last executing test programs: 34.707346876s ago: executing program 3 (id=2536): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f00007e9000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x2, 0x0) 33.857793614s ago: executing program 3 (id=2541): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000080)=ANY=[], 0x90) 33.41807959s ago: executing program 3 (id=2543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@remote, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'aegis256-generic\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) 32.719635358s ago: executing program 3 (id=2549): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5, 0x2e0, &(0x7f00000001c0)="$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") mount(&(0x7f0000001cc0)=@loop={'/dev/loop', 0x0}, &(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)='hfs\x00', 0x0, 0x0) 31.659536099s ago: executing program 3 (id=2557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_DELMDB={0x15, 0x55, 0x32f, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x55, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@private0}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x98}}, 0x0) 30.633332695s ago: executing program 3 (id=2565): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.129599528s ago: executing program 2 (id=2673): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 6.121095282s ago: executing program 2 (id=2676): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xcc, &(0x7f0000000000), &(0x7f0000000240)=0x4) 5.690229708s ago: executing program 0 (id=2678): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000680)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4.964268196s ago: executing program 1 (id=2680): r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x280) 4.676506177s ago: executing program 2 (id=2681): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x4, 0x4, 0x4000000c, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.270093445s ago: executing program 0 (id=2682): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.209721513s ago: executing program 4 (id=2683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000009000000000000a20000000000a0500000c000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000380800034000000085"], 0x90}}, 0x0) 3.876825674s ago: executing program 0 (id=2684): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, @in=@empty}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x3500, 0x0, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@remote}]}]}, 0xec}}, 0x0) 3.868884585s ago: executing program 2 (id=2685): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 3.75780625s ago: executing program 1 (id=2686): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x16, 0x2, 0x1, "4dc009179f4e5989070600ca0a010dee6e678a92ddf91f0000000000002000cd", 0x3247504d}) 3.463356642s ago: executing program 4 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @remote}}}]}]}, 0x50}}, 0x0) 3.426909736s ago: executing program 1 (id=2688): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 3.140869735s ago: executing program 2 (id=2689): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}], 0x1c) 2.749374552s ago: executing program 0 (id=2690): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000e00000000030005000000000002"], 0x50}}, 0x0) 2.708629297s ago: executing program 4 (id=2691): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) 2.585072584s ago: executing program 1 (id=2692): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@nullb, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='reiserfs\x00', 0x8200, 0x0) 2.31175996s ago: executing program 2 (id=2693): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 1.656958142s ago: executing program 4 (id=2694): prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) timer_create(0x0, 0x0, 0x0) 1.330291979s ago: executing program 0 (id=2695): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008111e00212ba0d81050402600000ff0f040b067c55a1bc000900b80006990300000004001500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 1.327300707s ago: executing program 4 (id=2696): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0x0, &(0x7f0000000080)) 1.241087238s ago: executing program 1 (id=2697): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_u8={{0x18}}], 0x18}}], 0x1, 0x0) 697.243477ms ago: executing program 4 (id=2698): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000100)) 303.014953ms ago: executing program 1 (id=2699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x22c}}, 0x0) 0s ago: executing program 0 (id=2700): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000600)={0x0, 0x0, 0x40011, 0x1e, 0xe40, &(0x7f0000000c80)="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"}) kernel console output (not intermixed with test programs): 1.815120][ T5740] sysv_free_block: flc_count > flc_size [ 1011.821496][ T5740] sysv_free_block: flc_count > flc_size [ 1011.827313][ T5740] sysv_free_block: flc_count > flc_size [ 1011.833312][ T5740] sysv_free_block: flc_count > flc_size [ 1011.851008][ T5740] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1013.041359][ T3112] team0 (unregistering): Port device team_slave_1 removed [ 1013.091348][ T3112] team0 (unregistering): Port device team_slave_0 removed [ 1013.482547][ T8841] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1014.073107][ T5740] syz.0.147 (5740) used greatest stack depth: 5000 bytes left [ 1014.543854][ T8766] hsr_slave_0: entered promiscuous mode [ 1014.590595][ T8766] hsr_slave_1: entered promiscuous mode [ 1014.634486][ T8766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1014.643139][ T8766] Cannot create hsr debugfs directory [ 1014.681011][ T8851] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1151'. [ 1014.899511][ T3112] bridge_slave_1: left allmulticast mode [ 1014.905696][ T3112] bridge_slave_1: left promiscuous mode [ 1014.913353][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.991211][ T3112] bridge_slave_0: left allmulticast mode [ 1014.997912][ T3112] bridge_slave_0: left promiscuous mode [ 1015.010952][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.881391][ T8864] ip6t_srh: unknown srh match flags 6374 [ 1016.358654][ T3112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.403891][ T3112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.427173][ T3112] bond0 (unregistering): Released all slaves [ 1016.449659][ T3112] bond1 (unregistering): Released all slaves [ 1016.667543][ T8868] netlink: 'syz.4.1159': attribute type 2 has an invalid length. [ 1017.301903][ T8876] loop4: detected capacity change from 0 to 512 [ 1017.594694][ T8876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.608163][ T8876] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1017.666320][ T3112] hsr_slave_0: left promiscuous mode [ 1017.682525][ T3112] hsr_slave_1: left promiscuous mode [ 1017.746713][ T3112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.755022][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.834473][ T3112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.842876][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.855256][ T8876] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.1162: corrupted inode contents [ 1017.917914][ T8876] EXT4-fs (loop4): Remounting filesystem read-only [ 1017.927611][ T3112] veth1_macvtap: left promiscuous mode [ 1017.934107][ T3112] veth0_macvtap: left promiscuous mode [ 1017.940242][ T3112] veth1_vlan: left promiscuous mode [ 1017.945903][ T3112] veth0_vlan: left promiscuous mode [ 1018.179039][ T5182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.190438][ T2981] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1018.611154][ T8887] overlayfs: conflicting options: userxattr,verity=on [ 1019.327958][ T3112] team0 (unregistering): Port device team_slave_1 removed [ 1019.357756][ T3112] team0 (unregistering): Port device team_slave_0 removed [ 1020.184957][ T8701] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1020.415974][ T8701] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1020.510771][ T8701] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1020.681518][ T8701] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1020.881241][ T4559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1020.892741][ T4559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1020.904536][ T4559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1020.920218][ T4559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1020.939759][ T4559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1020.950788][ T4559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1022.574179][ T3579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.824643][ T3579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.348761][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1023.414508][ T3579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.510481][ T4559] Bluetooth: hci4: command tx timeout [ 1023.735044][ T3579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.742737][ T8] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=68.24 [ 1023.755750][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.764263][ T8] usb 5-1: Product: syz [ 1023.768904][ T8] usb 5-1: Manufacturer: syz [ 1023.773816][ T8] usb 5-1: SerialNumber: syz [ 1023.797683][ T8] usb 5-1: config 0 descriptor?? [ 1023.823761][ T8] ipw 5-1:0.0: IPWireless converter converter detected [ 1023.882951][ T8766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1023.900066][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 1023.957588][ T8766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1024.095566][ T8] usb 5-1: USB disconnect, device number 11 [ 1024.132895][ T8766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1024.160267][ T8] ipw 5-1:0.0: device disconnected [ 1024.386009][ T8766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1024.511318][ T3579] bridge_slave_1: left allmulticast mode [ 1024.522822][ T3579] bridge_slave_1: left promiscuous mode [ 1024.530451][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.669105][ T3579] bridge_slave_0: left allmulticast mode [ 1024.675609][ T3579] bridge_slave_0: left promiscuous mode [ 1024.682864][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.559822][ T4559] Bluetooth: hci4: command tx timeout [ 1025.781135][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.870525][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.920800][ T3579] bond0 (unregistering): Released all slaves [ 1026.130342][ T8896] chnl_net:caif_netlink_parms(): no params data found [ 1026.354214][ T3579] hsr_slave_0: left promiscuous mode [ 1026.399706][ T3579] hsr_slave_1: left promiscuous mode [ 1026.421424][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.430635][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.456946][ T8951] loop4: detected capacity change from 0 to 1764 [ 1026.498853][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.507035][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.632205][ T8951] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1026.670906][ T3579] veth1_macvtap: left promiscuous mode [ 1026.677262][ T3579] veth0_macvtap: left promiscuous mode [ 1026.684553][ T3579] veth1_vlan: left promiscuous mode [ 1026.690511][ T3579] veth0_vlan: left promiscuous mode [ 1027.644312][ T4559] Bluetooth: hci4: command tx timeout [ 1027.925281][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 1028.060284][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.067297][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.673380][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 1028.821399][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 1029.304945][ T8701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.725767][ T4559] Bluetooth: hci4: command tx timeout [ 1029.865304][ T8701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.001556][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.011360][ T7139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.168340][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.176276][ T7139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.680643][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.956377][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.081299][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.092958][ T7139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.198063][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.207286][ T7139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.706841][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.715280][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.723770][ T8896] bridge_slave_0: entered allmulticast mode [ 1031.733378][ T8896] bridge_slave_0: entered promiscuous mode [ 1031.972287][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.980614][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.988917][ T8896] bridge_slave_1: entered allmulticast mode [ 1031.998961][ T8896] bridge_slave_1: entered promiscuous mode [ 1032.474788][ T8896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.542521][ T9007] bpf: Bad value for 'mode' [ 1032.612839][ T8896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.792992][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 1032.926448][ T8896] team0: Port device team_slave_0 added [ 1033.079515][ T8896] team0: Port device team_slave_1 added [ 1033.359566][ T8701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.545481][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.554616][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.582536][ T8896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.701728][ T9022] random: crng reseeded on system resumption [ 1033.901264][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.908684][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.935321][ T8896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.306377][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.947893][ T8896] hsr_slave_0: entered promiscuous mode [ 1034.997283][ T8896] hsr_slave_1: entered promiscuous mode [ 1035.050914][ T8896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.059090][ T8896] Cannot create hsr debugfs directory [ 1035.066674][ T8701] veth0_vlan: entered promiscuous mode [ 1035.341223][ T8701] veth1_vlan: entered promiscuous mode [ 1036.168767][ T8766] veth0_vlan: entered promiscuous mode [ 1036.187324][ T8701] veth0_macvtap: