0x90 [ 1442.782187][ T30] panic+0x349/0x860 [ 1442.782212][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.782253][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1442.782291][ T30] ? __pfx_panic+0x10/0x10 [ 1442.782314][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1442.782347][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.782384][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1442.782423][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.782461][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1442.782497][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1442.782532][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1442.782570][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1442.782608][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1442.782648][ T30] watchdog+0x1033/0x1040 [ 1442.782690][ T30] ? watchdog+0x1ea/0x1040 [ 1442.782736][ T30] ? __pfx_watchdog+0x10/0x10 [ 1442.782774][ T30] kthread+0x2f2/0x390 [ 1442.782800][ T30] ? __pfx_watchdog+0x10/0x10 [ 1442.782838][ T30] ? __pfx_kthread+0x10/0x10 [ 1442.782864][ T30] ret_from_fork+0x4d/0x80 [ 1442.782903][ T30] ? __pfx_kthread+0x10/0x10 [ 1442.782929][ T30] ret_from_fork_asm+0x1a/0x30 [ 1442.782986][ T30] [ 1442.786387][ T30] Kernel Offset: disabled [ 1443.349036][ T30] Rebooting in 86400 seconds..