entered promiscuous mode [ 1036.308905][ T8701] veth1_macvtap: entered promiscuous mode [ 1036.330567][ T8766] veth1_vlan: entered promiscuous mode [ 1037.373960][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.385364][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.398675][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.412052][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.429418][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.474059][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.486777][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.498504][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.510242][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.526873][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.591223][ T8701] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.600627][ T8701] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.610874][ T8701] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.621567][ T8701] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.945993][ T8766] veth0_macvtap: entered promiscuous mode [ 1037.994132][ T8766] veth1_macvtap: entered promiscuous mode [ 1038.059690][ T9059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1210'. [ 1038.071458][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.083181][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.095808][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.107243][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.117954][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.129002][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.144935][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.256347][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.267413][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.279690][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.291993][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.308515][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.319668][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.336089][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.445032][ T8766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.456017][ T8766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.465339][ T8766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.474838][ T8766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.521806][ T8896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1038.866660][ T8896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1038.939284][ T8896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1039.066106][ T8896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1040.604037][ T8896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.865949][ T8896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.921382][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.929340][ T7139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.151200][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.159505][ T7139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.339106][ T5197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1041.351229][ T5197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1041.361917][ T5197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1041.371949][ T8896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1041.594107][ T5197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1041.615479][ T5197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1041.626221][ T5197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1043.052911][ T3017] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.308898][ T9110] loop4: detected capacity change from 0 to 256 [ 1043.334061][ T9110] exfat: Deprecated parameter 'namecase' [ 1043.462924][ T9110] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 1043.546728][ T3017] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.719370][ T4559] Bluetooth: hci3: command tx timeout [ 1043.915805][ T8896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.422740][ T3017] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.635086][ T3017] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.724920][ T9087] chnl_net:caif_netlink_parms(): no params data found [ 1045.527353][ T9137] loop4: detected capacity change from 0 to 16 [ 1045.542846][ T3017] bridge_slave_1: left allmulticast mode [ 1045.549778][ T3017] bridge_slave_1: left promiscuous mode [ 1045.556495][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.613490][ T9137] erofs: (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 1045.627882][ T9137] erofs: (device loop4): mounted with root inode @ nid 36. [ 1045.670684][ T3017] bridge_slave_0: left allmulticast mode [ 1045.676680][ T3017] bridge_slave_0: left promiscuous mode [ 1045.685404][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.759951][ T9137] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1045.798941][ T4559] Bluetooth: hci3: command tx timeout [ 1047.165973][ T3017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.250787][ T3017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.334893][ T3017] bond0 (unregistering): Released all slaves [ 1047.601126][ T8896] veth0_vlan: entered promiscuous mode [ 1047.831995][ T3017] hsr_slave_0: left promiscuous mode [ 1047.864436][ T3017] hsr_slave_1: left promiscuous mode [ 1047.880783][ T4559] Bluetooth: hci3: command tx timeout [ 1047.899365][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.907222][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.926062][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.934178][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.967279][ T3017] veth1_macvtap: left promiscuous mode [ 1047.975751][ T3017] veth0_macvtap: left promiscuous mode [ 1047.981978][ T3017] veth1_vlan: left promiscuous mode [ 1047.987627][ T3017] veth0_vlan: left promiscuous mode [ 1048.820543][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1233'. [ 1049.675154][ T3017] team0 (unregistering): Port device team_slave_1 removed [ 1049.743157][ T3017] team0 (unregistering): Port device team_slave_0 removed [ 1049.959680][ T5197] Bluetooth: hci3: command tx timeout [ 1050.136303][ T8896] veth1_vlan: entered promiscuous mode [ 1051.173612][ T8896] veth0_macvtap: entered promiscuous mode [ 1051.345733][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.353984][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.362195][ T9087] bridge_slave_0: entered allmulticast mode [ 1051.374301][ T9087] bridge_slave_0: entered promiscuous mode [ 1051.391287][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.399717][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.407706][ T9087] bridge_slave_1: entered allmulticast mode [ 1051.417601][ T9087] bridge_slave_1: entered promiscuous mode [ 1051.625024][ T8896] veth1_macvtap: entered promiscuous mode [ 1051.660505][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.737319][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.745742][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.881149][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.890772][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.906269][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.304265][ T9087] team0: Port device team_slave_0 added [ 1052.325322][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.342567][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.357168][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.372135][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.383463][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.395236][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.413082][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.469009][ T9087] team0: Port device team_slave_1 added [ 1052.833661][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.842229][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.871522][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.900147][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.911179][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.921600][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.932971][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.947573][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.959196][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.975892][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.993730][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 1053.018466][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.025916][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.046221][ T9204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1242'. [ 1053.053555][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.085283][ T8896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.094827][ T8896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.104162][ T8896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.113602][ T8896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.446084][ T9207] loop2: detected capacity change from 0 to 512 [ 1053.551991][ T9207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1053.932364][ T9087] hsr_slave_0: entered promiscuous mode [ 1053.959156][ T9087] hsr_slave_1: entered promiscuous mode [ 1053.982016][ T9207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.995492][ T9207] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.009301][ T9087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.017454][ T9087] Cannot create hsr debugfs directory [ 1054.294431][ T9207] EXT4-fs error (device loop2): ext4_xattr_block_find:1877: inode #15: comm syz.2.407: corrupted xattr block 32: bad e_name length [ 1054.700447][ T9223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1244'. [ 1054.711465][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 1054.721810][ T9223] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071749895169) [ 1054.732607][ T9223] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1055.472910][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1246'. [ 1055.483569][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1246'. [ 1055.506574][ T8766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.877052][ T9087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1056.996116][ T9087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1057.123510][ T9087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1057.226887][ T9087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1058.649357][ T9267] tmpfs: Bad value for 'mpol' [ 1059.030721][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.183780][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.310453][ T3149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.318753][ T3149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.410139][ T3149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.417961][ T3149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.480472][ T9272] netlink: 'syz.4.1260': attribute type 4 has an invalid length. [ 1059.906109][ T9275] loop2: detected capacity change from 0 to 64 [ 1060.030413][ T9275] Trying to free block not in datazone [ 1060.259611][ T9281] netlink: 'syz.4.1262': attribute type 29 has an invalid length. [ 1060.268012][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 1061.064471][ T7139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.074218][ T7139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.152819][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.162202][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.543562][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.425286][ T9087] veth0_vlan: entered promiscuous mode [ 1062.634263][ T9087] veth1_vlan: entered promiscuous mode [ 1062.657584][ T9300] loop0: detected capacity change from 0 to 512 [ 1062.720941][ T9300] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1062.933059][ T9300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.162: bg 0: block 64: padding at end of block bitmap is not set [ 1063.022239][ T9300] Quota error (device loop0): write_blk: dquota write failed [ 1063.040090][ T9300] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1063.053351][ T9300] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.162: Failed to acquire dquot type 0 [ 1063.187854][ T9087] veth0_macvtap: entered promiscuous mode [ 1063.223264][ T9087] veth1_macvtap: entered promiscuous mode [ 1063.246848][ T9300] EXT4-fs (loop0): 1 truncate cleaned up [ 1063.256058][ T9300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.367040][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.378732][ T9300] Quota error (device loop0): write_blk: dquota write failed [ 1063.379915][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.387404][ T9300] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1063.399328][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.399506][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.399619][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.399720][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.399811][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.411258][ T9300] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.162: Failed to acquire dquot type 0 [ 1063.421906][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.427825][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.584150][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.597954][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.610834][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.623022][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.633850][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.645023][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.655531][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.666493][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.683757][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.751783][ T9087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.762206][ T9087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.771686][ T9087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.781364][ T9087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.067646][ T9300] syz.0.162 (9300) used greatest stack depth: 2920 bytes left [ 1064.378450][ T9294] loop2: detected capacity change from 0 to 4096 [ 1064.423157][ T8896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.510494][ T9294] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1064.850203][ T9294] ntfs3: loop2: Failed to read $UpCase (-4). [ 1067.314396][ T9347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1281'. [ 1068.341747][ T9362] netlink: 'syz.0.1286': attribute type 11 has an invalid length. [ 1068.352699][ T9362] netlink: 'syz.0.1286': attribute type 9 has an invalid length. [ 1068.364212][ T9362] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1286'. [ 1070.265385][ T9387] loop2: detected capacity change from 0 to 512 [ 1070.292593][ T9387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1070.474394][ T9387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1070.489077][ T9387] ext4 filesystem being mounted at /13/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.115066][ T8766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1071.328761][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1071.604593][ T44] usb 1-1: config 0 has an invalid interface number: 123 but max is 0 [ 1071.615297][ T44] usb 1-1: config 0 has no interface number 0 [ 1071.622948][ T44] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=a0.f6 [ 1071.632982][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.768418][ T44] usb 1-1: config 0 descriptor?? [ 1072.090022][ T44] kaweth 1-1:0.123: Firmware present in device. [ 1072.302985][ T44] kaweth 1-1:0.123: Error reading configuration (-71), no net device created [ 1072.313065][ T44] kaweth 1-1:0.123: probe with driver kaweth failed with error -5 [ 1072.823317][ T3112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.832132][ T3112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.941908][ T44] usb 1-1: USB disconnect, device number 4 [ 1073.057300][ T3149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.066516][ T3149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.423395][ T9436] loop4: detected capacity change from 0 to 4096 [ 1074.607497][ T9436] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1075.319294][ T9436] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1075.362896][ T9451] loop2: detected capacity change from 0 to 1764 [ 1075.368995][ T9436] ntfs3: loop4: Failed to load $Extend (-22). [ 1075.380129][ T9436] ntfs3: loop4: Failed to initialize $Extend. [ 1075.414553][ T9452] loop1: detected capacity change from 0 to 16 [ 1075.759638][ T9458] loop3: detected capacity change from 0 to 256 [ 1075.810207][ T9452] erofs: (device loop1): mounted with root inode @ nid 36. [ 1076.688787][ T9458] FAT-fs (loop3): Directory bread(block 64) failed [ 1076.695851][ T9458] FAT-fs (loop3): Directory bread(block 65) failed [ 1076.706447][ T9458] FAT-fs (loop3): Directory bread(block 66) failed [ 1076.714941][ T9458] FAT-fs (loop3): Directory bread(block 67) failed [ 1076.722222][ T9458] FAT-fs (loop3): Directory bread(block 68) failed [ 1076.732502][ T9458] FAT-fs (loop3): Directory bread(block 69) failed [ 1076.739729][ T9458] FAT-fs (loop3): Directory bread(block 70) failed [ 1076.747110][ T9458] FAT-fs (loop3): Directory bread(block 71) failed [ 1076.754923][ T9458] FAT-fs (loop3): Directory bread(block 72) failed [ 1076.762181][ T9458] FAT-fs (loop3): Directory bread(block 73) failed [ 1078.625838][ T9494] loop0: detected capacity change from 0 to 64 [ 1081.163736][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 1081.778162][ T7783] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1081.930070][ T9540] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1353'. [ 1081.940784][ T9540] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1353'. [ 1081.950834][ T9540] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1353'. [ 1082.761469][ T7783] usb 4-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6 [ 1082.771920][ T7783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.781018][ T7783] usb 4-1: Product: syz [ 1082.785472][ T7783] usb 4-1: Manufacturer: syz [ 1082.790492][ T7783] usb 4-1: SerialNumber: syz [ 1082.892991][ T7783] usb 4-1: config 0 descriptor?? [ 1083.592161][ T7783] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1083.603492][ T7783] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1083.614982][ T7783] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1083.780848][ T7783] usb 4-1: USB disconnect, device number 10 [ 1084.705840][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1365'. [ 1084.767353][ T9567] cgroup: name respecified [ 1085.859140][ T9581] loop2: detected capacity change from 0 to 8 [ 1086.024792][ T9581] cramfs: Error -5 while decompressing! [ 1086.030883][ T9581] cramfs: ffffffff94663298(26)->ffff88812ac1f000(4096) [ 1086.038762][ T9581] cramfs: Error -3 while decompressing! [ 1086.044638][ T9581] cramfs: ffffffff946632b2(26)->ffff88812ac99000(4096) [ 1086.052094][ T9581] cramfs: Error -3 while decompressing! [ 1086.058100][ T9581] cramfs: ffffffff946632cc(16)->ffff8881183ed000(4096) [ 1086.066663][ T9581] cramfs: Error -5 while decompressing! [ 1086.073111][ T9581] cramfs: ffffffff94663298(26)->ffff88812ac1f000(4096) [ 1086.961276][ T9591] loop0: detected capacity change from 0 to 256 [ 1087.112173][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 1087.931108][ T9604] loop1: detected capacity change from 0 to 1024 [ 1088.114798][ T9610] delete_channel: no stack [ 1088.700633][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 1088.920004][ T9591] FAT-fs (loop0): Directory bread(block 64) failed [ 1088.927076][ T9591] FAT-fs (loop0): Directory bread(block 65) failed [ 1088.934552][ T9591] FAT-fs (loop0): Directory bread(block 66) failed [ 1088.942255][ T9591] FAT-fs (loop0): Directory bread(block 67) failed [ 1088.949447][ T9591] FAT-fs (loop0): Directory bread(block 68) failed [ 1088.956293][ T9591] FAT-fs (loop0): Directory bread(block 69) failed [ 1088.963455][ T9591] FAT-fs (loop0): Directory bread(block 70) failed [ 1088.970631][ T9591] FAT-fs (loop0): Directory bread(block 71) failed [ 1088.977619][ T9591] FAT-fs (loop0): Directory bread(block 72) failed [ 1088.984604][ T9591] FAT-fs (loop0): Directory bread(block 73) failed [ 1089.640374][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.647236][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.915648][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1089.974609][ T9633] netlink: 'syz.1.1398': attribute type 6 has an invalid length. [ 1089.983854][ T9633] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1398'. [ 1090.126125][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1090.230320][ T8] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 1090.240337][ T8] usb 4-1: config 0 has no interface number 0 [ 1090.246727][ T8] usb 4-1: config 0 interface 252 has no altsetting 0 [ 1090.359588][ T9638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1401'. [ 1090.540570][ T8] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8 [ 1090.550223][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.558955][ T8] usb 4-1: Product: syz [ 1090.564133][ T8] usb 4-1: Manufacturer: syz [ 1090.569144][ T8] usb 4-1: SerialNumber: syz [ 1090.725572][ T8] usb 4-1: config 0 descriptor?? [ 1090.877150][ T8] pcwd_usb: The device isn't a Human Interface Device [ 1091.251975][ T9648] loop4: detected capacity change from 0 to 512 [ 1091.514561][ T9654] loop1: detected capacity change from 0 to 1024 [ 1091.629935][ T25] usb 4-1: USB disconnect, device number 11 [ 1091.728149][ T9648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1091.744071][ T9648] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.118997][ T5182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1092.162190][ T9660] loop2: detected capacity change from 0 to 1024 [ 1092.187802][ T9660] EXT4-fs: Ignoring removed orlov option [ 1092.194109][ T9660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1092.270052][ T9660] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1092.672099][ T9660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.311153][ T8766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.485497][ T9677] cgroup: none used incorrectly [ 1093.889562][ T9683] netlink: 'syz.0.1420': attribute type 4 has an invalid length. [ 1094.227664][ T9691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1425'. [ 1094.382895][ T9695] ieee802154 phy0 wpan0: encryption failed: -90 [ 1095.449550][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 1098.061372][ T7783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1098.548433][ T7783] usb 1-1: Using ep0 maxpacket: 16 [ 1098.608032][ T7783] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1098.620581][ T7783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.630456][ T7783] usb 1-1: Product: syz [ 1098.634937][ T7783] usb 1-1: Manufacturer: syz [ 1098.640264][ T7783] usb 1-1: SerialNumber: syz [ 1098.762448][ T7783] usb 1-1: config 0 descriptor?? [ 1099.055111][ T7783] usb 1-1: ignoring: not an USB2CAN converter [ 1099.121705][ T9754] ieee802154 phy0 wpan0: encryption failed: -22 [ 1099.297089][ T8] usb 1-1: USB disconnect, device number 5 [ 1099.654916][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 1100.499592][ T9773] netlink: 'syz.0.1458': attribute type 3 has an invalid length. [ 1100.509358][ T9773] netlink: 'syz.0.1458': attribute type 3 has an invalid length. [ 1101.957736][ T9795] loop1: detected capacity change from 0 to 256 [ 1102.669458][ T9795] FAT-fs (loop1): Directory bread(block 64) failed [ 1102.676359][ T9795] FAT-fs (loop1): Directory bread(block 65) failed [ 1102.683906][ T9795] FAT-fs (loop1): Directory bread(block 66) failed [ 1102.690920][ T9795] FAT-fs (loop1): Directory bread(block 67) failed [ 1102.697940][ T9795] FAT-fs (loop1): Directory bread(block 68) failed [ 1102.705149][ T9795] FAT-fs (loop1): Directory bread(block 69) failed [ 1102.715877][ T9795] FAT-fs (loop1): Directory bread(block 70) failed [ 1102.724033][ T9795] FAT-fs (loop1): Directory bread(block 71) failed [ 1102.731394][ T9795] FAT-fs (loop1): Directory bread(block 72) failed [ 1102.738433][ T9795] FAT-fs (loop1): Directory bread(block 73) failed [ 1103.874975][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'. [ 1103.885865][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'. [ 1104.438557][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 1104.515781][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 1104.615820][ T9824] loop0: detected capacity change from 0 to 128 [ 1104.690275][ T9824] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1105.144884][ T7783] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1105.788251][ T7783] usb 1-1: Using ep0 maxpacket: 32 [ 1105.815663][ T7783] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1105.847292][ T7783] usb 1-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1105.857989][ T7783] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1106.013219][ T7783] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1106.022773][ T7783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1106.031288][ T7783] usb 1-1: SerialNumber: syz [ 1106.042413][ T29] audit: type=1326 audit(1727324270.018:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.4.1491" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 1106.164877][ T7783] cdc_ether 1-1:1.0: skipping garbage [ 1106.170807][ T7783] usb 1-1: bad CDC descriptors [ 1106.378557][ T7783] usb 1-1: USB disconnect, device number 6 [ 1107.179147][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1107.378706][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1107.622864][ T25] usb 2-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=b9.a0 [ 1107.635716][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.645577][ T25] usb 2-1: Product: syz [ 1107.650807][ T25] usb 2-1: Manufacturer: syz [ 1107.655742][ T25] usb 2-1: SerialNumber: syz [ 1107.783000][ T25] usb 2-1: config 0 descriptor?? [ 1107.841995][ T25] pwc: Visionite VCS-UC300 USB webcam detected. [ 1107.891110][ T9862] loop4: detected capacity change from 0 to 256 [ 1108.040896][ T25] pwc: Failed to set LED on/off time (-71) [ 1108.047399][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1108.075099][ T25] pwc: send_video_command error -71 [ 1108.081448][ T25] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1108.090601][ T25] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1108.235681][ T25] usb 2-1: USB disconnect, device number 3 [ 1108.279206][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1108.305621][ T8] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1108.315647][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.387915][ T9862] FAT-fs (loop4): Directory bread(block 64) failed [ 1108.396362][ T9862] FAT-fs (loop4): Directory bread(block 65) failed [ 1108.403704][ T9862] FAT-fs (loop4): Directory bread(block 66) failed [ 1108.403783][ T8] usb 3-1: config 0 descriptor?? [ 1108.416027][ T9862] FAT-fs (loop4): Directory bread(block 67) failed [ 1108.423425][ T9862] FAT-fs (loop4): Directory bread(block 68) failed [ 1108.423882][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1108.430514][ T9862] FAT-fs (loop4): Directory bread(block 69) failed [ 1108.430832][ T9862] FAT-fs (loop4): Directory bread(block 70) failed [ 1108.456496][ T9862] FAT-fs (loop4): Directory bread(block 71) failed [ 1108.464834][ T9862] FAT-fs (loop4): Directory bread(block 72) failed [ 1108.472619][ T9862] FAT-fs (loop4): Directory bread(block 73) failed [ 1108.879307][ T8] gspca_nw80x: reg_r err -71 [ 1108.884935][ T8] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 1108.991807][ T8] usb 3-1: USB disconnect, device number 6 [ 1110.343597][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 1111.092006][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 1111.104842][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 1111.199527][ T9895] IPv6: NLM_F_CREATE should be specified when creating new route [ 1111.785214][ T9901] loop0: detected capacity change from 0 to 128 [ 1111.899493][ T9901] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1113.306967][ T9928] netlink: 'syz.2.1531': attribute type 18 has an invalid length. [ 1114.390712][ T9939] loop2: detected capacity change from 0 to 1764 [ 1115.036132][ T9922] loop0: detected capacity change from 0 to 8192 [ 1115.243564][ T9922] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1115.339807][ T9922] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 1115.348618][ T9922] FAT-fs (loop0): Filesystem has been set read-only [ 1115.998884][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1116.240285][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1116.476363][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1116.486143][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.494898][ T8] usb 3-1: Product: syz [ 1116.499663][ T8] usb 3-1: Manufacturer: syz [ 1116.504737][ T8] usb 3-1: SerialNumber: syz [ 1116.559030][ T8] usb 3-1: config 0 descriptor?? [ 1117.453969][ T5239] usb 3-1: USB disconnect, device number 7 [ 1117.547401][ T9973] loop1: detected capacity change from 0 to 16 [ 1117.698886][ T9973] cramfs: empty filesystem [ 1117.728049][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1120.022625][T10005] netlink: 'syz.0.1564': attribute type 21 has an invalid length. [ 1120.032045][T10005] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 1120.304141][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1120.568672][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1120.617068][ T44] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1120.626849][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.638537][ T44] usb 3-1: Product: syz [ 1120.643030][ T44] usb 3-1: Manufacturer: syz [ 1120.647990][ T44] usb 3-1: SerialNumber: syz [ 1120.774980][ T44] usb 3-1: config 0 descriptor?? [ 1120.856947][ T44] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1121.088791][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1121.220807][ T44] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 1121.229375][ T44] visor 3-1:0.0: probe with driver visor failed with error -71 [ 1121.284446][ T8] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.295439][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1121.307206][ T8] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1121.320911][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1121.333585][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.459394][ T7783] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1121.474425][ T44] usb 3-1: USB disconnect, device number 8 [ 1121.534659][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.543636][ T8] usb 4-1: invalid MIDI out EP 0 [ 1121.731437][ T7783] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1121.741412][ T7783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.749946][ T7783] usb 1-1: Product: syz [ 1121.754416][ T7783] usb 1-1: Manufacturer: syz [ 1121.762131][ T7783] usb 1-1: SerialNumber: syz [ 1121.840805][ T5239] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1121.941588][ T7783] usb 1-1: config 0 descriptor?? [ 1122.005948][ T7783] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1122.070733][ T5239] usb 5-1: Using ep0 maxpacket: 8 [ 1122.093321][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1122.118042][ T8] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1122.160875][ T5239] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1122.177572][ T5239] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1122.210892][ T5239] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1122.221637][ T5239] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1122.278702][ T8] usb 4-1: USB disconnect, device number 12 [ 1122.279478][T10008] Bluetooth: hci1: command 0x0406 tx timeout [ 1122.308918][ T5239] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1122.316791][ T5239] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1122.329448][ T5239] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1122.340349][ T5239] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1122.426050][ T5239] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1122.434324][ T5239] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1122.444972][ T5239] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1122.455518][ T5239] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1122.562208][ T7783] sonixb 1-1:0.0: Error writing register 01: -71 [ 1122.569747][ T7783] sonixb 1-1:0.0: probe with driver sonixb failed with error -71 [ 1122.587275][ T5239] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1122.597115][ T5239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.606159][ T5239] usb 5-1: Product: syz [ 1122.610804][ T5239] usb 5-1: Manufacturer: syz [ 1122.615808][ T5239] usb 5-1: SerialNumber: syz [ 1122.670518][ T7783] usb 1-1: USB disconnect, device number 7 [ 1123.061931][ T5239] adutux 5-1:168.0: interrupt endpoints not found [ 1123.142614][ T5239] usb 5-1: USB disconnect, device number 12 [ 1123.523404][T10029] x_tables: duplicate underflow at hook 1 [ 1123.549670][ T7783] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1123.845950][ T7783] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1123.857621][ T7783] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1123.868494][ T7783] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.878130][ T7783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.995542][T10026] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1124.060531][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1580'. [ 1124.143671][ T7783] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1124.459639][T10039] loop3: detected capacity change from 0 to 512 [ 1124.633878][T10039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1124.778843][T10039] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1124.793300][T10039] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1582: bg 0: block 248: padding at end of block bitmap is not set [ 1124.810233][T10039] Quota error (device loop3): write_blk: dquota write failed [ 1124.818706][T10039] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1124.832993][T10039] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1582: Failed to acquire dquot type 1 [ 1124.888386][T10045] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1124.998280][T10039] EXT4-fs (loop3): 1 truncate cleaned up [ 1125.206179][ T44] usb 2-1: USB disconnect, device number 4 [ 1125.347207][T10048] tmpfs: Bad value for 'mpol' [ 1125.496695][T10039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1125.768781][T10039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1126.028127][T10039] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.1582: Abort forced by user [ 1126.116116][T10039] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1126.371123][ T8] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1126.389694][T10039] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1126.401458][T10039] ext4 filesystem being remounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.622029][T10068] loop1: detected capacity change from 0 to 256 [ 1126.740151][ T8] usb 1-1: config 0 has an invalid interface number: 142 but max is 0 [ 1126.749017][ T8] usb 1-1: config 0 has no interface number 0 [ 1126.755420][ T8] usb 1-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30 [ 1126.767671][ T8] usb 1-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 1126.784346][ T8] usb 1-1: config 0 interface 142 has no altsetting 0 [ 1126.792821][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1126.802359][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.819374][T10068] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1126.965847][ T8] usb 1-1: config 0 descriptor?? [ 1127.143842][ T8] ums-realtek 1-1:0.142: USB Mass Storage device detected [ 1127.310670][ T5186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.383480][ T8] usb 1-1: USB disconnect, device number 8 [ 1127.763758][T10074] loop2: detected capacity change from 0 to 512 [ 1128.308564][T10074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.309075][T10074] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.955150][ T8766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.199447][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1129.408539][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1129.483519][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1129.493236][ T8] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1129.504095][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1129.869147][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1129.878790][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.887129][ T8] usb 5-1: Manufacturer: à³µä¾»î«´à¨™È¯ïº¨â•¹æ²›ê‹ [ 1130.992780][ T8] usb 5-1: 0:2 : does not exist [ 1131.099148][ T8] usb 5-1: USB disconnect, device number 13 [ 1131.138626][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1131.267061][ T5585] udevd[5585]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.380600][T10116] binder: 10115:10116 ioctl c018620c 20000880 returned -22 [ 1131.616761][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1131.699814][ T44] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 1131.709833][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.718779][ T44] usb 1-1: Product: syz [ 1131.723401][ T44] usb 1-1: Manufacturer: syz [ 1131.728578][ T44] usb 1-1: SerialNumber: syz [ 1132.000983][ T44] usb 1-1: config 0 descriptor?? [ 1132.287361][ T44] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 1132.294618][ T44] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 1132.349839][ T44] usb 1-1: USB disconnect, device number 9 [ 1133.544238][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 1133.744586][T10124] loop4: detected capacity change from 0 to 4096 [ 1134.126547][T10124] ntfs3: loop4: Failed to load $Extend (-22). [ 1134.133264][T10124] ntfs3: loop4: Failed to initialize $Extend. [ 1134.690527][T10153] 9pnet_fd: Insufficient options for proto=fd [ 1135.489177][T10165] loop4: detected capacity change from 0 to 512 [ 1135.499217][T10165] EXT4-fs: Ignoring removed mblk_io_submit option [ 1135.546271][T10165] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1135.632069][T10165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 1135.661643][T10165] System zones: 1-12 [ 1135.814089][T10165] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1642: corrupted in-inode xattr: e_value size too large [ 1135.847892][T10165] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1642: couldn't read orphan inode 15 (err -117) [ 1135.885504][T10165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.422818][ T5182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.722800][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1662'. [ 1138.895622][T10216] loop3: detected capacity change from 0 to 16 [ 1139.315622][T10216] erofs: (device loop3): mounted with root inode @ nid 36. [ 1139.722820][T10228] loop2: detected capacity change from 0 to 164 [ 1139.840353][T10228] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1141.038344][T10249] loop4: detected capacity change from 0 to 512 [ 1141.048881][T10249] EXT4-fs: Ignoring removed nobh option [ 1141.263017][T10249] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1141.339073][T10249] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1681: Invalid block bitmap block 3 in block_group 0 [ 1141.380281][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 1141.449747][T10249] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1141.582985][T10249] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1681: invalid indirect mapped block 3103784960 (level 1) [ 1141.692429][T10249] EXT4-fs (loop4): 1 truncate cleaned up [ 1141.701149][T10249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1141.987863][T10256] loop2: detected capacity change from 0 to 2048 [ 1142.048116][T10259] binder: 10257:10259 ioctl c00c6211 0 returned -14 [ 1142.073656][T10256] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1142.176028][T10256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1142.231355][ T5182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.764667][T10266] loop4: detected capacity change from 0 to 16 [ 1142.823702][T10266] erofs: (device loop4): mounted with root inode @ nid 36. [ 1143.396710][T10269] loop1: detected capacity change from 0 to 2048 [ 1143.601936][T10277] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1143.712066][T10279] tmpfs: Bad value for 'mpol' [ 1143.765635][T10269] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1143.912414][T10269] Remounting filesystem read-only [ 1144.317393][T10289] loop4: detected capacity change from 0 to 64 [ 1144.328019][ T9087] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1145.126549][T10300] loop2: detected capacity change from 0 to 1024 [ 1145.137851][ T5197] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1145.371537][T10300] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1145.383925][T10300] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1145.839871][T10300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1146.729622][ T8766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.411913][T10332] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 1147.420132][T10332] netlink: 131640 bytes leftover after parsing attributes in process `syz.2.1718'. [ 1147.660508][ T29] audit: type=1326 audit(1727324311.568:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1147.685571][ T29] audit: type=1326 audit(1727324311.568:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1147.955951][ T5197] Bluetooth: hci4: command 0x0406 tx timeout [ 1147.978844][ T29] audit: type=1326 audit(1727324311.758:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1148.003057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.010527][ T29] audit: type=1326 audit(1727324311.758:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1148.032706][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.039715][ T29] audit: type=1326 audit(1727324311.758:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1150.939845][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 1150.948866][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.780745][T10385] CIFS mount error: No usable UNC path provided in device string! [ 1151.780745][T10385] [ 1151.791420][T10385] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1152.451667][T10392] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1749'. [ 1154.053863][T10412] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1759'. [ 1154.053988][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'. [ 1154.054089][T10412] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1759'. [ 1154.054183][T10412] netlink: 'syz.4.1759': attribute type 2 has an invalid length. [ 1154.054267][T10412] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1759'. [ 1155.523372][T10419] loop1: detected capacity change from 0 to 256 [ 1156.406040][T10419] FAT-fs (loop1): Directory bread(block 64) failed [ 1156.413332][T10419] FAT-fs (loop1): Directory bread(block 65) failed [ 1156.424456][T10419] FAT-fs (loop1): Directory bread(block 66) failed [ 1156.432044][T10419] FAT-fs (loop1): Directory bread(block 67) failed [ 1156.438890][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 1156.439521][T10419] FAT-fs (loop1): Directory bread(block 68) failed [ 1156.457146][T10419] FAT-fs (loop1): Directory bread(block 69) failed [ 1156.464580][T10419] FAT-fs (loop1): Directory bread(block 70) failed [ 1156.476002][T10419] FAT-fs (loop1): Directory bread(block 71) failed [ 1156.484329][T10419] FAT-fs (loop1): Directory bread(block 72) failed [ 1156.492662][T10419] FAT-fs (loop1): Directory bread(block 73) failed [ 1156.747969][T10419] syz.1.1761: attempt to access beyond end of device [ 1156.747969][T10419] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1158.578578][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1158.786833][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1159.114012][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=a9.3c [ 1159.126205][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.227001][ T8] usb 2-1: config 0 descriptor?? [ 1159.348712][ T29] audit: type=1326 audit(1727324322.898:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10455 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1159.372986][ T29] audit: type=1326 audit(1727324322.928:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10455 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1159.395682][ T29] audit: type=1326 audit(1727324322.928:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10455 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1159.418351][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.433164][ T8] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1159.551949][ T8] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1159.560907][ T8] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8 [ 1160.221752][ T44] usb 2-1: USB disconnect, device number 5 [ 1160.438850][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1160.642436][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1160.652855][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1160.663271][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1160.676452][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1160.806462][ T25] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1160.816517][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.825862][ T25] usb 4-1: Product: syz [ 1160.830644][ T25] usb 4-1: Manufacturer: syz [ 1160.835545][ T25] usb 4-1: SerialNumber: syz [ 1160.968963][ T25] usb 4-1: config 0 descriptor?? [ 1161.152275][ T25] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1161.559532][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 1161.709363][ T25] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1162.109642][ T7783] usb 4-1: USB disconnect, device number 13 [ 1162.749828][T10498] ipt_ECN: cannot use operation on non-tcp rule [ 1162.855283][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 1163.290005][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 1163.299409][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 1163.777723][T10516] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 1163.786317][T10516] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1807'. [ 1163.861284][T10520] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1164.711006][T10529] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 1165.327078][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1814'. [ 1166.705918][T10555] loop4: detected capacity change from 0 to 64 [ 1167.130152][T10555] Trying to free block not in datazone [ 1167.136003][T10555] Trying to free block not in datazone [ 1167.142148][T10555] Trying to free block not in datazone [ 1167.147849][T10555] Trying to free block not in datazone [ 1167.153760][T10555] minix_free_block (loop4:6): bit already cleared [ 1167.160773][T10555] Trying to free block not in datazone [ 1167.166645][T10555] Trying to free block not in datazone [ 1168.154303][T10570] capability: warning: `syz.1.1832' uses 32-bit capabilities (legacy support in use) [ 1168.369612][T10008] Bluetooth: hci3: command 0x0406 tx timeout [ 1168.728443][T10573] netlink: 'syz.0.1835': attribute type 13 has an invalid length. [ 1168.956252][T10581] loop4: detected capacity change from 0 to 64 [ 1169.881335][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1170.373666][ T25] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1170.383463][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.392055][ T25] usb 4-1: Product: syz [ 1170.396554][ T25] usb 4-1: Manufacturer: syz [ 1170.404281][ T25] usb 4-1: SerialNumber: syz [ 1170.510446][ T25] usb 4-1: config 0 descriptor?? [ 1170.817833][ T25] mos7840 4-1:0.0: required endpoints missing [ 1171.059475][ T25] usb 4-1: USB disconnect, device number 14 [ 1171.210232][T10605] SET target dimension over the limit! [ 1171.819753][T10613] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1853'. [ 1172.329976][T10619] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 1172.539314][T10623] netlink: 'syz.4.1858': attribute type 10 has an invalid length. [ 1172.552297][T10623] ipvlan1: entered promiscuous mode [ 1172.557839][T10623] ipvlan1: entered allmulticast mode [ 1172.563531][T10623] veth0_vlan: entered allmulticast mode [ 1172.570510][T10623] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1172.583306][T10623] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 1172.594688][T10623] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 1173.226473][T10631] netlink: 'syz.3.1864': attribute type 8 has an invalid length. [ 1174.209678][T10642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1868'. [ 1174.785484][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 1175.258734][T10658] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1175.561334][T10662] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 1176.127900][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1880'. [ 1176.170092][T10664] x_tables: ip6_tables: CT.2 target: invalid size 72 (kernel) != (user) 40 [ 1176.455912][T10328] coredump: 1209(syz.4.1714): written to core: VMAs: 29, size 99389440; core: 62054014 bytes, pos 99393536 [ 1177.252401][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 1177.265127][T10680] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1885'. [ 1178.905547][T10701] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1179.754244][T10713] netlink: 'syz.2.1901': attribute type 1 has an invalid length. [ 1179.762838][T10713] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1901'. [ 1180.442242][T10719] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1180.624875][T10721] overlayfs: conflicting options: metacopy=off,verity=on [ 1181.222939][T10730] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1910'. [ 1181.233103][T10730] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1910'. [ 1181.242935][T10730] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1910'. [ 1183.879636][ C1] sd 0:0:1:0: [sda] tag#2637 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1183.890828][ C1] sd 0:0:1:0: [sda] tag#2637 CDB: Write(6) 0a 0b 00 08 00 00 [ 1185.908621][ T7783] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1186.451952][ T7783] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1186.462597][ T7783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.591664][ T7783] usb 5-1: config 0 descriptor?? [ 1187.516702][ T7783] [drm:udl_init] *ERROR* Selecting channel failed [ 1187.550717][ T7783] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1187.557957][ T7783] [drm] Initialized udl on minor 2 [ 1187.578667][ T7783] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1187.588429][ T7783] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1187.610181][ T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1187.626132][ T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1187.643625][ T8] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1187.709231][ T7783] usb 5-1: USB disconnect, device number 14 [ 1188.019321][T10820] netlink: 'syz.3.1952': attribute type 11 has an invalid length. [ 1189.338877][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1189.442531][T10835] netlink: 'syz.2.1961': attribute type 2 has an invalid length. [ 1189.641755][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1189.795524][ T8] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1189.806538][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.873112][ T8] usb 2-1: config 0 descriptor?? [ 1189.953789][ T8] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 1190.384764][T10848] loop2: detected capacity change from 0 to 24 [ 1190.400634][T10848] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1190.434261][T10848] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 1190.820016][ T8] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1190.829075][ T8] sq905c 2-1:0.0: Reading version command failed [ 1190.836310][ T8] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1190.948610][ T8] usb 2-1: USB disconnect, device number 6 [ 1192.718735][T10879] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1194.005417][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 1194.152951][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1194.518928][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1194.555506][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=28.6d [ 1194.567861][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.577638][ T25] usb 2-1: Product: syz [ 1194.582292][ T25] usb 2-1: Manufacturer: syz [ 1194.587210][ T25] usb 2-1: SerialNumber: syz [ 1194.627193][ T25] usb 2-1: config 0 descriptor?? [ 1194.748546][ T25] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1194.755145][ T25] gspca_stv06xx: st6422 sensor detected [ 1194.881296][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1195.089769][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1195.169885][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1195.182773][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.192320][ T8] usb 5-1: Product: syz [ 1195.197216][ T8] usb 5-1: Manufacturer: syz [ 1195.202729][ T8] usb 5-1: SerialNumber: syz [ 1195.240737][ T25] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 1195.301798][ T25] usb 2-1: unknown interface protocol 0x8e, assuming v1 [ 1195.309521][ T25] usb 2-1: cannot find UAC_HEADER [ 1195.314578][ T8] usb 5-1: config 0 descriptor?? [ 1195.423393][ T8] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1195.443382][ T25] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1195.529562][ T25] usb 2-1: USB disconnect, device number 7 [ 1195.678504][ T8] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1195.689324][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1195.774857][ T8] usb 5-1: USB disconnect, device number 15 [ 1195.951959][ T5585] udevd[5585]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.836986][T10926] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 1196.845363][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 1197.600295][T10938] loop3: detected capacity change from 0 to 256 [ 1197.847680][T10944] CIFS: VFS: Malformed UNC in devname [ 1198.454116][T10955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2018'. [ 1198.468908][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2018'. [ 1198.492334][T10938] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 1198.502744][T10938] FAT-fs (loop3): Filesystem has been set read-only [ 1198.883065][T10938] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 1198.964202][T10938] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 1199.358444][ T7783] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1199.596401][ T7783] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1199.606020][ T7783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.691457][ T7783] usb 1-1: config 0 descriptor?? [ 1199.770755][ T7783] cp210x 1-1:0.0: cp210x converter detected [ 1200.146171][T10973] tmpfs: Bad value for 'mpol' [ 1200.170361][ T7783] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1200.179298][ T7783] cp210x 1-1:0.0: querying part number failed [ 1200.250311][ T7783] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1200.366628][ T7783] usb 1-1: USB disconnect, device number 10 [ 1200.427574][ T7783] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1200.439478][ T7783] cp210x 1-1:0.0: device disconnected [ 1200.965651][T10981] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1202.358043][T11000] netlink: 'syz.0.2041': attribute type 1 has an invalid length. [ 1202.570318][T11002] loop1: detected capacity change from 0 to 256 [ 1202.602636][T11002] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1202.769748][T11006] netlink: 'syz.2.2044': attribute type 3 has an invalid length. [ 1203.544084][T11002] FAT-fs (loop1): Directory bread(block 64) failed [ 1203.551466][T11002] FAT-fs (loop1): Directory bread(block 65) failed [ 1203.559214][T11002] FAT-fs (loop1): Directory bread(block 66) failed [ 1203.566045][T11002] FAT-fs (loop1): Directory bread(block 67) failed [ 1203.573226][T11002] FAT-fs (loop1): Directory bread(block 68) failed [ 1203.583572][T11002] FAT-fs (loop1): Directory bread(block 69) failed [ 1203.591855][T11002] FAT-fs (loop1): Directory bread(block 70) failed [ 1203.598866][T11002] FAT-fs (loop1): Directory bread(block 71) failed [ 1203.605878][T11002] FAT-fs (loop1): Directory bread(block 72) failed [ 1203.612923][T11002] FAT-fs (loop1): Directory bread(block 73) failed [ 1205.669590][T11050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2060'. [ 1205.826144][T11050] geneve2: entered promiscuous mode [ 1205.836203][T11050] geneve2: entered allmulticast mode [ 1206.428671][ T7783] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1206.687542][ T7783] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1206.697413][ T7783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.781210][ T7783] usb 5-1: config 0 descriptor?? [ 1207.104568][ T7783] [drm] vendor descriptor length:6 data:06 5f 14 24 49 ef 00 00 00 00 00 [ 1207.113670][ T7783] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1207.350120][ T7783] [drm:udl_init] *ERROR* Selecting channel failed [ 1207.402139][ T7783] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1207.409393][ T7783] [drm] Initialized udl on minor 2 [ 1207.427283][ T7783] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1207.436971][ T7783] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1207.461321][ T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1207.493105][ T7783] usb 5-1: USB disconnect, device number 16 [ 1207.521525][ T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1207.530539][ T8] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1207.803149][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 1208.632373][T11083] libceph: resolve '0..' (ret=-3): failed [ 1208.938363][T11090] netlink: 'syz.2.2082': attribute type 12 has an invalid length. [ 1209.349713][T11092] netlink: 'syz.1.2084': attribute type 2 has an invalid length. [ 1209.357868][T11092] netlink: 'syz.1.2084': attribute type 2 has an invalid length. [ 1209.366371][T11092] netlink: 'syz.1.2084': attribute type 1 has an invalid length. [ 1209.374938][T11092] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2084'. [ 1209.529449][T11098] syz.3.2086: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1209.545735][T11098] CPU: 0 UID: 0 PID: 11098 Comm: syz.3.2086 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 1209.556569][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1209.566974][T11098] Call Trace: [ 1209.570950][T11098] [ 1209.574128][T11098] dump_stack_lvl+0x216/0x2d0 [ 1209.579391][T11098] dump_stack+0x1e/0x30 [ 1209.584664][T11098] warn_alloc+0x455/0x650 [ 1209.590682][T11098] ? __update_load_avg_se+0xbb0/0x11a0 [ 1209.596695][T11098] ? __vmalloc_node_range_noprof+0xd6/0x2740 [ 1209.603389][T11098] __vmalloc_node_range_noprof+0x130/0x2740 [ 1209.609681][T11098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1209.616025][T11098] ? kmsan_get_metadata+0x13e/0x1c0 [ 1209.621884][T11098] ? kmsan_get_metadata+0x13e/0x1c0 [ 1209.627799][T11098] ? kmsan_get_metadata+0x13e/0x1c0 [ 1209.633533][T11098] ? kmsan_get_metadata+0x13e/0x1c0 [ 1209.639505][T11098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1209.646386][T11098] ? kmsan_get_metadata+0x13e/0x1c0 [ 1209.652023][T11098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1209.658278][T11098] vmalloc_user_noprof+0x90/0xb0 [ 1209.663752][T11098] ? xskq_create+0x105/0x270 [ 1209.668944][T11098] xskq_create+0x105/0x270 [ 1209.673703][T11098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1209.680647][T11098] xsk_init_queue+0x115/0x1f0 [ 1209.685698][T11098] xsk_setsockopt+0x882/0xcc0 [ 1209.690897][T11098] do_sock_setsockopt+0x4bb/0x7d0 [ 1209.696442][T11098] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1209.702068][T11098] __sys_setsockopt+0x327/0x4c0 [ 1209.707507][T11098] __ia32_sys_setsockopt+0xe2/0x160 [ 1209.713165][T11098] ia32_sys_call+0x3d22/0x40d0 [ 1209.718336][T11098] __do_fast_syscall_32+0xb0/0x110 [ 1209.724127][T11098] ? irqentry_exit+0x16/0x60 [ 1209.729277][T11098] do_fast_syscall_32+0x38/0x80 [ 1209.734938][T11098] do_SYSENTER_32+0x1f/0x30 [ 1209.739950][T11098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1209.747726][T11098] RIP: 0023:0xf745d579 [ 1209.752084][T11098] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1209.772386][T11098] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1209.781157][T11098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 1209.789577][T11098] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000020 [ 1209.797918][T11098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1209.806681][T11098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1209.815005][T11098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1209.823369][T11098] [ 1209.826862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.837313][T11098] Mem-Info: [ 1209.851699][T11098] active_anon:5223 inactive_anon:0 isolated_anon:0 [ 1209.851699][T11098] active_file:10988 inactive_file:38844 isolated_file:0 [ 1209.851699][T11098] unevictable:768 dirty:293 writeback:0 [ 1209.851699][T11098] slab_reclaimable:4226 slab_unreclaimable:22718 [ 1209.851699][T11098] mapped:21874 shmem:1265 pagetables:793 [ 1209.851699][T11098] sec_pagetables:0 bounce:0 [ 1209.851699][T11098] kernel_misc_reclaimable:0 [ 1209.851699][T11098] free:402340 free_pcp:5269 free_cma:0 [ 1209.897496][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.910370][T11098] Node 0 active_anon:20892kB inactive_anon:0kB active_file:43952kB inactive_file:155304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87496kB dirty:1172kB writeback:0kB shmem:3524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4704kB pagetables:3172kB sec_pagetables:0kB all_unreclaimable? no [ 1209.943037][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.953775][T11098] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1209.984377][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.991293][T11098] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1210.019422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.029941][T11098] lowmem_reserve[]: 0 891 1204 0 0 [ 1210.036815][T11098] Node 0 DMA32 free:616288kB boost:0kB min:36084kB low:45104kB high:54124kB reserved_highatomic:0KB active_anon:5236kB inactive_anon:0kB active_file:40528kB inactive_file:35944kB unevictable:0kB writepending:208kB present:3129332kB managed:951320kB mlocked:0kB bounce:0kB free_pcp:19404kB local_pcp:948kB free_cma:0kB [ 1210.067398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.074425][T11098] lowmem_reserve[]: 0 0 312 0 0 [ 1210.080112][T11098] Node 0 Normal free:15736kB boost:0kB min:12672kB low:15840kB high:19008kB reserved_highatomic:0KB active_anon:15724kB inactive_anon:0kB active_file:3424kB inactive_file:119360kB unevictable:1536kB writepending:944kB present:1048580kB managed:320496kB mlocked:0kB bounce:0kB free_pcp:1588kB local_pcp:360kB free_cma:0kB [ 1210.111034][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.117941][T11098] lowmem_reserve[]: 0 0 0 0 0 [ 1210.123632][T11098] Node 1 Normal free:973240kB boost:0kB min:41188kB low:51484kB high:61780kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:1041656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1210.153079][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.163722][T11098] lowmem_reserve[]: 0 0 0 0 0 [ 1210.169398][T11098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1210.182962][T11098] Node 0 DMA32: 782*4kB (ME) 769*8kB (ME) 582*16kB (ME) 392*32kB (ME) 229*64kB (UME) 105*128kB (ME) 70*256kB (UME) 79*512kB (UME) 79*1024kB (UME) 24*2048kB (UM) 90*4096kB (UM) = 616288kB [ 1210.204098][T11098] Node 0 Normal: 32*4kB (ME) 51*8kB (ME) 54*16kB (ME) 62*32kB (UME) 21*64kB (UME) 10*128kB (UME) 2*256kB (UE) 4*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 15736kB [ 1210.226175][T11098] Node 1 Normal: 4*4kB (UME) 5*8kB (ME) 14*16kB (UE) 19*32kB (UME) 17*64kB (UME) 12*128kB (UME) 6*256kB (UM) 3*512kB (ME) 8*1024kB (UME) 4*2048kB (UME) 232*4096kB (ME) = 973240kB [ 1210.250428][T11098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1210.261573][T11098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1210.271364][T11098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1210.283552][T11098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1210.294028][T11098] 51082 total pagecache pages [ 1210.299310][T11098] 0 pages in swap cache [ 1210.303763][T11098] Free swap = 124996kB [ 1210.308531][T11098] Total swap = 124996kB [ 1210.313010][T11098] 2097051 pages RAM [ 1210.317422][T11098] 0 pages HighMem/MovableOnly [ 1210.322769][T11098] 1517659 pages reserved [ 1210.327254][T11098] 0 pages cma reserved [ 1211.388817][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1211.579712][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1211.613575][ T25] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1211.622486][ T25] usb 1-1: config 0 has no interface number 0 [ 1211.629700][ T25] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1211.763573][ T25] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1211.776370][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.786470][ T25] usb 1-1: Product: syz [ 1211.791368][ T25] usb 1-1: Manufacturer: syz [ 1211.796617][ T25] usb 1-1: SerialNumber: syz [ 1211.964258][ T25] usb 1-1: config 0 descriptor?? [ 1212.391279][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.398641][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.467028][ T25] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1212.543900][ T25] usb 1-1: USB disconnect, device number 11 [ 1212.695567][T11128] loop4: detected capacity change from 0 to 1024 [ 1212.793904][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1212.993902][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 1213.043690][ T44] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 1213.401167][ T3579] hfsplus: b-tree write err: -5, ino 4 [ 1213.833301][T11142] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2107'. [ 1214.032203][T11139] loop3: detected capacity change from 0 to 1024 [ 1214.044058][ T44] usb 3-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=98.e6 [ 1214.053906][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.062854][ T44] usb 3-1: Product: syz [ 1214.067784][ T44] usb 3-1: Manufacturer: syz [ 1214.073286][ T44] usb 3-1: SerialNumber: syz [ 1214.084964][ T44] usb 3-1: config 0 descriptor?? [ 1214.090150][T11139] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1214.121592][T11139] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1214.128711][ T44] usb 3-1: bad CDC descriptors [ 1214.141918][ T44] cdc_acm 3-1:0.0: Zero length descriptor references [ 1214.142229][T11139] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1214.149582][ T44] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1214.163798][T11139] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.2103: Freeing blocks not in datazone - block = 0, count = 4096 [ 1214.165228][T11139] EXT4-fs (loop3): 1 orphan inode deleted [ 1214.395730][T11139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1214.709296][ T7783] usb 3-1: USB disconnect, device number 9 [ 1214.903540][ T5186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.414364][T11162] netlink: 'syz.2.2116': attribute type 3 has an invalid length. [ 1215.423366][T11162] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2116'. [ 1215.450022][T11157] loop1: detected capacity change from 0 to 512 [ 1215.579406][T11157] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 1215.949461][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2119'. [ 1215.959718][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2119'. [ 1216.441486][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2122'. [ 1216.615500][T11177] loop3: detected capacity change from 0 to 512 [ 1216.686972][T11177] EXT4-fs: Ignoring removed nobh option [ 1216.743979][T11177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1216.833147][T11177] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1216.903231][T11177] EXT4-fs (loop3): 1 truncate cleaned up [ 1216.911606][T11177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.060625][T11177] syz.3.2123: attempt to access beyond end of device [ 1217.060625][T11177] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1217.074397][T11177] qnx4: unable to read the superblock [ 1217.687570][ T5186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.266678][T11200] loop4: detected capacity change from 0 to 256 [ 1218.653071][T11200] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3bed3e2a, utbl_chksum : 0xe619d30d) [ 1218.719674][T11206] tmpfs: Bad value for 'size' [ 1219.557143][T11221] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2144'. [ 1219.647029][T11222] netlink: 'syz.3.2142': attribute type 5 has an invalid length. [ 1219.661909][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 1220.936728][T11242] xt_ecn: cannot match TCP bits for non-tcp packets [ 1221.766767][T11253] netlink: 'syz.4.2159': attribute type 4 has an invalid length. [ 1221.775420][T11253] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2159'. [ 1224.229353][T11293] (unnamed net_device) (uninitialized): peer notification delay (31) is not a multiple of miimon (100), value rounded to 0 ms [ 1224.455705][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 1224.500928][T11297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2180'. [ 1224.510601][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 1225.425496][T11309] loop4: detected capacity change from 0 to 512 [ 1225.507634][T11309] EXT4-fs: Ignoring removed bh option [ 1225.569197][T11309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1226.140850][T11309] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.2186: bad orphan inode 17 [ 1226.204403][T11309] EXT4-fs (loop4): Remounting filesystem read-only [ 1226.215795][T11309] ext4_test_bit(bit=16, block=4) = 1 [ 1226.222644][T11309] is_bad_inode(inode)=0 [ 1226.227119][T11309] NEXT_ORPHAN(inode)=1048336 [ 1226.232343][T11309] max_ino=32 [ 1226.235768][T11309] i_nlink=0 [ 1226.241321][T11309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.734625][ T5182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.497808][T11359] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1228.748486][ T44] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1228.958828][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 1229.036783][ T44] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1229.047441][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.056202][ T44] usb 5-1: Product: syz [ 1229.060930][ T44] usb 5-1: Manufacturer: syz [ 1229.066003][ T44] usb 5-1: SerialNumber: syz [ 1229.160493][ T44] usb 5-1: config 0 descriptor?? [ 1229.436567][ T44] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1229.446134][ T44] eb 9a 3b 80 9b e4 7a f0 [ 1229.452069][ T44] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1229.763997][ T8] usb 5-1: USB disconnect, device number 17 [ 1230.616748][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2217'. [ 1231.340025][T11388] ALSA: mixer_oss: invalid OSS volume 'u' [ 1233.109220][T11413] usb usb8: usbfs: process 11413 (syz.2.2234) did not claim interface 0 before use [ 1233.295087][T11417] netlink: 'syz.3.2235': attribute type 3 has an invalid length. [ 1233.304088][T11417] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2235'. [ 1234.368954][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1234.637317][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1234.647345][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.762033][ T8] usb 4-1: config 0 descriptor?? [ 1235.123962][T11443] loop2: detected capacity change from 0 to 512 [ 1235.294799][T11443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1235.349614][T11443] EXT4-fs: old and new quota format mixing [ 1235.572899][ T8] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 1235.580554][ T8] hackrf 4-1:0.0: Could not detect board [ 1235.586622][ T8] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 1235.642041][T11443] loop2: detected capacity change from 0 to 1764 [ 1235.677971][ T8] usb 4-1: USB disconnect, device number 15 [ 1235.745792][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'. [ 1238.261443][T11484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1238.855577][T11493] loop2: detected capacity change from 0 to 256 [ 1239.199509][T11501] usb usb8: usbfs: process 11501 (syz.4.2274) did not claim interface 0 before use [ 1239.335228][T11493] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1240.926941][T11522] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1241.579561][T11528] tmpfs: Bad value for 'size' [ 1242.604862][T11541] : Can't lookup blockdev [ 1242.755641][T11543] tmpfs: Bad value for 'mpol' [ 1242.930754][T11546] loop1: detected capacity change from 0 to 22 [ 1242.985235][T11546] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1244.503645][T11566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.139036][T11580] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1245.154665][T11580] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1245.370640][T11579] loop4: detected capacity change from 0 to 1024 [ 1246.093221][T11588] loop1: detected capacity change from 0 to 256 [ 1246.224653][T11590] loop2: detected capacity change from 0 to 256 [ 1247.636926][T11608] loop1: detected capacity change from 0 to 16 [ 1247.745537][T11608] erofs: (device loop1): mounted with root inode @ nid 36. [ 1247.870907][T11608] CIFS mount error: No usable UNC path provided in device string! [ 1247.870907][T11608] [ 1247.883403][T11608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1248.710725][T11618] xt_connbytes: Forcing CT accounting to be enabled [ 1248.717908][T11618] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1250.568801][T11646] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2343'. [ 1250.581334][T11640] loop2: detected capacity change from 0 to 1764 [ 1250.592683][T11646] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1250.729373][T11640] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1251.728638][T11660] loop1: detected capacity change from 0 to 512 [ 1252.126563][ T5248] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1252.223538][T11660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.237709][T11660] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.443055][T11673] loop3: detected capacity change from 0 to 256 [ 1252.478754][ T5248] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1252.488411][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.496758][ T5248] usb 5-1: Product: syz [ 1252.501529][ T5248] usb 5-1: Manufacturer: syz [ 1252.506421][ T5248] usb 5-1: SerialNumber: syz [ 1252.651346][ T5248] usb 5-1: config 0 descriptor?? [ 1252.827707][ T9087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.859399][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 1252.962323][ T5248] hso 5-1:0.0: Failed to find BULK IN ep [ 1252.983800][ T5248] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1253.359723][ T5248] usb 5-1: USB disconnect, device number 18 [ 1253.687364][T11685] loop3: detected capacity change from 0 to 64 [ 1253.715781][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2358'. [ 1253.725793][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2358'. [ 1255.029338][T11699] netlink: 'syz.0.2368': attribute type 14 has an invalid length. [ 1255.549286][T11707] netlink: 'syz.2.2372': attribute type 2 has an invalid length. [ 1255.659511][T11709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2373'. [ 1255.718465][ T5239] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1255.928761][ T5239] usb 5-1: Using ep0 maxpacket: 8 [ 1255.965246][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1255.975655][ T5239] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1255.986879][ T5239] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD [ 1255.998994][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 19, changing to 7 [ 1256.081725][ T5239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 1256.091459][ T5239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.100140][ T5239] usb 5-1: Product: syz [ 1256.104622][ T5239] usb 5-1: Manufacturer: syz [ 1256.112358][ T5239] usb 5-1: SerialNumber: syz [ 1256.128842][ T5239] usb 5-1: config 0 descriptor?? [ 1256.231143][ T5239] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 1256.238389][ T5239] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 1256.468926][ T5248] usb 5-1: USB disconnect, device number 19 [ 1257.942098][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2379'. [ 1258.579314][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1258.927212][ T29] audit: type=1326 audit(1727324422.898:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.1.2389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 1258.951186][ T29] audit: type=1326 audit(1727324422.898:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.1.2389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 1258.977544][ T29] audit: type=1326 audit(1727324422.898:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.1.2389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 1259.067038][ T29] audit: type=1326 audit(1727324423.038:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.1.2389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 1259.419235][T11744] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2391'. [ 1261.310167][ T5239] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1261.568833][ T5239] usb 2-1: Using ep0 maxpacket: 32 [ 1261.597937][ T5239] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1261.606852][ T5239] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1261.616048][ T5239] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.626740][ T5239] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1261.638934][ T5239] usb 2-1: config 1 has no interface number 0 [ 1261.645607][ T5239] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1261.656755][ T5239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.902962][ T5239] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1262.154152][ T5239] snd_usb_pod 2-1:1.1: set_interface failed [ 1262.161700][ T5239] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1262.170181][ T5239] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1262.310208][ T5239] usb 2-1: USB disconnect, device number 8 [ 1264.728714][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1264.809701][ T29] audit: type=1400 audit(1727324428.768:39): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A0A994F13051CA817FA97844BAA978732BDAD5A3D174B3B1A18F96A11DC04562D34DE812A8A50C8704F71C73A pid=11814 comm="syz.1.2425" [ 1265.189030][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1265.256055][ T8] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=a6.59 [ 1265.265952][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.274860][ T8] usb 3-1: Product: syz [ 1265.279654][ T8] usb 3-1: Manufacturer: syz [ 1265.284540][ T8] usb 3-1: SerialNumber: syz [ 1265.392507][ T8] usb 3-1: config 0 descriptor?? [ 1265.454967][ T8] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1265.898878][ T5239] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1265.920831][ T8] gspca_topro: reg_w err -71 [ 1265.963039][ T8] gspca_topro: Sensor soi763a [ 1266.098996][ T8] usb 3-1: USB disconnect, device number 10 [ 1266.168631][ T5239] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1266.177736][ T5239] usb 2-1: config 0 has no interface number 0 [ 1266.184328][ T5239] usb 2-1: too many endpoints for config 0 interface 120 altsetting 48: 59, using maximum allowed: 30 [ 1266.196028][ T5239] usb 2-1: config 0 interface 120 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 1266.210337][ T5239] usb 2-1: config 0 interface 120 has no altsetting 0 [ 1266.332059][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2434'. [ 1266.400294][ T5239] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1266.411933][ T5239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.420454][ T5239] usb 2-1: Product: syz [ 1266.425695][ T5239] usb 2-1: Manufacturer: syz [ 1266.430862][ T5239] usb 2-1: SerialNumber: syz [ 1266.509596][ T5239] usb 2-1: config 0 descriptor?? [ 1267.266510][ T5239] usb 2-1: USB disconnect, device number 9 [ 1268.082187][T11850] loop4: detected capacity change from 0 to 2048 [ 1268.169363][T11850] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1268.345488][T11856] loop1: detected capacity change from 0 to 64 [ 1269.072312][T11862] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1270.679712][T11885] cgroup: noprefix used incorrectly [ 1271.220095][T11895] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2463'. [ 1271.229986][T11895] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2463'. [ 1272.486416][T11912] loop3: detected capacity change from 0 to 1024 [ 1272.489649][T11912] EXT4-fs: Ignoring removed orlov option [ 1272.980414][T11912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.247855][T11912] EXT4-fs error (device loop3): ext4_xattr_set_entry:1668: inode #13: comm syz.3.2471: corrupted xattr entries [ 1273.518739][T11934] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2479'. [ 1273.884577][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 1273.891667][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.177940][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2481'. [ 1274.355278][ T5186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.781514][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2507'. [ 1277.859578][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2508'. [ 1277.978588][ T44] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1278.026174][T11997] netlink: 'syz.0.2509': attribute type 21 has an invalid length. [ 1278.035107][T11997] netlink: 'syz.0.2509': attribute type 5 has an invalid length. [ 1278.279608][ T44] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1278.289399][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.404333][ T44] usb 4-1: config 0 descriptor?? [ 1278.526800][ T44] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1278.658991][ T5239] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1278.742436][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 1278.989653][ T5239] usb 1-1: Using ep0 maxpacket: 8 [ 1279.022960][ T5239] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1279.032382][ T5239] usb 1-1: config 179 has no interface number 0 [ 1279.039247][ T5239] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1279.053859][ T5239] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1279.066771][ T5239] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1279.080538][ T5239] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1279.091658][ T5239] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1279.105796][ T5239] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1279.113235][ T5239] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1279.123340][ T5239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.497557][ T44] gp8psk: usb in 137 operation failed. [ 1279.503644][ T44] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1279.514982][ T44] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1279.680684][T12000] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1279.841625][ T5239] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 1280.044376][ T44] usb 4-1: USB disconnect, device number 16 [ 1280.356615][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1280.365650][ T5239] usb 1-1: USB disconnect, device number 12 [ 1280.374299][ T5239] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1281.165159][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'. [ 1282.586837][T12046] loop3: detected capacity change from 0 to 256 [ 1283.074076][T12047] loop1: detected capacity change from 0 to 2048 [ 1283.230133][T12047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1284.580876][T12074] afs: Unknown parameter 'fowner>00000000000000000000' [ 1285.462943][T12085] loop3: detected capacity change from 0 to 64 [ 1286.552951][T12099] netlink: 'syz.0.2555': attribute type 7 has an invalid length. [ 1286.561543][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 1288.150595][ T3579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.431611][T12119] binder: 12118:12119 ioctl c00c620f 0 returned -14 [ 1288.494830][T12122] netlink: 'syz.0.2568': attribute type 1 has an invalid length. [ 1288.845236][T10008] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1289.009331][T10008] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1289.023600][T12129] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2574'. [ 1289.034077][T10008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1289.262984][T10008] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1289.307528][T10008] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1289.321715][T10008] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1289.366980][ T29] audit: type=1326 audit(1727324453.258:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12133 comm="syz.1.2575" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 1289.505165][ T3579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.737154][ T3579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.912561][T12139] loop4: detected capacity change from 0 to 256 [ 1289.983511][ T3579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.281042][T12139] FAT-fs (loop4): Directory bread(block 64) failed [ 1290.287979][T12139] FAT-fs (loop4): Directory bread(block 65) failed [ 1290.295370][T12139] FAT-fs (loop4): Directory bread(block 66) failed [ 1290.302509][T12139] FAT-fs (loop4): Directory bread(block 67) failed [ 1290.312941][T12139] FAT-fs (loop4): Directory bread(block 68) failed [ 1290.320956][T12139] FAT-fs (loop4): Directory bread(block 69) failed [ 1290.327994][T12139] FAT-fs (loop4): Directory bread(block 70) failed [ 1290.335687][T12139] FAT-fs (loop4): Directory bread(block 71) failed [ 1290.346189][T12139] FAT-fs (loop4): Directory bread(block 72) failed [ 1290.353251][T12139] FAT-fs (loop4): Directory bread(block 73) failed [ 1291.392776][T12154] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1291.400549][T12154] [U] J"—e:ÀÆ" [ 1291.483650][T10008] Bluetooth: hci2: command tx timeout [ 1291.704550][ T3579] bridge_slave_1: left allmulticast mode [ 1291.710718][ T3579] bridge_slave_1: left promiscuous mode [ 1291.717745][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.828683][ T3579] bridge_slave_0: left allmulticast mode [ 1291.834654][ T3579] bridge_slave_0: left promiscuous mode [ 1291.849491][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.595421][T10008] Bluetooth: hci2: command tx timeout [ 1294.472136][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'. [ 1294.547262][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.629106][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.685485][ T3579] bond0 (unregistering): Released all slaves [ 1294.707829][ T3579] bond1 (unregistering): Released all slaves [ 1294.949175][T12120] chnl_net:caif_netlink_parms(): no params data found [ 1295.643785][T10008] Bluetooth: hci2: command tx timeout [ 1296.107399][T12214] program syz.4.2611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1296.634934][ T3579] hsr_slave_0: left promiscuous mode [ 1296.697627][ T3579] hsr_slave_1: left promiscuous mode [ 1296.763697][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.765788][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 1296.771985][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.972780][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.980865][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.153070][T12224] loop4: detected capacity change from 0 to 1024 [ 1297.213111][ T3579] veth1_macvtap: left promiscuous mode [ 1297.219220][ T3579] veth0_macvtap: left promiscuous mode [ 1297.225333][ T3579] veth1_vlan: left promiscuous mode [ 1297.231414][ T3579] veth0_vlan: left promiscuous mode [ 1297.249768][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 1297.302733][T12224] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1297.326997][T12224] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1297.410084][T12224] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1297.489842][T12224] EXT4-fs error (device loop4): __ext4_get_inode_loc:4403: comm syz.4.2613: Invalid inode table block 0 in block_group 0 [ 1297.639211][T12224] EXT4-fs (loop4): Remounting filesystem read-only [ 1297.646182][T12224] Quota error (device loop4): write_blk: dquota write failed [ 1297.655147][T12224] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1297.665842][T12224] EXT4-fs (loop4): 1 truncate cleaned up [ 1297.742507][T10008] Bluetooth: hci2: command tx timeout [ 1297.851507][T12224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1298.317613][ T5182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.308812][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1300.381173][T12264] loop1: detected capacity change from 0 to 512 [ 1300.406968][T12264] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1300.584560][T10008] Bluetooth: hci3: unexpected event for opcode 0x200b [ 1300.608046][ T8] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1300.617875][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.626649][ T8] usb 3-1: Product: syz [ 1300.631836][ T8] usb 3-1: Manufacturer: syz [ 1300.636742][ T8] usb 3-1: SerialNumber: syz [ 1300.646945][ T8] usb 3-1: config 0 descriptor?? [ 1300.683543][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1301.123399][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 1301.390567][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 1301.511954][ T8] gspca_sunplus: reg_w_riv err -71 [ 1301.517941][ T8] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1301.657905][ T8] usb 3-1: USB disconnect, device number 11 [ 1302.467298][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.475478][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.483646][T12120] bridge_slave_0: entered allmulticast mode [ 1302.498800][T12120] bridge_slave_0: entered promiscuous mode [ 1302.721377][T12274] loop1: detected capacity change from 0 to 256 [ 1302.783965][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.796027][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.808604][T12120] bridge_slave_1: entered allmulticast mode [ 1302.819795][T12120] bridge_slave_1: entered promiscuous mode [ 1303.451357][T12280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2636'. [ 1303.477362][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.532810][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.953611][T12120] team0: Port device team_slave_0 added [ 1304.082298][T12120] team0: Port device team_slave_1 added [ 1304.207356][T12294] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1304.216911][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1304.673178][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.680643][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.707478][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.882356][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.889863][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.916499][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.890679][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2645'. [ 1305.901474][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2645'. [ 1306.094433][T12120] hsr_slave_0: entered promiscuous mode [ 1306.234321][T12120] hsr_slave_1: entered promiscuous mode [ 1306.296650][T12120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.304747][T12120] Cannot create hsr debugfs directory [ 1307.892736][T12340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2658'. [ 1307.902317][T12340] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2658'. [ 1309.169844][T12354] xt_CT: No such helper "snmp_trap" [ 1309.804886][T12120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1310.075420][T12120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1310.216491][T12120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1310.351500][T12120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1311.748741][T12120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.810922][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.890581][ T3149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.898494][ T3149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.923667][ T3149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.931606][ T3149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.142408][T12120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1312.153309][T12120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1313.652908][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'. [ 1313.940512][T12120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.477851][T12120] veth0_vlan: entered promiscuous mode [ 1314.624117][T12120] veth1_vlan: entered promiscuous mode [ 1315.024011][T12120] veth0_macvtap: entered promiscuous mode [ 1315.133893][T12120] veth1_macvtap: entered promiscuous mode [ 1315.497502][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.512561][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.523882][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.534954][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.545372][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.556388][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.566762][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.577690][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.593781][T12120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.764181][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.775899][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.786126][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.797143][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.810826][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.822723][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.833022][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.843906][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.860230][T12120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.892129][T12120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.901510][T12120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.915452][T12120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.925791][T12120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.809410][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1317.273311][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1317.283436][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.292163][ T8] usb 3-1: Product: syz [ 1317.296732][ T8] usb 3-1: Manufacturer: syz [ 1317.301835][ T8] usb 3-1: SerialNumber: syz [ 1317.381826][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1318.042318][T12443] ===================================================== [ 1318.050151][T12443] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 [ 1318.057712][T12443] _copy_to_user+0xbc/0x110 [ 1318.066663][T12443] raw_ioctl+0x3d28/0x5440 [ 1318.074114][T12443] __se_compat_sys_ioctl+0x785/0x1080 [ 1318.079945][T12443] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1318.085542][T12443] ia32_sys_call+0x32a2/0x40d0 [ 1318.090803][T12443] __do_fast_syscall_32+0xb0/0x110 [ 1318.096157][T12443] do_fast_syscall_32+0x38/0x80 [ 1318.101446][T12443] do_SYSENTER_32+0x1f/0x30 [ 1318.106187][T12443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.113127][T12443] [ 1318.115585][T12443] Uninit was created at: [ 1318.120351][T12443] __kmalloc_noprof+0x661/0xf30 [ 1318.125492][T12443] raw_ioctl+0x3bc5/0x5440 [ 1318.130424][T12443] __se_compat_sys_ioctl+0x785/0x1080 [ 1318.136064][T12443] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1318.141789][T12443] ia32_sys_call+0x32a2/0x40d0 [ 1318.146857][T12443] __do_fast_syscall_32+0xb0/0x110 [ 1318.152420][T12443] do_fast_syscall_32+0x38/0x80 [ 1318.157504][T12443] do_SYSENTER_32+0x1f/0x30 [ 1318.165968][T12443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.174297][T12443] [ 1318.176757][T12443] Bytes 0-4095 of 4096 are uninitialized [ 1318.182769][T12443] Memory access of size 4096 starts at ffff888082e58000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1318.190063][T12443] Data copied to user address 00000000f5744520 [ 1318.196492][T12443] [ 1318.199284][T12443] CPU: 1 UID: 0 PID: 12443 Comm: syz.2.2693 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 1318.210214][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1318.220657][T12443] ===================================================== [ 1318.227759][T12443] Disabling lock debugging due to kernel taint [ 1318.234321][T12443] Kernel panic - not syncing: kmsan.panic set ... [ 1318.240950][T12443] CPU: 1 UID: 0 PID: 12443 Comm: syz.2.2693 Tainted: G B 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 1318.253166][T12443] Tainted: [B]=BAD_PAGE [ 1318.257483][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1318.267837][T12443] Call Trace: [ 1318.271277][T12443] [ 1318.274375][T12443] dump_stack_lvl+0x216/0x2d0 [ 1318.279363][T12443] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1318.285503][T12443] dump_stack+0x1e/0x30 [ 1318.289953][T12443] panic+0x4e2/0xcf0 [ 1318.294153][T12443] ? kmsan_get_metadata+0xd1/0x1c0 [ 1318.299584][T12443] kmsan_report+0x2c7/0x2d0 [ 1318.304634][T12443] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1318.310763][T12443] ? kmsan_internal_check_memory+0x48c/0x560 [ 1318.317045][T12443] ? kmsan_copy_to_user+0xd5/0xf0 [ 1318.322365][T12443] ? _copy_to_user+0xbc/0x110 [ 1318.327346][T12443] ? raw_ioctl+0x3d28/0x5440 [ 1318.332226][T12443] ? __se_compat_sys_ioctl+0x785/0x1080 [ 1318.338035][T12443] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 1318.343763][T12443] ? ia32_sys_call+0x32a2/0x40d0 [ 1318.348997][T12443] ? __do_fast_syscall_32+0xb0/0x110 [ 1318.354534][T12443] ? do_fast_syscall_32+0x38/0x80 [ 1318.359786][T12443] ? do_SYSENTER_32+0x1f/0x30 [ 1318.364692][T12443] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.371502][T12443] ? kmsan_get_metadata+0x13e/0x1c0 [ 1318.377019][T12443] ? kmsan_get_metadata+0x13e/0x1c0 [ 1318.382533][T12443] ? kmsan_get_metadata+0x13e/0x1c0 [ 1318.388044][T12443] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1318.394186][T12443] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 1318.399938][T12443] ? filter_irq_stacks+0x60/0x1a0 [ 1318.405335][T12443] ? kmsan_get_metadata+0x13e/0x1c0 [ 1318.410859][T12443] ? kmsan_get_metadata+0x13e/0x1c0 [ 1318.416410][T12443] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1318.422566][T12443] kmsan_internal_check_memory+0x48c/0x560 [ 1318.428696][T12443] kmsan_copy_to_user+0xd5/0xf0 [ 1318.433855][T12443] ? should_fail_usercopy+0x2e/0x40 [ 1318.439478][T12443] _copy_to_user+0xbc/0x110 [ 1318.444258][T12443] raw_ioctl+0x3d28/0x5440 [ 1318.448970][T12443] ? kmsan_get_metadata+0x13e/0x1c0 [ 1318.454482][T12443] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1318.460600][T12443] ? do_vfs_ioctl+0x14fc/0x3e80 [ 1318.465740][T12443] ? kmsan_get_metadata+0xd0/0x1c0 [ 1318.471173][T12443] ? __pfx_raw_ioctl+0x10/0x10 [ 1318.476220][T12443] __se_compat_sys_ioctl+0x785/0x1080 [ 1318.481862][T12443] ? kmsan_get_metadata+0x13e/0x1c0 [ 1318.487445][T12443] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1318.494078][T12443] ? kmsan_get_metadata+0x13e/0x1c0 [ 1318.499605][T12443] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1318.505177][T12443] ia32_sys_call+0x32a2/0x40d0 [ 1318.510250][T12443] __do_fast_syscall_32+0xb0/0x110 [ 1318.515614][T12443] ? irqentry_exit+0x16/0x60 [ 1318.520583][T12443] do_fast_syscall_32+0x38/0x80 [ 1318.525669][T12443] do_SYSENTER_32+0x1f/0x30 [ 1318.530405][T12443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.537041][T12443] RIP: 0023:0xf745d579 [ 1318.541313][T12443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1318.561271][T12443] RSP: 002b:00000000f5744494 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1318.569958][T12443] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085504 [ 1318.578158][T12443] RDX: 00000000f5744518 RSI: 00000000f744bff4 RDI: 00000000f5745520 [ 1318.586404][T12443] RBP: 00000000f744bff4 R08: 0000000000000000 R09: 0000000000000000 [ 1318.594689][T12443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1318.603036][T12443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1318.611256][T12443] [ 1318.614791][T12443] Kernel Offset: disabled [ 1318.619307][T12443] Rebooting in 86400 seconds..